last executing test programs:

2m39.049920266s ago: executing program 4 (id=605):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x15, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x6c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000400010104000000000000000002000000240002801400018008000100e0000001080002000777ddf34c3d00e00000010c00028005"], 0x38}}, 0x0)
rseq(&(0x7f0000000280), 0xffffffffffffff61, 0x1, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x4}], {0x95, 0x0, 0x700}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000020000000400000001080400", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000008000000000001b58c719a6bb4b83fd0aebc539466923ce91456655fd976c8582c241bc6c34d6231e6ba4abaaafc26683363c764c9e5eee4a385babde0ad4bb8554cb8aa59b2464225666ad061808f89d8a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
getpid()
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f00000000c0)={r6, r6, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000000)={@none, 0x1})
gettid()

2m35.53186188s ago: executing program 4 (id=614):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x5, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r1, 0x2000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, 0x0, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
io_uring_setup(0x175c, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r5, 0x0, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x60, 0x0)
r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x410900, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x7)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0xd2)
socket$inet6_sctp(0xa, 0x5, 0x84)

2m34.543206787s ago: executing program 4 (id=618):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3583], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80100000, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x80, 0x69, 0x11, 0x8d}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$packet(0x11, 0x3, 0x300)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=<r10=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=<r11=>0x0)
sendmsg$NFC_CMD_DEP_LINK_UP(r8, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x44, r9, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x2, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000001380), 0x3ffffffffffff4f, 0x0)
bind$llc(r0, 0x0, 0x0)

2m32.758153527s ago: executing program 4 (id=620):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000002a80)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)="1400000035000b0e0bbfd18a021a384818070000", 0x14}], 0x1}, 0x0)
r2 = epoll_create1(0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000002100))
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', <r4=>0x0})
r5 = syz_io_uring_setup(0x48d0, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x0, 0x358}, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x3938700}})
io_uring_enter(r5, 0x6b4d, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r5, 0x0, 0x2, 0x7, 0x0, 0x0)
r8 = socket(0x1, 0x2, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r9, 0x0)
keyctl$get_persistent(0x16, r9, 0xfffffffffffffffb)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000500), &(0x7f0000000540)=0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@setneightbl={0x38, 0x43, 0x100, 0x70bd29, 0x25dfdbff, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x10001}, @NDTA_NAME={0x9, 0x1, 'hash\x00'}, @NDTA_NAME={0xe, 0x1, 'wireguard\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24008004)
sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x68, r12, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6, 0x1, 0x21}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r13}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r15=>0x0})
sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)=@polexpire={0x2e8, 0x1b, 0x400, 0x70bd26, 0x25dfdbfc, {{{@in=@multicast1, @in6=@loopback, 0x4e20, 0xd, 0x4e23, 0x71f5, 0xa, 0xa0, 0x20, 0xc, r4, r9}, {0xcaef, 0x10, 0x0, 0xde9, 0x2, 0xe4b, 0x3, 0x2}, {0x7, 0x8000000000000000, 0xc, 0xd}, 0x2, 0x6e6bbc, 0x2, 0x0, 0x1, 0x1}, 0x10}, [@mark={0xc, 0x15, {0x35075b, 0x7f}}, @sa={0xe4, 0x6, {{@in6=@private0, @in6=@private2, 0x4e22, 0x7, 0x4e23, 0x3, 0xa, 0x20, 0x0, 0x6c, r13, r15}, {@in=@remote, 0x4d6, 0x3c}, @in6=@mcast2, {0x7, 0x9, 0x4, 0x8, 0x7, 0x5, 0x9, 0x9}, {0xe00000000000000, 0x4, 0x2, 0x4}, {0x800, 0x3, 0x6}, 0x70bd2a, 0x3504, 0xa, 0x3, 0x67, 0x20}}, @algo_aead={0x10c, 0x12, {{'aegis128\x00'}, 0x600, 0x100, "ea8e18d95763a60cc9c21ac75ff26c7a2f64fadf31f7aacd83c226ba07cf0cc639c136a317bd5cae3459143c05ef30c32735f7f719754bcc56e65556aafc91472435ea80d278045256e281afeb1b7f153bec3ce0377bf40f1a8468a3e969004caa267959600dcb646f5abba851b245d7009ccdac32c045a55a78dbc56fe75612e483a81c262a1b0bd7d85a6bbd84fc34291c53758c945d9e9f9319b0b3671a87f9786c7d599c3857575cbd20ece37332a345f295b36c72b3ed470e741dcd700d"}}, @coaddr={0x14, 0xe, @in=@remote}, @tfcpad={0x8}, @XFRMA_SET_MARK={0x8, 0x1d, 0x7f}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x6}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x40001}, 0x20000041)

2m31.51994905s ago: executing program 4 (id=624):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
stat(0x0, &(0x7f0000000280))
io_uring_setup(0x175c, 0x0)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x20000000)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)

2m28.888588465s ago: executing program 4 (id=631):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0xfffb, 0x2020c78b, 0x4, 0x9, 0x4})
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000014000103000000000000007e1e000000"], 0x14}}, 0x0)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)

2m13.641562456s ago: executing program 32 (id=631):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0xfffb, 0x2020c78b, 0x4, 0x9, 0x4})
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000014000103000000000000007e1e000000"], 0x14}}, 0x0)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)

14.307868498s ago: executing program 3 (id=994):
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f00000001c0)={r7, r5})
setsockopt$sock_attach_bpf(r0, 0x110, 0x3, 0x0, 0x10)
syz_open_dev$sndpcmc(&(0x7f0000000080), 0x4, 0x0)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_script(r9, &(0x7f0000001180)={'#! ', './file0', [{0x20, 'BB#'}, {0x20, 'Artb'}, {0x20, 'xt'}, {0x20, '^+]$)('}, {0x20, '-\xd6'}], 0xa, '\a'}, 0x22)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)
socket$packet(0x11, 0x2, 0x300)

11.239351906s ago: executing program 3 (id=1002):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80100000, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x80, 0x69, 0x11, 0x8d}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$packet(0x11, 0x3, 0x300)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x44, r8, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x2, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000001380), 0x3ffffffffffff4f, 0x0)
bind$llc(r0, 0x0, 0x0)

9.016108371s ago: executing program 5 (id=1005):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0xb00}, 0x4})
lseek(0xffffffffffffffff, 0xae7e, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x1)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r6 = syz_open_dev$loop(&(0x7f0000000080), 0x113b4850, 0x4000)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$IOC_PR_RELEASE(r6, 0x401070ca, 0x0)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)=ANY=[@ANYRES16=r7, @ANYBLOB="010025bd7000fbd1df2504000000140001800800050001000000060009"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="01040000", @ANYRES16=r7, @ANYBLOB="20002cbd7000fbdbdf250900000008000500080000001400028006000b000a00000008000600060000003c00028006000e004e240000060002004e21000006000f0007000000060002004e2300000800050002000000080004000700000006000f0000020000080004000600000040000380060007004e21"], 0x118}}, 0x4088094)
setitimer(0x1, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2}}, 0x20)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000a40), 0x10bc80, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', 0x0, 0x0)

8.93347501s ago: executing program 1 (id=1006):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x4364, &(0x7f0000000140)={0x0, 0xaef2, 0x0, 0x6, 0xbfdffffc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280))
getrusage(0x1, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r7 = dup(r6)
write$FUSE_BMAP(r7, &(0x7f0000000340)={0x18, 0xffffffffffffffda, 0x0, {0x2}}, 0x18)
write$FUSE_DIRENTPLUS(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r7, &(0x7f00000004c0)={0x18}, 0x18)
write$FUSE_INIT(r7, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200, 0x1000, 0xfffd, 0xee50, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7])
r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r8, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
shmdt(0x0)

7.182480674s ago: executing program 5 (id=1011):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1328000, 0x1000, 0x0, 0x2}, 0x20)

6.224918037s ago: executing program 5 (id=1013):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x200, 0x2, 0x2, 0x4, 0x0, 0x8}, &(0x7f0000000100)=0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000875b0d20d81301002252ea329f7f9221b3267aee174f5e724e0e010203010902120001000000000904000000efbd7f00"], 0x0)

5.860218686s ago: executing program 0 (id=1014):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020)
r1 = socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
pread64(r3, 0x0, 0x0, 0xdc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)

4.982557239s ago: executing program 2 (id=1018):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0)
creat(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x4d)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6)

4.852069719s ago: executing program 1 (id=1019):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x7f, 0x2, 0xb, 0xd, 0x4, 0x7, 0x8, 0x75, 0x2, 0xc, 0x40, 0x40, 0xf, 0x48}, 0xe)
recvmmsg(r1, &(0x7f0000007400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=""/15, 0xf}}], 0x1, 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x2, 0x3, 0x260, 0x0, 0x0, 0x0, 0x108, 0x108, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, '\x00', 'veth0\x00', {}, {}, 0x21}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0)

4.639534069s ago: executing program 0 (id=1020):
recvmsg(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000094}, 0x880)
r2 = dup(r1)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000dc0)={0x8, {"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", 0x1000}}, 0x1006)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
io_uring_enter(0xffffffffffffffff, 0x207a98, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r6 = accept4(r5, 0x0, 0x0, 0x0)
socketpair(0x21, 0x1, 0x579e, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
accept4(r7, &(0x7f00000003c0)=@in={0x2, 0x0, @private}, &(0x7f0000000300)=0x80, 0x800)
sendmsg$alg(r6, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="7db69f91c16be64747de44266f21a01b102c951097ccce9ea9e7951bdcffd2147bb818260fb3eeab34609a029c038979ea5f33e2ab0ec153f3e58821f81bd13f90f0ef3b8cdfe7cf4c814dd52564971c690d78477b338856e840a8b0bab770e668453488b867aea493d344e1cc04f7218f794804bd7c8f391a6ea415ff720776f884d763306cf094f8a3dde5c531a2b5d53926", 0x93}, {&(0x7f0000000080)="36baf6cb1fb03f9752a3b0c8bdc194e9386deee62fcf32320294f70766707f88829a0105bc5c5965b5dbfae0930325a5541ed96124713f54db44a4f3715c2bae867edd9f44a0f9b4806c58a6fbdeb96b89abab85aa4968fd3c6d218cbcc73482380923c4584e7b8ca3db80b40fa971a72ebdf64dd3472eb8004b86abad8b23a0565d9ac0bd4d34c84bf9b51b5f7dd657b0f7ad8e6ef4515023a600f7de", 0x9d}], 0x2, 0x0, 0x0, 0x4000}, 0x8800)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000000)
setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_clone(0x10000000, &(0x7f0000000000)="45df51e8070d793593929f00f610c69ef8f4e9c7ac57bf10baca3f88aae344e529ccc348a8a4", 0x26, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)="cd94684eb51365fe6bba2018b1f14d1cfc4eda41e71c7209a0b79b59142f6a24f363ed1b58e8b27ec8984bd63bb7f5e588b42aef966b66c6a3b5bbb48fd107924e7490e0080f5214b8e40002cca5be9e580a0cca1f940dc252f623883905a6f85bb933af20820000004713e21c238d9f1228483a9de034b9f7cd0487e46ded14bd7c64434d9223d6d184a566e33f300641702484e2eba0f84350f0")
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'lo\x00'})
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18)

4.420280132s ago: executing program 1 (id=1021):
r0 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x24}}, 0x0)
prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000000)=0x10, 0x4)
getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, &(0x7f0000000380))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, r1, 0xffffd000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='attr\x00')
getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_procfs(0x0, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
shutdown(r1, 0x1)
syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x109000)
syz_open_dev$tty1(0xc, 0x4, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

3.847462986s ago: executing program 2 (id=1022):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(0xffffffffffffffff, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10)
recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/92, 0x5c}], 0x1}, 0x5}], 0x1, 0x0, 0x0)
shutdown(r2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000ff00030000000300000000000000000040849a864f758c258c102402a0b490454c612bce8a869456dc84ed50932212b308521fcd30c77dbd90a1e7a0cf1ab0d2fdc3a2e74439b1ffaca79a1816300e6a0b4cd052b0db3a98b17d6614fef93a195f710a468ba8a8d0d604c6ce9f03371aaec7000511cef687e076e2f710ea95c1e1338b60e6adac32d258f2c2871daaa6d69d4abb3a25a8eb6fe765273e1920f59c6926f77232394efee1900832ec6ce70e8748d3adeda45add4b1e919adefe6fe681c895aa2f2954010d6ca8ef082f6c6eeb4cedebbeb8c482568ff30e274fe048cea8"], 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
memfd_create(&(0x7f0000000300)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\x0e\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_\x95\x00\x00\x00j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7-\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0x6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x40, 0x0, 0x0)
r4 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000300)="634e75ae76f87e71b3", 0x9}, {&(0x7f0000000480)="e4958855bde59a624d9564165df43a82554b62349d11283fea0a94fbe26002851412fbfb577b6011924490fb980aedc817eb0cecfd25ff5afdb13879874b8854f36052b4dc3bcb3fdc01581390ea9ea8dc5dda36777f2aa120f39c737b301a3d99d7063f3faae17b831a4bd9f93b6044a2df415d76277d4c16e9", 0xaa}], 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, 0x0}], 0x1, 0x67, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x4)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@loopback, @dev={0xac, 0x14, 0x14, 0x37}}, 0xc)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x40, 0x3, 0x4, '\x00', 0x8})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap(&(0x7f000026c000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r4, 0x80410000)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
syz_open_dev$sg(&(0x7f00000000c0), 0x4, 0x4a5400)
timer_create(0x0, 0x0, &(0x7f0000000040))

3.707244651s ago: executing program 0 (id=1023):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_CLEAR_SOCK(r0, 0xab04)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
io_setup(0x7, &(0x7f0000000040)=<r3=>0x0)
io_getevents(r3, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000200)={0x77359400})
listen(0xffffffffffffffff, 0x8000102)
r4 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x302, 0x0)
flistxattr(r4, &(0x7f0000000140)=""/15, 0xfffffffffffffe57)
pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380)='./file0/file0\x00')
r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x0, 0x6, 0x2, 0x0, 0x0, "f7000000000000004000", '\x00\x00\a\x00', "0300", "fcff0300", ["50d5c296f03a00", "928e88e204000000bcb46441", "0c436d743c99c443084000", "ff81002000008000"]})
syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)
modify_ldt$write2(0x11, 0x0, 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x6e3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x7)
getpid()

3.599981151s ago: executing program 3 (id=1024):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x4, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x5, 0x3, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x4000000, 0x7, 0x60, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0x8, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x5, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x20000002, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x804, 0x6c368000, 0x4, 0x7, 0x0, 0xe, 0x9, 0xc, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x484d, 0x4, 0x7f, 0x8, 0x40, 0xc0f, 0x80000001, 0x3, 0x5, 0x3, 0x7, 0x7, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x3, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x6, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x401, 0xfffffff7, 0xa1da, 0x1000, 0x7, 0x4, 0xd, 0x8, 0x6, 0xe, 0x5, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x20644, 0x2, 0xfffffffd, 0x6, 0x5, 0x1ff, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x40, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x2, 0xb, 0x0, 0xfffd, 0x7, 0x7, 0x5, 0x81, 0x8, 0x2, 0x7, 0xfe, 0x8, 0x0, 0x6, 0x10], [0x28, 0xd5800000, 0x0, 0x4, 0x2, 0x62e, 0x3, 0x7, 0x2, 0x5, 0x8, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000800, 0x5, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x807, 0x7, 0x8, 0x400001, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb756, 0x2, 0xb9, 0x4, 0x50, 0x8c1, 0x0, 0x5, 0x4, 0x7, 0x100, 0x400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c)
socket$inet(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
semop(0x0, &(0x7f0000000000)=[{0x0, 0x8000}], 0x1)
semop(0x0, &(0x7f0000000340)=[{0x0, 0xfff3}], 0x1)
r4 = openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r4, 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064d1, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]})
r6 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r6, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
futex(0x0, 0x80, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0, 0x0)

3.446172558s ago: executing program 0 (id=1025):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f360068090890e0878f0e1ac6e7049b3341959b759a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000ac0)='n', 0x14}], 0x1}, 0x4040001)
ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000180)={0xd, 0xfffffffd})
r2 = getpid()
prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x91}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ppoll(&(0x7f0000000340)=[{r6}], 0x1, &(0x7f0000000380)={0x0, 0x989680}, 0x0, 0x0)
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x8}, &(0x7f0000000340)=<r7=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r8 = socket(0x2, 0x80805, 0x4)
sendmmsg$inet(r8, &(0x7f0000002340)=[{{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)}}], 0x2, 0x0)
socket$inet(0x2, 0x80001, 0x84)
write$UHID_INPUT(r1, &(0x7f00000023c0)={0x8, {"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", 0x1000}}, 0x1006)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000180)={0x101, 0x4, 0x1f4bf1ba}, 0x10)

3.214837653s ago: executing program 2 (id=1026):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r0, @ANYRES32, @ANYBLOB="11c850ee"], 0x20)

3.213618372s ago: executing program 1 (id=1027):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00'})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040)

2.388058629s ago: executing program 3 (id=1028):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_open_procfs$userns(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000240))
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
r3 = add_key$user(&(0x7f0000002100), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000380)="62e10ae4", 0x4, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f0000000280), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000500)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9ebc4586549e11b080468668e8fd0e52ce0705a05", 0xc1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r4, r3}, &(0x7f0000000440)=""/178, 0xb2, &(0x7f00000003c0)={&(0x7f0000000040)={'blake2b-160-generic\x00'}})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000000)='./bus\x00')
mkdir(&(0x7f0000000100)='./control\x00', 0x184)
open$dir(&(0x7f00000002c0)='./control/file0\x00', 0xa40c3, 0x20)
r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
getdents64(r5, &(0x7f00000004c0)=""/74, 0x4a)
unlink(&(0x7f00000001c0)='./control/file0\x00')
rmdir(&(0x7f0000000280)='./control\x00')
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)

2.387678221s ago: executing program 5 (id=1029):
mlockall(0x7)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0xc9, 0xc9, @any, 0x1, 0x6, 0x7, 0x2, 0x401, 0x15}}}, 0x14)
r0 = userfaultfd(0x80001)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5)
socket$nl_crypto(0x10, 0x3, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndmidi(0x0, 0x8, 0x141101)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)='\aswm-\n', 0x6)
mkdir(0x0, 0x0)
mount$bpf(0x0, 0x0, &(0x7f0000000400), 0x4001, &(0x7f00000000c0)=ANY=[@ANYBLOB])
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009d000040"])
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100})

2.387378167s ago: executing program 0 (id=1030):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020)
r1 = socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
pread64(r3, 0x0, 0x0, 0xdc)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)

2.338330802s ago: executing program 2 (id=1031):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000003c0)=0xf1e, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
sendmsg$can_raw(r1, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r2, 0x0, 0x300}, 0x10, &(0x7f0000000200)={&(0x7f0000000000)=@can={{0x0, 0x1, 0x1}, 0x1, 0x0, 0x0, 0x0, "9a70c642f9b46da8"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4000054)

