last executing test programs: 4m50.52724628s ago: executing program 0 (id=1013): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./sys\x00', 0x1) mount(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/dax/drivers/device_dax/new_id\x00', 0x1, 0x127) write(r2, &(0x7f0000000040)='dax0.0', 0x6) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r6, 0x800448d3, &(0x7f00000003c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x101, 0x0, 0x6, 0x6, 0x9, "d7f2ff807efdd6c5beb1f785ef6672a6e7bb4b55e9d0ed381fec0d09c98c734bb884110c90136f7643679af7833e20fbb54d1bfa025f3139afe4a620396f41afc313607016a2d04cb638d60d26a585458129c331b271bd3e6d57ac9a8678897aa9254dff414c80d2563790afe6a5947ac827319d4ba010612c1c9db288644d93"}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r10 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r10, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0xa}) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@deltaction={0x114, 0x31, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000000)={0x1f, 0xffff, 0x4}, 0x6) write(r12, &(0x7f0000000340)='#\x00\x00\x00', 0x4) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000128bd7040010000000f00000008000300", @ANYRES32=r11, @ANYBLOB="0500330001000000"], 0x24}}, 0xd03812c002510556) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) 4m46.711122627s ago: executing program 0 (id=1026): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpid() r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r4) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x40, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x4}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x7}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x2c}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x10, 0x20, 0x7, 0x6, {{0x6, 0x4, 0x0, 0x1e, 0x18, 0x67, 0x0, 0xcc, 0x29, 0x0, @remote, @empty, {[@generic={0x82, 0x2}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x880) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000680)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r7, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe}) 4m45.514596072s ago: executing program 0 (id=1027): socket$inet(0x2, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$vcsu(&(0x7f0000000100), 0xff, 0x375c00) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac14"], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001140)=[@in6={0xa, 0x4e22, 0x9, @mcast2, 0x4}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x5, @mcast2, 0xf}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xf}, @in6={0xa, 0x4e23, 0x6, @mcast2}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0x93ff}, @in6={0xa, 0x4e24, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}], 0x128) sendto$inet6(r7, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000001000)="87", 0x1, 0x20000004, 0x0, 0x0) 4m43.667497059s ago: executing program 0 (id=1031): mknod$loop(0x0, 0xfff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8dfc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) exit(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7840, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10002) 4m41.54907239s ago: executing program 0 (id=1038): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0a000600ffffffffffff0000080014"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8054) r5 = add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r5, &(0x7f0000000480)=""/138, 0x1001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r7, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000d80)=r6}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r6, @ANYRES8, @ANYRESOCT=r8, @ANYRES16=r4], 0x50) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) open(&(0x7f0000000540)='./cgroup\x00', 0x8400, 0x60) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x65) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r9, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r10}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r11, &(0x7f0000000380)="0099", &(0x7f0000000480)=@udp6=r10, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r10, 0x5, 0xe, 0x0, &(0x7f00000003c0)="0000000000800000000000000070", 0x0, 0x200000ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x20}, 0x50) 4m41.006434209s ago: executing program 0 (id=1041): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="07000000000000000000000000fbff050000000000020000eaffffffffff0100", @ANYRESDEC=r1], 0x28}}, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r2, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r2, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x40001) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg(r3, &(0x7f0000000e80)={&(0x7f0000000740)=@in={0x2, 0x4e21, @private=0xa010101}, 0x80, &(0x7f0000000940)=[{0x0}], 0x1}, 0x20000040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000540)={0x9, 0x0, [{0xa, 0x4000005, 0x5, 0x10, 0xad5, 0x80000001, 0x80000000}, {0x80000001, 0x1, 0x3, 0x7, 0x2, 0x0, 0x8001}, {0x6, 0x1, 0x5, 0x4, 0x8, 0x81, 0x80}, {0xd, 0x2, 0x0, 0xd6, 0x0, 0xb, 0x8}, {0x80000008, 0x0, 0x1, 0x1000, 0xc, 0xbb62, 0xa}, {0xc0000000, 0x800, 0x8, 0x9, 0x9, 0x0, 0x3}, {0x80000007, 0x10000, 0x4, 0x1, 0x7, 0x32a6, 0xfffffff8}, {0xc0000001, 0x0, 0x2, 0x1, 0x5, 0xfff, 0x783}, {0x80000008, 0x6, 0x2, 0x7fffffff, 0x3, 0xff, 0xfffffff2}]}) 4m40.743087547s ago: executing program 32 (id=1041): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="07000000000000000000000000fbff050000000000020000eaffffffffff0100", @ANYRESDEC=r1], 0x28}}, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r2, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r2, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x40001) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg(r3, &(0x7f0000000e80)={&(0x7f0000000740)=@in={0x2, 0x4e21, @private=0xa010101}, 0x80, &(0x7f0000000940)=[{0x0}], 0x1}, 0x20000040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000540)={0x9, 0x0, [{0xa, 0x4000005, 0x5, 0x10, 0xad5, 0x80000001, 0x80000000}, {0x80000001, 0x1, 0x3, 0x7, 0x2, 0x0, 0x8001}, {0x6, 0x1, 0x5, 0x4, 0x8, 0x81, 0x80}, {0xd, 0x2, 0x0, 0xd6, 0x0, 0xb, 0x8}, {0x80000008, 0x0, 0x1, 0x1000, 0xc, 0xbb62, 0xa}, {0xc0000000, 0x800, 0x8, 0x9, 0x9, 0x0, 0x3}, {0x80000007, 0x10000, 0x4, 0x1, 0x7, 0x32a6, 0xfffffff8}, {0xc0000001, 0x0, 0x2, 0x1, 0x5, 0xfff, 0x783}, {0x80000008, 0x6, 0x2, 0x7fffffff, 0x3, 0xff, 0xfffffff2}]}) 2m35.64684252s ago: executing program 1 (id=1447): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) 2m34.62330762s ago: executing program 1 (id=1448): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="000000000000000051ad97cb3e2b", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TCSETS2(r1, 0x402c542b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd4a0}]}}]}, 0x44}}, 0x20004055) pipe2(&(0x7f00000000c0), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x2c0f, 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x7, 0x10}, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) cachestat(r3, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r3, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, &(0x7f0000000a80)=[{}], 0x8, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0x5a, 0x8, 0x0, 0x0}}, 0x10) futex$unlock_wake_list32(&(0x7f0000003580)=0x9, 0x68a, 0x10, 0x0, 0x0, 0xffffffff) 2m32.863946534s ago: executing program 1 (id=1456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x7f, 0x0, 0x6}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @mcast1, 0x8}, 0xffffffffffffff91) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0xf, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}}, 0x0, 0x0, 0x2, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4776000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback={0x240}, 0x23}, 0x1c) 2m32.340471298s ago: executing program 1 (id=1457): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80100, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x0, 0x90, [0x0, 0x200000000000, 0x0, 0x0, 0x200000000030, 0x200000000060], 0xf9ffff00, 0x0, 0x0}, 0x108) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000140)={0x1, {0x6, 0x8, 0x8, 0x5d8, 0x9}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0xa5dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x1f90, @loopback}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'veth0_macvtap\x00', @random="a5a6505c7135"}) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, &(0x7f0000000280)='0', 0x1, 0x40000, &(0x7f0000000340)={0x11, 0x6, r5, 0x1, 0x2, 0x6, @local}, 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) r9 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x101040) ioctl$SG_IO(r9, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="68000000000905040000000000000000020000000900010073797a300000000014000280060001000002000005000a000600000008000500000000002c0004800800010000000001200002800c000100786f6c69637930000800020000000002080000000000001e", 0x68}], 0x1}, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f00000000c0)) 2m32.009600589s ago: executing program 1 (id=1460): ptrace(0x10, 0x0) ptrace$ARCH_GET_FS(0x1e, 0xffffffffffffffff, 0x0, 0x1003) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = open(0x0, 0x109281, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x2}]}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000007080)="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", 0x2000, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat(0xffffffffffffff9c, 0x0, 0x26d01, 0x0) syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007050102000200"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff61", 0x12) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x802217, 0xde73, 0xe1, 0x0, 0x0) 2m30.842073967s ago: executing program 1 (id=1465): r0 = timerfd_create(0x1, 0x80000) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000040)='1\x00', 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fdffffff0000000001000000100007800c00018008000100", @ANYRES32=r4, @ANYBLOB="08000100000000000c0002008eff000000000000b77eff8f6c85a6ea3ab422cff847bccafd86e72986668e793fc499ecad2d2e9e1445741e4052fbcdac1e5d7d94c752b7c1dd51bb07150c9ad83e817ae92ac0f69b5d51ef895a0b7d3a98bdfdc1c2468bd5a412a076d50c02d8cbee15188dab753cfbe1f5776d31ddbcb6800ba41e1c847c95016fbae40d2c4fb8e038a4a6aab8713ea66af60934d8367585282ed89b1cb62e2d39e40ac57f77ba4fbfa567fce26a27ba07388e5bc94472d60e9630b4281763b556bd93e471daeafb"], 0x38}}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x44140, 0x0) ioctl$TUNSETLINK(r5, 0x400454cc, 0x302) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800010000000000000000000014000780080011400000000005001500000000000500010006000000050005000a00000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0193cd657757f64e38c0e30000000000000000000000c45133e63ed62192958ecd0b1bd9f84db4f3d4cfcb6c33f74c49804949453ae1dc8a6104da18689728eb5eada56b583c6f9da786d35fb06ed7c2b1dcede7aaa0b1b46b902fb2ca8e54bc6da5f6fbe0b3eb802b3ad7a191b2712e0cd6a7b01c4aaa984621e38a8c5bf3bfe2e43fe59949b65a68bbce521c324c22ab04a8f8a7bdb2e2f4b7acb9213a98a032971c377e5c21"], 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) timerfd_settime(r0, 0x2, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000002c0)) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000680000/0x2000)=nil, 0x2000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) dup(r0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r8, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0x40045010, &(0x7f0000000080)) ioctl$SNDCTL_DSP_RESET(r8, 0x5000, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 2m15.636272353s ago: executing program 33 (id=1465): r0 = timerfd_create(0x1, 0x80000) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000040)='1\x00', 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fdffffff0000000001000000100007800c00018008000100", @ANYRES32=r4, @ANYBLOB="08000100000000000c0002008eff000000000000b77eff8f6c85a6ea3ab422cff847bccafd86e72986668e793fc499ecad2d2e9e1445741e4052fbcdac1e5d7d94c752b7c1dd51bb07150c9ad83e817ae92ac0f69b5d51ef895a0b7d3a98bdfdc1c2468bd5a412a076d50c02d8cbee15188dab753cfbe1f5776d31ddbcb6800ba41e1c847c95016fbae40d2c4fb8e038a4a6aab8713ea66af60934d8367585282ed89b1cb62e2d39e40ac57f77ba4fbfa567fce26a27ba07388e5bc94472d60e9630b4281763b556bd93e471daeafb"], 0x38}}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x44140, 0x0) ioctl$TUNSETLINK(r5, 0x400454cc, 0x302) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800010000000000000000000014000780080011400000000005001500000000000500010006000000050005000a00000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0193cd657757f64e38c0e30000000000000000000000c45133e63ed62192958ecd0b1bd9f84db4f3d4cfcb6c33f74c49804949453ae1dc8a6104da18689728eb5eada56b583c6f9da786d35fb06ed7c2b1dcede7aaa0b1b46b902fb2ca8e54bc6da5f6fbe0b3eb802b3ad7a191b2712e0cd6a7b01c4aaa984621e38a8c5bf3bfe2e43fe59949b65a68bbce521c324c22ab04a8f8a7bdb2e2f4b7acb9213a98a032971c377e5c21"], 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) timerfd_settime(r0, 0x2, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000002c0)) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000680000/0x2000)=nil, 0x2000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) dup(r0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r8, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0x40045010, &(0x7f0000000080)) ioctl$SNDCTL_DSP_RESET(r8, 0x5000, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 2m12.15543424s ago: executing program 5 (id=1544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x2, 0xaa, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f00000002c0)={0x0, @ctrl={0x0, 0x0, @value64}}) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102e98a9940720c0c003d0e0102030109022400010103c0040904"], &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x8000, 0x400000) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e40), r5) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r8, 0x40045431, &(0x7f0000000100)) r9 = syz_open_pts(r8, 0x2) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)=0x1) syz_open_pts(r9, 0x21a001) sendmsg$NFC_CMD_LLC_SDREQ(r6, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000540)={0x14, r7, 0x211, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2400c050}, 0x0) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000080), 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="0e1221b23bb601c477d3df163e75963d86dd606712e9000d118db0049d90491c0748040000c32700b7afd3e04fb862b3c6e612", 0x33}, {&(0x7f0000000ac0)="b00c7037e07686acd2c8dd812560e8ae47", 0x11}, {&(0x7f0000000100)="13cfb6", 0x3}], 0x3) r10 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r10, &(0x7f0000000300)="bfa23f2ccfc7634268be533a35b8fabf003242f5900f2d16f670e2ba56d70c1ddab8a2456a2ab17f632566ff010014f17f0000005381241bc960d5c66ca243c5a450c1c985f97e6117cef3efd137cc86696e6d64b2b33e61a3c4e2cb9e0d234c3958056603311d66fb863f2ad26c8a31906411d2877acbf491465222055a185ecd69281caf8fe8cd3dd10f7fbce1e5cf86b3af24aca2b0b876d48363cf2cce7093bbca203c205078590f221eaee0ae7f73bbf337641fb34feeb444c40c201a22856f658c8f61", 0xc6, 0x4000000, &(0x7f00000002c0)={0x23, 0x4, 0x8, 0x7}, 0x10) 2m8.164523022s ago: executing program 5 (id=1553): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000400)={'sit0\x00', r3, 0x40, 0x40, 0x2, 0x9, {{0x6, 0x4, 0x1, 0x0, 0x18, 0x64, 0x0, 0x9, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x94, 0x4, "1b8f"}]}}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0xe4, r9, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) close_range(r6, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r10 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000ff6608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xda, &(0x7f0000000440)=""/218, 0x41000, 0x1e}, 0x94) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001080)=ANY=[@ANYBLOB="1400000024000100000000000000000000000000d7e37e948afca178c80242b8e0294283fba76943011daf7c13d8adf040e7a6fffdde0258d2141d8f70f4faa3e18993ffb346bbcf448fa5422da92610e72f20643e74d77ccf029461675b4fc4b1625591c3c39e1f36541e966bbb0b5ac7d3ec8bb2fd1658cbd662a6f9fa"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000000200)=0x1, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) 2m7.521165056s ago: executing program 5 (id=1556): syz_clone3(0x0, 0x0) ppoll(&(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) socket(0x10, 0x803, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(0xffffffffffffffff, 0x6f2d, 0x2) syz_usb_connect(0x0, 0x36, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000120000000000230000001800018014000200626f6e645f736c6176655f30000000000500020001"], 0x34}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r7, 0x71ea87ade5feff97, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44800}, 0x40004046) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r9, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x6f6a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x814}, 0x2) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r7, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}]}, 0x2c}}, 0x24000000) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x21, @loopback, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x6}, {@private, 0x4}, {@broadcast}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0xa}}]}]}}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000200000008bd287400000000000001090224000100008051090400fe217d02030122280009058103ff0302c1001075af280a520639c0d843837d49d17a4c6948eef3a1d94249e8809e5f93926d755c7f5900000000"], 0x0) 2m3.855954078s ago: executing program 5 (id=1563): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r5, 0x80404518, &(0x7f0000001300)=""/115) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="000073007f"]) ioctl(r0, 0xc138fd02, 0x0) 2m2.691082325s ago: executing program 5 (id=1566): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x80, 0xfffffffe, 0x2f8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2m1.810884876s ago: executing program 5 (id=1572): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/keys\x00', 0x0, 0x0) pread64(r1, &(0x7f0000002080)=""/108, 0x6c, 0x100000000000055) pselect6(0x40, &(0x7f0000000040)={0x8, 0x6, 0x0, 0x5, 0x6, 0x0, 0x5, 0x2}, &(0x7f0000000080)={0x8, 0x2, 0x100000000, 0x6, 0x1ff, 0x4, 0x4000000000, 0x9}, &(0x7f00000000c0)={0x7, 0x401, 0x2, 0x9, 0x6, 0xfffff00000000000, 0xd, 0x9}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x24004000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4064840) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) syz_open_dev$usbfs(0x0, 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0xffffffffffffffff, 0xb, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000d00)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '\xfc\xec\xd1\xcb\x9a\x964\xf4\xa2\x89v\x12\x11\fG\\x00#\x00f\xe1>8\x94\x02O\x9b\xfc\xe8\xffTioP6\xfa\x9b#\xc4H\xbf\'\x18\x89\xd1^a\xf6\xccrS\x1d\xd7\xc3\xcb9\x02\x00\x00\x00+\xb5\x81\xbe\xc4\v\xe2?