last executing test programs: 3m31.547870014s ago: executing program 32 (id=337): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2}, 0x20) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000240)={0x51, 0x8001, 0xd1, 0x3, 0x5, 0xfffffffc, 0x4}) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1000fc0079acd6d5"], 0x10) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 2m41.052684586s ago: executing program 4 (id=555): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0xff, 0x2001) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc038563b, &(0x7f0000000080)={0x0, 0x2, @start={0x80000001}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x700, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x70a, 0x183e, 0x30314142, 0x6, 0x1, [{0x8c, 0xf}, {0x4, 0x5}, {0x5, 0x5}, {0x400, 0x7fff}, {0x7fffffff, 0xffffff78}, {0x5, 0xfdfd}, {0xfffffffb, 0x10}, {0xffff, 0x1f}], 0x9, 0x2, 0x2, 0x2, 0x6}}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2m39.407678167s ago: executing program 4 (id=565): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r1, 0x80046108, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffe, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000017c00000400f6000c00018006000600894f0000643802"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @private1={0xfc, 0x1, '\x00', 0x4}, 0x200005}, 0x1c) socket$nl_sock_diag(0x10, 0x3, 0x4) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r5 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) wait4(r5, 0x0, 0x1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b52, &(0x7f0000000140)={0x0, 0x1, 0x6, 0x10, 0x200, 0x0}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) futex(&(0x7f0000000040)=0xf2, 0x6, 0x0, &(0x7f0000000080)={0x77359400}, 0x0, 0x1) ioctl$SW_SYNC_IOC_INC(r0, 0xc0105702, &(0x7f0000000100)) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3d8, 0x0, 0x1ec, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0xe0}}, {{@arp={@multicast2, @rand_addr=0x64010100, 0xff, 0xff000000, 0x10, 0x10, {@empty, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x5, 0x6, 0x6, 0x40d, 0xf01, 0x5592, 'pim6reg0\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x302}, 0xbc, 0x10c, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @mac=@link_local, @loopback, @empty, 0x7}}}, {{@arp={@rand_addr=0x64010100, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {}, 0xe, 0x1, 0xfff8, 0x0, 0x0, 0xfff2, 'ip6_vti0\x00', 'netpci0\x00', {}, {}, 0x0, 0x84}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @empty, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424) 2m37.878117622s ago: executing program 4 (id=570): syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmmsg(r1, &(0x7f0000006e80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{0x0}, {0x0}, {&(0x7f0000000dc0)}, {0x0}, {0x0}, {&(0x7f0000000ec0)}], 0x6}}], 0x1, 0x4004014) write$cgroup_subtree(r1, &(0x7f0000000800)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0x0, 0x0, 0xff0000ff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xffffff], 'vlan0\x00', 'team_slave_1\x00', {}, {}, 0x0, 0x20, 0x0, 0x64}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], [0xff, 0xffffff00], 'batadv0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x0, 0xf9, 0x0, 0x8}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@local, @private0, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0xffffffff], 'ip6tnl0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x33, 0x50, 0x5, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x1ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random='\x00W\x00\x00\x00\b'}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/protocols\x00') preadv(r8, &(0x7f0000003940)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x82, 0x3) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000400)={0x1b, "5660800dc31a1390385a0100", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 2m35.97117105s ago: executing program 4 (id=576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x42701, 0x192) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r4, 0x1, &(0x7f0000002a00)=[&(0x7f0000000000)={0x0, 0x1000000, 0x0, 0x1, 0x8, r3, &(0x7f00000000c0)='34', 0x2, 0x8000000000005}]) 2m34.859853994s ago: executing program 4 (id=581): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0x10) ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x702, 0x66a0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x30800, 0x80) syz_open_dev$video4linux(&(0x7f0000000240), 0x1ff, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106000000004ec0000007"], 0x18}], 0x1}, 0x0) (fail_nth: 8) 2m34.151678954s ago: executing program 4 (id=582): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') read$FUSE(r1, &(0x7f0000000700)={0x2020}, 0x2020) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) lseek(r4, 0x1000000000931f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x5) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000080)=0x453) 2m18.450277479s ago: executing program 33 (id=582): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') read$FUSE(r1, &(0x7f0000000700)={0x2020}, 0x2020) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) lseek(r4, 0x1000000000931f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x5) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000080)=0x453) 1m50.54776167s ago: executing program 6 (id=728): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r5, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 1m48.851755878s ago: executing program 6 (id=730): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000bf85f340181c51471a853500", @ANYRES16=0x0, @ANYBLOB="200028bd7000fddbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4800) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850079847d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) sendmsg$AUDIT_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x806, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x1, r0, 0xe, 0x9, 0x6, 0xffffffff, 0x0, 0x7fff, 0x9}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@delchain={0x70, 0x65, 0x800, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xfff2, 0xa}, {0x2, 0xfff3}, {0xb, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_HASH={0x8, 0x2, 0x3fe}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x10}}, @TCA_RATE={0x6, 0x5, {0x8b, 0x4}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x35}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @TCA_RATE={0x6, 0x5, {0x98, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x3004408c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)=@gettfilter={0x2c, 0x2e, 0x100, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xfffb, 0xc}, {0x4, 0x5}, {0xd, 0x8}}, [{0x8, 0xb, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x64000600) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) set_mempolicy_home_node(&(0x7f00007e8000/0x4000)=nil, 0x4000, 0x2, 0x0) 1m47.275754676s ago: executing program 6 (id=734): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0xce, 0x31cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f5, &(0x7f00000004c0)="38219d3f6041f921aa6ddcf7715a32e5ee6320c3464c34ea4bb66279a0e1920ba9500de4438de63d670c4b2c47d70eabff25f42dd677f3ec7b3f49572efdb47803070ae0f95c94fd1c045a80a5dde8a94d861c8b8b2f09f20f60993299fd571e4f71c9bcf76437e941f3969432f6ce56bbbfeb210670d0728229df4d2b7e63e5f3a822fe16025ab9dc673898b1e10ab4a4d43d2dd609f4f9186930061d0f9e06596c21f25fb240b42f991b016a9e63e78ab0b6375041280383eafbcb845288bd12bf4e04da38975eacf847cac8117ec8e8d09174ce09e4cf24dcf8617863af0e83dab8479c18a73e07ce") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r2}, 0x10) semtimedop(0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000001d80), 0x8000000000000000, 0x105301) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0xe0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req={0x401, 0xf9, 0x8001, 0xf6}, 0x10) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 1m47.216191972s ago: executing program 6 (id=736): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r0, 0x3516, 0x7b4b, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x105, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) ptrace$pokeuser(0x6, 0x0, 0x5, 0x32bf) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000010000d04000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000009000000240012800c0001006d6163766c616e00140002800800010004000000474a580800e900ffffffff140035006d6163766c616e300000000000"], 0x58}}, 0x8000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x80, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x1e, 0x4, 0x0, 0x3, 0x150, 0x68, 0x0, 0x8, 0x6, 0x0, @multicast1, @loopback, {[@noop, @end, @timestamp={0x44, 0xc, 0x52, 0x0, 0x6, [0x1000, 0x1]}, @generic={0x44, 0x4, "e2c3"}, @timestamp={0x44, 0x10, 0x1a, 0x0, 0xb, [0x200, 0x80000001, 0x2]}, @timestamp_addr={0x44, 0x1c, 0x61, 0x1, 0xe, [{@loopback, 0x22}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x5}, {@private=0xa010100, 0x7}]}, @generic={0x94, 0xf, "2ee91e27f788f596216fae4e77"}, @rr={0x7, 0x17, 0x4a, [@loopback, @multicast1, @broadcast, @local, @multicast1]}]}}, "8ad1dc68a11272122acfaa42b44cf2c574d2fd0c9f518137be35351b0733de4878703ca0dd64aee1550738c0154b32457cc34ed2e824b8e8ad9939fad04993644439c583760fcdb18857ec091c1dcc8f0b948f9a971b359379a141e05ec3755642667b8529fca42a68b22833d1a040088548f9323a625743000a4dfb7f1840e4b7d0f86ca1c0a5e0465bbc2176449bb07c43fea9420fa98957e1fa788d8d7d47b0e367205829077a3130962007c43ead48b8dd4973c307b40a48bb4fa5194b8531dbc56a3fa2bc0e3ee780d097efccf002644e31fe3f2e9b"}}, 0x15e) prlimit64(r4, 0x3, &(0x7f0000000200)={0x2, 0xf}, &(0x7f0000000240)) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='jfs\x00', 0x0) connect$bt_l2cap(r8, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) write$binfmt_script(r7, &(0x7f0000005e80)={'#! ', './file0'}, 0xb) socket$nl_route(0x10, 0x3, 0x0) 1m45.825186241s ago: executing program 6 (id=741): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3, 0x1c) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNGETFEATURES(r5, 0x5452, &(0x7f00000013c0)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@cgroup, r3, 0xf, 0x2012, r4, @value=r5}, 0x20) io_uring_setup(0x4d47, &(0x7f0000000180)={0x0, 0xd792, 0x10, 0x2, 0x4, 0x0, r5}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc1485544, &(0x7f0000000000)=0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) 1m44.245447434s ago: executing program 5 (id=745): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0xfffffffb}, 0x76e0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) 1m44.101765958s ago: executing program 6 (id=747): lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x0, &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) lgetxattr(0xfffffffffffffffd, &(0x7f0000000040)=@random={'btrfs.', '-,$\x00'}, &(0x7f00000000c0)=""/131, 0x83) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x43, @string={0x43, 0x3, "615b9f4c9b08510437f29a4e39326a000400009a7368a3b488df4518acf71604b7e738286884e45860d1c0712e5f5812b0aab99f298e5e7f000000000000000000"}}, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x4}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_usb_ep_write(r0, 0x2, 0x54, &(0x7f0000000180)="898fc65ee1fc15af8f07a35eb50304e4cc374eac7f1b47959e116b37559cd440f63b84c06cec9a5c4838569c9c1d21d262e5f1e48ffe14511275055d7c6c1ff500d0215ade83e6b02832f48fc0a69e03f0a3d5f8") r2 = dup2(r1, r1) openat(r2, &(0x7f0000000200)='./cgroup/cgroup.procs\x00', 0x8000, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioprio_set$pid(0x3, 0x0, 0x0) creat(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x25) 1m43.961336856s ago: executing program 5 (id=749): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x40408c4) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) sendto$inet6(r6, 0x0, 0x0, 0x10, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000400"/15], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r7, 0x2c9ab000) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000000)=@arm64={0x8, 0x4, 0x10, '\x00', 0xc1d}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) 1m41.748947612s ago: executing program 5 (id=755): socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffe09) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x2900, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$BTRFS_IOC_START_SYNC(r3, 0x540b, 0x0) copy_file_range(r2, &(0x7f0000000040)=0x8, r3, &(0x7f0000000080)=0xffffffff00000001, 0x100000000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=0x0], 0x50) syz_open_dev$evdev(0x0, 0x2, 0x842) iopl(0x3) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7}) mq_timedreceive(r4, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0xc048aeca, &(0x7f0000000080)) 1m38.934744424s ago: executing program 5 (id=760): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0x7, &(0x7f0000000200)={0x5, 0xb}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000002"], 0x50) r1 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8001004, 0x9, 0x6, 0x80b}}) ioctl$TCSETA(r0, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x2, 0x20, 0xf, "08000000f28f00"}) 1m38.187820271s ago: executing program 5 (id=762): syz_open_dev$vbi(0x0, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x108) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) writev(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x5, 0x84) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x24, &(0x7f0000000000), 0x4) sendto$inet6(r1, &(0x7f00000001c0)="721d906ea3b2c8047ba19f1a79a8000001000000000064f2677eef97d0", 0x1d, 0x400e0, &(0x7f0000000300)={0xa, 0x4e1e, 0x2c73, @remote, 0x80006}, 0x1c) r7 = socket$rxrpc(0x21, 0x2, 0xa) io_submit(0x0, 0xfffffffffffffcf9, 0x0) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f0000000280)=',\x00', 0x2) 1m37.077081246s ago: executing program 5 (id=766): socket$netlink(0x10, 0x3, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sync() sync() sync() sync() sync() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="640000003c0001002abd7000fedbdf2514009e00ff0100000000000000000000000000013f0018800800a700000000007f95ef8e7b21620430343227c49290dc0a3ce7c8b8caecd18d384720b21db283df276bb66c0d3601acbdb487dd5e03f9d8b6406a6de911d97c4200"], 0x64}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x7, 0x9, '\x00', 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sync() 1m34.499720923s ago: executing program 0 (id=773): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000140)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x300, 0x1}) 1m34.32846482s ago: executing program 0 (id=775): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) getpgid(0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x42001, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) socket(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) preadv(r3, &(0x7f0000005280), 0x0, 0x9, 0x6) mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB]) r4 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000700, 0x0, &(0x7f00000001c0)) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000280)={0x1, 0x1, @raw_data=[0x8, 0x58, 0x1, 0x7, 0x1, 0xd, 0x1b8, 0x4, 0x82, 0x7, 0x5, 0x1, 0x100, 0x5, 0x766f275b, 0x9]}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000061401"], 0x28}}, 0x20040080) socket$nl_audit(0x10, 0x3, 0x9) syz_emit_vhci(&(0x7f0000009c40)=ANY=[], 0x17) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000140)) 1m33.263700605s ago: executing program 0 (id=777): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000010c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="187c2ded5b21d9b7ce00d06f763800000ef7808577920dd0284ad9bee805c2c1f3377e4504a560f9c576d6ec3f7cd96bcc0cf2e8f4eab98ebf8074cd40fd98786b8f3e9399ea1bc4bb70dfcfa016a971ad9c3020baddd354296e5bf9b4113a491f244a715ecc79735d6675f1d6e7dccd4444ca32e91613615415f5662fe63f8863693baa0573"], &(0x7f0000000a00)='GPL\x00', 0x299d, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0x4, 0x40, 0x5}, 0x10, 0x215cd, 0xffffffffffffffff, 0x8, &(0x7f0000001000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001040)=[{0x0, 0x5, 0x4, 0xc}, {0x1, 0x0, 0x3, 0x7}, {0x1, 0x3, 0x6, 0x4}, {0x4, 0x2, 0x0, 0x6}, {0x2, 0x5, 0x1, 0xa}, {0x2, 0x1, 0xe, 0x8}, {0x4, 0x3, 0xd, 0x9}, {0x0, 0x1, 0x10, 0x3}], 0x10, 0x1}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x1800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x1000000000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000140)={'sit0\x00', @broadcast}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x140, 0x0, &(0x7f00000007c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/64, 0x40, 0x2, 0x400005}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}}, @register_looper, @increfs_done={0x40106308, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000740)={@ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/24, 0x18, 0x4000000000000001, 0x3e}, @ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/54, 0x36, 0x1, 0x37}, @flat=@binder={0x73622a85, 0x101, 0x2}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}}, @acquire, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@binder={0x73622a85, 0xa, 0x5}, @flat=@weak_handle={0x77682a85, 0x101}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @fda={0x66646185, 0x9, 0x1, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/15, 0xf, 0x0, 0x5}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}, 0x1000}, @acquire={0x40046305, 0xba}], 0xab, 0x0, &(0x7f00000005c0)="c94624999b0d32d0bf87c2b1ee168f8d9f9b2342e2f539affb7bd1cd4c01ee3625afd94ff6bd487580ab283f0eb4ed773e72bfa1dee6b2d66081d99dfa17b5a49da01f439b2aa3974870df0cf343ff88a60273c60110ed6520e1de7151420036132f1767dbc50c6985d20d7c1d0214457be79dd3291dd7ed7183542f99ad5abd70437d12844d5e3c9ceb3134d52c9d99e99673f3e733714e1384ffc20a212fb022b1607f27f2deed7de438"}) creat(0x0, 0xd931d3864d39ddd8) open$dir(&(0x7f0000000680)='./file0\x00', 0x0, 0x61) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$qrtrtun(r5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) write$binfmt_misc(r7, &(0x7f0000000040), 0xfe46) recvfrom$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) 1m31.769442704s ago: executing program 0 (id=780): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, {0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5d}, 0x1, {[0x5bb, 0x0, 0xfffff800, 0x70, 0x7, 0x9, 0x6, 0xe2c]}}, 0x5c) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) utime(&(0x7f0000000240)='./bus\x00', &(0x7f0000000340)={0x1, 0x700}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1m31.159816305s ago: executing program 0 (id=784): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r4, 0x29, 0x37, 0x0, 0x18) setsockopt$inet6_opts(r4, 0x29, 0x36, 0x0, 0x0) fchdir(r3) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe0}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4, 0x0, 0x9}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x7}) 1m29.087912391s ago: executing program 0 (id=790): r0 = gettid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet6_int(r1, 0x29, 0xdd1846cea66e45da, &(0x7f0000000380), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ptrace$peekuser(0x3, r0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000300)='squashfs\x00', 0x800, &(0x7f0000000340)='\x00') socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) unshare(0x8000000) timer_create(0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x8000, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x3]}, 0x8, 0x800) 1m29.024579249s ago: executing program 34 (id=747): lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x0, &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) lgetxattr(0xfffffffffffffffd, &(0x7f0000000040)=@random={'btrfs.', '-,$\x00'}, &(0x7f00000000c0)=""/131, 0x83) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x43, @string={0x43, 0x3, "615b9f4c9b08510437f29a4e39326a000400009a7368a3b488df4518acf71604b7e738286884e45860d1c0712e5f5812b0aab99f298e5e7f000000000000000000"}}, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x4}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_usb_ep_write(r0, 0x2, 0x54, &(0x7f0000000180)="898fc65ee1fc15af8f07a35eb50304e4cc374eac7f1b47959e116b37559cd440f63b84c06cec9a5c4838569c9c1d21d262e5f1e48ffe14511275055d7c6c1ff500d0215ade83e6b02832f48fc0a69e03f0a3d5f8") r2 = dup2(r1, r1) openat(r2, &(0x7f0000000200)='./cgroup/cgroup.procs\x00', 0x8000, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioprio_set$pid(0x3, 0x0, 0x0) creat(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x25) 1m21.92129838s ago: executing program 35 (id=766): socket$netlink(0x10, 0x3, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sync() sync() sync() sync() sync() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="640000003c0001002abd7000fedbdf2514009e00ff0100000000000000000000000000013f0018800800a700000000007f95ef8e7b21620430343227c49290dc0a3ce7c8b8caecd18d384720b21db283df276bb66c0d3601acbdb487dd5e03f9d8b6406a6de911d97c4200"], 0x64}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x7, 0x9, '\x00', 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sync() 1m13.867413669s ago: executing program 36 (id=790): r0 = gettid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet6_int(r1, 0x29, 0xdd1846cea66e45da, &(0x7f0000000380), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ptrace$peekuser(0x3, r0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000300)='squashfs\x00', 0x800, &(0x7f0000000340)='\x00') socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) unshare(0x8000000) timer_create(0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x8000, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x3]}, 0x8, 0x800) 1m0.428945809s ago: executing program 3 (id=876): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x1, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="10000000baf60000000002ce000000004ac000000000000212c624ced0f3f7ff93980e204b1324ad4ba077333c35e819929bb51c95763f26999ff18da926f03d"], 0x101301) syz_emit_ethernet(0x56, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, r5, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 57.23204162s ago: executing program 3 (id=886): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000010c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="187c2ded5b21d9b7ce00d06f763800000ef7808577920dd0284ad9bee805c2c1f3377e4504a560f9c576d6ec3f7cd96bcc0cf2e8f4eab98ebf8074cd40fd98786b8f3e9399ea1bc4bb70dfcfa016a971ad9c3020baddd354296e5bf9b4113a491f244a715ecc79735d6675f1d6e7dccd4444ca32e91613615415f5662fe63f8863693baa0573"], &(0x7f0000000a00)='GPL\x00', 0x299d, 0xf3, &(0x7f0000000c80)=""/243, 0x41100, 0x3a, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x4, 0x4, 0x40, 0x5}, 0x10, 0x215cd, 0xffffffffffffffff, 0x8, &(0x7f0000001000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001040)=[{0x0, 0x5, 0x4, 0xc}, {0x1, 0x0, 