last executing test programs: 14m4.342124013s ago: executing program 1 (id=1018): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018100000", @ANYRES32, @ANYBLOB="006f53da26e4c8691cbce54e7100", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xea, &(0x7f0000000340)=""/234}, 0x23) 14m4.225410482s ago: executing program 1 (id=1019): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x10000}}, 0xa) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) setsockopt$inet6_int(r1, 0x29, 0x42, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f00000000c0)={0x20, 0x22, 0x7, {0x7, 0x6, "f9d2507aeb"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}, &(0x7f0000000600)={0x0, 0x22, 0x6, {[@global=@item_012={0x1, 0x1, 0x7, ':'}, @local=@item_012={0x1, 0x2, 0x8, '>'}, @main=@item_012={0x1, 0x0, 0x8, "bf"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x49, 0x1, {0x22, 0xb0f}}}}, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0)={0x40, 0x30, 0x1e, "21e6eebacb8300883c55bdb1772675f4c021d8d6e2633d10edc5b55d179f"}, &(0x7f00000004c0)={0x0, 0xa, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xd2}, &(0x7f0000000540)={0x20, 0x1, 0x27, "18e2cc6be1b33ba16138a931503a68ebd1c84dbb426c84e160585245684390feb33a3b0b5e44bc"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000f5ff00000000000000c400000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000680)=""/4096, &(0x7f0000001680)=0x1000) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000100)={0x7, 0x402}) 13m59.510316833s ago: executing program 1 (id=1033): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x8001) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x10002, 0x0) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYBLOB="e1ed6f2409000d6cb3a5a70500000048930eeb2518c473", @ANYRESOCT=r1], 0xfdef) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x44542, 0x0) read(r0, &(0x7f0000000000)=""/17, 0xffffffffffffffba) socket$alg(0x26, 0x5, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) mmap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0xd, 0x2010, 0xffffffffffffffff, 0xecbc7000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r7, &(0x7f0000001400)=""/4076, 0xfffffeea) keyctl$dh_compute(0x17, &(0x7f0000000400)={r4, r5, r5}, &(0x7f0000000540)=""/204, 0xcc, &(0x7f00000003c0)={&(0x7f0000000340)={'streebog512\x00'}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0)={0x1d, r8}, 0x10) bind$xdp(r3, &(0x7f0000000280)={0x2c, 0x4, r8, 0x2b, r3}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 13m56.64308056s ago: executing program 1 (id=1047): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) shutdown(r4, 0x0) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendto$inet(r4, &(0x7f0000000200)="e1", 0x1, 0x20000000, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0xfea8, 0xa) 13m55.393533182s ago: executing program 1 (id=1048): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) read$FUSE(r2, 0x0, 0x4a) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x7fffffffffffffff) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r8, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r6, 0x3b8d, &(0x7f0000000280)={0x20, r10, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x80000}) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 13m52.900847788s ago: executing program 1 (id=1059): request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) getpgid(0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x4e, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/meminfo\x00', 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x100, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000500)) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000023c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="201104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1, 0x0, 0x9}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 13m37.689155964s ago: executing program 32 (id=1059): request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) getpgid(0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x4e, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/meminfo\x00', 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x100, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000500)) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000023c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="201104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1, 0x0, 0x9}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 12m58.268887315s ago: executing program 5 (id=1177): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="e1ed6f2409000d6cb3a5a70500000048930eeb2518c473", @ANYRESOCT=r1], 0xfdef) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x44542, 0x0) read(r0, &(0x7f0000000000)=""/17, 0xffffffffffffffba) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000080)={@multicast2, @remote, 0x1, "09eea5a8fea88aae1b080e372a890bd6c7bb4845675b28a7798dce949491eb7b", 0x6, 0x1, 0x2, 0x1}, 0x3c) socket$alg(0x26, 0x5, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) mmap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0xd, 0x2010, 0xffffffffffffffff, 0xecbc7000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r6, &(0x7f0000001400)=""/4076, 0xfffffeea) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r4, r4}, &(0x7f0000000540)=""/204, 0xcc, &(0x7f00000003c0)={&(0x7f0000000340)={'streebog512\x00'}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0)={0x1d, r7}, 0x10) bind$xdp(r2, &(0x7f0000000280)={0x2c, 0x4, r7, 0x2b, r2}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 12m54.555122556s ago: executing program 5 (id=1186): r0 = add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mq_getsetattr(r1, 0x0, &(0x7f00000000c0)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000014}, 0x24040010) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000025000/0x18000)=nil, 0x0, 0x0, 0x4e, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9) sched_setaffinity(0x0, 0xffffffffffffffcd, &(0x7f00000000c0)=0x2d2e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000025300)=""/102392, 0x18ff8) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40044) ioctl$KVM_RUN(r6, 0xae80, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r0, 0x30}) 12m52.382590982s ago: executing program 5 (id=1190): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0x10, &(0x7f0000000340)={&(0x7f0000000280)={0x1, 0x50c, 0x4, {r1, r2/1000+60000}, {}, {0x1, 0x0, 0x1}, 0x1, @can={{0x6, 0x1, 0x1}, 0x5, 0xe62749d347006985, 0x0, 0x0, "7d9cd77762b746fd"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x5074b6b7746ddb77) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x10000000005) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f00000011c0), 0x1000000000000247, 0x28b1d35c834f09d7, 0xffffffff00000005}}], 0x48, 0x8004}, 0x4000040) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 12m51.374596644s ago: executing program 5 (id=1192): add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mq_getsetattr(r0, 0x0, &(0x7f00000000c0)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000014}, 0x24040010) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000025000/0x18000)=nil, 0x0, 0x0, 0x4e, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9) sched_setaffinity(0x0, 0xffffffffffffffcd, &(0x7f00000000c0)=0x2d2e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000025300)=""/102392, 0x18ff8) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40044) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12m48.709882532s ago: executing program 5 (id=1197): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r1, 0x0, 0x0) write(r1, &(0x7f0000000100), 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = syz_clone(0x20808200, &(0x7f0000000240)="133d534c3b4a005cc0436d717fec11dc2c34f908217d63644c18ff4fd664c9aa29126f91084c9071a38dc3d6bb0a3ea6207f4159f8d939857efe209bf26f229ed2e9e62e320d76aa5465d5a5a5d0e421303961c929d4573f853e270b5fd1c931c36141c8dbfa3b2be319d33ac2", 0x6d, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000b80)="f6716916c3877c82280d183f5d9479b290b427368e6ff80ec9f77bc2a19acb9b793913eb920a990cdea57f6395c655deb3efc8a18562c1a68e25be10052cc82dea43db465a3b61cc50defe350c71836ce1ab6eb4afd39bbbfcfea21473d7966c9e7c8fc26cf4cc2db47cb00220d9126871744bcfa5d6fdab03733a585a5938b5cc9279d50177759f511b2851dc25b9252fa15c2e1777527398eba7f5df3302e13babaf15accfbc5fc94c9b878b46109ecd698fff1860fc17d188b71af0ba2758953c318cd234f6e1815218de48787bdf5fc64b0fabac92c25a87d5f25d3f36f1933cd063265ef86e5143") r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x810, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r6, r7, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, r5, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xffffffffffffeffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r6, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=0x0) sendmsg$netlink(r1, &(0x7f00000011c0)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001080)=[{&(0x7f0000000180)={0x38, 0x1e, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@generic="6664e5ff3fc6c75fd5269dcd92a7c583f096a330d8ead9d1490d827bb8638a62", @typed={0x8, 0x13f, 0x0, 0x0, @fd=r0}]}, 0x38}, {&(0x7f0000000c80)=ANY=[@ANYBLOB="280000003700100026bd70cd76a2000cdbdf2508", @ANYRES32=r2, @ANYBLOB="1000be8008000b00", @ANYRES32=r3, @ANYBLOB="04003a80"], 0x28}, {&(0x7f0000000cc0)={0x33c, 0x7e16, 0x100, 0x70bd2c, 0x25dfdbff, "", [@nested={0xc4, 0x118, 0x0, 0x1, [@generic="a7374c2e422b38dae51692c9703e10eaba4483f505eb1786fea38a5a0f4a8d06fe5412fa07221c8321dc5aefb04a5e6a1c2b77289185c24363779c01e0b3859dcbe6e1c3b6eaedab2ec2917d691a264514cb2ebab2374eb6869bdc97c800e0f455667b1b3fb8cbb680516f893e5034917d356e775187fbc2f4445952e34f5d7deaa18d3304540284d4e0e45aa7b1856faee7954a514ffd81eff42a421d1635032b0cf572518a66390b29f962ddebf7c66885297e1e49f98f", @nested={0x4, 0x57}, @nested={0x4, 0xa0}]}, @generic="64ee08f5defb38f60f2c773ea89cc2418a258ffd5116f4014f09", @generic, @typed={0x8, 0x6e, 0x0, 0x0, @u32=0x6}, @nested={0xc2, 0xd1, 0x0, 0x1, [@generic="5b713cae406721afc34f11c6a355bf37ae79c8c77f85963b2da6d93917f5e4fe94869ae564d771d95776a979c0f0db2239ea79f2e79410aaab005f6d80ac5e30240197c0cc2a8947bfa6a9aa918498662717570cfe9d3d57269e055a9343492afba6fcda", @generic="8e2e33c68aa6f2e433326976a418f40de04d00925d79249fa3d0914741d5b0875b2e3572cec1a8b2c2c4495095ca28ed2189705c85652e271d1de00e0ca16f012f061f1745abe2a44eeb55bdf95a05f1b4f56cab6a43", @nested={0x4, 0x160}]}, @nested={0x16b, 0x3d, 0x0, 0x1, [@nested={0x4, 0x15b}, @nested={0x4, 0xde}, @nested={0x4, 0xfb}, @typed={0x17, 0x139, 0x0, 0x0, @str='/dev/snd/controlC#\x00'}, @generic="b25d10090652608685b73dc740ba1741a683a5243ba2c86f09a7960b355ff8fd79a6f50a07dfe811d1adec193bd92d1a3fe73d6126e8a6f00001585dcaac2344625237ac9bc3d7960a09182a8a3c699a317aea2d9f976fb0ec26bae2660ee8cb5d25f217549b6665ad1c8357c93c1bb4f84b5f3db23778a77796e113a6f9a8927e19e773202f0e8d4eff53d8be3ecbaea14201a18974df01784ae52c2c9329", @typed={0xa1, 0x106, 0x0, 0x0, @binary="317d96dfc036c0845586bdfd699f10e09a174b3e554f32df0d389d48cefefd2394cb96920d56974fb1b1878356041aabf4d175e20155cb91bf49581cde350cf0f748759c0768440cb4fcc8e6ce13fb17406e3e3afbe0a00bbb1100a8921e339375015bb2ed8d34644a0672d1a5d12ea01c2ccf3698137a9d93d19b7a4b64324a31bb9b32b10ff27bf6ff44134efbbee51f4c72cad302c2c613f68af4ae"}]}, @typed={0x14, 0x5c, 0x0, 0x0, @ipv6=@remote}]}, 0x33c}, {&(0x7f0000001000)={0x80, 0x1a, 0x400, 0x70bd25, 0x25dfdbfe, "", [@typed={0x14, 0x7, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="b292f188c8a8b7a35392de8668207f5f328ee5c0200348868b544bec922522da0618d056e3ca6aea506c1b3a6a1beacfe19ad077bd4eec6def69870efb78a1309c088684b30c581ea24fc43d865c3deb9e904565697c1eee3b8b"]}, 0x80}], 0x4, &(0x7f0000001180)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6, r8}}}], 0x20, 0x4000001}, 0x4000000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000a40)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x9, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x8e665f0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5c8e, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0x1, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x2000007ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffe, 0x2, 0x1, 0x3, 0x10, 0x4000100000001]}) socket$kcm(0x21, 0x2, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 12m46.201229776s ago: executing program 5 (id=1203): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12m29.81875688s ago: executing program 33 (id=1203): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10m51.751679429s ago: executing program 6 (id=1517): r0 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0x10, &(0x7f0000000340)={&(0x7f0000000280)={0x1, 0x50c, 0x4, {r1, r2/1000+60000}, {}, {0x1, 0x0, 0x1}, 0x1, @can={{0x6, 0x1, 0x1}, 0x5, 0xe62749d347006985, 0x0, 0x0, "7d9cd77762b746fd"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x5074b6b7746ddb77) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x10000000005) r4 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffc000/0x3000)=nil) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f00000011c0), 0x1000000000000247, 0x28b1d35c834f09d7, 0xffffffff00000005}}], 0x48, 0x8004}, 0x4000040) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 10m50.695643133s ago: executing program 6 (id=1520): add_key$keyring(&(0x7f00000101c0), 0x0, 0x0, 0x0, 0xfffffffffffffff9) socket$nl_netfilter(0x10, 0x3, 0xc) mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000025000/0x18000)=nil, 0x0, 0x0, 0x4e, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9) sched_setaffinity(0x0, 0xffffffffffffffcd, &(0x7f00000000c0)=0x2d2e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m46.159256509s ago: executing program 6 (id=1528): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) r2 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffc000/0x3000)=nil) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f00000011c0), 0x1000000000000247, 0x28b1d35c834f09d7, 0xffffffff00000005}}], 0x48, 0x8004}, 0x4000040) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x18, 0x3, 0x46d, 0xa07, 0x0, 0x0, "0600ff0900a10185021901292015002501750195408102c0"}}, 0x130) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10m45.21043791s ago: executing program 6 (id=1530): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xd, 0xffff}, {0xffe0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@newtclass={0x74, 0x28, 0x2, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {0x3007344c0d18112c, 0xfff2}, {0xffe0, 0x9}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x44, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x7, 0x8, 0x9af}}, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x4, 0x7}}, @TCA_HFSC_RSC={0x10, 0x1, {0xfffff681, 0x5f56, 0xfffffffb}}, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x2, 0x8}}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8440}, 0x40000c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000180)=@ethtool_sset_info={0x4a, 0x7, 0x3}}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0x3}, {0xc, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xa}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x8041, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r9, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x24, r10, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff1, 0x9}, {0x2, 0x6}, {0xfffd, 0x1}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9a101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) r12 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)={0x2, 0x15}, 0x18) fanotify_mark(0xffffffffffffffff, 0x10, 0x0, r12, &(0x7f00000002c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x470c8, 0x0) chroot(0x0) umount2(&(0x7f0000000680)='./file1\x00', 0xb) 10m41.583005528s ago: executing program 6 (id=1540): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) r2 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffc000/0x3000)=nil) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f00000011c0), 0x1000000000000247, 0x28b1d35c834f09d7, 0xffffffff00000005}}], 0x48, 0x8004}, 0x4000040) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x18, 0x3, 0x46d, 0xa07, 0x0, 0x0, "0600ff0900a10185021901292015002501750195408102c0"}}, 0x130) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10m40.431468767s ago: executing program 6 (id=1545): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10001}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x58a}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @multicast2}], 0x78) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = fsopen(&(0x7f0000000280)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000340)={r2}) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000540)={r3, &(0x7f0000000880)='b\x90{\xc3/dev\x01\x00,\x14\x00\x00idiC#D#\x00\xae6\xb3\x1fO\xa13Hs\xf8\x028lu\xe0P/<\xd0y.\xbdSi7\xb1\xff\r\xc33\x17\xd3\\\xd0\xb0\xe7\x01\x00\x00\x00\x00\x00\x00\x00\xe7@@\xd8\x1b\xd4J.\x92\x89\xbd\xdd\x82\x88\xcc\x7f\xf2\xc2\x89\x03\x05\xfae\xd8\xc5\xf9\xc8\x04\xa3\xa5J\xda.p\xe3H\x85oAU\x15\x99\\\xa3\x86*LG\xbfC\x17\xba\xa5)\xde\xb1\xe4\xef\xd3\xa5\xb5\xf1\x1dG\x90\xdf\xe7l\x95\xb3\x85%~c\xb8\xd2c\xa0\x12\xd6\xa7\xcc\xaa\xa2uT\x8b\xd0\xea\x18a\x01\xe1\xde\xd2\x93B\b\x96\v\xf9?\xe9\xc7D\x98\x0f\x18\f\xf4\x81\xde\xaf\xa4\xddcw\xf9\x8c\x959f\t\a\x00\x00\x00\x00\x00\x00\x00\xa7\x1c\xaf\xaf\x83\xb1)A_}|j,-\x1cv\xa7\xf5\xf6\xc8\x8a\xb0\x86\x10T\x00\x95\x9d\xb0\xbd\xd0,h\xf5g~l.a\xd9\x9d\xef\x14Kw\x1aD', 0x131102, &(0x7f0000000440)={@align=0x7fff, {0xfffa, 0x4bd0, 0x8, 0x2}}, 0xd0, &(0x7f0000000100), &(0x7f0000000140)=0x8}) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r8, 0xb) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x1fe, 0x86}, 0x90) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/fcloop/ctl/add_target_port\x00', 0x82001, 0x0) write(r9, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) ptrace$peek(0x3, 0x0, &(0x7f0000000240)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 10m39.772982751s ago: executing program 34 (id=1545): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10001}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x58a}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @multicast2}], 0x78) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = fsopen(&(0x7f0000000280)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000340)={r2}) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000540)={r3, &(0x7f0000000880)='b\x90{\xc3/dev\x01\x00,\x14\x00\x00idiC#D#\x00\xae6\xb3\x1fO\xa13Hs\xf8\x028lu\xe0P/<\xd0y.\xbdSi7\xb1\xff\r\xc33\x17\xd3\\\xd0\xb0\xe7\x01\x00\x00\x00\x00\x00\x00\x00\xe7@@\xd8\x1b\xd4J.\x92\x89\xbd\xdd\x82\x88\xcc\x7f\xf2\xc2\x89\x03\x05\xfae\xd8\xc5\xf9\xc8\x04\xa3\xa5J\xda.p\xe3H\x85oAU\x15\x99\\\xa3\x86*LG\xbfC\x17\xba\xa5)\xde\xb1\xe4\xef\xd3\xa5\xb5\xf1\x1dG\x90\xdf\xe7l\x95\xb3\x85%~c\xb8\xd2c\xa0\x12\xd6\xa7\xcc\xaa\xa2uT\x8b\xd0\xea\x18a\x01\xe1\xde\xd2\x93B\b\x96\v\xf9?