\xa8\xc4\x9f\xd84\xdd\x84\xf7\xe4H\xeb1a=1\xf7\x99\x9a042\x15\xeb\xe1\xa7\x05\x8f\xc4\xc3\xd3da\xef>#\xb92\x82\x06\xbb\x19\xf6\x92\x83\\AU\x17\xbaf\xc7\xb7h\xf8\xd2\"\xce\xc8UB\xe5\xf3\xaa\x05Y\xc0\xe1\xe3\\\xc4K\xc2\x97\xb2\x10\x03\x14m=\xd8z,\x8dSo\x99H\x87Y|)\x82`R\xe1\xe5I\xbf}\x06\xb3\aD\xff\x10\x91\xc8\xc0^f\xc7\xb8jN\x9a8\xab\xc6\x86\xab\xdbWyNd,\x97\xea\xb4(\x97x\x98#\xca\xf0N%X\x01.\xc4M\x9ajWT\xf2\xf7\xbb8\xb2\xcc<]\x06\b\xc4\xd5\xde\xf4\xb5\xdd\x7f\xf2\xf8S}q\xe7\xcdZ\xee\xe5\x9f\x19\x11S\x9fVzv\xf7\x04\xe8\xeb\x10z\xd7qy\x17r\x1bV\xb1\xd8\xdb\x061h\xc6\xfb\x84\b\x1a\xd6\x10\xdd\x95$$\xa1\x91=\xa67\xb6\xd8\x12\x88c\xa1\xbe[\xe4\xe0\xc7G\xca\xe3U\xde\xa9\xafU\x15\x93\xed},\xcaE\xba;\xc7yk\xaf8\xa4*Je\x13J\x88\x8bR2\xc0LV\xc1P\\\xe3\xec\x954\x8e>\xa4\xd80\x97\x963f\xdd\x8e\xc5\xdf\x9a.F\x06\x82\xcfg\xe8\xb6V\x92\x944K9F#\xdc\xf4\"', 0x3a, './file0'}, 0x2b0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r6, &(0x7f00000002c0)=""/4096, 0x1000) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x208000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x7e0f611c8948c046) 2m0.085790932s ago: executing program 34 (id=1572): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/keys\x00', 0x0, 0x0) pread64(r1, &(0x7f0000002080)=""/108, 0x6c, 0x100000000000055) pselect6(0x40, &(0x7f0000000040)={0x8, 0x6, 0x0, 0x5, 0x6, 0x0, 0x5, 0x2}, &(0x7f0000000080)={0x8, 0x2, 0x100000000, 0x6, 0x1ff, 0x4, 0x4000000000, 0x9}, &(0x7f00000000c0)={0x7, 0x401, 0x2, 0x9, 0x6, 0xfffff00000000000, 0xd, 0x9}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x24004000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4064840) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) syz_open_dev$usbfs(0x0, 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0xffffffffffffffff, 0xb, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000d00)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '\xfc\xec\xd1\xcb\x9a\x964\xf4\xa2\x89v\x12\x11\fG\\x00#\x00f\xe1>8\x94\x02O\x9b\xfc\xe8\xffTioP6\xfa\x9b#\xc4H\xbf\'\x18\x89\xd1^a\xf6\xccrS\x1d\xd7\xc3\xcb9\x02\x00\x00\x00+\xb5\x81\xbe\xc4\v\xe2?\xa8\xc4\x9f\xd84\xdd\x84\xf7\xe4H\xeb1a=1\xf7\x99\x9a042\x15\xeb\xe1\xa7\x05\x8f\xc4\xc3\xd3da\xef>#\xb92\x82\x06\xbb\x19\xf6\x92\x83\\AU\x17\xbaf\xc7\xb7h\xf8\xd2\"\xce\xc8UB\xe5\xf3\xaa\x05Y\xc0\xe1\xe3\\\xc4K\xc2\x97\xb2\x10\x03\x14m=\xd8z,\x8dSo\x99H\x87Y|)\x82`R\xe1\xe5I\xbf}\x06\xb3\aD\xff\x10\x91\xc8\xc0^f\xc7\xb8jN\x9a8\xab\xc6\x86\xab\xdbWyNd,\x97\xea\xb4(\x97x\x98#\xca\xf0N%X\x01.\xc4M\x9ajWT\xf2\xf7\xbb8\xb2\xcc<]\x06\b\xc4\xd5\xde\xf4\xb5\xdd\x7f\xf2\xf8S}q\xe7\xcdZ\xee\xe5\x9f\x19\x11S\x9fVzv\xf7\x04\xe8\xeb\x10z\xd7qy\x17r\x1bV\xb1\xd8\xdb\x061h\xc6\xfb\x84\b\x1a\xd6\x10\xdd\x95$$\xa1\x91=\xa67\xb6\xd8\x12\x88c\xa1\xbe[\xe4\xe0\xc7G\xca\xe3U\xde\xa9\xafU\x15\x93\xed},\xcaE\xba;\xc7yk\xaf8\xa4*Je\x13J\x88\x8bR2\xc0LV\xc1P\\\xe3\xec\x954\x8e>\xa4\xd80\x97\x963f\xdd\x8e\xc5\xdf\x9a.F\x06\x82\xcfg\xe8\xb6V\x92\x944K9F#\xdc\xf4\"', 0x3a, './file0'}, 0x2b0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r6, &(0x7f00000002c0)=""/4096, 0x1000) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x208000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x7e0f611c8948c046) 9.772528272s ago: executing program 3 (id=2088): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, 0x0) 9.755916252s ago: executing program 3 (id=2090): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x6a, 0x4, 0xffffffff, 0xffe0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000d40)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363f49fcfec3197381b13892559f334d436138406b699de69db13fd42d5737428808940bcd0840dc930c81a8bd8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be60c4fe6987e7a0dc395ab7275640000000000000006294c8e67ffffffff3b00bab2df9ca37a0bd8f0bb843fe86124390c62f05d76038a6e1610780f0310692de128832c32940a6e848b17d1b5a0c20f7ff5a7a2e353f9363a037d054cf0409c89cd80165cf27bf7904a0d47cfd06acc1e4606bb5a8d26ace7578e8f5d151eb60e63969461a96e66f9cf4203d5bb7af3f62bc02693a1d5af09c6d1f5c7d27e991ce5c388b925aacf29f77ff12a5589aa7174c130ba472afa943edbf5c66722a21dbd7e86188d1ce5168925ebc3e4f071c368fe576600d269f47e71b209acca43bdc42a1fe0171c4096fe8ddf08e081554bac2dc0d3a4f80cd57aae7305aec6c9d8853e8f80be85b921c941a9fff4a9ff33a348926af5d91fd19bb2d930eeb546444189e76b0cd05a72f52bc74d285d6b6d8484680770f88f82474b6c3fc5b641822516eb35fe2ecdf2d42beebad7b75da375764520e9fc68683118adf1ce73e1c7635161df1cfa4f73fd4ed9811c1c2366472122d7900d073f26548b669b75e6e5a3104d6a258772b840dcf0a16246ee6ef516a66a0c70283875bdfb0cb3b8fd5f76e8b481193d1ca7310b74f6b2fe4e03b3d67e560784a28a508e302634ada79a9d543a4b6ac9dab6f335cd207d7c4d46ef6922bde6c66b85817d1d9cf191a7573773fc0b25b1c9282acae0cc3f381b36a009592d16df4d74de496b1a38a857671eec326ba6d6762d21066de6cafebf884a8d64749173a4093001e4a49963d3530bcc96cdaf45afde012f73a34f624454aa26df", 0x29b}, {&(0x7f0000000140)="b8fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884be3f95e35b6301084df2b71b56e2a043b74efe85a30267fae395e8a051934c6a4b9ce089", 0x41}], 0x2}, 0x8000) recvmsg(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r6) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f0000000200)) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x4}}, 0x10) r8 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r8, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x363}}], 0x1, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, 0x0, 0x0) 8.633924519s ago: executing program 3 (id=2092): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20) 8.51569981s ago: executing program 4 (id=2093): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001100034700bb65e1c3e4ffff0100", 0x12}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24040010}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000003c0)='\x00', &(0x7f00000000c0)='(!p\xad\x01\x00\x00\x00c\x91\xef(.(|-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000002c0)='\xe6\xdf\x92\b\xdc\xcc\xf0CM\x92\xbe\xe4\xb3,t\xf1\xf0\xcb\a\x97\xb2\xdd\xcd\x9dP\x9e\xd7\xe3/\xd2$#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000200)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 6.014690838s ago: executing program 4 (id=2100): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '&'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x1, &(0x7f0000000080)}) 5.966919617s ago: executing program 6 (id=2101): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000"], 0x84}}, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$mtd(&(0x7f0000000040), 0x1e, 0x100) ioctl$MEMISLOCKED(r1, 0x80084d17, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00'], 0x50) pwrite64(r2, &(0x7f0000000000)='2', 0x1, 0x7) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) set_mempolicy(0x3, &(0x7f0000000380)=0x3, 0x9) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x3) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x2000}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0xd20c, 0x6, 0x40, 0xef}]}) 5.966554377s ago: executing program 2 (id=2102): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = shmget$private(0x0, 0x3000, 0x880, &(0x7f0000ffa000/0x3000)=nil) socket(0x2d, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) shmctl$IPC_RMID(r0, 0x0) 5.966371108s ago: executing program 7 (id=2103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000800)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008013}, 0x24040808) 5.867112536s ago: executing program 6 (id=2104): fcntl$lock(0xffffffffffffffff, 0x24, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0xa, 0x9, 0x3, 0xe4, 0x40, 0x2c, 0x0, 0x30, 0x19, 0x7}, {0x41000, 0x54000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0x3000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0xb, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0x10, 0xa0, 0xb1, 0x8, 0x1, 0x2, 0x80, 0xf, 0x1, 0xfd}, {0x3000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x100000, 0x2d}, {0x10000, 0x86}, 0x80000031, 0x0, 0x8000000, 0x42024, 0xb, 0x1, 0x3000, [0x6840000000000000, 0x3, 0xef6, 0xff]}) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000040)={0xc000, 0x4, 0x5, 0x7, 0x6}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port0\x00', 0xa3, 0x1b1c07, 0x0, 0x0, 0x1000}) readv(r3, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r3, r3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 5.829199129s ago: executing program 7 (id=2105): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaabb72b4000000590806000108000604"], 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @link_local}, 0x14) 5.785113162s ago: executing program 2 (id=2106): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0xfffffffc, 0x4) 5.586482362s ago: executing program 2 (id=2107): r0 = socket$l2tp(0x2, 0x2, 0x73) io_setup(0x1, &(0x7f00000012c0)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) sendto$l2tp(r0, &(0x7f0000000280)="dc05691123f4fa1dd913635f139383dc77942c6b805abf8f954921ea48b5a6235d3e07a49394f7896bc0b7705f829848e960dcf5f959f8d4079d6285444ebee62f659d59db1c666ede7ba143d18df10aad3cc58335ed8a55b85f61a3b2b5bada22c2d31db8692bcad51d6833bc080ecd5fa60c8813141fd9def84ef2ecdaca77bb0a571e94c7c9f9adf6a21eeee06bf9e6ed630ff685aebfa1879bbb948281327befdb94ea", 0xa5, 0x20044000, &(0x7f0000000380)={0x2, 0x0, @broadcast, 0x2}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 5.523766764s ago: executing program 7 (id=2108): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001100034700bb65e1c3e4ffff0100", 0x12}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24040010}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000003c0)='\x00', &(0x7f00000000c0)='(!p\xad\x01\x00\x00\x00c\x91\xef(.(|-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000002c0)='\xe6\xdf\x92\b\xdc\xcc\xf0CM\x92\xbe\xe4\xb3,t\xf1\xf0\xcb\a\x97\xb2\xdd\xcd\x9dP\x9e\xd7\xe3/\xd2$#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000200)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 5.39677245s ago: executing program 6 (id=2110): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c0500"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5.26170915s ago: executing program 2 (id=2111): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, 0x0, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 3.769984953s ago: executing program 7 (id=2112): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000300)={0x3b, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r1, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xffffffffffe00000}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 3.744980856s ago: executing program 2 (id=2113): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x80000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 3.610493489s ago: executing program 7 (id=2114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fsopen(&(0x7f0000000540)='jfs\x00', 0x1) unshare(0x2c060000) unshare(0x8000400) unshare(0x28000600) unshare(0x8000000) 2.686707091s ago: executing program 7 (id=2115): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) 2.634093328s ago: executing program 3 (id=2116): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000200000007"], 0x50) pipe(&(0x7f00000000c0)) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 2.483225816s ago: executing program 6 (id=2117): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 1.668263103s ago: executing program 4 (id=2118): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaabb72b4000000590806000108000604"], 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.598294326s ago: executing program 3 (id=2119): r0 = open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1c0) r1 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001}, 0x50) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x50, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0x4}, {0xb, 0x8}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x85c7}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_PLIMIT={0x8, 0x1, 0xd}]}}]}, 0x50}}, 0x0) ioctl$TIOCSBRK(r0, 0x5427) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={0xffffffffffffffff, 0x1}, 0x16) bind$rds(r3, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, 0x0, &(0x7f0000000200)="82", 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r8}, 0x40) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) 1.597938216s ago: executing program 4 (id=2120): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpid() read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=@framed={{}, [@printk={@i, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@x}]}, &(0x7f0000000100)='GPL\x00', 0x3}, 0x90) 1.477449795s ago: executing program 6 (id=2121): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) add_key$keyring(0x0, 0x0, 0x0, 0xfeffff, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x100, 0x2, 0x2, 0x10, 0x9, 0x5, 0x0, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfffffffd, 0xfffffffe, 0x7, 0x100003, 0x80000003, 0x489, 0x7, 0xfffffffd, 0x20001e58, 0x1, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) 143.974482ms ago: executing program 6 (id=2122): ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x0, 'team_slave_0\x00', {0x4}}) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x2, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x201, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) copy_file_range(0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x400000ffff, 0x0) 0s ago: executing program 4 (id=2123): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCPKT(r0, 0x5420, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000040)={0x8004, {"0dbad96fff01000008ff00200800", "3d39f905d1e296000000004a5cc95d00", "a7c9474200000000000000e7fe4a70f3"}, 0x40040010, 0x5}) kernel console output (not intermixed with test programs): new IBSS network, BSSID 50:50:50:50:50:50 [ 549.053531][ T30] audit: type=1400 audit(1787332365.567:1443): avc: denied { write } for pid=11973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.099703][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.110320][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.234297][ T29] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 549.405285][ T29] usb 6-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 549.443036][ T30] audit: type=1400 audit(1787332365.957:1444): avc: denied { write } for pid=12008 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.493312][T12011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 549.496113][ T29] usb 6-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 549.537341][ T29] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 33, using maximum allowed: 30 [ 549.554039][ T30] audit: type=1400 audit(1787332366.067:1445): avc: denied { write } for pid=12013 comm="syz.6.1532" name="sg0" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 549.592350][ T29] usb 6-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 549.625618][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 549.638263][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.714354][ T4915] Bluetooth: hci5: command tx timeout [ 549.741558][ T29] usb 6-1: config 0 descriptor?? [ 551.154888][ T5699] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 551.246158][ T30] audit: type=1400 audit(1787332367.767:1446): avc: denied { write } for pid=12022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.315053][ T5699] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 551.340305][ T5699] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.362859][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.376255][ T5699] usb 5-1: Product: syz [ 551.384867][ T5699] usb 5-1: Manufacturer: syz [ 551.394845][ T5699] usb 5-1: SerialNumber: syz [ 551.407500][ T30] audit: type=1400 audit(1787332367.897:1447): avc: denied { bind } for pid=12037 comm="syz.6.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 551.435401][ T5699] usb 5-1: config 0 descriptor?? [ 551.484003][ T5699] pegasus_notetaker 5-1:0.0: Invalid number of endpoints [ 551.500091][ T30] audit: type=1400 audit(1787332367.897:1448): avc: denied { write } for pid=12037 comm="syz.6.