0x3, 0x7}, {0x1, 0x3, 0x6, 0x4}, {0x4, 0x2, 0x0, 0x6}, {0x2, 0x5, 0x1, 0xa}, {0x2, 0x1, 0xe, 0x8}, {0x4, 0x3, 0xd, 0x9}, {0x0, 0x1, 0x10, 0x3}], 0x10, 0x1}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x1800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x1000000000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000140)={'sit0\x00', @broadcast}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x140, 0x0, &(0x7f00000007c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/64, 0x40, 0x2, 0x400005}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}}, @register_looper, @increfs_done={0x40106308, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000740)={@ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/24, 0x18, 0x4000000000000001, 0x3e}, @ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/54, 0x36, 0x1, 0x37}, @flat=@binder={0x73622a85, 0x101, 0x2}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}}, @acquire, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@binder={0x73622a85, 0xa, 0x5}, @flat=@weak_handle={0x77682a85, 0x101}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @fda={0x66646185, 0x9, 0x1, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/15, 0xf, 0x0, 0x5}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}, 0x1000}, @acquire={0x40046305, 0xba}], 0xab, 0x0, &(0x7f00000005c0)="c94624999b0d32d0bf87c2b1ee168f8d9f9b2342e2f539affb7bd1cd4c01ee3625afd94ff6bd487580ab283f0eb4ed773e72bfa1dee6b2d66081d99dfa17b5a49da01f439b2aa3974870df0cf343ff88a60273c60110ed6520e1de7151420036132f1767dbc50c6985d20d7c1d0214457be79dd3291dd7ed7183542f99ad5abd70437d12844d5e3c9ceb3134d52c9d99e99673f3e733714e1384ffc20a212fb022b1607f27f2deed7de438"}) creat(0x0, 0xd931d3864d39ddd8) open$dir(&(0x7f0000000680)='./file0\x00', 0x0, 0x61) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$qrtrtun(r5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) write$binfmt_misc(r7, &(0x7f0000000040), 0xfe46) recvfrom$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) 55.651490526s ago: executing program 3 (id=890): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000010c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="187c2ded5b21d9b7ce00d06f763800000ef7808577920dd0284ad9bee805c2c1f3377e4504a560f9c576d6ec3f7cd96bcc0cf2e8f4eab98ebf8074cd40fd98786b8f3e9399ea1bc4bb70dfcfa016a971ad9c3020baddd354296e5bf9b4113a491f244a715ecc79735d6675f1d6e7dccd4444ca32e91613615415f5662fe63f8863693baa0573"], &(0x7f0000000a00)='GPL\x00', 0x299d, 0xf3, &(0x7f0000000c80)=""/243, 0x41100, 0x3a, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x4, 0x4, 0x40, 0x5}, 0x10, 0x215cd, 0xffffffffffffffff, 0x8, &(0x7f0000001000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001040)=[{0x0, 0x5, 0x4, 0xc}, {0x1, 0x0, 0x3, 0x7}, {0x1, 0x3, 0x6, 0x4}, {0x4, 0x2, 0x0, 0x6}, {0x2, 0x5, 0x1, 0xa}, {0x2, 0x1, 0xe, 0x8}, {0x4, 0x3, 0xd, 0x9}, {0x0, 0x1, 0x10, 0x3}], 0x10, 0x1}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x1800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x1000000000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000140)={'sit0\x00', @broadcast}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x140, 0x0, &(0x7f00000007c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/64, 0x40, 0x2, 0x400005}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}}, @register_looper, @increfs_done={0x40106308, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000740)={@ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/24, 0x18, 0x4000000000000001, 0x3e}, @ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/54, 0x36, 0x1, 0x37}, @flat=@binder={0x73622a85, 0x101, 0x2}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}}, @acquire, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@binder={0x73622a85, 0xa, 0x5}, @flat=@weak_handle={0x77682a85, 0x101}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @fda={0x66646185, 0x9, 0x1, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/15, 0xf, 0x0, 0x5}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}, 0x1000}, @acquire={0x40046305, 0xba}], 0xab, 0x0, &(0x7f00000005c0)="c94624999b0d32d0bf87c2b1ee168f8d9f9b2342e2f539affb7bd1cd4c01ee3625afd94ff6bd487580ab283f0eb4ed773e72bfa1dee6b2d66081d99dfa17b5a49da01f439b2aa3974870df0cf343ff88a60273c60110ed6520e1de7151420036132f1767dbc50c6985d20d7c1d0214457be79dd3291dd7ed7183542f99ad5abd70437d12844d5e3c9ceb3134d52c9d99e99673f3e733714e1384ffc20a212fb022b1607f27f2deed7de438"}) creat(0x0, 0xd931d3864d39ddd8) open$dir(&(0x7f0000000680)='./file0\x00', 0x0, 0x61) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$qrtrtun(r5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) write$binfmt_misc(r7, &(0x7f0000000040), 0xfe46) recvfrom$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) 52.814775456s ago: executing program 3 (id=900): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x2c6e02a6a3a98c83, 0x9, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a64", 0x16, 0xebec93e830f96115}) io_uring_enter(0xffffffffffffffff, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x20000000, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @mcast1, 0xa}, 0x1c) connect$pppl2tp(r6, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)='v', 0x1}], 0x1) 51.831031239s ago: executing program 3 (id=904): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a0000000800074000000001"], 0xbc}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @struct={0x2, 0x0, 0x0, 0x4, 0x0, 0x1}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0x0, 0xa3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='mpol=interleave,m']) 50.851896498s ago: executing program 3 (id=907): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x100) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2a0000001200576d100000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000302000000000008001d00ca0e0000"], 0x28}}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000000040)=0x8, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000004c0)='gid_map\x00') read$FUSE(r8, 0x0, 0x0) 35.458081682s ago: executing program 37 (id=907): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902ea01030e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c090504104000050209072501830200040725018101070009045b060c317135060905051008000600d30725018002000009050610200080ff0407250101060200090500100004090401090504104000ab0005090505022000060d0d48007672bf7524ef90e0a086de3562bf356642bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b0725018002010009050b08000401a9050725010332f60b0725010206ac15090502140000c7070e0905010400020805800905051000020802ae07250103fbff0009050010400008000309050c040002030d07410f8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791090509002000010802"], 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x100) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2a0000001200576d100000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000302000000000008001d00ca0e0000"], 0x28}}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000000040)=0x8, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000004c0)='gid_map\x00') read$FUSE(r8, 0x0, 0x0) 10.039307284s ago: executing program 8 (id=1040): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) migrate_pages(r1, 0x800, &(0x7f00000000c0)=0x3da04fa9, &(0x7f0000000100)=0x4) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @rose}, [@bcast, @null, @remote, @rose, @null, @rose, @bcast, @rose]}, &(0x7f00000001c0)=0x48, 0x1800) sendmmsg$sock(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000200)="1cd4d450a84df0d80839e037384b41a6f73214ead4de9dc0797e181e5cb99382db0c251a4dea9a834455176b1ec2e7788c58a23a6770f4642bbcc780007772264b333298ed1fce9b3c9280773cce649e5d05825c1fbfbf9e6014fae9976ec7cdfdb2a5b1a34ebeceb6c3787f3baf1c24bed63072a5397b93660e3e76abba704278e5fa31d868ba967f64dc03e38c256d6b1362537e339de2df61a058e4a25d2ee2e2f23e28f8ab6dae38e574cc144c29076639a9f81d359c28eef343bea29a417091d78f20a81e809873815f6564cfddc4964156efdd7506c7fa9710737053fa2bde37d8", 0xe4}, {&(0x7f0000000300)="c61cbe0e16d84d72b7", 0x9}, {&(0x7f0000000340)="aabd7eb8c1426ba7749fa27448239cad084151338125ca6249b38d6ee45e8365033a568932b2f473eed0902b6a92ada0fa27da0abb05efcae139d31880fb14459a1139e4fa928d0f9c2e0213269624054029ca7a8fca5a949f1f2adc5d1a1d89667bc0a3ff184a67dbc1b602fc5e45cfbca0ea1d4b5918589aec38fb310804aff8840928f9833910320203fc650e144cfa0c110a3eb77adec89b6d3bfab1271db8159c1097b205df033dc1032532705c0379a67f6a55c52821c5f331d881b3b37fe46d244f3c8d4778f7058480d76f71d46ef008524eb7a23313f9fd", 0xdc}, {&(0x7f0000000440)="3cb1edd3c31b812931a01bfa30d6231a6a762d28a967584610e10f52fe66d816ccd0d319fa877a96009d40209d24ebc1281dce9608255c56ecc59536f0a62d7a9d5e61134612b1da461d92188122027da1e604964dcacb1bd8cfa45fc850e393d8c1748cfb07461812fea1ef9a4c7a42e5151ae904a2cda70f135bd79a29b4ea03a22ccb3d", 0x85}, {&(0x7f0000000500)="beb3f87b0ef931ef6e31b36c98ab39f9819f27035dfa2f732fa49b3daa96c97237b55480bbd73e2e1efce21f8c6c4f9aa52ef4e97b88beb14fb46a017535fa7ffade400d93872de3c00ad7e4374d2a327c1cd2a15f602bb4cd7bc23845df7e50afbf8f8cc02f8b266457cda23cda12b50c83271429425608e1160ee9846f608c2d4eee843b769349b61519a76942805d2c152c41679ce9856ee8a9cb0b89c8f89ef5836c80e049cb54f4c97f87a8c0600bcdb18d49a48a25", 0xb8}, {&(0x7f00000005c0)="033331144f99aa682f786037050abd067f94df853239ac8262f645b943d490c4799c15c4622b4c40f859f42e1b6cde257d5218c5552eea4b13a7", 0x3a}, {&(0x7f0000000600)="eda393d2ab460d751cafb5d01fbdc662f244f35f4c63b1db017140665f6d7c97f3a8883c9e4ba0ace8522f526defa8cf6e577ea5f8b086945370896d00b6eb83c93036c7191ffa5e36d431071011adc4f2787fe4904090", 0x57}, {&(0x7f0000000680)="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", 0x1000}], 0x8, &(0x7f0000001700)=[@timestamping={{0x14, 0x1, 0x25, 0xa}}, @txtime={{0x18, 0x1, 0x3d, 0xa}}, @timestamping={{0x14, 0x1, 0x25, 0xed54}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001780)="eb408d9e6031793db295f58d0ae7be75b8d370744d5b31e725d7c8dbc11d84e483edf1165b9580901b3b19baab91ef725f213e08ece872371503732fc86096457e750c4aa89369393063ce5c65d0738c598064ff10b5b85115f4cb999193bad8958a29911149e11043699e8e95e161f0d14191e571f725fd260b7d8f0926464b476c4d842d9306d9bcf7389de9f463353f50485fee61e7d4364e5781c41bbeaab6d6a335b901ca8429902d0f8d1bf8b6", 0xb0}, {&(0x7f0000001840)="7bc876660f6620e274bc3cc6756ea1d0ccf128e1052d73711cc83208ce5d5b9e8ee924462b81cc23855d470cef0652f2268780847aa8694731ded9911df84a1464168efb5360544056d2967fab3e4f204e6c45441aaefd7a5f06f9120853eb057748564e2a243b7dc39ce145471fd68a2b2bcb2014", 0x75}, {&(0x7f00000018c0)="99c2d5409d4329297b29ef", 0xb}, {&(0x7f0000001900)="1b3ddc94811a600f5c711791ac74586caca2f91af92e12e7e8131ed910494bc539b2840011f9014ab01d0de17e9fe105428f70a88ad7ca", 0x37}, {&(0x7f0000001940)="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", 0xfe}, {&(0x7f0000001a40)="691366c5b8cd1d508d2c6f5ab812eb59ac271699e3a6b79faa71452dffb96df06d94abb9e9b319e721cf064dd718edd71a24caf498b33b221e0c80bfa04e902401aed58cc4fc5417e5a27a26fa21614d0cd4d744e5ab28d7039e571651024de40cae715bd9570095267f17", 0x6b}, {&(0x7f0000001ac0)="5da16b57b864caada8da066254715c7a203a5c4df8fdf56e3927444ba91dd6ed4ab682785c6c3aa8cf7d86c426e3040910026c7dc75da9857bf5bb07821a35d2ff07d1c475d70345ebde94d8094737ee954d6a10651f3eec1d72f15112549ee23f51bdeb299754705231a25521befdc15650c65ec750195135049f7d", 0x7c}, {&(0x7f0000001b40)="39c87c3660843d2d01f42c410961fd0657eccfcb9e7d72365e7d649db006a6885ee551378a272075c367e025cec9b284e18e1449b6834db520824b20c4d1558a70d0fe9de1ec17668cac33e050e1ee36eb37c6e86370902e4a383b34180dca70be5c71a2a18fdace536dfca2bc6d9bfbf83808d2897c6441d8c4ababd27cd27a55866f58b094b145f8183a56f5e12381d10319322e8b9e4387fb41ce6b823e0370c616bed31d29b87bc021c9d5baa0ed12b03d7d83f469077cca0de4cbd5974b771e9876a14b", 0xc6}], 0x8, &(0x7f0000001cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x10001}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x30}}, {{&(0x7f0000001d00)=@l2={0x1f, 0x48, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x2}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001d80)="db1ea1afcfb55336b66d09bde66a5651d076114b11521cdce1acece0f1580c4363c3672ae5b1056a9eb6096910460a4b07c387ebfcf6c0519b4dff26755041c88d2ce3eb", 0x44}, {&(0x7f0000001e00)="be1af189387a942be72980efcb3beacf9a61ed682c1174ac8cd4a38c8a6b3463bc5f861a365e504af606a3fbbccae284952ac584096648a8eca4fa29111725aee652e430e823600af8776e1cf0007b8ce846f303036a7d645fe03a0a5d42b83c6ea81d3efd2324527eaa194e4f2b238d9394c7c5935fe2260c93a5c443fbb5c14f5fbc1254c8d9153054cdab3ce12699995c2a47e7fc25fad0caab33d831de2d514a15a7", 0xa4}, {&(0x7f0000001ec0)="968acf5c4c513940b428be4548692eacea11c85af61a75274ab351e667856dcf4c28c162e3c793d4bf633823ebd11b90f0d2478b7d936647241be4b37061b8f49df822f79b70721d9f9bb708c76e884e3228bef9159a409bd8ffa3583828becac193", 0x62}, {&(0x7f0000001f40)="04a97d38fa0fe050508894e561ecc9fd3eb402249817984eec693f75a0b815aced88728c4f8c2a2597a895aec75aa454016253406ae6614fac29dc0b10ccc9c9f3c39b063dfb9b9ab336d8808d439833ee468aec5ce6e3d5f01ad1091193c18beb4c78a473359081ae8d516e8ab9df325b199be2e9043769556d2e369309356131df", 0x82}], 0x4, &(0x7f0000002040)=[@txtime={{0x18, 0x1, 0x3d, 0xf8a7}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}], 0x3, 0x4040) setxattr$incfs_size(&(0x7f0000002180)='./file0\x00', &(0x7f00000021c0), &(0x7f0000002200)=0x4, 0x8, 0x1) connect(r2, &(0x7f0000002240)=@phonet={0x23, 0x8, 0x5, 0x40}, 0x80) r3 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r3, &(0x7f0000002580)={&(0x7f00000022c0)=@ax25={{0x3, @default}, [@remote, @remote, @remote, @bcast, @netrom, @bcast, @rose, @bcast]}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002340)=""/128, 0x80}, {&(0x7f00000023c0)=""/161, 0xa1}, {&(0x7f0000002480)=""/41, 0x29}], 0x3, &(0x7f0000002500)=""/96, 0x60}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000025c0)={{0x1, 0x1, 0x18, r0, {0x7fffffff0000}}, './file0\x00'}) r5 = open$dir(&(0x7f0000002600)='./file0\x00', 0x745001, 0x1) fanotify_mark(r4, 0x40, 0x40000038, r5, &(0x7f0000002640)='./file0\x00') ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000002680)={0x0, @default, @bpq0, 0x4, 'syz1\x00', @null, 0x9, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002700), 0x107043, 0x0) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000002740)=0xfffffff8) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000002780)=0x7fff) r7 = dup2(r4, r4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f00000027c0)) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000002800)={0x0, 0x8001}, 0x8) close_range(r5, r5, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000002940)=[{&(0x7f0000002840)=""/186, 0xba}, {&(0x7f0000002900)}], 0x2) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r7, 0x7b2, &(0x7f0000003980)={&(0x7f0000002980)=[0x9, 0x6, 0x8, 0xfffffff6, 0xfffffffb, 0x0, 0x1, 0xe, 0xfffffff1, 0x28, 0x7fffffff, 0x7, 0x5, 0x8, 0x40, 0xb, 0x10000, 0x0, 0x518, 0x401, 0x42e, 0x7, 0x35d, 0x5, 0xffffe2b1, 0x80000001, 0x0, 0xfffff64c, 0x101, 0x9, 0x0, 0x9288, 0x8, 0xffff, 0x75c, 0xf8e4, 0x6, 0x9, 0x94ed, 0x7f, 0x80000001, 0xb483, 0x6, 0x5, 0x1, 0x3, 0x7, 0x2, 0x1, 0xc27c, 0xc4, 0x3, 0x9, 0x1, 0xf, 0xfffffffb, 0x7, 0x9, 0x9, 0x4, 0x4, 0x4, 0x7, 0x3, 0x80, 0xffffffff, 0xab6, 0x7, 0x4, 0x3, 0xfe24, 0x6, 0xffff114f, 0xffffffff, 0x85, 0x4, 0x3ca3, 0x3, 0x1ff, 0x79bba67a, 0x0, 0x4, 0x6b, 0x4, 0xcbc, 0x4c2, 0x8, 0x6d54, 0x2, 0x2, 0x7fff, 0x7, 0x200, 0x9, 0x1, 0x0, 0x1, 0xffffffff, 0x3ff, 0x4be6, 0x0, 0x9, 0xfffffffd, 0x3, 0x6, 0xfffffa85, 0x200, 0x40, 0x8071, 0x1, 0xfffffffb, 0x9, 0x5, 0x6b, 0x0, 0x5, 0xb, 0xa0000, 0x3, 0x2, 0x200, 0xd9c, 0x1, 0xb, 0x1, 0x101, 0xffffff54, 0x7, 0x7, 0x5e5, 0xfffffffc, 0x0, 0x2, 0xd7e, 0x6, 0x0, 0x1, 0xceee, 0x8000, 0x0, 0x6, 0x0, 0x5, 0x3ff, 0xfffffff3, 0x6, 0x5, 0xfffffe00, 0x9, 0x1, 0x1000, 0x7f, 0x7c, 0x5, 0xffffffff, 0x3, 0x5, 0x10, 0x7ff, 0x8, 0x1, 0x2, 0x4, 0x9, 0x5, 0x3, 0x400, 0x8, 0x370, 0xb, 0x6, 0xaed, 0xe, 0x10f6, 0x8, 0x7fffffff, 0x4, 0xaa, 0x8, 0x7, 0x4, 0x5, 0x3, 0x3, 0xe, 0x7fff, 0x7ff, 0xb, 0x1, 0x81, 0x4, 0xffffdfa9, 0xffffffff, 0xfffffffb, 0x7, 0xff, 0x4c9, 0xc3, 0x9, 0x0, 0xff, 0x1, 0x4, 0x2, 0x2, 0x651, 0x4, 0x4, 0xfffffff4, 0x3, 0x2, 0x8, 0x5, 0x1, 0x8, 0x229c, 0x8000, 0x6, 0x1ff, 0x80, 0x6, 0x3, 0x1700, 0x80000001, 0x1, 0xa4000000, 0x3, 0x8, 0x1, 0x81, 0xfffffffa, 0xd2, 0x985, 0x1ff, 0xffff0001, 0x2, 0x10, 0x90c3, 0xbb39, 0x1, 0x2, 0x8, 0x3, 0x2, 0x4, 0xfffffff9, 0x5, 0x1c1c, 0xba45, 0x4, 0x4, 0x6, 0xfffffffb, 0x4, 0x4, 0x5c57, 0x7, 0x2, 0x2, 0x0, 0xa, 0x10000, 0xff, 0x35f3, 0x7, 0x5, 0x4, 0x3, 0x10000, 0x40, 0x3, 0xfffffff9, 0x9, 0x9, 0x7, 0x0, 0x10000, 0x179, 0x101, 0x0, 0xb, 0x3ff, 0x9, 0x2, 0x10, 0x4, 0x2d9d4e2a, 0x46, 0x3, 0xbe, 0x5, 0x3, 0xf12f, 0x5, 0x0, 0x2, 0x5, 0x8, 0x1ff, 0xf, 0x3, 0x40, 0xf23, 0x0, 0x9, 0x2c4, 0x2, 0x5c, 0x7fffffff, 0x3, 0x21, 0x10000, 0x8, 0x6, 0x4, 0x7f, 0xc9b, 0x6, 0x8e, 0xb, 0x800, 0x5, 0x2, 0x100, 0x10000, 0xff, 0xc782, 0x9, 0xfffffff7, 0x3, 0xfc, 0x7, 0x0, 0xa1c, 0x7, 0xffff7341, 0x401, 0x6, 0x8aa, 0x81, 0x1, 0x2, 0x8, 0x9, 0x0, 0x10001, 0x6, 0x6, 0x8, 0x69, 0x5, 0x7, 0x8, 0x1, 0x10000, 0x1eea, 0x800, 0x7f, 0x49d, 0x4, 0x3ff, 0x6366aca5, 0x8fa, 0x1, 0x7f, 0xffff75b1, 0x2, 0x8, 0x3d, 0xe, 0x0, 0x1, 0x73, 0x200, 0x1000, 0xfffffe01, 0x5, 0x80, 0x8, 0xabb, 0xf, 0x80000001, 0x3, 0x7fffffff, 0x0, 0x248d, 0x1c57, 0xffffffff, 0x80, 0x1, 0x7, 0x0, 0xff, 0x3, 0x2d4, 0x1, 0xe5, 0x0, 0x3, 0xffff, 0xd, 0xffffffff, 0x10, 0x7, 0x1, 0x7, 0x0, 0x9, 0x5c0, 0xe0ac, 0x8, 0x6, 0x1ff, 0x9e38, 0x4, 0x3, 0x5, 0xa6c1, 0x4, 0x6, 0x2, 0x20, 0x6af6, 0x7, 0xfffffffb, 0x8, 0x80, 0x7, 0x9, 0x2, 0x7, 0x4, 0xb, 0x2, 0x7d, 0x6, 0x4, 0x9, 0x8001, 0xfffffffc, 0xffff, 0x1400000, 0x1, 0x5, 0x8, 0x3, 0x5, 0x81, 0x101, 0xfffffff7, 0x8001, 0x200, 0x5, 0x3, 0xc25, 0x30, 0x2, 0x1, 0x7, 0x8, 0x6, 0x3, 0x9, 0x3, 0x7ff, 0x5, 0x9, 0x5, 0x9, 0xb, 0x2, 0x8, 0x1, 0x9b9, 0x1548c08b, 0x0, 0x10000, 0x4, 0x8, 0x0, 0xfff, 0xd6, 0xce, 0x2, 0x683, 0x1ff, 0x0, 0x3d, 0x4, 0x6, 0x82e1, 0xc10, 0x917800, 0xd, 0x3, 0xe, 0x7fff, 0x37, 0x4, 0x3, 0x2d14, 0xa, 0x6, 0x1ce, 0x8001, 0x100, 0x2, 0x7, 0x1ff, 0x6, 0x8, 0x8, 0xfffffc44, 0x5, 0x2, 0x1, 0x5, 0x2, 0x5, 0x7, 0x10000, 0x280000, 0x1, 0x3ff, 0xffffffff, 0x0, 0x7, 0x4, 0x3, 0x5, 0x8, 0x4, 0x0, 0x8, 0x5, 0x2, 0x4, 0x2, 0x40, 0x2b6, 0x6, 0x10, 0xe2a9, 0x8, 0xe, 0x100, 0x2, 0x0, 0x8, 0x0, 0x5, 0x3, 0x1, 0xffff2edc, 0xc7e, 0x9, 0x7fffffff, 0x4ae, 0x2000, 0x8, 0x1, 0x401, 0x3, 0xc, 0x66ea, 0xd65, 0x2, 0x5, 0x7, 0x9, 0x1, 0x2, 0x2, 0xfffffff9, 0x2, 0x1, 0x63, 0x10, 0x3, 0x3, 0xf, 0x7, 0xa, 0xb, 0xfffffeff, 0x80000001, 0x3, 0x7ff, 0x3, 0x5, 0x1, 0xb, 0x8, 0x2cd, 0x0, 0x7, 0xff81, 0x5, 0x1, 0xfffff157, 0x6, 0xd, 0x5, 0x8, 0x8001, 0x9, 0x10, 0x2, 0x2, 0x80, 0xab, 0x4, 0x6000000, 0xffff, 0x8, 0x7fffffff, 0x0, 0x2, 0x400, 0x6, 0x9, 0x6, 0x4, 0x100, 0xffff, 0x401, 0x7, 0x2, 0xd, 0x4, 0xa1d, 0xfffffffc, 0x400, 0x9, 0x8, 0xff, 0x3, 0x401, 0x6, 0x6, 0x8, 0x1, 0x7fffffff, 0x1, 0x3, 0xe9b, 0x6, 0x1, 0xfffffffe, 0x0, 0xb340, 0xd, 0x9, 0x3, 0x10, 0xfffffffd, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0xa7c, 0x6d33, 0x7, 0x0, 0xf, 0xfffffbff, 0x5, 0x1, 0x4, 0x7ff, 0xe, 0x8, 0x4, 0x9, 0xfffffffe, 0x1, 0xffff, 0x2, 0x694d, 0x8, 0x1, 0x3363, 0x0, 0xbc8, 0xc, 0x7, 0xffff7a6c, 0x5, 0xb93, 0x9010, 0x8, 0x9, 0x7, 0x4, 0x0, 0x7, 0x2, 0x6, 0x6, 0x9, 0x1, 0x4, 0x5, 0x33, 0xddfe, 0x8, 0x3f, 0x9, 0xb1, 0xf10, 0x4, 0xfffffffc, 0x303, 0x4, 0x60a, 0xc, 0x80000000, 0xaa, 0x5, 0x7, 0x9, 0x4, 0x7, 0x1, 0x3, 0x702, 0x7, 0xd7, 0x80, 0x6, 0x753, 0x1, 0xe, 0x3, 0x7, 0x10, 0x7ff, 0x4, 0x9, 0x8d, 0xffff7edc, 0xea28, 0x7, 0x0, 0x6, 0x200, 0x3, 0x5, 0x8, 0xe43, 0x91, 0xffff, 0x9, 0x399, 0x8, 0x6, 0xf4, 0x7fff, 0xd21b, 0x1, 0x8, 0x1, 0x40000000, 0x1, 0x7, 0x6, 0x2, 0x9, 0xaa7e, 0x2, 0x4, 0x1, 0x2, 0x3ff, 0xfffffffd, 0x80000000, 0x2, 0x6, 0x6, 0x8001, 0xc, 0x0, 0x80000001, 0x4cc, 0xdd, 0xffffffff, 0xc7ed, 0x2f9, 0x3, 0x3ff, 0xbc2, 0x1144, 0x1000, 0x10, 0x81, 0x0, 0x2, 0x3, 0x5, 0x55, 0x0, 0x8, 0x2, 0x6, 0xfffffffc, 0x5, 0x8, 0x0, 0x600, 0x40, 0x9e, 0x8, 0x2, 0x1e, 0xfffff935, 0x3, 0x7fff, 0x7f, 0x8, 0x2, 0x10, 0x10000, 0x6, 0x5, 0xb6c, 0x8, 0x7, 0x10001, 0x6aad, 0x9, 0x1, 0xffffff17, 0x5, 0x2, 0xd8, 0x7, 0x48e1, 0x8, 0x5, 0x8, 0x80000, 0x9, 0x80000000, 0x3, 0x8870, 0x401, 0xea9, 0xe90d, 0x1000, 0x8, 0x80000000, 0x9, 0x400, 0x7, 0x8, 0x10001, 0x101, 0xfffffffe, 0x8000, 0x4, 0xb, 0x3, 0x3, 0x6, 0x3, 0x4, 0x4, 0x2, 0x4, 0xe464, 0x4, 0xfffffff9, 0x6, 0x38, 0x7, 0xde0, 0x4, 0x6, 0x4, 0x2000000, 0x1ff, 0xfffffc00, 0x2, 0x9, 0x80, 0x100, 0x5, 0x3, 0xa, 0x10, 0xc, 0x93, 0x7, 0x5a4, 0x101, 0x8, 0xc9, 0x101, 0x3, 0x0, 0x2, 0x9, 0x6, 0xebbc, 0x3, 0x3, 0x5, 0x400, 0x4, 0x2, 0x6ad, 0x8, 0x9, 0x27a, 0x8, 0x8df, 0x1, 0x2, 0x5, 0x75, 0x7, 0x7fffffff, 0x3, 0xffff, 0x3, 0x4, 0x0, 0x14c9b17e, 0x3, 0x6da, 0xc707, 0x6, 0x7, 0x1, 0x7, 0x8, 0xb, 0x1, 0xc, 0x80, 0xfffffff7, 0x81, 0x10001, 0x9, 0x1, 0x2, 0x6, 0xe, 0x70000, 0xffffffff, 0xec, 0x3e87, 0x80000000, 0x17f, 0xffff63f6, 0x8, 0x8, 0x4, 0x33d12ebb, 0x8, 0x0, 0xf702, 0x28, 0x3, 0x7, 0x7, 0x0, 0x6, 0x3, 0x7f, 0x40, 0x1, 0xffffffff, 0x1691ab68, 0xffff, 0xfffffffb, 0x6, 0xd6, 0x2, 0x7, 0x101, 0x7, 0x4, 0x80000000, 0x3, 0x7, 0x5, 0x1, 0x9, 0x383848a2, 0xfffffff8, 0x3, 0x3, 0x4, 0x5, 0x6, 0x0, 0xfffff085, 0x57b1cbcd, 0x890f, 0x1, 0x2, 0x3ff, 0x9, 0x3, 0x4, 0x7, 0x7, 0x400000, 0x6, 0x0, 0xfffffffd, 0x5, 0x6, 0x2b9ac0, 0xa514, 0x7, 0x5, 0x72000000], 0x3, 0x400, 0xe14}) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f00000039c0)=0x8000) newfstatat(0xffffffffffffff9c, &(0x7f0000003a00)='./file0\x00', &(0x7f0000003a40), 0x6600) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) syz_genetlink_get_family_id$batadv(&(0x7f0000003ac0), r4) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000003b00)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003b80), r7) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000003c40)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x3c, r8, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x37}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x9}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 9.930927117s ago: executing program 2 (id=1041): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) acct(0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63ecf48e46dc3f2db9c8d85eb986", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f000001b700)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x24, 0x3a, 0xff, @remote, @local, {[], @time_exceed={0x3, 0x1, 0x0, 0x8, '\x00', {0x4, 0x6, "d6d327", 0xe8d, 0x21, 0x0, @empty, @rand_addr=' \x01\x00', [@fragment={0x3c, 0x0, 0xf, 0x0, 0x0, 0x8, 0x67}], "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"}}}}}}}, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00003e2000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000020e000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000017e000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00004cc000/0x3000)=nil, 0x0}, 0x68) sched_setscheduler(0x0, 