\xe9\xc7D\x98\x0f\x18\f\xf4\x81\xde\xaf\xa4\xddcw\xf9\x8c\x959f\t\a\x00\x00\x00\x00\x00\x00\x00\xa7\x1c\xaf\xaf\x83\xb1)A_}|j,-\x1cv\xa7\xf5\xf6\xc8\x8a\xb0\x86\x10T\x00\x95\x9d\xb0\xbd\xd0,h\xf5g~l.a\xd9\x9d\xef\x14Kw\x1aD', 0x131102, &(0x7f0000000440)={@align=0x7fff, {0xfffa, 0x4bd0, 0x8, 0x2}}, 0xd0, &(0x7f0000000100), &(0x7f0000000140)=0x8}) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r8, 0xb) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x1fe, 0x86}, 0x90) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/fcloop/ctl/add_target_port\x00', 0x82001, 0x0) write(r9, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) ptrace$peek(0x3, 0x0, &(0x7f0000000240)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 9m24.580320594s ago: executing program 7 (id=1763): mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_open_dev$ublk_chdev(&(0x7f0000000000), 0x0, 0x20200) pread64$ublk_ch(r0, 0x0, 0x0, 0x7) 9m24.320217735s ago: executing program 7 (id=1764): socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002780)=ANY=[@ANYBLOB="050000000c0000004300000040"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02"], 0x48) r5 = fcntl$getown(r4, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x3, r5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x16c5, r3, 0x500000000000000}, 0x38) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2}) 9m20.764874507s ago: executing program 7 (id=1775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)='ramfs\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r4, 0x9e, &(0x7f0000000180)}, 0x18) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x28082, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r5, 0x400455c8, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='cifs\x00', 0x17fc24c861952908, &(0x7f00000003c0)='**\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0x54}}, 0xc4890) 9m16.727370182s ago: executing program 7 (id=1785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x84) write(r2, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r3, 0x0}]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x40000014}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 9m14.903868639s ago: executing program 7 (id=1788): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x6d5) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c000000435bd559b9ace85ece3eb07dfa565a5edda392520611bcd60b21fe6595c5ebf5551236cadf2cfe038674cb4a8156c05bcc31a4f0cfef55cb620a0000000000000064c1be04d103e52f02ba88eeee3a43b411ba329e6153bbb1978699ae00000000716d6643b860466ed46fefbeece84ab216e4ff107ecff310c63065c0a10339d7f65f1e9c75b0df1343d44a", @ANYBLOB="cf89f4abe7944911da0a38e0d87cf3ec6d86e0d5193f2afb99fc075ab6cc0fcd2a453d2d2481633108325227600d701b3b85fc52fdae0635d732e96b4d651962473a40cf6aeb185b867e15fb35b995939ba45814cb662a5d64d441c78201819616212fd5715e62864a83542c7aed1476419940d4ad8da42fbba72a80910ea6f8a55d4ff820c8b69ba4b843fb0916fd715a99b9d4e3524ed32895992e1a97280a702f911d2abfa75cdf02a06494218e54bda33c712ba9b09dc18f677daa07c2aebfb3025074ced70b1a1b53460d065d380379ab9ff5df250476", @ANYRES16, @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4008000) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000040)={0x1b, &(0x7f00000000c0)=[{0x14, '\x00', @data=0x9, 0x51}, {0x1a, '\x00', @data=0x1, 0x27fffffc}]}) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/sockstat\x00') socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000021000100000000000008000a0001000000000000000000000900000000000000"], 0x24}}, 0x0) 9m14.335196715s ago: executing program 7 (id=1791): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0xe}, 0x1) 9m13.649279135s ago: executing program 35 (id=1791): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0xe}, 0x1) 9m12.415193339s ago: executing program 2 (id=1797): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0x36, 0x28}, 0x20) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000580)) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x4000000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2000000000000000840000000200000004004d"], 0x20, 0x4048800}, 0x0) 9m11.339419674s ago: executing program 2 (id=1801): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x6d5) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c000000435bd559b9ace85ece3eb07dfa565a5edda392520611bcd60b21fe6595c5ebf5551236cadf2cfe038674cb4a8156c05bcc31a4f0cfef55cb620a0000000000000064c1be04d103e52f02ba88eeee3a43b411ba329e6153bbb1978699ae00000000716d6643b860466ed46fefbeece84ab216e4ff107ecff310c63065c0a10339d7f65f1e9c75b0df1343d44a", @ANYBLOB="cf89f4abe7944911da0a38e0d87cf3ec6d86e0d5193f2afb99fc075ab6cc0fcd2a453d2d2481633108325227600d701b3b85fc52fdae0635d732e96b4d651962473a40cf6aeb185b867e15fb35b995939ba45814cb662a5d64d441c78201819616212fd5715e62864a83542c7aed1476419940d4ad8da42fbba72a80910ea6f8a55d4ff820c8b69ba4b843fb0916fd715a99b9d4e3524ed32895992e1a97280a702f911d2abfa75cdf02a06494218e54bda33c712ba9b09dc18f677daa07c2aebfb3025074ced70b1a1b53460d065d380379ab9ff5df250476", @ANYRES16, @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4008000) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000040)={0x1b, &(0x7f00000000c0)=[{0x14, '\x00', @data=0x9, 0x51}, {0x1a, '\x00', @data=0x1, 0x27fffffc}]}) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/sockstat\x00') socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000021000100000000000008000a0001000000000000000000000900000000000000"], 0x24}}, 0x0) 9m7.695950683s ago: executing program 2 (id=1808): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x3, 0x0, @val=@iter={0x0}}, 0x20) 9m7.490307801s ago: executing program 2 (id=1809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x84) write(r2, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x40000014}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 9m6.945065225s ago: executing program 2 (id=1810): pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2d, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x8000) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x7fff7fffffffffff}}, 0x56) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x1, 0x2, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = dup2(r3, r3) read$FUSE(r4, &(0x7f00000063c0)={0x2020}, 0x2020) ioctl$MEMGETOOBSEL(r4, 0x80c84d0a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r7 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r7, @ANYBLOB="05", @ANYRES16=r7], 0x0) sendmsg$inet(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x8b, "984a1912e10cc46b35ee2beff54acfd4e9446bc4a8d137d30846f5dfaf18c2c7cfa83116c132015e1fb4332c39f4da66ec589e8f300aa96220efb6cb1af3e22e7195b6323cb26a513b950e6c59235a414d92a595e80b80506dd20bf1b7132f628a92bf53c64355b8bb3b09dc5b62a20dd9b1cf3836661ae3551bdee3af3d00763b14e3f1f44116b112b45a"}, &(0x7f0000000180)=0x93) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000001c0)={r8, 0x6, 0x40, 0x0, 0x0, 0x3}, &(0x7f0000000200)=0x14) 9m6.107512873s ago: executing program 2 (id=1815): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x80000000003ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7d) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000004c0)=0x1b) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xfff, 0x9, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 9m5.546585886s ago: executing program 36 (id=1815): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x80000000003ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7d) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000004c0)=0x1b) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xfff, 0x9, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 14.324494455s ago: executing program 8 (id=3199): r0 = socket(0x23, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xf}, {0xc, 0xfff3}}}, 0x4c}, 0x1, 0x0, 0x0, 0x40081}, 0x8010) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="18001c00fffffff300000000ffffff80e500020000000000e500fcff0000000085000000ae000000950000000000000062d8bcc9151d1d671c8bd1e210cc41317b0228eeacabd591648d2d5b201853059708f0c9b3714aa705508d01c056ef5728bfa93575b8b27200d3bd9424b0f7da5345bcc3d03b6e09ae59cfc625e02087f430d294ba54"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) 12.756779317s ago: executing program 8 (id=3201): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setresuid(0xee00, 0xee00, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) r4 = semget$private(0x0, 0x7, 0x180) semtimedop(r4, &(0x7f0000000380)=[{0x0, 0x9, 0x800}, {}], 0x2, 0x0) semop(r4, &(0x7f0000000000), 0x0) semctl$GETNCNT(r4, 0x52b9f0035ed87e52, 0xe, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000440)={{0x0, r5, 0xee01, r6, 0x0, 0x0, 0x791}, 0x9, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x808}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000100)={0x50, 0x0, r9, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x100, 0x7, 0xa18, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000004200)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1e128dca5a5225db8052bd348c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x80003, 0x0, 0x0, 0xffffffff, 0x0, {0x4, 0x0, 0x8, 0x1, 0xe, 0xde, 0x1, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x9, {0x2, 0x3, 0x40000001000003, 0xa, 0x3ff, 0x80, {0x3, 0xfffffffffffffffe, 0x40000, 0xfe2b25d, 0x10001c2, 0x0, 0xfffffffd, 0x6, 0x3, 0xc000, 0xefffffff, 0x0, r10, 0x18, 0xdffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000002140)={{}, {0x1, 0x1}, [{0x2, 0x6, r1}, {0x2, 0x4, r3}, {0x2, 0x6, r6}], {0x4, 0x2}, [{0x8, 0x0, r7}, {0x8, 0x3, r10}], {}, {0x20, 0x2}}, 0x4c, 0x3) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r11, 0x3, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) shutdown(r0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) 12.47890704s ago: executing program 9 (id=3203): socket(0x2b, 0x1, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0xfe91}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) 12.47852s ago: executing program 4 (id=3204): r0 = socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x0, 0x0, 0x0) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x80800) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) r2 = userfaultfd(0x80001) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x2e, 0x6, 0x0, {0x6, 0x1, 0x5, 0x0, '\xaa\xaa\xaa\xaa\xaa'}}, 0x2e) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_emit_ethernet(0x1ae, &(0x7f0000000dc0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x178, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, [@fragment, @hopopts={0x6, 0x26, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9c, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa3"}, @ra, @generic={0x0, 0x69, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8"}, @generic={0x0, 0x1a, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241"}, @pad1]}]}}}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0x1, 0x3]}, 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ac0)={'wlan0\x00'}) 11.723330751s ago: executing program 8 (id=3206): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x80000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x95}, {0x10}, {0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0xd3}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x9, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x801, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f048}) fanotify_init(0x42, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x140) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000000)={0x8, 0xff, 0x9cea8d1, 0x0, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setpriority(0x2, r7, 0x0) socket$packet(0x11, 0x3, 0x300) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r9, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/225, 0xe1}], 0x1, 0x8000007, 0x20000000) r10 = eventfd2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="7472616e733d66819c56d3d8a27803", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',\x00']) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000080)={0x9, r1, 'id0\x00'}) 10.434139089s ago: executing program 8 (id=3208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[], 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_route(r4, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=ANY=[@ANYBLOB="3cffff00"/20, @ANYRES32=0x0, @ANYBLOB="000000002000000008001b000000000014001a80100002800c0001800800010001000000"], 0x3c}}, 0x0) set_mempolicy(0x1, 0x0, 0x7) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 9.737806294s ago: executing program 3 (id=3209): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)={0x54, r3, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}}, 0x20000000) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r5, 0x0, &(0x7f0000003000/0x2000)=nil, 0x2000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000040)={0x6, 0x1, 0x0, 0x20000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x44}, @multicast2}, 0x10) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 9.469229727s ago: executing program 0 (id=3211): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=@ipv6_deladdrlabel={0x38, 0x48, 0x309, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x11, 0x200cc, 0x6, 0x5}, 0x50) syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x8900, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, 0x0) syz_emit_ethernet(0xa, 0x0, &(0x7f00000001c0)={0x10004, 0x1, [0xb8f, 0x4a7, 0xb55, 0xcd3]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000400"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4af, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r1}, 0x38) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006e80)={0x2020}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) 9.269269503s ago: executing program 4 (id=3212): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setns(0xc9, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="09e712d05e2ae31617136118dac9f8b1fdd044f6a2e1f76616fc526600"/43, @ANYRES16=r2, @ANYBLOB="33fafdfffffffcdbdf2507000000080001000c0010000c0099007a72000056000000050053000000000008000500060000000a0018000303030303030000"], 0x44}, 0x1, 0x0, 0x0, 0x4048814}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xfffe, @none, 0x0, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)={[&(0x7f0000000340)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) 8.942230466s ago: executing program 3 (id=3213): r0 = io_uring_setup(0x70c3, &(0x7f0000000280)={0x0, 0x2c3f, 0x800, 0x20001, 0x2ab}) io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, 0x0, 0x1) 8.36552641s ago: executing program 9 (id=3214): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x49) close(r0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x8e2b00) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = dup(r3) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0xb, 0x5, 0xfff, 0x80000000, 0x8, 0x80000000, 0x200, 0x9}}) ftruncate(0xffffffffffffffff, 0x300004) sendfile(r7, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200002008000a40000000010900020073797a31000000000900010073797a30000000000800"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='befs\x00', 0x800841, 0x0) 7.390453768s ago: executing program 8 (id=3215): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 7.336201539s ago: executing program 4 (id=3216): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10001}, @in6={0xa, 0x4e24, 0x8, @loopback, 0xfffffff9}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x58a}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @multicast2}], 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = fsopen(&(0x7f0000000280)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000340)={r2}) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000540)={r3, &(0x7f0000000880)='b\x90{\xc3/dev\x01\x00,\x14\x00\x00idiC#D#\x00\xae6\xb3\x1fO\xa13Hs\xf8\x028lu\xe0P/<\xd0y.\xbdSi7\xb1\xff\r\xc33\x17\xd3\\\xd0\xb0\xe7\x01\x00\x00\x00\x00\x00\x00\x00\xe7@@\xd8\x1b\xd4J.\x92\x89\xbd\xdd\x82\x88\xcc\x7f\xf2\xc2\x89\x03\x05\xfae\xd8\xc5\xf9\xc8\x04\xa3\xa5J\xda.p\xe3H\x85oAU\x15\x99\\\xa3\x86*LG\xbfC\x17\xba\xa5)\xde\xb1\xe4\xef\xd3\xa5\xb5\xf1\x1dG\x90\xdf\xe7l\x95\xb3\x85%~c\xb8\xd2c\xa0\x12\xd6\xa7\xcc\xaa\xa2uT\x8b\xd0\xea\x18a\x01\xe1\xde\xd2\x93B\b\x96\v\xf9?\xe9\xc7D\x98\x0f\x18\f\xf4\x81\xde\xaf\xa4\xddcw\xf9\x8c\x959f\t\a\x00\x00\x00\x00\x00\x00\x00\xa7\x1c\xaf\xaf\x83\xb1)A_}|j,-\x1cv\xa7\xf5\xf6\xc8\x8a\xb0\x86\x10T\x00\x95\x9d\xb0\xbd\xd0,h\xf5g~l.a\xd9\x9d\xef\x14Kw\x1aD', 0x131102, &(0x7f0000000440)={@align=0x7fff, {0xfffa, 0x4bd0, 0x8, 0x2}}, 0xd0, &(0x7f0000000100), &(0x7f0000000140)=0x8}) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r8, 0xb) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x1fe, 0x86}, 0x90) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/fcloop/ctl/add_target_port\x00', 0x82001, 0x0) write(r9, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) ptrace$peek(0x3, 0x0, &(0x7f0000000240)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, 0x0) 7.242891587s ago: executing program 3 (id=3217): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)={0x54, r3, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}}, 0x20000000) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r5, 0x0, &(0x7f0000003000/0x2000)=nil, 0x2000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000040)={0x6, 0x1, 0x0, 0x20000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x44}, @multicast2}, 0x10) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26}) r10 = syz_io_uring_complete(0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r10, 0xc01864c1, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.110935862s ago: executing program 9 (id=3218): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x49) close(r0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x8e2b00) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="740000000206050000000000000000"], 0x70}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200002008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c00018008000140000000043c0000000c0a"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='befs\x00', 0x800841, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) 5.761692244s ago: executing program 0 (id=3219): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xc5, &(0x7f0000002100)=""/197, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)=ANY=[@ANYBLOB="400100001000130726bd700000000000ac1414bb0000000000000000000000001000000000000000000000000013ff2837d38d0000004e220001000000030222", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe88000000000000000000000000fe010000000033000000fe8000000000000000000000000000aa000000000000000000000000000000000b000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000007000000000000000200000000000000f8ffffff7fffffff0c000000000000000200000029bd700000000000020004000000000048000100626c616b6532732d3232342d61726d"], 0x140}, 0x1, 0x0, 0x0, 0xc0}, 0x4840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9200a00060005001a011c0005009cbd20e9773d469c56c31de53a4f066169586db667ca56f19aae3bb2a8904f52225552f1f63f28063a04f668bea523dfacfc1c8a199b785817b64239265a2871c8011fd80f72e12cb38a2483ed81ae07afad9695556204c484360f8936daae1e90f78eb8f869c8c5c3d68181fa111af1780b74b33d6271fbc4ef23b533a95cdd9847e27b4a9894d5a091897c575c4c2b1df0055ec647476030280098565e53b0725da948f8"], 0xf) socket$packet(0x11, 0x2, 0x300) 5.225735727s ago: executing program 4 (id=3220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)='ramfs\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r4, 0x9e, &(0x7f0000000180)}, 0x18) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x28082, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0x54}}, 0xc4890) 3.812991956s ago: executing program 0 (id=3221): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000003c0)={0xac1, 0x40, 0x1fc, 0x33, 0x1}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xe, 0x3ff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001580)=ANY=[@ANYBLOB="480000000201010100000000000000000200000906000340000200001400018000000100ffffffff08000200ac1e00010c00028005000199c7a1a5b400"/72], 0x48}}, 0x8000) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)={0x3c0, 0x2, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT={0x138, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xa4, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0x1bc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x7}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 3.811595544s ago: executing program 9 (id=3222): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x6, 0x1, 0x0, 0x20000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x44}, @multicast2}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 2.683554748s ago: executing program 0 (id=3223): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getitimer(0x1, &(0x7f0000000180)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xffff, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x840) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa1000000000000070100", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2.683166129s ago: executing program 9 (id=3224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x88802) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, 0x0) r6 = openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x101501, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) getpid() (async) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x88802) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, 0x0) (async) openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x101501, 0x0) (async) syz_open_procfs(0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) prctl$PR_SET_PTRACER(0x59616d61, 0x0) (async) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, 0x0) (async) 2.652296265s ago: executing program 3 (id=3225): r0 = socket(0x23, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xf}, {0xc, 0xfff3}}}, 0x4c}, 0x1, 0x0, 0x0, 0x40081}, 0x8010) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="18001c00fffffff300000000ffffff80e500020000000000e500fcff0000000085000000ae000000950000000000000062d8bcc9151d1d671c8bd1e210cc41317b0228eeacabd591648d2d5b201853059708f0c9b3714aa705508d01c056ef5728bfa93575b8b27200d3bd9424b0f7da5345bcc3d03b6e09ae59cfc625e02087f430d294ba54"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) 1.669905472s ago: executing program 9 (id=3226): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setns(0xc9, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="09e712d05e2ae31617136118dac9f8b1fdd044f6a2e1f76616fc526600"/43, @ANYRES16=r2, @ANYBLOB="33fafdfffffffcdbdf2507000000080001000c0010000c0099007a72000056000000050053000000000008000500060000000a0018000303030303030000"], 0x44}, 0x1, 0x0, 0x0, 0x4048814}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xfffe, @none, 0x0, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)={[&(0x7f0000000340)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) 1.647994039s ago: executing program 3 (id=3227): r0 = io_uring_setup(0x70c3, &(0x7f0000000280)={0x0, 0x2c3f, 0x800, 0x20001, 0x2ab}) io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, 0x0, 0x1) 924.228161ms ago: executing program 4 (id=3228): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0xc, 0x1000000, 0x7, 0xe, 0x5, 0x1, 0x8000009654, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0xffff, 0x200cc0, 0x1, 0x5, 0x3, 0xfffffffffffffffc, 0x6, 0x809, 0x0, 0x5, 0x6, 0x9}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000004}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x90, 0x0, 0x867, 0x1, {{0x1a, 0x4, 0x1, 0xc, 0x68, 0x66, 0x0, 0x3, 0x2f, 0x0, @empty, @empty, {[@generic={0x89, 