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 551.911093][ T5699] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 551.927283][ T30] audit: type=1400 audit(1787332368.047:1449): avc: denied { write } for pid=12040 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.971931][ T30] audit: type=1400 audit(1787332368.487:1450): avc: denied { ioctl } for pid=12044 comm="syz.6.1562" path="socket:[57434]" dev="sockfs" ino=57434 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 552.136530][ T29] usb 6-1: string descriptor 0 read error: -71 [ 552.147273][ T29] usb 6-1: USB disconnect, device number 17 [ 552.195437][ T5699] usb 5-1: USB disconnect, device number 41 [ 553.559776][ T30] audit: type=1400 audit(1787332369.937:1451): avc: denied { unlink } for pid=9703 comm="syz-executor" name="nullb1" dev="devtmpfs" ino=3223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 553.602759][T12066] netlink: 548 bytes leftover after parsing attributes in process `syz.4.1564'. [ 553.794248][ T30] audit: type=1400 audit(1787332370.107:1452): avc: denied { unlink } for pid=9703 comm="syz-executor" name="comedi3_subd0" dev="devtmpfs" ino=3040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 553.798152][T12069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 553.988231][T12072] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 555.474615][ T5894] block nbd0: Possible stuck request ffff8880275b7000: control (read@0,1024B). Runtime 30 seconds [ 555.492324][ T5894] block nbd0: Possible stuck request ffff8880275b71c0: control (read@1024,1024B). Runtime 30 seconds [ 555.503279][ T5894] block nbd0: Possible stuck request ffff8880275b7380: control (read@2048,1024B). Runtime 30 seconds [ 555.514379][ T5894] block nbd0: Possible stuck request ffff8880275b7540: control (read@3072,1024B). Runtime 30 seconds [ 555.648728][ T656] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.776245][ T30] audit: type=1400 audit(1787332372.287:1453): avc: denied { write } for pid=12073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 555.873720][ T30] audit: type=1400 audit(1787332372.387:1454): avc: denied { write } for pid=12098 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 555.905011][ T656] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.283833][ T24] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 556.477617][ T24] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 556.521462][T12110] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 556.543034][T12110] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 556.555900][T12110] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 556.587689][T12110] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 556.603124][T12110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 556.646190][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.692354][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.700902][ T24] usb 5-1: Product: syz [ 556.705403][ T24] usb 5-1: Manufacturer: syz [ 556.705639][ T656] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.728784][ T24] usb 5-1: SerialNumber: syz [ 557.262605][ T24] usb 5-1: config 0 descriptor?? [ 557.291315][ T24] pegasus_notetaker 5-1:0.0: Invalid number of endpoints [ 557.346269][ T24] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 557.403488][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.411774][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.821716][ T24] usb 5-1: USB disconnect, device number 42 [ 558.177409][ T656] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.180453][T12136] netlink: 199556 bytes leftover after parsing attributes in process `syz.3.1580'. [ 558.692427][T12110] Bluetooth: hci3: command tx timeout [ 558.838950][T12151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1583'. [ 559.320018][ T30] audit: type=1400 audit(1787332375.837:1455): avc: denied { create } for pid=12157 comm="syz.4.1585" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 559.380623][ T30] audit: type=1400 audit(1787332375.877:1456): avc: denied { create } for pid=12157 comm="syz.4.1585" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 559.483951][ T30] audit: type=1400 audit(1787332375.927:1457): avc: denied { unlink } for pid=5594 comm="syz-executor" name="file5" dev="tmpfs" ino=1743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 559.898381][T12172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 560.061747][T12108] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.116004][T12108] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.146945][T12108] bridge_slave_0: entered allmulticast mode [ 560.152416][ T30] audit: type=1400 audit(1787332376.667:1458): avc: denied { watch watch_reads } for pid=12179 comm="syz.4.1590" path="pipe:[57862]" dev="pipefs" ino=57862 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 560.211540][T12108] bridge_slave_0: entered promiscuous mode [ 560.533266][T12108] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.568423][T12108] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.610435][T12108] bridge_slave_1: entered allmulticast mode [ 560.625196][T12108] bridge_slave_1: entered promiscuous mode [ 560.764255][T12110] Bluetooth: hci3: command tx timeout [ 560.816277][T12108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.833010][T12108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.151569][T12108] team0: Port device team_slave_0 added [ 561.646757][ T30] audit: type=1400 audit(1787332377.747:1459): avc: denied { getattr } for pid=12186 comm="syz.4.1592" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=58372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 561.715248][T12108] team0: Port device team_slave_1 added [ 562.010372][T12198] futex_wake_op: syz.4.1595 tries to shift op by 144; fix this program [ 562.305643][ T30] audit: type=1400 audit(1787332378.817:1460): avc: denied { map } for pid=12203 comm="syz.4.1597" path="socket:[58097]" dev="sockfs" ino=58097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 562.364433][ T30] audit: type=1400 audit(1787332378.817:1461): avc: denied { getopt } for pid=12203 comm="syz.4.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 562.487046][T12108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.506586][T12108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.539506][T12108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.559585][T12108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.574947][T12108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.621237][T12108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.779481][T12108] hsr_slave_0: entered promiscuous mode [ 562.794986][T12108] hsr_slave_1: entered promiscuous mode [ 562.811853][T12108] debugfs: 'hsr0' already exists in 'hsr' [ 562.827147][T12108] Cannot create hsr debugfs directory [ 562.834597][T12110] Bluetooth: hci3: command tx timeout [ 562.966212][ T30] audit: type=1400 audit(1787332379.487:1462): avc: denied { write } for pid=12210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 563.056816][ T30] audit: type=1400 audit(1787332379.577:1463): avc: denied { write } for pid=12224 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 563.199913][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1601'. [ 563.217105][ T656] bridge_slave_1: left allmulticast mode [ 563.230021][ T656] bridge_slave_1: left promiscuous mode [ 563.244727][ T656] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.279800][ T656] bridge_slave_0: left allmulticast mode [ 563.291970][ T656] bridge_slave_0: left promiscuous mode [ 563.301753][T12232] jffs2: notice: (12232) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 563.323701][ T656] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.350338][ T656] dummy0: left allmulticast mode [ 563.360445][ T656] bridge3: port 1(dummy0) entered disabled state [ 563.495159][ T29] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 563.607658][ T30] audit: type=1400 audit(1787332380.127:1464): avc: denied { write } for pid=12231 comm="syz.6.1602" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 563.766553][ T29] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 563.778591][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1602'. [ 563.801202][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.827999][ T29] usb 4-1: Product: syz [ 563.840523][ T29] usb 4-1: Manufacturer: syz [ 563.867119][ T29] usb 4-1: SerialNumber: syz [ 563.909046][ T24] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:0: No space for directory leaf checksum. Please run e2fsck -D. [ 563.990628][ T24] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm kworker/1:0: checksumming directory block 0 [ 564.032077][ T24] usb 4-1: loading /lib/firmware/updates/syzkaller/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 564.043794][ T24] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:0: No space for directory leaf checksum. Please run e2fsck -D. [ 564.061232][ T24] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm kworker/1:0: checksumming directory block 0 [ 564.097708][ T24] usb 4-1: loading /lib/firmware/updates/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 564.122435][ T24] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:0: No space for directory leaf checksum. Please run e2fsck -D. [ 564.144893][ T24] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm kworker/1:0: checksumming directory block 0 [ 564.187841][ T24] usb 4-1: loading /lib/firmware/syzkaller/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 564.212808][ T24] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:0: No space for directory leaf checksum. Please run e2fsck -D. [ 564.228947][ T656] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 564.246542][ T24] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm kworker/1:0: checksumming directory block 0 [ 564.309323][ T24] usb 4-1: loading /lib/firmware/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 564.323252][ T24] usb 4-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 564.343548][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 564.343565][ T30] audit: type=1400 audit(1787332380.857:1468): avc: denied { firmware_load } for pid=24 comm="kworker/1:0" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 564.343930][ T656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.379936][ T24] usb 4-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 564.392527][ T656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.402165][ T656] bond0 (unregistering): Released all slaves [ 564.412504][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 564.581328][ T30] audit: type=1400 audit(1787332381.097:1469): avc: denied { accept } for pid=12259 comm="syz.6.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 564.605964][T12261] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1608'. [ 564.615143][ T7431] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 564.640944][ T30] audit: type=1400 audit(1787332381.117:1470): avc: denied { write } for pid=12259 comm="syz.6.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 564.726938][ T30] audit: type=1400 audit(1787332381.117:1471): avc: denied { read } for pid=12259 comm="syz.6.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 564.776870][ T7431] usb 3-1: Using ep0 maxpacket: 32 [ 564.807049][ T7431] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 564.838548][ T7431] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.850223][ T7431] usb 3-1: Product: syz [ 564.873237][ T7431] usb 3-1: Manufacturer: syz [ 564.884056][ T7431] usb 3-1: SerialNumber: syz [ 564.914814][T12110] Bluetooth: hci3: command tx timeout [ 565.183107][T12252] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 565.477007][ T656] hsr_slave_0: left promiscuous mode [ 565.503705][ T656] hsr_slave_1: left promiscuous mode [ 565.516835][ T656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.548084][ T656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.560582][ T656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.580806][ T656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.604061][ T30] audit: type=1400 audit(1787332382.117:1472): avc: denied { write } for pid=12268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.639104][ T656] veth1_macvtap: left promiscuous mode [ 565.668040][ T656] veth0_macvtap: left promiscuous mode [ 565.692776][ T656] veth1_vlan: left promiscuous mode [ 565.712529][ T656] veth0_vlan: left promiscuous mode [ 565.783742][ T30] audit: type=1400 audit(1787332382.297:1473): avc: denied { write } for pid=12285 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.952945][T12290] netlink: 'syz.4.1612': attribute type 6 has an invalid length. [ 566.274434][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 566.430051][ T7431] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 566.491708][ T5699] usb 4-1: USB disconnect, device number 59 [ 566.522055][ T656] team0 (unregistering): Port device team_slave_1 removed [ 566.558910][ T7431] usb 3-1: USB disconnect, device number 48 [ 566.638738][ T656] team0 (unregistering): Port device team_slave_0 removed [ 566.749470][ T5259] 8021q: adding VLAN 0 to HW filter on device eth7 [ 566.880267][T12300] veth0_macvtap: entered allmulticast mode [ 567.246194][ T30] audit: type=1400 audit(1787332383.767:1474): avc: denied { read } for pid=12313 comm="syz.6.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 567.252911][ T656] IPVS: stop unused estimator thread 0... [ 567.320196][ T30] audit: type=1400 audit(1787332383.787:1475): avc: denied { ioctl } for pid=12313 comm="syz.6.1618" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 567.444509][ T7431] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 567.605839][ T7431] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 567.643458][ T7431] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.660709][ T7431] usb 3-1: Product: syz [ 567.671297][ T7431] usb 3-1: Manufacturer: syz [ 567.680369][ T7431] usb 3-1: SerialNumber: syz [ 567.692834][ T7431] usb 3-1: config 0 descriptor?? [ 567.723171][T12110] Bluetooth: hci6: urb ffff8880291d2200 submission failed (2) [ 567.905401][ T7431] usb 3-1: USB disconnect, device number 49 [ 568.749060][T12334] X25: received unknown 00 with LCI 000 [ 568.765810][ T30] audit: type=1400 audit(1787332385.267:1476): avc: denied { bind } for pid=12333 comm="syz.2.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 569.134318][T12292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 569.322482][T12108] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 569.444480][T12108] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 569.807404][T12108] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 569.895100][T12108] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 569.968771][T12108] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 570.011517][T12108] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 570.016925][T12108] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 570.047883][T12108] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 570.054754][T12358] netlink: 'syz.2.1628': attribute type 2 has an invalid length. [ 570.314423][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 570.439105][T12108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.486548][T12108] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.518426][T10963] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.525606][T10963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.615764][T10963] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.622886][T10963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.899455][ T30] audit: type=1400 audit(1787332387.417:1477): avc: denied { write } for pid=12357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.308077][ T30] audit: type=1400 audit(1787332387.827:1478): avc: denied { write } for pid=12388 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.557761][ T5259] 8021q: adding VLAN 0 to HW filter on device eth8 [ 571.974392][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 572.041771][T12411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.237119][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 572.626349][ T9] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 572.654021][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.675366][ T9] usb 3-1: Product: syz [ 572.706292][ T9] usb 3-1: Manufacturer: syz [ 572.738937][T12417] SELinux: policydb magic number 0x37373130 does not match expected magic number 0xf97cff8c [ 572.787527][T12417] SELinux: failed to load policy [ 572.950633][ T9] usb 3-1: SerialNumber: syz [ 573.146894][T12108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.199828][ T30] audit: type=1400 audit(1787332389.717:1479): avc: denied { write } for pid=12406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 573.662237][T12387] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 573.678198][ T30] audit: type=1326 audit(1787332390.197:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12427 comm="syz.4.1637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de519e0d9 code=0x7ffc0000 [ 573.975940][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 574.004498][ T30] audit: type=1326 audit(1787332390.197:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12427 comm="syz.4.1637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de519e0d9 code=0x7ffc0000 [ 574.183262][ T30] audit: type=1326 audit(1787332390.197:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12427 comm="syz.4.1637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2de519e0d9 code=0x7ffc0000 [ 574.339954][ T30] audit: type=1326 audit(1787332390.197:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12427 comm="syz.4.1637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de519e0d9 code=0x7ffc0000 [ 574.382030][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 574.409886][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 574.461734][ T10] usb 7-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 574.467953][ T30] audit: type=1326 audit(1787332390.197:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12427 comm="syz.4.1637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de519e0d9 code=0x7ffc0000 [ 574.631076][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.754358][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 575.022918][ T10] usb 7-1: Product: syz [ 575.030263][ T30] audit: type=1326 audit(1787332390.197:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12427 comm="syz.4.1637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2de519e0d9 code=0x7ffc0000 [ 575.082704][T12108] veth0_vlan: entered promiscuous mode [ 575.184018][T12108] veth1_vlan: entered promiscuous mode [ 575.448580][ T10] usb 7-1: Manufacturer: syz [ 575.492822][ T10] usb 7-1: SerialNumber: syz [ 575.582663][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 575.614514][ T30] audit: type=1326 audit(1787332390.197:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12427 comm="syz.4.1637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de519e0d9 code=0x7ffc0000 [ 575.704040][T12108] veth0_macvtap: entered promiscuous mode [ 575.841067][T12108] veth1_macvtap: entered promiscuous mode [ 575.862596][T12108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.921484][ T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 575.986628][T12108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.030486][ T9] usb 3-1: USB disconnect, device number 50 [ 576.189562][ T10] usb 7-1: USB disconnect, device number 3 [ 576.195394][ T6147] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.286009][ T6147] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.344276][ T5730] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 576.470372][ T139] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.535954][ T5730] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 576.550569][ T139] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.646440][ T5730] usb 5-1: config 1 has an invalid interface number: 82 but max is 0 [ 576.693272][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 576.693288][ T30] audit: type=1400 audit(1787332393.197:1489): avc: denied { write } for pid=12452 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 576.738930][ T5730] usb 5-1: config 1 has no interface number 0 [ 576.754753][ T5730] usb 5-1: config 1 interface 82 has no altsetting 0 [ 576.796920][ T5730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.843541][ T5730] usb 5-1: Product: syz [ 576.887285][ T5730] usb 5-1: Manufacturer: syz [ 576.925932][ T5730] usb 5-1: SerialNumber: syz [ 577.320272][ T30] audit: type=1400 audit(1787332393.837:1490): avc: denied { write } for pid=12490 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.582149][ T5730] hub 5-1:1.82: bad descriptor, ignoring hub [ 577.617154][ T5730] hub 5-1:1.82: probe with driver hub failed with error -5 [ 577.647573][T12488] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 