0x5, &(0x7f000000d380)) unshare(0x24060400) timerfd_gettime(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f000001c780)=ANY=[@ANYBLOB="91985165f874d1ede64de0f3fa", @ANYRES16=0x0, @ANYBLOB="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"], 0x1478}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000090) io_uring_enter(0xffffffffffffffff, 0x2cbe, 0x366, 0x12, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x10) timer_create(0x7, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r5}, 0x10) syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) 9.488983413s ago: executing program 1 (id=1042): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000010c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="187c2ded5b21d9b7ce00d06f763800000ef7"], &(0x7f0000000a00)='GPL\x00', 0x299d, 0xf3, &(0x7f0000000c80)=""/243, 0x41100, 0x3a, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0x4, 0x40, 0x5}, 0x10, 0x215cd, 0xffffffffffffffff, 0x0, &(0x7f0000001000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001040), 0x10, 0x1}, 0x94) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x1000000000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000140)={'sit0\x00', @broadcast}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0x140, 0x0, &(0x7f00000007c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/64, 0x40, 0x2, 0x400005}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}}, @register_looper, @increfs_done={0x40106308, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000740)={@ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/24, 0x18, 0x4000000000000001, 0x3e}, @ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/54, 0x36, 0x1, 0x37}, @flat=@binder={0x73622a85, 0x101, 0x2}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}}, @acquire, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@binder={0x73622a85, 0xa, 0x5}, @flat=@weak_handle={0x77682a85, 0x101}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @fda={0x66646185, 0x9, 0x1, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/15, 0xf, 0x0, 0x5}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}, 0x1000}, @acquire={0x40046305, 0xba}], 0xab, 0x0, &(0x7f00000005c0)="c94624999b0d32d0bf87c2b1ee168f8d9f9b2342e2f539affb7bd1cd4c01ee3625afd94ff6bd487580ab283f0eb4ed773e72bfa1dee6b2d66081d99dfa17b5a49da01f439b2aa3974870df0cf343ff88a60273c60110ed6520e1de7151420036132f1767dbc50c6985d20d7c1d0214457be79dd3291dd7ed7183542f99ad5abd70437d12844d5e3c9ceb3134d52c9d99e99673f3e733714e1384ffc20a212fb022b1607f27f2deed7de438"}) open$dir(&(0x7f0000000680)='./file0\x00', 0x0, 0x61) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$qrtrtun(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) write$binfmt_misc(r6, &(0x7f0000000040), 0xfe46) recvfrom$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) 8.603829462s ago: executing program 8 (id=1044): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x40408c4) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffdb03000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) sendto$inet6(r6, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f4", 0x52, 0x10, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000400"/15], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r7, 0x2c9ab000) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000000)=@arm64={0x8, 0x4, 0x10, '\x00', 0xc1d}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) 8.60145131s ago: executing program 2 (id=1045): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x404000000000008b}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09", 0x17) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, 0x0, 0x20000040) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000300)={0xf97cff8c, 0x8, 'SE Linux', "e51ed9bd16b05d3e50c82a93877b501c417d2c530d22a3ebe221bba38d1cb8f4671c6936af996cafd87f639f79250f1f1b6566"}, 0x43) timer_create(0x3, 0x0, &(0x7f0000000380)=0x0) timer_settime(r5, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) timer_delete(0x0) 8.389480082s ago: executing program 2 (id=1048): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x2c6e02a6a3a98c83, 0x9, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a64", 0x16, 0xebec93e830f96115}) io_uring_enter(0xffffffffffffffff, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x20000000, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @mcast1, 0xa}, 0x1c) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)='v', 0x1}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 8.113321605s ago: executing program 9 (id=1050): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1, r2], 0x2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r6 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) r7 = add_key$user(&(0x7f0000000480), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x6e) chdir(&(0x7f0000000140)='./bus\x00') linkat(r6, &(0x7f0000000040)='./file1\x00', r6, &(0x7f0000000180)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000380000008500000011000000000000000000000033117248350cb1c05a07fea1709101056b1ec755300e90eba028ae5a8e96c8884714cc789c385efc9109a8b2a05ce156311b297eb3103728963e8d31c3aa60a6327578bdd6051b3c4bb5db772709abf07bc1956676277f06bac2bae7fea6fa7733e68aadbdfe895d504341ad2daaee98f86d3093a30c6518e4b66e2bc3dbc8e04379bf557c11e795b5037cc6cdb5b182ed1f4b7259b3d2fdedf841c7cd993f977a16c8ae77037c62dcb7afc633ab7eae68a917d2cc3ff1"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_IRQCHIP(r9, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0xb}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xbe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x48, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x81, 0x7, 0x7, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) socket$inet6_mptcp(0xa, 0x1, 0x106) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) 8.094785588s ago: executing program 1 (id=1051): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(&(0x7f00000000c0)=[{r6, 0xe7d4c009da6c1985}], 0x1, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 7.332386957s ago: executing program 2 (id=1052): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0x0, 0xa3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000040)={0x8, r4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='mpol=interleave,m']) 7.320789855s ago: executing program 7 (id=1053): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0xfffffffffffffffc, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000100)="588c0ddcfc68149e117977af1e1fbdf47372d0aa69450f3aafea06e412b7fd0c910147550db1bffe91d4e0c37e54d082f1f7c1cff030c589659c5c645f9e0f727124a16c4b12b68a12191ead937bba5670558e6dbd1f828c7c3a5147638bc4a0753968c3bcb950f331df79ac5abe1a142ea39362535271f0a2c801b0a98dfc", 0x7f, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000580)=""/145, 0x91}], 0x1) 6.495971781s ago: executing program 7 (id=1054): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x404000000000008b}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09", 0x17) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, 0x0, 0x20000040) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000300)={0xf97cff8c, 0x8, 'SE Linux', "e51ed9bd16b05d3e50c82a93877b501c417d2c530d22a3ebe221bba38d1cb8f4671c6936af996cafd87f639f79250f1f1b6566fb839b79"}, 0x47) timer_create(0x3, 0x0, &(0x7f0000000380)=0x0) timer_settime(r5, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) timer_delete(0x0) 6.17402303s ago: executing program 2 (id=1055): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x2ce, 0xffffffffffffffff, 0x1}) sendmmsg$unix(r0, 0x0, 0x0, 0x8011) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r2, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r3, r5) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x13, r7, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x89f2, &(0x7f0000000080)=0x59b) getpriority(0x2, r4) ptrace$peek(0x3, r4, &(0x7f0000000000)) 6.143798355s ago: executing program 1 (id=1056): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)={0x3f}) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1bdd, &(0x7f0000000300)={0x0, 0xab42, 0x10100, 0x0, 0x7f}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0, 0x0, 0x1}, {0x0}, {0x0}]}, 0x4}, 0x1) (async) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r1, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x120, 0x1}) (async) syz_usb_connect(0x5f4618c6f73e17a8, 0x24, &(0x7f00000003c0)=ANY=[], 0x0) (async) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (rerun: 32) close(r5) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async, rerun: 64) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async, rerun: 64) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.988123493s ago: executing program 1 (id=1057): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x20004000) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000180)}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000027c0)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f0000000600)=&(0x7f00000005c0)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f00000002c0)={0x7, 0x9c, 0x300000, 0x8, 0x30000, 0x521}) 5.98635752s ago: executing program 8 (id=1058): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x6, 0x9, 0x1, "9eaf9266bb313a4bb4c841bcd61d95cab3d495ceaf9a1962141dc485b23eea5d", 0x32314752}) 5.688837612s ago: executing program 8 (id=1059): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000000)=""/3, 0x3) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x3, 0x1000000}) 5.611688231s ago: executing program 9 (id=1060): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060001c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) socket$inet_sctp(0x2, 0x5, 0x84) getpid() memfd_secret(0x80000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd, 0x1ffe4}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x60080f5}, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x1, 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 5.587071719s ago: executing program 7 (id=1061): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) syz_open_dev$video4linux(&(0x7f0000001d80), 0x8000000000000000, 0x105301) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0xe0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req={0x401, 0xf9, 0x8001, 0xf6}, 0x10) getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078) 5.471394343s ago: executing program 7 (id=1062): socket$xdp(0x2c, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0xfffffffb}, 0x76e0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x100240, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 4.69039658s ago: executing program 7 (id=1063): syz_open_dev$vbi(0x0, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x108) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) writev(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x5, 0x84) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x24, &(0x7f0000000000), 0x4) sendto$inet6(r1, &(0x7f00000001c0)="721d906ea3b2c8047ba19f1a79a80000010000000000", 0x16, 0x400e0, &(0x7f0000000300)={0xa, 0x4e1e, 0x2c73, @remote, 0x80006}, 0x1c) r7 = socket$rxrpc(0x21, 0x2, 0xa) io_submit(0x0, 0xfffffffffffffcf9, 0x0) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f0000000280)=',\x00', 0x2) 4.54767128s ago: executing program 2 (id=1064): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010100, @in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0x210000, 0x33}, 0x0, @in=@rand_addr=0x64010102, 0x0, 0x3, 0x0, 0x7, 0xfffffffd, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000200)={0x3, 0x1000}, 0x4) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) unshare(0x6a040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="14000100000002", @ANYRESOCT=r3, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 4.484324218s ago: executing program 9 (id=1065): socket$can_bcm(0x1d, 0x2, 0x2) socket(0x2b, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x80, 0x14000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x2000000) 3.984626566s ago: executing program 7 (id=1066): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e27, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0x4a, 0xf080, 0x4}, 0x9c) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000000c0)={0x2, 0xfa}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a00000905a502000000000009058b6e"], 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000f4ff0600000a20000000000a03000000000000001e00070006000900010073797a30000000002c0000000c0a01020000000000000000070000000900010073797a3000000000040003800800044000000002140000001000010000000000000000000384000a"], 0x74}}, 0x20008844) read(r0, &(0x7f0000000140)=""/242, 0xf2) r4 = gettid() wait4(r4, 0x0, 0x40000000, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000008c0)={0x2, 0x7}, 0x2) 3.32097268s ago: executing program 1 (id=1067): r0 = userfaultfd(0x80001) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x600000e, 0x50032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q;', 0x2}], 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYRES16=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYRES16=r3], 0xa0}, 0x4004881) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0, 0x100000}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0xffff1000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000780)={0x2, 0x0, [{0x8080000, 0x80, &(0x7f00000005c0)=""/128}, {0x4, 0x1000, &(0x7f0000003780)=""/4096}]}) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f00000002c0)={0x1, r7}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair(0x28, 0x20000000000001, 0x0, &(0x7f0000000100)) 3.115802087s ago: executing program 9 (id=1068): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x54000, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f00000001c0)) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080)={0x2, 0x3}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c000000020601030000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3100000000240007800c00028008000140ffffffff0c0001800800014064010101050014000200000005000500020014ecf700000500010006000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) 2.131041506s ago: executing program 9 (id=1069): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sync_file_range(r0, 0xfffffffffffffffd, 0x9, 0x7) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f00000001c0)={0x8, 'vlan1\x00', {'macvlan1\x00'}, 0x9}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.245127134s ago: executing program 8 (id=1070): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(&(0x7f00000000c0)=[{r6, 0xe7d4c009da6c1985}], 0x1, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.035626594s ago: executing program 1 (id=1071): io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000200000000000000000000008500000011000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x28, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001"], 0xfdef) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) (async) r7 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x4, 0x90180) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r7, 0xc1004111, &(0x7f00000003c0)={0x5, [0x5, 0x0, 0x4], [{0x7, 0x6, 0x1, 0x1}, {0x0, 0x3000000}, {0x1, 0x3, 0x0, 0x1}, {0xfffffff1, 0x6509, 0x1, 0x1, 0x0, 0x1}, {0x8, 0x4, 0x0, 0x0, 0x1}, {0x613, 0xffffffff, 0x1, 0x1, 0x0, 0x1}, {0x1d, 0x6, 0x0, 0x1, 0x1}, {0xfffffffa, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x101, 0x1, 0x0, 0x1, 0x1}, {0x1, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x8b4, 0x1, 0x0, 0x1}, {0x2, 0x6, 0x0, 0x1, 0x0, 0x1}], 0x576}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x2, 0xe, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x3, 0x1, 0x0, r6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) 609.240625ms ago: executing program 9 (id=1072): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x404000000000008b}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09", 0x17) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, 0x0, 0x20000040) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000300)={0xf97cff8c, 0x8, 'SE Linux', "e51ed9bd16b05d3e50c82a93877b501c417d2c530d22a3ebe221bba38d1cb8f4671c6936af996cafd87f639f79250f1f1b6566fb839b79"}, 0x47) timer_create(0x3, 0x0, &(0x7f0000000380)=0x0) timer_settime(r5, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) timer_delete(0x0) 0s ago: executing program 8 (id=1073): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0xfffffffb}, 0x76e0}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.6.736'. [ 278.882456][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.6.736'. [ 278.953552][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 279.302182][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.311318][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.453397][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 279.792717][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.805958][ T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 279.839489][ T10] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 279.852644][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.952549][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.979747][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.993295][ T10] usb 6-1: Product: syz [ 280.004005][ T10] usb 6-1: Manufacturer: syz [ 280.021878][ T10] usb 6-1: SerialNumber: syz [ 280.128502][ T30] audit: type=1400 audit(280.095:489): avc: denied { setopt } for pid=8840 comm="syz.0.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 280.382176][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.403195][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.583115][ T10] usb 6-1: 0:2 : does not exist [ 280.784313][ T10] usb 6-1: USB disconnect, device number 13 [ 281.273927][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.281692][ T6310] udevd[6310]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.453223][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.461979][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.634991][ T36] Bluetooth: hci6: Frame reassembly failed (-84) [ 282.007236][ T8882] netlink: 56 bytes leftover after parsing attributes in process `syz.5.749'. [ 282.200355][ T8887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.751'. [ 282.209520][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'. [ 282.496922][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.686339][ T8887] syzkaller1: entered promiscuous mode [ 282.691933][ T8887] syzkaller1: entered allmulticast mode [ 283.515991][ T5912] net_ratelimit: 2 callbacks suppressed [ 283.516009][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.572027][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.673205][ T5810] Bluetooth: hci6: command 0x1003 tx timeout [ 283.676928][ T5813] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 284.424053][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.624512][ T30] audit: type=1400 audit(284.465:490): avc: denied { bind } for pid=8903 comm="syz.0.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 285.558436][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.840419][ T8913] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 285.860846][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.902388][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.910826][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.995522][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.003836][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.347264][ T8921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.702217][ T8925] netlink: 'syz.0.758': attribute type 1 has an invalid length. [ 286.715388][ T8920] tmpfs: Unknown parameter 'm' [ 286.718835][ T8925] netlink: 236 bytes leftover after parsing attributes in process `syz.0.758'. [ 286.955413][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.968516][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.759'. [ 287.014312][ T976] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 287.109662][ T8935] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.315508][ T8934] tmpfs: Unknown parameter 'm' [ 287.541774][ T976] usb 3-1: Using ep0 maxpacket: 16 [ 287.583906][ T976] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 287.592616][ T976] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 287.621184][ T976] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 287.671846][ T976] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 287.690982][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.719111][ T976] usb 3-1: Product: syz [ 287.732863][ T976] usb 3-1: Manufacturer: syz [ 287.744364][ T976] usb 3-1: SerialNumber: syz [ 287.902570][ T8952] netlink: 'syz.0.764': attribute type 1 has an invalid length. [ 288.495927][ T8952] netlink: 'syz.0.764': attribute type 4 has an invalid length. [ 288.546944][ T8952] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.764'. [ 288.657270][ T976] usb 3-1: 0:2 : does not exist [ 288.723024][ T976] usb 3-1: USB disconnect, device number 16 [ 288.786529][ T6310] udevd[6310]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.873823][ T5874] net_ratelimit: 4 callbacks suppressed [ 288.873834][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.986555][ T8968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.767'. [ 288.995580][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'. [ 289.046524][ T8968] syzkaller1: entered promiscuous mode [ 289.101409][ T8968] syzkaller1: entered allmulticast mode [ 289.523289][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.531923][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.183325][ T5874] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 290.241921][ T8988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.770'. [ 290.268489][ T30] audit: type=1400 audit(290.235:491): avc: denied { read } for pid=8980 comm="syz.3.