0x8, "44b2b8548d5a"}, @lsrr={0x83, 0x7, 0x7e, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0xe2, [@empty, @dev={0xac, 0x14, 0x14, 0x28}, @loopback, @local, @empty, @remote]}, @rr={0x7, 0x23, 0x17, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x44}, @loopback, @local]}, @lsrr={0x83, 0x3, 0xd7}]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000680)={@dev}, &(0x7f00000006c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'vcan0\x00'}) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400001, 0x149) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1}, 0xc) 211.14003ms ago: executing program 0 (id=3229): ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000020000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00@']) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000d08000/0x2000)=nil, 0x1000}) (fail_nth: 3) 170.294871ms ago: executing program 4 (id=3230): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) 106.880208ms ago: executing program 3 (id=3231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x23, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xf}, {0xc, 0xfff3}}}, 0x4c}, 0x1, 0x0, 0x0, 0x40081}, 0x8010) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r6, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='1', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="18001c00fffffff300000000ffffff80e500020000000000e500fcff0000000085000000ae000000950000000000000062d8bcc9151d1d671c8bd1e210cc41317b0228eeacabd591648d2d5b201853059708f0c9b3714aa705508d01c056ef5728bfa93575b8b27200d3bd9424b0f7da5345bcc3d03b6e09ae59cfc625e02087f430d294ba54"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 24.955471ms ago: executing program 8 (id=3232): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000003c0)={0xac1, 0x40, 0x1fc, 0x33, 0x1}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xe, 0x3ff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001580)=ANY=[@ANYBLOB="480000000201010100000000000000000200000906000340000200001400018000000100ffffffff08000200ac1e00010c00028005000199c7a1a5b400"/72], 0x48}}, 0x8000) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)={0x3c0, 0x2, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT={0x138, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xa4, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0x1bc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x7}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 0s ago: executing program 0 (id=3233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x23, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xf}, {0xc, 0xfff3}}}, 0x4c}, 0x1, 0x0, 0x0, 0x40081}, 0x8010) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r6, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x0, 0x405, 0x88}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='1', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="18001c00fffffff300000000ffffff80e500020000000000e500fcff0000000085000000ae000000950000000000000062d8bcc9151d1d671c8bd1e210cc41317b0228eeacabd591648d2d5b201853059708f0c9b3714aa705508d01c056ef5728bfa93575b8b27200d3bd9424b0f7da5345bcc3d03b6e09ae59cfc625e02087f430d294ba54"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) kernel console output (not intermixed with test programs): t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1149.224971][ T30] audit: type=1400 audit(1787839693.557:6224): avc: denied { open } for pid=17901 comm="syz.3.3034" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1149.258705][ T30] audit: type=1400 audit(1787839693.587:6225): avc: denied { ioctl } for pid=17901 comm="syz.3.3034" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1149.301861][ T30] audit: type=1400 audit(1787839693.627:6226): avc: denied { create } for pid=17901 comm="syz.3.3034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1149.341936][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3034'. [ 1149.372541][T17904] netlink: 'syz.3.3034': attribute type 3 has an invalid length. [ 1149.379551][ T30] audit: type=1400 audit(1787839693.707:6227): avc: denied { create } for pid=17901 comm="syz.3.3034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1149.426184][ T30] audit: type=1400 audit(1787839693.757:6228): avc: denied { setopt } for pid=17901 comm="syz.3.3034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1149.540537][ T44] net_ratelimit: 2 callbacks suppressed [ 1149.540577][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.364799][T17912] befs: (nbd4): unable to read superblock [ 1150.564455][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.970001][ T8111] bond0: (slave syz_tun): Releasing backup interface [ 1151.140582][ T5609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1151.167505][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1151.176580][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1151.195879][ T5609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1151.203728][ T5609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1151.317718][ T5920] IPVS: starting estimator thread 0... [ 1151.437331][T17926] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3039'. [ 1151.457187][T16857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.582398][T17930] IPVS: using max 40 ests per chain, 96000 per kthread [ 1151.605535][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.561005][T17942] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3042'. [ 1152.635093][T17943] befs: (nbd9): unable to read superblock [ 1152.952494][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.965270][T16339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.986404][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.986869][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.091616][T12870] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1153.274487][T13014] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1153.282492][T11749] Bluetooth: hci1: command tx timeout [ 1153.614346][ T6544] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1153.729530][T13014] usb 5-1: device descriptor read/64, error -71 [ 1153.767201][ T6544] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1153.788184][ T6544] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.889505][ T6544] usb 10-1: config 0 descriptor?? [ 1153.981892][ T6544] cp210x 10-1:0.0: cp210x converter detected [ 1153.995632][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.074164][T13014] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1154.210430][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1154.210475][ T30] audit: type=1400 audit(1787839698.537:6248): avc: denied { allowed } for pid=17944 comm="syz.9.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1154.296913][ T30] audit: type=1400 audit(1787839698.567:6249): avc: denied { map } for pid=17944 comm="syz.9.3043" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=76409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1154.297191][ T30] audit: type=1400 audit(1787839698.567:6250): avc: denied { read write } for pid=17944 comm="syz.9.3043" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=76409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1154.490163][T16848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.539252][T12870] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1154.675959][ T30] audit: type=1400 audit(1787839699.007:6251): avc: denied { ioctl } for pid=17944 comm="syz.9.3043" path="/dev/video7" dev="devtmpfs" ino=948 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1154.775480][ T6544] cp210x 10-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1154.775672][ T6544] cp210x 10-1:0.0: GPIO initialisation failed: -71 [ 1154.964812][ T6544] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1155.054480][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.188924][ T6544] usb 10-1: USB disconnect, device number 33 [ 1155.354221][T11749] Bluetooth: hci1: command tx timeout [ 1155.444492][ T6544] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1155.497206][ T6544] cp210x 10-1:0.0: device disconnected [ 1156.147301][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.167469][ T30] audit: type=1400 audit(1787839700.497:6252): avc: denied { read write } for pid=17955 comm="syz.3.3044" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1156.178142][T17958] FAULT_INJECTION: forcing a failure. [ 1156.178142][T17958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1156.178170][T17958] CPU: 1 UID: 0 PID: 17958 Comm: syz.3.3044 Tainted: G L syzkaller #0 PREEMPT(full) [ 1156.178193][T17958] Tainted: [L]=SOFTLOCKUP [ 1156.178199][T17958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1156.178209][T17958] Call Trace: [ 1156.178215][T17958] [ 1156.178222][T17958] dump_stack_lvl+0x100/0x190 [ 1156.178249][T17958] should_fail_ex.cold+0x5/0xa [ 1156.178272][T17958] _copy_from_user+0x2e/0xd0 [ 1156.178295][T17958] ucma_resolve_ip+0x92/0x220 [ 1156.178320][T17958] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 1156.178351][T17958] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 1156.178375][T17958] ucma_write+0x1fb/0x330 [ 1156.178396][T17958] ? __pfx_ucma_write+0x10/0x10 [ 1156.178417][T17958] ? bpf_lsm_file_permission+0x9/0x10 [ 1156.178437][T17958] ? security_file_permission+0x76/0x210 [ 1156.178462][T17958] ? rw_verify_area+0xce/0x6d0 [ 1156.178486][T17958] ? __pfx_ucma_write+0x10/0x10 [ 1156.178506][T17958] vfs_writev+0x5ed/0xdd0 [ 1156.178527][T17958] ? get_pid_task+0x106/0x250 [ 1156.178553][T17958] ? __pfx_vfs_writev+0x10/0x10 [ 1156.178576][T17958] ? rcu_read_lock_any_held+0x6a/0x90 [ 1156.178610][T17958] ? __fget_files+0x21f/0x3d0 [ 1156.178639][T17958] ? do_writev+0x28a/0x340 [ 1156.178659][T17958] do_writev+0x28a/0x340 [ 1156.178682][T17958] ? __pfx_do_writev+0x10/0x10 [ 1156.178710][T17958] do_syscall_64+0x123/0x790 [ 1156.178737][T17958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.178755][T17958] RIP: 0033:0x7ff9ef19e0d9 [ 1156.178770][T17958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1156.178786][T17958] RSP: 002b:00007ff9f000c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1156.178803][T17958] RAX: ffffffffffffffda RBX: 00007ff9ef425fa0 RCX: 00007ff9ef19e0d9 [ 1156.178814][T17958] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000007 [ 1156.178824][T17958] RBP: 00007ff9f000c090 R08: 0000000000000000 R09: 0000000000000000 [ 1156.178834][T17958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.178845][T17958] R13: 00007ff9ef426038 R14: 00007ff9ef425fa0 R15: 00007fffac224708 [ 1156.178867][T17958] [ 1156.207518][T12870] bond0: (slave netdevsim1): Releasing backup interface [ 1156.283829][T12870] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1156.319771][ T30] audit: type=1400 audit(1787839700.497:6253): avc: denied { open } for pid=17955 comm="syz.3.3044" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1156.563901][ T30] audit: type=1400 audit(1787839700.877:6254): avc: denied { write } for pid=17962 comm="syz.3.3046" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1156.589014][T17963] FAULT_INJECTION: forcing a failure. [ 1156.589014][T17963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1156.602331][T17963] CPU: 0 UID: 0 PID: 17963 Comm: syz.3.3046 Tainted: G L syzkaller #0 PREEMPT(full) [ 1156.602364][T17963] Tainted: [L]=SOFTLOCKUP [ 1156.602371][T17963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1156.602383][T17963] Call Trace: [ 1156.602390][T17963] [ 1156.602397][T17963] dump_stack_lvl+0x100/0x190 [ 1156.602429][T17963] should_fail_ex.cold+0x5/0xa [ 1156.602456][T17963] _copy_from_user+0x2e/0xd0 [ 1156.602483][T17963] kvm_vm_ioctl+0x13a7/0x42d0 [ 1156.602515][T17963] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1156.602555][T17963] ? kasan_quarantine_put+0x104/0x240 [ 1156.602574][T17963] ? lockdep_hardirqs_on+0x7d/0x110 [ 1156.602603][T17963] ? find_held_lock+0x2b/0x80 [ 1156.602630][T17963] ? tomoyo_path_number_perm+0x28f/0x580 [ 1156.602660][T17963] ? tomoyo_path_number_perm+0x188/0x580 [ 1156.602687][T17963] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1156.602720][T17963] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1156.602743][T17963] ? do_vfs_ioctl+0x226/0x13e0 [ 1156.602771][T17963] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1156.602794][T17963] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1156.602822][T17963] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1156.602859][T17963] ? selinux_file_ioctl+0x13b/0x290 [ 1156.602882][T17963] ? selinux_file_ioctl+0xb6/0x290 [ 1156.602907][T17963] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1156.602927][T17963] __x64_sys_ioctl+0x18e/0x210 [ 1156.602955][T17963] do_syscall_64+0x123/0x790 [ 1156.602983][T17963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.603001][T17963] RIP: 0033:0x7ff9ef19e0d9 [ 1156.603017][T17963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1156.603035][T17963] RSP: 002b:00007ff9f000c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1156.603053][T17963] RAX: ffffffffffffffda RBX: 00007ff9ef425fa0 RCX: 00007ff9ef19e0d9 [ 1156.603066][T17963] RDX: 00002000000000c0 RSI: 000000004008ae6a RDI: 0000000000000004 [ 1156.603077][T17963] RBP: 00007ff9f000c090 R08: 0000000000000000 R09: 0000000000000000 [ 1156.603088][T17963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.603097][T17963] R13: 00007ff9ef426038 R14: 00007ff9ef425fa0 R15: 00007fffac224708 [ 1156.603121][T17963] [ 1156.669393][T12870] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 1156.669421][T12870] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 1156.672807][T12870] bridge0: port 3(netdevsim0) entered disabled state [ 1156.885387][ T30] audit: type=1400 audit(1787839701.217:6255): avc: denied { create } for pid=17960 comm="syz.4.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1156.891114][T12870] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1156.925167][ T30] audit: type=1400 audit(1787839701.257:6256): avc: denied { connect } for pid=17960 comm="syz.4.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1157.005877][T17970] befs: (nbd8): unable to read superblock [ 1157.389957][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.399956][ T30] audit: type=1400 audit(1787839701.317:6257): avc: denied { write } for pid=17960 comm="syz.4.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1157.434110][T11749] Bluetooth: hci1: command tx timeout [ 1157.588903][T16857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.786135][T17978] befs: (nbd9): unable to read superblock [ 1158.137455][T16848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.166010][T11910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.167869][T16857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.168263][T16857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.382213][T17985] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3053'. [ 1158.426369][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.550307][T17988] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3052'. [ 1158.565799][T17988] befs: (nbd3): unable to read superblock [ 1158.961192][T17990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.339091][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1159.345221][ T30] audit: type=1400 audit(1787839703.567:6264): avc: denied { create } for pid=17989 comm="syz.9.3054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1159.345421][ T30] audit: type=1400 audit(1787839703.577:6265): avc: denied { create } for pid=17989 comm="syz.9.3054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1159.345544][ T30] audit: type=1400 audit(1787839703.577:6266): avc: denied { setopt } for pid=17989 comm="syz.9.3054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1159.345659][ T30] audit: type=1400 audit(1787839703.627:6267): avc: denied { create } for pid=17989 comm="syz.9.3054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1159.345781][ T30] audit: type=1400 audit(1787839703.627:6268): avc: denied { ioctl } for pid=17989 comm="syz.9.3054" path="socket:[77096]" dev="sockfs" ino=77096 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1159.345898][ T30] audit: type=1400 audit(1787839703.627:6269): avc: denied { setopt } for pid=17989 comm="syz.9.3054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1159.508851][ T30] audit: type=1400 audit(1787839703.837:6270): avc: denied { read } for pid=5260 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1159.530737][T11749] Bluetooth: hci1: command tx timeout [ 1159.613657][ T44] hsr0: entered promiscuous mode [ 1159.630604][ T30] audit: type=1400 audit(1787839703.957:6271): avc: denied { search } for pid=5260 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1159.657962][ T30] audit: type=1400 audit(1787839703.987:6272): avc: denied { search } for pid=5260 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1159.658014][ T30] audit: type=1400 audit(1787839703.987:6273): avc: denied { search } for pid=5260 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1160.304574][T16857] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1160.474417][ T5781] net_ratelimit: 2 callbacks suppressed [ 1160.474454][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.481662][T16857] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1160.495729][T16857] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.542259][T16857] usb 10-1: config 0 descriptor?? [ 1160.597380][T16857] cp210x 10-1:0.0: cp210x converter detected [ 1160.634668][T16848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.517787][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.562414][T16857] cp210x 10-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1161.562503][T16857] cp210x 10-1:0.0: GPIO initialisation failed: -71 [ 1161.606951][T16857] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1161.696067][T16857] usb 10-1: USB disconnect, device number 34 [ 1161.839278][T16857] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1161.916320][T16857] cp210x 10-1:0.0: device disconnected [ 1162.413044][T12870] bridge_slave_1: left allmulticast mode [ 1162.423056][T12870] bridge_slave_1: left promiscuous mode [ 1162.437278][T12870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.512221][T12870] bridge_slave_0: left allmulticast mode [ 1162.519418][T12870] bridge_slave_0: left promiscuous mode [ 1162.520179][T12870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.546280][T18026] netlink: 'syz.8.3059': attribute type 3 has an invalid length. [ 1162.607475][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.642538][T15482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.643467][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.676698][T16848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.676982][T16848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.693804][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.793475][T18035] befs: (nbd9): unable to read superblock [ 1164.266271][T12870] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1164.484309][ T44] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1164.643919][ T44] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1164.667352][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.748198][ T44] usb 4-1: config 0 descriptor?? [ 1164.844805][ T44] cp210x 4-1:0.0: cp210x converter detected [ 1165.422383][ T44] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1165.422522][ T44] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1165.489881][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.505856][ T44] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1165.617110][ T44] usb 4-1: USB disconnect, device number 101 [ 1165.656559][T18038] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3062'. [ 1165.782558][ T44] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1165.791862][ T44] cp210x 4-1:0.0: device disconnected [ 1166.019140][T11749] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1166.241718][T12870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1166.257779][T12870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1166.268308][T12870] bond0 (unregistering): Released all slaves [ 1166.274670][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1166.274684][ T30] audit: type=1400 audit(1787839710.597:6288): avc: denied { prog_run } for pid=18042 comm="syz.4.3063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1166.278047][T12870] bond1 (unregistering): Released all slaves [ 1166.287463][T12870] bond2 (unregistering): Released all slaves [ 1166.390957][T18025] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3059'. [ 1166.436251][ T5260] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1166.554302][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.582832][T17917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.584518][T17917] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.584930][T17917] bridge_slave_0: entered allmulticast mode [ 1166.684302][T17917] bridge_slave_0: entered promiscuous mode [ 1166.688666][T17917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.688790][T17917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.688892][T17917] bridge_slave_1: entered allmulticast mode [ 1166.689981][T17917] bridge_slave_1: entered promiscuous mode [ 1166.724871][T16857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.736977][T17917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1166.742671][T17917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1166.817361][T17917] team0: Port device team_slave_0 added [ 1166.861582][T17917] team0: Port device team_slave_1 added [ 1167.012466][T17917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1167.012499][T17917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1167.012768][T17917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1167.026283][T17917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1167.026298][T17917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1167.026318][T17917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1167.147408][ T30] audit: type=1400 audit(1787839711.467:6289): avc: denied { mount } for pid=18054 comm="syz.8.3065" name="/" dev="configfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1167.170627][ T30] audit: type=1400 audit(1787839711.467:6290): avc: denied { search } for pid=18054 comm="syz.8.3065" name="/" dev="configfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1167.170751][ T30] audit: type=1400 audit(1787839711.467:6291): avc: denied { search } for pid=18054 comm="syz.8.3065" name="nullb" dev="configfs" ino=3382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1167.170858][ T30] audit: type=1400 audit(1787839711.467:6292): avc: denied { search } for pid=18054 comm="syz.8.3065" name="nullb1" dev="configfs" ino=9875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1167.170977][ T30] audit: type=1400 audit(1787839711.467:6293): avc: denied { read write } for pid=18054 comm="syz.8.3065" name="memory_backed" dev="configfs" ino=77182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1167.171082][ T30] audit: type=1400 audit(1787839711.467:6294): avc: denied { open } for pid=18054 comm="syz.8.3065" path="/253/config/nullb/nullb1/memory_backed" dev="configfs" ino=77182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1167.171202][ T30] audit: type=1800 audit(1787839711.467:6295): pid=18063 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.3065" name="memory_backed" dev="configfs" ino=77182 res=0 errno=0 [ 1167.622529][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.672685][T18064] netlink: Unknown conntrack attr (0) [ 1167.672943][T18064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1167.818463][ T30] audit: type=1400 audit(1787839712.127:6296): avc: denied { unmount } for pid=12825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1168.311429][T12870] IPVS: stopping master sync thread 7039 ... [ 1168.615463][ T30] audit: type=1400 audit(1787839712.937:6297): avc: denied { write } for pid=18059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1168.651264][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.929333][T17917] hsr_slave_0: entered promiscuous mode [ 1168.991271][T17917] hsr_slave_1: entered promiscuous mode [ 1168.992124][T17917] debugfs: 'hsr0' already exists in 'hsr' [ 1168.992142][T17917] Cannot create hsr debugfs directory [ 1168.999515][T18071] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3070'. [ 1169.134731][T18067] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1169.321083][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.362959][T16857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.371823][ T5598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.958671][T13014] net_ratelimit: 2 callbacks suppressed [ 1170.958714][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.006776][T18090] 9p: Could not find request transport: fVآx0x0000000000000007 [ 1171.053499][ T5260] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1171.555081][ T44] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1171.761318][T18105] netlink: 'syz.9.3075': attribute type 3 has an invalid length. [ 1171.790664][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1171.801892][ T44] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1171.821340][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.831931][ T44] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1171.841746][ T44] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1171.841944][ T44] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1171.854119][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1171.854198][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1171.857789][ T44] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1171.857987][ T44] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1171.912561][ T44] usb 5-1: string descriptor 0 read error: -22 [ 1171.912635][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.994913][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.478014][ T44] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 1172.493229][T18104] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3075'. [ 1172.539431][T18108] befs: (loop3): No write support. Marking filesystem read-only [ 1172.539609][T18108] befs: (loop3): unable to read superblock [ 1172.722412][ T44] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1172.722462][ T44] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1172.722497][ T44] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1172.801827][ T44] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1172.807551][T12870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.840653][T12870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.846852][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1172.846867][ T30] audit: type=1400 audit(1787839717.167:6306): avc: denied { bind } for pid=18112 comm="syz.9.3078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1172.846908][ T30] audit: type=1400 audit(1787839717.167:6307): avc: denied { name_bind } for pid=18112 comm="syz.9.3078" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1172.846938][ T30] audit: type=1400 audit(1787839717.167:6308): avc: denied { node_bind } for pid=18112 comm="syz.9.3078" saddr=fc00::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1172.939208][ T44] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1172.954417][ T44] usb 5-1: USB disconnect, device number 66 [ 1172.994340][ T30] audit: type=1400 audit(1787839717.327:6309): avc: denied { write } for pid=18117 comm="syz.3.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1173.034929][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.055432][ T30] audit: type=1400 audit(1787839717.387:6310): avc: denied { listen } for pid=18117 comm="syz.3.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1173.093332][ T30] audit: type=1400 audit(1787839717.417:6311): avc: denied { accept } for pid=18117 comm="syz.3.3079" lport=46441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1173.385049][ T30] audit: type=1400 audit(1787839717.707:6313): avc: denied { ioctl } for pid=18112 comm="syz.9.3078" path="socket:[77965]" dev="sockfs" ino=77965 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1173.385577][ T30] audit: type=1400 audit(1787839717.687:6312): avc: denied { search } for pid=18116 comm="sed" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1173.387171][ T30] audit: type=1400 audit(1787839717.717:6314): avc: denied { read } for pid=18116 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1804 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1173.387219][ T30] audit: type=1400 audit(1787839717.717:6315): avc: denied { open } for pid=18116 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1804 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1173.454404][ T6544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.544201][T13014] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1173.748340][T13014] usb 4-1: Using ep0 maxpacket: 8 [ 1173.766346][T13014] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1173.825102][T13014] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1173.825331][T13014] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1173.825397][T13014] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1173.825455][T13014] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1173.952897][T13014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.952958][T13014] usb 4-1: Product: syz [ 1173.953037][T13014] usb 4-1: Manufacturer: syz [ 1173.953112][T13014] usb 4-1: SerialNumber: syz [ 1174.075817][T17550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.149312][T13014] usb 4-1: config 0 descriptor?? [ 1174.152261][T18120] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1175.134243][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.706214][T13014] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1175.723107][T12870] team0 (unregistering): Port device team_slave_1 removed [ 1175.731898][T13014] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input84 [ 1175.749139][T12870] team0 (unregistering): Port device team_slave_0 removed [ 1176.154515][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.475833][T16857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.516670][ T5260] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1176.552116][T18149] binder: 18148:18149 ioctl c0306201 0 returned -14 [ 1177.197567][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.301367][T12870] IPVS: stop unused estimator thread 0... [ 1177.813430][ C1] powermate: config urb returned -71 [ 1177.813905][T16857] usb 4-1: USB disconnect, device number 102 [ 1177.814255][ T6544] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1177.818972][ C1] powermate: config urb returned -71 [ 1177.818990][ C1] powermate: usb_submit_urb(config) failed [ 1177.819015][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1177.921437][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 1177.921473][ T30] audit: type=1400 audit(1787839722.247:6409): avc: denied { write } for pid=18176 comm="syz.3.3087" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1177.966188][ T30] audit: type=1400 audit(1787839722.297:6410): avc: denied { name_bind } for pid=18176 comm="syz.3.3087" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1177.966229][ T30] audit: type=1400 audit(1787839722.297:6411): avc: denied { node_bind } for pid=18176 comm="syz.3.3087" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1178.010777][ T6544] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1178.021339][ T6544] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.021405][ T6544] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1178.033027][ T6544] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1178.033050][ T6544] usb 5-1: SerialNumber: syz [ 1178.123321][ T30] audit: type=1400 audit(1787839722.437:6412): avc: denied { read } for pid=18176 comm="syz.3.3087" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1178.123389][ T30] audit: type=1400 audit(1787839722.447:6413): avc: denied { open } for pid=18176 comm="syz.3.3087" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1178.123439][ T30] audit: type=1400 audit(1787839722.447:6414): avc: denied { ioctl } for pid=18176 comm="syz.3.3087" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1178.237882][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.285867][T18179] netlink: 'syz.3.3087': attribute type 3 has an invalid length. [ 1178.313355][ T30] audit: type=1400 audit(1787839722.627:6415): avc: denied { create } for pid=18176 comm="syz.3.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1178.313414][ T30] audit: type=1400 audit(1787839722.637:6416): avc: denied { setopt } for pid=18176 comm="syz.3.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1178.468405][ T6544] usb 5-1: 0:2 : does not exist [ 1178.468490][ T6544] usb 5-1: unit 5: unexpected type 0x0c [ 1178.481715][ T30] audit: type=1400 audit(1787839722.807:6417): avc: denied { create } for pid=18180 comm="syz.8.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1178.484551][ T30] audit: type=1400 audit(1787839722.817:6418): avc: denied { write } for pid=18180 comm="syz.8.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1178.532554][T18178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3087'. [ 1178.601658][T18184] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3088'. [ 1179.274664][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.760991][T16848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.761225][T16857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.769711][ T6544] usb 5-1: USB disconnect, device number 67 [ 1179.807944][T18185] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1179.896086][T13865] udevd[13865]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1180.208772][T18204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.208984][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.359202][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.437785][T18213] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3093'. [ 1181.177715][T18213] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1181.434817][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.645781][T17917] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1181.663659][T17917] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1181.691230][T17917] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1181.711765][T17917] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1181.720474][T17917] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1181.747202][T17917] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1181.751322][T17917] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1181.780898][T17917] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1181.924262][T18244] netlink: 'syz.8.3098': attribute type 3 has an invalid length. [ 1182.522980][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.588099][T18250] netlink: Unknown conntrack attr (0) [ 1182.588118][T18250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1182.827776][T13290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.960985][T17917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1183.100180][T18254] netlink: Unknown conntrack attr (0) [ 1183.100308][T18254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1183.237019][T17917] 8021q: adding VLAN 0 to HW filter on device team0 [ 1183.363951][T16339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.364087][T16339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.522061][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1183.522104][ T30] audit: type=1400 audit(1787839727.837:6435): avc: denied { unmount } for pid=17617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1183.574676][T12870] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.574775][T12870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1183.595680][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.761243][ T30] audit: type=1400 audit(1787839728.087:6436): avc: denied { listen } for pid=18255 comm="syz.4.3101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1184.056137][T18257] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3101'. [ 1184.126444][T18258] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1184.135853][ T30] audit: type=1326 audit(1787839728.457:6437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18255 comm="syz.4.3101" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7e259e0d9 code=0x0 [ 1184.179159][ T30] audit: type=1400 audit(1787839728.507:6438): avc: denied { write } for pid=18226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1184.218912][ T30] audit: type=1400 audit(1787839728.547:6439): avc: denied { bind } for pid=18263 comm="syz.3.3102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1184.219285][ T30] audit: type=1400 audit(1787839728.547:6440): avc: denied { name_bind } for pid=18263 comm="syz.3.3102" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1184.219672][ T30] audit: type=1400 audit(1787839728.547:6441): avc: denied { node_bind } for pid=18263 comm="syz.3.3102" saddr=fc00::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1184.241035][T18268] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3103'. [ 1184.363044][T18269] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1184.507769][ T30] audit: type=1400 audit(1787839728.837:6442): avc: denied { sys_module } for pid=17917 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1184.874464][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.404677][ T5598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.530532][ T30] audit: type=1400 audit(1787839730.857:6443): avc: denied { search } for pid=18266 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1186.552163][ T30] audit: type=1400 audit(1787839730.857:6444): avc: denied { read } for pid=18266 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1187.283892][T18286] befs: (nbd4): unable to read superblock [ 1187.445606][T13014] net_ratelimit: 1 callbacks suppressed [ 1187.445657][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.477790][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.541864][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 1188.548279][ T30] audit: type=1400 audit(1787839732.867:6509): avc: denied { name_bind } for pid=18308 comm="syz.3.3109" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1188.571050][ T30] audit: type=1400 audit(1787839732.867:6510): avc: denied { node_bind } for pid=18308 comm="syz.3.3109" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1188.650203][ T30] audit: type=1400 audit(1787839732.977:6511): avc: denied { read } for pid=18308 comm="syz.3.3109" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1188.652099][ T30] audit: type=1400 audit(1787839732.977:6512): avc: denied { open } for pid=18308 comm="syz.3.3109" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1188.654061][ T30] audit: type=1400 audit(1787839732.977:6513): avc: denied { ioctl } for pid=18308 comm="syz.3.3109" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1188.686063][ T30] audit: type=1400 audit(1787839733.017:6514): avc: denied { create } for pid=18308 comm="syz.3.3109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1188.698701][T18316] netlink: 'syz.3.3109': attribute type 3 has an invalid length. [ 1188.703051][ T30] audit: type=1400 audit(1787839733.027:6515): avc: denied { create } for pid=18308 comm="syz.3.3109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1188.706594][ T30] audit: type=1400 audit(1787839733.037:6516): avc: denied { setopt } for pid=18308 comm="syz.3.3109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1188.839143][T17917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.939208][T17917] veth0_vlan: entered promiscuous mode [ 1189.077322][T17917] veth1_vlan: entered promiscuous mode [ 1189.154258][T16848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.317070][T17917] veth0_macvtap: entered promiscuous mode [ 1189.349312][T17917] veth1_macvtap: entered promiscuous mode [ 1189.434378][T16848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.512083][T17917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1189.523513][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.570241][T17917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1189.826554][T12870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.826627][T12870] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.826682][T12870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.826717][T12870] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.976291][ T30] audit: type=1400 audit(1787839734.307:6517): avc: denied { prog_load } for pid=18321 comm="syz.3.