2.272408363s ago: executing program 1 (id=1032):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x240c80c0, &(0x7f0000000240)={0xa, 0xe20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r6, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket(0x15, 0x5, 0x0)
connect$netrom(r7, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
getsockname$tipc(r7, 0x0, &(0x7f0000000080))
sendto$inet6(r6, 0x0, 0x0, 0x4010, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000006110b800000000007b0198000000000095000000000001005f3e1cdf43ff079b62e5e8aeabc8cae19bb3d0b5a63a3cdf2f79ceb478c8ab41be6c561ba949ef"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

1.752740324s ago: executing program 3 (id=1033):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r1, &(0x7f0000000240)={0x1000000, 0x3, 0x2, 0x0, 0x2, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0xff3b, 0x1, {{0x0, 0x0, 0x10000000}, 0x1}}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x500}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x2, [{{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190)
syz_emit_ethernet(0x46, &(0x7f0000000b00)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x1000000}}}}}}, 0x0)

1.45989691s ago: executing program 2 (id=1034):
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0xa, 0x0, 0x1, 0x0, 0xfc})
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@mmap={0x9, 0x2, 0x4, 0x10, 0x6, {0x77359400}, {0x5, 0xc, 0xa6, 0x81, 0x4, 0x6, "8936a08d"}, 0x7fffffff})
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f00000012c0)=0x1)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000080)='/dev/vhost-vsock\x00')
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000200}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000040))
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80000)
add_key(&(0x7f0000000240)='blacklist\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000980)="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", 0x5c1, 0x0)
getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0x80)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[])
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0)
sendfile(r3, r3, 0x0, 0x8000000001)
r4 = socket$igmp6(0xa, 0x3, 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0x6349, 0x4)
sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x4}, {{&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000880), 0x0, &(0x7f00000004c0)=""/139, 0x8b}, 0x1}], 0x2, 0x11143, 0x0)
ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000200)=0x3)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)='Q\xafg\xe9K\x9fk\xb7X\xabM\xdd\x1f\x03\x90WZ\xe8\xbc\x05\xa5\xeaI C/@\x8d\xdfWWR\x9aW\xf3]#\xd4\x88\x10\xb7\xedS\xd6\x8eN\x1fYxe;_\x03\xf9F\x0f0\xffJ1\xe0P\x9a\"-S\x82\xe6w\x0f\xdcR\x11\xfd8w\x90\\\\3\xca\"\x9fI\x18~\x0f')

424.136252ms ago: executing program 5 (id=1035):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001416b5faffffffffffffff000a000000", @ANYRES32=r1, @ANYRES64=r1], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

393.818366ms ago: executing program 3 (id=1036):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(0xffffffffffffffff, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10)
recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/92, 0x5c}], 0x1}, 0x5}], 0x1, 0x0, 0x0)
shutdown(r2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000ff00030000000300000000000000000040849a864f758c258c102402a0b490454c612bce8a869456dc84ed50932212b308521fcd30c77dbd90a1e7a0cf1ab0d2fdc3a2e74439b1ffaca79a1816300e6a0b4cd052b0db3a98b17d6614fef93a195f710a468ba8a8d0d604c6ce9f03371aaec7000511cef687e076e2f710ea95c1e1338b60e6adac32d258f2c2871daaa6d69d4abb3a25a8eb6fe765273e1920f59c6926f77232394efee1900832ec6ce70e8748d3adeda45add4b1e919adefe6fe681c895aa2f2954010d6ca8ef082f6c6eeb4cedebbeb8c482568ff30e274fe048cea8"], 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
memfd_create(&(0x7f0000000300)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\x0e\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_\x95\x00\x00\x00j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7-\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0x6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x40, 0x0, 0x0)
r4 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000300)="634e75ae76f87e71b3", 0x9}, {&(0x7f0000000480)="e4958855bde59a624d9564165df43a82554b62349d11283fea0a94fbe26002851412fbfb577b6011924490fb980aedc817eb0cecfd25ff5afdb13879874b8854f36052b4dc3bcb3fdc01581390ea9ea8dc5dda36777f2aa120f39c737b301a3d99d7063f3faae17b831a4bd9f93b6044a2df415d76277d4c16e9", 0xaa}], 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, 0x0}], 0x1, 0x67, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x4)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@loopback, @dev={0xac, 0x14, 0x14, 0x37}}, 0xc)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x40, 0x3, 0x4, '\x00', 0x8})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap(&(0x7f000026c000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r4, 0x80410000)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
syz_open_dev$sg(&(0x7f00000000c0), 0x4, 0x4a5400)
timer_create(0x0, 0x0, &(0x7f0000000040))

305.134619ms ago: executing program 2 (id=1037):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='smb3\x00', 0x4000, 0x0)
socket$igmp(0x2, 0x3, 0x2)
add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000180), 0x0, 0x21, 0xfffffffffffffffe)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_names\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}})
r5 = syz_io_uring_setup(0x3624, &(0x7f0000002680)={0x0, 0x7bcd, 0x8000, 0x7, 0x3e}, &(0x7f0000000380), &(0x7f0000000100))
ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f0000000500)={{0x8, 0xcdc}, 0x100, './file0\x00'})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r0], 0x10c}, 0x1, 0x0, 0x0, 0x4000080}, 0x851)
read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020)
io_uring_enter(r5, 0x567, 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(r7, r7, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

233.159075ms ago: executing program 0 (id=1038):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x4, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x5, 0x3, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x4000000, 0x7, 0x60, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0x8, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x5, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x20000002, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x804, 0x6c368000, 0x4, 0x7, 0x0, 0xe, 0x9, 0xc, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x484d, 0x4, 0x7f, 0x8, 0x40, 0xc0f, 0x80000001, 0x3, 0x5, 0x3, 0x7, 0x7, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x3, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x6, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x401, 0xfffffff7, 0xa1da, 0x1000, 0x7, 0x4, 0xd, 0x8, 0x6, 0xe, 0x5, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x20644, 0x2, 0xfffffffd, 0x6, 0x5, 0x1ff, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x40, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x2, 0xb, 0x0, 0xfffd, 0x7, 0x7, 0x5, 0x81, 0x8, 0x2, 0x7, 0xfe, 0x8, 0x0, 0x6, 0x10], [0x28, 0xd5800000, 0x0, 0x4, 0x2, 0x62e, 0x3, 0x7, 0x2, 0x5, 0x8, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000800, 0x5, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x807, 0x7, 0x8, 0x400001, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb756, 0x2, 0xb9, 0x4, 0x50, 0x8c1, 0x0, 0x5, 0x4, 0x7, 0x100, 0x400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c)
socket$inet(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
semop(0x0, &(0x7f0000000000)=[{0x0, 0x8000}], 0x1)
semop(0x0, &(0x7f0000000340)=[{0x0, 0xfff3}], 0x1)
r4 = openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r4, 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064d1, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]})
r6 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r6, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
futex(0x0, 0x80, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0, 0x0)

204.682842ms ago: executing program 1 (id=1039):
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0xa, 0x0, 0x1, 0x0, 0xfc})
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@mmap={0x9, 0x2, 0x4, 0x10, 0x6, {0x77359400}, {0x5, 0xc, 0xa6, 0x81, 0x4, 0x6, "8936a08d"}, 0x7fffffff})
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f00000012c0)=0x1)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000080)='/dev/vhost-vsock\x00')
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000200}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000040))
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80000)
r2 = add_key(&(0x7f0000000240)='blacklist\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2494dde32cd76aeabc8ca949257819f25159c532504978ed33d145658cce40a3dd867df925cbedfbd01f157cae933c958c5dfdc1e0132e03f60e3418410fe17f95bdb8090c4adb3636ea342fb8589cf4944e42579da1d2aa919fa78d9e27565fc30d2513293f3cc7d6c7d2d1fb756b0d7b352efd07bd38bedcabb8d856610db17155de5bb0409e3713b2c73464055345b98fe30949e7ee8cddc663f3d5d50881520df8da5115d6d8d81bc62e8dde2460f128365ca184efc5e1b14ff3f4ad1c1f7bad98a9435c0d757ddb9dcd577f5ae33ef675676ba7b44be538aeec0e6ec4973865dc2bb0f0847ded0a131f3b01ac48e070783564cd9031b3b9fcbeafb69dd253e8cbc2c12307f03154573a27f6f00073aae7c4c1701a3f745744c254ddd3b43988c7bbdec9c1e158fda3cdffc887206b78fb1fc943810dc473894738286878513d06aa7f074a11983261f5be648b4b76893a5f733bdafcf42427743534de2bfcf27f014923488c6476dd417344045c747c68c69e3eb5357e69d97a2cfafa44e2547aa21548dfc0739e49321684120c8bdb64448689a3412eebaca2e4b2a2ecf96690f9fec7d569087bc8561cff6012cf5cb14775230226b95a9ded9cccfedafe61c550376adf0b1b59abf9f92da6247e1061afe2eaa9d8f5a28d63db50fca875020da59426501eab6602beb74de33df143ccb60c70f950f5f53f1d5aca6371dfc8dd68cbe7ccfbe0f52e1ff238105dd93d8a3a72da45ce79824d6b091d9c91509cb290afd01f1945b118f2c1c58f17c0b59fbd872412d7d291dcecad019af039375aeee7ddcf36ede82914f64bb41281962c9b10216907c37d06aa5a5b33afe0547c6726ee169779ad6d5cfc5f373f75b234df4ac2007c6db9dc6a0fc3e7e1d2f2658e928c2a854483e6780d69908692d0166ab5334cd5ceb7a69a420803b7ca33e4609f61cfda3b631b54fb81a7473b4bbe2eabc17276f8a009668d634f332fe47fda76a1fae8fe9c3c8962f7ca7a102d5ecd1d6029abb6c422026af6ef277a4c6c21f07121cd8bcce6f1792ea6a628580b478d72b32dd50f59e893bfcf353bea1e2ddbd2d9c16ccc23bceb8f3b64aa16257eedabadaead30f912bd0e579c0b71e6cd86804fc39a074f94da63f0db97c5f41e38541bf441f49d2751966cc78dacd150ae0b91ffe1f5a117fe494a8b60a17ccfbc780f82f0ea96d8db842e07fb4d68edbe28119a6c2ab72ea15a5ba75ac8193dd7411d9aeece6fc23ac00370c84d7e03990ca3697a0187cc3286e4536ace023ec21389ff08cddb1e9075d1e1b3a98a95720f44e50830ad54fecd437a40f483579c7a5eb40e52e75099d9ada449ba4d0751e44de6edd5e17caa91cfb3bf88bb1e093bd76952c80669845d3cbcde8acf7415ed30ad3a0ff648968d036af2de90f2ab93b250b9386fcba42c1ba01cc951fa1f62ebbb99ad6576d803d29e81ed319350ee0a032bfab9b079ea5a29c66f665ce9ccb6b908593ae2406332c5ac7d11c9b830593576177b2af5d70c65dda56b98448862b75a54b3447534d45e0b5a52edc1a76c97f511030bd261bb1a443e1a38a78973f0781efa9910ebe207457587dbc803e68b2cb985c03c4dfbac440d58c90de66a634c07b13197b9e7d42657fb0537abe475fb56fe24cdcd771d9ac5bcea1c915a77d731d2d16a54885387e034aab6db1718521eeb07b0326d23decd5bba45b311d8617bbfd3afc10923567e8987c95260ab90ba3ff1309273a2a615174d9a33c11bfd393013c314d3df8cf4e584b752c30f54e09a38409a34cdaee74f30547b7dfdb3c48d6b4d5b7346ebcaf7fdbb91d9d45ba303e2ea2736f28301c7b8354bc6f89f58841cb844646a57153c83cd03687d8d3a6b95e93f8abd1218af123ada0de5025d18e4599c8d34cdd8ecf91af7a647c6b43d4704446a104829783ec10b68d95418ddfe8b0dc6552069bd07e4452821317131b7a76887fd792c431e6c07d770926c4e60243d198372482b911d29daac57d92f12d7f471657107a8a910d9abd67bac6eec6e0858e7cf078579621", 0x5c1, 0x0)
keyctl$update(0x2, r2, &(0x7f0000000000)="11868a0fceae284c000000", 0xb)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[])
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0)
sendfile(r4, r4, 0x0, 0x8000000001)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000040)=0x6349, 0x4)
sendmmsg$inet6(r5, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r5, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x4}, {{&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000880), 0x0, &(0x7f00000004c0)=""/139, 0x8b}, 0x1}], 0x2, 0x11143, 0x0)
ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000000200)=0x3)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)='Q\xafg\xe9K\x9fk\xb7X\xabM\xdd\x1f\x03\x90WZ\xe8\xbc\x05\xa5\xeaI C/@\x8d\xdfWWR\x9aW\xf3]#\xd4\x88\x10\xb7\xedS\xd6\x8eN\x1fYxe;_\x03\xf9F\x0f0\xffJ1\xe0P\x9a\"-S\x82\xe6w\x0f\xdcR\x11\xfd8w\x90\\\\3\xca\"\x9fI\x18~\x0f')

0s ago: executing program 5 (id=1040):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x7, 0x0, 0x0, 0x72d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x400000, 0xd5c], 0x5000, 0x200394})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0xb0147000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet6(0xa, 0x802, 0x88)
sendto$inet6(r3, 0x0, 0x0, 0x4008041, &(0x7f0000000180)={0xa, 0x5e23, 0x7, @mcast2, 0x73d20cdf}, 0x1c)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x4}]}, 0x10)
sendto$inet6(r3, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