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 290.344218][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 290.392712][ T5874] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 290.416769][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.434513][ T5874] usb 3-1: Product: syz [ 290.446836][ T5874] usb 3-1: Manufacturer: syz [ 290.528116][ T9002] FAULT_INJECTION: forcing a failure. [ 290.528116][ T9002] name failslab, interval 1, probability 0, space 0, times 0 [ 290.541945][ T9002] CPU: 0 UID: 0 PID: 9002 Comm: syz.0.772 Not tainted syzkaller #0 PREEMPT(full) [ 290.541968][ T9002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 290.541979][ T9002] Call Trace: [ 290.541985][ T9002] [ 290.541991][ T9002] dump_stack_lvl+0x16c/0x1f0 [ 290.542021][ T9002] should_fail_ex+0x512/0x640 [ 290.542047][ T9002] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 290.542067][ T9002] should_failslab+0xc2/0x120 [ 290.542086][ T9002] __kmalloc_node_noprof+0xe0/0x8a0 [ 290.542101][ T9002] ? alloc_slab_obj_exts+0x3a/0xd0 [ 290.542127][ T9002] ? alloc_slab_obj_exts+0x3a/0xd0 [ 290.542147][ T9002] ? __phys_addr+0xe8/0x180 [ 290.542166][ T9002] alloc_slab_obj_exts+0x3a/0xd0 [ 290.542186][ T9002] __memcg_slab_post_alloc_hook+0x251/0x940 [ 290.542210][ T9002] ? kasan_save_track+0x14/0x30 [ 290.542228][ T9002] kmem_cache_alloc_lru_noprof+0x556/0x6e0 [ 290.542252][ T9002] ? map_id_range_up+0x2ce/0x3b0 [ 290.542273][ T9002] ? __d_alloc+0x32/0xae0 [ 290.542296][ T9002] ? __d_alloc+0x32/0xae0 [ 290.542311][ T9002] __d_alloc+0x32/0xae0 [ 290.542331][ T9002] d_alloc_parallel+0x111/0x1480 [ 290.542363][ T9002] ? register_lock_class+0x41/0x4c0 [ 290.542378][ T9002] ? __lock_acquire+0xb97/0x1ce0 [ 290.542403][ T9002] ? __pfx_d_alloc_parallel+0x10/0x10 [ 290.542430][ T9002] ? lockdep_init_map_type+0x5c/0x280 [ 290.542447][ T9002] ? lockdep_init_map_type+0x5c/0x280 [ 290.542468][ T9002] __lookup_slow+0x193/0x460 [ 290.542492][ T9002] ? __pfx___lookup_slow+0x10/0x10 [ 290.542531][ T9002] ? lookup_fast+0x156/0x610 [ 290.542559][ T9002] walk_component+0x353/0x5b0 [ 290.542586][ T9002] path_lookupat+0x142/0x6d0 [ 290.542609][ T9002] ? __lock_acquire+0xb97/0x1ce0 [ 290.542637][ T9002] filename_lookup+0x224/0x5f0 [ 290.542656][ T9002] ? __pfx_filename_lookup+0x10/0x10 [ 290.542696][ T9002] ? getname_flags.part.0+0x1c5/0x550 [ 290.542717][ T9002] ? __might_fault+0xe3/0x190 [ 290.542745][ T9002] user_path_at+0x3a/0x60 [ 290.542769][ T9002] __x64_sys_utime+0x1c0/0x2c0 [ 290.542791][ T9002] ? __pfx___x64_sys_utime+0x10/0x10 [ 290.542814][ T9002] ? ksys_write+0x1ac/0x250 [ 290.542839][ T9002] do_syscall_64+0xcd/0xfa0 [ 290.542867][ T9002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.542884][ T9002] RIP: 0033:0x7fbcdc18eec9 [ 290.542898][ T9002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.542914][ T9002] RSP: 002b:00007fbcdcfdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 290.542930][ T9002] RAX: ffffffffffffffda RBX: 00007fbcdc3e6090 RCX: 00007fbcdc18eec9 [ 290.542941][ T9002] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000240 [ 290.542952][ T9002] RBP: 00007fbcdcfdf090 R08: 0000000000000000 R09: 0000000000000000 [ 290.542962][ T9002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.542972][ T9002] R13: 00007fbcdc3e6128 R14: 00007fbcdc3e6090 R15: 00007fff4dd7ba68 [ 290.542999][ T9002] [ 290.838815][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.838879][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.858358][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.867548][ T9002] overlayfs: failed lookup in lower (newroot/157, name='bus', err=-40): overlapping layers [ 291.047967][ T5874] usb 3-1: SerialNumber: syz [ 291.074152][ T5874] usb 3-1: config 0 descriptor?? [ 291.116462][ T5874] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 291.123011][ T11] block nbd0: Possible stuck request ffff88802662e000: control (read@0,1024B). Runtime 90 seconds [ 291.133686][ T11] block nbd0: Possible stuck request ffff88802662e1c0: control (read@1024,1024B). Runtime 90 seconds [ 291.144607][ T11] block nbd0: Possible stuck request ffff88802662e380: control (read@2048,1024B). Runtime 90 seconds [ 291.155637][ T11] block nbd0: Possible stuck request ffff88802662e540: control (read@3072,1024B). Runtime 90 seconds [ 291.758309][ T9012] virtiofs: Unknown parameter 'always 1 V3 [ 291.758309][ T9012] 010000E0 1 0:00000000 0 [ 291.758309][ T9012] 18 nlmon0 : 1 V3 [ 291.758309][ T9012] 010000E0 1 0:00000000 0 [ 291.758309][ T9012] 20 batadv0 : 1 V3 [ 291.758309][ T9012] 010000E0 1 0:00000000 0 [ 291.758309][ T9012] 21 vxcan0 : 1 V3 [ 291.758309][ T9012] 010000E0 1 0:00000000 0 [ 291.758309][ T9012] 22 vxcan1 : ' [ 292.033255][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.121026][ T9015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.775'. [ 292.147942][ T5874] gspca_stk1135: reg_w 0x3 err -110 [ 292.164443][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 292.315184][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.315206][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.337598][ T5874] gspca_stk1135: Sensor write failed [ 292.345264][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 292.351592][ T5874] gspca_stk1135: Sensor write failed [ 292.363200][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 292.372448][ T5874] gspca_stk1135: Sensor read failed [ 292.378340][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 292.386526][ T5874] gspca_stk1135: Sensor read failed [ 292.392040][ T5874] gspca_stk1135: Detected sensor type unknown (0x0) [ 292.401607][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 292.408154][ T5874] gspca_stk1135: Sensor read failed [ 292.415232][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 292.421647][ T5874] gspca_stk1135: Sensor read failed [ 292.470098][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 292.477068][ T5874] gspca_stk1135: Sensor write failed [ 292.500611][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 292.533348][ T5874] gspca_stk1135: Sensor write failed [ 292.538772][ T5874] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 292.723757][ T30] audit: type=1400 audit(292.695:492): avc: denied { create } for pid=9025 comm="syz.3.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 292.778054][ T30] audit: type=1400 audit(292.695:493): avc: denied { ioctl } for pid=9025 comm="syz.3.778" path="socket:[22378]" dev="sockfs" ino=22378 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 293.113222][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.913325][ T9] net_ratelimit: 1 callbacks suppressed [ 293.913342][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.044596][ T9] usb 3-1: USB disconnect, device number 17 [ 294.163416][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.298723][ T9037] overlayfs: failed lookup in lower (newroot/161, name='bus', err=-40): overlapping layers [ 294.405291][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.660107][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.783'. [ 294.673826][ T9042] netlink: 88 bytes leftover after parsing attributes in process `syz.3.783'. [ 295.002167][ T9047] virtiofs: Unknown parameter 'always 1 V3 [ 295.002167][ T9047] 010000E0 1 0:00000000 0 [ 295.002167][ T9047] 20 batadv0 : 1 V3 [ 295.002167][ T9047] 010000E0 1 0:00000000 0 [ 295.002167][ T9047] 21 vxcan0 : 1 V3 [ 295.002167][ T9047] 010000E0 1 0:00000000 0 [ 295.002167][ T9047] 22 vxcan1 : 1 V3 [ 295.002167][ T9047] 010000E0 1 0:00000000 0 [ 295.002167][ T9047] 23 veth0 : ' [ 295.045808][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.327268][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.354198][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.416760][ T9042] tmpfs: Unknown parameter 'm' [ 295.540595][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.598812][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.610252][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.778389][ T9052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.784'. [ 295.925675][ T9057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.934289][ T9057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.116883][ T9063] SELinux: policydb version -1109844251 does not match my version range 15-35 [ 296.125897][ T9063] SELinux: failed to load policy [ 296.416451][ T9069] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 298.000839][ T5813] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 298.033407][ T5813] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 298.042204][ T5813] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 298.051773][ T5813] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 298.067175][ T5813] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 298.094467][ T9084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.792'. [ 298.234042][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.310878][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.321531][ T5131] Bluetooth: hci5: command 0x0405 tx timeout [ 298.435539][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.457377][ T9081] chnl_net:caif_netlink_parms(): no params data found [ 298.548882][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.721108][ T9096] netlink: 56 bytes leftover after parsing attributes in process `syz.2.794'. [ 298.862038][ T9081] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.874816][ T9081] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.883428][ T9081] bridge_slave_0: entered allmulticast mode [ 298.980387][ T9081] bridge_slave_0: entered promiscuous mode [ 299.018394][ T9081] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.037078][ T9081] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.054906][ T9081] bridge_slave_1: entered allmulticast mode [ 299.071774][ T9081] bridge_slave_1: entered promiscuous mode [ 299.293535][ T10] net_ratelimit: 82 callbacks suppressed [ 299.293551][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.404187][ T9081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.488738][ T9081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.516424][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.562842][ T9081] team0: Port device team_slave_0 added [ 299.579382][ T13] bridge_slave_1: left allmulticast mode [ 299.593837][ T13] bridge_slave_1: left promiscuous mode [ 299.603264][ T5892] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 299.612060][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.635135][ T13] bridge_slave_0: left allmulticast mode [ 299.656226][ T13] bridge_slave_0: left promiscuous mode [ 299.662503][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.675288][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.753374][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 299.767313][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.796'. [ 299.776570][ T9104] netlink: 88 bytes leftover after parsing attributes in process `syz.2.796'. [ 299.835901][ T9105] tmpfs: Unknown parameter 'm' [ 300.023559][ T5892] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 300.033153][ T5892] usb 4-1: config 0 has no interface number 0 [ 300.041733][ T5892] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 300.052424][ T5892] usb 4-1: config 0 interface 196 has no altsetting 0 [ 300.072377][ T5892] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 300.082510][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.091771][ T5892] usb 4-1: Product: syz [ 300.099282][ T5892] usb 4-1: Manufacturer: syz [ 300.104951][ T5892] usb 4-1: SerialNumber: syz [ 300.130360][ T5892] usb 4-1: config 0 descriptor?? [ 300.150934][ T9101] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 300.158579][ T5810] Bluetooth: hci6: command tx timeout [ 300.413478][ T9111] netlink: 'syz.2.798': attribute type 1 has an invalid length. [ 300.480703][ T5892] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 300.493547][ T5892] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 300.518839][ T5892] usb 4-1: USB disconnect, device number 15 [ 300.552388][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.561471][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.582443][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.615419][ T13] bond0 (unregistering): Released all slaves [ 300.640128][ T9081] team0: Port device team_slave_1 added [ 300.697515][ T9112] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 300.715178][ T9112] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 300.716051][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.775338][ T9081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.782295][ T9081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.815323][ T9081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.827529][ T9081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.834674][ T9081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.860764][ T9081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.873146][ T10] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 300.932691][ T9081] hsr_slave_0: entered promiscuous mode [ 300.938801][ T9081] hsr_slave_1: entered promiscuous mode [ 300.945553][ T9081] debugfs: 'hsr0' already exists in 'hsr' [ 300.952280][ T9081] Cannot create hsr debugfs directory [ 300.990154][ T13] hsr_slave_0: left promiscuous mode [ 300.996148][ T13] hsr_slave_1: left promiscuous mode [ 301.002064][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.012007][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.022156][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.030615][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.040106][ T10] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 301.049563][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.078652][ T13] veth1_macvtap: left promiscuous mode [ 301.089964][ T10] usb 3-1: config 0 descriptor?? [ 301.100120][ T13] veth0_macvtap: left promiscuous mode [ 301.109668][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 301.120332][ T13] veth1_vlan: left promiscuous mode [ 301.125822][ T13] veth0_vlan: left promiscuous mode [ 301.434242][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.593576][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.827060][ T10] gp8psk: usb in 128 operation failed. [ 301.864276][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.031060][ T9139] virtiofs: Unknown parameter 'always 1 V3 [ 302.031060][ T9139] 010000E0 1 0:00000000 0 [ 302.031060][ T9139] 18 nlmon0 : 1 V3 [ 302.031060][ T9139] 010000E0 1 0:00000000 0 [ 302.031060][ T9139] 20 batadv0 : 1 V3 [ 302.031060][ T9139] 010000E0 1 0:00000000 0 [ 302.031060][ T9139] 21 vxcan0 : 1 V3 [ 302.031060][ T9139] 010000E0 1 0:00000000 0 [ 302.031060][ T9139] 22 vxcan1 : ' [ 302.213539][ T30] audit: type=1400 audit(302.115:494): avc: denied { create } for pid=9110 comm="syz.2.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 302.243979][ T5810] Bluetooth: hci6: command tx timeout [ 302.276337][ T9113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.289465][ T9113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.313514][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.324151][ T13] team0 (unregistering): Port device team_slave_1 removed [ 302.372676][ T13] team0 (unregistering): Port device team_slave_0 removed [ 302.636225][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.844848][ T10] gp8psk: usb in 137 operation failed. [ 302.850333][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 302.880573][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 302.992239][ T10] usb 3-1: USB disconnect, device number 18 [ 303.899974][ T9081] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 303.950370][ T9081] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 304.094469][ T9081] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 304.152293][ T9081] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 304.314204][ T5810] Bluetooth: hci6: command tx timeout [ 304.417742][ T9081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.473365][ T5818] net_ratelimit: 3 callbacks suppressed [ 304.473381][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.487032][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.498399][ T9081] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.530803][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.537957][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.569417][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.576584][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.714582][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.733895][ T5131] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 304.760870][ T5131] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 304.769802][ T5131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 304.777639][ T5131] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 304.785544][ T5131] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 305.083762][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.231111][ T9195] virtiofs: Unknown parameter 'always 1 V3 [ 305.231111][ T9195] 010000E0 1 0:00000000 0 [ 305.231111][ T9195] 18 nlmon0 : 1 V3 [ 305.231111][ T9195] 010000E0 1 0:00000000 0 [ 305.231111][ T9195] 20 batadv0 : 1 V3 [ 305.231111][ T9195] 010000E0 1 0:00000000 0 [ 305.231111][ T9195] 21 vxcan0 : 1 V3 [ 305.231111][ T9195] 010000E0 1 0:00000000 0 [ 305.231111][ T9195] 22 vxcan1 : ' [ 305.656779][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.665281][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.754543][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.755483][ T9202] netlink: 'syz.2.810': attribute type 21 has an invalid length. [ 305.797619][ T9081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.807490][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 305.845425][ T30] audit: type=1400 audit(305.815:495): avc: denied { checkpoint_restore } for pid=9200 comm="syz.2.810" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 305.920196][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.020670][ T9210] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 306.164314][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.335244][ T9180] chnl_net:caif_netlink_parms(): no params data found [ 306.393144][ T5131] Bluetooth: hci6: command tx timeout [ 306.478725][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.567148][ T9180] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.586961][ T9180] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.611377][ T9180] bridge_slave_0: entered allmulticast mode [ 306.633466][ T9180] bridge_slave_0: entered promiscuous mode [ 306.649617][ T9180] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.657846][ T9180] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.665171][ T9180] bridge_slave_1: entered allmulticast mode [ 306.672939][ T9180] bridge_slave_1: entered promiscuous mode [ 306.752257][ T9180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.782631][ T9180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.873229][ T5131] Bluetooth: hci2: command tx timeout [ 306.896654][ T9180] team0: Port device team_slave_0 added [ 306.907854][ T9180] team0: Port device team_slave_1 added [ 306.934111][ T9081] veth0_vlan: entered promiscuous mode [ 307.008750][ T9180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.016008][ T9180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.105866][ T9180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.119763][ T9180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.127089][ T9180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.153502][ T9180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.176952][ T9081] veth1_vlan: entered promiscuous mode [ 307.785504][ T9180] hsr_slave_0: entered promiscuous mode [ 307.796659][ T9180] hsr_slave_1: entered promiscuous mode [ 307.804652][ T9180] debugfs: 'hsr0' already exists in 'hsr' [ 307.810834][ T9180] Cannot create hsr debugfs directory [ 307.966403][ T9081] veth0_macvtap: entered promiscuous mode [ 308.009622][ T9081] veth1_macvtap: entered promiscuous mode [ 308.101657][ T9081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.157275][ T9081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.229959][ T1092] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.254456][ T1092] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.306260][ T1092] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.337748][ T1092] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.436118][ T9180] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 308.462032][ T9180] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 308.489388][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.499368][ T9180] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 308.508978][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.527781][ T9180] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 308.853268][ T6717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.861273][ T6717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.953866][ T5131] Bluetooth: hci2: command tx timeout [ 308.982733][ T9180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.007172][ T9180] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.016771][ T30] audit: type=1400 audit(308.985:496): avc: denied { read write } for pid=9273 comm="syz.3.819" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 309.056608][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.062350][ T30] audit: type=1400 audit(308.985:497): avc: denied { open } for pid=9273 comm="syz.3.819" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 309.063740][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.088629][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.094096][ T30] audit: type=1400 audit(308.985:498): avc: denied { map } for pid=9273 comm="syz.3.819" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 309.100479][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.124188][ T30] audit: type=1400 audit(308.985:499): avc: denied { execute } for pid=9273 comm="syz.3.819" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 309.225493][ T9180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.517300][ T10] net_ratelimit: 59 callbacks suppressed [ 309.517312][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.598208][ T9286] virtiofs: Unknown parameter 'always 1 V3 [ 309.598208][ T9286] 010000E0 1 0:00000000 0 [ 309.598208][ T9286] 20 batadv0 : 1 V3 [ 309.598208][ T9286] 010000E0 1 0:00000000 0 [ 309.598208][ T9286] 21 vxcan0 : 1 V3 [ 309.598208][ T9286] 010000E0 1 0:00000000 0 [ 309.598208][ T9286] 22 vxcan1 : 1 V3 [ 309.598208][ T9286] 010000E0 1 0:00000000 0 [ 309.598208][ T9286] 23 veth0 : ' [ 309.926392][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.118005][ T9292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.126528][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.282565][ T9180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.325773][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.576926][ T9301] FAULT_INJECTION: forcing a failure. [ 310.576926][ T9301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.590137][ T9301] CPU: 0 UID: 0 PID: 9301 Comm: syz.3.822 Not tainted syzkaller #0 PREEMPT(full) [ 310.590160][ T9301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 310.590167][ T9301] Call Trace: [ 310.590172][ T9301] [ 310.590176][ T9301] dump_stack_lvl+0x16c/0x1f0 [ 310.590197][ T9301] should_fail_ex+0x512/0x640 [ 310.590216][ T9301] _copy_from_iter+0x29f/0x1720 [ 310.590235][ T9301] ? rcu_is_watching+0x12/0xc0 [ 310.590249][ T9301] ? irqentry_exit+0x3b/0x90 [ 310.590266][ T9301] ? __pfx__copy_from_iter+0x10/0x10 [ 310.590285][ T9301] ? netlink_sendmsg+0x7f3/0xdd0 [ 310.590299][ T9301] netlink_sendmsg+0x820/0xdd0 [ 310.590311][ T9301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.590326][ T9301] ____sys_sendmsg+0xa95/0xc70 [ 310.590338][ T9301] ? copy_msghdr_from_user+0x10a/0x160 [ 310.590355][ T9301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.590373][ T9301] ___sys_sendmsg+0x134/0x1d0 [ 310.590389][ T9301] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.590422][ T9301] __sys_sendmsg+0x16d/0x220 [ 310.590438][ T9301] ? __pfx___sys_sendmsg+0x10/0x10 [ 310.590462][ T9301] do_syscall_64+0xcd/0xfa0 [ 310.590479][ T9301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.590490][ T9301] RIP: 0033:0x7f09cc38eec9 [ 310.590499][ T9301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.590509][ T9301] RSP: 002b:00007f09cd1dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.590520][ T9301] RAX: ffffffffffffffda RBX: 00007f09cc5e6180 RCX: 00007f09cc38eec9 [ 310.590526][ T9301] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000009 [ 310.590532][ T9301] RBP: 00007f09cd1dc090 R08: 0000000000000000 R09: 0000000000000000 [ 310.590538][ T9301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.590544][ T9301] R13: 00007f09cc5e6218 R14: 00007f09cc5e6180 R15: 00007ffef8240448 [ 310.590559][ T9301] [ 310.794072][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.044164][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.057876][ T5810] Bluetooth: hci2: command tx timeout [ 311.073255][ T9299] nbd3: detected capacity change from 0 to 63 [ 311.205464][ T9312] virtiofs: Unknown parameter 'always 1 V3 [ 311.205464][ T9312] 010000E0 1 0:00000000 0 [ 311.205464][ T9312] 20 batadv0 : 1 V3 [ 311.205464][ T9312] 010000E0 1 0:00000000 0 [ 311.205464][ T9312] 21 vxcan0 : 1 V3 [ 311.205464][ T9312] 010000E0 1 0:00000000 0 [ 311.205464][ T9312] 22 vxcan1 : 1 V3 [ 311.205464][ T9312] 010000E0 1 0:00000000 0 [ 311.205464][ T9312] 23 veth0 : ' [ 311.249094][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.530613][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.549412][ T5131] block nbd3: Receive control failed (result -104) [ 311.585846][ T9180] veth0_vlan: entered promiscuous mode [ 311.612169][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.641687][ T9180] veth1_vlan: entered promiscuous mode [ 311.702895][ T9180] veth0_macvtap: entered promiscuous mode [ 311.712295][ T9180] veth1_macvtap: entered promiscuous mode [ 311.737834][ T9180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.757219][ T9180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.823511][ T6717] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.832617][ T6717] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.842063][ T6717] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.853204][ T7026] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.986620][ T9321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=9321 comm=syz.2.826 [ 312.006004][ T9321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=9321 comm=syz.2.826 [ 312.023228][ T7026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.032200][ T7026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.033614][ T9321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=9321 comm=syz.2.826 [ 312.074459][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.091993][ T9321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=9321 comm=syz.2.826 [ 312.092131][ T5942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.122245][ T5942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.179943][ T9321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=9321 comm=syz.2.826 [ 312.235553][ T9321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=9321 comm=syz.2.826 [ 312.587739][ T9329] SELinux: policydb version -1109844251 does not match my version range 15-35 [ 312.596771][ T9329] SELinux: failed to load policy [ 312.739367][ T5810] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 312.949405][ T5810] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 313.028562][ T5810] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 313.044062][ T5810] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 313.051509][ T5810] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 313.114682][ T5810] Bluetooth: hci2: command tx timeout [ 314.755079][ T5882] net_ratelimit: 5 callbacks suppressed [ 314.755096][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.755533][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.146607][ T5810] Bluetooth: hci7: command tx timeout [ 315.212430][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.596261][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.629181][ T9330] chnl_net:caif_netlink_parms(): no params data found [ 315.833399][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.922074][ T9330] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.929925][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.938566][ T9330] bridge_slave_0: entered allmulticast mode [ 315.947620][ T9330] bridge_slave_0: entered promiscuous mode [ 315.956541][ T9330] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.964203][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.972527][ T9330] bridge_slave_1: entered allmulticast mode [ 315.980055][ T9330] bridge_slave_1: entered promiscuous mode [ 316.020400][ T9330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.032339][ T9330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.074313][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.082701][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.235325][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.243859][ T9330] team0: Port device team_slave_0 added [ 316.274070][ T9330] team0: Port device team_slave_1 added [ 316.356653][ T9330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.367850][ T9330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.402282][ T9330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.420391][ T9330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.432846][ T9330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.576150][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.8.846'. [ 316.591778][ T9402] netlink: 24 bytes leftover after parsing attributes in process `syz.8.846'. [ 316.719284][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.731777][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.741029][ T9330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.744199][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.834121][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.917560][ T9402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.928701][ T9330] hsr_slave_0: entered promiscuous mode [ 316.941823][ T9330] hsr_slave_1: entered promiscuous mode [ 316.962450][ T9330] debugfs: 'hsr0' already exists in 'hsr' [ 316.983312][ T9330] Cannot create hsr debugfs directory [ 317.053143][ T9402] tmpfs: Unknown parameter 'm' [ 317.223889][ T5810] Bluetooth: hci7: command tx timeout [ 317.541801][ T9330] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 317.555919][ T9330] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 317.609519][ T9330] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 317.644585][ T9330] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 317.829742][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.7.850'. [ 318.004184][ T9330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.114019][ T9330] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.148154][ T9423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.288447][ T9425] tmpfs: Unknown parameter 'm' [ 318.493708][ T6717] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.500821][ T6717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.579499][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.586606][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.683174][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 319.058462][ T9] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 319.077865][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.107045][ T9] usb 3-1: Product: syz [ 319.138257][ T9] usb 3-1: Manufacturer: syz [ 319.165643][ T9] usb 3-1: SerialNumber: syz [ 319.191662][ T9] usb 3-1: config 0 descriptor?? [ 319.275269][ T5810] Bluetooth: hci7: command tx timeout [ 319.468979][ T9442] FAULT_INJECTION: forcing a failure. [ 319.468979][ T9442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.507431][ T9442] CPU: 0 UID: 0 PID: 9442 Comm: syz.7.854 Not tainted syzkaller #0 PREEMPT(full) [ 319.507453][ T9442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 319.507463][ T9442] Call Trace: [ 319.507467][ T9442] [ 319.507472][ T9442] dump_stack_lvl+0x16c/0x1f0 [ 319.507492][ T9442] should_fail_ex+0x512/0x640 [ 319.507512][ T9442] _copy_to_user+0x32/0xd0 [ 319.507530][ T9442] simple_read_from_buffer+0xcb/0x170 [ 319.507548][ T9442] proc_fail_nth_read+0x197/0x240 [ 319.507561][ T9442] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.507573][ T9442] ? rw_verify_area+0xcf/0x6c0 [ 319.507588][ T9442] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.507600][ T9442] vfs_read+0x1e4/0xcf0 [ 319.507618][ T9442] ? __pfx___mutex_lock+0x10/0x10 [ 319.507628][ T9442] ? __pfx_vfs_read+0x10/0x10 [ 319.507648][ T9442] ? __fget_files+0x20e/0x3c0 [ 319.507667][ T9442] ksys_read+0x12a/0x250 [ 319.507676][ T9442] ? __pfx_ksys_read+0x10/0x10 [ 319.507685][ T9442] ? fput+0x9b/0xd0 [ 319.507700][ T9442] do_syscall_64+0xcd/0xfa0 [ 319.507717][ T9442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.507728][ T9442] RIP: 0033:0x7f64eeb8d8dc [ 319.507737][ T9442] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 319.507748][ T9442] RSP: 002b:00007f64efb04030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.507758][ T9442] RAX: ffffffffffffffda RBX: 00007f64eede5fa0 RCX: 00007f64eeb8d8dc [ 319.507765][ T9442] RDX: 000000000000000f RSI: 00007f64efb040a0 RDI: 0000000000000007 [ 319.507771][ T9442] RBP: 00007f64efb04090 R08: 0000000000000000 R09: 0000000000000000 [ 319.507777][ T9442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.507783][ T9442] R13: 00007f64eede6038 R14: 00007f64eede5fa0 R15: 00007fffb571f8b8 [ 319.507797][ T9442] [ 319.725551][ T9446] netlink: 20 bytes leftover after parsing attributes in process `syz.8.855'. [ 319.753209][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.8.855'. [ 319.842817][ T9330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.887231][ T9446] syzkaller1: entered promiscuous mode [ 319.892850][ T9446] syzkaller1: entered allmulticast mode [ 319.994935][ T5882] net_ratelimit: 8 callbacks suppressed [ 319.994952][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.393582][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.438436][ T9428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.851'. [ 320.481001][ T30] audit: type=1400 audit(320.435:500): avc: denied { write } for pid=9427 comm="syz.2.851" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 320.567934][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.7.859'. [ 320.578059][ T9428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.588243][ T9473] netlink: 24 bytes leftover after parsing attributes in process `syz.7.859'. [ 320.608364][ T9473] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.720925][ T9474] tmpfs: Unknown parameter 'm' [ 320.860079][ T30] audit: type=1400 audit(320.435:501): avc: denied { open } for pid=9427 comm="syz.2.851" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 320.902378][ T9428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.953526][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.967794][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 320.997604][ T9] asix 3-1:0.0: probe with driver asix failed with error -71 [ 321.005730][ T30] audit: type=1400 audit(320.935:502): avc: denied { ioctl } for pid=9427 comm="syz.2.851" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 321.035275][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.057051][ T9] usb 3-1: USB disconnect, device number 19 [ 321.185788][ T9487] FAULT_INJECTION: forcing a failure. [ 321.185788][ T9487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.193802][ T11] block nbd0: Possible stuck request ffff88802662e000: control (read@0,1024B). Runtime 120 seconds [ 321.210113][ T11] block nbd0: Possible stuck request ffff88802662e1c0: control (read@1024,1024B). Runtime 120 seconds [ 321.221493][ T9487] CPU: 1 UID: 0 PID: 9487 Comm: syz.7.862 Not tainted syzkaller #0 PREEMPT(full) [ 321.221515][ T9487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 321.221525][ T9487] Call Trace: [ 321.221530][ T9487] [ 321.221537][ T9487] dump_stack_lvl+0x16c/0x1f0 [ 321.221566][ T9487] should_fail_ex+0x512/0x640 [ 321.221595][ T9487] _copy_to_user+0x32/0xd0 [ 321.221623][ T9487] simple_read_from_buffer+0xcb/0x170 [ 321.221651][ T9487] proc_fail_nth_read+0x197/0x240 [ 321.221672][ T9487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 321.221700][ T9487] ? rw_verify_area+0xcf/0x6c0 [ 321.221724][ T9487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 321.221744][ T9487] vfs_read+0x1e4/0xcf0 [ 321.221772][ T9487] ? __pfx___mutex_lock+0x10/0x10 [ 321.221789][ T9487] ? __pfx_vfs_read+0x10/0x10 [ 321.221819][ T9487] ? __fget_files+0x20e/0x3c0 [ 321.221842][ T9487] ksys_read+0x12a/0x250 [ 321.221856][ T9487] ? __pfx_ksys_read+0x10/0x10 [ 321.221877][ T9487] do_syscall_64+0xcd/0xfa0 [ 321.221902][ T9487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.221918][ T9487] RIP: 0033:0x7f64eeb8d8dc [ 321.221932][ T9487] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 321.221947][ T9487] RSP: 002b:00007f64efae3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 321.221962][ T9487] RAX: ffffffffffffffda RBX: 00007f64eede6090 RCX: 00007f64eeb8d8dc [ 321.221973][ T9487] RDX: 000000000000000f RSI: 00007f64efae30a0 RDI: 0000000000000007 [ 321.221983][ T9487] RBP: 00007f64efae3090 R08: 0000000000000000 R09: 0000000000000000 [ 321.221992][ T9487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.222001][ T9487] R13: 00007f64eede6128 R14: 00007f64eede6090 R15: 00007fffb571f8b8 [ 321.222025][ T9487] [ 321.222039][ T11] block nbd0: Possible stuck request ffff88802662e380: control (read@2048,1024B). Runtime 120 seconds [ 321.363271][ T5810] Bluetooth: hci7: command tx timeout [ 321.371913][ T11] block nbd0: Possible stuck request ffff88802662e540: control (read@3072,1024B). Runtime 120 seconds [ 321.434242][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.781826][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.834291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.873506][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.882063][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.882805][ T9330] veth0_vlan: entered promiscuous mode [ 321.930222][ T9330] veth1_vlan: entered promiscuous mode [ 322.127938][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.340682][ T9330] veth0_macvtap: entered promiscuous mode [ 322.386847][ T9330] veth1_macvtap: entered promiscuous mode [ 322.452947][ T9330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.531531][ T9330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.708878][ T79] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.761347][ T79] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.815011][ T9519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.869'. [ 322.836990][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'. [ 322.876482][ T79] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.907953][ T79] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.985187][ T9519] syzkaller1: entered promiscuous mode [ 323.101422][ T9519] syzkaller1: entered allmulticast mode [ 323.664221][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.704274][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.989839][ T9541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.183321][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.213768][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.365231][ T9548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.874'. [ 324.365667][ T30] audit: type=1400 audit(324.335:503): avc: denied { setopt } for pid=9542 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 324.365698][ T30] audit: type=1400 audit(324.335:504): avc: denied { connect } for pid=9542 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 324.365719][ T30] audit: type=1400 audit(324.335:505): avc: denied { read } for pid=9542 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 324.720551][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 324.795987][ T9557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 325.262431][ T9555] tmpfs: Unknown parameter 'm' [ 325.608263][ T5882] net_ratelimit: 7 callbacks suppressed [ 325.608274][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.704485][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.722575][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.763318][ T5892] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 326.082756][ T5892] usb 4-1: config 0 has no interfaces? [ 326.104285][ T5892] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 326.128937][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.187152][ T5892] usb 4-1: config 0 descriptor?? [ 326.256832][ T9585] tipc: Enabled bearer , priority 0 [ 326.314223][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.324326][ T9589] syzkaller0: entered promiscuous mode [ 326.353324][ T42] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 326.373346][ T9589] syzkaller0: entered allmulticast mode [ 326.468961][ T9585] tipc: Resetting bearer [ 326.494885][ T9583] tipc: Resetting bearer [ 326.577571][ T42] usb 8-1: Using ep0 maxpacket: 8 [ 326.771486][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.793264][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.803146][ T42] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 326.831839][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.860440][ T42] usb 8-1: Product: syz [ 326.869400][ T42] usb 8-1: Manufacturer: syz [ 326.880862][ T9583] tipc: Disabling bearer [ 326.908692][ T42] usb 8-1: SerialNumber: syz [ 326.932008][ T42] usb 8-1: config 0 descriptor?? [ 326.946327][ T42] gspca_main: se401-2.14.0 probing 047d:5003 [ 327.004415][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.070662][ T6717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.337101][ T9610] netlink: 20 bytes leftover after parsing attributes in process `syz.2.884'. [ 327.355122][ T42] gspca_se401: Wrong descriptor type [ 327.372159][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 327.852428][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.860680][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.521410][ T9610] syzkaller1: entered promiscuous mode [ 328.574086][ T9] usb 4-1: USB disconnect, device number 16 [ 328.607104][ T9610] syzkaller1: entered allmulticast mode [ 328.972905][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.9.887'. [ 328.984220][ T9623] netlink: 12 bytes leftover after parsing attributes in process `syz.9.887'. [ 329.164315][ T9624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.319693][ T10] usb 8-1: USB disconnect, device number 2 [ 329.409549][ T9623] tmpfs: Unknown parameter 'm' [ 330.293811][ T30] audit: type=1400 audit(330.265:506): avc: denied { unmount } for pid=9180 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 330.494024][ T9641] FAULT_INJECTION: forcing a failure. [ 330.494024][ T9641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.633742][ T9641] CPU: 1 UID: 0 PID: 9641 Comm: syz.2.894 Not tainted syzkaller #0 PREEMPT(full) [ 330.633768][ T9641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 330.633778][ T9641] Call Trace: [ 330.633784][ T9641] [ 330.633790][ T9641] dump_stack_lvl+0x16c/0x1f0 [ 330.633819][ T9641] should_fail_ex+0x512/0x640 [ 330.633839][ T9641] _copy_to_user+0x32/0xd0 [ 330.633857][ T9641] simple_read_from_buffer+0xcb/0x170 [ 330.633876][ T9641] proc_fail_nth_read+0x197/0x240 [ 330.633888][ T9641] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 330.633901][ T9641] ? rw_verify_area+0xcf/0x6c0 [ 330.633916][ T9641] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 330.633927][ T9641] vfs_read+0x1e4/0xcf0 [ 330.633945][ T9641] ? __pfx___mutex_lock+0x10/0x10 [ 330.633955][ T9641] ? __pfx_vfs_read+0x10/0x10 [ 330.633977][ T9641] ? __fget_files+0x20e/0x3c0 [ 330.633991][ T9641] ksys_read+0x12a/0x250 [ 330.634000][ T9641] ? __pfx_ksys_read+0x10/0x10 [ 330.634009][ T9641] ? fput+0x9b/0xd0 [ 330.634023][ T9641] do_syscall_64+0xcd/0xfa0 [ 330.634040][ T9641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.634052][ T9641] RIP: 0033:0x7f7ef8b8d8dc [ 330.634061][ T9641] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 330.634072][ T9641] RSP: 002b:00007f7ef9951030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 330.634083][ T9641] RAX: ffffffffffffffda RBX: 00007f7ef8de5fa0 RCX: 00007f7ef8b8d8dc [ 330.634089][ T9641] RDX: 000000000000000f RSI: 00007f7ef99510a0 RDI: 0000000000000007 [ 330.634096][ T9641] RBP: 00007f7ef9951090 R08: 0000000000000000 R09: 0000000000000000 [ 330.634102][ T9641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.634108][ T9641] R13: 00007f7ef8de6038 R14: 00007f7ef8de5fa0 R15: 00007fffe12d6dc8 [ 330.634124][ T9641] [ 331.146621][ T42] net_ratelimit: 107 callbacks suppressed [ 331.146638][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.425985][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.449136][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.469322][ T9659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.897'. [ 331.488058][ T9659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.496463][ T9659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.515264][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.535144][ T9660] netlink: 16 bytes leftover after parsing attributes in process `syz.9.896'. [ 331.618048][ T9659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.634054][ T9659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.732701][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.7.898'. [ 331.747802][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.7.898'. [ 331.847793][ T9663] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.250209][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.437639][ T9663] tmpfs: Unknown parameter 'm' [ 332.665352][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.714633][ T7026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.613237][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.634323][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.683454][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.713206][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 334.723125][ T9686] netlink: 88 bytes leftover