577.683209][ T5730] sierra 5-1:1.82: Sierra USB modem converter detected [ 577.732709][ T6147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.768148][ T5730] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 577.782152][ T6147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.875987][ T5730] usb 5-1: USB disconnect, device number 43 [ 578.024353][ T5730] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 578.073272][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.090441][ T5730] sierra 5-1:1.82: device disconnected [ 578.128446][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.233280][T12511] netlink: 'syz.4.1651': attribute type 2 has an invalid length. [ 579.571018][T12523] futex_wake_op: syz.3.1652 tries to shift op by 144; fix this program [ 579.618771][T12524] FAULT_INJECTION: forcing a failure. [ 579.618771][T12524] name failslab, interval 1, probability 0, space 0, times 0 [ 579.631866][T12524] CPU: 0 UID: 0 PID: 12524 Comm: syz.7.1573 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.631886][T12524] Tainted: [L]=SOFTLOCKUP [ 579.631890][T12524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 579.631896][T12524] Call Trace: [ 579.631902][T12524] [ 579.631908][T12524] dump_stack_lvl+0x100/0x190 [ 579.631931][T12524] should_fail_ex.cold+0x5/0xa [ 579.631948][T12524] should_failslab+0xc2/0x120 [ 579.631966][T12524] __kmalloc_noprof+0xfc/0x820 [ 579.631982][T12524] ? snd_ctl_elem_add+0x49d/0x1480 [ 579.631997][T12524] snd_ctl_elem_add+0x49d/0x1480 [ 579.632010][T12524] ? find_held_lock+0x2b/0x80 [ 579.632024][T12524] ? __might_fault+0xc5/0x140 [ 579.632036][T12524] ? __might_fault+0xc5/0x140 [ 579.632049][T12524] ? __pfx_snd_ctl_elem_add+0x10/0x10 [ 579.632063][T12524] snd_ctl_elem_add_user+0xc5/0x170 [ 579.632075][T12524] ? __pfx_snd_ctl_elem_add_user+0x10/0x10 [ 579.632101][T12524] snd_ctl_ioctl+0xc81/0x14c0 [ 579.632112][T12524] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 579.632122][T12524] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 579.632141][T12524] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 579.632166][T12524] ? selinux_file_ioctl+0x13b/0x290 [ 579.632182][T12524] ? selinux_file_ioctl+0xb6/0x290 [ 579.632199][T12524] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 579.632210][T12524] __x64_sys_ioctl+0x18e/0x210 [ 579.632226][T12524] do_syscall_64+0x123/0x790 [ 579.632240][T12524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.632252][T12524] RIP: 0033:0x7fb4d559e0d9 [ 579.632262][T12524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.632272][T12524] RSP: 002b:00007fb4d6506028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.632283][T12524] RAX: ffffffffffffffda RBX: 00007fb4d5825fa0 RCX: 00007fb4d559e0d9 [ 579.632290][T12524] RDX: 0000200000000740 RSI: 00000000c1105517 RDI: 0000000000000003 [ 579.632297][T12524] RBP: 00007fb4d6506090 R08: 0000000000000000 R09: 0000000000000000 [ 579.632303][T12524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.632309][T12524] R13: 00007fb4d5826038 R14: 00007fb4d5825fa0 R15: 00007fffe15ab468 [ 579.632323][T12524] [ 580.555305][ T30] audit: type=1400 audit(1787332397.077:1491): avc: denied { write } for pid=12500 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.888657][ T30] audit: type=1400 audit(1787332397.407:1492): avc: denied { write } for pid=12550 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 581.175314][ T30] audit: type=1326 audit(1787332397.697:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12557 comm="syz.6.1658" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f581b79e0d9 code=0x0 [ 581.562194][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 581.726307][T12568] netlink: 'syz.4.1661': attribute type 2 has an invalid length. [ 581.772546][T12578] futex_wake_op: syz.7.1665 tries to shift op by 144; fix this program [ 581.789147][ T10] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 581.871374][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.958176][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 582.121335][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.253694][ T10] cxacru 7-1:1.0: usbatm_usb_probe: bind failed: -19! [ 582.557931][ T30] audit: type=1400 audit(1787332399.077:1494): avc: denied { name_connect } for pid=12592 comm="syz.2.1667" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 582.996923][ T30] audit: type=1400 audit(1787332399.517:1495): avc: denied { getopt } for pid=12599 comm="syz.2.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 583.728174][ T30] audit: type=1400 audit(1787332400.237:1496): avc: denied { getopt } for pid=12615 comm="syz.4.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 583.914280][ T29] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 584.095063][ T29] usb 3-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 584.148384][ T29] usb 3-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 584.161495][T12499] usb 7-1: USB disconnect, device number 4 [ 584.235666][ T29] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 33, using maximum allowed: 30 [ 584.258176][ T29] usb 3-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 584.305554][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 584.373054][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.447195][ T29] usb 3-1: config 0 descriptor?? [ 584.505337][T12630] FAULT_INJECTION: forcing a failure. [ 584.505337][T12630] name failslab, interval 1, probability 0, space 0, times 0 [ 584.568465][T12630] CPU: 0 UID: 0 PID: 12630 Comm: syz.4.1676 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.568493][T12630] Tainted: [L]=SOFTLOCKUP [ 584.568499][T12630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 584.568509][T12630] Call Trace: [ 584.568514][T12630] [ 584.568521][T12630] dump_stack_lvl+0x100/0x190 [ 584.568553][T12630] should_fail_ex.cold+0x5/0xa [ 584.568576][T12630] should_failslab+0xc2/0x120 [ 584.568603][T12630] __kmalloc_noprof+0xfc/0x820 [ 584.568625][T12630] ? __pfx___mutex_lock+0x10/0x10 [ 584.568644][T12630] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 584.568668][T12630] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 584.568690][T12630] genl_start+0x18f/0x970 [ 584.568710][T12630] __netlink_dump_start+0x60e/0x990 [ 584.568739][T12630] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 584.568756][T12630] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 584.568773][T12630] ? consume_skb+0xd6/0x110 [ 584.568795][T12630] ? __dev_queue_xmit+0xa12/0x4970 [ 584.568819][T12630] ? __pfx_genl_get_cmd+0x10/0x10 [ 584.568843][T12630] ? __pfx_genl_start+0x10/0x10 [ 584.568858][T12630] ? __pfx_genl_dumpit+0x10/0x10 [ 584.568872][T12630] ? __pfx_genl_done+0x10/0x10 [ 584.568892][T12630] ? __dev_queue_xmit+0xa33/0x4970 [ 584.568914][T12630] ? __radix_tree_lookup+0x217/0x2b0 [ 584.568944][T12630] genl_rcv_msg+0x471/0x800 [ 584.568967][T12630] ? __pfx_genl_rcv_msg+0x10/0x10 [ 584.568984][T12630] ? __pfx_netdev_nl_qstats_get_dumpit+0x10/0x10 [ 584.569012][T12630] netlink_rcv_skb+0x159/0x420 [ 584.569034][T12630] ? __pfx_genl_rcv_msg+0x10/0x10 [ 584.569051][T12630] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 584.569081][T12630] ? netlink_deliver_tap+0x1ae/0xcc0 [ 584.569106][T12630] genl_rcv+0x28/0x40 [ 584.569130][T12630] netlink_unicast+0x585/0x850 [ 584.569157][T12630] ? __pfx_netlink_unicast+0x10/0x10 [ 584.569189][T12630] netlink_sendmsg+0x8b0/0xda0 [ 584.569216][T12630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.569241][T12630] ? selinux_socket_sendmsg+0x198/0x2f0 [ 584.569270][T12630] ____sys_sendmsg+0xa4d/0xbe0 [ 584.569291][T12630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.569318][T12630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 584.569353][T12630] ___sys_sendmsg+0x190/0x1e0 [ 584.569378][T12630] ? __pfx____sys_sendmsg+0x10/0x10 [ 584.569401][T12630] ? get_pid_task+0x106/0x250 [ 584.569431][T12630] ? find_held_lock+0x2b/0x80 [ 584.569474][T12630] __sys_sendmsg+0x160/0x210 [ 584.569492][T12630] ? __pfx___sys_sendmsg+0x10/0x10 [ 584.569521][T12630] do_syscall_64+0x123/0x790 [ 584.569547][T12630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.569566][T12630] RIP: 0033:0x7f2de519e0d9 [ 584.569583][T12630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.569599][T12630] RSP: 002b:00007f2de5fe9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.569617][T12630] RAX: ffffffffffffffda RBX: 00007f2de5425fa0 RCX: 00007f2de519e0d9 [ 584.569627][T12630] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 584.569638][T12630] RBP: 00007f2de5fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 584.569648][T12630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.569659][T12630] R13: 00007f2de5426038 R14: 00007f2de5425fa0 R15: 00007ffd84b2cad8 [ 584.569682][T12630] [ 585.409566][ T30] audit: type=1326 audit(1787332401.927:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12641 comm="syz.4.1679" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2de519e0d9 code=0x0 [ 585.509815][ T30] audit: type=1400 audit(1787332402.027:1498): avc: denied { write } for pid=12645 comm="syz.6.1681" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 585.556055][ T5894] block nbd0: Possible stuck request ffff8880275b7000: control (read@0,1024B). Runtime 60 seconds [ 585.568095][ T5894] block nbd0: Possible stuck request ffff8880275b71c0: control (read@1024,1024B). Runtime 60 seconds [ 585.579157][ T5894] block nbd0: Possible stuck request ffff8880275b7380: control (read@2048,1024B). Runtime 60 seconds [ 585.590151][ T5894] block nbd0: Possible stuck request ffff8880275b7540: control (read@3072,1024B). Runtime 60 seconds [ 585.843824][ T30] audit: type=1326 audit(1787332402.357:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12657 comm="syz.6.1684" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f581b79e0d9 code=0x0 [ 585.871562][ T10] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 586.018889][ T30] audit: type=1400 audit(1787332402.537:1500): avc: denied { append } for pid=12663 comm="syz.3.1687" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 586.065055][ T10] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 586.075806][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.086492][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 586.100202][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.117165][ T10] cxacru 5-1:1.0: usbatm_usb_probe: bind failed: -19! [ 586.194746][ T5730] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 586.276062][ T29] usb 3-1: string descriptor 0 read error: -71 [ 586.290295][ T29] usb 3-1: USB disconnect, device number 51 [ 586.304856][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 586.344682][ T5730] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 586.345380][ T30] audit: type=1400 audit(1787332402.867:1501): avc: denied { accept } for pid=12667 comm="syz.2.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 586.365300][ T5730] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.388202][ T5730] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 586.402187][ T5730] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.419553][ T5730] cxacru 7-1:1.0: usbatm_usb_probe: bind failed: -19! [ 586.475212][ T9] usb 8-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 586.489249][ T30] audit: type=1400 audit(1787332403.007:1502): avc: denied { listen } for pid=12667 comm="syz.2.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 586.512227][ T29] usb 5-1: USB disconnect, device number 44 [ 586.525179][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.537623][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.556482][ T30] audit: type=1400 audit(1787332403.007:1503): avc: denied { accept } for pid=12667 comm="syz.2.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 586.557408][ T9] usb 8-1: Product: syz [ 586.613028][ T9] usb 8-1: Manufacturer: syz [ 586.618829][ T9] usb 8-1: SerialNumber: syz [ 586.719703][ T9] kalmia 8-1:1.0: probe with driver kalmia failed with error -22 [ 587.028096][ T9] usb 8-1: USB disconnect, device number 2 [ 587.327036][T12688] openvswitch: netlink: Invalid VLAN frame [ 588.361549][T12110] Bluetooth: hci5: link tx timeout [ 588.367422][T12110] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 588.593986][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 588.594006][ T30] audit: type=1326 audit(1787332405.097:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12699 comm="syz.4.1695" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de519e0d9 code=0x7ffc0000 [ 588.865376][T12710] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1693'. [ 589.156030][ T30] audit: type=1326 audit(1787332405.097:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12699 comm="syz.4.1695" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de519e0d9 code=0x7ffc0000 [ 589.183510][ T30] audit: type=1326 audit(1787332405.097:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12699 comm="syz.4.1695" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2de519e0d9 code=0x7ffc0000 [ 589.262112][ T5730] usb 7-1: USB disconnect, device number 5 [ 589.436099][ T30] audit: type=1326 audit(1787332405.097:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12699 comm="syz.4.1695" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de519e0d9 code=0x7ffc0000 [ 589.574020][ T30] audit: type=1326 audit(1787332405.097:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12699 comm="syz.4.1695" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de519e0d9 code=0x7ffc0000 [ 589.723555][ T30] audit: type=1326 audit(1787332405.107:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12699 comm="syz.4.1695" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2de519e0d9 code=0x7ffc0000 [ 589.918339][ T30] audit: type=1326 audit(1787332405.107:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12699 comm="syz.4.1695" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de519e0d9 code=0x7ffc0000 [ 589.947341][ T30] audit: type=1326 audit(1787332405.107:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12699 comm="syz.4.1695" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de519e0d9 code=0x7ffc0000 [ 590.368382][ T30] audit: type=1400 audit(1787332405.277:1515): avc: denied { connect } for pid=12691 comm="syz.2.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 590.389294][ T30] audit: type=1400 audit(1787332405.867:1516): avc: denied { read } for pid=12702 comm="syz.7.1696" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 590.444372][T12110] Bluetooth: hci5: command 0x0406 tx timeout [ 591.651354][T12757] FAULT_INJECTION: forcing a failure. [ 591.651354][T12757] name failslab, interval 1, probability 0, space 0, times 0 [ 591.709965][T12757] CPU: 1 UID: 0 PID: 12757 Comm: syz.6.1710 Tainted: G L syzkaller #0 PREEMPT(full) [ 591.709986][T12757] Tainted: [L]=SOFTLOCKUP [ 591.709990][T12757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 591.709997][T12757] Call Trace: [ 591.710001][T12757] [ 591.710006][T12757] dump_stack_lvl+0x100/0x190 [ 591.710025][T12757] should_fail_ex.cold+0x5/0xa [ 591.710041][T12757] should_failslab+0xc2/0x120 [ 591.710058][T12757] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 591.710076][T12757] ? __alloc_skb+0x5b7/0x710 [ 591.710093][T12757] ? __alloc_skb+0x140/0x710 [ 591.710112][T12757] __alloc_skb+0x140/0x710 [ 591.710129][T12757] ? __alloc_skb+0x5b7/0x710 [ 591.710145][T12757] ? __pfx___alloc_skb+0x10/0x10 [ 591.710166][T12757] netlink_ack+0x117/0xb80 [ 591.710186][T12757] netlink_rcv_skb+0x333/0x420 [ 591.710202][T12757] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 591.710217][T12757] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 591.710238][T12757] ? netlink_deliver_tap+0x1ae/0xcc0 [ 591.710256][T12757] netlink_unicast+0x585/0x850 [ 591.710274][T12757] ? __pfx_netlink_unicast+0x10/0x10 [ 591.710294][T12757] netlink_sendmsg+0x8b0/0xda0 [ 591.710321][T12757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.710339][T12757] ? selinux_socket_sendmsg+0x198/0x2f0 [ 591.710359][T12757] ____sys_sendmsg+0xa4d/0xbe0 [ 591.710373][T12757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.710390][T12757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 591.710410][T12757] ___sys_sendmsg+0x190/0x1e0 [ 591.710425][T12757] ? __pfx____sys_sendmsg+0x10/0x10 [ 591.710440][T12757] ? get_pid_task+0x106/0x250 [ 591.710458][T12757] ? find_held_lock+0x2b/0x80 [ 591.710479][T12757] __sys_sendmsg+0x160/0x210 [ 591.710491][T12757] ? __pfx___sys_sendmsg+0x10/0x10 [ 591.710509][T12757] do_syscall_64+0x123/0x790 [ 591.710523][T12757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.710535][T12757] RIP: 0033:0x7f581b79e0d9 [ 591.710545][T12757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.710555][T12757] RSP: 002b:00007f581c5c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 591.710567][T12757] RAX: ffffffffffffffda RBX: 00007f581ba25fa0 RCX: 00007f581b79e0d9 [ 591.710574][T12757] RDX: 0000000004000050 RSI: 0000200000000240 RDI: 0000000000000003 [ 591.710580][T12757] RBP: 00007f581c5c0090 R08: 0000000000000000 R09: 0000000000000000 [ 591.710586][T12757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.710593][T12757] R13: 00007f581ba26038 R14: 00007f581ba25fa0 R15: 00007ffd4c8d1348 [ 591.710606][T12757] [ 592.356570][ T7431] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 592.616521][ T7431] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 592.638199][ T7431] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.642501][T12767] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1713'. [ 592.702414][T12767] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1713'. [ 592.761772][ T7431] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.773205][T12767] netlink: 548 bytes leftover after parsing attributes in process `syz.7.1713'. [ 592.802506][ T7431] usb 3-1: Product: syz [ 592.840728][ T7431] usb 3-1: Manufacturer: syz [ 592.887868][ T7431] usb 3-1: SerialNumber: syz [ 592.943147][ T7431] usb 3-1: config 0 descriptor?? [ 593.001043][ T7431] pegasus_notetaker 3-1:0.0: Invalid number of endpoints [ 593.285052][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 593.437639][ T7431] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 593.604217][ T9] usb 8-1: device descriptor read/64, error -71 [ 593.775942][ T7431] usb 3-1: USB disconnect, device number 52 [ 593.895659][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 594.084224][ T9] usb 8-1: device descriptor read/64, error -71 [ 594.134418][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1722'. [ 594.183400][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1722'. [ 594.227454][ T9] usb