usy
[  243.664494][ T7637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.676549][ T7637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.722384][ T7637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.732652][ T7637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.767938][ T7637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.870873][ T5870] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71
[  243.879972][ T5870] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71
[  243.903315][ T5870] usb 4-1: USB disconnect, device number 12
[  244.735331][ T5868] vhci_hcd: vhci_device speed not set
[  245.323323][   T30] kauditd_printk_skb: 10393 callbacks suppressed
[  245.323393][   T30] audit: type=1400 audit(1743138363.214:17711): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7674 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[  246.573872][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64
[  246.577381][   T30] audit: type=1400 audit(1743138363.244:17712): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7674 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[  246.594134][ T5196] audit: audit_lost=4127 audit_rate_limit=0 audit_backlog_limit=64
[  246.600235][ T7666] audit: audit_backlog=65 > audit_backlog_limit=64
[  246.614337][ T7666] audit: audit_lost=4128 audit_rate_limit=0 audit_backlog_limit=64
[  246.622676][ T7666] audit: backlog limit exceeded
[  246.627599][ T7666] audit: audit_backlog=65 > audit_backlog_limit=64
[  246.634128][ T7666] audit: audit_lost=4129 audit_rate_limit=0 audit_backlog_limit=64
[  246.642189][ T7666] audit: backlog limit exceeded
[  246.643363][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'.
[  248.406482][ T7691] loop6: detected capacity change from 0 to 524287999
[  249.105297][ T7697] fuse: Unknown parameter ''
[  250.987345][   T30] kauditd_printk_skb: 13990 callbacks suppressed
[  250.987366][   T30] audit: type=1400 audit(1743138367.924:21877): lsm=SMACK fn=smack_unix_may_send action=granted subject="_" object="_" requested=w pid=5489 comm="dhcpcd"
[  250.996532][ T7477] audit: audit_backlog=65 > audit_backlog_limit=64
[  251.009946][ T5178] audit: audit_backlog=65 > audit_backlog_limit=64
[  251.016169][ T7477] audit: audit_lost=7411 audit_rate_limit=0 audit_backlog_limit=64
[  251.030775][ T7477] audit: backlog limit exceeded
[  251.050193][ T7719] audit: audit_backlog=65 > audit_backlog_limit=64
[  251.057012][ T7719] audit: audit_lost=7412 audit_rate_limit=0 audit_backlog_limit=64
[  251.065055][ T7719] audit: backlog limit exceeded
[  251.070611][ T7719] audit: audit_backlog=65 > audit_backlog_limit=64
[  251.077305][ T7719] audit: audit_lost=7413 audit_rate_limit=0 audit_backlog_limit=64
[  251.993920][ T7727] netlink: 80 bytes leftover after parsing attributes in process `syz.3.440'.
[  252.876681][ T7765] sctp: [Deprecated]: syz.3.445 (pid 7765) Use of int in maxseg socket option.
[  252.876681][ T7765] Use struct sctp_assoc_value instead
[  254.085517][ T7788] x_tables: ip_tables: osf match: only valid for protocol 6
[  255.369501][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'.
[  255.682219][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  255.693194][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  255.810253][ T5867] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  255.995654][   T30] kauditd_printk_skb: 22776 callbacks suppressed
[  255.996163][   T30] audit: type=1400 audit(1743138373.844:30556): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=7809 comm="syz-executor" name="98" dev="tmpfs" ino=531
[  256.001546][ T7585] audit: audit_backlog=65 > audit_backlog_limit=64
[  256.005314][ T5829] audit: audit_backlog=66 > audit_backlog_limit=64
[  256.067385][ T7802] audit: audit_backlog=66 > audit_backlog_limit=64
[  256.084391][ T7810] audit: audit_backlog=66 > audit_backlog_limit=64
[  256.088185][   T30] audit: type=1400 audit(1743138373.844:30557): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7585 comm="udevd" name="/" dev="sda1" ino=2
[  256.091256][ T7802] audit: audit_lost=12145 audit_rate_limit=0 audit_backlog_limit=64
[  256.119998][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'.
[  256.125177][ T7810] audit: audit_lost=12146 audit_rate_limit=0 audit_backlog_limit=64
[  256.129731][ T7811] audit: audit_backlog=65 > audit_backlog_limit=64
[  256.137612][ T7585] audit: audit_lost=12147 audit_rate_limit=0 audit_backlog_limit=64
[  256.344297][ T5867] usb 1-1: config index 0 descriptor too short (expected 1554, got 18)
[  256.355103][ T5867] usb 1-1: config 0 has an invalid interface number: 110 but max is 0
[  256.532844][ T5867] usb 1-1: config 0 has no interface number 0
[  257.272686][ T5867] usb 1-1: too many endpoints for config 0 interface 110 altsetting 88: 105, using maximum allowed: 30
[  257.285303][ T5867] usb 1-1: config 0 interface 110 altsetting 88 has 0 endpoint descriptors, different from the interface descriptor's value: 105
[  257.403832][ T5867] usb 1-1: config 0 interface 110 has no altsetting 0
[  257.421708][ T5867] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  257.431061][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'.
[  257.498362][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.543371][ T5867] usb 1-1: config 0 descriptor??
[  257.637920][ T7823] vlan2: entered promiscuous mode
[  257.662940][ T7823] team0: entered promiscuous mode
[  257.699820][ T7823] team_slave_0: entered promiscuous mode
[  257.715359][    T9] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  257.883942][ T7823] team_slave_1: entered promiscuous mode
[  257.963642][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.974024][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.074966][ T5867] usb 1-1: string descriptor 0 read error: -71
[  259.090902][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  259.102227][ T5867] usb 1-1: Cannot read MAC address
[  259.108955][ T5867] MOSCHIP usb-ethernet driver 1-1:0.110: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  259.139164][ T5867] usb 1-1: USB disconnect, device number 10
[  259.154327][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  259.188791][    T9] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  259.256019][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.340156][    T9] usb 5-1: config 0 descriptor??
[  259.361105][ T7831] gfs2: gfs2 mount does not exist
[  259.470278][    T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  259.534608][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  259.574398][    T9] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  259.641132][    T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  259.680602][    T9] usb 5-1: media controller created
[  259.872743][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  259.896690][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  259.902525][    T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  260.271093][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16
[  260.307196][ T7838] dvb-usb: bulk message failed: -22 (4/0)
[  260.371798][    T9] dvb-usb: schedule remote query interval to 150 msecs.
[  260.384821][ T7835] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  260.406342][    T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  260.484993][ T7823] syz.3.461 (7823) used greatest stack depth: 19048 bytes left
[  260.565325][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  260.640344][    T9] dvb-usb: error while querying for an remote control event.
[  260.728361][ T7847] 9p: Unknown access argument 00000000004294967295/Wby×¥—û˜2Ö�¢b‚ˆ/׃oÎäØ?žò¸ÿÍð¶7¥í> îñH{J«ÏIhvn4‡mêÀΑ¾á©‘|{Å+¿%DŸMM!’g’ß’Â"×Þ¤'hD¼ƒýK²»
[  260.728361][ T7847] \T…Tî�ú‡C&4‚ΠŽ£‡È8ž5ÛuèÇ~„²úK�Oq\΀ÊnµqEVÔ�ÁÍÛÜØÊC¾“Ä®‚Áü­v®9xñ–x9Kÿ½8Ÿ&×: -22
[  260.841521][ T5869] dvb-usb: bulk message failed: -22 (1/0)
[  261.011008][   T30] kauditd_printk_skb: 8051 callbacks suppressed
[  261.011031][   T30] audit: type=1400 audit(1743138378.834:35420): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7477 comm="udevd" name="devices" dev="sysfs" ino=7
[  261.057349][ T7398] audit: audit_backlog=65 > audit_backlog_limit=64
[  261.067356][ T7477] audit: audit_backlog=65 > audit_backlog_limit=64
[  261.076553][ T5869] dvb-usb: error while querying for an remote control event.
[  261.098270][ T7850] audit: audit_backlog=65 > audit_backlog_limit=64
[  261.109199][ T7398] audit: audit_lost=13212 audit_rate_limit=0 audit_backlog_limit=64
[  261.117948][ T5178] audit: audit_backlog=65 > audit_backlog_limit=64
[  261.126115][ T7477] audit: audit_lost=13213 audit_rate_limit=0 audit_backlog_limit=64
[  261.148467][ T7850] audit: audit_lost=13214 audit_rate_limit=0 audit_backlog_limit=64
[  261.164375][ T5178] audit: audit_lost=13215 audit_rate_limit=0 audit_backlog_limit=64
[  261.174174][ T7477] audit: backlog limit exceeded
[  261.296091][ T5869] dvb-usb: bulk message failed: -22 (1/0)
[  261.311618][ T5869] dvb-usb: error while querying for an remote control event.
[  261.412996][    T9] usb 5-1: USB disconnect, device number 11
[  261.706093][    T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  266.037509][ T5822] audit_log_start: 15657 callbacks suppressed
[  266.037529][ T5822] audit: audit_backlog=65 > audit_backlog_limit=64
[  266.045292][   T30] audit: type=1400 audit(1743138383.834:42710): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[  266.053929][ T5178] audit: audit_backlog=65 > audit_backlog_limit=64
[  266.069472][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64
[  266.076020][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  266.076042][    C0] audit: audit_lost=16026 audit_rate_limit=0 audit_backlog_limit=64
[  266.076057][    C0] audit: backlog limit exceeded
[  266.076348][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  266.076365][    C0] audit: audit_lost=16027 audit_rate_limit=0 audit_backlog_limit=64
[  266.076381][    C0] audit: backlog limit exceeded
[  266.481169][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'.
[  271.123924][ T7943] 9p: Unknown access argument 00000000004294967295/Wby×¥—û˜2Ö�¢b‚ˆ/׃oÎäØ?žò¸ÿÍð¶7¥í> îñH{J«ÏIhvn4‡mêÀΑ¾á©‘|{Å+¿%DŸMM!’g’ß’Â"×Þ¤'hD¼ƒýK²»
[  271.123924][ T7943] \T…Tî�ú‡C&4‚ΠŽ£‡È8ž5ÛuèÇ~„²úK�Oq\΀ÊnµqEVÔ�ÁÍÛÜØÊC¾“Ä®‚Áü­v®9xñ–x9Kÿ½8Ÿ&×: -22
[  271.149650][   T30] kauditd_printk_skb: 7028 callbacks suppressed
[  271.149718][   T30] audit: type=1400 audit(1743138389.004:43852): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7933 comm="syz.3.487" name="89" dev="tmpfs" ino=484
[  271.264909][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64
[  271.304888][   T30] audit: type=1400 audit(1743138389.004:43853): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7933 comm="syz.3.487" name="89" dev="tmpfs" ino=484
[  271.315438][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64
[  271.328504][   T30] audit: type=1400 audit(1743138389.004:43854): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=7933 comm="syz.3.487" name="89" dev="tmpfs" ino=484
[  271.335429][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  271.354135][   T30] audit: type=1400 audit(1743138389.004:43855): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=7933 comm="syz.3.487" path="/89/file1" dev="tmpfs" ino=489
[  271.359995][    C0] audit: audit_lost=18000 audit_rate_limit=0 audit_backlog_limit=64
[  271.386936][    C0] audit: backlog limit exceeded
[  271.387677][ T5827] audit: audit_lost=18001 audit_rate_limit=0 audit_backlog_limit=64
[  272.558648][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'.
[  273.436489][ T5867] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  274.675020][ T5867] usb 1-1: Using ep0 maxpacket: 32
[  274.691950][ T5867] usb 1-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00
[  274.705307][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.723987][ T5867] usb 1-1: config 0 descriptor??
[  275.383777][ T7984] FAULT_INJECTION: forcing a failure.
[  275.383777][ T7984] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  275.457931][ T7984] CPU: 0 UID: 0 PID: 7984 Comm: syz.4.499 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  275.457964][ T7984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  275.457977][ T7984] Call Trace:
[  275.457985][ T7984]  <TASK>
[  275.457994][ T7984]  dump_stack_lvl+0x241/0x360
[  275.458026][ T7984]  ? __pfx_dump_stack_lvl+0x10/0x10
[  275.458063][ T7984]  ? __pfx__printk+0x10/0x10
[  275.458086][ T7984]  ? should_fail_alloc_page+0xc9/0x110
[  275.458123][ T7984]  should_fail_ex+0x424/0x570
[  275.458157][ T7984]  prepare_alloc_pages+0x1dd/0x5c0
[  275.458189][ T7984]  __alloc_frozen_pages_noprof+0x181/0x7b0
[  275.458219][ T7984]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  275.458262][ T7984]  alloc_pages_mpol+0x339/0x690
[  275.458308][ T7984]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  275.458351][ T7984]  ? __raw_spin_lock_init+0x45/0x100
[  275.458384][ T7984]  alloc_pages_noprof+0x121/0x190
[  275.458406][ T7984]  get_zeroed_page_noprof+0x17/0x40
[  275.458432][ T7984]  rds_cong_from_addr+0xce/0x380
[  275.458460][ T7984]  ? rds_cong_get_maps+0x1f/0xb0
[  275.458489][ T7984]  rds_cong_get_maps+0x28/0xb0
[  275.458524][ T7984]  __rds_conn_create+0x9bf/0x1f30
[  275.458559][ T7984]  ? __rds_conn_create+0x2da/0x1f30
[  275.458598][ T7984]  ? __pfx___rds_conn_create+0x10/0x10
[  275.458642][ T7984]  rds_conn_create_outgoing+0x43/0x60
[  275.458675][ T7984]  rds_sendmsg+0x1293/0x2410
[  275.458717][ T7984]  ? __pfx_rds_sendmsg+0x10/0x10
[  275.458745][ T7984]  ? lockdep_hardirqs_on+0x9d/0x150
[  275.458772][ T7984]  ? smack_socket_sendmsg+0x134/0x580
[  275.458817][ T7984]  ? __pfx_rds_sendmsg+0x10/0x10
[  275.458836][ T7984]  __sock_sendmsg+0x221/0x270
[  275.458861][ T7984]  ____sys_sendmsg+0x53c/0x870
[  275.458896][ T7984]  ? __pfx_____sys_sendmsg+0x10/0x10
[  275.458937][ T7984]  __sys_sendmsg+0x271/0x360
[  275.458969][ T7984]  ? __pfx___sys_sendmsg+0x10/0x10
[  275.459021][ T7984]  ? __pfx___schedule+0x10/0x10
[  275.459066][ T7984]  ? do_syscall_64+0xb6/0x230
[  275.459090][ T7984]  do_syscall_64+0xf3/0x230
[  275.459110][ T7984]  ? clear_bhb_loop+0x45/0xa0
[  275.459133][ T7984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.459164][ T7984] RIP: 0033:0x7fc95bd8d169
[  275.459181][ T7984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  275.459199][ T7984] RSP: 002b:00007fc95cbca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  275.459221][ T7984] RAX: ffffffffffffffda RBX: 00007fc95bfa5fa0 RCX: 00007fc95bd8d169
[  275.459236][ T7984] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[  275.459249][ T7984] RBP: 00007fc95cbca090 R08: 0000000000000000 R09: 0000000000000000
[  275.459262][ T7984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  275.459274][ T7984] R13: 0000000000000000 R14: 00007fc95bfa5fa0 R15: 00007ffc1793c658
[  275.459301][ T7984]  </TASK>
[  276.179963][   T30] kauditd_printk_skb: 10154 callbacks suppressed
[  276.180074][   T30] audit: type=1400 audit(1743138394.034:46887): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=7962 comm="syz.0.495" opid=7962 ocomm="syz.0.495"
[  276.184087][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64
[  276.193200][ T7985] audit: audit_backlog=65 > audit_backlog_limit=64
[  276.205839][ T5827] audit: audit_lost=20378 audit_rate_limit=0 audit_backlog_limit=64
[  276.212426][ T7987] audit: audit_backlog=65 > audit_backlog_limit=64
[  276.234831][ T5827] audit: backlog limit exceeded
[  276.235035][ T7987] audit: audit_lost=20379 audit_rate_limit=0 audit_backlog_limit=64
[  276.240515][ T5178] audit: audit_backlog=65 > audit_backlog_limit=64
[  276.248182][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64
[  276.248200][ T5827] audit: audit_lost=20380 audit_rate_limit=0 audit_backlog_limit=64
[  276.719377][ T5867] viewsonic 0003:2133:0018.0002: item fetching failed at offset 0/4
[  276.852673][ T5867] viewsonic 0003:2133:0018.0002: probe with driver viewsonic failed with error -22
[  277.296022][ T7999] 9p: Unknown access argument 00000000004294967295/Wby×¥—û˜2Ö�¢b‚ˆ/׃oÎäØ?žò¸ÿÍð¶7¥í> îñH{J«ÏIhvn4‡mêÀΑ¾á©‘|{Å+¿%DŸMM!’g’ß’Â"×Þ¤'hD¼ƒýK²»
[  277.296022][ T7999] \T…Tî�ú‡C&4‚ΠŽ£‡È8ž5ÛuèÇ~„²úK�Oq\΀ÊnµqEVÔ�ÁÍÛÜØÊC¾“Ä®‚Áü­v®9xñ–x9Kÿ½8Ÿ&×: -22
[  278.088157][ T7963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.096727][ T7963] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.204966][ T5868] usb 1-1: USB disconnect, device number 11
[  278.379109][ T8004] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  279.467739][ T8018] netlink: 32 bytes leftover after parsing attributes in process `syz.2.508'.
[  280.830039][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'.
[  281.208019][ T5829] audit_log_start: 12822 callbacks suppressed
[  281.208038][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64
[  281.220717][ T8037] audit: audit_backlog=65 > audit_backlog_limit=64
[  281.220770][ T8037] audit: audit_lost=23360 audit_rate_limit=0 audit_backlog_limit=64
[  281.220788][ T8037] audit: backlog limit exceeded
[  281.220811][ T8037] audit: audit_backlog=65 > audit_backlog_limit=64
[  281.220826][ T8037] audit: audit_lost=23361 audit_rate_limit=0 audit_backlog_limit=64
[  281.235992][   T30] audit: type=1400 audit(1743138398.674:50790): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="block" dev="sysfs" ino=13027
[  281.236037][   T30] audit: type=1400 audit(1743138398.674:50791): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="/" dev="sda1" ino=2
[  281.236071][   T30] audit: type=1400 audit(1743138398.674:50792): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="/" dev="sysfs" ino=1
[  281.236113][   T30] audit: type=1400 audit(1743138398.674:50793): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="devices" dev="sysfs" ino=7
[  281.649753][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'.
[  283.703710][ T8057] 9p: Unknown access argument 00000000004294967295/Wby×¥—û˜2Ö�¢b‚ˆ/׃oÎäØ?žò¸ÿÍð¶7¥í> îñH{J«ÏIhvn4‡mêÀΑ¾á©‘|{Å+¿%DŸMM!’g’ß’Â"×Þ¤'hD¼ƒýK²»
[  283.703710][ T8057] \T…Tî�ú‡C&4‚ΠŽ£‡È8ž5ÛuèÇ~„²úK�Oq\΀ÊnµqEVÔ�ÁÍÛÜØÊC¾“Ä®‚Áü­v®9xñ–x9Kÿ½8Ÿ&×: -22
[  285.480063][ T8066] could not allocate digest TFM handle sm3-generic
[  286.025193][ T8085] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  286.378229][   T30] kauditd_printk_skb: 12063 callbacks suppressed
[  286.378249][   T30] audit: type=1400 audit(1743138404.274:53873): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="/" dev="sda1" ino=2
[  286.416064][   T30] audit: type=1400 audit(1743138404.274:53874): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="/" dev="sysfs" ino=1
[  286.439673][   T30] audit: type=1400 audit(1743138404.274:53875): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="devices" dev="sysfs" ino=7
[  286.446129][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64
[  286.461002][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  286.471790][    C0] audit: audit_lost=26359 audit_rate_limit=0 audit_backlog_limit=64
[  286.479814][    C0] audit: backlog limit exceeded
[  286.484920][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  286.491478][    C0] audit: audit_lost=26360 audit_rate_limit=0 audit_backlog_limit=64
[  286.499496][    C0] audit: backlog limit exceeded
[  291.329427][ T8121] gfs2: gfs2 mount does not exist
[  291.387756][   T30] kauditd_printk_skb: 9690 callbacks suppressed
[  291.387775][   T30] audit: type=1400 audit(1743138409.284:56741): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7585 comm="udevd" name="/" dev="sda1" ino=2
[  291.414052][ T5196] audit: audit_backlog=66 > audit_backlog_limit=64
[  291.414114][ T8123] audit: audit_backlog=66 > audit_backlog_limit=64
[  291.420737][ T7585] audit: audit_backlog=67 > audit_backlog_limit=64
[  291.420754][ T7585] audit: audit_lost=28641 audit_rate_limit=0 audit_backlog_limit=64
[  291.427508][ T7429] audit: audit_backlog=67 > audit_backlog_limit=64
[  291.439853][ T8124] audit: audit_backlog=67 > audit_backlog_limit=64
[  291.451519][ T8125] audit: audit_backlog=67 > audit_backlog_limit=64
[  291.456139][ T8121] audit: audit_backlog=67 > audit_backlog_limit=64
[  291.468884][ T5196] audit: audit_lost=28642 audit_rate_limit=0 audit_backlog_limit=64
[  291.955247][   T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  292.068582][ T8135] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  292.117824][   T10] usb 1-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config
[  292.148063][   T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  292.201475][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  292.228767][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.276619][   T10] usb 1-1: Product: syz
[  292.300473][   T10] usb 1-1: Manufacturer: syz
[  292.318626][   T10] usb 1-1: SerialNumber: syz
[  292.337505][   T10] usb-storage 1-1:1.0: USB Mass Storage device detected
[  292.553058][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805e40f000: rx timeout, send abort