after parsing attributes in process `syz.3.904'. [ 335.373170][ T42] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 336.558341][ T9] net_ratelimit: 7 callbacks suppressed [ 336.558356][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.949564][ T9732] netlink: 24 bytes leftover after parsing attributes in process `syz.7.913'. [ 336.964500][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.973256][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.075721][ T976] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 337.089576][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 337.243104][ T976] usb 10-1: device descriptor read/64, error -32 [ 337.340834][ T9736] FAULT_INJECTION: forcing a failure. [ 337.340834][ T9736] name failslab, interval 1, probability 0, space 0, times 0 [ 337.387571][ T9736] CPU: 1 UID: 0 PID: 9736 Comm: syz.7.915 Not tainted syzkaller #0 PREEMPT(full) [ 337.387601][ T9736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 337.387611][ T9736] Call Trace: [ 337.387616][ T9736] [ 337.387623][ T9736] dump_stack_lvl+0x16c/0x1f0 [ 337.387652][ T9736] should_fail_ex+0x512/0x640 [ 337.387675][ T9736] ? fs_reclaim_acquire+0xae/0x150 [ 337.387697][ T9736] should_failslab+0xc2/0x120 [ 337.387716][ T9736] __kmalloc_noprof+0xdd/0x880 [ 337.387739][ T9736] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 337.387762][ T9736] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 337.387778][ T9736] tomoyo_realpath_from_path+0xc2/0x6e0 [ 337.387799][ T9736] ? tomoyo_profile+0x47/0x60 [ 337.387828][ T9736] tomoyo_path_perm+0x274/0x460 [ 337.387852][ T9736] ? tomoyo_path_perm+0x260/0x460 [ 337.387878][ T9736] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 337.387931][ T9736] ? __pfx___up_read+0x10/0x10 [ 337.387951][ T9736] ? kernfs_dop_revalidate+0x350/0x740 [ 337.387975][ T9736] ? strcmp+0x60/0xb0 [ 337.388003][ T9736] tomoyo_path_unlink+0x91/0xe0 [ 337.388023][ T9736] ? __pfx_tomoyo_path_unlink+0x10/0x10 [ 337.388044][ T9736] ? lookup_dcache+0x66/0x170 [ 337.388070][ T9736] security_path_unlink+0x145/0x2b0 [ 337.388088][ T9736] do_unlinkat+0x463/0x6a0 [ 337.388108][ T9736] ? __pfx_do_unlinkat+0x10/0x10 [ 337.388136][ T9736] ? getname_flags.part.0+0x1c5/0x550 [ 337.388160][ T9736] __x64_sys_unlink+0xc5/0x110 [ 337.388178][ T9736] do_syscall_64+0xcd/0xfa0 [ 337.388205][ T9736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.388221][ T9736] RIP: 0033:0x7f64eeb8eec9 [ 337.388235][ T9736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.388250][ T9736] RSP: 002b:00007f64efb04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 337.388268][ T9736] RAX: ffffffffffffffda RBX: 00007f64eede5fa0 RCX: 00007f64eeb8eec9 [ 337.388279][ T9736] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 337.388290][ T9736] RBP: 00007f64efb04090 R08: 0000000000000000 R09: 0000000000000000 [ 337.388300][ T9736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.388311][ T9736] R13: 00007f64eede6038 R14: 00007f64eede5fa0 R15: 00007fffb571f8b8 [ 337.388338][ T9736] [ 337.388499][ T9736] ERROR: Out of memory at tomoyo_realpath_from_path. [ 337.642460][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.693247][ T976] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 337.771878][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.917'. [ 337.783579][ T9741] netlink: 88 bytes leftover after parsing attributes in process `syz.2.917'. [ 337.976209][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.023409][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.031815][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.203581][ T976] usb 10-1: Using ep0 maxpacket: 16 [ 338.361568][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.920'. [ 338.468930][ T9748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.517616][ T9748] tmpfs: Unknown parameter 'm' [ 338.526347][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.534041][ T976] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.615675][ T976] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.639732][ T976] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 338.679842][ T976] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 338.699479][ T976] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.763923][ T976] usb 10-1: config 0 descriptor?? [ 338.834548][ T5818] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 339.059957][ T9754] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 339.102094][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.111271][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.192734][ T5818] usb 8-1: Using ep0 maxpacket: 8 [ 339.228394][ T5818] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 339.256657][ T5818] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.270361][ T5818] usb 8-1: Product: syz [ 339.277783][ T5818] usb 8-1: Manufacturer: syz [ 339.286320][ T5818] usb 8-1: SerialNumber: syz [ 339.575969][ T9764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39406 sclass=netlink_route_socket pid=9764 comm=syz.9.911 [ 339.731574][ T9762] SELinux: failed to load policy [ 339.744385][ T5818] usb 8-1: config 0 descriptor?? [ 339.759257][ T5818] gspca_main: se401-2.14.0 probing 047d:5003 [ 340.024323][ T9767] SELinux: failed to load policy [ 340.238478][ T5818] gspca_se401: Wrong descriptor type [ 340.409134][ T976] usbhid 10-1:0.0: can't add hid device: -71 [ 340.427348][ T976] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 340.439798][ T976] usb 10-1: USB disconnect, device number 3 [ 340.592027][ T5818] usb 8-1: USB disconnect, device number 3 [ 340.636918][ T30] audit: type=1400 audit(340.605:507): avc: denied { getopt } for pid=9774 comm="syz.8.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 342.009002][ T11] block nbd3: Possible stuck request ffff888026730000: control (read@0,1024B). Runtime 30 seconds [ 342.019695][ T11] block nbd3: Possible stuck request ffff8880267301c0: control (read@1024,1024B). Runtime 30 seconds [ 342.030940][ T11] block nbd3: Possible stuck request ffff888026730380: control (read@2048,1024B). Runtime 30 seconds [ 342.043559][ T11] block nbd3: Possible stuck request ffff888026730540: control (read@3072,1024B). Runtime 30 seconds [ 342.147247][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 342.157588][ T9800] netlink: 88 bytes leftover after parsing attributes in process `syz.2.931'. [ 342.249306][ T42] net_ratelimit: 7 callbacks suppressed [ 342.249323][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.263286][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.273373][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.281604][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.366268][ T9815] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 343.623456][ T5912] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 343.764525][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.806914][ T5912] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 343.830655][ T5912] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.880131][ T5912] usb 8-1: Product: syz [ 343.893418][ T5818] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 343.923704][ T5912] usb 8-1: Manufacturer: syz [ 343.953289][ T5912] usb 8-1: SerialNumber: syz [ 343.980078][ T5912] usb 8-1: config 0 descriptor?? [ 344.056491][ T5818] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 344.071247][ T5818] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.080598][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.093724][ T5818] usb 10-1: Product: syz [ 344.099117][ T5818] usb 10-1: Manufacturer: syz [ 344.109230][ T5818] usb 10-1: SerialNumber: syz [ 344.128733][ T5818] usb 10-1: config 0 descriptor?? [ 344.233140][ T5912] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 344.243464][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.326338][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.335229][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.359505][ T5818] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 344.503169][ T5882] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 344.664615][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 344.675706][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.685588][ T5882] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 344.694707][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.705264][ T5882] usb 3-1: config 0 descriptor?? [ 344.879752][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.171222][ T30] audit: type=1400 audit(345.135:508): avc: denied { read } for pid=9834 comm="syz.2.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 345.570180][ T5882] usbhid 3-1:0.0: can't add hid device: -71 [ 345.584172][ T5882] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 345.913487][ T5818] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 345.919407][ T5912] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 345.935823][ T5882] usb 3-1: USB disconnect, device number 20 [ 345.938094][ T5818] usb 10-1: USB disconnect, device number 4 [ 346.014421][ T5912] usb 8-1: USB disconnect, device number 4 [ 346.368431][ T9852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.945'. [ 346.493229][ T976] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 346.525283][ T9857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 346.534784][ T9857] netlink: 88 bytes leftover after parsing attributes in process `syz.2.946'. [ 346.663278][ T976] usb 9-1: Using ep0 maxpacket: 8 [ 346.776310][ T976] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 346.830161][ T976] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.883350][ T976] usb 9-1: Product: syz [ 346.887559][ T976] usb 9-1: Manufacturer: syz [ 346.910831][ T976] usb 9-1: SerialNumber: syz [ 346.929630][ T976] usb 9-1: config 0 descriptor?? [ 347.013148][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.7.948'. [ 347.022357][ T9864] netlink: 12 bytes leftover after parsing attributes in process `syz.7.948'. [ 347.041064][ T976] gspca_main: se401-2.14.0 probing 047d:5003 [ 347.331874][ T9866] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 347.344970][ T9866] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 347.377364][ T9866] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 347.389605][ T9866] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 347.416030][ T9866] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 347.428359][ T9866] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 347.451730][ T9866] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 347.463225][ T9866] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 347.473551][ T9866] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 347.618665][ T9864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 347.804743][ T5882] net_ratelimit: 8 callbacks suppressed [ 347.804760][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.842963][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.937626][ T976] gspca_se401: Wrong descriptor type [ 347.955769][ T9870] tmpfs: Unknown parameter 'm' [ 348.802142][ T5818] usb 9-1: USB disconnect, device number 3 [ 348.854588][ T9880] netlink: 16 bytes leftover after parsing attributes in process `syz.7.952'. [ 348.877670][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.886027][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.888914][ T9880] netlink: 'syz.7.952': attribute type 1 has an invalid length. [ 348.923517][ T9880] netlink: 224 bytes leftover after parsing attributes in process `syz.7.952'. [ 349.834797][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.914473][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.922843][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.930945][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.005937][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.043452][ T9898] netlink: 24 bytes leftover after parsing attributes in process `syz.8.956'. [ 350.163464][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.293360][ T976] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 350.433435][ T976] usb 3-1: device descriptor read/64, error -71 [ 350.609373][ T9910] FAULT_INJECTION: forcing a failure. [ 350.609373][ T9910] name failslab, interval 1, probability 0, space 0, times 0 [ 350.623242][ T9910] CPU: 0 UID: 0 PID: 9910 Comm: syz.8.958 Not tainted syzkaller #0 PREEMPT(full) [ 350.623258][ T9910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 350.623264][ T9910] Call Trace: [ 350.623268][ T9910] [ 350.623272][ T9910] dump_stack_lvl+0x16c/0x1f0 [ 350.623293][ T9910] should_fail_ex+0x512/0x640 [ 350.623311][ T9910] should_failslab+0xc2/0x120 [ 350.623324][ T9910] kmem_cache_alloc_noprof+0x75/0x6e0 [ 350.623340][ T9910] ? skb_clone+0x190/0x3f0 [ 350.623359][ T9910] ? skb_clone+0x190/0x3f0 [ 350.623373][ T9910] skb_clone+0x190/0x3f0 [ 350.623396][ T9910] netlink_deliver_tap+0xabd/0xd30 [ 350.623416][ T9910] netlink_dump+0x881/0xd30 [ 350.623433][ T9910] ? __pfx_netlink_dump+0x10/0x10 [ 350.623460][ T9910] __netlink_dump_start+0x6d6/0x990 [ 350.623478][ T9910] xsk_diag_handler_dump+0x1aa/0x240 [ 350.623495][ T9910] ? __pfx_xsk_diag_handler_dump+0x10/0x10 [ 350.623512][ T9910] ? __pfx_xsk_diag_dump+0x10/0x10 [ 350.623533][ T9910] ? sock_diag_lock_handler+0x10f/0x2e0 [ 350.623551][ T9910] sock_diag_rcv_msg+0x438/0x790 [ 350.623566][ T9910] netlink_rcv_skb+0x158/0x420 [ 350.623576][ T9910] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 350.623591][ T9910] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 350.623606][ T9910] ? netlink_deliver_tap+0x1ae/0xd30 [ 350.623625][ T9910] netlink_unicast+0x5a7/0x870 [ 350.623636][ T9910] ? __pfx_netlink_unicast+0x10/0x10 [ 350.623651][ T9910] netlink_sendmsg+0x8c8/0xdd0 [ 350.623663][ T9910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.623678][ T9910] sock_write_iter+0x566/0x610 [ 350.623690][ T9910] ? __pfx_sock_write_iter+0x10/0x10 [ 350.623707][ T9910] ? __pfx_file_has_perm+0x10/0x10 [ 350.623724][ T9910] do_iter_readv_writev+0x65f/0x9e0 [ 350.623741][ T9910] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 350.623756][ T9910] ? selinux_file_permission+0x126/0x660 [ 350.623768][ T9910] ? bpf_lsm_file_permission+0x9/0x10 [ 350.623781][ T9910] ? security_file_permission+0x71/0x210 [ 350.623793][ T9910] ? rw_verify_area+0xcf/0x6c0 [ 350.623809][ T9910] vfs_writev+0x35f/0xde0 [ 350.623826][ T9910] ? __lock_acquire+0x62e/0x1ce0 [ 350.623844][ T9910] ? __pfx_vfs_writev+0x10/0x10 [ 350.623870][ T9910] ? __fget_files+0x20e/0x3c0 [ 350.623879][ T9910] ? __fget_files+0x180/0x3c0 [ 350.623892][ T9910] ? do_writev+0x28c/0x340 [ 350.623906][ T9910] do_writev+0x28c/0x340 [ 350.623921][ T9910] ? __pfx_do_writev+0x10/0x10 [ 350.623940][ T9910] do_syscall_64+0xcd/0xfa0 [ 350.623957][ T9910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.623968][ T9910] RIP: 0033:0x7efd5bb8eec9 [ 350.623977][ T9910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.623988][ T9910] RSP: 002b:00007efd5ca98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 350.623999][ T9910] RAX: ffffffffffffffda RBX: 00007efd5bde5fa0 RCX: 00007efd5bb8eec9 [ 350.624006][ T9910] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 350.624012][ T9910] RBP: 00007efd5ca98090 R08: 0000000000000000 R09: 0000000000000000 [ 350.624018][ T9910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.624024][ T9910] R13: 00007efd5bde6038 R14: 00007efd5bde5fa0 R15: 00007ffecfde74a8 [ 350.624038][ T9910] [ 350.946617][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.027126][ T976] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 351.144650][ T5131] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 351.154350][ T5131] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 351.163653][ T976] usb 3-1: device descriptor read/64, error -71 [ 351.170158][ T5131] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 351.182962][ T5131] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 351.193955][ T5131] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 351.284878][ T976] usb usb3-port1: attempt power cycle [ 351.290422][ T11] block nbd0: Possible stuck request ffff88802662e000: control (read@0,1024B). Runtime 150 seconds [ 351.301756][ T11] block nbd0: Possible stuck request ffff88802662e1c0: control (read@1024,1024B). Runtime 150 seconds [ 351.453095][ T11] block nbd0: Possible stuck request ffff88802662e380: control (read@2048,1024B). Runtime 150 seconds [ 351.464441][ T11] block nbd0: Possible stuck request ffff88802662e540: control (read@3072,1024B). Runtime 150 seconds [ 351.713451][ T976] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 351.760176][ T976] usb 3-1: device descriptor read/8, error -71 [ 352.075886][ T976] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 352.408951][ T976] usb 3-1: device descriptor read/8, error -71 [ 352.425493][ T9915] chnl_net:caif_netlink_parms(): no params data found [ 352.781935][ T976] usb usb3-port1: unable to enumerate USB device [ 352.809758][ T9915] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.828022][ T9915] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.843945][ T9915] bridge_slave_0: entered allmulticast mode [ 352.851970][ T9915] bridge_slave_0: entered promiscuous mode [ 352.870806][ T9915] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.878101][ T9] net_ratelimit: 4 callbacks suppressed [ 352.878114][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.894202][ T9915] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.901536][ T9915] bridge_slave_1: entered allmulticast mode [ 352.912135][ T9915] bridge_slave_1: entered promiscuous mode [ 352.982162][ T9915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.994762][ T9915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.198638][ T9915] team0: Port device team_slave_0 added [ 353.205211][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.231664][ T9915] team0: Port device team_slave_1 added [ 353.257405][ T9945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.965'. [ 353.267432][ T9945] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 353.275279][ T9945] netlink: 224 bytes leftover after parsing attributes in process `syz.2.965'. [ 353.283128][ T5131] Bluetooth: hci8: command tx timeout [ 353.437103][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.445913][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.461932][ T9915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.510302][ T9915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.536300][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.543725][ T9915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.585332][ T9915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.592346][ T9915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.618318][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.633145][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 353.747644][ T9915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.873768][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 353.884780][ T9] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 353.897210][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.946445][ T9915] hsr_slave_0: entered promiscuous mode [ 353.952162][ T9] usb 10-1: Product: syz [ 353.958147][ T9] usb 10-1: Manufacturer: syz [ 353.958509][ T9915] hsr_slave_1: entered promiscuous mode [ 353.962893][ T9] usb 10-1: SerialNumber: syz [ 353.975907][ T9915] debugfs: 'hsr0' already exists in 'hsr' [ 353.984104][ T9] usb 10-1: config 0 descriptor?? [ 353.989239][ T9915] Cannot create hsr debugfs directory [ 353.997322][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 354.439337][ T9] gspca_se401: Wrong descriptor type [ 354.473802][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.476330][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.490830][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.503561][ T8397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.119981][ T8397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.274345][ T3503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.353285][ T5131] Bluetooth: hci8: command tx timeout [ 355.486314][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.973'. [ 356.275811][ T9982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.343305][ T9] usb 10-1: USB disconnect, device number 5 [ 356.580076][ T9982] tmpfs: Unknown parameter 'm' [ 356.853616][ T30] audit: type=1400 audit(356.805:509): avc: denied { connect } for pid=9993 comm="syz.7.