usb8-port1: attempt power cycle [ 594.604421][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 594.604700][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 594.604713][ T30] audit: type=1400 audit(1787332411.117:1522): avc: denied { write } for pid=12780 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.193632][ T9] usb 8-1: device descriptor read/8, error -71 [ 595.337585][T12823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 595.403766][ T30] audit: type=1400 audit(1787332411.917:1523): avc: denied { write } for pid=12822 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.425910][ T29] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 595.454263][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 595.504984][ T9] usb 8-1: device descriptor read/8, error -71 [ 595.625641][ T29] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 595.635230][ T9] usb usb8-port1: unable to enumerate USB device [ 595.671041][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.725163][ T29] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 595.788535][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.836229][ T29] option 3-1:1.0: GSM modem (1-port) converter detected [ 595.883730][ T29] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 596.042549][T12818] binder: 12816:12818 ioctl c0306201 200000000640 returned -22 [ 596.086025][T12818] binder: 12816:12818 ioctl 40106410 200000000180 returned -22 [ 596.137653][ T9] usb 3-1: USB disconnect, device number 53 [ 596.204033][ T9] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 596.273966][ T9] option 3-1:1.0: device disconnected [ 596.485778][ T30] audit: type=1400 audit(1787332413.007:1524): avc: denied { ioctl } for pid=12838 comm="syz.6.1729" path="socket:[62593]" dev="sockfs" ino=62593 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 596.494820][T12839] nbd: must specify a device to reconfigure [ 596.813846][ T30] audit: type=1400 audit(1787332413.327:1525): avc: denied { write } for pid=12826 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.001774][T12849] futex_wake_op: syz.6.1730 tries to shift op by 144; fix this program [ 597.242604][T12855] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 597.563487][ T30] audit: type=1400 audit(1787332414.077:1526): avc: denied { write } for pid=12852 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.934089][T12863] veth0_macvtap: entered allmulticast mode [ 598.589015][ T30] audit: type=1326 audit(1787332415.107:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12864 comm="syz.7.1735" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d559e0d9 code=0x7fc00000 [ 598.824904][ T30] audit: type=1326 audit(1787332415.147:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12864 comm="syz.7.1735" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb4d559e0d9 code=0x7fc00000 [ 598.913502][T12883] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.1739'. [ 598.986170][T12886] netlink: 'syz.6.1738': attribute type 1 has an invalid length. [ 599.032014][T12886] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1738'. [ 599.197179][ T30] audit: type=1400 audit(1787332415.707:1529): avc: denied { append } for pid=12890 comm="syz.2.1740" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 599.316992][T12904] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1741'. [ 599.383868][T12908] futex_wake_op: syz.2.1744 tries to shift op by 144; fix this program [ 603.200312][T12935] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 603.219601][ T30] audit: type=1400 audit(1787332419.737:1530): avc: denied { write } for pid=12868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 603.263287][ T30] audit: type=1400 audit(1787332419.757:1531): avc: denied { bind } for pid=12894 comm="syz.3.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 603.284621][ T30] audit: type=1400 audit(1787332419.757:1532): avc: denied { name_bind } for pid=12894 comm="syz.3.1728" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 603.315486][ T30] audit: type=1400 audit(1787332419.757:1533): avc: denied { node_bind } for pid=12894 comm="syz.3.1728" saddr=172.30.1.4 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 603.343698][T12942] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1751'. [ 603.556496][ T30] audit: type=1400 audit(1787332420.067:1534): avc: denied { write } for pid=12943 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 603.584037][T12945] FAULT_INJECTION: forcing a failure. [ 603.584037][T12945] name failslab, interval 1, probability 0, space 0, times 0 [ 603.622337][T12945] CPU: 0 UID: 0 PID: 12945 Comm: syz.2.1752 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.622363][T12945] Tainted: [L]=SOFTLOCKUP [ 603.622368][T12945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 603.622375][T12945] Call Trace: [ 603.622381][T12945] [ 603.622387][T12945] dump_stack_lvl+0x100/0x190 [ 603.622413][T12945] should_fail_ex.cold+0x5/0xa [ 603.622433][T12945] should_failslab+0xc2/0x120 [ 603.622455][T12945] __kmalloc_cache_noprof+0x91/0x6b0 [ 603.622474][T12945] ? vmci_ctx_add_notification+0x15b/0x670 [ 603.622496][T12945] vmci_ctx_add_notification+0x15b/0x670 [ 603.622517][T12945] vmci_ctx_set_chkpt_state+0xbd/0x120 [ 603.622536][T12945] vmci_host_unlocked_ioctl+0x87c/0x2070 [ 603.622560][T12945] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 603.622583][T12945] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 603.622606][T12945] ? do_vfs_ioctl+0x226/0x13e0 [ 603.622628][T12945] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 603.622663][T12945] ? selinux_file_ioctl+0x13b/0x290 [ 603.622683][T12945] ? selinux_file_ioctl+0xb6/0x290 [ 603.622705][T12945] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 603.622728][T12945] __x64_sys_ioctl+0x18e/0x210 [ 603.622748][T12945] do_syscall_64+0x123/0x790 [ 603.622766][T12945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.622781][T12945] RIP: 0033:0x7f2e8159e0d9 [ 603.622795][T12945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.622808][T12945] RSP: 002b:00007f2e8239c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 603.622824][T12945] RAX: ffffffffffffffda RBX: 00007f2e81825fa0 RCX: 00007f2e8159e0d9 [ 603.622833][T12945] RDX: 0000200000001680 RSI: 00000000000007b2 RDI: 0000000000000003 [ 603.622842][T12945] RBP: 00007f2e8239c090 R08: 0000000000000000 R09: 0000000000000000 [ 603.622850][T12945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.622858][T12945] R13: 00007f2e81826038 R14: 00007f2e81825fa0 R15: 00007ffff6fcbab8 [ 603.622878][T12945] [ 604.431952][T12958] futex_wake_op: syz.6.1756 tries to shift op by 144; fix this program [ 604.846462][T12970] FAULT_INJECTION: forcing a failure. [ 604.846462][T12970] name failslab, interval 1, probability 0, space 0, times 0 [ 604.942393][T12970] CPU: 1 UID: 0 PID: 12970 Comm: syz.3.1758 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.942425][T12970] Tainted: [L]=SOFTLOCKUP [ 604.942432][T12970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 604.942443][T12970] Call Trace: [ 604.942450][T12970] [ 604.942457][T12970] dump_stack_lvl+0x100/0x190 [ 604.942489][T12970] should_fail_ex.cold+0x5/0xa [ 604.942509][T12970] ? sctp_get_port_local+0xbb3/0x1630 [ 604.942536][T12970] should_failslab+0xc2/0x120 [ 604.942564][T12970] __kmalloc_cache_noprof+0x91/0x6b0 [ 604.942588][T12970] ? sctp_add_bind_addr+0xae/0x3e0 [ 604.942612][T12970] sctp_add_bind_addr+0xae/0x3e0 [ 604.942635][T12970] sctp_do_bind+0x36c/0x760 [ 604.942666][T12970] sctp_connect_new_asoc+0x5e7/0x770 [ 604.942695][T12970] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 604.942737][T12970] __sctp_connect+0x3e7/0xc70 [ 604.942770][T12970] ? __pfx___sctp_connect+0x10/0x10 [ 604.942797][T12970] ? selinux_sctp_bind_connect+0xe0/0x230 [ 604.942834][T12970] __sctp_setsockopt_connectx+0x100/0x190 [ 604.942865][T12970] sctp_getsockopt+0x3f06/0x7110 [ 604.942895][T12970] ? find_held_lock+0x2b/0x80 [ 604.942917][T12970] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 604.942938][T12970] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 604.942960][T12970] ? __pfx_sctp_getsockopt+0x10/0x10 [ 604.942991][T12970] ? __lock_acquire+0x4c5/0x1ec0 [ 604.943021][T12970] ? __pfx_avc_has_perm+0x10/0x10 [ 604.943049][T12970] ? find_held_lock+0x2b/0x80 [ 604.943069][T12970] ? __might_fault+0xc5/0x140 [ 604.943090][T12970] ? __might_fault+0xc5/0x140 [ 604.943118][T12970] ? _copy_from_user+0x59/0xd0 [ 604.943147][T12970] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 604.943172][T12970] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 604.943201][T12970] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 604.943224][T12970] do_sock_getsockopt+0x50a/0x6e0 [ 604.943246][T12970] ? __lock_acquire+0x4c5/0x1ec0 [ 604.943275][T12970] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 604.943305][T12970] ? find_held_lock+0x2b/0x80 [ 604.943333][T12970] ? __fget_files+0x21f/0x3d0 [ 604.943365][T12970] __sys_getsockopt+0x148/0x260 [ 604.943390][T12970] ? __x64_sys_getsockopt+0xbd/0x160 [ 604.943408][T12970] __x64_sys_getsockopt+0xbd/0x160 [ 604.943424][T12970] ? do_syscall_64+0xae/0x790 [ 604.943443][T12970] ? lockdep_hardirqs_on+0x7d/0x110 [ 604.943462][T12970] do_syscall_64+0x123/0x790 [ 604.943484][T12970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.943503][T12970] RIP: 0033:0x7fb6b859e0d9 [ 604.943520][T12970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.943537][T12970] RSP: 002b:00007fb6b9534028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 604.943557][T12970] RAX: ffffffffffffffda RBX: 00007fb6b8825fa0 RCX: 00007fb6b859e0d9 [ 604.943569][T12970] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 604.943580][T12970] RBP: 00007fb6b9534090 R08: 0000200000000280 R09: 0000000000000000 [ 604.943591][T12970] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 604.943602][T12970] R13: 00007fb6b8826038 R14: 00007fb6b8825fa0 R15: 00007fffea10e918 [ 604.943627][T12970] [ 605.723327][ T30] audit: type=1400 audit(1787332422.237:1535): avc: denied { write } for pid=12953 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.816289][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 606.041729][ T30] audit: type=1400 audit(1787332422.557:1536): avc: denied { write } for pid=13002 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.191962][ T9] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 606.840344][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.851423][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.862048][ T9] usb 8-1: config 0 descriptor?? [ 607.124308][ T5713] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 607.286140][ T9] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 607.304861][ T5713] usb 5-1: Using ep0 maxpacket: 8 [ 607.322223][ T5713] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 607.343059][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0013/input/input37 [ 607.367641][ T5713] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.382484][ T5713] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 607.395830][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 607.407432][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 607.417706][ T30] audit: type=1400 audit(1787332423.937:1537): avc: denied { read } for pid=13022 comm="syz.3.1772" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 607.418393][ T5713] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 607.462970][T13021] futex_wake_op: syz.6.1771 tries to shift op by 144; fix this program [ 607.483896][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 607.492322][ T5713] usb 5-1: Product: syz [ 607.502813][ T30] audit: type=1400 audit(1787332424.017:1538): avc: denied { ioctl } for pid=4949 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3640 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 607.502984][ T5713] usb 5-1: Manufacturer: syz [ 607.536466][ T9] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 607.598762][ T5713] usb 5-1: SerialNumber: syz [ 607.602872][T12984] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 607.648384][ T5713] usb 5-1: config 0 descriptor?? [ 607.658593][T13029] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 607.720230][T12499] usb 8-1: USB disconnect, device number 7 [ 607.746087][T13027] fido_id[13027]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 607.853451][T13031] netlink: 'syz.6.1773': attribute type 2 has an invalid length. [ 607.923818][ T5713] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 608.002797][ T5713] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 608.048837][ T5713] usb 5-1: USB disconnect, device number 45 [ 608.318037][ T30] audit: type=1400 audit(1787332424.837:1539): avc: denied { module_load } for pid=13037 comm="syz.3.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 608.548947][ T30] audit: type=1400 audit(1787332425.067:1540): avc: denied { kexec_image_load } for pid=13042 comm="syz.2.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 608.601093][T12499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.914491][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.552443][T13061] FAULT_INJECTION: forcing a failure. [ 609.552443][T13061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.565599][T13061] CPU: 1 UID: 0 PID: 13061 Comm: syz.2.1780 Tainted: G L syzkaller #0 PREEMPT(full) [ 609.565619][T13061] Tainted: [L]=SOFTLOCKUP [ 609.565623][T13061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 609.565630][T13061] Call Trace: [ 609.565634][T13061] [ 609.565638][T13061] dump_stack_lvl+0x100/0x190 [ 609.565658][T13061] should_fail_ex.cold+0x5/0xa [ 609.565673][T13061] _copy_from_user+0x2e/0xd0 [ 609.565691][T13061] vmemdup_user+0x6b/0xe0 [ 609.565706][T13061] con_set_unimap+0x62/0x640 [ 609.565722][T13061] vt_ioctl+0xeea/0x3150 [ 609.565737][T13061] ? __pfx_vt_ioctl+0x10/0x10 [ 609.565751][T13061] ? tomoyo_path_number_perm+0x28f/0x580 [ 609.565769][T13061] ? tomoyo_path_number_perm+0x188/0x580 [ 609.565787][T13061] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 609.565805][T13061] ? tty_jobctrl_ioctl+0x152/0xce0 [ 609.565820][T13061] ? __pfx_vt_ioctl+0x10/0x10 [ 609.565834][T13061] tty_ioctl+0x26a/0x1640 [ 609.565844][T13061] ? __pfx_tty_ioctl+0x10/0x10 [ 609.565854][T13061] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 609.565872][T13061] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 609.565897][T13061] ? selinux_file_ioctl+0x13b/0x290 [ 609.565912][T13061] ? selinux_file_ioctl+0xb6/0x290 [ 609.565929][T13061] ? __pfx_tty_ioctl+0x10/0x10 [ 609.565939][T13061] __x64_sys_ioctl+0x18e/0x210 [ 609.565954][T13061] do_syscall_64+0x123/0x790 [ 609.565969][T13061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.565980][T13061] RIP: 0033:0x7f2e8159e0d9 [ 609.565991][T13061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.566001][T13061] RSP: 002b:00007f2e8239c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.566012][T13061] RAX: ffffffffffffffda RBX: 00007f2e81825fa0 RCX: 00007f2e8159e0d9 [ 609.566019][T13061] RDX: 00002000000001c0 RSI: 0000000000004b67 RDI: 0000000000000003 [ 609.566026][T13061] RBP: 00007f2e8239c090 R08: 0000000000000000 R09: 0000000000000000 [ 609.566032][T13061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.566039][T13061] R13: 00007f2e81826038 R14: 00007f2e81825fa0 R15: 00007ffff6fcbab8 [ 609.566052][T13061] [ 609.891045][T13062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1779'. [ 609.899999][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1779'. [ 609.908889][T13062] netlink: 'syz.4.1779': attribute type 11 has an invalid length. [ 609.916759][T13062] netlink: 'syz.4.1779': attribute type 13 has an invalid length. [ 609.954716][ T6926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.834397][T12499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.997150][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.202443][ T30] audit: type=1400 audit(1787332427.717:1541): avc: denied { set_context_mgr } for pid=13097 comm="syz.2.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 611.718003][T13106] netlink: 'syz.6.1793': attribute type 2 has an invalid length. [ 612.035204][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.224088][T13128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.236457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.477995][T13130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.488634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.518654][ T49] IPVS: starting estimator thread 0... [ 612.635074][T13131] IPVS: using max 42 ests per chain, 100800 per kthread [ 613.607313][ T985] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 613.776544][ T985] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 613.802256][ T985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.823086][ T985] usb 7-1: Product: syz [ 613.833982][ T985] usb 7-1: Manufacturer: syz [ 613.851247][ T985] usb 7-1: SerialNumber: syz [ 613.875685][T12499] net_ratelimit: 2 callbacks suppressed [ 613.875701][T12499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.890415][ T985] usb 7-1: config 0 descriptor?? [ 614.191843][ T985] usb 7-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 614.203259][ T985] f81604 7-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 614.217828][ T985] f81604 7-1:0.0: probe with driver f81604 failed with error -121 [ 614.225291][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.376317][T13169] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 614.469001][T13171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.477286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.998802][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.238290][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.255785][T13189] futex_wake_op: syz.3.1820 tries to shift op by 144; fix this program [ 615.275940][ T30] audit: type=1400 audit(1787332431.797:1542): avc: denied { setopt } for pid=13187 comm="syz.7.