[  292.563739][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e40f000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  292.828443][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'.
[  293.171434][ T5867] usb 1-1: USB disconnect, device number 12
[  293.727213][ T8152] 9p: Unknown access argument 00000000004294967295/Wby×¥—û˜2Ö�¢b‚ˆ/׃oÎäØ?žò¸ÿÍð¶7¥í> îñH{J«ÏIhvn4‡mêÀΑ¾á©‘|{Å+¿%DŸMM!’g’ß’Â"×Þ¤'hD¼ƒýK²»
[  293.727213][ T8152] \T…Tî�ú‡C&4‚ΠŽ£‡È8ž5ÛuèÇ~„²úK�Oq\΀ÊnµqEVÔ�ÁÍÛÜØÊC¾“Ä®‚Áü­v®9xñ–x9Kÿ½8Ÿ&×: -22
[  293.752726][    C1] vkms_vblank_simulate: vblank timer overrun
[  296.395768][   T30] kauditd_printk_skb: 14330 callbacks suppressed
[  296.395790][   T30] audit: type=1400 audit(1743138414.284:63899): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5196 comm="udevd" path="/sys/devices/virtual/block/loop0/trace" dev="sysfs" ino=14775
[  296.409071][ T8174] audit: audit_backlog=65 > audit_backlog_limit=64
[  296.423463][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64
[  296.431200][ T5196] audit: audit_backlog=66 > audit_backlog_limit=64
[  296.443405][ T5178] audit: audit_backlog=66 > audit_backlog_limit=64
[  296.449397][ T5196] audit: audit_lost=31059 audit_rate_limit=0 audit_backlog_limit=64
[  296.450307][ T8174] audit: audit_lost=31060 audit_rate_limit=0 audit_backlog_limit=64
[  296.468067][ T5827] audit: audit_lost=31061 audit_rate_limit=0 audit_backlog_limit=64
[  296.473373][ T5196] audit: backlog limit exceeded
[  296.481913][ T5178] audit: audit_lost=31062 audit_rate_limit=0 audit_backlog_limit=64
[  296.772427][ T8175] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  297.752860][ T8181] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  298.546543][ T8197] gfs2: gfs2 mount does not exist
[  299.689996][ T8203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.556'.
[  299.711490][ T8203] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.719562][ T8203] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.010812][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'.
[  301.423234][    C1] audit_log_start: 10945 callbacks suppressed
[  301.423256][    C1] audit: audit_backlog=65 > audit_backlog_limit=64
[  301.436549][    C1] audit: audit_lost=33278 audit_rate_limit=0 audit_backlog_limit=64
[  301.444561][    C1] audit: backlog limit exceeded
[  301.449819][    C1] audit: audit_backlog=65 > audit_backlog_limit=64
[  301.456383][    C1] audit: audit_lost=33279 audit_rate_limit=0 audit_backlog_limit=64
[  301.464389][    C1] audit: backlog limit exceeded
[  301.469930][    C1] audit: audit_backlog=65 > audit_backlog_limit=64
[  301.476529][    C1] audit: audit_lost=33280 audit_rate_limit=0 audit_backlog_limit=64
[  301.484532][    C1] audit: backlog limit exceeded
[  301.489694][    C1] audit: audit_backlog=65 > audit_backlog_limit=64
[  301.605361][ T8222] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  301.865214][    T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  302.225137][    T9] usb 1-1: Using ep0 maxpacket: 16
[  302.234706][    T9] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  302.254196][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.269732][    T9] usb 1-1: Product: syz
[  302.273946][    T9] usb 1-1: Manufacturer: syz
[  302.279427][    T9] usb 1-1: SerialNumber: syz
[  302.328250][    T9] usb 1-1: config 0 descriptor??
[  302.336880][    T9] ums-onetouch 1-1:0.0: USB Mass Storage device detected
[  302.429900][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'.
[  302.457671][ T8233] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511)
[  302.503103][ T8233] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  302.542469][    T9] usb 1-1: USB disconnect, device number 13
[  302.559834][ T8223] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  302.598369][ T1155] Bluetooth: hci5: Frame reassembly failed (-84)
[  302.615152][ T1155] Bluetooth: hci5: Frame reassembly failed (-84)
[  303.109349][   T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  303.459212][   T24] usb 5-1: config 0 has an invalid interface number: 91 but max is 0
[  303.471446][   T24] usb 5-1: config 0 has no interface number 0
[  303.481476][   T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=a9d2, bcdDevice=95.16
[  303.572673][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.582346][   T24] usb 5-1: Product: syz
[  303.588269][   T24] usb 5-1: Manufacturer: syz
[  303.592904][   T24] usb 5-1: SerialNumber: syz
[  303.603809][   T24] usb 5-1: config 0 descriptor??
[  303.625389][ T5868] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  304.033630][ T5868] usb 3-1: config 0 has no interfaces?
[  304.633901][ T5868] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  304.643315][   T55] Bluetooth: hci5: command 0x1003 tx timeout
[  304.649834][ T5137] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  304.661813][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.670646][ T5868] usb 3-1: Product: syz
[  304.674953][ T5868] usb 3-1: Manufacturer: syz
[  304.685164][ T5868] usb 3-1: SerialNumber: syz
[  304.692771][ T8240] fusectl: Unknown parameter 'smackd-fabÎrics'
[  304.836007][ T5868] usb 3-1: config 0 descriptor??
[  304.868410][   T24] usb 5-1: USB disconnect, device number 12
[  306.551466][   T30] kauditd_printk_skb: 9513 callbacks suppressed
[  306.551483][   T30] audit: type=1400 audit(1743138424.304:74292): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=8265 comm="syz.3.574" opid=8265 ocomm="syz.3.574"
[  306.572089][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64
[  306.578392][ T8268] audit: audit_backlog=65 > audit_backlog_limit=64
[  306.583036][ T7429] audit: audit_backlog=65 > audit_backlog_limit=64
[  306.597037][ T5196] audit: audit_lost=34432 audit_rate_limit=0 audit_backlog_limit=64
[  306.623189][ T8268] audit: audit_lost=34433 audit_rate_limit=0 audit_backlog_limit=64
[  306.646225][ T8268] audit: backlog limit exceeded
[  306.659020][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  306.665703][    C0] audit: audit_lost=34434 audit_rate_limit=0 audit_backlog_limit=64
[  306.673803][    C0] audit: backlog limit exceeded
[  306.740167][    T9] usb 3-1: USB disconnect, device number 14
[  306.765718][ T8271] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  311.015204][    T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  311.428293][ T8310] fuse: Unknown parameter 'àæõ«¶íp_ß0x000000000000000b'
[  311.446697][    T9] usb 3-1: config 0 has an invalid interface number: 91 but max is 0
[  311.454834][    T9] usb 3-1: config 0 has no interface number 0
[  311.504031][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=a9d2, bcdDevice=95.16
[  311.546816][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.559165][   T30] kauditd_printk_skb: 10800 callbacks suppressed
[  311.559184][   T30] audit: type=1400 audit(1743138429.444:78684): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="udev" dev="tmpfs" ino=9
[  311.640048][ T5818] audit: audit_backlog=65 > audit_backlog_limit=64
[  311.647565][    T9] usb 3-1: Product: syz
[  311.652550][ T8313] audit: audit_backlog=65 > audit_backlog_limit=64
[  311.652641][    T9] usb 3-1: Manufacturer: syz
[  311.659245][ T8313] audit: audit_lost=36581 audit_rate_limit=0 audit_backlog_limit=64
[  311.659268][ T8313] audit: backlog limit exceeded
[  311.668417][    T9] usb 3-1: SerialNumber: syz
[  311.671913][ T8313] audit: audit_backlog=65 > audit_backlog_limit=64
[  311.687914][ T8313] audit: audit_lost=36582 audit_rate_limit=0 audit_backlog_limit=64
[  311.691113][   T30] audit: type=1400 audit(1743138429.444:78685): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5196 comm="udevd" name="udev" dev="tmpfs" ino=9
[  311.695932][ T8313] audit: backlog limit exceeded
[  311.696140][ T8313] audit: audit_backlog=65 > audit_backlog_limit=64
[  311.816696][    T9] usb 3-1: config 0 descriptor??
[  312.235263][   T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  312.666945][   T10] usb 5-1: config 0 has no interfaces?
[  312.676005][   T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  312.695129][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.714867][   T10] usb 5-1: Product: syz
[  312.720777][   T10] usb 5-1: Manufacturer: syz
[  312.733491][   T10] usb 5-1: SerialNumber: syz
[  312.748950][ T8304] fusectl: Unknown parameter 'smackd-fabÎrics'
[  312.847673][    T9] usb 3-1: USB disconnect, device number 15
[  312.882012][   T10] usb 5-1: config 0 descriptor??
[  312.965462][ T8326] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  315.113492][ T5868] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  315.655528][ T5867] usb 5-1: USB disconnect, device number 13
[  315.806125][ T5868] usb 2-1: Using ep0 maxpacket: 16
[  315.845290][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  315.863841][ T5868] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  315.879740][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.940623][ T5868] usb 2-1: config 0 descriptor??
[  316.595418][ T8356] netlink: 212 bytes leftover after parsing attributes in process `syz.3.601'.
[  316.597179][   T30] kauditd_printk_skb: 15611 callbacks suppressed
[  316.597199][   T30] audit: type=1400 audit(1743138434.144:83761): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=8352 comm="syz.3.601" opid=8352 ocomm="syz.3.601"
[  316.631447][ T8356] audit: audit_backlog=65 > audit_backlog_limit=64
[  316.638135][ T8356] audit: audit_lost=40120 audit_rate_limit=0 audit_backlog_limit=64
[  316.646357][ T8356] audit: backlog limit exceeded
[  316.684739][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64
[  316.696656][ T5196] audit: audit_lost=40121 audit_rate_limit=0 audit_backlog_limit=64
[  316.715205][ T5196] audit: backlog limit exceeded
[  316.720436][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64
[  316.733259][ T5196] audit: audit_lost=40122 audit_rate_limit=0 audit_backlog_limit=64
[  316.741659][ T5196] audit: backlog limit exceeded
[  317.611921][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  317.625271][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  318.239569][ T5868] usbhid 2-1:0.0: can't add hid device: -71
[  318.271402][ T5868] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  318.284718][ T5137] Bluetooth: hci3: unexpected event for opcode 0x2019
[  318.488789][ T5868] usb 2-1: USB disconnect, device number 10
[  318.502316][ T7429] udevd[7429]: setting mode of /dev/bus/usb/002/010 to 020664 failed: No such file or directory
[  318.514659][ T7429] udevd[7429]: setting owner of /dev/bus/usb/002/010 to uid=0, gid=0 failed: No such file or directory
[  321.652476][   T30] kauditd_printk_skb: 9026 callbacks suppressed
[  321.652495][   T30] audit: type=1400 audit(1743138439.544:87362): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5834 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[  321.683474][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64
[  321.684596][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64
[  321.690448][ T5822] audit: audit_backlog=65 > audit_backlog_limit=64
[  321.717836][ T5834] audit: audit_lost=41937 audit_rate_limit=0 audit_backlog_limit=64
[  321.740356][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  321.746928][    C0] audit: audit_lost=41938 audit_rate_limit=0 audit_backlog_limit=64
[  321.754902][    C0] audit: backlog limit exceeded
[  321.760172][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  321.766721][    C0] audit: audit_lost=41939 audit_rate_limit=0 audit_backlog_limit=64
[  322.347475][ T5137] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  322.372374][ T5137] Bluetooth: hci3: Injecting HCI hardware error event
[  322.388098][ T5137] Bluetooth: hci3: hardware error 0x00
[  323.262600][ T8413] block device autoloading is deprecated and will be removed.
[  324.475217][ T5137] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  326.655130][   T30] kauditd_printk_skb: 5223 callbacks suppressed
[  326.655151][   T30] audit: type=1400 audit(1743138444.544:90428): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="/" dev="sda1" ino=2
[  326.866706][ T5822] audit: audit_backlog=65 > audit_backlog_limit=64
[  326.875336][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  326.881931][    C0] audit: audit_lost=42665 audit_rate_limit=0 audit_backlog_limit=64
[  326.889978][    C0] audit: backlog limit exceeded
[  326.895332][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  326.901880][    C0] audit: audit_lost=42666 audit_rate_limit=0 audit_backlog_limit=64
[  326.909927][    C0] audit: backlog limit exceeded
[  326.914947][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  326.921521][    C0] audit: audit_lost=42667 audit_rate_limit=0 audit_backlog_limit=64
[  328.252107][ T8453] FAULT_INJECTION: forcing a failure.
[  328.252107][ T8453] name failslab, interval 1, probability 0, space 0, times 0
[  328.289921][ T8453] CPU: 1 UID: 0 PID: 8453 Comm: syz.1.627 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  328.289964][ T8453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  328.289977][ T8453] Call Trace:
[  328.289985][ T8453]  <TASK>
[  328.289993][ T8453]  dump_stack_lvl+0x241/0x360
[  328.290025][ T8453]  ? __pfx_dump_stack_lvl+0x10/0x10
[  328.290050][ T8453]  ? __pfx__printk+0x10/0x10
[  328.290076][ T8453]  ? __pfx___might_resched+0x10/0x10
[  328.290109][ T8453]  should_fail_ex+0x424/0x570
[  328.290141][ T8453]  should_failslab+0xac/0x100
[  328.290173][ T8453]  kmem_cache_alloc_lru_noprof+0x7d/0x390
[  328.290193][ T8453]  ? __d_alloc+0x31/0x740
[  328.290222][ T8453]  __d_alloc+0x31/0x740
[  328.290249][ T8453]  d_alloc_parallel+0xe9/0x1640
[  328.290286][ T8453]  ? __d_lookup+0x64/0x7b0
[  328.290312][ T8453]  ? __d_lookup+0x64/0x7b0
[  328.290338][ T8453]  ? __pfx_d_alloc_parallel+0x10/0x10
[  328.290369][ T8453]  ? __raw_spin_lock_init+0x45/0x100
[  328.290392][ T8453]  ? __init_waitqueue_head+0xae/0x150
[  328.290419][ T8453]  proc_fill_cache+0x2b4/0x440
[  328.290451][ T8453]  ? __pfx_proc_pident_instantiate+0x10/0x10
[  328.290481][ T8453]  ? __pfx_proc_fill_cache+0x10/0x10
[  328.290526][ T8453]  proc_pident_readdir+0x380/0x4c0
[  328.290563][ T8453]  iterate_dir+0x5a9/0x760
[  328.290594][ T8453]  __se_sys_getdents+0x1ff/0x4e0
[  328.290636][ T8453]  ? __pfx___se_sys_getdents+0x10/0x10
[  328.290662][ T8453]  ? ksys_write+0x275/0x2d0
[  328.290686][ T8453]  ? __pfx_filldir+0x10/0x10
[  328.290722][ T8453]  ? do_syscall_64+0xb6/0x230
[  328.290745][ T8453]  do_syscall_64+0xf3/0x230
[  328.290765][ T8453]  ? clear_bhb_loop+0x45/0xa0
[  328.290786][ T8453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.290806][ T8453] RIP: 0033:0x7fc46418d169
[  328.290823][ T8453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  328.290840][ T8453] RSP: 002b:00007fc464f05038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  328.290861][ T8453] RAX: ffffffffffffffda RBX: 00007fc4643a5fa0 RCX: 00007fc46418d169
[  328.290876][ T8453] RDX: 00000000000000b6 RSI: 0000200000001fc0 RDI: 0000000000000004
[  328.290889][ T8453] RBP: 00007fc464f05090 R08: 0000000000000000 R09: 0000000000000000
[  328.290902][ T8453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  328.290914][ T8453] R13: 0000000000000000 R14: 00007fc4643a5fa0 R15: 00007ffc8a3e52d8
[  328.290938][ T8453]  </TASK>
[  328.535509][    C1] vkms_vblank_simulate: vblank timer overrun
[  331.755562][   T30] kauditd_printk_skb: 11527 callbacks suppressed
[  331.755788][   T30] audit: type=1400 audit(1743138448.794:93900): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=8478 comm="syz.2.635" opid=8478 ocomm="syz.2.635"
[  331.945013][   T30] audit: type=1400 audit(1743138448.824:93901): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8478 comm="syz.2.635" saddr=10.128.0.169 src=30008 daddr=10.128.0.48 dest=49938 netif=eth0
[  332.629386][ T8492] audit: audit_backlog=65 > audit_backlog_limit=64
[  332.636518][ T8492] audit: audit_lost=45362 audit_rate_limit=0 audit_backlog_limit=64
[  332.644917][ T8492] audit: backlog limit exceeded
[  332.872357][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  332.878979][    C0] audit: audit_lost=45363 audit_rate_limit=0 audit_backlog_limit=64
[  332.887066][    C0] audit: backlog limit exceeded
[  332.953520][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64
[  332.960972][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  333.890125][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'.
[  336.048373][ T5870] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  336.317275][ T5870] usb 1-1: device descriptor read/64, error -71
[  336.647061][ T5870] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  336.859244][   T30] kauditd_printk_skb: 15639 callbacks suppressed
[  336.859264][   T30] audit: type=1400 audit(1743138454.754:98217): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="/" dev="sda1" ino=2
[  336.909652][ T7429] audit: audit_backlog=65 > audit_backlog_limit=64
[  336.919554][ T5822] audit: audit_backlog=65 > audit_backlog_limit=64
[  336.930826][   T30] audit: type=1400 audit(1743138454.784:98218): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="/" dev="sysfs" ino=1
[  336.949539][   T30] audit: type=1400 audit(1743138454.784:98219): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="devices" dev="sysfs" ino=7
[  336.955245][ T5870] usb 1-1: device descriptor read/64, error -71
[  336.972913][   T30] audit: type=1400 audit(1743138454.784:98220): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="virtual" dev="sysfs" ino=1369
[  336.976754][ T5822] audit: audit_lost=49150 audit_rate_limit=0 audit_backlog_limit=64
[  336.997513][   T30] audit: type=1400 audit(1743138454.784:98221): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="misc" dev="sysfs" ino=3805
[  337.005149][ T7429] audit: audit_lost=49151 audit_rate_limit=0 audit_backlog_limit=64
[  337.030548][ T5822] audit: backlog limit exceeded
[  337.135383][ T5870] usb usb1-port1: attempt power cycle
[  338.315265][ T5870] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  338.350687][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'.
[  338.395412][ T5870] usb 1-1: device descriptor read/8, error -71
[  338.522737][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'.
[  338.655219][ T5870] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  338.885114][ T5870] usb 1-1: device not accepting address 17, error -71
[  338.905525][ T5870] usb usb1-port1: unable to enumerate USB device
[  340.736525][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'.
[  341.691222][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'.
[  341.700435][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.668'.
[  341.712201][ T8583] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  341.720955][ T8583] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  341.729694][ T8583] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  341.865317][   T30] kauditd_printk_skb: 19048 callbacks suppressed
[  341.865337][   T30] audit: type=1400 audit(1743138459.764:106524): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8589 comm="modprobe" saddr=172.20.20.170 src=20003 daddr=172.20.20.170 dest=20003 netif=lo
[  341.880809][ T8589] audit: audit_backlog=65 > audit_backlog_limit=64
[  341.894404][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  341.901064][ T8589] audit: audit_lost=52746 audit_rate_limit=0 audit_backlog_limit=64
[  341.907291][    C0] audit: audit_lost=52747 audit_rate_limit=0 audit_backlog_limit=64
[  341.907312][    C0] audit: backlog limit exceeded
[  341.925283][ T7429] audit: audit_backlog=65 > audit_backlog_limit=64
[  341.934863][ T7429] audit: audit_lost=52748 audit_rate_limit=0 audit_backlog_limit=64
[  341.950497][ T5822] audit: audit_backlog=65 > audit_backlog_limit=64
[  341.957322][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  343.354382][ T8605] netlink: 65024 bytes leftover after parsing attributes in process `syz.2.676'.
[  344.200742][ T8619] netlink: 'syz.0.682': attribute type 1 has an invalid length.
[  344.286156][ T8619] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.682'.
[  344.619507][   T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  344.628808][   T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  344.642890][   T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  344.651810][   T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  344.659653][   T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  345.994118][ T8642] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  346.983306][ T7429] audit_log_start: 21024 callbacks suppressed
[  346.983323][ T7429] audit: audit_backlog=65 > audit_backlog_limit=64
[  347.000291][ T5137] Bluetooth: hci5: command tx timeout
[  347.006604][   T30] audit: type=1400 audit(1743138464.134:112820): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=8646 comm="syz.1.689" opid=8646 ocomm="syz.1.689"