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1189.998282][ T30] audit: type=1400 audit(1787839734.307:6518): avc: denied { prog_load } for pid=18322 comm="syz.9.3112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1190.179074][T18327] netlink: Unknown conntrack attr (0) [ 1190.184732][T18327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1190.440034][T12870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.450582][T12870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.556169][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.754095][T13014] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1190.894268][T13014] usb 9-1: device descriptor read/64, error -71 [ 1191.156418][T16111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.156458][T16111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.308904][T13014] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1191.409458][ T6544] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1191.516132][T18344] befs: (nbd9): unable to read superblock [ 1191.576134][ T6544] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1191.590190][ T6544] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.602845][ T6544] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.702308][ T6544] usb 5-1: config 0 descriptor?? [ 1191.775172][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.775936][T13014] usb 9-1: device descriptor read/64, error -71 [ 1191.885654][T13014] usb usb9-port1: attempt power cycle [ 1191.971198][ T6544] usbhid 5-1:0.0: can't add hid device: -71 [ 1191.977768][ T6544] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1191.990952][ T6544] usb 5-1: USB disconnect, device number 68 [ 1192.794317][ T6544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.798981][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.926187][ T5781] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1193.078984][ T5781] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 1193.086578][ T5781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1193.086618][ T5781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.089387][ T5781] usb 5-1: config 0 descriptor?? [ 1193.112179][ T5781] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input85 [ 1193.316576][ C1] usb 5-1: unknown answer from device [ 1193.444142][ T6544] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1193.530069][T18334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.530464][T18334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.541839][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1193.541987][ T4950] usb 5-1: control msg error: -71 [ 1193.542041][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1193.542088][ C1] usb 5-1: pegasus_irq - usb_submit_urb failed with result -1 [ 1193.571093][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1193.571829][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1193.572025][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1193.572219][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1193.572616][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1193.572850][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1193.573028][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1193.573095][ T5781] usb 5-1: USB disconnect, device number 69 [ 1193.573207][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1193.573230][ C1] usb 5-1: pegasus_irq - usb_submit_urb failed with result -19 [ 1193.620206][ T6544] usb 10-1: Using ep0 maxpacket: 8 [ 1193.621218][ T4950] usb 5-1: control msg error: -71 [ 1193.634246][ T6544] usb 10-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1193.660333][ T6544] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1193.660379][ T6544] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1193.660403][ T6544] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1193.660428][ T6544] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1193.718687][ T6544] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.718729][ T6544] usb 10-1: Product: syz [ 1193.718759][ T6544] usb 10-1: Manufacturer: syz [ 1193.718777][ T6544] usb 10-1: SerialNumber: syz [ 1193.742703][ T6544] usb 10-1: config 0 descriptor?? [ 1193.749927][T18378] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1193.812401][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 1193.812452][ T30] audit: type=1400 audit(1787839738.137:6581): avc: denied { read write } for pid=18387 comm="syz.8.3122" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1193.812497][ T30] audit: type=1400 audit(1787839738.137:6582): avc: denied { open } for pid=18387 comm="syz.8.3122" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1193.825085][ T5331] hid_parser_main: 66 callbacks suppressed [ 1193.825123][ T5331] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 1193.842903][ T5331] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1193.846745][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.863101][T18388] netlink: ct family unspecified [ 1193.863125][T18388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1193.985210][ T30] audit: type=1400 audit(1787839738.317:6583): avc: denied { setopt } for pid=18372 comm="syz.9.3121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1193.985735][ T30] audit: type=1400 audit(1787839738.317:6584): avc: denied { getopt } for pid=18372 comm="syz.9.3121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1194.009058][ T30] audit: type=1400 audit(1787839738.337:6585): avc: denied { write } for pid=18381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1194.059179][ T6544] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1194.070233][ T6544] input: Griffin SoundKnob as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input86 [ 1194.083186][ T30] audit: type=1400 audit(1787839738.407:6586): avc: denied { ioctl } for pid=4950 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4574 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1194.154308][T11749] Bluetooth: hci1: command tx timeout [ 1194.281898][ T30] audit: type=1400 audit(1787839738.607:6587): avc: denied { write } for pid=18396 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1194.419079][T18399] FAULT_INJECTION: forcing a failure. [ 1194.419079][T18399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1194.434237][T18399] CPU: 1 UID: 0 PID: 18399 Comm: syz.4.3123 Tainted: G L syzkaller #0 PREEMPT(full) [ 1194.434269][T18399] Tainted: [L]=SOFTLOCKUP [ 1194.434277][T18399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1194.434288][T18399] Call Trace: [ 1194.434295][T18399] [ 1194.434302][T18399] dump_stack_lvl+0x100/0x190 [ 1194.434334][T18399] should_fail_ex.cold+0x5/0xa [ 1194.434359][T18399] _copy_from_user+0x2e/0xd0 [ 1194.434382][T18399] msr_io+0x93/0x860 [ 1194.434400][T18399] ? is_bpf_text_address+0x8a/0x1a0 [ 1194.434423][T18399] ? __pfx_do_set_msr+0x10/0x10 [ 1194.434448][T18399] ? __pfx_msr_io+0x10/0x10 [ 1194.434468][T18399] ? __kernel_text_address+0xd/0x30 [ 1194.434495][T18399] ? unwind_get_return_address+0x59/0xa0 [ 1194.434521][T18399] kvm_set_msrs+0x91/0x100 [ 1194.434549][T18399] ? kvm_set_msrs+0x77/0x100 [ 1194.434571][T18399] kvm_arch_vcpu_ioctl+0x8c2/0x3a10 [ 1194.434599][T18399] ? tomoyo_path_number_perm+0x46d/0x580 [ 1194.434625][T18399] ? stack_trace_save+0x8e/0xc0 [ 1194.434653][T18399] ? __pfx_stack_trace_save+0x10/0x10 [ 1194.434679][T18399] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 1194.434704][T18399] ? stack_depot_save_flags+0x27/0x9f0 [ 1194.434731][T18399] ? __lock_acquire+0x4c5/0x1ec0 [ 1194.434750][T18399] ? tomoyo_path_number_perm+0x46d/0x580 [ 1194.434774][T18399] ? kasan_save_stack+0x3f/0x50 [ 1194.434797][T18399] ? __lock_acquire+0x4c5/0x1ec0 [ 1194.434826][T18399] ? lock_acquire+0x1b9/0x370 [ 1194.434851][T18399] ? rcu_is_watching+0x13/0xc0 [ 1194.434874][T18399] ? trace_contention_end+0x126/0x160 [ 1194.434895][T18399] ? __mutex_lock+0x26c/0x1bc0 [ 1194.434923][T18399] ? kvm_vcpu_ioctl+0x322/0x1700 [ 1194.434953][T18399] ? __pfx___mutex_lock+0x10/0x10 [ 1194.434978][T18399] ? kasan_quarantine_put+0x104/0x240 [ 1194.434996][T18399] ? lockdep_hardirqs_on+0x7d/0x110 [ 1194.435025][T18399] ? tomoyo_path_number_perm+0x28f/0x580 [ 1194.435053][T18399] ? tomoyo_path_number_perm+0x188/0x580 [ 1194.435080][T18399] ? kvm_vcpu_ioctl+0x8a0/0x1700 [ 1194.435102][T18399] kvm_vcpu_ioctl+0x8a0/0x1700 [ 1194.435130][T18399] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1194.435154][T18399] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1194.435176][T18399] ? do_vfs_ioctl+0x226/0x13e0 [ 1194.435206][T18399] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1194.435230][T18399] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1194.435257][T18399] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1194.435300][T18399] ? selinux_file_ioctl+0x13b/0x290 [ 1194.435324][T18399] ? selinux_file_ioctl+0xb6/0x290 [ 1194.435350][T18399] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1194.435375][T18399] __x64_sys_ioctl+0x18e/0x210 [ 1194.435404][T18399] do_syscall_64+0x123/0x790 [ 1194.435432][T18399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.435453][T18399] RIP: 0033:0x7fd7e259e0d9 [ 1194.435470][T18399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1194.435486][T18399] RSP: 002b:00007fd7e34f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1194.435503][T18399] RAX: ffffffffffffffda RBX: 00007fd7e2825fa0 RCX: 00007fd7e259e0d9 [ 1194.435516][T18399] RDX: 00002000000003c0 RSI: 000000004008ae89 RDI: 0000000000000005 [ 1194.435526][T18399] RBP: 00007fd7e34f2090 R08: 0000000000000000 R09: 0000000000000000 [ 1194.435544][T18399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1194.435554][T18399] R13: 00007fd7e2826038 R14: 00007fd7e2825fa0 R15: 00007ffefedb5038 [ 1194.435578][T18399] [ 1194.568027][ T30] audit: type=1400 audit(1787839738.897:6588): avc: denied { write } for pid=18387 comm="syz.8.3122" name="hidraw0" dev="devtmpfs" ino=4572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1194.720238][ T30] audit: type=1400 audit(1787839739.047:6589): avc: denied { unmount } for pid=17917 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1194.875079][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.527028][ T30] audit: type=1400 audit(1787839739.857:6590): avc: denied { create } for pid=18421 comm="syz.4.3128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1195.536156][T18423] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3128'. [ 1195.681072][T18424] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1195.834670][ T5598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.034297][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.884367][ C0] powermate: config urb returned -71 [ 1196.884535][ C0] powermate: config urb returned -71 [ 1196.890016][ C0] powermate: config urb returned -71 [ 1196.908525][ T5598] usb 10-1: USB disconnect, device number 35 [ 1196.908581][ C0] powermate 10-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1197.120310][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.744081][T13014] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1197.904812][T13014] usb 9-1: device descriptor read/64, error -71 [ 1197.964249][ T5598] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1198.144214][T13014] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1198.167294][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.284338][ T5331] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1198.292962][T13014] usb 9-1: device descriptor read/64, error -71 [ 1198.395215][T13014] usb usb9-port1: attempt power cycle [ 1198.446750][ T5331] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1198.461915][ T5331] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.564064][ T5331] usb 10-1: config 0 descriptor?? [ 1198.575565][ T5598] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1198.628845][ T5331] cp210x 10-1:0.0: cp210x converter detected [ 1198.654584][ T5598] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.654628][ T5598] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1198.732623][ T5598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1198.732668][ T5598] usb 4-1: SerialNumber: syz [ 1198.876821][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1198.883270][ T30] audit: type=1400 audit(1787839743.157:6597): avc: denied { allowed } for pid=18442 comm="syz.9.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1199.282607][ T30] audit: type=1400 audit(1787839743.607:6598): avc: denied { ioctl } for pid=18442 comm="syz.9.3133" path="/dev/video7" dev="devtmpfs" ino=948 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1199.293541][T16857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.293961][T16857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.352736][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.472342][ T5331] cp210x 10-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1199.472403][ T5331] cp210x 10-1:0.0: GPIO initialisation failed: -71 [ 1199.648600][ T5598] usb 4-1: 0:2 : does not exist [ 1199.648687][ T5598] usb 4-1: unit 5: unexpected type 0x0c [ 1199.656817][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3134'. [ 1199.670369][T18449] netlink: 'syz.0.3134': attribute type 3 has an invalid length. [ 1199.745469][ T5331] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1199.759999][ T5331] usb 10-1: USB disconnect, device number 36 [ 1199.786675][ T5331] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1199.796556][ T5331] cp210x 10-1:0.0: device disconnected [ 1199.840388][ T5598] usb 4-1: USB disconnect, device number 103 [ 1199.870343][T13865] udevd[13865]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1199.901994][ T30] audit: type=1400 audit(1787839744.227:6599): avc: denied { write } for pid=18453 comm="syz.0.3136" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1200.394814][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.240423][T18460] FAULT_INJECTION: forcing a failure. [ 1201.240423][T18460] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1201.240476][T18460] CPU: 0 UID: 0 PID: 18460 Comm: syz.3.3138 Tainted: G L syzkaller #0 PREEMPT(full) [ 1201.240501][T18460] Tainted: [L]=SOFTLOCKUP [ 1201.240508][T18460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1201.240518][T18460] Call Trace: [ 1201.240525][T18460] [ 1201.240532][T18460] dump_stack_lvl+0x100/0x190 [ 1201.240560][T18460] should_fail_ex.cold+0x5/0xa [ 1201.240583][T18460] ? prepare_alloc_pages+0x16d/0x5b0 [ 1201.240607][T18460] should_fail_alloc_page+0xeb/0x140 [ 1201.240629][T18460] prepare_alloc_pages+0x1f0/0x5b0 [ 1201.240653][T18460] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1201.240686][T18460] ? find_held_lock+0x2b/0x80 [ 1201.240709][T18460] ? is_bpf_text_address+0x8a/0x1a0 [ 1201.240730][T18460] ? is_bpf_text_address+0x8a/0x1a0 [ 1201.240751][T18460] ? bpf_ksym_find+0x128/0x1c0 [ 1201.240774][T18460] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1201.240801][T18460] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1201.240825][T18460] ? is_bpf_text_address+0x94/0x1a0 [ 1201.240847][T18460] ? __kernel_text_address+0xd/0x30 [ 1201.240872][T18460] ? unwind_get_return_address+0x59/0xa0 [ 1201.240896][T18460] ? arch_stack_walk+0xa6/0xf0 [ 1201.240928][T18460] ? __pfx_stack_trace_save+0x10/0x10 [ 1201.240954][T18460] ? stack_depot_save_flags+0x27/0x9f0 [ 1201.240980][T18460] ? find_held_lock+0x2b/0x80 [ 1201.241004][T18460] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1201.241025][T18460] ? policy_nodemask+0xed/0x4f0 [ 1201.241049][T18460] alloc_pages_mpol+0x201/0x550 [ 1201.241070][T18460] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1201.241097][T18460] alloc_pages_noprof+0x1a/0x160 [ 1201.241120][T18460] get_free_pages_noprof+0x10/0xb0 [ 1201.241138][T18460] __kasan_populate_vmalloc+0xa0/0x210 [ 1201.241181][T18460] alloc_vmap_area+0x95d/0x2bb0 [ 1201.241206][T18460] ? kasan_save_track+0x14/0x30 [ 1201.241223][T18460] ? __kasan_kmalloc+0xaa/0xb0 [ 1201.241239][T18460] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1201.241259][T18460] ? __get_vm_area_node+0x124/0x350 [ 1201.241281][T18460] __get_vm_area_node+0x1ed/0x350 [ 1201.241305][T18460] __vmalloc_node_range_noprof+0x262/0x1460 [ 1201.241326][T18460] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1201.241345][T18460] ? __lock_acquire+0x4c5/0x1ec0 [ 1201.241365][T18460] ? up_write+0x2dc/0x5b0 [ 1201.241387][T18460] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1201.241410][T18460] ? find_held_lock+0x2b/0x80 [ 1201.241432][T18460] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1201.241452][T18460] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1201.241499][T18460] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1201.241518][T18460] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1201.241536][T18460] __vmalloc_node_noprof+0xad/0xf0 [ 1201.241556][T18460] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1201.241578][T18460] __vmalloc_noprof+0xa3/0x120 [ 1201.241598][T18460] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1201.241620][T18460] ? rcu_is_watching+0x13/0xc0 [ 1201.241641][T18460] ? cap_capable+0x107/0x430 [ 1201.241663][T18460] bpf_prog_alloc_no_stats+0x59/0x690 [ 1201.241682][T18460] ? security_capable+0x80/0x260 [ 1201.241702][T18460] bpf_prog_alloc+0x3b/0x200 [ 1201.241720][T18460] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1201.241740][T18460] bpf_prog_load+0x49e/0x2a80 [ 1201.241765][T18460] ? __pfx_bpf_prog_load+0x10/0x10 [ 1201.241803][T18460] __sys_bpf+0x1f46/0x4a30 [ 1201.241825][T18460] ? __pfx___sys_bpf+0x10/0x10 [ 1201.241839][T18460] ? find_held_lock+0x2b/0x80 [ 1201.241860][T18460] ? get_pid_task+0xfc/0x250 [ 1201.241880][T18460] ? get_pid_task+0xfc/0x250 [ 1201.241907][T18460] ? find_held_lock+0x2b/0x80 [ 1201.241933][T18460] ? rcu_read_lock_any_held+0x6a/0x90 [ 1201.241955][T18460] ? find_held_lock+0x2b/0x80 [ 1201.241975][T18460] ? ksys_write+0x190/0x250 [ 1201.241998][T18460] ? ksys_write+0x190/0x250 [ 1201.242036][T18460] ? fput+0x7c/0x100 [ 1201.242053][T18460] ? ksys_write+0x1ac/0x250 [ 1201.242079][T18460] ? __x64_sys_bpf+0xce/0x140 [ 1201.242093][T18460] __x64_sys_bpf+0xce/0x140 [ 1201.242110][T18460] ? do_syscall_64+0xae/0x790 [ 1201.242135][T18460] do_syscall_64+0x123/0x790 [ 1201.242160][T18460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.242178][T18460] RIP: 0033:0x7ff9ef19e0d9 [ 1201.242192][T18460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.242208][T18460] RSP: 002b:00007ff9f000c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1201.242225][T18460] RAX: ffffffffffffffda RBX: 00007ff9ef425fa0 RCX: 00007ff9ef19e0d9 [ 1201.242236][T18460] RDX: 0000000000000094 RSI: 0000200000002c40 RDI: 0000000000000005 [ 1201.242246][T18460] RBP: 00007ff9f000c090 R08: 0000000000000000 R09: 0000000000000000 [ 1201.242256][T18460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1201.242265][T18460] R13: 00007ff9ef426038 R14: 00007ff9ef425fa0 R15: 00007fffac224708 [ 1201.242287][T18460] [ 1201.242343][T18460] syz.3.3138: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1201.242392][T18460] CPU: 0 UID: 0 PID: 18460 Comm: syz.3.3138 Tainted: G L syzkaller #0 PREEMPT(full) [ 1201.242414][T18460] Tainted: [L]=SOFTLOCKUP [ 1201.242420][T18460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1201.242429][T18460] Call Trace: [ 1201.242435][T18460] [ 1201.242441][T18460] dump_stack_lvl+0x100/0x190 [ 1201.242471][T18460] warn_alloc.cold+0x9e/0xb2 [ 1201.242489][T18460] ? __pfx_warn_alloc+0x10/0x10 [ 1201.242512][T18460] ? lockdep_hardirqs_on+0x7d/0x110 [ 1201.242537][T18460] ? __get_vm_area_node+0x2f0/0x350 [ 1201.242559][T18460] ? __get_vm_area_node+0x22b/0x350 [ 1201.242581][T18460] __vmalloc_node_range_noprof+0xf6b/0x1460 [ 1201.242600][T18460] ? __lock_acquire+0x4c5/0x1ec0 [ 1201.242618][T18460] ? up_write+0x2dc/0x5b0 [ 1201.242639][T18460] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1201.242662][T18460] ? find_held_lock+0x2b/0x80 [ 1201.242683][T18460] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1201.242702][T18460] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1201.242723][T18460] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1201.242741][T18460] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1201.242760][T18460] __vmalloc_node_noprof+0xad/0xf0 [ 1201.242779][T18460] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1201.242801][T18460] __vmalloc_noprof+0xa3/0x120 [ 1201.242820][T18460] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1201.242841][T18460] ? rcu_is_watching+0x13/0xc0 [ 1201.242861][T18460] ? cap_capable+0x107/0x430 [ 1201.242882][T18460] bpf_prog_alloc_no_stats+0x59/0x690 [ 1201.242900][T18460] ? security_capable+0x80/0x260 [ 1201.242920][T18460] bpf_prog_alloc+0x3b/0x200 [ 1201.242937][T18460] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1201.242956][T18460] bpf_prog_load+0x49e/0x2a80 [ 1201.242981][T18460] ? __pfx_bpf_prog_load+0x10/0x10 [ 1201.243020][T18460] __sys_bpf+0x1f46/0x4a30 [ 1201.243040][T18460] ? __pfx___sys_bpf+0x10/0x10 [ 1201.243055][T18460] ? find_held_lock+0x2b/0x80 [ 1201.243075][T18460] ? get_pid_task+0xfc/0x250 [ 1201.243095][T18460] ? get_pid_task+0xfc/0x250 [ 1201.243122][T18460] ? find_held_lock+0x2b/0x80 [ 1201.243148][T18460] ? rcu_read_lock_any_held+0x6a/0x90 [ 1201.243170][T18460] ? find_held_lock+0x2b/0x80 [ 1201.243191][T18460] ? ksys_write+0x190/0x250 [ 1201.243213][T18460] ? ksys_write+0x190/0x250 [ 1201.243251][T18460] ? fput+0x7c/0x100 [ 1201.243269][T18460] ? ksys_write+0x1ac/0x250 [ 1201.243294][T18460] ? __x64_sys_bpf+0xce/0x140 [ 1201.243308][T18460] __x64_sys_bpf+0xce/0x140 [ 1201.243324][T18460] ? do_syscall_64+0xae/0x790 [ 1201.243348][T18460] do_syscall_64+0x123/0x790 [ 1201.243373][T18460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.243390][T18460] RIP: 0033:0x7ff9ef19e0d9 [ 1201.243403][T18460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.243418][T18460] RSP: 002b:00007ff9f000c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1201.243432][T18460] RAX: ffffffffffffffda RBX: 00007ff9ef425fa0 RCX: 00007ff9ef19e0d9 [ 1201.243443][T18460] RDX: 0000000000000094 RSI: 0000200000002c40 RDI: 0000000000000005 [ 1201.243453][T18460] RBP: 00007ff9f000c090 R08: 0000000000000000 R09: 0000000000000000 [ 1201.243468][T18460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1201.243478][T18460] R13: 00007ff9ef426038 R14: 00007ff9ef425fa0 R15: 00007fffac224708 [ 1201.243499][T18460] [ 1201.243506][T18460] Mem-Info: [ 1201.243514][T18460] active_anon:11900 inactive_anon:0 isolated_anon:0 [ 1201.243514][T18460] active_file:6192 inactive_file:59209 isolated_file:0 [ 1201.243514][T18460] unevictable:0 dirty:590 writeback:0 [ 1201.243514][T18460] slab_reclaimable:10096 slab_unreclaimable:107220 [ 1201.243514][T18460] mapped:33076 shmem:1612 pagetables:1792 [ 1201.243514][T18460] sec_pagetables:0 bounce:0 [ 1201.243514][T18460] kernel_misc_reclaimable:0 [ 1201.243514][T18460] free:1276135 free_pcp:9404 free_cma:0 [ 1201.243551][T18460] Node 0 active_anon:47600kB inactive_anon:0kB active_file:24768kB inactive_file:236640kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132304kB dirty:2356kB writeback:0kB shmem:6448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14012kB pagetables:7032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1201.243591][T18460] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1201.243628][T18460] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1201.243670][T18460] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 1201.243698][T18460] Node 0 DMA32 free:1147596kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47600kB inactive_anon:0kB active_file:24768kB inactive_file:236640kB unevictable:0kB writepending:2356kB zspages:0kB present:3129332kB managed:2530384kB mlocked:0kB bounce:0kB free_pcp:37616kB local_pcp:16340kB free_cma:0kB [ 1201.243742][T18460] lowmem_reserve[]: 0 0 0 0 0 [ 1201.243768][T18460] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:80kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1201.243807][T18460] lowmem_reserve[]: 0 0 0 0 0 [ 1201.243831][T18460] Node 1 Normal free:3941584kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1201.243873][T18460] lowmem_reserve[]: 0 0 0 0 0 [ 1201.243898][T18460] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1201.245592][T18460] Node 0 DMA32: 3571*4kB (UME) 2002*8kB (UME) 2141*16kB (UME) 1659*32kB (UME) 1052*64kB (UME) 533*128kB (UME) 232*256kB (UME) 45*512kB (UME) 5*1024kB (ME) 4*2048kB (UME) 195*4096kB (UM) = 1147660kB [ 1201.245715][T18460] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1201.245790][T18460] Node 1 Normal: 2*4kB (UM) 7*8kB (UM) 7*16kB (UM) 7*32kB (UM) 9*64kB (UM) 6*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 3*2048kB (UM) 959*4096kB (M) = 3941584kB [ 1201.245907][T18460] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1201.245920][T18460] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1201.245932][T18460] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1201.245944][T18460] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1201.245956][T18460] 67009 total pagecache pages [ 1201.245962][T18460] 0 pages in swap cache [ 1201.245967][T18460] Free swap = 124996kB [ 1201.245974][T18460] Total swap = 124996kB [ 1201.246008][T18460] 2097051 pages RAM [ 1201.246014][T18460] 0 pages HighMem/MovableOnly [ 1201.246020][T18460] 432819 pages reserved [ 1201.246025][T18460] 0 pages cma reserved [ 1201.279948][ T30] audit: type=1400 audit(1787839745.597:6600): avc: denied { write } for pid=18457 comm="syz.9.3137" name="ipv6_route" dev="proc" ino=4026533992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1201.294606][ T30] audit: type=1400 audit(1787839745.617:6601): avc: denied { mount } for pid=18457 comm="syz.9.3137" name="/" dev="configfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1201.296900][ T30] audit: type=1400 audit(1787839745.617:6602): avc: denied { search } for pid=18457 comm="syz.9.3137" name="/" dev="configfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1201.296940][ T30] audit: type=1400 audit(1787839745.617:6603): avc: denied { search } for pid=18457 comm="syz.9.3137" name="usb_gadget" dev="configfs" ino=3611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1201.297824][ T30] audit: type=1400 audit(1787839745.617:6604): avc: denied { search } for pid=18457 comm="syz.9.3137" name="/" dev="configfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1201.297863][ T30] audit: type=1400 audit(1787839745.617:6605): avc: denied { search } for pid=18457 comm="syz.9.3137" name="usb_gadget" dev="configfs" ino=3611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1201.297896][ T30] audit: type=1400 audit(1787839745.617:6606): avc: denied { search } for pid=18457 comm="syz.9.3137" name="g1" dev="configfs" ino=11166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1201.435167][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.474233][ T6544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.483782][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.570670][T18462] 9p: Could not find request transport: fVآx0x0000000000000007 [ 1202.595914][T18472] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3141'. [ 1203.516931][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.878956][ T6544] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1203.880523][T18482] syz_tun: entered allmulticast mode [ 1203.935822][T18482] dvmrp6: entered allmulticast mode [ 1203.995969][T16857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.031911][T18482] syz_tun: left allmulticast mode [ 1204.045350][ T6544] usb 9-1: Using ep0 maxpacket: 8 [ 1204.048378][ T6544] usb 9-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1204.050631][ T6544] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1204.050669][ T6544] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1204.050692][ T6544] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1204.050714][ T6544] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1204.052389][ T6544] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.052412][ T6544] usb 9-1: Product: syz [ 1204.052425][ T6544] usb 9-1: Manufacturer: syz [ 1204.052439][ T6544] usb 9-1: SerialNumber: syz [ 1204.075183][ T6544] usb 9-1: config 0 descriptor?? [ 1204.075734][T18477] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1204.079680][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1204.079695][ T30] audit: type=1400 audit(1787839748.407:6631): avc: denied { create } for pid=18484 comm="syz.3.3145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1204.087067][ T30] audit: type=1400 audit(1787839748.417:6632): avc: denied { listen } for pid=18484 comm="syz.3.3145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1205.040406][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.158403][ T6544] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1205.194439][ T6544] input: Griffin SoundKnob as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input87 [ 1205.319288][T18492] netlink: Unknown conntrack attr (0) [ 1205.319323][T18492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1205.535833][ T6544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.748065][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.764523][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.240965][ C0] powermate: config urb returned -71 [ 1208.241175][ C0] powermate: config urb returned -71 [ 1208.241362][ C0] powermate: config urb returned -71 [ 1208.241943][ T6544] usb 9-1: USB disconnect, device number 56 [ 1208.242068][ C0] powermate 9-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1208.586151][T16857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.674114][T18512] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3146'. [ 1208.746070][T18514] befs: (nbd4): unable to read superblock [ 1208.834053][ T30] audit: type=1400 audit(1787839753.157:6633): avc: denied { bind } for pid=18511 comm="syz.3.3151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1208.861352][ T30] audit: type=1400 audit(1787839753.187:6634): avc: denied { name_bind } for pid=18511 comm="syz.3.3151" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1208.900929][ T30] audit: type=1400 audit(1787839753.227:6635): avc: denied { node_bind } for pid=18511 comm="syz.3.3151" saddr=fc00::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1208.973664][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.234685][ T30] audit: type=1400 audit(1787839753.537:6636): avc: denied { ioctl } for pid=18511 comm="syz.3.3151" path="socket:[80023]" dev="sockfs" ino=80023 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1209.318431][ T30] audit: type=1400 audit(1787839753.627:6637): avc: denied { read } for pid=18511 comm="syz.3.3151" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1209.318593][ T30] audit: type=1400 audit(1787839753.637:6638): avc: denied { open } for pid=18511 comm="syz.3.3151" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1209.318753][ T30] audit: type=1400 audit(1787839753.637:6639): avc: denied { ioctl } for pid=18511 comm="syz.3.3151" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1209.968572][ T30] audit: type=1400 audit(1787839754.297:6640): avc: denied { read write } for pid=15409 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1209.968732][ T30] audit: type=1400 audit(1787839754.297:6641): avc: denied { open } for pid=15409 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1209.968901][ T30] audit: type=1400 audit(1787839754.297:6642): avc: denied { ioctl } for pid=15409 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1210.004996][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.011978][ T30] audit: type=1400 audit(1787839754.337:6643): avc: denied { read } for pid=18518 comm="syz.9.3153" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1210.012631][ T30] audit: type=1400 audit(1787839754.337:6644): avc: denied { open } for pid=18518 comm="syz.9.3153" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1210.013715][ T30] audit: type=1400 audit(1787839754.337:6645): avc: denied { ioctl } for pid=18518 comm="syz.9.3153" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1210.163975][T18523] netlink: 'syz.4.3154': attribute type 1 has an invalid length. [ 1210.172175][T18523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1210.406036][T18528] overlayfs: failed to resolve './file0': -2 [ 1210.558897][T18527] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3155'. [ 1211.212337][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.305034][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.409566][ T6544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.568056][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.758830][T16848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.476817][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 1214.476900][ T30] audit: type=1400 audit(1787839758.367:6700): avc: denied { create } for pid=18551 comm="syz.8.3159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1214.477322][ T30] audit: type=1400 audit(1787839758.367:6701): avc: denied { read write } for pid=18551 comm="syz.8.3159" name="vbi2" dev="devtmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1214.477425][ T30] audit: type=1400 audit(1787839758.367:6702): avc: denied { open } for pid=18551 comm="syz.8.3159" path="/dev/vbi2" dev="devtmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1214.477562][ T30] audit: type=1400 audit(1787839758.377:6703): avc: denied { create } for pid=18551 comm="syz.8.3159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1214.477715][ T30] audit: type=1400 audit(1787839758.377:6704): avc: denied { setopt } for pid=18551 comm="syz.8.3159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1214.477786][ T30] audit: type=1400 audit(1787839758.377:6705): avc: denied { ioctl } for pid=18551 comm="syz.8.3159" path="/dev/vbi2" dev="devtmpfs" ino=964 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1214.477936][ T30] audit: type=1400 audit(1787839758.417:6706): avc: denied { create } for pid=18551 comm="syz.8.3159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1214.478062][ T30] audit: type=1400 audit(1787839758.427:6707): avc: denied { setopt } for pid=18551 comm="syz.8.3159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1214.478265][ T30] audit: type=1400 audit(1787839758.437:6708): avc: denied { create } for pid=18551 comm="syz.8.3159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1214.478369][ T30] audit: type=1400 audit(1787839758.437:6709): avc: denied { ioctl } for pid=18551 comm="syz.8.3159" path="socket:[79721]" dev="sockfs" ino=79721 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1214.665975][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.174211][T13014] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1215.217930][T18563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.317958][T18565] FAULT_INJECTION: forcing a failure. [ 1215.317958][T18565] name failslab, interval 1, probability 0, space 0, times 0 [ 1215.318003][T18565] CPU: 0 UID: 0 PID: 18565 Comm: syz.8.3165 Tainted: G L syzkaller #0 PREEMPT(full) [ 1215.318033][T18565] Tainted: [L]=SOFTLOCKUP [ 1215.318040][T18565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1215.318051][T18565] Call Trace: [ 1215.318057][T18565] [ 1215.318065][T18565] dump_stack_lvl+0x100/0x190 [ 1215.318099][T18565] should_fail_ex.cold+0x5/0xa [ 1215.318127][T18565] should_failslab+0xc2/0x120 [ 1215.318149][T18565] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1215.318169][T18565] ? ioctx_alloc+0x1b9/0x21a0 [ 1215.318199][T18565] ioctx_alloc+0x1b9/0x21a0 [ 1215.318222][T18565] ? irqentry_exit+0x24d/0xa10 [ 1215.318251][T18565] ? lockdep_hardirqs_on+0x7d/0x110 [ 1215.318280][T18565] ? irqentry_exit+0x24d/0xa10 [ 1215.318319][T18565] ? __pfx_ioctx_alloc+0x10/0x10 [ 1215.318357][T18565] ? __might_fault+0x111/0x140 [ 1215.318392][T18565] __x64_sys_io_setup+0xc9/0x220 [ 1215.318424][T18565] do_syscall_64+0x123/0x790 [ 1215.318455][T18565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.318476][T18565] RIP: 0033:0x7f87cb39e0d9 [ 1215.318492][T18565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1215.318511][T18565] RSP: 002b:00007f87cc276028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1215.318532][T18565] RAX: ffffffffffffffda RBX: 00007f87cb625fa0 RCX: 00007f87cb39e0d9 [ 1215.318545][T18565] RDX: 0000000000000000 RSI: 0000200000001440 RDI: 000000000000007f [ 1215.318557][T18565] RBP: 00007f87cb435024 R08: 0000000000000000 R09: 0000000000000000 [ 1215.318569][T18565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1215.318579][T18565] R13: 00007f87cb626038 R14: 00007f87cb625fa0 R15: 00007ffc195ec1d8 [ 1215.318605][T18565] [ 1215.324775][T13014] usb 5-1: Using ep0 maxpacket: 8 [ 1215.393043][T13014] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1215.605657][T16848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.657978][T13014] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1215.658017][T13014] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1215.658040][T13014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1215.658056][T13014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1215.674138][ T5598] usb 10-1: new full-speed USB device number 37 using dummy_hcd [ 1215.680087][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.721117][T13014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.721153][T13014] usb 5-1: Product: syz [ 1215.721185][T13014] usb 5-1: Manufacturer: syz [ 1215.721203][T13014] usb 5-1: SerialNumber: syz [ 1215.759603][T13014] usb 5-1: config 0 descriptor?? [ 1215.765912][T18559] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1215.824550][T18573] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3168'. [ 1215.835749][ T5598] usb 10-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1215.865705][ T5598] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.961304][ T5598] usb 10-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1215.972143][ T5598] usb 10-1: Manufacturer: syz [ 1215.986067][ T5598] usb 10-1: config 0 descriptor?? [ 1215.997443][ T5598] hub 10-1:0.0: bad descriptor, ignoring hub [ 1216.003929][ T5598] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1216.462556][ T5598] usb 10-1: selecting invalid altsetting 1 [ 1216.462596][ T5598] usb 10-1: Can not set alternate setting to 1, error: -22 [ 1216.462636][ T5598] synaptics_usb 10-1:0.0: probe with driver synaptics_usb failed with error -22 [ 1216.497527][T13014] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1216.508064][T13014] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input88 [ 1216.522550][T18563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1216.522884][T18563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1216.716176][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.744149][T16848] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1217.176791][T18583] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1217.194605][T18583] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1217.194766][T18583] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1217.208807][T16848] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1217.229915][T18583] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1217.265706][T16848] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.265735][T16848] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1217.266914][T16848] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1217.266938][T16848] usb 9-1: SerialNumber: syz [ 1217.414895][T18583] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 1217.757599][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.914456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.234662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.366276][T16848] usb 9-1: 0:2 : does not exist [ 1218.366357][T16848] usb 9-1: unit 5: unexpected type 0x0c [ 1218.629146][T18587] FAULT_INJECTION: forcing a failure. [ 1218.629146][T18587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1218.629286][T18587] CPU: 1 UID: 0 PID: 18587 Comm: syz.3.3170 Tainted: G L syzkaller #0 PREEMPT(full) [ 1218.629315][T18587] Tainted: [L]=SOFTLOCKUP [ 1218.629322][T18587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1218.629333][T18587] Call Trace: [ 1218.629347][T18587] [ 1218.629358][T18587] dump_stack_lvl+0x100/0x190 [ 1218.629390][T18587] should_fail_ex.cold+0x5/0xa [ 1218.629423][T18587] _copy_from_user+0x2e/0xd0 [ 1218.629450][T18587] copy_msghdr_from_user+0x9f/0x4c0 [ 1218.629474][T18587] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1218.629503][T18587] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1218.629535][T18587] ___sys_sendmsg+0x106/0x1e0 [ 1218.629559][T18587] ? __pfx____sys_sendmsg+0x10/0x10 [ 1218.629593][T18587] ? find_held_lock+0x2b/0x80 [ 1218.629635][T18587] __sys_sendmsg+0x160/0x210 [ 1218.629663][T18587] ? __pfx___sys_sendmsg+0x10/0x10 [ 1218.629704][T18587] do_syscall_64+0x123/0x790 [ 1218.629735][T18587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.629756][T18587] RIP: 0033:0x7ff9ef19e0d9 [ 1218.629771][T18587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1218.629789][T18587] RSP: 002b:00007ff9f000c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1218.629807][T18587] RAX: ffffffffffffffda RBX: 00007ff9ef425fa0 RCX: 00007ff9ef19e0d9 [ 1218.629820][T18587] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1218.629832][T18587] RBP: 00007ff9f000c090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.629844][T18587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.629856][T18587] R13: 00007ff9ef426038 R14: 00007ff9ef425fa0 R15: 00007fffac224708 [ 1218.629882][T18587] [ 1218.726840][ T44] usb 10-1: USB disconnect, device number 37 [ 1218.908813][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.012063][ T5598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.122342][ C1] powermate: config urb returned -71 [ 1219.122550][ C1] powermate: config urb returned -71 [ 1219.122768][ C1] powermate: config urb returned -71 [ 1219.128853][ T5781] usb 5-1: USB disconnect, device number 70 [ 1219.128932][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1219.290553][T16848] usb 9-1: USB disconnect, device number 57 [ 1219.396314][T18590] hugetlbfs: Unknown parameter 'u¼PsB]bk̺S2){m7mx.