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 615.408768][T13194] CIFS: Attempting to mount //127.0.0.1/share [ 615.434451][T13194] CIFS: VFS: Error connecting to socket. Aborting operation. [ 615.442239][T13194] CIFS: VFS: cifs_mount failed w/return code = -111 [ 615.453494][T13196] netlink: 'syz.7.1824': attribute type 8 has an invalid length. [ 615.461960][T13196] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1824'. [ 615.586421][ T9] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 616.125188][ T5894] block nbd0: Possible stuck request ffff8880275b7000: control (read@0,1024B). Runtime 90 seconds [ 616.163937][ T5894] block nbd0: Possible stuck request ffff8880275b71c0: control (read@1024,1024B). Runtime 90 seconds [ 616.176273][ T5894] block nbd0: Possible stuck request ffff8880275b7380: control (read@2048,1024B). Runtime 90 seconds [ 616.187261][ T5894] block nbd0: Possible stuck request ffff8880275b7540: control (read@3072,1024B). Runtime 90 seconds [ 616.204912][ T9] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 616.215291][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.271110][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.279910][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.303709][ T9] usb 5-1: Product: syz [ 616.328434][ T9] usb 5-1: Manufacturer: syz [ 616.347371][ T9] usb 5-1: SerialNumber: syz [ 616.361470][ T9] usb 5-1: config 0 descriptor?? [ 616.375970][ T9] pegasus_notetaker 5-1:0.0: Invalid number of endpoints [ 616.401710][ T9] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 616.432149][T13206] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 616.452069][T13206] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 616.476561][T13206] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 616.497849][T13206] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 616.514625][T13206] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 616.515423][ T985] usb 7-1: USB disconnect, device number 6 [ 616.643101][T13217] fuse: Bad value for 'fd' [ 617.316557][T10964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.345340][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.380121][ T985] usb 5-1: USB disconnect, device number 46 [ 617.382821][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.428433][T13206] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 617.447439][T13206] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 617.478172][T13206] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 617.612391][T13206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1827'. [ 617.672440][ T30] audit: type=1400 audit(1787332434.187:1543): avc: denied { write } for pid=13205 comm="syz.2.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 617.754238][T12499] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 617.858545][T13231] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1832'. [ 617.904240][T13231] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1832'. [ 617.944716][T13231] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1832'. [ 617.962211][ T30] audit: type=1400 audit(1787332434.477:1544): avc: denied { write } for pid=13213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.250469][ T30] audit: type=1400 audit(1787332434.767:1545): avc: denied { write } for pid=13239 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.345997][T13246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 618.444211][ T4915] Bluetooth: hci0: command 0x0406 tx timeout [ 618.514256][ T4915] Bluetooth: hci5: command 0x0406 tx timeout [ 618.515053][T12110] Bluetooth: hci4: command 0x0406 tx timeout [ 618.520579][ T4915] Bluetooth: hci1: command 0x0406 tx timeout [ 618.836130][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.843640][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.147593][ T30] audit: type=1400 audit(1787332435.667:1546): avc: denied { write } for pid=13247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.364376][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 619.390994][ T30] audit: type=1400 audit(1787332435.907:1547): avc: denied { write } for pid=13277 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.450567][ T30] audit: type=1400 audit(1787332435.937:1548): avc: denied { read } for pid=13275 comm="syz.6.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 619.477519][ T7431] net_ratelimit: 9 callbacks suppressed [ 619.477537][ T7431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.479934][ T4915] Bluetooth: hci3: command 0x0c1a tx timeout [ 619.534806][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 619.599529][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 619.662426][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 619.693438][ T9] usb 3-1: Product: syz [ 619.717979][ T9] usb 3-1: Manufacturer: syz [ 620.322014][ T30] audit: type=1400 audit(1787332436.837:1549): avc: denied { write } for pid=13282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.524624][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.578920][T13313] FAULT_INJECTION: forcing a failure. [ 620.578920][T13313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.610488][T13248] Bluetooth: hci5: command 0x0406 tx timeout [ 620.617877][T13313] CPU: 0 UID: 0 PID: 13313 Comm: syz.6.1845 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.617943][T13313] Tainted: [L]=SOFTLOCKUP [ 620.617950][T13313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 620.617960][T13313] Call Trace: [ 620.617970][T13313] [ 620.617977][T13313] dump_stack_lvl+0x100/0x190 [ 620.618003][T13313] should_fail_ex.cold+0x5/0xa [ 620.618023][T13313] _copy_from_user+0x2e/0xd0 [ 620.618047][T13313] video_usercopy+0xe71/0x1730 [ 620.618068][T13313] ? __pfx___video_do_ioctl+0x10/0x10 [ 620.618087][T13313] ? __pfx_video_usercopy+0x10/0x10 [ 620.618116][T13313] v4l2_ioctl+0x1bd/0x250 [ 620.618140][T13313] ? __pfx_v4l2_ioctl+0x10/0x10 [ 620.618160][T13313] __x64_sys_ioctl+0x18e/0x210 [ 620.618180][T13313] do_syscall_64+0x123/0x790 [ 620.618197][T13313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.618212][T13313] RIP: 0033:0x7f581b79e0d9 [ 620.618225][T13313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.618238][T13313] RSP: 002b:00007f581c5c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 620.618253][T13313] RAX: ffffffffffffffda RBX: 00007f581ba25fa0 RCX: 00007f581b79e0d9 [ 620.618262][T13313] RDX: 0000200000000480 RSI: 00000000c0d05604 RDI: 0000000000000003 [ 620.618271][T13313] RBP: 00007f581c5c0090 R08: 0000000000000000 R09: 0000000000000000 [ 620.618280][T13313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.618288][T13313] R13: 00007f581ba26038 R14: 00007f581ba25fa0 R15: 00007ffd4c8d1348 [ 620.618307][T13313] [ 620.618803][ T30] audit: type=1400 audit(1787332437.137:1550): avc: denied { write } for pid=13311 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.892369][ T9] input: Samsung SUR40 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input38 [ 620.946456][T13319] netlink: 'syz.6.1846': attribute type 2 has an invalid length. [ 621.105781][ T30] audit: type=1400 audit(1787332437.627:1551): avc: denied { write } for pid=13323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 621.234614][T12499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.260610][ T30] audit: type=1400 audit(1787332437.777:1552): avc: denied { write } for pid=13337 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 621.554565][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.565740][T13248] Bluetooth: hci3: command 0x0c1a tx timeout [ 621.876946][ T30] audit: type=1400 audit(1787332438.397:1553): avc: denied { write } for pid=13340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 621.884237][T12499] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 621.986901][ T30] audit: type=1400 audit(1787332438.507:1554): avc: denied { write } for pid=13358 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.085871][T12499] usb 5-1: Using ep0 maxpacket: 16 [ 622.106334][T12499] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 622.120856][T12499] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.144349][T12499] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.166440][T12499] usb 5-1: config 0 descriptor?? [ 622.282487][ T9] usb 3-1: USB disconnect, device number 55 [ 622.600648][ T7431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.699844][ T30] audit: type=1400 audit(1787332439.167:1555): avc: denied { write } for pid=13360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.701431][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.769454][ T7431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.779328][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.025259][T13380] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1853'. [ 623.050975][ T30] audit: type=1400 audit(1787332439.557:1556): avc: denied { write } for pid=13376 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.098250][T13383] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1853'. [ 623.126687][T13380] netlink: 500 bytes leftover after parsing attributes in process `syz.7.1853'. [ 623.333247][ T30] audit: type=1400 audit(1787332439.847:1557): avc: denied { setopt } for pid=13390 comm="syz.7.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 623.393758][T13396] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 623.634475][T13248] Bluetooth: hci3: command 0x0c1a tx timeout [ 623.726625][ T30] audit: type=1800 audit(1787332440.247:1558): pid=13404 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1857" name="memory_backed" dev="configfs" ino=64230 res=0 errno=0 [ 623.796039][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.154735][T13419] netlink: 'syz.6.1860': attribute type 2 has an invalid length. [ 624.276042][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.504430][ T5730] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 624.555302][ T7431] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 624.621129][T12499] usbhid 5-1:0.0: can't add hid device: -71 [ 624.647206][T12499] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 624.682148][ T5730] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 624.699565][T12499] usb 5-1: USB disconnect, device number 47 [ 624.717067][ T5730] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.736059][ T7431] usb 3-1: Using ep0 maxpacket: 16 [ 624.763485][ T7431] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 624.792244][ T7431] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 624.809594][ T7431] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 7303, setting to 64 [ 624.831278][ T7431] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.849899][ T7431] usb 3-1: Product: syz [ 624.859618][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.863575][ T5730] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.876113][ T5730] usb 8-1: Product: syz [ 624.881489][ T5730] usb 8-1: Manufacturer: syz [ 624.886534][ T5730] usb 8-1: SerialNumber: syz [ 624.891375][ T7431] usb 3-1: Manufacturer: syz [ 624.893145][ T5730] usb 8-1: config 0 descriptor?? [ 624.907387][ T5730] pegasus_notetaker 8-1:0.0: Invalid number of endpoints [ 624.915109][ T5730] pegasus_notetaker 8-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 624.926649][ T7431] usb 3-1: SerialNumber: syz [ 624.947582][ T7431] usb 3-1: config 0 descriptor?? [ 624.978217][ T7431] em28xx 3-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 625.289151][T13426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.299818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.570139][ T7431] usb 8-1: USB disconnect, device number 8 [ 625.629561][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 625.629575][ T30] audit: type=1400 audit(1787332442.137:1564): avc: denied { write } for pid=13460 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.726817][ T4915] Bluetooth: hci3: command 0x0c1a tx timeout [ 625.874865][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.618892][ T5730] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 626.836463][ T5730] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 626.877035][ T5730] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 626.893849][ T5730] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 626.907844][ T5730] usb 7-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 626.936541][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.947360][ T5730] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 626.967434][ T5730] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 626.980706][ T5730] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 626.992509][ T5730] usb 7-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 627.005436][ T5730] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 627.316899][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.361527][ T5730] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.401815][ T5730] usb 7-1: Product: syz [ 627.420271][ T5730] usb 7-1: Manufacturer: syz [ 627.461194][ T5730] usb 7-1: SerialNumber: syz [ 627.510133][ T5730] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 627.567479][ T5730] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 627.640509][ T5730] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 627.707718][T13471] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 627.782064][T13491] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers [ 627.797974][T13248] Bluetooth: hci3: command 0x0c1a tx timeout [ 627.837657][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.857569][ T29] usb 3-1: USB disconnect, device number 56 [ 627.917772][ T5730] usb 7-1: USB disconnect, device number 7 [ 627.968624][ T7431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.438644][ T5730] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 628.527668][ T5730] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 628.569291][ T5730] ti_usb_3410_5052 7-1:2.0: device disconnected [ 628.717273][ T30] audit: type=1400 audit(1787332445.237:1565): avc: denied { setopt } for pid=13505 comm="syz.7.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 628.786465][ T30] audit: type=1400 audit(1787332445.257:1566): avc: denied { getopt } for pid=13505 comm="syz.7.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 628.994443][ T29] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 629.004903][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.054231][ T5730] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 629.080273][ T24] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:0: No space for directory leaf checksum. Please run e2fsck -D. [ 629.112305][ T24] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm kworker/1:0: checksumming directory block 0 [ 629.138868][ T24] usb 4-1: loading /lib/firmware/updates/syzkaller/htc_9271.fw failed with error -74 [ 629.154414][ T29] usb 8-1: device descriptor read/64, error -71 [ 629.156241][T13521] random: crng reseeded on system resumption [ 629.160884][ T30] audit: type=1400 audit(1787332445.677:1567): avc: denied { write } for pid=13518 comm="syz.4.1887" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 629.199298][ T24] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:0: No space for directory leaf checksum. Please run e2fsck -D. [ 629.250095][ T5730] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 629.266576][ T24] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm kworker/1:0: checksumming directory block 0 [ 629.309668][ T5730] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.338145][ T24] usb 4-1: loading /lib/firmware/updates/htc_9271.fw failed with error -74 [ 629.356128][ T5730] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.369525][ T5730] usb 7-1: Product: syz [ 629.373834][ T24] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:0: No space for directory leaf checksum. Please run e2fsck -D. [ 629.390763][ T5730] usb 7-1: Manufacturer: syz [ 629.398056][ T5730] usb 7-1: SerialNumber: syz [ 629.407416][ T5730] usb 7-1: config 0 descriptor?? [ 629.412868][ T24] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm kworker/1:0: checksumming directory block 0 [ 629.425197][ T29] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 629.435849][ T5730] pegasus_notetaker 7-1:0.0: Invalid number of endpoints [ 629.444669][ T5730] pegasus_notetaker 7-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 629.454813][ T24] usb 4-1: loading /lib/firmware/syzkaller/htc_9271.fw failed with error -74 [ 629.468651][ T24] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:0: No space for directory leaf checksum. Please run e2fsck -D. [ 629.484604][ T24] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm kworker/1:0: checksumming directory block 0 [ 629.499665][ T24] usb 4-1: loading /lib/firmware/htc_9271.fw failed with error -74 [ 629.510960][ T24] usb 4-1: Direct firmware load for htc_9271.fw failed with error -74 [ 629.521360][ T24] usb 4-1: Falling back to sysfs fallback for: htc_9271.fw [ 629.564217][ T29] usb 8-1: device descriptor read/64, error -71 [ 629.674564][ T29] usb usb8-port1: attempt power cycle [ 629.733529][ T5730] usb 7-1: USB disconnect, device number 8 [ 630.035485][ T29] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 630.094834][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.126321][ T29] usb 8-1: device descriptor read/8, error -71 [ 630.180395][T13534] netlink: 'syz.4.1888': attribute type 2 has an invalid length. [ 630.355111][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.364967][ T29] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 630.428319][ T29] usb 8-1: device descriptor read/8, error -71 [ 630.572623][ T29] usb usb8-port1: unable to enumerate USB device [ 630.811503][ T30] audit: type=1400 audit(1787332447.317:1568): avc: denied { ioctl } for pid=13539 comm="syz.6.1889" path="socket:[69005]" dev="sockfs" ino=69005 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 631.065918][ T30] audit: type=1400 audit(1787332447.317:1569): avc: denied { write } for pid=13539 comm="syz.6.