[  347.033428][ T7429] audit: audit_lost=57689 audit_rate_limit=0 audit_backlog_limit=64
[  347.035722][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'.
[  347.041950][   T30] audit: type=1400 audit(1743138464.284:112821): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30008 daddr=10.128.0.48 dest=49938 netif=eth0
[  347.073986][   T30] audit: type=1400 audit(1743138464.874:112822): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8646 comm="syz.1.689" name="newroot" dev="tmpfs" ino=2
[  347.093131][   T30] audit: type=1400 audit(1743138464.874:112823): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8646 comm="syz.1.689" name="/" dev="devtmpfs" ino=1
[  347.112394][ T8652] audit: audit_backlog=65 > audit_backlog_limit=64
[  347.119509][ T5178] audit: audit_backlog=65 > audit_backlog_limit=64
[  347.151193][ T7429] audit: backlog limit exceeded
[  347.165314][ T7429] audit: audit_backlog=65 > audit_backlog_limit=64
[  347.214586][ T8625] chnl_net:caif_netlink_parms(): no params data found
[  347.596495][ T8625] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.603627][ T8625] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.646045][ T8625] bridge_slave_0: entered allmulticast mode
[  347.667376][ T8625] bridge_slave_0: entered promiscuous mode
[  347.688971][ T8625] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.755573][ T8625] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.773028][ T8625] bridge_slave_1: entered allmulticast mode
[  347.786193][ T8625] bridge_slave_1: entered promiscuous mode
[  347.805923][ T8672] netlink: 798 bytes leftover after parsing attributes in process `syz.0.696'.
[  347.976437][ T8625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  348.024192][ T8625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  348.258583][ T8625] team0: Port device team_slave_0 added
[  348.306463][ T8625] team0: Port device team_slave_1 added
[  348.390282][ T8686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.700'.
[  348.443740][ T8625] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.506937][ T8625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.275299][ T5137] Bluetooth: hci5: command tx timeout
[  349.314115][ T8625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.456509][ T8693] autofs: Unknown parameter '0x0000000000000000'
[  349.496353][ T8695] program syz.1.702 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  349.533635][ T8625] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.574556][ T8625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.661127][ T8625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.869443][ T8625] hsr_slave_0: entered promiscuous mode
[  349.943291][ T8625] hsr_slave_1: entered promiscuous mode
[  349.950990][ T8625] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  349.958663][ T8625] Cannot create hsr debugfs directory
[  351.355375][ T5137] Bluetooth: hci5: command tx timeout
[  351.471794][ T8625] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  352.161999][   T30] kauditd_printk_skb: 21547 callbacks suppressed
[  352.162021][   T30] audit: type=1400 audit(1743138469.794:121286): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=7585 comm="udevd" name="loop0" dev="devtmpfs" ino=647
[  352.250954][ T7585] audit: audit_backlog=65 > audit_backlog_limit=64
[  352.255719][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64
[  352.269242][ T8625] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  352.270074][ T8721] audit: audit_backlog=65 > audit_backlog_limit=64
[  352.276192][ T5196] audit: audit_lost=62082 audit_rate_limit=0 audit_backlog_limit=64
[  352.350928][ T8721] audit: audit_lost=62083 audit_rate_limit=0 audit_backlog_limit=64
[  352.369889][ T5822] audit: audit_backlog=65 > audit_backlog_limit=64
[  352.379075][   T30] audit: type=1400 audit(1743138470.044:121287): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=7585 comm="udevd" path="/dev/loop0" dev="devtmpfs" ino=647
[  352.389145][ T8625] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  352.398927][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64
[  352.405263][ T5196] audit: backlog limit exceeded
[  352.432050][ T8625] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  353.231648][ T8625] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.291809][ T8625] 8021q: adding VLAN 0 to HW filter on device team0
[  353.352327][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.359513][ T5939] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.445186][ T5137] Bluetooth: hci5: command tx timeout
[  353.453962][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.461154][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.545457][ T8735] autofs: Unknown parameter 'fd0x0000000000000000'
[  353.600715][ T8625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  355.251835][ T8625] 8021q: adding VLAN 0 to HW filter on device batadv0
[  356.473996][ T8777] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  356.705836][ T5900] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  356.915125][ T5900] usb 1-1: Using ep0 maxpacket: 16
[  356.917391][ T8625] veth0_vlan: entered promiscuous mode
[  356.961742][ T8625] veth1_vlan: entered promiscuous mode
[  356.965180][ T5900] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.000061][ T5900] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  357.030675][ T5900] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  357.065427][ T5900] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  357.092067][ T8625] veth0_macvtap: entered promiscuous mode
[  357.120951][ T8625] veth1_macvtap: entered promiscuous mode
[  357.137578][ T5900] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  357.155185][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  357.163223][ T5900] usb 1-1: SerialNumber: syz
[  357.189593][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  357.198396][   T30] kauditd_printk_skb: 11279 callbacks suppressed
[  357.198413][   T30] audit: type=1400 audit(1743138475.084:127585): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1
[  357.232835][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  357.233633][ T5822] audit: audit_backlog=65 > audit_backlog_limit=64
[  357.250238][   T26] audit: audit_backlog=65 > audit_backlog_limit=64
[  357.259690][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  357.273031][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  357.279617][    C0] audit: audit_lost=63751 audit_rate_limit=0 audit_backlog_limit=64
[  357.285171][   T26] audit: audit_lost=63752 audit_rate_limit=0 audit_backlog_limit=64
[  357.287684][    C0] audit: backlog limit exceeded
[  357.301052][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  357.307644][    C0] audit: audit_lost=63753 audit_rate_limit=0 audit_backlog_limit=64
[  357.315688][    C0] audit: backlog limit exceeded
[  357.328568][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  357.341300][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  357.364513][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  357.368393][ T5900] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12
[  357.402391][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  357.442768][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  357.473704][ T8799] autofs: Unknown parameter 'fd0x0000000000000000'
[  357.474929][ T8625] batman_adv: batadv0: Interface activated: batadv_slave_0
[  357.550876][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  357.589037][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  357.613620][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  357.642332][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  357.659710][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  357.671401][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  357.701241][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  357.738154][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  357.767574][ T8625] batman_adv: batadv0: Interface activated: batadv_slave_1
[  357.796838][ T8625] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  357.821698][ T8625] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  357.855183][ T8625] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  357.870856][ T8625] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.325356][ T5900] usb 1-1: USB disconnect, device number 18
[  360.539503][ T7769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  360.567909][ T7769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  360.754235][ T5100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  360.765173][   T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  360.808487][ T5100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.649180][   T10] usb 3-1: config 0 has an invalid interface number: 91 but max is 0
[  361.667928][   T10] usb 3-1: config 0 has no interface number 0
[  361.697143][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=a9d2, bcdDevice=95.16
[  361.765956][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.773994][   T10] usb 3-1: Product: syz
[  361.825163][   T10] usb 3-1: Manufacturer: syz
[  361.845905][   T10] usb 3-1: SerialNumber: syz
[  361.876791][   T10] usb 3-1: config 0 descriptor??
[  361.923539][ T8836] autofs: Unknown parameter 'fd0x0000000000000000'
[  362.200315][ T5196] audit_log_start: 7590 callbacks suppressed
[  362.200335][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64
[  362.214027][   T30] audit: type=1400 audit(1743138480.094:132665): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="/" dev="sda1" ino=2
[  362.215840][ T8842] audit: audit_backlog=65 > audit_backlog_limit=64
[  362.239339][ T8843] audit: audit_backlog=65 > audit_backlog_limit=64
[  362.245687][ T5178] audit: audit_backlog=65 > audit_backlog_limit=64
[  362.252363][ T5178] audit: audit_lost=64591 audit_rate_limit=0 audit_backlog_limit=64
[  362.260547][ T8843] audit: audit_lost=64592 audit_rate_limit=0 audit_backlog_limit=64
[  362.266619][ T5196] audit: audit_lost=64593 audit_rate_limit=0 audit_backlog_limit=64
[  362.305390][ T5178] audit: backlog limit exceeded
[  362.305617][ T8820] audit: audit_backlog=65 > audit_backlog_limit=64
[  362.352944][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'.
[  362.454498][ T8846] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  362.654461][ T8820] fusectl: Unknown parameter 'smackd-fabÎrics'
[  362.938157][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.679'.
[  362.979010][   T10] usb 3-1: USB disconnect, device number 16
[  363.316974][ T8857] FAULT_INJECTION: forcing a failure.
[  363.316974][ T8857] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  363.395657][ T8857] CPU: 0 UID: 0 PID: 8857 Comm: syz.1.745 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  363.395688][ T8857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  363.395701][ T8857] Call Trace:
[  363.395709][ T8857]  <TASK>
[  363.395717][ T8857]  dump_stack_lvl+0x241/0x360
[  363.395748][ T8857]  ? __pfx_dump_stack_lvl+0x10/0x10
[  363.395773][ T8857]  ? __pfx__printk+0x10/0x10
[  363.395802][ T8857]  should_fail_ex+0x424/0x570
[  363.395835][ T8857]  _copy_to_user+0x31/0xb0
[  363.395861][ T8857]  simple_read_from_buffer+0xdc/0x170
[  363.395896][ T8857]  proc_fail_nth_read+0x1ef/0x260
[  363.395922][ T8857]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  363.395948][ T8857]  ? rw_verify_area+0x246/0x630
[  363.395973][ T8857]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  363.395998][ T8857]  vfs_read+0x21f/0xb90
[  363.396026][ T8857]  ? __pfx___mutex_lock+0x10/0x10
[  363.396048][ T8857]  ? __pfx_vfs_read+0x10/0x10
[  363.396075][ T8857]  ? __fget_files+0x2a/0x420
[  363.396098][ T8857]  ? __fget_files+0x39d/0x420
[  363.396125][ T8857]  ? __fget_files+0x2a/0x420
[  363.396152][ T8857]  ksys_read+0x19d/0x2d0
[  363.396179][ T8857]  ? __pfx_ksys_read+0x10/0x10
[  363.396209][ T8857]  ? do_syscall_64+0xb6/0x230
[  363.396233][ T8857]  do_syscall_64+0xf3/0x230
[  363.396253][ T8857]  ? clear_bhb_loop+0x45/0xa0
[  363.396277][ T8857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.396297][ T8857] RIP: 0033:0x7fc46418bb7c
[  363.396314][ T8857] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  363.396331][ T8857] RSP: 002b:00007fc461ff6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  363.396353][ T8857] RAX: ffffffffffffffda RBX: 00007fc4643a6080 RCX: 00007fc46418bb7c
[  363.396368][ T8857] RDX: 000000000000000f RSI: 00007fc461ff60a0 RDI: 0000000000000003
[  363.396381][ T8857] RBP: 00007fc461ff6090 R08: 0000000000000000 R09: 0000000000000000
[  363.396394][ T8857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  363.396407][ T8857] R13: 0000000000000001 R14: 00007fc4643a6080 R15: 00007ffc8a3e52d8
[  363.396432][ T8857]  </TASK>
[  364.629966][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.631249][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.632230][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.901872][ T8858] tty tty31: ldisc open failed (-12), clearing slot 30
[  365.275310][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.613362][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.992036][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.229743][   T30] kauditd_printk_skb: 5577 callbacks suppressed
[  367.229766][   T30] audit: type=1400 audit(1743138484.994:134630): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8878 comm="syz.3.750" saddr=10.128.0.169 src=30008 daddr=10.128.0.48 dest=49938 netif=eth0
[  367.995452][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.229951][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.274803][ T8886] audit: audit_backlog=65 > audit_backlog_limit=64
[  368.570411][ T8886] audit: audit_lost=65799 audit_rate_limit=0 audit_backlog_limit=64
[  368.603438][ T8625] audit: audit_backlog=65 > audit_backlog_limit=64
[  368.610236][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  368.616817][    C0] audit: audit_lost=65800 audit_rate_limit=0 audit_backlog_limit=64
[  368.624814][    C0] audit: backlog limit exceeded
[  368.635669][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64
[  368.642224][ T5827] audit: audit_lost=65801 audit_rate_limit=0 audit_backlog_limit=64
[  368.655551][ T8885] audit: audit_backlog=65 > audit_backlog_limit=64
[  369.276315][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.928584][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'.
[  370.932652][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.064490][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.078832][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.464540][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.949082][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.957975][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.076529][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.238217][   T30] kauditd_printk_skb: 5199 callbacks suppressed
[  372.238236][   T30] audit: type=1400 audit(1743138490.134:136661): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="virtual" dev="sysfs" ino=1369
[  372.390627][   T30] audit: type=1400 audit(1743138490.264:136662): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="block" dev="sysfs" ino=13027
[  372.568329][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64
[  372.577503][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64
[  372.577759][ T8921] audit: audit_backlog=65 > audit_backlog_limit=64
[  372.584135][ T5829] audit: audit_lost=66874 audit_rate_limit=0 audit_backlog_limit=64
[  372.590914][   T30] audit: type=1400 audit(1743138490.264:136663): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="loop5" dev="sysfs" ino=15343
[  372.598984][ T5822] audit: audit_backlog=65 > audit_backlog_limit=64
[  372.650127][ T5196] audit: audit_lost=66875 audit_rate_limit=0 audit_backlog_limit=64
[  372.678554][ T8920] audit: audit_backlog=65 > audit_backlog_limit=64
[  372.795738][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  373.231876][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.029658][ T8939] FAULT_INJECTION: forcing a failure.
[  374.029658][ T8939] name failslab, interval 1, probability 0, space 0, times 0
[  374.042564][ T8939] CPU: 1 UID: 0 PID: 8939 Comm: syz.2.768 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  374.042594][ T8939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  374.042607][ T8939] Call Trace:
[  374.042615][ T8939]  <TASK>
[  374.042624][ T8939]  dump_stack_lvl+0x241/0x360
[  374.042656][ T8939]  ? __pfx_dump_stack_lvl+0x10/0x10
[  374.042695][ T8939]  should_fail_ex+0x424/0x570
[  374.042729][ T8939]  should_failslab+0xac/0x100
[  374.042762][ T8939]  __kmalloc_noprof+0xdf/0x4d0
[  374.042781][ T8939]  ? copy_net_ns+0x110/0x570
[  374.042808][ T8939]  copy_net_ns+0x110/0x570
[  374.042829][ T8939]  ? copy_cgroup_ns+0x455/0x600
[  374.042852][ T8939]  create_new_namespaces+0x425/0x7b0
[  374.042895][ T8939]  unshare_nsproxy_namespaces+0x124/0x180
[  374.042929][ T8939]  ksys_unshare+0x5e2/0xad0
[  374.042957][ T8939]  ? __pfx_ksys_unshare+0x10/0x10
[  374.042982][ T8939]  ? trace_irq_enable+0x2c/0x120
[  374.043010][ T8939]  __x64_sys_unshare+0x38/0x40
[  374.043029][ T8939]  do_syscall_64+0xf3/0x230
[  374.043051][ T8939]  ? clear_bhb_loop+0x45/0xa0
[  374.043075][ T8939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.043096][ T8939] RIP: 0033:0x7fa63878d169
[  374.043114][ T8939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  374.043132][ T8939] RSP: 002b:00007fa639678038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  374.043155][ T8939] RAX: ffffffffffffffda RBX: 00007fa6389a6160 RCX: 00007fa63878d169
[  374.043171][ T8939] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200
[  374.043184][ T8939] RBP: 00007fa639678090 R08: 0000000000000000 R09: 0000000000000000
[  374.043197][ T8939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  374.043210][ T8939] R13: 0000000000000000 R14: 00007fa6389a6160 R15: 00007ffc80e9db58
[  374.043245][ T8939]  </TASK>
[  374.231211][    C1] vkms_vblank_simulate: vblank timer overrun
[  374.329580][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.034413][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.770'.
[  376.399481][ T5867] net_ratelimit: 2 callbacks suppressed
[  376.399501][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.273528][   T30] kauditd_printk_skb: 10692 callbacks suppressed
[  377.273571][   T30] audit: type=1400 audit(1743138495.034:139813): lsm=SMACK fn=smack_unix_may_send action=granted subject="_" object="_" requested=w pid=5489 comm="dhcpcd"
[  377.442238][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.589699][ T7429] audit: audit_backlog=65 > audit_backlog_limit=64
[  377.624831][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64
[  377.635319][ T7507] audit: audit_backlog=66 > audit_backlog_limit=64
[  377.641876][ T7507] audit: audit_lost=69405 audit_rate_limit=0 audit_backlog_limit=64
[  377.670902][ T8959] audit: audit_backlog=66 > audit_backlog_limit=64
[  377.677749][ T8959] audit: audit_lost=69406 audit_rate_limit=0 audit_backlog_limit=64
[  377.685726][ T8959] audit: backlog limit exceeded
[  377.700621][ T5196] audit: audit_lost=69407 audit_rate_limit=0 audit_backlog_limit=64
[  377.716124][ T7429] audit: audit_lost=69408 audit_rate_limit=0 audit_backlog_limit=64
[  377.999028][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.117822][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'.
[  378.885704][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  378.893285][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  378.978331][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.190246][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.783'.
[  380.331607][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.164337][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.181989][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.475449][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.306979][ T7429] audit_log_start: 7780 callbacks suppressed
[  382.307001][ T7429] audit: audit_backlog=65 > audit_backlog_limit=64
[  382.331341][ T9023] audit: audit_backlog=65 > audit_backlog_limit=64
[  382.338237][ T5178] audit: audit_backlog=65 > audit_backlog_limit=64
[  382.375351][ T5178] audit: audit_lost=70950 audit_rate_limit=0 audit_backlog_limit=64
[  382.390083][ T9023] audit: audit_lost=70951 audit_rate_limit=0 audit_backlog_limit=64
[  382.412219][ T7429] audit: audit_lost=70952 audit_rate_limit=0 audit_backlog_limit=64
[  382.436015][ T9025] audit: audit_backlog=65 > audit_backlog_limit=64
[  382.445251][ T5178] audit: backlog limit exceeded
[  382.450144][ T5178] audit: audit_backlog=65 > audit_backlog_limit=64
[  382.485924][ T9023] audit: backlog limit exceeded