ڬ&C1NLr}k;V:Ձ>IeHn?X2' [ 1219.463897][T18592] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3172'. [ 1219.614316][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1219.614366][ T30] audit: type=1400 audit(1787839763.937:6754): avc: denied { write } for pid=18589 comm="syz.8.3172" name="sockstat" dev="proc" ino=4026533437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1219.914605][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.027006][ T30] audit: type=1400 audit(1787839764.357:6755): avc: denied { read write } for pid=18603 comm="syz.9.3175" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1220.051936][ T30] audit: type=1400 audit(1787839764.357:6756): avc: denied { open } for pid=18603 comm="syz.9.3175" path="/dev/uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1220.051987][ T30] audit: type=1400 audit(1787839764.357:6757): avc: denied { ioctl } for pid=18603 comm="syz.9.3175" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x5568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1220.286347][T18607] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1220.326364][T18607] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1220.448512][T18606] netlink: Unknown conntrack attr (0) [ 1220.448547][T18606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1220.483898][ T30] audit: type=1400 audit(1787839764.807:6758): avc: denied { read write } for pid=18605 comm="syz.0.3176" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1220.484771][ T30] audit: type=1400 audit(1787839764.817:6759): avc: denied { open } for pid=18605 comm="syz.0.3176" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1220.495051][ T30] audit: type=1400 audit(1787839764.827:6760): avc: denied { mount } for pid=18605 comm="syz.0.3176" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1220.518124][T18607] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1220.518147][T18607] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1220.521868][ T30] audit: type=1400 audit(1787839764.847:6761): avc: denied { mounton } for pid=18610 comm="syz.4.3177" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1220.545508][T18607] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1220.545531][T18607] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1220.608484][T18615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3177'. [ 1220.954506][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.163400][ T30] audit: type=1400 audit(1787839765.487:6762): avc: denied { unmount } for pid=17917 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1221.904578][ T6544] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1221.994463][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.161334][T16857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.430580][ T6544] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1222.457647][ T30] audit: type=1400 audit(1787839766.787:6763): avc: denied { read } for pid=18625 comm="syz.4.3180" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1222.500533][ T6544] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.558760][T18496] Bluetooth: hci2: command 0x0406 tx timeout [ 1222.845168][ T6544] usb 9-1: config 0 descriptor?? [ 1222.998251][ T6544] cp210x 9-1:0.0: cp210x converter detected [ 1223.015466][T18607] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1223.022819][T18607] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1223.053907][ T5598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.062632][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.337854][T18607] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1223.337889][T18607] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1223.914609][T16848] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1224.074590][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.167815][T16848] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1224.372994][T16848] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.373099][T16848] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1224.616025][T16848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1224.616121][T16848] usb 4-1: SerialNumber: syz [ 1224.622777][ T6544] cp210x 9-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1224.622931][ T6544] cp210x 9-1:0.0: GPIO initialisation failed: -71 [ 1224.811761][ T6544] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1224.925155][ T6544] usb 9-1: USB disconnect, device number 58 [ 1225.163640][ T6544] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1225.188394][ T6544] cp210x 9-1:0.0: device disconnected [ 1225.195279][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.236773][T13290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.547136][T18634] netlink: Unknown conntrack attr (0) [ 1225.547172][T18634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1225.556533][T16848] usb 4-1: 0:2 : does not exist [ 1225.556592][T16848] usb 4-1: unit 5: unexpected type 0x0c [ 1225.651333][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1225.651373][ T30] audit: type=1400 audit(1787839769.977:6771): avc: denied { connect } for pid=18644 comm="syz.0.3185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1225.672633][T16848] usb 4-1: USB disconnect, device number 104 [ 1225.680030][ T30] audit: type=1400 audit(1787839769.987:6772): avc: denied { setopt } for pid=18644 comm="syz.0.3185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1225.781282][T13865] udevd[13865]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1225.912880][ T30] audit: type=1400 audit(1787839770.237:6773): avc: denied { audit_write } for pid=18650 comm="syz.0.3188" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1226.007404][T13014] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1226.318599][T13014] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1226.445014][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.454148][T13014] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 1226.454166][T13014] usb 10-1: config 0 has no interface number 0 [ 1226.454186][T13014] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1226.485135][T13014] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.485168][T13014] usb 10-1: Product: syz [ 1226.485185][T13014] usb 10-1: Manufacturer: syz [ 1226.485203][T13014] usb 10-1: SerialNumber: syz [ 1226.520876][T13014] usb 10-1: config 0 descriptor?? [ 1226.583286][T13014] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0 [ 1226.775471][ T44] usb 10-1: USB disconnect, device number 38 [ 1226.798361][T18656] netlink: Unknown conntrack attr (0) [ 1226.798389][T18656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1226.863857][ T44] yurex 10-1:0.50: USB YUREX #0 now disconnected [ 1226.930642][ T30] audit: type=1400 audit(1787839771.257:6774): avc: denied { mount } for pid=18658 comm="syz.8.3190" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1226.963299][ T30] audit: type=1400 audit(1787839771.287:6775): avc: denied { write } for pid=18657 comm="syz.3.3191" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1226.994374][ T30] audit: type=1400 audit(1787839771.317:6776): avc: denied { name_bind } for pid=18657 comm="syz.3.3191" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1226.994429][ T30] audit: type=1400 audit(1787839771.327:6777): avc: denied { node_bind } for pid=18657 comm="syz.3.3191" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1227.067632][T18662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3191'. [ 1227.080826][T18662] netlink: 'syz.3.3191': attribute type 3 has an invalid length. [ 1227.088881][ T30] audit: type=1400 audit(1787839771.387:6778): avc: denied { read } for pid=18657 comm="syz.3.3191" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1227.089100][ T30] audit: type=1400 audit(1787839771.387:6779): avc: denied { open } for pid=18657 comm="syz.3.3191" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1227.089222][ T30] audit: type=1400 audit(1787839771.387:6780): avc: denied { ioctl } for pid=18657 comm="syz.3.3191" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1227.827805][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.461454][ T6544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.511317][T18652] 9p: Could not find request transport: fVآx0x0000000000000007 [ 1228.548501][T18670] random: crng reseeded on system resumption [ 1228.665210][T18676] syz_tun: entered allmulticast mode [ 1228.729638][T18676] dvmrp6: entered allmulticast mode [ 1228.747164][T18681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3196'. [ 1228.908973][T18669] syz_tun: left allmulticast mode [ 1228.913556][T18680] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3194'. [ 1229.034518][ T6544] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1229.077644][T18686] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3199'. [ 1229.170396][T18689] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1229.184112][ T6544] usb 4-1: Using ep0 maxpacket: 16 [ 1229.184762][ T6544] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1229.184800][ T6544] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 1229.185651][ T6544] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.186437][ T6544] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.193008][ T6544] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.205611][ T6544] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.265413][ T6544] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.270814][ T6544] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.286779][ T6544] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.313448][ T6544] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.331373][ T6544] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1229.331411][ T6544] usb 4-1: SerialNumber: syz [ 1229.333451][ T6544] usb 4-1: config 0 descriptor?? [ 1229.364384][ T6544] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input90 [ 1229.734337][ T4950] bcm5974 4-1:0.0: could not read from device [ 1229.789646][ T4950] bcm5974 4-1:0.0: could not read from device [ 1230.054031][ T6544] usb 4-1: USB disconnect, device number 105 [ 1230.458223][T13014] net_ratelimit: 3 callbacks suppressed [ 1230.458267][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.476106][T18677] bcm5974 4-1:0.0: could not read from device [ 1230.759609][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1230.759657][ T30] audit: type=1400 audit(1787839775.087:6811): avc: denied { sqpoll } for pid=18699 comm="syz.0.3197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1230.810030][T18700] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 1230.810058][T18700] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1230.826687][T18700] vhci_hcd vhci_hcd.0: Device attached [ 1231.032492][ T30] audit: type=1400 audit(1787839775.357:6812): avc: denied { setopt } for pid=18697 comm="syz.8.3201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1231.032877][ T30] audit: type=1400 audit(1787839775.357:6813): avc: denied { shutdown } for pid=18697 comm="syz.8.3201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1231.084077][ T6544] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 1231.304076][ T5781] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1231.439277][T18716] netlink: Unknown conntrack attr (0) [ 1231.444810][T18716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1231.455690][ T5781] usb 5-1: Using ep0 maxpacket: 8 [ 1231.456545][ T5781] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1231.457457][ T5781] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1231.457493][ T5781] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1231.457520][ T5781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1231.457542][ T5781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1231.459127][ T5781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.459145][ T5781] usb 5-1: Product: syz [ 1231.459158][ T5781] usb 5-1: Manufacturer: syz [ 1231.459172][ T5781] usb 5-1: SerialNumber: syz [ 1231.481577][ T5781] usb 5-1: config 0 descriptor?? [ 1231.499040][T18714] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1231.515003][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.522698][T16848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.376566][T18722] 9p: Could not find request transport: fVآx0x0000000000000007 [ 1232.386041][ T5781] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1232.396412][ T5781] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input91 [ 1232.555400][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.624321][T18729] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3207'. [ 1232.634577][ T5598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.752232][T18730] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1233.275564][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.275677][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.596710][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.692628][T18707] vhci_hcd: connection reset by peer [ 1233.727596][ T6055] vhci_hcd vhci_hcd.0: stop threads [ 1233.747565][T18734] syz_tun: entered allmulticast mode [ 1233.764545][ T6055] vhci_hcd vhci_hcd.0: release socket [ 1233.764613][ T6055] vhci_hcd vhci_hcd.0: disconnect device [ 1233.772000][T18734] dvmrp6: entered allmulticast mode [ 1234.021922][ C1] powermate: config urb returned -71 [ 1234.022114][ C1] powermate: config urb returned -71 [ 1234.022304][ C1] powermate: config urb returned -71 [ 1234.022597][T13014] usb 5-1: USB disconnect, device number 71 [ 1234.022661][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1234.167897][T18732] syz_tun: left allmulticast mode [ 1234.382774][T18742] netlink: Unknown conntrack attr (0) [ 1234.396546][T18742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1234.966263][ T30] audit: type=1400 audit(1787839779.297:6814): avc: denied { create } for pid=18753 comm="syz.9.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1235.887118][ T30] audit: type=1400 audit(1787839779.807:6815): avc: denied { create } for pid=18749 comm="syz.8.3208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1235.914688][T13014] net_ratelimit: 2 callbacks suppressed [ 1235.914733][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.193057][T18760] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3214'. [ 1236.227348][ T6544] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1236.249918][T18761] befs: (nbd9): unable to read superblock [ 1236.250263][ T30] audit: type=1400 audit(1787839780.577:6816): avc: denied { mounton } for pid=18753 comm="syz.9.3214" path="/syzcgroup/unified/syz9" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 1236.811756][ T30] audit: type=1400 audit(1787839781.137:6817): avc: denied { ioctl } for pid=18758 comm="syz.4.3216" path="socket:[81255]" dev="sockfs" ino=81255 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1237.550170][ T30] audit: type=1400 audit(1787839781.867:6818): avc: denied { unmount } for pid=17917 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1237.683289][ T30] audit: type=1400 audit(1787839782.007:6819): avc: denied { read } for pid=18764 comm="syz.3.3217" dev="nsfs" ino=4026532804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1237.686721][ T30] audit: type=1400 audit(1787839782.017:6820): avc: denied { open } for pid=18764 comm="syz.3.3217" path="net:[4026532804]" dev="nsfs" ino=4026532804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1237.758759][ T30] audit: type=1400 audit(1787839782.087:6821): avc: denied { create } for pid=18764 comm="syz.3.3217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1237.840079][ T30] audit: type=1400 audit(1787839782.167:6822): avc: denied { write } for pid=18764 comm="syz.3.3217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1237.861916][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.902945][ T30] audit: type=1400 audit(1787839782.227:6823): avc: denied { read } for pid=18764 comm="syz.3.3217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1237.923847][T13290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.936530][ T30] audit: type=1400 audit(1787839782.267:6824): avc: denied { read write } for pid=18766 comm="syz.9.3218" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1238.004858][T18768] syz_tun: entered allmulticast mode [ 1238.091845][T18772] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3219'. [ 1238.348147][T18775] befs: (nbd9): unable to read superblock [ 1239.273224][ T5598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.301831][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.343650][T18764] syz_tun: left allmulticast mode [ 1240.203702][T18785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3221'. [ 1240.257074][T18785] netlink: 'syz.0.3221': attribute type 3 has an invalid length. [ 1240.315490][T17550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.690416][T18794] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3225'. [ 1240.762923][T18797] random: crng reseeded on system resumption [ 1240.832452][T18796] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1241.009183][T13290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.364349][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.154788][T18741] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1242.165857][T18788] Bluetooth: hci4: command 0x1003 tx timeout [ 1242.394489][T13014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.461253][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 1242.461295][ T30] audit: type=1400 audit(1787839786.787:6870): avc: denied { read } for pid=18802 comm="syz.9.3226" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1242.500597][ T30] audit: type=1400 audit(1787839786.827:6871): avc: denied { open } for pid=18802 comm="syz.9.3226" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1242.680728][ T30] audit: type=1400 audit(1787839786.997:6872): avc: denied { allowed } for pid=18804 comm="syz.3.3227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1242.710792][ T30] audit: type=1400 audit(1787839787.037:6873): avc: denied { ioctl } for pid=18802 comm="syz.9.3226" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1242.751873][ T30] audit: type=1400 audit(1787839787.077:6874): avc: denied { create } for pid=18804 comm="syz.3.3227" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1242.776955][ T30] audit: type=1400 audit(1787839787.107:6875): avc: denied { ioctl } for pid=18802 comm="syz.9.3226" path="socket:[80789]" dev="sockfs" ino=80789 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1242.995665][ T30] audit: type=1400 audit(1787839787.277:6876): avc: denied { create } for pid=18802 comm="syz.9.3226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1243.093632][ T30] audit: type=1400 audit(1787839787.417:6877): avc: denied { prog_run } for pid=18809 comm="syz.4.3228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1243.181575][T18813] FAULT_INJECTION: forcing a failure. [ 1243.181575][T18813] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.207038][T18813] CPU: 1 UID: 0 PID: 18813 Comm: syz.4.3230 Tainted: G L syzkaller #0 PREEMPT(full) [ 1243.207068][T18813] Tainted: [L]=SOFTLOCKUP [ 1243.207074][T18813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1243.207084][T18813] Call Trace: [ 1243.207091][T18813] [ 1243.207099][T18813] dump_stack_lvl+0x100/0x190 [ 1243.207130][T18813] should_fail_ex.cold+0x5/0xa [ 1243.207157][T18813] should_failslab+0xc2/0x120 [ 1243.207178][T18813] __kmalloc_cache_noprof+0x91/0x6d0 [ 1243.207203][T18813] ? rcu_is_watching+0x13/0xc0 [ 1243.207227][T18813] ? vhost_task_create+0xee/0x370 [ 1243.207256][T18813] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1243.207282][T18813] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1243.207310][T18813] vhost_task_create+0xee/0x370 [ 1243.207338][T18813] ? __pfx_vhost_task_create+0x10/0x10 [ 1243.207375][T18813] ? __pfx_vhost_task_fn+0x10/0x10 [ 1243.207405][T18813] ? register_lock_class+0x3f/0x7b0 [ 1243.207425][T18813] ? rcu_is_watching+0x13/0xc0 [ 1243.207454][T18813] ? trace_contention_end+0x126/0x160 [ 1243.207480][T18813] kvm_mmu_post_init_vm+0x1b3/0x360 [ 1243.207503][T18813] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 1243.207527][T18813] ? __pfx___mutex_lock+0x10/0x10 [ 1243.207555][T18813] ? kasan_quarantine_put+0x104/0x240 [ 1243.207576][T18813] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1243.207601][T18813] ? do_raw_write_lock+0x11e/0x260 [ 1243.207623][T18813] ? find_held_lock+0x2b/0x80 [ 1243.207647][T18813] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 1243.207671][T18813] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 1243.207701][T18813] kvm_vcpu_ioctl+0x730/0x1700 [ 1243.207728][T18813] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1243.207753][T18813] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1243.207776][T18813] ? do_vfs_ioctl+0x226/0x13e0 [ 1243.207803][T18813] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1243.207827][T18813] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1243.207857][T18813] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1243.207901][T18813] ? selinux_file_ioctl+0x13b/0x290 [ 1243.207925][T18813] ? selinux_file_ioctl+0xb6/0x290 [ 1243.207951][T18813] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1243.207976][T18813] __x64_sys_ioctl+0x18e/0x210 [ 1243.208005][T18813] do_syscall_64+0x123/0x790 [ 1243.208034][T18813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.208053][T18813] RIP: 0033:0x7fd7e259e0d9 [ 1243.208082][T18813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1243.208100][T18813] RSP: 002b:00007fd7e34f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1243.208122][T18813] RAX: ffffffffffffffda RBX: 00007fd7e2825fa0 RCX: 00007fd7e259e0d9 [ 1243.208135][T18813] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1243.208146][T18813] RBP: 00007fd7e34f2090 R08: 0000000000000000 R09: 0000000000000000 [ 1243.208158][T18813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1243.208169][T18813] R13: 00007fd7e2826038 R14: 00007fd7e2825fa0 R15: 00007ffefedb5038 [ 1243.208194][T18813] [ 1243.221583][ T30] audit: type=1400 audit(1787839787.547:6878): avc: denied { ioctl } for pid=18817 comm="syz.0.3229" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=80805 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1243.231371][T18818] FAULT_INJECTION: forcing a failure. [ 1243.231371][T18818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1243.231400][T18818] CPU: 0 UID: 0 PID: 18818 Comm: syz.0.3229 Tainted: G L syzkaller #0 PREEMPT(full) [ 1243.231422][T18818] Tainted: [L]=SOFTLOCKUP [ 1243.231429][T18818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1243.231439][T18818] Call Trace: [ 1243.231445][T18818] [ 1243.231452][T18818] dump_stack_lvl+0x100/0x190 [ 1243.231480][T18818] should_fail_ex.cold+0x5/0xa [ 1243.231503][T18818] _copy_from_user+0x2e/0xd0 [ 1243.231526][T18818] userfaultfd_ioctl+0x2c8/0x61b0 [ 