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 357.053577][ T30] audit: type=1400 audit(356.805:510): avc: denied { read } for pid=9993 comm="syz.7.975" path="socket:[28294]" dev="sockfs" ino=28294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 357.118611][ T9915] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 357.247922][ T9915] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 357.381517][ T9915] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 357.443388][ T5131] Bluetooth: hci8: command tx timeout [ 357.564908][ T9915] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 358.115014][T10039] virtiofs: Unknown parameter 'always 1 V3 [ 358.115014][T10039] 010000E0 1 0:00000000 0 [ 358.115014][T10039] 18 nlmon0 : 1 V3 [ 358.115014][T10039] 010000E0 1 0:00000000 0 [ 358.115014][T10039] 20 batadv0 : 1 V3 [ 358.115014][T10039] 010000E0 1 0:00000000 0 [ 358.115014][T10039] 21 vxcan0 : 1 V3 [ 358.115014][T10039] 010000E0 1 0:00000000 0 [ 358.115014][T10039] 22 vxcan1 : ' [ 358.158645][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.549328][ T9915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.562331][ T9915] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.585567][ T9915] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 358.609589][ T9915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.644250][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.651342][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.753477][T10046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.834215][ T979] net_ratelimit: 9 callbacks suppressed [ 358.834229][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.834800][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.854955][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.864661][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.276789][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.289884][ T3503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.354747][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.518397][ T5131] Bluetooth: hci8: command tx timeout [ 359.937235][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.945579][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.230090][ T9915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.249703][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.369975][ T9915] veth0_vlan: entered promiscuous mode [ 360.440420][ T9915] veth1_vlan: entered promiscuous mode [ 360.489355][ T9915] veth0_macvtap: entered promiscuous mode [ 360.499148][ T9915] veth1_macvtap: entered promiscuous mode [ 360.523457][T10083] loop6: detected capacity change from 0 to 524287999 [ 360.556068][ T9915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.579346][ T9915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.611029][ T8397] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.652327][ T8397] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.731525][ T8397] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.813192][ T5818] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 360.830889][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.8.984'. [ 360.840938][T10092] netlink: 12 bytes leftover after parsing attributes in process `syz.8.984'. [ 360.854367][ T8397] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.879273][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.889650][ T3503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.003303][ T5818] usb 8-1: Using ep0 maxpacket: 8 [ 361.015142][ T5818] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 361.028992][ T5818] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.037167][ T5818] usb 8-1: Product: syz [ 361.041409][ T5818] usb 8-1: Manufacturer: syz [ 361.142927][ T5818] usb 8-1: SerialNumber: syz [ 361.169947][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.181933][ T5818] usb 8-1: config 0 descriptor?? [ 361.198391][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.219059][ T5818] gspca_main: se401-2.14.0 probing 047d:5003 [ 361.224203][T10104] FAULT_INJECTION: forcing a failure. [ 361.224203][T10104] name failslab, interval 1, probability 0, space 0, times 0 [ 361.261148][ T8397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.269074][ T8397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.278806][T10104] CPU: 1 UID: 0 PID: 10104 Comm: syz.2.987 Not tainted syzkaller #0 PREEMPT(full) [ 361.278835][T10104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 361.278845][T10104] Call Trace: [ 361.278850][T10104] [ 361.278857][T10104] dump_stack_lvl+0x16c/0x1f0 [ 361.278888][T10104] should_fail_ex+0x512/0x640 [ 361.278913][T10104] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 361.278941][T10104] should_failslab+0xc2/0x120 [ 361.278961][T10104] kmem_cache_alloc_node_noprof+0x78/0x770 [ 361.278985][T10104] ? __alloc_skb+0x2b2/0x380 [ 361.279013][T10104] ? __alloc_skb+0x2b2/0x380 [ 361.279033][T10104] ? __pfx_netlink_insert+0x10/0x10 [ 361.279057][T10104] __alloc_skb+0x2b2/0x380 [ 361.279079][T10104] ? __pfx___alloc_skb+0x10/0x10 [ 361.279102][T10104] ? netlink_autobind.isra.0+0x158/0x370 [ 361.279136][T10104] netlink_alloc_large_skb+0x69/0x140 [ 361.279153][T10104] netlink_sendmsg+0x698/0xdd0 [ 361.279173][T10104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.279199][T10104] ____sys_sendmsg+0xa95/0xc70 [ 361.279219][T10104] ? copy_msghdr_from_user+0x10a/0x160 [ 361.279244][T10104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.279274][T10104] ___sys_sendmsg+0x134/0x1d0 [ 361.279300][T10104] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.279355][T10104] __sys_sendmsg+0x16d/0x220 [ 361.279380][T10104] ? __pfx___sys_sendmsg+0x10/0x10 [ 361.279421][T10104] do_syscall_64+0xcd/0xfa0 [ 361.279447][T10104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.279463][T10104] RIP: 0033:0x7f7ef8b8eec9 [ 361.279477][T10104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.279494][T10104] RSP: 002b:00007f7ef6dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.279511][T10104] RAX: ffffffffffffffda RBX: 00007f7ef8de6180 RCX: 00007f7ef8b8eec9 [ 361.279521][T10104] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 361.279531][T10104] RBP: 00007f7ef6dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 361.279542][T10104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.279552][T10104] R13: 00007f7ef8de6218 R14: 00007f7ef8de6180 R15: 00007fffe12d6dc8 [ 361.279576][T10104] [ 361.616225][ T5818] gspca_se401: Wrong descriptor type [ 361.880874][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'. [ 361.891358][T10117] netlink: 88 bytes leftover after parsing attributes in process `syz.1.959'. [ 362.309019][T10130] netlink: 56 bytes leftover after parsing attributes in process `syz.8.989'. [ 362.942868][ T30] audit: type=1400 audit(362.815:511): avc: denied { mount } for pid=10135 comm="syz.9.992" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 363.529043][ T5912] usb 8-1: USB disconnect, device number 5 [ 363.563418][ T976] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 363.764736][ T976] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 363.899107][ T976] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.939377][ T976] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 364.095579][ T979] net_ratelimit: 8 callbacks suppressed [ 364.095597][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.110104][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.359076][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.377930][ T976] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.386121][ T976] usb 10-1: Product: syz [ 364.390942][ T976] usb 10-1: Manufacturer: syz [ 364.401712][ T3503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.410307][ T976] usb 10-1: SerialNumber: syz [ 365.316654][ T976] usb 10-1: 0:2 : does not exist [ 365.339449][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.349562][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.353953][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.529748][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.538071][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.574982][ T30] audit: type=1400 audit(365.525:512): avc: denied { bind } for pid=10165 comm="syz.7.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 365.623791][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.9.993'. [ 365.630605][T10162] syzkaller1: entered promiscuous mode [ 365.638467][T10162] syzkaller1: entered allmulticast mode [ 365.963752][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1000'. [ 365.974973][T10175] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1000'. [ 366.007433][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.363436][ T976] usb 10-1: USB disconnect, device number 6 [ 366.806857][ T30] audit: type=1400 audit(366.765:513): avc: denied { append } for pid=10182 comm="syz.2.1003" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 367.153397][ T5874] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 367.317360][ T5874] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 367.351986][ T5874] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 367.418937][ T5874] usb 2-1: Product: syz [ 367.434040][ T5874] usb 2-1: Manufacturer: syz [ 367.456929][ T5874] usb 2-1: SerialNumber: syz [ 367.494098][ T5874] usb 2-1: config 0 descriptor?? [ 367.530262][ T5874] ch341 2-1:0.0: ch341-uart converter detected [ 367.812675][ T5874] usb 2-1: failed to receive control message: -121 [ 367.821727][ T5874] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 367.939024][T10214] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 367.951611][T10214] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 367.970945][T10214] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 367.982675][T10214] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 368.001617][T10214] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 368.012697][T10214] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 368.027338][T10214] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 368.038260][T10214] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 368.047861][T10214] UDF-fs: warning (device nbd9): udf_fill_super: No partition found (1) [ 369.150209][ T5874] usb 2-1: USB disconnect, device number 5 [ 369.166731][ T5874] ch341 2-1:0.0: device disconnected [ 369.183652][ T30] audit: type=1400 audit(369.155:514): avc: denied { map } for pid=10204 comm="syz.8.1008" path="socket:[29779]" dev="sockfs" ino=29779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 369.212424][T10224] mkiss: ax0: crc mode is auto. [ 369.237747][T10224] tipc: Can't bind to reserved service type 0 [ 369.547486][ T6717] net_ratelimit: 10 callbacks suppressed [ 369.547504][ T6717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.710770][T10234] syzkaller1: entered promiscuous mode [ 369.723754][T10234] syzkaller1: entered allmulticast mode [ 370.003610][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.011877][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.034388][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.044057][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.278667][T10258] FAULT_INJECTION: forcing a failure. [ 371.278667][T10258] name failslab, interval 1, probability 0, space 0, times 0 [ 371.358770][T10258] CPU: 0 UID: 0 PID: 10258 Comm: syz.1.1025 Not tainted syzkaller #0 PREEMPT(full) [ 371.358797][T10258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 371.358807][T10258] Call Trace: [ 371.358814][T10258] [ 371.358820][T10258] dump_stack_lvl+0x16c/0x1f0 [ 371.358852][T10258] should_fail_ex+0x512/0x640 [ 371.358884][T10258] should_failslab+0xc2/0x120 [ 371.358904][T10258] __kmalloc_cache_node_noprof+0x75/0x7a0 [ 371.358920][T10258] ? __get_vm_area_node+0x101/0x330 [ 371.358938][T10258] ? __lock_acquire+0xb97/0x1ce0 [ 371.358968][T10258] ? __get_vm_area_node+0x101/0x330 [ 371.358982][T10258] __get_vm_area_node+0x101/0x330 [ 371.358997][T10258] __vmalloc_node_range_noprof+0x271/0x1480 [ 371.359010][T10258] ? sel_write_load+0x2ac/0x1bd0 [ 371.359030][T10258] ? sel_write_load+0x2ac/0x1bd0 [ 371.359047][T10258] ? irqentry_exit+0x3b/0x90 [ 371.359064][T10258] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 371.359077][T10258] ? sel_write_load+0x2ac/0x1bd0 [ 371.359093][T10258] ? sel_write_load+0x2ac/0x1bd0 [ 371.359109][T10258] ? sel_write_load+0x2ac/0x1bd0 [ 371.359123][T10258] __vmalloc_node_noprof+0xad/0xf0 [ 371.359136][T10258] ? sel_write_load+0x2ac/0x1bd0 [ 371.359152][T10258] sel_write_load+0x2ac/0x1bd0 [ 371.359171][T10258] ? __pfx___schedule+0x10/0x10 [ 371.359186][T10258] ? __lock_acquire+0xb97/0x1ce0 [ 371.359203][T10258] ? __pfx_sel_write_load+0x10/0x10 [ 371.359219][T10258] ? mark_held_locks+0x49/0x80 [ 371.359235][T10258] ? irqentry_exit+0x3b/0x90 [ 371.359250][T10258] ? lockdep_hardirqs_on+0x7c/0x110 [ 371.359265][T10258] ? preempt_schedule_thunk+0x16/0x30 [ 371.359282][T10258] ? preempt_schedule_common+0x44/0xc0 [ 371.359306][T10258] ? preempt_schedule_thunk+0x16/0x30 [ 371.359330][T10258] ? __pfx_sel_write_load+0x10/0x10 [ 371.359349][T10258] vfs_writev+0x5dc/0xde0 [ 371.359369][T10258] ? __pfx_vfs_writev+0x10/0x10 [ 371.359384][T10258] ? __mutex_lock+0x1c5/0x1060 [ 371.359392][T10258] ? rcu_is_watching+0x12/0xc0 [ 371.359406][T10258] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 371.359424][T10258] ? __pfx___mutex_lock+0x10/0x10 [ 371.359438][T10258] ? __fget_files+0x20e/0x3c0 [ 371.359448][T10258] ? __fget_files+0x180/0x3c0 [ 371.359466][T10258] ? do_writev+0x132/0x340 [ 371.359480][T10258] do_writev+0x132/0x340 [ 371.359495][T10258] ? __pfx_do_writev+0x10/0x10 [ 371.359515][T10258] do_syscall_64+0xcd/0xfa0 [ 371.359532][T10258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.359543][T10258] RIP: 0033:0x7fc8e398eec9 [ 371.359551][T10258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.359561][T10258] RSP: 002b:00007fc8e48de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 371.359572][T10258] RAX: ffffffffffffffda RBX: 00007fc8e3be5fa0 RCX: 00007fc8e398eec9 [ 371.359579][T10258] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000006 [ 371.359585][T10258] RBP: 00007fc8e48de090 R08: 0000000000000000 R09: 0000000000000000 [ 371.359590][T10258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.359596][T10258] R13: 00007fc8e3be6038 R14: 00007fc8e3be5fa0 R15: 00007ffc8bd96b98 [ 371.359611][T10258] [ 371.362028][T10258] syz.1.1025: vmalloc error: size 1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 371.781165][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.801249][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.814329][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.822470][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.836382][T10258] ,cpuset=/,mems_allowed=0-1 [ 372.073863][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.151853][T10258] [ 372.171054][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1023'. [ 372.180529][T10258] CPU: 0 UID: 0 PID: 10258 Comm: syz.1.1025 Not tainted syzkaller #0 PREEMPT(full) [ 372.180545][T10258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 372.180551][T10258] Call Trace: [ 372.180556][T10258] [ 372.180560][T10258] dump_stack_lvl+0x16c/0x1f0 [ 372.180580][T10258] warn_alloc+0x248/0x3a0 [ 372.180598][T10258] ? __pfx_warn_alloc+0x10/0x10 [ 372.180612][T10258] ? rcu_is_watching+0x12/0xc0 [ 372.180626][T10258] ? trace_kmalloc+0x2b/0xd0 [ 372.180637][T10258] ? __get_vm_area_node+0x101/0x330 [ 372.180648][T10258] ? __lock_acquire+0xb97/0x1ce0 [ 372.180666][T10258] ? __kasan_kmalloc+0x8a/0xb0 [ 372.180677][T10258] ? __get_vm_area_node+0x208/0x330 [ 372.180694][T10258] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 372.180712][T10258] ? sel_write_load+0x2ac/0x1bd0 [ 372.180730][T10258] ? irqentry_exit+0x3b/0x90 [ 372.180746][T10258] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 372.180760][T10258] ? sel_write_load+0x2ac/0x1bd0 [ 372.180776][T10258] ? sel_write_load+0x2ac/0x1bd0 [ 372.180791][T10258] ? sel_write_load+0x2ac/0x1bd0 [ 372.180805][T10258] __vmalloc_node_noprof+0xad/0xf0 [ 372.180818][T10258] ? sel_write_load+0x2ac/0x1bd0 [ 372.180837][T10258] sel_write_load+0x2ac/0x1bd0 [ 372.180867][T10258] ? __pfx___schedule+0x10/0x10 [ 372.180888][T10258] ? __lock_acquire+0xb97/0x1ce0 [ 372.180913][T10258] ? __pfx_sel_write_load+0x10/0x10 [ 372.180937][T10258] ? mark_held_locks+0x49/0x80 [ 372.180962][T10258] ? irqentry_exit+0x3b/0x90 [ 372.180983][T10258] ? lockdep_hardirqs_on+0x7c/0x110 [ 372.180999][T10258] ? preempt_schedule_thunk+0x16/0x30 [ 372.181013][T10258] ? preempt_schedule_common+0x44/0xc0 [ 372.181029][T10258] ? preempt_schedule_thunk+0x16/0x30 [ 372.181044][T10258] ? __pfx_sel_write_load+0x10/0x10 [ 372.181058][T10258] vfs_writev+0x5dc/0xde0 [ 372.181078][T10258] ? __pfx_vfs_writev+0x10/0x10 [ 372.181092][T10258] ? __mutex_lock+0x1c5/0x1060 [ 372.181101][T10258] ? rcu_is_watching+0x12/0xc0 [ 372.181114][T10258] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 372.181132][T10258] ? __pfx___mutex_lock+0x10/0x10 [ 372.181146][T10258] ? __fget_files+0x20e/0x3c0 [ 372.181156][T10258] ? __fget_files+0x180/0x3c0 [ 372.181169][T10258] ? do_writev+0x132/0x340 [ 372.181183][T10258] do_writev+0x132/0x340 [ 372.181198][T10258] ? __pfx_do_writev+0x10/0x10 [ 372.181217][T10258] do_syscall_64+0xcd/0xfa0 [ 372.181234][T10258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.181245][T10258] RIP: 0033:0x7fc8e398eec9 [ 372.181254][T10258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.181264][T10258] RSP: 002b:00007fc8e48de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 372.181276][T10258] RAX: ffffffffffffffda RBX: 00007fc8e3be5fa0 RCX: 00007fc8e398eec9 [ 372.181282][T10258] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000006 [ 372.181289][T10258] RBP: 00007fc8e48de090 R08: 0000000000000000 R09: 0000000000000000 [ 372.181295][T10258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.181301][T10258] R13: 00007fc8e3be6038 R14: 00007fc8e3be5fa0 R15: 00007ffc8bd96b98 [ 372.181316][T10258] [ 372.181324][T10258] Mem-Info: [ 372.234431][T10263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.386658][T10264] tmpfs: Unknown parameter 'm' [ 372.553418][ T11] block nbd3: Possible stuck request ffff888026730000: control (read@0,1024B). Runtime 60 seconds [ 372.566326][ T11] block nbd3: Possible stuck request ffff8880267301c0: control (read@1024,1024B). Runtime 60 seconds [ 372.578528][ T11] block nbd3: Possible stuck request ffff888026730380: control (read@2048,1024B). Runtime 60 seconds [ 372.590433][ T11] block nbd3: Possible stuck request ffff888026730540: control (read@3072,1024B). Runtime 60 seconds [ 372.608005][T10258] active_anon:19238 inactive_anon:0 isolated_anon:0 [ 372.608005][T10258] active_file:17720 inactive_file:41415 isolated_file:4 [ 372.608005][T10258] unevictable:768 dirty:674 writeback:0 [ 372.608005][T10258] slab_reclaimable:12741 slab_unreclaimable:114557 [ 372.608005][T10258] mapped:68690 shmem:7099 pagetables:1449 [ 372.608005][T10258] sec_pagetables:0 bounce:0 [ 372.608005][T10258] kernel_misc_reclaimable:0 [ 372.608005][T10258] free:1213599 free_pcp:19113 free_cma:0 [ 372.655141][T10258] Node 0 active_anon:76952kB inactive_anon:0kB active_file:70880kB inactive_file:165396kB unevictable:1536kB isolated(anon):0kB isolated(file):16kB mapped:274728kB dirty:2696kB writeback:0kB shmem:26860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13776kB pagetables:5648kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 372.689032][T10258] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 372.736136][T10258] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 372.739578][T10274] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 372.768451][T10258] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 372.782306][T10258] Node 0 DMA32 free:949204kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:77052kB inactive_anon:0kB active_file:70880kB inactive_file:165396kB unevictable:1536kB writepending:2696kB zspages:0kB present:3129332kB managed:2541400kB mlocked:0kB bounce:0kB free_pcp:52120kB local_pcp:27172kB free_cma:0kB [ 372.795240][T10274] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 372.838588][T10258] lowmem_reserve[]: 0 0 1 1 1 [ 372.844352][T10274] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 372.845353][T10258] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 372.873997][T10274] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 372.916413][T10274] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 372.939262][T10274] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 372.950328][T10274] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 372.971804][T10274] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 372.981769][T10274] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 372.983227][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 373.020834][T10258] lowmem_reserve[]: 0 0 0 0 0 [ 373.025940][T10258] Node 1 Normal free:3889832kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:264kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24484kB local_pcp:15356kB free_cma:0kB [ 373.067792][T10258] lowmem_reserve[]: 0 0 0 0 0 [ 373.072512][T10258] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 373.244089][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 373.479223][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 373.493073][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 373.497153][T10258] Node 0 DMA32: 1511*4kB (UME) 372*8kB (UME) 223*16kB (UME) 126*32kB (UME) 34*64kB (UME) 45*128kB (UM) 48*256kB (UM) 16*512kB (UM) 6*1024kB (UME) 5*2048kB (UM) 218*4096kB (M) = 954348kB [ 373.588721][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.602507][T10258] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 373.618802][T10258] Node 1 Normal: 13*4kB (UME) 30*8kB (UME) 54*16kB (UME) [ 373.686810][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 373.704522][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.712556][ T10] usb 3-1: Product: syz [ 373.717178][ T10] usb 3-1: Manufacturer: syz [ 373.722813][ T10] usb 3-1: SerialNumber: syz [ 373.730849][ T10] usb 3-1: config 0 descriptor?? [ 373.742884][T10258] 39*32kB (UME) 7*64kB (ME) 3*128kB (ME) 5*256kB (UME) 1*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3890084kB [ 373.749976][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 373.767996][ T10] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 374.103479][T10258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 374.117253][T10258] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 374.126916][T10258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 374.146208][T10258] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 374.156758][T10258] 66237 total pagecache pages [ 374.161851][T10258] 0 pages in swap cache [ 374.167667][T10258] Free swap = 124996kB [ 374.171853][T10258] Total swap = 124996kB [ 374.176604][T10258] 2097051 pages RAM [ 374.180540][T10258] 0 pages HighMem/MovableOnly [ 374.219565][T10258] 429675 pages reserved [ 374.225305][T10258] 0 pages cma reserved [ 374.234358][T10281] SELinux: policydb version -1109844251 does not match my version range 15-35 [ 374.247173][T10281] SELinux: failed to load policy [ 374.379745][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (53) [ 374.886601][ T13] net_ratelimit: 12 callbacks suppressed [ 374.886620][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.904911][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.923721][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.966055][ T3503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.994153][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.994716][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.002422][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.019818][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.054739][ T10] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 375.065018][ T10] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 375.194144][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.202317][ T10] em28xx 3-1:0.0: No AC97 audio processor [ 375.203549][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.212125][ T10] usb 3-1: USB disconnect, device number 25 [ 375.226291][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 375.234128][ T10] em28xx 3-1:0.0: Freeing device [ 375.451606][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'. [ 375.543741][T10313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.847656][ T30] audit: type=1400 audit(375.815:515): avc: denied { read } for pid=10315 comm="syz.8.