last executing test programs:

2m47.617491642s ago: executing program 3 (id=407):
openat$random(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f0000000600)=@can, 0x80, 0x0, 0x0, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad84", 0x12}, {&(0x7f0000002840)="4d84a2dbc7313ccd6dec12c5fd58faee59308076b2a40e0a734d46f866906c1539249d348659039711f5d1fc7bb0", 0x2e}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda66", 0x3c}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7f", 0x94}], 0x5, &(0x7f00000014c0)}}], 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2m46.935260358s ago: executing program 3 (id=410):
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000000000040a3aaec4c3cb6bff8be01090224000100000800090400800103000100092100001001222100090581034000feabe9"], 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
futex(&(0x7f0000000000)=0xfffffffa, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffe)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000003c0)={@phonet={0x23, 0x34, 0xd, 0x85}, {&(0x7f0000000300)=""/82, 0x52}, &(0x7f0000000380), 0x5}, 0xa0)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x69b, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x4, 0x4, {0x2, @pix_mp={0xd1, 0x3, 0x32314d54, 0x6, 0x8, [{0x40, 0x480}, {0x4, 0x5}, {0xf8cb, 0x5}, {0x4, 0xffff}, {0xc, 0x6}, {0xb2, 0xe7}, {0x8aef, 0x1000}, {0x0, 0x7}], 0x64, 0x4, 0x2, 0x1, 0x1}}, 0x1})
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000240)=0x203, 0x4)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
open$dir(&(0x7f0000000500)='./file0\x00', 0x90600, 0xa5)
syz_io_uring_submit(r3, r4, r5, &(0x7f00000004c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x40, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x1, 0x1, 0x1})
io_uring_enter(r2, 0x1, 0xeed, 0x1, 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r7 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x1013c, 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00')

2m41.448301503s ago: executing program 3 (id=424):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}]}}}]}, 0x48}, 0x9}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103)
renameat2(r1, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000200)='./file1\x00', 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r2=>0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x56633bd1cf1d94b2)
openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
io_submit(r2, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x3, r3, 0x0, 0x0, 0x400a00}])
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000248000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800024000000000080001"], 0xc4}}, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x8000}, 0x4)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x6}, 0x4)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x81}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f000000bc40))
r7 = socket(0x2b, 0x80801, 0x1)
listen(r7, 0x10)
accept4$inet(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

2m40.910535236s ago: executing program 3 (id=427):