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 631.155275][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.210181][T13545] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1890'. [ 631.284983][T13547] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1890'. [ 631.355193][T13545] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1890'. [ 631.926991][T13573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 631.983356][T13572] veth0_to_batadv: default FDB implementation only supports local addresses [ 631.994197][ T5730] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 632.049130][T13575] netlink: 'syz.7.1901': attribute type 2 has an invalid length. [ 632.164922][ T5730] usb 5-1: Invalid ep0 maxpacket: 64 [ 632.204408][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.334217][ T5730] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 632.604949][ T5730] usb 5-1: Invalid ep0 maxpacket: 64 [ 632.630984][ T5730] usb usb5-port1: attempt power cycle [ 632.724201][ T29] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 632.904715][ T29] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 632.944362][ T29] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 632.977279][ T29] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 632.995416][ T5730] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 633.017188][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.044736][ T5730] usb 5-1: Invalid ep0 maxpacket: 64 [ 633.064014][T13586] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 633.102557][ T29] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 633.128343][ T29] usb 7-1: invalid MIDI in EP 0 [ 633.194262][ T5730] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 633.234457][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.249873][ T5730] usb 5-1: Invalid ep0 maxpacket: 64 [ 633.281620][ T5730] usb usb5-port1: unable to enumerate USB device [ 633.302637][T13586] FAULT_INJECTION: forcing a failure. [ 633.302637][T13586] name failslab, interval 1, probability 0, space 0, times 0 [ 633.315785][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 633.364433][T13586] CPU: 0 UID: 0 PID: 13586 Comm: syz.6.1904 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.364461][T13586] Tainted: [L]=SOFTLOCKUP [ 633.364468][T13586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 633.364478][T13586] Call Trace: [ 633.364485][T13586] [ 633.364492][T13586] dump_stack_lvl+0x100/0x190 [ 633.364520][T13586] should_fail_ex.cold+0x5/0xa [ 633.364544][T13586] should_failslab+0xc2/0x120 [ 633.364570][T13586] __kmalloc_noprof+0xfc/0x820 [ 633.364597][T13586] ? tomoyo_encode2+0xfb/0x3c0 [ 633.364630][T13586] tomoyo_encode2+0xfb/0x3c0 [ 633.364664][T13586] tomoyo_encode+0x29/0x50 [ 633.364691][T13586] tomoyo_realpath_from_path+0x18c/0x690 [ 633.364725][T13586] tomoyo_check_open_permission+0x2af/0x3c0 [ 633.364752][T13586] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 633.364786][T13586] ? hook_file_open+0x24f/0x8f0 [ 633.364825][T13586] ? path_get+0x61/0x80 [ 633.364846][T13586] tomoyo_file_open+0x6b/0x90 [ 633.364868][T13586] security_file_open+0xb5/0x1e0 [ 633.364886][T13586] do_dentry_open+0x588/0x14d0 [ 633.364917][T13586] vfs_open+0x82/0x3f0 [ 633.364938][T13586] path_openat+0x19fa/0x2440 [ 633.364966][T13586] ? __pfx_path_openat+0x10/0x10 [ 633.364997][T13586] do_file_open+0x20e/0x430 [ 633.365023][T13586] ? __pfx_do_file_open+0x10/0x10 [ 633.365065][T13586] ? _raw_spin_unlock+0x28/0x50 [ 633.365092][T13586] ? alloc_fd+0x471/0x7a0 [ 633.365126][T13586] do_sys_openat2+0x10f/0x1e0 [ 633.365143][T13586] ? __pfx_do_sys_openat2+0x10/0x10 [ 633.365162][T13586] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 633.365183][T13586] ? __fget_files+0x21f/0x3d0 [ 633.365211][T13586] __x64_sys_openat+0x12d/0x210 [ 633.365230][T13586] ? __pfx___x64_sys_openat+0x10/0x10 [ 633.365246][T13586] ? ksys_write+0x1ac/0x250 [ 633.365277][T13586] do_syscall_64+0x123/0x790 [ 633.365299][T13586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.365317][T13586] RIP: 0033:0x7f581b75e90e [ 633.365333][T13586] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 633.365349][T13586] RSP: 002b:00007f581c5bfb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 633.365372][T13586] RAX: ffffffffffffffda RBX: 00007f581c5c06c0 RCX: 00007f581b75e90e [ 633.365384][T13586] RDX: 0000000000189e02 RSI: 00007f581c5bfc00 RDI: ffffffffffffff9c [ 633.365396][T13586] RBP: 00007f581c5bfc00 R08: 0000000000000000 R09: 0000000000000000 [ 633.365406][T13586] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 633.365417][T13586] R13: 00007f581ba26038 R14: 00007f581ba25fa0 R15: 00007ffd4c8d1348 [ 633.365442][T13586] [ 633.369652][T13586] ERROR: Out of memory at tomoyo_realpath_from_path. [ 633.640569][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.864235][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 633.927879][ T9] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 633.979490][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.996295][ T9] usb 3-1: Product: syz [ 634.007871][ T9] usb 3-1: Manufacturer: syz [ 634.026198][ T9] usb 3-1: SerialNumber: syz [ 634.083583][ T29] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 634.168518][ T30] audit: type=1400 audit(1787332450.677:1570): avc: denied { cmd } for pid=13605 comm="syz.7.1910" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 634.253150][ T30] audit: type=1400 audit(1787332450.747:1571): avc: denied { ioctl } for pid=13605 comm="syz.7.1910" path="/53/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x7507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 634.288680][ T7431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.320283][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 634.366252][ T9] usb 3-1: USB disconnect, device number 57 [ 634.484562][ T29] usb 7-1: USB disconnect, device number 9 [ 634.565279][ T30] audit: type=1400 audit(1787332451.077:1572): avc: denied { ioctl } for pid=13612 comm="syz.7.1911" path="/dev/usbmon9" dev="devtmpfs" ino=747 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 634.644431][ T30] audit: type=1400 audit(1787332451.087:1573): avc: denied { connect } for pid=13612 comm="syz.7.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 634.834479][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.961793][T13621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 635.657796][ T7431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.801650][ T30] audit: type=1400 audit(1787332452.317:1574): avc: denied { write } for pid=13615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.008641][T13655] netlink: 'syz.2.1921': attribute type 37 has an invalid length. [ 636.063966][ T30] audit: type=1400 audit(1787332452.577:1575): avc: denied { write } for pid=13654 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.227152][ T7431] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 636.395567][ T7431] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 636.439885][ T7431] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 636.502940][ T7431] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.542746][ T7431] usb 8-1: Product: syz [ 636.569592][ T7431] usb 8-1: Manufacturer: syz [ 636.591500][ T30] audit: type=1400 audit(1787332453.097:1576): avc: denied { read } for pid=13679 comm="syz.3.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 636.600588][ T7431] usb 8-1: SerialNumber: syz [ 636.674358][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.682495][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.872516][ T7431] usb 8-1: Cannot retrieve CPort count: 0 [ 636.891969][ T7431] usb 8-1: Cannot retrieve CPort count: -5 [ 636.910015][ T7431] es2_ap_driver 8-1:1.0: probe with driver es2_ap_driver failed with error -5 [ 636.929619][ T30] audit: type=1400 audit(1787332453.447:1577): avc: denied { write } for pid=13663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.139377][ T30] audit: type=1400 audit(1787332453.657:1578): avc: denied { write } for pid=13701 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.379469][ T30] audit: type=1400 audit(1787332453.797:1579): avc: denied { write } for pid=13700 comm="syz.4.1936" name="functions" dev="configfs" ino=10144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 637.404678][ T30] audit: type=1400 audit(1787332453.807:1580): avc: denied { write } for pid=13700 comm="syz.4.1936" name="c.1" dev="configfs" ino=34700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 637.602130][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.739292][ T30] audit: type=1400 audit(1787332453.817:1581): avc: denied { create } for pid=13700 comm="syz.4.1936" name="midi.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 637.740315][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.329748][ T5730] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 638.348457][ T30] audit: type=1400 audit(1787332453.817:1582): avc: denied { write } for pid=13700 comm="syz.4.1936" name="c.1" dev="configfs" ino=34700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 638.495931][ T5730] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 638.536136][T13724] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 0, 2, 4) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 638.545930][ T5730] usb 1-1: Dual-Role OTG device on HNP port [ 638.570486][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.649050][ T5730] gspca_main: spca501-2.14.0 probing 0000:0000 [ 638.681996][ T5730] gspca_spca501: reg write: error -32 [ 638.712579][ T5730] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 638.744248][ T5730] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 638.754421][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.791402][ T5730] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 639.106678][ T30] audit: type=1400 audit(1787332455.627:1583): avc: denied { write } for pid=13717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.237347][T13757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1955'. [ 639.259035][T13759] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1956'. [ 639.293858][ T30] audit: type=1400 audit(1787332455.807:1584): avc: denied { write } for pid=13760 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.319162][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.327557][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.382634][ T9] usb 8-1: USB disconnect, device number 13 [ 639.861781][ T7431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.004603][ T5713] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 640.204507][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 640.253796][ T5713] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 640.457506][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.547092][ T5713] usb 3-1: Product: syz [ 640.585228][ T5713] usb 3-1: Manufacturer: syz [ 640.656563][ T5713] usb 3-1: SerialNumber: syz [ 640.872655][ T5713] r8152-cfgselector 3-1: Unknown version 0x0000 [ 640.911511][ T5713] r8152-cfgselector 3-1: config 0 descriptor?? [ 640.924813][ T7431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.971047][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 641.021242][T13789] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1969'. [ 641.089684][T13789] openvswitch: netlink: Flow key attr not present in new flow. [ 641.131536][ T30] audit: type=1400 audit(1787332457.647:1585): avc: denied { create } for pid=13791 comm="syz.7.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 641.152532][ T30] audit: type=1400 audit(1787332457.647:1586): avc: denied { write } for pid=13791 comm="syz.7.1968" path="socket:[70180]" dev="sockfs" ino=70180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 641.630763][ T5730] r8152-cfgselector 3-1: USB disconnect, device number 58 [ 641.696454][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 641.831968][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 641.848437][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.866924][ T9] usb 5-1: Product: syz [ 641.875903][ T9] usb 5-1: Manufacturer: syz [ 641.890287][ T9] usb 5-1: SerialNumber: syz [ 641.901757][ T9] usb 5-1: config 0 descriptor?? [ 642.273626][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.355485][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.408150][T13805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.421642][T13805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.431299][T13805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.447476][T13805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.465190][T13805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.477545][T13805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.719846][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 643.528383][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 643.692998][ T9] usb 5-1: USB disconnect, device number 52 [ 646.088905][ T5730] net_ratelimit: 766 callbacks suppressed [ 646.088924][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.140935][ T30] audit: type=1400 audit(1787332462.357:1587): avc: denied { watch watch_reads } for pid=13848 comm="syz.2.1989" path=2F70726F632F313339312F7461736B2F31333932202864656C6574656429 dev="proc" ino=69624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 646.366220][ T5894] block nbd0: Possible stuck request ffff8880275b7000: control (read@0,1024B). Runtime 120 seconds [ 646.377056][ T5894] block nbd0: Possible stuck request ffff8880275b71c0: control (read@1024,1024B). Runtime 120 seconds [ 646.389497][ T5894] block nbd0: Possible stuck request ffff8880275b7380: control (read@2048,1024B). Runtime 120 seconds [ 646.400742][ T5894] block nbd0: Possible stuck request ffff8880275b7540: control (read@3072,1024B). Runtime 120 seconds [ 646.837196][ T6926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.124566][ T30] audit: type=1400 audit(1787332463.597:1588): avc: denied { ioctl } for pid=13864 comm="syz.2.1993" path="socket:[70406]" dev="sockfs" ino=70406 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 648.081561][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.204430][ T9] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 648.294233][ T6926] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 648.424469][T13877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.776053][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.853108][ T30] audit: type=1400 audit(1787332465.347:1589): avc: denied { listen } for pid=13890 comm="syz.3.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 648.872997][ T6926] usb 8-1: Using ep0 maxpacket: 8 [ 648.951930][T13877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.041859][ T6926] usb 8-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 649.055114][T13895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2003'. [ 649.201399][ T30] audit: type=1400 audit(1787332465.347:1590): avc: denied { bind } for pid=13890 comm="syz.3.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 649.295951][ T6926] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.321083][ T5730] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 649.324411][T13877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.421525][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.447895][ T6926] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 649.493863][T13877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.668666][ T6926] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.720571][ T6926] usb 8-1: Product: syz [ 649.790003][ T6926] usb 8-1: Manufacturer: syz [ 649.827633][ T6926] usb 8-1: SerialNumber: syz [ 649.889146][ T6926] usb 8-1: config 0 descriptor?? [ 649.894998][ T7431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.056108][ T5730] usb 7-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 650.085119][ T5730] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.105563][ T5730] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 650.128231][ T5730] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 650.157707][ T5730] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.157893][ T6926] usb 8-1: USB disconnect, device number 14 [ 650.174234][ T5730] usb 7-1: Product: syz [ 650.178593][ T5730] usb 7-1: Manufacturer: syz [ 650.188699][ T5730] usb 7-1: SerialNumber: syz [ 650.438180][ T6926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.477137][T13913] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 650.486854][T13887] ushc 7-1:1.0: probe with driver ushc failed with error -71 [ 650.487027][ T6926] usb 7-1: USB disconnect, device number 10 [ 650.569846][ T30] audit: type=1400 audit(1787332467.087:1591): avc: denied { write } for pid=13915 comm="syz.4.2013" name="os_desc" dev="configfs" ino=10147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 650.605072][ T30] audit: type=1400 audit(1787332467.087:1592): avc: denied { write } for pid=13915 comm="syz.4.2013" name="os_desc" dev="configfs" ino=10147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 651.383622][T13927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2017'. [ 651.472389][ T30] audit: type=1400 audit(1787332467.897:1593): avc: denied { wake_alarm } for pid=13923 comm="syz.4.2017" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 651.568308][ T6926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.580118][T13930] misc userio: Begin command sent, but we're already running [ 651.589773][ T30] audit: type=1400 audit(1787332467.947:1594): avc: denied { bind } for pid=13919 comm="syz.3.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 651.700655][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 651.721757][ T9] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 651.745513][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 651.757380][ T9] usb 3-1: can't read configurations, error -71 [ 652.659790][ T6926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.835453][ T30] audit: type=1400 audit(1787332469.347:1595): avc: denied { write } for pid=13942 comm="syz.7.2024" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 652.914371][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.919469][ T30] audit: type=1326 audit(1787332469.417:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13947 comm="syz.7.2026" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d559e0d9 code=0x7ffc0000 [ 652.967482][ T30] audit: type=1326 audit(1787332469.417:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13947 comm="syz.7.2026" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d559e0d9 code=0x7ffc0000 [ 653.051072][ T30] audit: type=1326 audit(1787332469.427:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13947 comm="syz.7.2026" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d559e0d9 code=0x7ffc0000 [ 653.097216][ T30] audit: type=1326 audit(1787332469.427:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13947 comm="syz.7.2026" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fb4d559e0d9 code=0x7ffc0000 [ 653.131238][ T30] audit: type=1326 audit(1787332469.427:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13947 comm="syz.7.2026" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d559e0d9 code=0x7ffc0000 [ 653.163598][ T30] audit: type=1326 audit(1787332469.427:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13947 comm="syz.7.2026" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d559e0d9 code=0x7ffc0000 [ 653.196447][ T30] audit: type=1326 audit(1787332469.447:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13947 comm="syz.7.2026" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d559e0d9 code=0x7ffc0000 [ 653.714460][ T6926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.756568][ T7431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.314634][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.346758][T13968] bond0: (slave bond_slave_1): Releasing backup interface [ 656.111690][T13977] program syz.6.2036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.121528][T13977] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 656.543553][ T7431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.551712][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.958989][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 656.959007][ T30] audit: type=1400 audit(1787332473.467:1615): avc: denied { accept } for pid=13980 comm="syz.6.