[  382.555594][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.633674][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.046890][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.362337][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.090818][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.125429][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.487235][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.798'.
[  386.479376][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.503629][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.511864][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.326140][   T30] kauditd_printk_skb: 4162 callbacks suppressed
[  387.326159][   T30] audit: type=1400 audit(1743138505.224:144966): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8625 comm="syz-executor" name="newroot" dev="tmpfs" ino=2
[  387.366280][ T8625] audit: audit_backlog=65 > audit_backlog_limit=64
[  387.366282][ T5818] audit: audit_backlog=65 > audit_backlog_limit=64
[  387.366303][ T8625] audit: audit_lost=71681 audit_rate_limit=0 audit_backlog_limit=64
[  387.372824][ T5818] audit: audit_lost=71682 audit_rate_limit=0 audit_backlog_limit=64
[  387.581426][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.597764][ T5818] audit: backlog limit exceeded
[  387.617052][   T30] audit: type=1400 audit(1743138505.254:144967): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5178 comm="syslogd" name="/" dev="sda1" ino=2
[  387.634053][ T5818] audit: audit_backlog=65 > audit_backlog_limit=64
[  387.636512][   T30] audit: type=1400 audit(1743138505.254:144968): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5178 comm="syslogd" name="var" dev="sda1" ino=1906
[  387.645304][ T8625] audit: backlog limit exceeded
[  388.155447][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.521204][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.641022][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.075115][ T5870] usb 2-1: new low-speed USB device number 11 using dummy_hcd
[  390.113243][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.139120][ T5870] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt
[  390.246589][ T9090] sctp: [Deprecated]: syz.3.809 (pid 9090) Use of int in maxseg socket option.
[  390.246589][ T9090] Use struct sctp_assoc_value instead
[  390.485694][ T5870] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt
[  390.577417][ T5870] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  391.152027][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.225129][ T5870] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  391.244514][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.315966][ T5870] usbtmc 2-1:16.0: bulk endpoints not found
[  391.595283][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.045173][ T9104] FAULT_INJECTION: forcing a failure.
[  392.045173][ T9104] name failslab, interval 1, probability 0, space 0, times 0
[  392.058061][ T9104] CPU: 1 UID: 0 PID: 9104 Comm: syz.5.812 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  392.058089][ T9104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  392.058103][ T9104] Call Trace:
[  392.058112][ T9104]  <TASK>
[  392.058122][ T9104]  dump_stack_lvl+0x241/0x360
[  392.058153][ T9104]  ? __pfx_dump_stack_lvl+0x10/0x10
[  392.058178][ T9104]  ? __pfx__printk+0x10/0x10
[  392.058204][ T9104]  ? __pfx___might_resched+0x10/0x10
[  392.058238][ T9104]  should_fail_ex+0x424/0x570
[  392.058270][ T9104]  should_failslab+0xac/0x100
[  392.058311][ T9104]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  392.058333][ T9104]  ? __alloc_skb+0x1c2/0x480
[  392.058361][ T9104]  __alloc_skb+0x1c2/0x480
[  392.058408][ T9104]  ? __pfx___alloc_skb+0x10/0x10
[  392.058449][ T9104]  ? netlink_autobind+0xd6/0x2f0
[  392.058477][ T9104]  ? netlink_autobind+0x2b0/0x2f0
[  392.058504][ T9104]  netlink_sendmsg+0x65c/0xce0
[  392.058535][ T9104]  ? __pfx_netlink_sendmsg+0x10/0x10
[  392.058556][ T9104]  ? lockdep_hardirqs_on+0x9d/0x150
[  392.058584][ T9104]  ? __pfx_netlink_sendmsg+0x10/0x10
[  392.058606][ T9104]  __sock_sendmsg+0x221/0x270
[  392.058628][ T9104]  ____sys_sendmsg+0x53c/0x870
[  392.058667][ T9104]  ? __pfx_____sys_sendmsg+0x10/0x10
[  392.058693][ T9104]  ? __fget_files+0x2a/0x420
[  392.058717][ T9104]  ? __fget_files+0x2a/0x420
[  392.058745][ T9104]  __sys_sendmsg+0x271/0x360
[  392.058776][ T9104]  ? __pfx___sys_sendmsg+0x10/0x10
[  392.058838][ T9104]  ? rcu_is_watching+0x15/0xb0
[  392.058856][ T9104]  ? trace_sys_enter+0x25/0x120
[  392.058888][ T9104]  do_syscall_64+0xf3/0x230
[  392.058910][ T9104]  ? clear_bhb_loop+0x45/0xa0
[  392.058933][ T9104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.058954][ T9104] RIP: 0033:0x7f59eb58d169
[  392.058971][ T9104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  392.058988][ T9104] RSP: 002b:00007f59ec402038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  392.059018][ T9104] RAX: ffffffffffffffda RBX: 00007f59eb7a6160 RCX: 00007f59eb58d169
[  392.059033][ T9104] RDX: 0000000000000000 RSI: 0000200000004380 RDI: 0000000000000005
[  392.059051][ T9104] RBP: 00007f59ec402090 R08: 0000000000000000 R09: 0000000000000000
[  392.059083][ T9104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  392.059096][ T9104] R13: 0000000000000000 R14: 00007f59eb7a6160 R15: 00007ffc83787058
[  392.059123][ T9104]  </TASK>
[  392.335213][   T30] kauditd_printk_skb: 7320 callbacks suppressed
[  392.335232][   T30] audit: type=1400 audit(1743138510.234:148029): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7429 comm="udevd" name="devices" dev="sysfs" ino=7
[  392.373257][ T7429] audit: audit_backlog=65 > audit_backlog_limit=64
[  392.399796][ T9105] audit: audit_backlog=65 > audit_backlog_limit=64
[  392.406957][ T9105] audit: audit_lost=73112 audit_rate_limit=0 audit_backlog_limit=64
[  392.415846][ T9105] audit: backlog limit exceeded
[  392.416450][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.421439][ T8625] audit: audit_backlog=65 > audit_backlog_limit=64
[  392.441496][ T9105] audit: audit_backlog=65 > audit_backlog_limit=64
[  392.448394][ T9105] audit: audit_lost=73113 audit_rate_limit=0 audit_backlog_limit=64
[  392.475161][   T30] audit: type=1400 audit(1743138510.254:148030): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7429 comm="udevd" name="platform" dev="sysfs" ino=38
[  392.477333][ T5489] audit: audit_backlog=65 > audit_backlog_limit=64
[  393.310192][   T59] usb 2-1: USB disconnect, device number 11
[  393.433367][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.813'.
[  393.805429][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.505267][ T5870] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  394.685157][ T5870] usb 3-1: device descriptor read/64, error -71
[  394.829796][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.924924][ T9127] tipc: Started in network mode
[  394.930064][ T9127] tipc: Node identity 52, cluster identity 4711
[  394.936471][ T9127] tipc: Node number set to 82
[  395.020683][ T5870] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  395.077638][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.246237][ T5870] usb 3-1: device descriptor read/64, error -71
[  395.485716][ T5870] usb usb3-port1: attempt power cycle
[  395.529300][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.903671][  T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.063641][ T5870] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  396.097291][ T5870] usb 3-1: device descriptor read/8, error -71
[  396.156831][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.787393][ T5870] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  396.888218][ T5870] usb 3-1: device descriptor read/8, error -71
[  397.015721][ T5870] usb usb3-port1: unable to enumerate USB device
[  397.129184][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.209188][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.348578][   T30] kauditd_printk_skb: 9554 callbacks suppressed
[  397.348597][   T30] audit: type=1400 audit(1743138515.234:153007): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5196 comm="udevd" path="/sys/devices/virtual/block/loop2/uevent" dev="sysfs" ino=14990
[  397.387364][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64
[  397.406821][ T9153] audit: audit_backlog=65 > audit_backlog_limit=64
[  397.429704][ T5196] audit: audit_lost=74641 audit_rate_limit=0 audit_backlog_limit=64
[  397.451810][ T9153] audit: audit_lost=74642 audit_rate_limit=0 audit_backlog_limit=64
[  397.453102][ T9155] audit: audit_backlog=65 > audit_backlog_limit=64
[  397.476165][ T9156] audit: audit_backlog=65 > audit_backlog_limit=64
[  397.482790][ T5196] audit: backlog limit exceeded
[  397.488045][ T9153] audit: backlog limit exceeded
[  397.488873][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64
[  397.757215][ T9160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.825'.
[  398.238046][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.565229][  T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.869819][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.827'.
[  399.275727][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.165737][ T9178] nr0: tun_chr_ioctl cmd 1074025676
[  400.396231][ T9178] nr0: owner set to 774
[  400.964891][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  401.638129][  T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.362755][   T30] kauditd_printk_skb: 6988 callbacks suppressed
[  402.362775][   T30] audit: type=1400 audit(1743138520.254:156610): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9194 comm="modprobe" name="/" dev="sda1" ino=2
[  402.410848][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.455720][ T9169] audit: audit_backlog=65 > audit_backlog_limit=64
[  402.462551][ T9169] audit: audit_lost=75778 audit_rate_limit=0 audit_backlog_limit=64
[  402.471234][ T9169] audit: backlog limit exceeded
[  402.476149][ T9169] audit: audit_backlog=65 > audit_backlog_limit=64
[  402.482834][ T9169] audit: audit_lost=75779 audit_rate_limit=0 audit_backlog_limit=64
[  402.491048][ T9169] audit: backlog limit exceeded
[  402.496073][ T9169] audit: audit_backlog=65 > audit_backlog_limit=64
[  402.502769][ T9169] audit: audit_lost=75780 audit_rate_limit=0 audit_backlog_limit=64
[  402.510823][ T9169] audit: backlog limit exceeded
[  403.476143][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.441828][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.840'.
[  404.476546][ T9217] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  404.701672][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.375603][  T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.776475][ T9231] No control pipe specified
[  405.786699][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.911913][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.286903][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.392549][   T30] kauditd_printk_skb: 6437 callbacks suppressed
[  407.392863][   T30] audit: type=1400 audit(1743138525.284:160196): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9246 comm="syz.5.848" name="newroot" dev="tmpfs" ino=2
[  407.660605][ T9253] audit: audit_backlog=65 > audit_backlog_limit=64
[  407.712118][   T30] audit: type=1400 audit(1743138525.284:160197): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9246 comm="syz.5.848" name="/" dev="devtmpfs" ino=1
[  407.796211][ T9253] audit: audit_lost=76736 audit_rate_limit=0 audit_backlog_limit=64
[  407.804251][ T9253] audit: backlog limit exceeded
[  407.825490][ T9253] audit: audit_backlog=65 > audit_backlog_limit=64
[  407.832047][ T9253] audit: audit_lost=76737 audit_rate_limit=0 audit_backlog_limit=64
[  407.859919][   T30] audit: type=1400 audit(1743138525.284:160198): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9246 comm="syz.5.848" name="cpu" dev="devtmpfs" ino=85
[  407.866370][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64
[  407.886043][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  408.400039][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.663311][   T59] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  408.956969][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.159401][   T59] usb 6-1: config 0 has an invalid interface number: 22 but max is 0
[  409.208080][   T59] usb 6-1: config 0 has no interface number 0
[  409.246387][   T59] usb 6-1: New USB device found, idVendor=2639, idProduct=0003, bcdDevice=d1.b9
[  409.442241][   T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.450872][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.469841][   T59] usb 6-1: Product: syz
[  410.496821][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.505226][   T59] usb 6-1: Manufacturer: syz
[  410.505250][   T59] usb 6-1: SerialNumber: syz
[  410.861177][   T59] usb 6-1: config 0 descriptor??
[  411.099637][    T9] usb 6-1: USB disconnect, device number 2
[  411.410322][ T9281] No control pipe specified
[  411.561377][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.074966][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.537828][   T30] kauditd_printk_skb: 6523 callbacks suppressed
[  412.537891][   T30] audit: type=1400 audit(1743138530.084:165241): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9293 comm="syz.5.858" name="newroot" dev="tmpfs" ino=2
[  413.085670][ T9290] audit: audit_backlog=66 > audit_backlog_limit=64
[  413.085786][ T5827] audit: audit_backlog=66 > audit_backlog_limit=64
[  413.092187][ T9290] audit: audit_lost=77232 audit_rate_limit=0 audit_backlog_limit=64
[  413.092204][ T9290] audit: backlog limit exceeded
[  413.092273][ T9290] audit: audit_backlog=66 > audit_backlog_limit=64
[  413.098879][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.080416][  T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.089298][ T5827] audit: audit_lost=77233 audit_rate_limit=0 audit_backlog_limit=64
[  414.098162][ T5178] audit: audit_backlog=66 > audit_backlog_limit=64
[  414.104710][ T5178] audit: audit_lost=77234 audit_rate_limit=0 audit_backlog_limit=64
[  414.113085][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.121462][ T5196] audit: audit_backlog=66 > audit_backlog_limit=64
[  414.835302][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.053211][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.915614][ T5870] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  415.916082][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.122559][ T5870] usb 6-1: Using ep0 maxpacket: 16
[  416.233181][ T5870] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  416.264736][ T5870] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  416.326429][ T5870] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  416.390074][ T5870] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  416.417821][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.445262][ T5870] usb 6-1: Product: syz
[  416.449475][ T5870] usb 6-1: Manufacturer: syz
[  416.454115][ T5870] usb 6-1: SerialNumber: syz
[  417.115431][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.505240][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.601381][   T30] kauditd_printk_skb: 5514 callbacks suppressed
[  417.601399][   T30] audit: type=1400 audit(1743138535.494:166527): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5178 comm="syslogd" name="/" dev="sda1" ino=2
[  417.667182][ T5822] audit: audit_backlog=65 > audit_backlog_limit=64
[  417.673743][ T5822] audit: audit_lost=78647 audit_rate_limit=0 audit_backlog_limit=64
[  417.715363][ T5822] audit: backlog limit exceeded
[  417.727109][ T5822] audit: audit_backlog=65 > audit_backlog_limit=64
[  417.753271][ T5822] audit: audit_lost=78648 audit_rate_limit=0 audit_backlog_limit=64
[  417.753410][ T9303] audit: audit_backlog=65 > audit_backlog_limit=64
[  417.788584][   T30] audit: type=1400 audit(1743138535.494:166528): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5178 comm="syslogd" name="var" dev="sda1" ino=1906
[  417.809430][ T5822] audit: backlog limit exceeded
[  417.832145][ T5822] audit: audit_backlog=65 > audit_backlog_limit=64
[  417.838611][ T5870] usb 6-1: 0:2 : does not exist
[  418.228116][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.236365][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.273000][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.440352][ T5870] usb 6-1: 1:0: failed to get current value for ch 0 (-22)
[  420.545502][ T5870] usb 6-1: USB disconnect, device number 3
[  420.586764][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.798886][ T5868] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  421.516968][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.685160][ T5868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  421.707980][ T7429] udevd[7429]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  421.725905][ T5868] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  421.760966][ T5868] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  421.801644][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.825704][ T5868] usb 2-1: config 0 descriptor??
[  421.850741][ T5868] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  421.878020][ T5868] dvb-usb: bulk message failed: -22 (3/0)
[  421.908147][ T5868] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  422.056571][ T5870] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  422.097490][ T5868] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  422.514630][ T5868] usb 2-1: media controller created
[  422.546986][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  422.626346][   T30] kauditd_printk_skb: 8069 callbacks suppressed
[  422.626408][   T30] audit: type=1400 audit(1743138540.504:170184): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=7429 comm="udevd" path="/sys/devices/platform/dummy_hcd.5/uevent" dev="sysfs" ino=25528
[  422.669078][ T9331] dvb-usb: bulk message failed: -22 (2/0)
[  422.751853][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64
[  422.752038][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  422.764976][    C0] audit: audit_lost=80133 audit_rate_limit=0 audit_backlog_limit=64
[  422.773093][    C0] audit: backlog limit exceeded
[  422.778067][ T7429] audit: audit_backlog=66 > audit_backlog_limit=64
[  422.778503][    C0] audit: audit_backlog=66 > audit_backlog_limit=64
[  422.791154][    C0] audit: audit_lost=80134 audit_rate_limit=0 audit_backlog_limit=64
[  422.795304][   T26] audit: audit_backlog=66 > audit_backlog_limit=64
[  422.799212][    C0] audit: backlog limit exceeded
[  422.867796][ T5868] dvb-usb: bulk message failed: -22 (6/0)
[  422.873607][ T5868] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  422.946500][ T5868] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17
[  423.016279][ T5868] dvb-usb: schedule remote query interval to 150 msecs.
[  423.043950][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.054768][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  423.066188][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  423.076730][ T5870] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  423.086493][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.106164][ T5868] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  423.124445][ T5870] usb 3-1: config 0 descriptor??
[  423.309705][   T59] dvb-usb: bulk message failed: -22 (1/0)
[  423.315794][ T5868] usb 2-1: USB disconnect, device number 12
[  423.332902][   T59] dvb-usb: error while querying for an remote control event.
[  423.341265][ T9355] netlink: 'syz.3.873': attribute type 10 has an invalid length.
[  423.360238][ T9355] netlink: 40 bytes leftover after parsing attributes in process `syz.3.873'.
[  423.754265][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.783516][ T5868] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  423.815355][ T9355] geneve0: entered promiscuous mode
[  423.891162][ T9355] team0: Port device geneve0 added
[  424.080893][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.154685][ T9370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.877'.
[  424.502915][ T5870] usbhid 3-1:0.0: can't add hid device: -71
[  424.534261][ T5870] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  424.599871][ T5870] usb 3-1: USB disconnect, device number 21
[  424.641881][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.778851][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.144613][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.694768][ T9381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.735808][ T9381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.766993][ T9381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.823355][ T9383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.845829][ T9383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.036615][ T9383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.046060][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.063591][ T9381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.372377][ T9381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.652864][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.808082][   T30] kauditd_printk_skb: 9876 callbacks suppressed