r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\v\x00\x00\x00\b', @ANYRES32, @ANYRES32=0x0], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x0, 0x2b, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1f000000", @ANYRES32, @ANYBLOB, @ANYBLOB="00000000010000000000000000"], 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r6], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040)
recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x3}, 0x10)
r8 = socket$tipc(0x1e, 0x2, 0x0)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SCROLLCONSOLE(r9, 0x541c, &(0x7f0000000000))
sendmsg$tipc(r8, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f020})

2m39.651914677s ago: executing program 3 (id=429):
openat$sndseq(0xffffffffffffff9c, 0x0, 0xe2a02)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800)
socket$unix(0x1, 0x1, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
r5 = syz_io_uring_setup(0x2cd0, &(0x7f0000000300)={0x0, 0x825f, 0x2, 0x0, 0x2e2}, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x40)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r6, 0x5603, &(0x7f0000000100))
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2400c044)
io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000001b00)={&(0x7f0000002000)={[{&(0x7f00000006c0)="8b702804fe5dd5c4732455600e4d08b88b6b94f650c613ef9e0790ac058d7f4cb9e85bdcd919f50d96561d439ffca05848ea6afdc3f0504a1f6c0e1e7e440d13b304fad99c7d5f6d76972b06dd0ad01e1e72c141dd91f75b1f90a975dde1ddfe73a63d3fc0738a1424933dad981cd906d65041c25888692ab990266a9891a9621ac260f3e1f4ec495ca1a6637500e76570ec158ab1e399e47e938f646540b389c0110262464211535006859e0a106089e845e2ea45666c4f9f1b7a51565d6961b4a11a6faca86925f83a9c7bc9e4945bcab06a9e81891e36bedfb17b6dee30b42a0179268399af02a0f7682a5f05e3af5283a681004af6bf2debb88437849fd0b204b74d79f0da9bb596925622a885659cda592c0129bfafc253d6568c5fc0305d2b467f7115974fb4aa7b5dde6f8802e807ee127d99f2e8d1ce29e70b64844a651091fb3762db43edaa3f5547a2e5f129403046b72b3e1960da9875d1f78beebfe9c6d5ff69832e4a33b32523d3f09cfbf23c433ebc4ae4a27812472da2133d0d08b98977a1bbd15cc66a5b427b344ef0d5beccb0ccb66416c9567a46fd709df976972ad96393db7941111a3914e85a7134eba7edb59ca204a8773d52d6e759ebaf1f09e424b77a2fb6dfcab5a65e444e1db0d75ff2beeb47c9e664eabb8117968fd481d04b0ae6724ae3291f24f2a33e74be82d6ce7c46aaa18535e1fb6cb77725fd2c32000697e41cdce76a3a4eb46fd02f9a20d2f56173f830ba191b026a895968f602d70b527fce42c68c7c0e222fd0ecabb1999edd97f4fafe1d819e8221237649f51f5520353ca7aa9ec4f732a848c40d8ee7d0ef64d6596b101be6716252442ea48cf0b23eb63ba6c2d9af165953df179c13582135dae0b8b2a320aa8456cf165c33c9e13ac0bcb244cdfa5b2877057d79c8ecda3e6be5e9a04f8ee752ebae5b4a0f392dfb42d03385161c8f10bbb774bbd1bfb26b23b7effc16135c00af74ac1a77c9c036415610592bddbeaa2d7278924e4e700b5620785c5e097906af1092cb4c3b1b8dee2d5c65d220f104ac1986646930887902af4969d2aeb3b540d704c4e721cd4c30408f45428555fc591043929e50a5b35f6d3345d49c0255893fdb4289f7ee9c0f73f99fae77cd1bf3f8e980200dca31314aafb5bc313824a8f77044619c3ed5001f5a040031f105c8a57794ecde830cedc1de2e3e95aa365f953efe68838586f72d7c139681824bbc7e4658633bb205140dc706820a0c419fd3512c33620cccb137be273aa508b172684caf4e1b9aaf63a7c816c9185f6cb9733ce0550bd9857dc02c8b8540b7288331658688299a0893b8a12b1005dc79d691b