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 657.916306][ T7431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.100774][T14011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2047'. [ 658.217142][ T7431] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 658.405563][ T7431] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 658.501672][ T30] audit: type=1400 audit(1787332475.007:1616): avc: denied { connect } for pid=14020 comm="syz.7.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 658.912701][ T7431] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.922012][ T7431] usb 7-1: Product: syz [ 658.926363][ T7431] usb 7-1: Manufacturer: syz [ 658.930987][ T7431] usb 7-1: SerialNumber: syz [ 658.952066][ T7431] usb 7-1: USB2VGA dongle found at address 11 [ 658.983496][ T7431] usb 7-1: Allocated 8 output buffers [ 659.926855][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.994887][ T30] audit: type=1400 audit(1787332476.507:1617): avc: denied { bind } for pid=14032 comm="syz.4.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 660.143962][T14039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2056'. [ 660.176852][ T7431] usb 7-1: Failed to early initialize device [ 660.244008][ T7431] usb 7-1: USB disconnect, device number 11 [ 660.555237][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.048261][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.249075][ T30] audit: type=1400 audit(1787332477.767:1618): avc: denied { write } for pid=14049 comm="syz.7.2063" name="functions" dev="configfs" ino=10144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 661.793032][ T30] audit: type=1400 audit(1787332477.827:1619): avc: denied { write } for pid=14049 comm="syz.7.2063" name="target" dev="configfs" ino=3532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 661.815849][T14062] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2065'. [ 661.824883][T14062] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2065'. [ 661.834498][ T30] audit: type=1400 audit(1787332478.237:1620): avc: denied { write } for pid=14049 comm="syz.7.2063" name="usb_gadget" dev="configfs" ino=71148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 661.876098][ T30] audit: type=1400 audit(1787332478.307:1621): avc: denied { setopt } for pid=14059 comm="syz.6.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 661.937893][ T30] audit: type=1400 audit(1787332478.377:1622): avc: denied { write } for pid=14049 comm="syz.7.2063" name="naa.1234567890abcdef" dev="configfs" ino=72066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 662.070892][T14068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.114415][ T7431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.255482][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.248754][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.297875][ T6926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.920729][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.214229][ T7431] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 665.305892][T14107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2085'. [ 665.325280][ T6926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.465359][ T7431] usb 3-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 665.485288][ T7431] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.517693][ T7431] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.593459][ T7431] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 665.741282][ T7431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.952146][ T7431] usb 3-1: config 0 descriptor?? [ 666.046842][T14118] loop5: detected capacity change from 0 to 7 [ 666.090624][T14118] Dev loop5: unable to read RDB block 7 [ 666.096697][T14118] loop5: AHDI p1 p4 [ 666.100973][T14118] loop5: partition table partially beyond EOD, truncated [ 666.118566][T14118] loop5: p1 start 1732098522 is beyond EOD, truncated [ 666.303564][T14126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.312273][T14126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.329497][T14126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.295062][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.304271][T14126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.750952][ T5730] usb 3-1: USB disconnect, device number 61 [ 668.389249][ T7431] net_ratelimit: 765 callbacks suppressed [ 668.389268][ T7431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.968426][ T7431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.435015][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.568226][ T30] audit: type=1400 audit(1787332487.087:1623): avc: denied { cmd } for pid=14174 comm="iou-wrk-14176" path="socket:[71521]" dev="sockfs" ino=71521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 671.211305][ T7431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.198905][ T30] audit: type=1400 audit(1787332488.277:1624): avc: denied { bind } for pid=14193 comm="syz.2.2111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 672.276129][ T7431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.317040][ T6926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.474681][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.354703][ T6926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.514654][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.857335][ T7431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.112384][T14228] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 676.120454][T14228] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 676.434425][ T31] INFO: task syz.1.1465:11587 blocked in I/O wait for more than 143 seconds. [ 676.443775][ T5894] block nbd0: Possible stuck request ffff8880275b7000: control (read@0,1024B). Runtime 150 seconds [ 676.471150][ T5894] block nbd0: Possible stuck request ffff8880275b71c0: control (read@1024,1024B). Runtime 150 seconds [ 676.514355][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.527439][ T5894] block nbd0: Possible stuck request ffff8880275b7380: control (read@2048,1024B). Runtime 150 seconds [ 676.567672][ T5894] block nbd0: Possible stuck request ffff8880275b7540: control (read@3072,1024B). Runtime 150 seconds [ 677.648980][ T7431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.211934][ T31] Tainted: G L syzkaller #0 [ 678.493408][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 678.502181][ T31] task:syz.1.1465 state:D stack:26048 pid:11587 tgid:11586 ppid:5593 task_flags:0x400040 flags:0x00080002 [ 678.514222][ T31] Call Trace: [ 678.517539][ T31] [ 678.520494][ T31] __schedule+0x1259/0x6920 [ 678.525102][ T31] ? __pfx___schedule+0x10/0x10 [ 678.530004][ T31] ? find_held_lock+0x2b/0x80 [ 678.534750][ T31] ? schedule+0x225/0x2c0 [ 678.540350][ T31] schedule+0xdd/0x2c0 [ 678.544538][ T31] io_schedule+0x8a/0xf0 [ 678.548816][ T31] folio_wait_bit_common+0x3c0/0xac0 [ 678.554165][ T31] ? folio_wait_bit_common+0x2a0/0xac0 [ 678.559664][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 678.565571][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 678.571153][ T31] ? __pfx___might_resched+0x10/0x10 [ 678.576521][ T31] migrate_pages_batch+0x81d/0x46f0 [ 678.581750][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 678.587217][ T31] ? __pfx_compaction_free+0x10/0x10 [ 678.592547][ T31] ? __pfx_migrate_pages_batch+0x10/0x10 [ 678.598350][ T31] ? lru_gen_add_folio+0x20f/0x1490 [ 678.603594][ T31] ? __asan_memset+0x23/0x50 [ 678.608261][ T31] ? folios_put_refs+0x58a/0xaa0 [ 678.613228][ T31] ? __pfx_folios_put_refs+0x10/0x10 [ 678.618601][ T31] migrate_pages_sync+0x4db/0x880 [ 678.623648][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 678.629114][ T31] ? __pfx_compaction_free+0x10/0x10 [ 678.634461][ T31] ? __pfx_migrate_pages_sync+0x10/0x10 [ 678.641294][ T31] migrate_pages+0x1a83/0x2850 [ 678.646371][ T31] ? isolate_migratepages_block+0xd74/0x6200 [ 678.652403][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 678.657891][ T31] ? __pfx_compaction_free+0x10/0x10 [ 678.663311][ T31] ? __pfx_migrate_pages+0x10/0x10 [ 678.669009][ T31] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 678.685827][ T31] ? __nr_to_section+0xaa/0x100 [ 678.686094][ T7431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.691294][ T31] ? pfn_to_online_page+0x178/0x4c0 [ 678.709856][ T31] compact_zone+0x2643/0x4640 [ 678.714857][ T31] ? __entry_text_end+0x8b9d/0x102039 [ 678.720302][ T31] ? __pfx_compact_zone+0x10/0x10 [ 678.725496][ T31] ? __flush_work+0xa38/0xcb0 [ 678.730277][ T31] ? __flush_work+0xa38/0xcb0 [ 678.735140][ T31] compact_node+0x17f/0x2c0 [ 678.739760][ T31] ? __pfx_compact_node+0x10/0x10 [ 678.745923][ T31] ? __lru_add_drain_all+0x4a6/0x820 [ 678.751319][ T31] sysctl_compaction_handler+0x141/0x210 [ 678.757085][ T31] proc_sys_call_handler+0x47f/0x5a0 [ 678.762478][ T31] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 678.868704][ T31] vfs_write+0x6af/0x1050 [ 678.873732][ T31] ? __pfx_proc_sys_write+0x10/0x10 [ 678.879473][ T31] ? __pfx_vfs_write+0x10/0x10 [ 678.884949][ T31] ? find_held_lock+0x2b/0x80 [ 678.890060][ T31] ksys_write+0x12a/0x250 [ 678.898271][ T31] ? __pfx_ksys_write+0x10/0x10 [ 678.903541][ T31] do_syscall_64+0x123/0x790 [ 678.910138][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.918562][ T31] RIP: 0033:0x7f123dd9e0d9 [ 678.923167][ T31] RSP: 002b:00007f123ecec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 678.934487][ T31] RAX: ffffffffffffffda RBX: 00007f123e025fa0 RCX: 00007f123dd9e0d9 [ 678.942565][ T31] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 678.960192][ T31] RBP: 00007f123de35024 R08: 0000000000000000 R09: 0000000000000000 [ 678.971916][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.989055][ T31] R13: 00007f123e026038 R14: 00007f123e025fa0 R15: 00007fff462c06a8 [ 678.999107][ T31] [ 679.002568][ T31] [ 679.002568][ T31] Showing all locks held in the system: [ 679.064091][ T31] locks held by kworker/1:0/24: 3, on CPU#1: [ 679.071273][ T31] #0: ffff88801c04f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 679.206545][ T31] #1: ffffc900001e7d08 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 679.233097][ T31] #2: ffffffff8ec8d9e8 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_lock_wait+0xc6/0x1a0 [ 679.257011][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 679.271546][ T31] #0: ffffffff8ede9d40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 679.281937][ T31] locks held by kworker/u9:0/51: 2, on CPU#1: [ 679.288294][ T31] #0: ffff888021f62940 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 679.299203][ T31] #1: ffffc90000bc7d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 679.312084][ T31] locks held by kworker/u8:7/656: 5, last CPU#0: [ 679.318735][ T31] #0: ffff8880b843b960 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 679.328850][ T31] #1: ffffc900038bfd08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 679.341035][ T31] #2: ffff8880b8426298 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x124/0x1d0 [ 679.350394][ T31] #3: ffffffff9bb17898 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x144/0x4b0 [ 679.361839][ T31] #4: ffff8880b8424568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e0c/0x6920 [ 679.370783][ T31] locks held by klogd/4953: 1, last CPU#0: [ 679.376634][ T31] #0: ffff8880b843b960 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 679.386657][ T31] locks held by getty/5354: 2, on CPU#0: [ 679.392310][ T31] #0: ffff8880374750a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 679.402174][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 679.412399][ T31] locks held by kworker/0:3/5699: 5, on CPU#0: [ 679.418638][ T31] #0: ffff88802429cd40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 679.429503][ T31] #1: ffffc9000403fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 679.440840][ T31] #2: ffff888029f8c1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 679.449850][ T31] #3: ffff88807f7571d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 679.460151][ T31] #4: ffff88807a7f91a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 679.470900][ T31] locks held by udevd/6239: 1, on CPU#1: [ 679.476977][ T31] #0: ffff888022735350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 679.486388][ T31] locks held by syz.1.1465/11587: 2, on CPU#0: [ 679.492547][ T31] #0: ffff888075fb0ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 679.501628][ T31] #1: ffff888066c84460 (sb_writers#3){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 679.510636][ T31] locks held by syz.4.2123/14226: 4, on CPU#1: [ 679.516876][ T31] #0: ffffffff90b9a9c0 (register_mutex#4){+.+.}-{4:4}, at: odev_release+0x44/0x70 [ 679.526293][ T31] #1: ffff88802dc302b0 (&mdev->open_mutex){+.+.}-{4:4}, at: snd_seq_oss_midi_close+0xb6/0x4b0 [ 679.536724][ T31] #2: ffff888054cd24e0 (&grp->list_mutex){++++}-{4:4}, at: snd_seq_port_disconnect+0x4e5/0x610 [ 679.547239][ T31] #3: ffffffff8edf57e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 679.557491][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.568439][ T31] locks held by syz.3.2124/14234: 1, on CPU#0: [ 679.574713][ T31] #0: ffffffff8edf57e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 679.584896][ T31] [ 679.587320][ T31] ============================================= [ 679.587320][ T31] [ 679.598865][ T31] NMI backtrace for cpu 1 [ 679.598882][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 679.598910][ T31] Tainted: [L]=SOFTLOCKUP [ 679.598916][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 679.598926][ T31] Call Trace: [ 679.598933][ T31] [ 679.598939][ T31] dump_stack_lvl+0x100/0x190 [ 679.598969][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 679.598994][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 679.599021][ T31] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 679.599048][ T31] sys_info+0x141/0x190 [ 679.599070][ T31] watchdog+0xcb1/0x1030 [ 679.599100][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 679.599127][ T31] ? __pfx_watchdog+0x10/0x10 [ 679.599152][ T31] ? __kthread_parkme+0x18f/0x230 [ 679.599173][ T31] ? kthread+0x13a/0x450 [ 679.599191][ T31] ? __pfx_watchdog+0x10/0x10 [ 679.599214][ T31] kthread+0x373/0x450 [ 679.599234][ T31] ? __pfx_kthread+0x10/0x10 [ 679.599255][ T31] ret_from_fork+0x730/0xd60 [ 679.599282][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 679.599309][ T31] ? __switch_to+0x800/0x10f0 [ 679.599328][ T31] ? __pfx_kthread+0x10/0x10 [ 679.599349][ T31] ret_from_fork_asm+0x1a/0x30 [ 679.599377][ T31] [ 679.599431][ T31] Sending NMI from CPU 1 to CPUs 0: [ 679.731906][ C0] NMI backtrace for cpu 0 [ 679.731927][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 679.731947][ C0] Tainted: [L]=SOFTLOCKUP [ 679.731952][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 679.731961][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 679.731980][ C0] Code: f8 a2 02 e9 43 4f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 b0 24 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 679.731994][ C0] RSP: 0018:ffffffff8ea07cf0 EFLAGS: 00000246 [ 679.732007][ C0] RAX: 00000000023c95eb RBX: ffffffff8ea91500 RCX: ffffffff8bc6f115 [ 679.732019][ C0] RDX: 0000000000000001 RSI: ffffffff8e3d3fc0 RDI: ffffffff8c615f80 [ 679.732028][ C0] RBP: fffffbfff1d522a0 R08: 0000000000000001 R09: ffffed101708678d [ 679.732037][ C0] R10: ffff8880b8433c6b R11: 0000000000000001 R12: 0000000000000000 [ 679.732046][ C0] R13: 0000000000000000 R14: 1ffffffff1d40fa2 R15: dffffc0000000000 [ 679.732056][ C0] FS: 0000000000000000(0000) GS:ffff888123ba2000(0000) knlGS:0000000000000000 [ 679.732069][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 679.732079][ C0] CR2: 00007fb6b87ef2f8 CR3: 0000000024395000 CR4: 00000000003526f0 [ 679.732088][ C0] Call Trace: [ 679.732093][ C0] [ 679.732099][ C0] default_idle+0x9/0x10 [ 679.732114][ C0] default_idle_call+0x6c/0xb0 [ 679.732129][ C0] do_idle+0x3ae/0x5b0 [ 679.732145][ C0] ? __pfx_do_idle+0x10/0x10 [ 679.732163][ C0] cpu_startup_entry+0x4f/0x60 [ 679.732177][ C0] rest_init+0x2d3/0x2e0 [ 679.732192][ C0] ? __pfx_rest_init+0x10/0x10 [ 679.732208][ C0] ? __pfx_acpi_read_bit_register+0x10/0x10 [ 679.732229][ C0] ? __pfx_kernel_init+0x10/0x10 [ 679.732245][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 679.732263][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 679.732281][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 679.732298][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 679.732315][ C0] start_kernel+0x48e/0x490 [ 679.732330][ C0] x86_64_start_reservations+0x24/0x30 [ 679.732345][ C0] x86_64_start_kernel+0x12b/0x130 [ 679.732361][ C0] common_startup_64+0x13e/0x158 [ 679.732380][ C0] [ 679.765071][ T7431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.774032][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 679.774052][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 679.774076][ T31] Tainted: [L]=SOFTLOCKUP [ 679.774083][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 679.774093][ T31] Call Trace: [ 679.774099][ T31] [ 679.774106][ T31] dump_stack_lvl+0x100/0x190 [ 679.774133][ T31] vpanic+0x553/0x970 [ 679.774150][ T31] ? __pfx_vpanic+0x10/0x10 [ 679.774168][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 679.774194][ T31] panic+0xd1/0xe0 [ 679.774208][ T31] ? __pfx_panic+0x10/0x10 [ 679.774227][ T31] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 679.774249][ T31] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 679.774271][ T31] ? watchdog.cold+0x1ec/0x234 [ 679.774291][ T31] watchdog.cold+0x1fd/0x234 [ 679.774312][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 679.774337][ T31] ? __pfx_watchdog+0x10/0x10 [ 679.774361][ T31] ? __kthread_parkme+0x18f/0x230 [ 679.774379][ T31] ? kthread+0x13a/0x450 [ 679.774396][ T31] ? __pfx_watchdog+0x10/0x10 [ 679.774422][ T31] kthread+0x373/0x450 [ 679.774440][ T31] ? __pfx_kthread+0x10/0x10 [ 679.774460][ T31] ret_from_fork+0x730/0xd60 [ 679.774484][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 679.774509][ T31] ? __switch_to+0x800/0x10f0 [ 679.774529][ T31] ? __pfx_kthread+0x10/0x10 [ 679.774549][ T31] ret_from_fork_asm+0x1a/0x30 [ 679.774574][ T31] [ 679.787572][ T31] Kernel Offset: disabled