[  427.808100][   T30] audit: type=1400 audit(1743138545.704:175415): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=9393 comm="syz.2.885" saddr=10.128.0.169 src=30008 daddr=10.128.0.48 dest=49938 netif=eth0
[  427.928565][ T9403] audit: audit_backlog=65 > audit_backlog_limit=64
[  427.937201][ T9403] audit: audit_lost=81707 audit_rate_limit=0 audit_backlog_limit=64
[  427.951668][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64
[  427.958743][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  427.965280][    C0] audit: audit_lost=81708 audit_rate_limit=0 audit_backlog_limit=64
[  427.973298][    C0] audit: backlog limit exceeded
[  427.979341][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  427.985877][    C0] audit: audit_lost=81709 audit_rate_limit=0 audit_backlog_limit=64
[  427.993861][    C0] audit: backlog limit exceeded
[  429.482861][ T9425] pim6reg: entered allmulticast mode
[  430.795399][ T5867] net_ratelimit: 63 callbacks suppressed
[  430.795422][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.875358][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.055480][ T9439] sctp: [Deprecated]: syz.1.893 (pid 9439) Use of struct sctp_assoc_value in delayed_ack socket option.
[  431.055480][ T9439] Use struct sctp_sack_info instead
[  431.076221][ T9439] sctp: [Deprecated]: syz.1.893 (pid 9439) Use of struct sctp_assoc_value in delayed_ack socket option.
[  431.076221][ T9439] Use struct sctp_sack_info instead
[  431.655498][ T8459] syz.4.631: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1
[  431.683171][ T8459] CPU: 0 UID: 0 PID: 8459 Comm: syz.4.631 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  431.683203][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  431.683218][ T8459] Call Trace:
[  431.683226][ T8459]  <TASK>
[  431.683240][ T8459]  dump_stack_lvl+0x241/0x360
[  431.683275][ T8459]  ? __pfx_dump_stack_lvl+0x10/0x10
[  431.683303][ T8459]  ? __pfx__printk+0x10/0x10
[  431.683328][ T8459]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  431.683357][ T8459]  ? __rcu_read_unlock+0xa1/0x110
[  431.683388][ T8459]  warn_alloc+0x27c/0x410
[  431.683419][ T8459]  ? __pfx_warn_alloc+0x10/0x10
[  431.683455][ T8459]  ? relay_open_buf+0x231/0xd60
[  431.683476][ T8459]  ? __get_vm_area_node+0x1c8/0x2d0
[  431.683500][ T8459]  ? __get_vm_area_node+0x25c/0x2d0
[  431.683530][ T8459]  __vmalloc_node_range_noprof+0x634/0x1390
[  431.683584][ T8459]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  431.683611][ T8459]  ? __kasan_kmalloc_large+0x1a/0xa0
[  431.683648][ T8459]  ? relay_open_buf+0x231/0xd60
[  431.683671][ T8459]  __kvmalloc_node_noprof+0x3b2/0x5a0
[  431.683694][ T8459]  ? relay_open_buf+0x231/0xd60
[  431.683714][ T8459]  ? trace_kmalloc+0x1f/0xd0
[  431.683733][ T8459]  ? relay_open_buf+0x231/0xd60
[  431.683753][ T8459]  ? relay_open_buf+0x18c/0xd60
[  431.683779][ T8459]  relay_open_buf+0x231/0xd60
[  431.683811][ T8459]  relay_open+0x44b/0x960
[  431.683838][ T8459]  do_blk_trace_setup+0x57b/0x9c0
[  431.683873][ T8459]  blk_trace_setup+0x118/0x1f0
[  431.683906][ T8459]  ? __pfx_blk_trace_setup+0x10/0x10
[  431.683931][ T8459]  ? smack_log+0x4de/0x630
[  431.683959][ T8459]  ? __pfx_smack_log+0x10/0x10
[  431.683983][ T8459]  ? smk_access+0x4ab/0x4e0
[  431.684010][ T8459]  sg_ioctl+0xa12/0x2ea0
[  431.684042][ T8459]  ? smk_tskacc+0x300/0x370
[  431.684083][ T8459]  ? __pfx_sg_ioctl+0x10/0x10
[  431.684119][ T8459]  ? __fget_files+0x2a/0x420
[  431.684147][ T8459]  ? __fget_files+0x2a/0x420
[  431.684174][ T8459]  ? __pfx_sg_ioctl+0x10/0x10
[  431.684207][ T8459]  __se_sys_ioctl+0xf1/0x160
[  431.684239][ T8459]  do_syscall_64+0xf3/0x230
[  431.684263][ T8459]  ? clear_bhb_loop+0x45/0xa0
[  431.684289][ T8459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.684311][ T8459] RIP: 0033:0x7fc95bd8d169
[  431.684330][ T8459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  431.684350][ T8459] RSP: 002b:00007fc95cbca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  431.684374][ T8459] RAX: ffffffffffffffda RBX: 00007fc95bfa5fa0 RCX: 00007fc95bd8d169
[  431.684390][ T8459] RDX: 0000200000000200 RSI: 00000000c0481273 RDI: 0000000000000003
[  431.684405][ T8459] RBP: 00007fc95be0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  431.684419][ T8459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  431.684432][ T8459] R13: 0000000000000000 R14: 00007fc95bfa5fa0 R15: 00007ffc1793c658
[  431.684461][ T8459]  </TASK>
[  431.968227][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.084261][ T8459] Mem-Info:
[  432.100428][ T8459] active_anon:540 inactive_anon:6457 isolated_anon:0
[  432.100428][ T8459]  active_file:1815 inactive_file:3456 isolated_file:0
[  432.100428][ T8459]  unevictable:768 dirty:291 writeback:0
[  432.100428][ T8459]  slab_reclaimable:5870 slab_unreclaimable:102532
[  432.100428][ T8459]  mapped:36847 shmem:4617 pagetables:1083
[  432.100428][ T8459]  sec_pagetables:0 bounce:0
[  432.100428][ T8459]  kernel_misc_reclaimable:0
[  432.100428][ T8459]  free:760823 free_pcp:1023 free_cma:0
[  432.145627][    C1] vkms_vblank_simulate: vblank timer overrun
[  432.198625][ T8459] Node 0 active_anon:2120kB inactive_anon:12848kB active_file:4848kB inactive_file:788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132612kB dirty:408kB writeback:0kB shmem:4940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11512kB pagetables:3808kB sec_pagetables:0kB all_unreclaimable? no
[  432.230998][ T8459] Node 1 active_anon:40kB inactive_anon:17780kB active_file:2412kB inactive_file:13036kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:19476kB dirty:756kB writeback:0kB shmem:18228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:192kB pagetables:524kB sec_pagetables:0kB all_unreclaimable? no
[  432.264012][ T8459] Node 0 DMA free:10188kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:44kB local_pcp:24kB free_cma:0kB
[  432.377348][ T8459] lowmem_reserve[]: 0 2491 2491 2491 2491
[  432.399136][ T8459] Node 0 DMA32 free:42476kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:2416kB inactive_anon:12012kB active_file:4476kB inactive_file:788kB unevictable:1536kB writepending:408kB present:3129332kB managed:2550888kB mlocked:0kB bounce:0kB free_pcp:2948kB local_pcp:2148kB free_cma:0kB
[  432.532871][ T8459] lowmem_reserve[]: 0 0 0 0 0
[  432.563434][ T8459] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:372kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  432.670819][ T8459] lowmem_reserve[]: 0 0 0 0 0
[  432.695954][ T8459] Node 1 Normal free:3008264kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:40kB inactive_anon:680kB active_file:2412kB inactive_file:13036kB unevictable:1536kB writepending:756kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:504kB local_pcp:376kB free_cma:0kB
[  432.876186][   T30] kauditd_printk_skb: 11934 callbacks suppressed
[  432.876205][   T30] audit: type=1400 audit(1743138550.774:179423): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5822 comm="syz-executor" opid=9432 ocomm="syz.1.893"
[  432.972642][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.994019][ T8459] lowmem_reserve[]:
[  433.382839][    C1] audit: audit_backlog=65 > audit_backlog_limit=64
[  433.393269][    C1] audit: audit_lost=84360 audit_rate_limit=0 audit_backlog_limit=64
[  433.401286][    C1] audit: backlog limit exceeded
[  433.407381][    C1] audit: audit_backlog=65 > audit_backlog_limit=64
[  433.413949][    C1] audit: audit_lost=84361 audit_rate_limit=0 audit_backlog_limit=64
[  433.421972][    C1] audit: backlog limit exceeded
[  433.427064][    C1] audit: audit_backlog=65 > audit_backlog_limit=64
[  433.433582][    C1] audit: audit_lost=84362 audit_rate_limit=0 audit_backlog_limit=64
[  433.441616][    C1] audit: backlog limit exceeded
[  433.853128][ T8459]  0 0 0 0 0
[  433.915937][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.959206][ T8459] Node 0 DMA: 1*4kB (U) 1*8kB (M) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10188kB
[  434.005525][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.126332][ T8459] Node 0 DMA32: 237*4kB (UME) 372*8kB (UME) 405*16kB (UME) 246*32kB (UME) 115*64kB (UME) 30*128kB (UME) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 4*2048kB (UM) 0*4096kB = 43556kB
[  434.275341][  T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.337701][ T8459] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  434.360378][ T9477] ufs: You didn't specify the type of your ufs filesystem
[  434.360378][ T9477] 
[  434.360378][ T9477] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  434.360378][ T9477] 
[  434.360378][ T9477] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  434.392289][ T9477] ufs: ufstype=old is supported read-only
[  434.419782][ T9477] ufs: ufs_fill_super(): bad magic number
[  434.717914][ T8459] Node 1 Normal: 16*4kB (UM) 16*8kB (UME) 17*16kB (UME) 41*32kB (UE) 75*64kB (UME) 57*128kB (UME) 41*256kB (UME) 15*512kB (UM) 14*1024kB (UME) 12*2048kB (UME) 714*4096kB (M) = 2995504kB
[  434.810195][ T8459] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  434.869689][ T8459] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  434.919326][ T8459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  434.967071][ T8459] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  434.993772][ T8459] 10858 total pagecache pages
[  435.023330][ T8459] 66 pages in swap cache
[  435.035599][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.056139][ T8459] Free swap  = 107528kB
[  435.080192][ T8459] Total swap = 124996kB
[  435.113905][ T8459] 2097051 pages RAM
[  435.125596][ T8459] 0 pages HighMem/MovableOnly
[  435.162627][ T8459] 427541 pages reserved
[  435.180255][ T8459] 0 pages cma reserved
[  436.105955][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.445178][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.453429][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.517544][ T5818] audit_log_start: 4766 callbacks suppressed
[  438.523605][ T5818] audit: audit_backlog=65 > audit_backlog_limit=64
[  438.530225][ T5818] audit: audit_lost=85073 audit_rate_limit=0 audit_backlog_limit=64
[  438.538236][ T5818] audit: backlog limit exceeded
[  438.543980][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64
[  438.550767][   T30] audit: type=1400 audit(1743138555.364:182060): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="loop5" dev="sysfs" ino=15343
[  438.648044][ T5178] audit: audit_backlog=65 > audit_backlog_limit=64
[  438.649337][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64
[  438.654576][ T5178] audit: audit_lost=85074 audit_rate_limit=0 audit_backlog_limit=64
[  438.661423][ T5196] audit: audit_lost=85075 audit_rate_limit=0 audit_backlog_limit=64
[  438.677449][ T5829] audit: audit_lost=85076 audit_rate_limit=0 audit_backlog_limit=64
[  438.718379][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.998515][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  440.009545][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  440.296065][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.555767][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.412188][ T9520] xt_hashlimit: size too large, truncated to 1048576
[  441.419322][ T9520] xt_hashlimit: invalid rate
[  441.470940][ T9520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.918'.
[  441.519588][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.731435][ T9519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.918'.
[  442.759227][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.484326][ T9538] overlayfs: failed to clone upperpath
[  443.746247][ T5196] audit_log_start: 7206 callbacks suppressed
[  443.746266][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64
[  443.775085][ T5196] audit: audit_lost=86232 audit_rate_limit=0 audit_backlog_limit=64
[  443.783116][ T5196] audit: backlog limit exceeded
[  443.825269][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  443.831982][    C0] audit: audit_lost=86233 audit_rate_limit=0 audit_backlog_limit=64
[  443.840109][    C0] audit: backlog limit exceeded
[  444.253462][ T9539] audit: audit_backlog=65 > audit_backlog_limit=64
[  444.260068][ T9539] audit: audit_lost=86234 audit_rate_limit=0 audit_backlog_limit=64
[  444.268134][ T9539] audit: backlog limit exceeded
[  444.273007][ T9539] audit: audit_backlog=65 > audit_backlog_limit=64
[  444.570473][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.639273][   T59] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  444.647126][ T5868] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  444.735585][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.850728][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.985114][   T59] usb 2-1: Using ep0 maxpacket: 16
[  445.003099][   T59] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  445.039496][ T5868] usb 3-1: config 0 has an invalid interface number: 91 but max is 0
[  445.058024][   T59] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  445.070406][ T5868] usb 3-1: config 0 has no interface number 0
[  445.111075][   T59] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  445.121386][ T5868] usb 3-1: New USB device found, idVendor=05ac, idProduct=a9d2, bcdDevice=95.16
[  445.144930][   T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.154421][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.169162][   T59] usb 2-1: Product: syz
[  445.189991][ T5868] usb 3-1: Product: syz
[  445.208678][   T59] usb 2-1: Manufacturer: syz
[  445.215317][ T5868] usb 3-1: Manufacturer: syz
[  445.229871][   T59] usb 2-1: SerialNumber: syz
[  445.234586][ T5868] usb 3-1: SerialNumber: syz
[  445.276036][ T5868] usb 3-1: config 0 descriptor??
[  445.401493][ T5869] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  445.568825][ T5869] usb 1-1: Using ep0 maxpacket: 32
[  445.678263][ T5869] usb 1-1: config 0 interface 0 has no altsetting 0
[  445.842486][ T5869] usb 1-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00
[  446.049923][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.223411][ T5870] usb 3-1: USB disconnect, device number 22
[  446.255272][ T5869] usb 1-1: config 0 descriptor??
[  446.319415][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.331452][   T59] usb 2-1: 0:2 : does not exist
[  446.348340][   T59] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5)
[  446.360595][   T59] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5)
[  446.372332][   T59] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5)
[  446.383635][   T59] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[  446.430913][   T59] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5)
[  446.455880][   T59] usb 2-1: USB disconnect, device number 13
[  447.327459][ T9559] FAULT_INJECTION: forcing a failure.
[  447.327459][ T9559] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  447.344577][ T5869] wacom 0003:056A:037A.0003: unbalanced collection at end of report description
[  447.355954][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.497105][ T9559] CPU: 1 UID: 0 PID: 9559 Comm: syz.1.932 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  447.497133][ T9559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  447.497145][ T9559] Call Trace:
[  447.497151][ T9559]  <TASK>
[  447.497159][ T9559]  dump_stack_lvl+0x241/0x360
[  447.497188][ T9559]  ? __pfx_dump_stack_lvl+0x10/0x10
[  447.497211][ T9559]  ? __pfx__printk+0x10/0x10
[  447.497240][ T9559]  should_fail_ex+0x424/0x570
[  447.497303][ T9559]  _copy_from_user+0x2d/0xb0
[  447.497337][ T9559]  copy_msghdr_from_user+0xb3/0x580
[  447.497361][ T9559]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  447.497385][ T9559]  ? rcu_read_lock_any_held+0xbb/0x160
[  447.497408][ T9559]  __sys_sendmsg+0x20a/0x360
[  447.497436][ T9559]  ? __pfx___sys_sendmsg+0x10/0x10
[  447.497460][ T9559]  ? vfs_write+0xb29/0xd10
[  447.497491][ T9559]  ? __pfx_vfs_write+0x10/0x10
[  447.497512][ T9559]  ? do_sys_openat2+0x165/0x1d0
[  447.497554][ T9559]  ? do_syscall_64+0xb6/0x230
[  447.497576][ T9559]  do_syscall_64+0xf3/0x230
[  447.497596][ T9559]  ? clear_bhb_loop+0x45/0xa0
[  447.497617][ T9559]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.497635][ T9559] RIP: 0033:0x7fc46418d169
[  447.497651][ T9559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  447.497667][ T9559] RSP: 002b:00007fc464f05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  447.497688][ T9559] RAX: ffffffffffffffda RBX: 00007fc4643a5fa0 RCX: 00007fc46418d169
[  447.497702][ T9559] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  447.497714][ T9559] RBP: 00007fc464f05090 R08: 0000000000000000 R09: 0000000000000000
[  447.497725][ T9559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  447.497737][ T9559] R13: 0000000000000000 R14: 00007fc4643a5fa0 R15: 00007ffc8a3e52d8
[  447.497760][ T9559]  </TASK>
[  447.505864][ T5869] wacom 0003:056A:037A.0003: parse failed
[  447.917828][ T7585] udevd[7585]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  448.403618][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.411779][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.462544][ T9567] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  448.519219][ T9567] batadv_slave_0: entered promiscuous mode
[  448.759097][ T5829] audit_log_start: 8298 callbacks suppressed
[  448.759115][ T5829] audit: audit_backlog=65 > audit_backlog_limit=64
[  448.759438][ T5196] audit: audit_backlog=66 > audit_backlog_limit=64
[  448.765488][ T5829] audit: audit_lost=87414 audit_rate_limit=0 audit_backlog_limit=64
[  448.771791][    C0] audit: audit_backlog=66 > audit_backlog_limit=64
[  448.771808][    C0] audit: audit_lost=87415 audit_rate_limit=0 audit_backlog_limit=64
[  448.771822][    C0] audit: backlog limit exceeded
[  448.771907][ T5196] audit: audit_lost=87416 audit_rate_limit=0 audit_backlog_limit=64
[  448.771924][ T5196] audit: backlog limit exceeded
[  448.771950][ T5196] audit: audit_backlog=66 > audit_backlog_limit=64
[  448.771963][ T5196] audit: audit_lost=87417 audit_rate_limit=0 audit_backlog_limit=64
[  448.892968][ T5869] wacom 0003:056A:037A.0003: probe with driver wacom failed with error -22
[  448.966716][ T5869] usb 1-1: USB disconnect, device number 19
[  449.216594][ T9584] sock: sock_set_timeout: `syz.3.939' (pid 9584) tries to set negative timeout
[  449.500729][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.635877][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.031435][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.051632][  T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.651569][ T9615] syz.5.947: attempt to access beyond end of device
[  452.651569][ T9615] nbd5: rw=0, sector=6, nr_sectors = 2 limit=0
[  452.664566][ T9615] ADFS-fs (nbd5): error: unable to read block 3, try 0
[  453.038370][ T9625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.046998][ T9625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.055727][ T9625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.064861][ T9625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.073164][ T9625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.082061][ T9625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.090321][ T9625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.098657][ T9625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.106920][ T9625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.116609][ T9624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.999987][   T30] kauditd_printk_skb: 13908 callbacks suppressed
[  454.000008][   T30] audit: type=1400 audit(1743138571.734:196050): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=9634 comm="syz.0.954" saddr=10.128.0.169 src=30008 daddr=10.128.0.48 dest=49938 netif=eth0
[  454.041339][ T9636] audit: audit_backlog=65 > audit_backlog_limit=64
[  454.047981][ T9636] audit: audit_lost=90229 audit_rate_limit=0 audit_backlog_limit=64
[  454.049634][ T9640] audit: audit_backlog=65 > audit_backlog_limit=64
[  454.056095][ T9636] audit: backlog limit exceeded
[  454.056119][ T9636] audit: audit_backlog=65 > audit_backlog_limit=64
[  454.067635][ T9640] audit: audit_lost=90230 audit_rate_limit=0 audit_backlog_limit=64
[  454.067799][ T9636] audit: audit_lost=90231 audit_rate_limit=0 audit_backlog_limit=64
[  454.074612][ T9640] audit: backlog limit exceeded
[  454.082887][ T9636] audit: backlog limit exceeded
[  454.446647][ T5137] Bluetooth: hci5: Ignoring connect complete event for invalid link type
[  456.009402][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.961'.
[  457.991659][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.973'.
[  458.225342][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'.
[  458.257210][   T10] net_ratelimit: 9 callbacks suppressed