1243.231555][T18818] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1243.231577][T18818] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1243.231599][T18818] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1243.231621][T18818] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1243.231661][T18818] ? selinux_file_ioctl+0x13b/0x290 [ 1243.231683][T18818] ? selinux_file_ioctl+0xb6/0x290 [ 1243.231705][T18818] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1243.231731][T18818] ? __x64_sys_ioctl+0x18e/0x210 [ 1243.231755][T18818] __x64_sys_ioctl+0x18e/0x210 [ 1243.231780][T18818] do_syscall_64+0x123/0x790 [ 1243.231806][T18818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.231823][T18818] RIP: 0033:0x7fa2cc19e0d9 [ 1243.231837][T18818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1243.231853][T18818] RSP: 002b:00007fa2ccfa1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1243.231869][T18818] RAX: ffffffffffffffda RBX: 00007fa2cc425fa0 RCX: 00007fa2cc19e0d9 [ 1243.231885][T18818] RDX: 00002000000000c0 RSI: 00000000c028aa05 RDI: 0000000000000003 [ 1243.231895][T18818] RBP: 00007fa2ccfa1090 R08: 0000000000000000 R09: 0000000000000000 [ 1243.231905][T18818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1243.231915][T18818] R13: 00007fa2cc426038 R14: 00007fa2cc425fa0 R15: 00007ffda6fc5b58 [ 1243.231942][T18818] [ 1243.390906][T18820] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3231'. [ 1243.435151][T17550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.436640][T18823] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3233'. [ 1243.954662][T18825] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1244.521685][T17550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.794317][ T31] INFO: task kworker/0:5:5698 blocked for more than 143 sec ** replaying previous printk message ** [ 1244.794317][ T31] INFO: task kworker/0:5:5698 blocked for more than 143 seconds. [ 1244.794354][ T31] Tainted: G L syzkaller #0 [ 1244.794377][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1244.794388][ T31] task:kworker/0:5 state:D stack:20760 pid:5698 tgid:5698 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1244.794448][ T31] Workqueue: events_freezable mmc_rescan [ 1244.794481][ T31] Call Trace: [ 1244.794490][ T31] [ 1244.794505][ T31] __schedule+0x1259/0x6920 [ 1244.794541][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1244.794577][ T31] ? __pfx___schedule+0x10/0x10 [ 1244.794604][ T31] ? find_held_lock+0x2b/0x80 [ 1244.794633][ T31] ? schedule+0x225/0x2c0 [ 1244.794665][ T31] schedule+0xdd/0x2c0 [ 1244.794693][ T31] schedule_timeout+0x1b2/0x280 [ 1244.794719][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1244.794753][ T31] ? mark_held_locks+0x40/0x70 [ 1244.794779][ T31] __wait_for_common+0x2e7/0x4c0 [ 1244.794810][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1244.794840][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1244.794881][ T31] mmc_wait_for_req_done+0xcd/0x3d0 [ 1244.794913][ T31] mmc_wait_for_req+0x207/0x2c0 [ 1244.794939][ T31] mmc_wait_for_cmd+0x154/0x200 [ 1244.794963][ T31] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 1244.795003][ T31] ? __pfx_mmc_wait_done+0x10/0x10 [ 1244.795030][ T31] ? rpm_resume+0x7eb/0x1320 [ 1244.795068][ T31] mmc_io_rw_direct_host+0x126/0x330 [ 1244.795092][ T31] ? __pfx_mmc_io_rw_direct_host+0x10/0x10 [ 1244.795123][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1244.795151][ T31] ? __pm_runtime_resume+0xc3/0x170 [ 1244.795192][ T31] ? __mmc_claim_host+0x2e2/0x5f0 [ 1244.795216][ T31] sdio_reset+0x92/0x240 [ 1244.795239][ T31] ? __pfx_sdio_reset+0x10/0x10 [ 1244.795266][ T31] ? mmc_sw_reset+0xa0/0xd0 [ 1244.795282][ T31] ? __lock_acquire+0xe15/0x1ec0 [ 1244.795301][ T31] ? __pfx_default_wake_function+0x10/0x10 [ 1244.795325][ T31] ? mmc_attach_sd_uhs2+0x2d0/0x590 [ 1244.795358][ T31] mmc_rescan+0xba9/0x11c0 [ 1244.795390][ T31] process_one_work+0xac7/0x1b10 [ 1244.795428][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1244.795465][ T31] ? __pfx_mmc_rescan+0x10/0x10 [ 1244.795492][ T31] worker_thread+0x5ef/0xe50 [ 1244.795528][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1244.795557][ T31] ? kthread+0x13a/0x450 [ 1244.795581][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1244.795608][ T31] kthread+0x373/0x450 [ 1244.795653][ T31] ? __pfx_kthread+0x10/0x10 [ 1244.795684][ T31] ret_from_fork+0x730/0xd60 [ 1244.795710][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1244.795735][ T31] ? __switch_to+0x800/0x10f0 [ 1244.795764][ T31] ? __pfx_kthread+0x10/0x10 [ 1244.795794][ T31] ret_from_fork_asm+0x1a/0x30 [ 1244.795830][ T31] [ 1244.795844][ T31] INFO: task kworker/1:5:5719 blocked for more than 143 seconds. [ 1244.795862][ T31] Tainted: G L syzkaller #0 [ 1244.795875][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1244.795884][ T31] task:kworker/1:5 state:D stack:20344 pid:5719 tgid:5719 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 1244.795927][ T31] Workqueue: usb_hub_wq hub_event [ 1244.795943][ T31] Call Trace: [ 1244.795949][ T31] [ 1244.795958][ T31] __schedule+0x1259/0x6920 [ 1244.795987][ T31] ? mark_held_locks+0x40/0x70 [ 1244.796004][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1244.796029][ T31] ? __pfx___schedule+0x10/0x10 [ 1244.796049][ T31] ? find_held_lock+0x2b/0x80 [ 1244.796072][ T31] ? schedule+0x225/0x2c0 [ 1244.796097][ T31] schedule+0xdd/0x2c0 [ 1244.796119][ T31] schedule_timeout+0x1b2/0x280 [ 1244.796139][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1244.796166][ T31] ? mark_held_locks+0x40/0x70 [ 1244.796186][ T31] __wait_for_common+0x2e7/0x4c0 [ 1244.796210][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1244.796233][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1244.796263][ T31] ? find_held_lock+0x2b/0x80 [ 1244.796285][ T31] ? __flush_work+0x928/0xcb0 [ 1244.796309][ T31] ? __flush_work+0x928/0xcb0 [ 1244.796335][ T31] ? __flush_work+0x4ca/0xcb0 [ 1244.796360][ T31] __flush_work+0x7c7/0xcb0 [ 1244.796385][ T31] ? __timer_delete+0xe1/0x1b0 [ 1244.796403][ T31] ? __pfx___flush_work+0x10/0x10 [ 1244.796430][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 1244.796460][ T31] ? __pfx___might_resched+0x10/0x10 [ 1244.796476][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1244.796497][ T31] ? usb_hcd_flush_endpoint+0x359/0x400 [ 1244.796521][ T31] cancel_delayed_work_sync+0xd1/0xf0 [ 1244.796541][ T31] mmc_stop_host+0xe9/0x400 [ 1244.796562][ T31] mmc_remove_host+0x15/0x60 [ 1244.796583][ T31] vub300_disconnect+0x12d/0x170 [ 1244.796605][ T31] usb_unbind_interface+0x1dd/0x9e0 [ 1244.796629][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1244.796649][ T31] device_remove+0x12a/0x180 [ 1244.796672][ T31] device_release_driver_internal+0x44e/0x620 [ 1244.796701][ T31] bus_remove_device+0x2bc/0x560 [ 1244.796723][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 1244.796742][ T31] ? __pfx_device_remove_attrs+0x10/0x10 [ 1244.796770][ T31] device_del+0x376/0x9b0 [ 1244.796794][ T31] ? __pfx_device_del+0x10/0x10 [ 1244.796814][ T31] ? kobject_put+0xb9/0x640 [ 1244.796839][ T31] usb_disable_device+0x367/0x810 [ 1244.796871][ T31] usb_disconnect+0x2e2/0x9a0 [ 1244.796893][ T31] hub_event+0x1bb1/0x4420 [ 1244.796930][ T31] ? __pfx_hub_event+0x10/0x10 [ 1244.796951][ T31] ? lock_acquire+0x5e/0x370 [ 1244.796969][ T31] ? process_one_work+0x906/0x1b10 [ 1244.796993][ T31] ? process_one_work+0x906/0x1b10 [ 1244.797021][ T31] process_one_work+0xac7/0x1b10 [ 1244.797054][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1244.797087][ T31] ? __pfx_hub_event+0x10/0x10 [ 1244.797105][ T31] worker_thread+0x5ef/0xe50 [ 1244.797138][ T31] ? kthread+0x13a/0x450 [ 1244.797159][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1244.797182][ T31] kthread+0x373/0x450 [ 1244.797203][ T31] ? __pfx_kthread+0x10/0x10 [ 1244.797226][ T31] ret_from_fork+0x730/0xd60 [ 1244.797250][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1244.797270][ T31] ? __switch_to+0x800/0x10f0 [ 1244.797292][ T31] ? __pfx_kthread+0x10/0x10 [ 1244.797316][ T31] ret_from_fork_asm+0x1a/0x30 [ 1244.797344][ T31] [ 1244.797407][ T31] [ 1244.797407][ T31] Showing all locks held in the system: [ 1244.797415][ T31] locks held by pr/ttyS0/16: 2, last CPU#1: [ 1244.797427][ T31] #0: ffffffff8edd8338 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 1244.797470][ T31] #1: ffffffff9bc59b78 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 1244.797513][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 1244.797525][ T31] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1244.797571][ T31] locks held by kworker/u8:2/42: 3, last CPU#1: [ 1244.797583][ T31] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.797627][ T31] #1: ffffc90000b27d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.797673][ T31] #2: ffff888026ec0258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1244.797728][ T31] locks held by kworker/R-nbd3-/916: 2, on CPU#0: [ 1244.797740][ T31] #0: ffff8880284d5140 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.797784][ T31] #1: ffffc90004c7fc68 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.797833][ T31] locks held by kworker/1:1H/2097: 2, last CPU#1: [ 1244.797845][ T31] #0: ffff88801c056d40 ((wq_completion)events_highpri){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.797889][ T31] #1: ffffc90006aa7d08 ((work_completion)(&vmidi->output_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.797936][ T31] locks held by kworker/0:1H/2451: 2, last CPU#0: [ 1244.797948][ T31] #0: ffff88801c056d40 ((wq_completion)events_highpri){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.797992][ T31] #1: ffffc9000801fd08 ((work_completion)(&vmidi->output_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.798047][ T31] locks held by kworker/u9:1/4916: 2, on CPU#1: [ 1244.798059][ T31] #0: ffff8880283b1140 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.798104][ T31] #1: ffffc900067d7d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.798151][ T31] locks held by getty/5359: 2, on CPU#1: [ 1244.798161][ T31] #0: ffff8880331de0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1244.798201][ T31] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1244.798240][ T31] locks held by kworker/u9:5/5609: 2, on CPU#0: [ 1244.798256][ T31] #0: ffff8880283b1140 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.798299][ T31] #1: ffffc90003a47d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.798343][ T31] locks held by kworker/0:5/5698: 2, on CPU#0: [ 1244.798354][ T31] #0: ffff88801c056140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.798399][ T31] #1: ffffc90003d4fd08 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.798445][ T31] locks held by kworker/1:5/5719: 5, on CPU#1: [ 1244.798456][ T31] #0: ffff8880212b9140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.798501][ T31] #1: ffffc90003e9fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.798546][ T31] #2: ffff88802b6301d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 1244.798583][ T31] #3: ffff88807a1961d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 1244.798618][ T31] #4: ffff8880789d21a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 1244.798664][ T31] locks held by kworker/u8:12/5920: 3, last CPU#1: [ 1244.798676][ T31] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.798720][ T31] #1: ffffc900045efd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.798768][ T31] #2: ffff88807b747258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1244.798819][ T31] locks held by kworker/u8:17/6055: 3, last CPU#1: [ 1244.798830][ T31] #0: ffff888057f19940 ((wq_completion)krds_cp_wq#1/0){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.798874][ T31] #1: ffffc90004b37d08 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.798919][ T31] #2: ffff888033881280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1da/0xaa0 [ 1244.798968][ T31] locks held by kworker/u9:0/11749: 2, on CPU#0: [ 1244.798979][ T31] #0: ffff8880283b1140 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.799023][ T31] #1: ffffc90003dbfd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.799067][ T31] locks held by kworker/u8:1/11910: 3, last CPU#1: [ 1244.799078][ T31] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.799122][ T31] #1: ffffc9000484fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.799167][ T31] #2: ffff88805c6707a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1244.799211][ T31] locks held by kworker/0:4/13290: 2, last CPU#0: [ 1244.799222][ T31] #0: ffff88801c055d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.799272][ T31] #1: ffffc9000417fd08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.799318][ T31] locks held by kworker/u8:14/16401: 3, last CPU#1: [ 1244.799329][ T31] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.799373][ T31] #1: ffffc9000e757d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.799418][ T31] #2: ffff888034f74258 (&devlink->lock_key#13){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1244.799468][ T31] locks held by kworker/u9:2/16659: 2, on CPU#0: [ 1244.799479][ T31] #0: ffff8880283b6140 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.799523][ T31] #1: ffffc9000e717d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.799569][ T31] locks held by kworker/1:4/17550: 2, last CPU#1: [ 1244.799580][ T31] #0: ffff888075bbc540 ((wq_completion)wg-crypt-wg0#6){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.799628][ T31] #1: ffffc9000e907d08 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.799676][ T31] locks held by kworker/u9:3/18496: 2, on CPU#1: [ 1244.799688][ T31] #0: ffff8880283b6140 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.799732][ T31] #1: ffffc9000425fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.799776][ T31] locks held by kworker/u9:4/18683: 2, on CPU#0: [ 1244.799788][ T31] #0: ffff8880283b6140 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.799833][ T31] #1: ffffc9000305fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.799878][ T31] locks held by kworker/u9:6/18684: 2, on CPU#1: [ 1244.799890][ T31] #0: ffff8880283cd940 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.799936][ T31] #1: ffffc90000a0fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.799981][ T31] locks held by kworker/u9:7/18738: 2, on CPU#1: [ 1244.799993][ T31] #0: ffff8880283cd940 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.800039][ T31] #1: ffffc90003eafd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.800084][ T31] locks held by kworker/u9:8/18740: 2, on CPU#1: [ 1244.800095][ T31] #0: ffff8880283cd940 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.800139][ T31] #1: ffffc90003a27d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.800184][ T31] locks held by kworker/u9:10/18748: 2, on CPU#0: [ 1244.800196][ T31] #0: ffff8880284d5140 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.800240][ T31] #1: ffffc90003917d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.800289][ T31] locks held by kworker/u9:11/18786: 2, on CPU#0: [ 1244.800301][ T31] #0: ffff8880284d5140 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1244.800345][ T31] #1: ffffc90003b37d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1244.800390][ T31] locks held by syz.9.3226/18806: 1, last CPU#1: [ 1244.800402][ T31] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1244.800445][ T31] locks held by syz.3.3231/18819: 2, on CPU#1: [ 1244.800457][ T31] #0: ffff8880752c1f00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 1244.800516][ T31] #1: ffffffff8edf7f68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1244.800564][ T31] [ 1244.800568][ T31] ============================================= [ 1244.800568][ T31] [ 1244.800575][ T31] NMI backtrace for cpu 0 [ 1244.800587][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1244.800609][ T31] Tainted: [L]=SOFTLOCKUP [ 1244.800615][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1244.800624][ T31] Call Trace: [ 1244.800630][ T31] [ 1244.800637][ T31] dump_stack_lvl+0x100/0x190 [ 1244.800660][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1244.800686][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1244.800704][ T31] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1244.800727][ T31] sys_info+0x141/0x190 [ 1244.800744][ T31] watchdog+0xcb1/0x1030 [ 1244.800766][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1244.800788][ T31] ? __pfx_watchdog+0x10/0x10 [ 1244.800806][ T31] ? __kthread_parkme+0x18f/0x230 [ 1244.800827][ T31] ? kthread+0x13a/0x450 [ 1244.800847][ T31] ? __pfx_watchdog+0x10/0x10 [ 1244.800864][ T31] kthread+0x373/0x450 [ 1244.800896][ T31] ? __pfx_kthread+0x10/0x10 [ 1244.800918][ T31] ret_from_fork+0x730/0xd60 [ 1244.800937][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1244.800955][ T31] ? __switch_to+0x800/0x10f0 [ 1244.800977][ T31] ? __pfx_kthread+0x10/0x10 [ 1244.801000][ T31] ret_from_fork_asm+0x1a/0x30 [ 1244.801027][ T31] [ 1244.801033][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1244.801058][ C1] NMI backtrace for cpu 1 [ 1244.801070][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1244.801090][ C1] Tainted: [L]=SOFTLOCKUP [ 1244.801095][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1244.801103][ C1] RIP: 0010:io_serial_in+0x87/0xb0 [ 1244.801123][ C1] Code: 22 5d fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 18 06 d0 fc eb a2 e8 a1 06 [ 1244.801136][ C1] RSP: 0018:ffffc90000157958 EFLAGS: 00000002 [ 1244.801147][ C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 1244.801156][ C1] RDX: 00000000000003fd RSI: ffffffff85aeb380 RDI: ffffffff9bc59ba0 [ 1244.801165][ C1] RBP: ffffffff9bc59b60 R08: 0000000000000001 R09: 000000000000001f [ 1244.801175][ C1] R10: 0000000000000000 R11: 205d313354202020 R12: 0000000000000000 [ 1244.801183][ C1] R13: 0000000000000020 R14: fffffbfff378b3c9 R15: dffffc0000000000 [ 1244.801193][ C1] FS: 0000000000000000(0000) GS:ffff888123c6b000(0000) knlGS:0000000000000000 [ 1244.801206][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1244.801216][ C1] CR2: 00007fa2ccf7efa8 CR3: 000000007d6f8000 CR4: 00000000003526f0 [ 1244.801225][ C1] Call Trace: [ 1244.801230][ C1] [ 1244.801236][ C1] wait_for_lsr+0x13a/0x210 [ 1244.801258][ C1] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 1244.801280][ C1] __serial8250_console_fifo_write+0xa5/0x290 [ 1244.801299][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 1244.801318][ C1] serial8250_console_write+0xf46/0x1330 [ 1244.801336][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1244.801350][ C1] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 1244.801372][ C1] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 1244.801396][ C1] nbcon_emit_next_record+0x8f7/0xa70 [ 1244.801419][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1244.801440][ C1] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 1244.801460][ C1] ? do_raw_spin_lock+0x100/0x260 [ 1244.801479][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 1244.801498][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 1244.801516][ C1] nbcon_emit_one+0x1a8/0x2b0 [ 1244.801536][ C1] ? __pfx_nbcon_emit_one+0x10/0x10 [ 1244.801559][ C1] nbcon_kthread_func+0x613/0x7d0 [ 1244.801581][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1244.801604][ C1] ? __kthread_parkme+0x18f/0x230 [ 1244.801621][ C1] ? kthread+0x13a/0x450 [ 1244.801637][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1244.801657][ C1] kthread+0x373/0x450 [ 1244.801674][ C1] ? __pfx_kthread+0x10/0x10 [ 1244.801693][ C1] ret_from_fork+0x730/0xd60 [ 1244.801708][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1244.801723][ C1] ? __switch_to+0x800/0x10f0 [ 1244.801741][ C1] ? __pfx_kthread+0x10/0x10 [ 1244.801764][ C1] ret_from_fork_asm+0x1a/0x30 [ 1244.801784][ C1] [ 1244.802051][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1246.692478][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1246.703137][ T31] Tainted: [L]=SOFTLOCKUP [ 1246.707457][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1246.717500][ T31] Call Trace: [ 1246.720786][ T31] [ 1246.723710][ T31] dump_stack_lvl+0x100/0x190 [ 1246.728369][ T31] vpanic+0x553/0x970 [ 1246.732325][ T31] ? __pfx_vpanic+0x10/0x10 [ 1246.736811][ T31] panic+0xd1/0xe0 [ 1246.740536][ T31] ? __pfx_panic+0x10/0x10 [ 1246.744941][ T31] ? wq_watchdog_touch+0xec/0x1a0 [ 1246.749964][ T31] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 1246.756105][ T31] ? watchdog.cold+0x1ec/0x234 [ 1246.760863][ T31] watchdog.cold+0x1fd/0x234 [ 1246.765431][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1246.771216][ T31] ? __pfx_watchdog+0x10/0x10 [ 1246.775879][ T31] ? __kthread_parkme+0x18f/0x230 [ 1246.780890][ T31] ? kthread+0x13a/0x450 [ 1246.785116][ T31] ? __pfx_watchdog+0x10/0x10 [ 1246.789777][ T31] kthread+0x373/0x450 [ 1246.793824][ T31] ? __pfx_kthread+0x10/0x10 [ 1246.798396][ T31] ret_from_fork+0x730/0xd60 [ 1246.802969][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1246.808065][ T31] ? __switch_to+0x800/0x10f0 [ 1246.812742][ T31] ? __pfx_kthread+0x10/0x10 [ 1246.817333][ T31] ret_from_fork_asm+0x1a/0x30 [ 1246.822088][ T31] [ 1246.825415][ T31] Kernel Offset: disabled [ 1246.829735][ T31] Rebooting in 86400 seconds..