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 376.267031][T10308] tmpfs: Unknown parameter 'm' [ 376.271941][ T30] audit: type=1326 audit(375.895:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef8b8eec9 code=0x7ffc0000 [ 376.305841][ T30] audit: type=1326 audit(375.895:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef8b8eec9 code=0x7ffc0000 [ 376.347888][ T30] audit: type=1326 audit(375.895:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f7ef8b8eec9 code=0x7ffc0000 [ 376.402198][ T30] audit: type=1326 audit(375.895:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef8b8eec9 code=0x7ffc0000 [ 376.517809][ T30] audit: type=1326 audit(375.895:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7ef8b8eec9 code=0x7ffc0000 [ 376.540641][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.549774][ T30] audit: type=1326 audit(375.905:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef8b8eec9 code=0x7ffc0000 [ 376.572546][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.579923][ T30] audit: type=1326 audit(375.905:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef8b8eec9 code=0x7ffc0000 [ 376.707894][T10328] virtiofs: Unknown parameter 'always 1 V3 [ 376.707894][T10328] 010000E0 1 0:00000000 0 [ 376.707894][T10328] 18 nlmon0 : 1 V3 [ 376.707894][T10328] 010000E0 1 0:00000000 0 [ 376.707894][T10328] 20 batadv0 : 1 V3 [ 376.707894][T10328] 010000E0 1 0:00000000 0 [ 376.707894][T10328] 21 vxcan0 : 1 V3 [ 376.707894][T10328] 010000E0 1 0:00000000 0 [ 376.707894][T10328] 22 vxcan1 : ' [ 376.751538][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.035376][ T30] audit: type=1326 audit(375.905:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ef8b8eec9 code=0x7ffc0000 [ 377.058069][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.073080][ T30] audit: type=1326 audit(375.905:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef8b8eec9 code=0x7ffc0000 [ 377.352020][T10332] SELinux: policydb version -1109844251 does not match my version range 15-35 [ 377.361186][T10332] SELinux: failed to load policy [ 377.377623][T10335] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1044'. [ 377.429791][T10340] FAULT_INJECTION: forcing a failure. [ 377.429791][T10340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.444858][T10340] CPU: 0 UID: 0 PID: 10340 Comm: syz.7.1047 Not tainted syzkaller #0 PREEMPT(full) [ 377.444884][T10340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 377.444894][T10340] Call Trace: [ 377.444900][T10340] [ 377.444906][T10340] dump_stack_lvl+0x16c/0x1f0 [ 377.444937][T10340] should_fail_ex+0x512/0x640 [ 377.444966][T10340] _copy_to_user+0x32/0xd0 [ 377.444995][T10340] simple_read_from_buffer+0xcb/0x170 [ 377.445024][T10340] proc_fail_nth_read+0x197/0x240 [ 377.445044][T10340] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.445065][T10340] ? rw_verify_area+0xcf/0x6c0 [ 377.445088][T10340] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.445106][T10340] vfs_read+0x1e4/0xcf0 [ 377.445134][T10340] ? __pfx___mutex_lock+0x10/0x10 [ 377.445150][T10340] ? __pfx_vfs_read+0x10/0x10 [ 377.445181][T10340] ? __fget_files+0x20e/0x3c0 [ 377.445206][T10340] ksys_read+0x12a/0x250 [ 377.445219][T10340] ? __pfx_ksys_read+0x10/0x10 [ 377.445234][T10340] ? fput+0x9b/0xd0 [ 377.445260][T10340] do_syscall_64+0xcd/0xfa0 [ 377.445287][T10340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.445305][T10340] RIP: 0033:0x7f64eeb8d8dc [ 377.445319][T10340] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 377.445336][T10340] RSP: 002b:00007f64efb04030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 377.445352][T10340] RAX: ffffffffffffffda RBX: 00007f64eede5fa0 RCX: 00007f64eeb8d8dc [ 377.445363][T10340] RDX: 000000000000000f RSI: 00007f64efb040a0 RDI: 0000000000000007 [ 377.445373][T10340] RBP: 00007f64efb04090 R08: 0000000000000000 R09: 0000000000000000 [ 377.445383][T10340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.445392][T10340] R13: 00007f64eede6038 R14: 00007f64eede5fa0 R15: 00007fffb571f8b8 [ 377.445416][T10340] [ 378.471045][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.477695][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.967023][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'. [ 379.030291][T10359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 379.513967][T10362] SELinux: policydb version -1109844251 does not match my version range 15-35 [ 379.523607][T10362] SELinux: failed to load policy [ 379.600379][T10352] tmpfs: Unknown parameter 'm' [ 379.916717][ T5882] net_ratelimit: 16 callbacks suppressed [ 379.916730][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.074056][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.082641][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.092195][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.252246][T10382] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=10382 comm=syz.9.1060 [ 380.376936][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 380.543616][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 380.544430][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.565839][ T10] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 380.809914][ T3503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.821255][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.030736][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.046108][ T10] usb 9-1: Product: syz [ 381.052268][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.060374][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.061202][ T10] usb 9-1: Manufacturer: syz [ 381.073396][ T10] usb 9-1: SerialNumber: syz [ 381.104620][ T10] usb 9-1: config 0 descriptor?? [ 381.119736][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 381.272425][T10395] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10395 comm=syz.2.1064 [ 381.294474][T10395] netlink: 'syz.2.1064': attribute type 2 has an invalid length. [ 381.329127][T10395] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1064'. [ 381.443921][ T11] block nbd0: Possible stuck request ffff88802662e000: control (read@0,1024B). Runtime 180 seconds [ 381.463057][ T11] block nbd0: Possible stuck request ffff88802662e1c0: control (read@1024,1024B). Runtime 180 seconds [ 381.465795][T10395] nbd: must specify a device to reconfigure [ 381.523473][ T11] block nbd0: Possible stuck request ffff88802662e380: control (read@2048,1024B). Runtime 180 seconds [ 381.566377][ T11] block nbd0: Possible stuck request ffff88802662e540: control (read@3072,1024B). Runtime 180 seconds [ 381.595050][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.733456][ T10] gspca_se401: Wrong descriptor type [ 381.764245][ T5912] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 382.483392][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 382.505258][ T5912] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 382.534769][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 382.534785][ T30] audit: type=1400 audit(382.505:555): avc: denied { execute } for pid=10408 comm="syz.1.1067" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=30393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 382.535526][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.638047][ T5912] usb 3-1: config 0 descriptor?? [ 382.653253][ T5912] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 382.741215][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 383.027543][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 383.094097][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 383.178980][ T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 383.299729][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1068'. [ 383.330162][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 383.397312][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 383.470893][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 383.541087][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 383.611828][ T10] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 383.698480][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.853704][ T10] usb 8-1: config 0 descriptor?? [ 384.577468][ T10] usb 9-1: USB disconnect, device number 4 [ 384.924182][ T979] net_ratelimit: 12 callbacks suppressed [ 384.924200][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.478827][T10430] SELinux: policydb version -1109844251 does not match my version range 15-35 [ 385.489131][T10430] SELinux: failed to load policy [ 385.833632][ T31] INFO: task syz.4.582:8086 blocked for more than 143 seconds. [ 385.834455][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.841193][ T31] Not tainted syzkaller #0 [ 385.841206][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 385.841213][ T31] task:syz.4.582 state:D stack:25384 pid:8086 tgid:8082 ppid:5806 task_flags:0x400140 flags:0x00080003 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 385.876075][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.889903][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.913731][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.953447][ T24] usb 8-1: USB disconnect, device number 6 [ 385.990729][ T5874] usb 3-1: USB disconnect, device number 26 [ 385.994293][ T31] Call Trace: [ 386.000011][ T31] [ 386.002959][ T31] __schedule+0x1190/0x5de0 [ 386.008436][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.027203][ T31] ? __pfx___schedule+0x10/0x10 [ 386.032095][ T31] ? find_held_lock+0x2b/0x80 [ 386.053049][ T31] ? schedule+0x2d7/0x3a0 [ 386.057483][ T31] schedule+0xe7/0x3a0 [ 386.061564][ T31] io_schedule+0xbf/0x130 [ 386.183290][ T31] folio_wait_bit_common+0x3d5/0x9e0 [ 386.188621][ T31] ? folio_wait_bit_common+0x13a/0x9e0 [ 386.229156][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 386.235576][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 386.241169][ T31] ? __pfx___might_resched+0x10/0x10 [ 386.248005][ T31] ? compaction_free+0x148/0x3c0 [ 386.252983][ T31] migrate_pages_batch+0x1487/0x3bb0 [ 386.258789][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 386.264403][ T31] ? __pfx_compaction_free+0x10/0x10 [ 386.269733][ T31] ? __pfx_migrate_pages_batch+0x10/0x10 [ 386.278288][ T31] migrate_pages_sync+0x4c5/0x8a0 [ 386.283551][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 386.288947][ T31] ? __pfx_compaction_free+0x10/0x10 [ 386.297341][ T31] ? mark_held_locks+0x49/0x80 [ 386.302128][ T31] ? __pfx_migrate_pages_sync+0x10/0x10 [ 386.308240][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 386.317739][ T31] migrate_pages+0x1b5f/0x23a0 [ 386.322551][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 386.331650][ T31] ? __pfx_compaction_free+0x10/0x10 [ 386.337504][ T31] ? __pfx_migrate_pages+0x10/0x10 [ 386.342641][ T31] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 386.349203][ T31] ? pfn_to_online_page+0x1de/0x560 [ 386.363873][ T31] compact_zone+0x2018/0x4750 [ 386.368598][ T31] ? __pfx_compact_zone+0x10/0x10 [ 386.383204][ T31] ? __flush_work+0xa48/0xcc0 [ 386.387958][ T31] compact_node+0x1a3/0x2c0 [ 386.392483][ T31] ? __pfx_compact_node+0x10/0x10 [ 386.418406][ T31] ? __lru_add_drain_all+0xec/0x6f0 [ 386.436249][ T31] sysctl_compaction_handler+0x141/0x210 [ 386.441916][ T31] proc_sys_call_handler+0x442/0x570 [ 386.447304][ T31] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 386.453480][ T31] ? splice_from_pipe_next+0x1f7/0x5d0 [ 386.458944][ T31] iter_file_splice_write+0xa24/0x12e0 [ 386.464460][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 386.470360][ T31] ? __pfx_copy_splice_read+0x10/0x10 [ 386.476131][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 386.482613][ T31] direct_splice_actor+0x18f/0x6c0 [ 386.488046][ T31] splice_direct_to_actor+0x342/0xa30 [ 386.488286][ T7026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.493475][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 386.503640][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.507175][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 386.522759][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.522843][ T31] do_splice_direct+0x174/0x240 [ 386.535787][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 386.541172][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 386.548996][ T31] ? rw_verify_area+0xcf/0x6c0 [ 386.553905][ T31] do_sendfile+0xb06/0xe50 [ 386.558330][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 386.563307][ T31] __x64_sys_sendfile64+0x154/0x220 [ 386.568498][ T31] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 386.574484][ T31] do_syscall_64+0xcd/0xfa0 [ 386.578982][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.585553][ T31] RIP: 0033:0x7f061318eec9 [ 386.589978][ T31] RSP: 002b:00007f0610fd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 386.598418][ T31] RAX: ffffffffffffffda RBX: 00007f06133e6270 RCX: 00007f061318eec9 [ 386.606589][ T31] RDX: 00002000000000c0 RSI: 000000000000000c RDI: 000000000000000d [ 386.614569][ T31] RBP: 00007f0613211f91 R08: 0000000000000000 R09: 0000000000000000 [ 386.623584][ T31] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 386.631552][ T31] R13: 00007f06133e6308 R14: 00007f06133e6270 R15: 00007ffd56843148 [ 386.641806][ T31] [ 386.646763][ T31] [ 386.646763][ T31] Showing all locks held in the system: [ 386.750193][ T31] 1 lock held by khungtaskd/31: [ 386.786168][ T31] #0: ffffffff8e3c44a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 386.803089][ T31] 2 locks held by getty/5568: [ 386.808554][ T31] #0: ffff8880363790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 386.843062][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 386.863659][ T31] 1 lock held by udevd/5809: [ 386.868265][ T31] #0: ffff888026535358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 386.893119][ T31] 2 locks held by kworker/0:6/5874: [ 386.898339][ T31] #0: ffff88813ff51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 386.933039][ T31] #1: ffffc900045b7d00 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 386.954358][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.962896][ T31] 3 locks held by kworker/u8:7/5942: [ 386.984528][ T31] #0: ffff88801bad4948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 387.003049][ T31] #1: ffffc90002e27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 387.023254][ T31] #2: ffffffff900e4570 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 387.053094][ T31] 1 lock held by udevd/6310: [ 387.057706][ T31] #0: ffff8880265ed358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 387.068219][ T31] 1 lock held by syz.2.324/7084: [ 387.075962][ T31] 1 lock held by syz.4.582/8086: [ 387.080897][ T31] #0: ffff8880347ba420 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x342/0xa30 [ 387.091746][ T31] 1 lock held by syz.5.766/8964: [ 387.097811][ T31] #0: ffff888026535358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 387.111009][ T31] 1 lock held by syz.5.766/8967: [ 387.117835][ T31] #0: ffff888026535358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 387.127225][ T31] 1 lock held by syz.5.766/8971: [ 387.132144][ T31] #0: ffff888026535358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 387.142593][ T31] 1 lock held by syz.5.766/8975: [ 387.147802][ T31] #0: ffff888026535358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 387.157275][ T31] 1 lock held by syz.5.766/8979: [ 387.162213][ T31] #0: ffff888026535358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 387.171571][ T31] 1 lock held by syz.5.766/8984: [ 387.176688][ T31] #0: ffff888026535358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 387.186139][ T31] 2 locks held by syz.0.790/9074: [ 387.191147][ T31] #0: ffff888035b560e0 (&type->s_umount_key#84/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60 [ 387.201925][ T31] #1: ffff888026535358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 387.211593][ T31] 1 lock held by syz.0.790/9075: [ 387.216687][ T31] #0: ffff88804735a0e0 (&type->s_umount_key#85/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60 [ 387.226956][ T31] 3 locks held by syz-executor/9081: [ 387.232243][ T31] #0: ffff888029adcdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 387.243208][ T31] #1: ffff888029adc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 387.252936][ T31] #2: ffffffff9036d188 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 387.262971][ T31] 3 locks held by syz-executor/9330: [ 387.268447][ T31] #0: ffff88802811cdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 387.278078][ T31] #1: ffff88802811c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 387.287792][ T31] #2: ffffffff9036d188 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 387.298161][ T31] 1 lock held by syz.3.907/9693: [ 387.303786][ T31] #0: ffff8880265ed358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 387.313142][ T31] 5 locks held by syz-executor/9915: [ 387.318401][ T31] #0: ffff888025304dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 387.328292][ T31] #1: ffff8880253040b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 387.339414][ T31] #2: ffffffff9036d188 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 387.349493][ T31] #3: ffff88807805b338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 387.359226][ T31] #4: ffffffff8e3cfa38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 387.369303][ T31] 3 locks held by syz.8.1073/10432: [ 387.374530][ T31] #0: ffff88804563cdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 387.384400][ T31] #1: ffff88804563c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 387.394113][ T31] #2: ffffffff9036d188 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 387.405097][ T31] [ 387.407459][ T31] ============================================= [ 387.407459][ T31] [ 387.420344][ T31] NMI backtrace for cpu 0 [ 387.420358][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 387.420376][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 387.420385][ T31] Call Trace: [ 387.420390][ T31] [ 387.420396][ T31] dump_stack_lvl+0x116/0x1f0 [ 387.420433][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 387.420449][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 387.420471][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 387.420496][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 387.420514][ T31] watchdog+0xf3f/0x1170 [ 387.420536][ T31] ? rcu_is_watching+0x12/0xc0 [ 387.420555][ T31] ? __pfx_watchdog+0x10/0x10 [ 387.420572][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 387.420595][ T31] ? __kthread_parkme+0x19e/0x250 [ 387.420617][ T31] ? __pfx_watchdog+0x10/0x10 [ 387.420636][ T31] kthread+0x3c2/0x780 [ 387.420650][ T31] ? __pfx_kthread+0x10/0x10 [ 387.420667][ T31] ? rcu_is_watching+0x12/0xc0 [ 387.420685][ T31] ? __pfx_kthread+0x10/0x10 [ 387.420700][ T31] ret_from_fork+0x672/0x7d0 [ 387.420713][ T31] ? __pfx_kthread+0x10/0x10 [ 387.420726][ T31] ret_from_fork_asm+0x1a/0x30 [ 387.420753][ T31] [ 387.420759][ T31] Sending NMI from CPU 0 to CPUs 1: [ 387.553529][ C1] NMI backtrace for cpu 1 [ 387.553543][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 387.553561][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 387.553570][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 387.553588][ C1] RIP: 0010:kasan_check_range+0x0/0x1b0 [ 387.553608][ C1] Code: f2 be f8 00 00 00 e9 9f 54 40 09 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 48 85 f6 0f 84 64 01 00 00 48 89 f8 41 54 44 0f b6 c2 [ 387.553622][ C1] RSP: 0018:ffffc900001275c0 EFLAGS: 00000246 [ 387.553632][ C1] RAX: 0000000000000000 RBX: ffffc900001276b0 RCX: ffffffff8ae8286f [ 387.553641][ C1] RDX: 0000000000000001 RSI: 0000000000000020 RDI: ffffc900001276b0 [ 387.553664][ C1] RBP: 0000000000000020 R08: 0000000000000007 R09: 0000000000000001 [ 387.553672][ C1] R10: 0000000000000000 R11: ffff88807cbf7800 R12: 0000000000000000 [ 387.553680][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 387.553689][ C1] FS: 0000000000000000(0000) GS:ffff888124adf000(0000) knlGS:0000000000000000 [ 387.553702][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 387.553711][ C1] CR2: 00005582a2812ad8 CR3: 000000000e182000 CR4: 00000000003526f0 [ 387.553719][ C1] Call Trace: [ 387.553723][ C1] [ 387.553728][ C1] __asan_memset+0x23/0x50 [ 387.553748][ C1] _ieee802_11_parse_elems_full+0x11f/0x44e0 [ 387.553772][ C1] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 387.553789][ C1] ? rcu_is_watching+0x12/0xc0 [ 387.553806][ C1] ? cfg80211_find_elem_match+0x1aa/0x1f0 [ 387.553821][ C1] ? ieee802_11_parse_elems_full+0x1db/0x3780 [ 387.553840][ C1] ieee802_11_parse_elems_full+0x10cf/0x3780 [ 387.553860][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 387.553882][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 387.553901][ C1] ? find_held_lock+0x2b/0x80 [ 387.553916][ C1] ? ieee80211_sta_active_ibss+0x222/0x420 [ 387.553934][ C1] ieee80211_ibss_rx_queued_mgmt+0xc79/0x2fe0 [ 387.553949][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 387.553971][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 387.553989][ C1] ? rcu_is_watching+0x12/0xc0 [ 387.554009][ C1] ? kcov_remote_start+0x3c9/0x6d0 [ 387.554028][ C1] ieee80211_iface_work+0xe2e/0x1360 [ 387.554044][ C1] ? rcu_is_watching+0x12/0xc0 [ 387.554061][ C1] cfg80211_wiphy_work+0x2c4/0x580 [ 387.554074][ C1] process_one_work+0x9cf/0x1b70 [ 387.554092][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 387.554104][ C1] ? __pfx_process_one_work+0x10/0x10 [ 387.554120][ C1] ? assign_work+0x1a0/0x250 [ 387.554133][ C1] worker_thread+0x6c8/0xf10 [ 387.554151][ C1] ? __pfx_worker_thread+0x10/0x10 [ 387.554164][ C1] kthread+0x3c2/0x780 [ 387.554176][ C1] ? __pfx_kthread+0x10/0x10 [ 387.554189][ C1] ? rcu_is_watching+0x12/0xc0 [ 387.554204][ C1] ? __pfx_kthread+0x10/0x10 [ 387.554216][ C1] ret_from_fork+0x672/0x7d0 [ 387.554228][ C1] ? __pfx_kthread+0x10/0x10 [ 387.554240][ C1] ret_from_fork_asm+0x1a/0x30 [ 387.554258][ C1] [ 387.554736][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 387.859440][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 387.868531][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 387.878564][ T31] Call Trace: [ 387.881820][ T31] [ 387.884730][ T31] dump_stack_lvl+0x3d/0x1f0 [ 387.889310][ T31] vpanic+0x640/0x6f0 [ 387.893280][ T31] panic+0xca/0xd0 [ 387.896989][ T31] ? __pfx_panic+0x10/0x10 [ 387.901393][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 387.906748][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 387.912884][ T31] ? watchdog+0xe48/0x1170 [ 387.917285][ T31] ? watchdog+0xe3b/0x1170 [ 387.921699][ T31] watchdog+0xe59/0x1170 [ 387.925928][ T31] ? rcu_is_watching+0x12/0xc0 [ 387.930674][ T31] ? __pfx_watchdog+0x10/0x10 [ 387.935331][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 387.940519][ T31] ? __kthread_parkme+0x19e/0x250 [ 387.945530][ T31] ? __pfx_watchdog+0x10/0x10 [ 387.950189][ T31] kthread+0x3c2/0x780 [ 387.954237][ T31] ? __pfx_kthread+0x10/0x10 [ 387.958809][ T31] ? rcu_is_watching+0x12/0xc0 [ 387.963557][ T31] ? __pfx_kthread+0x10/0x10 [ 387.968125][ T31] ret_from_fork+0x672/0x7d0 [ 387.972693][ T31] ? __pfx_kthread+0x10/0x10 [ 387.977263][ T31] ret_from_fork_asm+0x1a/0x30 [ 387.982016][ T31] [ 387.985237][ T31] Kernel Offset: disabled [ 387.989536][ T31] Rebooting in 86400 seconds..