7dd3eff09e61e48dbc3edb30e4e3df2b268655c6c39498983b26c69eac763b6ea1a4d1faa3776b262f390adf94fc57cc15e82b052e4e369745ad56f1a689bd6f3e9f745aaca8b1de85d512d1fe8a1e7c5b9618a2676c46d93662d9b70051c62f4674a19805c922923d9a418eb2006609ece01753fb883735db420c50d5cef74c8358a077f14155a69d4a76070ade32bcd3fc1a746e05a35015570b8a81703f4d7789a83c39fe8d52b197cf3047a65fab610f4caf67db6b1469816010adcb4b2811d64b6bb8148da994414a539dd2e4a84ebcb11fa01c7af5540c6bdc72c27bc5e6b046f51d7560e468d0efbc0a831c70124b0456fb0dee9d04872f6a3096db1d6f2773a6750433a7a7bda265e2f59ee2dca356035e4c6d7fa7ee39737641d544ee63246962cf6fbce51adc79161cce130b206275e151c5f52b18178ffe4fd20c6d198afab95b517ee8b76647fd6201091c4a8aab0cd827b19fe70ad2ece5c4d023d8322c167ccd4c6bf43ec459e7795f442b6bb25d67d0a8581e31e1f9a31982cea0a1c022de5e0d92fd512cab97675d83265138182c35fc43b825b15b084e7f0b5608ef47621ea7a43dac6b40127478676c84037220d1b1bffb57f498db9413c4008e26605f1b050f50fe31cfed49e33a22a2ee8edcbf78f56764dcae2d49f8fe58709e6fa2121b35671b7c38fd29f514a4a877b3f98353c8422b831203e6fc56aa836cb66dd5bfc66caf4425f87b3093a2d2a407b5e0a40fd85e768fe03aa1a612d422de61c84ff3524ec49aacc69039d01cdf5fad4be1297690d344bd509c185bedfacdcd549ebd8f239a0821663a74efa32b73f4d5642fe9052dd5668d7edd0c4b290cf155e3e07b17ffb6bc00eb66799f05c0af14f8732282db3a95462af416260f29b88dffe162fdc6de416f2f7ae9b5d01e696593aae9ff07b658f695fd0770fde0d9fabbd1569a243b69849a151408604b8e4b450a7de4bcbd1631bafd18f489dc94c30f5bf18a09f4fee58103eb5479ae9794f6471bb1d3f0c739cd3bda9aa42fd4834cb37b6e6faad0da2de508dceea412f2277240f19cfc683a917ebce0d276314c34fb9782632961af480b9349eb3821824f31267d5d0f71209d06df0e9ac8856f74f55a3bfc596498895e6722744f49672c4c5f2ec1871672ad5080d53a44c081a4b20932ab56512d72e71cb2d8f8bc5a6915dcf96430e34ed551e896183fa79c8d21d25ef82364496a22331f99657a710dc219ee9e319bf0ff4e9ad301c5206bfa034faba8f7f8a8515b569c1760ffbda91808e2fc16b05dcc48f5e46f2b6fd84e4b1131fc79b75212e087a28dc6188b9aa2dc29771a0049a87257401eed18daa74949324e94366585e658cb51f1ad4d1b2d8dd373bd1e81a431a5ab8757fca527f3a8485d6b6824ccf39d12b2c065d0c704e93cb977f95fe573edf81440c2caa6551ebc31af60e0a20df2c0530347f30c30438c1b4ebd85635899c9ba4a532691903f584d3a59645abfa9cd8d6777fe54dc5a36ea29935d96d1cef592265154ac8367db57cea10b8751f8f88923c82459f6dd8c44af3d5d841d6a796946ce6c20d5b5211f5cbc13e278349c9dde105bac558058ded85e15ff7cf655ee0b2dba645010de893b082c3adf6b6a32af11118570a412e0564884c0bd394159e4b58e7b384b92fb2d8cead2bbec116853f0d40837504f1762f7363f1f2ba0bf7f2bfc7c05cadbe0232aebb012015d00cdf2015dc9cc146cd3ea6169ac1c57e51a7fad3e8e1b54b1b52c4dfc9de785c9e0bd904011f2bffeb661fe11c4649b038ccb21a21d9f1d7822fc8364f98c4e43a28c07d52449db6957e12bddcb028c9cf7c6474f0dba5d811a244e894ebd136851ef497dbd520359046416a0355a4dfd61eac4b1d04ac9d1caf3c1329fbeada9a51878c6ed84f4c7c009427a3432db7eca7ffd1fe18940a5b64e8559276745b18ad90dad57530220907d492ac186cf55133d955106918ca23370d77456af7aa537624a06c38ee2659fadb57cbba495aef330c5c38ea34f794173bb6bed60124a164f2e944821afc3ee6c524cbb4204411ff08e05da8648628bbc5158622ec51629f029ce95f4690d7c241a3a4af503223129fc149d75651c658c4bbcb03823b8d4c828b53771076b6212e886e27256b139c90beb5153ef29b61874dea976e2611c1855d48e470627786c9505bc49ab3b5c7d33511e56887fafbd