[  458.257231][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.317691][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.845133][   T10] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  459.042538][ T9706] audit_log_start: 10668 callbacks suppressed
[  459.042560][ T9706] audit: audit_backlog=65 > audit_backlog_limit=64
[  459.048460][   T30] audit: type=1400 audit(1743138576.774:201340): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=9711 comm="syz.3.979" opid=9711 ocomm="syz.3.979"
[  459.077820][ T9706] audit: audit_lost=92034 audit_rate_limit=0 audit_backlog_limit=64
[  459.416205][ T9715] audit: audit_backlog=65 > audit_backlog_limit=64
[  459.422758][ T9715] audit: audit_lost=92035 audit_rate_limit=0 audit_backlog_limit=64
[  459.430838][ T9715] audit: backlog limit exceeded
[  459.435805][ T9715] audit: audit_backlog=65 > audit_backlog_limit=64
[  459.442294][ T9715] audit: audit_lost=92036 audit_rate_limit=0 audit_backlog_limit=64
[  459.450315][ T9715] audit: backlog limit exceeded
[  459.468054][ T9717] audit: audit_backlog=65 > audit_backlog_limit=64
[  459.485798][   T10] usb 3-1: device descriptor read/64, error -71
[  459.486137][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.766479][   T10] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[  459.915109][   T10] usb 3-1: device descriptor read/64, error -71
[  460.060638][   T10] usb usb3-port1: attempt power cycle
[  460.557516][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.047124][   T10] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  461.087887][   T10] usb 3-1: device descriptor read/8, error -71
[  461.155186][ T5869] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  461.275472][  T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.325137][ T5869] usb 1-1: Using ep0 maxpacket: 8
[  461.346015][   T10] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  461.370864][ T5869] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  461.385178][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.403974][   T10] usb 3-1: device descriptor read/8, error -71
[  461.421015][ T5869] usb 1-1: Product: syz
[  461.449079][ T5869] usb 1-1: Manufacturer: syz
[  461.454532][ T5869] usb 1-1: SerialNumber: syz
[  461.491936][ T5869] usb 1-1: config 0 descriptor??
[  461.525417][   T10] usb usb3-port1: unable to enumerate USB device
[  461.596850][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.719256][ T9730] tipc: Trying to set illegal importance in message
[  461.944261][ T5869] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  461.966926][ T5869] gspca_sunplus: reg_w_riv err -71
[  461.972161][ T5869] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  462.028180][ T5869] usb 1-1: USB disconnect, device number 20
[  462.857312][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.677581][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.961116][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.836324][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.867226][   T30] kauditd_printk_skb: 11112 callbacks suppressed
[  464.867427][   T30] audit: type=1400 audit(1743138581.774:208097): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=9783 comm="syz.0.1000" opid=9783 ocomm="syz.0.1000"
[  465.060026][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.932988][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  465.939878][    C0] audit: audit_lost=93503 audit_rate_limit=0 audit_backlog_limit=64
[  465.948049][    C0] audit: backlog limit exceeded
[  465.953511][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  465.960371][    C0] audit: audit_lost=93504 audit_rate_limit=0 audit_backlog_limit=64
[  465.968547][    C0] audit: backlog limit exceeded
[  465.974125][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  465.980782][    C0] audit: audit_lost=93505 audit_rate_limit=0 audit_backlog_limit=64
[  465.988919][    C0] audit: backlog limit exceeded
[  466.950453][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.918892][   T55] Bluetooth: hci5: command 0x0406 tx timeout
[  467.940081][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.996270][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.049356][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.759435][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'.
[  469.927003][   T30] kauditd_printk_skb: 4116 callbacks suppressed
[  469.927023][   T30] audit: type=1400 audit(1743138587.694:209811): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=9818 comm="syz.1.1006" opid=9818 ocomm="syz.1.1006"
[  469.934343][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64
[  469.959674][ T8625] audit: audit_backlog=65 > audit_backlog_limit=64
[  469.968897][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  469.975449][    C0] audit: audit_lost=94309 audit_rate_limit=0 audit_backlog_limit=64
[  469.983415][    C0] audit: backlog limit exceeded
[  469.988476][ T8625] audit: audit_lost=94310 audit_rate_limit=0 audit_backlog_limit=64
[  469.996600][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[  469.996613][    C0] audit: audit_lost=94311 audit_rate_limit=0 audit_backlog_limit=64
[  469.996623][    C0] audit: backlog limit exceeded
[  470.085552][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.842613][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.842780][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.843507][  T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.135721][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.485254][ T5869] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  471.659208][ T5869] usb 6-1: Using ep0 maxpacket: 32
[  471.701673][ T5869] usb 6-1: too many configurations: 127, using maximum allowed: 8
[  471.753749][ T5869] usb 6-1: unable to read config index 0 descriptor/start: -61
[  471.794034][ T5869] usb 6-1: can't read configurations, error -61
[  471.935165][ T5869] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  472.106082][ T5869] usb 6-1: Using ep0 maxpacket: 32
[  472.144586][ T5869] usb 6-1: too many configurations: 127, using maximum allowed: 8
[  472.156162][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.191396][ T5869] usb 6-1: unable to read config index 0 descriptor/start: -61
[  472.211981][ T5869] usb 6-1: can't read configurations, error -61
[  472.238689][ T5869] usb usb6-port1: attempt power cycle
[  472.537324][ T9864] xt_CT: No such helper "pptp"
[  473.315135][ T5869] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  473.327071][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.345797][ T5869] usb 6-1: Using ep0 maxpacket: 32
[  473.355235][ T5869] usb 6-1: too many configurations: 127, using maximum allowed: 8
[  473.383860][ T5869] usb 6-1: unable to read config index 0 descriptor/start: -61
[  473.405045][ T5869] usb 6-1: can't read configurations, error -61
[  473.535125][ T5869] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  473.577526][ T5869] usb 6-1: Using ep0 maxpacket: 32
[  473.589777][ T5869] usb 6-1: too many configurations: 127, using maximum allowed: 8
[  473.625785][ T5869] usb 6-1: unable to read config index 0 descriptor/start: -61
[  473.644471][ T5869] usb 6-1: can't read configurations, error -61
[  473.655247][ T5869] usb usb6-port1: unable to enumerate USB device
[  473.917801][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.759941][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.938257][   T30] kauditd_printk_skb: 17459 callbacks suppressed
[  474.938278][   T30] audit: type=1400 audit(1743138592.834:216152): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5196 comm="udevd" name="devices" dev="sysfs" ino=7
[  474.944809][ T5196] audit: audit_backlog=65 > audit_backlog_limit=64
[  474.964316][ T9900] audit: audit_backlog=65 > audit_backlog_limit=64
[  474.978086][ T9901] audit: audit_backlog=65 > audit_backlog_limit=64
[  474.984630][ T9901] audit: audit_lost=98032 audit_rate_limit=0 audit_backlog_limit=64
[  475.006010][ T9901] audit: backlog limit exceeded
[  475.011055][ T9900] audit: audit_lost=98033 audit_rate_limit=0 audit_backlog_limit=64
[  475.021804][ T9902] audit: audit_backlog=65 > audit_backlog_limit=64
[  475.034407][ T5196] audit: audit_lost=98034 audit_rate_limit=0 audit_backlog_limit=64
[  475.046421][ T9901] audit: audit_backlog=65 > audit_backlog_limit=64
[  475.096569][ T5137] Bluetooth: hci5: Ignoring connect complete event for invalid link type
[  475.276598][ T9901] overlayfs: failed to clone upperpath
[  475.843145][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.177709][ T9914] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1033'.
[  476.548635][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'.
[  476.885327][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.955493][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.429608][   T31] INFO: task syz.4.631:8461 blocked for more than 144 seconds.
[  478.468153][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.709927][   T31]       Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0
[  478.734336][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'.
[  478.769475][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  478.802920][   T31] task:syz.4.631       state:D stack:27336 pid:8461  tgid:8458  ppid:5834   task_flags:0x400040 flags:0x00004004
[  478.852086][   T31] Call Trace:
[  478.867828][   T31]  <TASK>
[  478.874315][   T31]  __schedule+0x1ac3/0x5090
[  478.912108][   T31]  ? __pfx___schedule+0x10/0x10
[  478.938478][   T31]  ? schedule+0x90/0x360
[  478.955876][   T31]  ? schedule+0x90/0x360
[  478.969810][   T31]  schedule+0x163/0x360
[  478.981444][   T31]  schedule_preempt_disabled+0x13/0x30
[  478.997692][   T31]  __mutex_lock+0x7fa/0x1000
[  479.018226][   T31]  ? __mutex_lock+0x5ed/0x1000
[  479.035511][   T31]  ? blk_trace_startstop+0xa7/0x790
[  479.040766][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  479.065075][   T31]  ? lockdep_hardirqs_on+0x9d/0x150
[  479.070400][   T31]  ? tomoyo_path_number_perm+0x215/0x790
[  479.095028][   T31]  blk_trace_startstop+0xa7/0x790
[  479.110333][   T31]  ? __pfx_blk_trace_startstop+0x10/0x10
[  479.120452][   T31]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  479.135065][   T31]  sg_ioctl+0x6bc/0x2ea0
[  479.139391][   T31]  ? __lock_acquire+0xad5/0xd80
[  479.144291][   T31]  ? __pfx_sg_ioctl+0x10/0x10
[  479.156039][   T31]  ? __fget_files+0x2a/0x420
[  479.160860][   T31]  ? __fget_files+0x2a/0x420
[  479.165681][   T31]  ? __pfx_sg_ioctl+0x10/0x10
[  479.170400][   T31]  __se_sys_ioctl+0xf1/0x160
[  479.175108][   T31]  do_syscall_64+0xf3/0x230
[  479.179799][   T31]  ? clear_bhb_loop+0x45/0xa0
[  479.184511][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.190552][   T31] RIP: 0033:0x7fc95bd8d169
[  479.195127][   T31] RSP: 002b:00007fc95cba9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  479.203633][   T31] RAX: ffffffffffffffda RBX: 00007fc95bfa6080 RCX: 00007fc95bd8d169
[  479.211677][   T31] RDX: 0000000000000000 RSI: 0000000000001274 RDI: 0000000000000003
[  479.219936][   T31] RBP: 00007fc95be0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  479.228203][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  479.236315][   T31] R13: 0000000000000000 R14: 00007fc95bfa6080 R15: 00007ffc1793c658
[  479.244325][   T31]  </TASK>
[  479.248898][   T31] 
[  479.248898][   T31] Showing all locks held in the system:
[  479.306019][   T31] 2 locks held by ksoftirqd/1/23:
[  479.311185][   T31]  #0: ffff8880b8739998 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  479.326504][   T31]  #1: ffff8880b8723b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41f/0x7a0
[  479.338137][   T31] 1 lock held by khungtaskd/31:
[  479.343004][   T31]  #0: ffffffff8eb3a260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180
[  479.357085][   T31] 2 locks held by getty/5577:
[  479.361810][   T31]  #0: ffff8880353b00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  479.373986][   T31]  #1: ffffc9000331b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x53d/0x16b0
[  479.388457][   T31] 3 locks held by syz.4.631/8459:
[  479.393511][   T31] 1 lock held by syz.4.631/8461:
[  479.398536][   T31]  #0: ffff888025e15718 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_startstop+0xa7/0x790
[  479.413008][   T31] 1 lock held by syz.5.1040/9931:
[  479.418128][   T31]  #0: ffffffff8eb3f640 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  479.428265][   T31] 
[  479.430607][   T31] =============================================
[  479.430607][   T31] 
[  479.444775][   T31] NMI backtrace for cpu 0
[  479.444795][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  479.444819][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  479.444833][   T31] Call Trace:
[  479.444840][   T31]  <TASK>
[  479.444848][   T31]  dump_stack_lvl+0x241/0x360
[  479.444879][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  479.444904][   T31]  ? __pfx__printk+0x10/0x10
[  479.444935][   T31]  nmi_cpu_backtrace+0x4ab/0x4e0
[  479.444972][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  479.444998][   T31]  ? _printk+0xd5/0x120
[  479.445020][   T31]  ? __wake_up_klogd+0xcc/0x110
[  479.445043][   T31]  ? __pfx__printk+0x10/0x10
[  479.445069][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  479.445099][   T31]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  479.445131][   T31]  watchdog+0x1058/0x10a0
[  479.445157][   T31]  ? watchdog+0x1ea/0x10a0
[  479.445185][   T31]  ? __pfx_watchdog+0x10/0x10
[  479.445210][   T31]  kthread+0x7a9/0x920
[  479.445235][   T31]  ? __pfx_watchdog+0x10/0x10
[  479.445261][   T31]  ? __pfx_kthread+0x10/0x10
[  479.445282][   T31]  ? __pfx_kthread+0x10/0x10
[  479.445304][   T31]  ? __pfx_kthread+0x10/0x10
[  479.445334][   T31]  ? __pfx_kthread+0x10/0x10
[  479.445357][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  479.445385][   T31]  ? lockdep_hardirqs_on+0x9d/0x150
[  479.445405][   T31]  ? __pfx_kthread+0x10/0x10
[  479.445428][   T31]  ret_from_fork+0x4b/0x80
[  479.445457][   T31]  ? __pfx_kthread+0x10/0x10
[  479.445480][   T31]  ret_from_fork_asm+0x1a/0x30
[  479.445516][   T31]  </TASK>
[  479.555297][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.559819][   T31] Sending NMI from CPU 0 to CPUs 1:
[  479.613826][    C1] NMI backtrace for cpu 1
[  479.613843][    C1] CPU: 1 UID: 0 PID: 8459 Comm: syz.4.631 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  479.613863][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  479.613874][    C1] RIP: 0010:unwind_next_frame+0x182b/0x22f0
[  479.613897][    C1] Code: 4c 8b 7d 38 48 8d 7d 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 24 0b bb 00 4c 8b 75 08 48 8d 5d 10 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 06 0b bb 00 4d 39 fe 0f 87 b2 00
[  479.613912][    C1] RSP: 0018:ffffc900056ff5d0 EFLAGS: 00000a06
[  479.613927][    C1] RAX: 1ffff92000adfee2 RBX: ffffc900056ff710 RCX: 0000000000000000
[  479.613939][    C1] RDX: dffffc0000000000 RSI: ffffc900056f8000 RDI: ffffc900056ff708
[  479.613951][    C1] RBP: ffffc900056ff700 R08: ffffc900056ff790 R09: 0000000000000000
[  479.613963][    C1] R10: ffffc900056ff750 R11: fffff52000adfeec R12: dffffc0000000000
[  479.613976][    C1] R13: ffffc900056ff700 R14: ffffc900056f8000 R15: ffffc900056ff7a0
[  479.613988][    C1] FS:  00007fc95cbca6c0(0000) GS:ffff888125343000(0000) knlGS:0000000000000000
[  479.614003][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  479.614014][    C1] CR2: 00007f59eb779178 CR3: 0000000058f2c000 CR4: 00000000003526f0
[  479.614028][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  479.614038][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  479.614048][    C1] Call Trace:
[  479.614053][    C1]  <NMI>
[  479.614059][    C1]  ? nmi_cpu_backtrace+0x3d1/0x4e0
[  479.614085][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  479.614106][    C1]  ? look_up_lock_class+0x7b/0x170
[  479.614123][    C1]  ? lock_acquire+0x1fc/0x2f0
[  479.614147][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  479.614170][    C1]  ? nmi_handle+0x196/0x5e0
[  479.614186][    C1]  ? nmi_handle+0x7e/0x5e0
[  479.614201][    C1]  ? unwind_next_frame+0x182b/0x22f0
[  479.614218][    C1]  ? default_do_nmi+0x63/0x160
[  479.614239][    C1]  ? exc_nmi+0x123/0x1f0
[  479.614258][    C1]  ? end_repeat_nmi+0xf/0x53
[  479.614278][    C1]  ? unwind_next_frame+0x182b/0x22f0
[  479.614295][    C1]  ? unwind_next_frame+0x182b/0x22f0
[  479.614312][    C1]  ? unwind_next_frame+0x182b/0x22f0
[  479.614336][    C1]  </NMI>
[  479.614342][    C1]  <TASK>
[  479.614351][    C1]  ? arch_stack_walk+0xe7/0x150
[  479.614371][    C1]  __unwind_start+0x59a/0x740
[  479.614389][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  479.614408][    C1]  arch_stack_walk+0xe7/0x150
[  479.614427][    C1]  ? stack_trace_save+0x11a/0x1d0
[  479.614445][    C1]  stack_trace_save+0x11a/0x1d0
[  479.614463][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  479.614480][    C1]  ? _raw_spin_unlock_irqrestore+0x90/0x140
[  479.614504][    C1]  ? lockdep_hardirqs_on+0x9d/0x150
[  479.614522][    C1]  save_stack+0xfc/0x1f0
[  479.614543][    C1]  ? __pfx_save_stack+0x10/0x10
[  479.614569][    C1]  ? page_ext_get+0x20/0x2a0
[  479.614593][    C1]  __reset_page_owner+0x79/0x440
[  479.614613][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  479.614634][    C1]  free_frozen_pages+0xe0d/0x10e0
[  479.614655][    C1]  relay_destroy_buf+0x112/0x3a0
[  479.614675][    C1]  relay_open+0x78d/0x960
[  479.614692][    C1]  do_blk_trace_setup+0x57b/0x9c0
[  479.614716][    C1]  blk_trace_setup+0x118/0x1f0
[  479.614737][    C1]  ? __pfx_blk_trace_setup+0x10/0x10
[  479.614755][    C1]  ? smack_log+0x4de/0x630
[  479.614774][    C1]  ? __pfx_smack_log+0x10/0x10
[  479.614790][    C1]  ? smk_access+0x4ab/0x4e0
[  479.614809][    C1]  sg_ioctl+0xa12/0x2ea0
[  479.614832][    C1]  ? smk_tskacc+0x300/0x370
[  479.614851][    C1]  ? __pfx_sg_ioctl+0x10/0x10
[  479.614876][    C1]  ? __fget_files+0x2a/0x420
[  479.614894][    C1]  ? __fget_files+0x2a/0x420
[  479.614912][    C1]  ? __pfx_sg_ioctl+0x10/0x10
[  479.614935][    C1]  __se_sys_ioctl+0xf1/0x160
[  479.614957][    C1]  do_syscall_64+0xf3/0x230
[  479.614980][    C1]  ? clear_bhb_loop+0x45/0xa0
[  479.615001][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.615017][    C1] RIP: 0033:0x7fc95bd8d169
[  479.615044][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  479.615058][    C1] RSP: 002b:00007fc95cbca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  479.615075][    C1] RAX: ffffffffffffffda RBX: 00007fc95bfa5fa0 RCX: 00007fc95bd8d169
[  479.615097][    C1] RDX: 0000200000000200 RSI: 00000000c0481273 RDI: 0000000000000003
[  479.615107][    C1] RBP: 00007fc95be0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  479.615116][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  479.615125][    C1] R13: 0000000000000000 R14: 00007fc95bfa5fa0 R15: 00007ffc1793c658
[  479.615141][    C1]  </TASK>
[  480.068889][  T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.069623][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  480.069644][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  480.069670][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  480.069684][   T31] Call Trace:
[  480.069692][   T31]  <TASK>
[  480.069701][   T31]  dump_stack_lvl+0x241/0x360
[  480.069751][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  480.069778][   T31]  ? __pfx__printk+0x10/0x10
[  480.069809][   T31]  ? vscnprintf+0x5d/0x90
[  480.069839][   T31]  panic+0x349/0x880
[  480.069862][   T31]  ? __pfx_preempt_schedule+0x10/0x10
[  480.069896][   T31]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  480.069927][   T31]  ? __pfx_panic+0x10/0x10
[  480.069949][   T31]  ? tick_nohz_tick_stopped+0x82/0xb0
[  480.069976][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  480.070008][   T31]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  480.070038][   T31]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  480.070071][   T31]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  480.070103][   T31]  watchdog+0x1097/0x10a0
[  480.070132][   T31]  ? watchdog+0x1ea/0x10a0
[  480.070164][   T31]  ? __pfx_watchdog+0x10/0x10
[  480.070192][   T31]  kthread+0x7a9/0x920
[  480.070218][   T31]  ? __pfx_watchdog+0x10/0x10
[  480.070245][   T31]  ? __pfx_kthread+0x10/0x10
[  480.070268][   T31]  ? __pfx_kthread+0x10/0x10
[  480.070291][   T31]  ? __pfx_kthread+0x10/0x10
[  480.070321][   T31]  ? __pfx_kthread+0x10/0x10
[  480.070345][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  480.070375][   T31]  ? lockdep_hardirqs_on+0x9d/0x150
[  480.070397][   T31]  ? __pfx_kthread+0x10/0x10
[  480.070423][   T31]  ret_from_fork+0x4b/0x80
[  480.070454][   T31]  ? __pfx_kthread+0x10/0x10
[  480.070478][   T31]  ret_from_fork_asm+0x1a/0x30
[  480.070518][   T31]  </TASK>
[  480.077269][   T31] Kernel Offset: disabled