77022686547e3a44e174dce12e1a9f9bd8803efa346b64f7174d1605af7eb129211a3d580d1e5332b1d9ab0d0431cb1ad9352097c2fe6c6fcedde5a9c6a438a0bb507d0495deb6bd8c3d636d948f633bb1edf2e1119004b16aadecbf904c79f4d7f8c48f1436dd119271bb3d8ba6459107b9435c31a0f69c0edd7eaed6a116ab350775b43dc967178acca11af7fea6af07d8d656d95918826ff45969410c7ff25eda8147dfd2617b9ce386335510c0a1abde5ec81cc033e46479ef747d9415a85ef9a5a527b23342bf6cb8b065bb64fa4cf8e60192087e63335100da6c24e85ce5947303eaaab20dc1333b906b5210ec47840a5a26619d18846baf5a373942642cb717194a692d6ddb0d1d32c36c6a1127131e8e6b6efde7736f902192e336dd986667b4c42518f537293fc60455d0bf3af57ed85b89d984d4cf78c885272e5e8fd2c17edb658a7444e327c1131e95548e765309918da50e0c89e7c0feaeb3b1b5009b0649637f5e2f27fff00894a090950d43127c7621a1d362bc751f46aa06d39767f0f5e6c97f62fc526376a6ba5915694a4122f84964376c45e1b0ae3d3bf82f302c185432163fb7476b99d179c91d106150acf31ff6cca37502d59881a816028dd96d44228deb27f8c1da1d41cb251a9e3b542ae309164e100829b73f20663a59085ba8479d078b82b0ae4a914aa9a0e67754faab3013abb97402f70e7244b9b2cf605051b6d72a600857b36d6c9e67ac1a3b8b9319826872824f38e8a5cdd75b42474037269caad0978cf4f62f648ae8be65fdfe24e0988d2effba6e458de47c614977923f5953168eeffd93c3544c2c6caa27e2cdc55349b030b2dc0c56a4fcb777dbc28682d96b15db9e4a9c31e40adf61be6a86ab352d9f6ec9bdd1aad2554020dfb8d37b8e7fb0b6da51734bf42f3aff6256885d48961917af5765a9927de01fe9b5c5a19ad9ea7123e9ef19fb0051bc2d159cc41c66e7a813d651b1e1af75877a14a27877d0f0a91b399961595ebf7a63d0316b69d6df72e0b876d29acedc04cb427dc5c75907f6d05636f93c912261642ab79150f4c3bd2e4ce0252af8b659c666481399df1e94d398aa509381cf8fa434c630b69eddac6d6bbc56341cd3dc7ece42864b28e84da423359eb3e8ed5ab5b37a87ad754ccc7551ebc3d78ec369180bbf581c38e87110a6b5d9883ea2d2d68026ab08ad5dc83261b07a6b5576c5c795bdcae2860d2caac3f32f7533682675b335f612fb0df9127bd30299a8cef48ab3a1bfdb0b21f54f78f8d729aab0da0a548da2f446f4e7d538e1560d730a9089d69b6b8519a937bcf3d5dc0c9c0f6dc4e7c24f895bd89934d59effb4f159c53b8b34b4b41c7f7c58b46b5f04f42bebb91bf81524ece04743120d20d95a54a633d3333dcdcd4d862d49dde02cebe1d44e3f79ea1bb909b6341c5e563958a986938a6a7ed8cc8ea536e76a00867b95b979bd22eb88acb4a7267baebcde7cff13b2322fee397878faee3880c6f47f60fecf77e4809643529f8cc4896fe7bc3495a252bb060a5e13976dcffb8caa4ee3be04481f6b11904bdf7f82eb6f9c47aef3348d67510b01050125af0028168590f268e118263d64d546154091da7ab77ab85d9c5fe0d6ba8802ff31d06deb581ecce2af944a3d09faec639506ed439ae4287c49bde0c98336f28b989d2d726a1d228347abfea5355a6c03c94a8ad8b413eb304b6aabbaaf2766d3c10782fa8463082fc22679e2538b393a2a6f3da45524fb949c877684e5a3caa8c65e01500449c6fcbc208bd3d6e4ecdd82f3705e0cfbcb9a03d104b3f62a3d90233649668b14d69c304e76e5b064a27b88a94ba00c030fce1c259acc8955dfd0bfed081b9de752e3f39d89c508fb69b3651b2b95d0842c413d4dabd9ae4a32e5b3cdc5f11a1d98c059e41bface1b41d44df5167560a8aa245c6bb94a20351f6829e38ef15bc75337fabe1defe8bd726ce2054434fa620fc0bb67535f25a279694adf45b36802306bd8140d6623770d54daf5a7ecbec126c8a207b073257b0b83196e8f2be67dbab8a2e4c69e174b79544c130872e93fe4c831028e74b251f53ff6e8cfbe30da999e76417da6b89849d2b6c3a13bb978edbbd17201751458cab2230188e8652f3f50223f8bcd89dd88f38a2c6b746aa4c3ad9827b5958d0e91d0a", 0x1000, 0x3}, {&(0x7f00000016c0)="09c8f5f133f12eb3ab0404051c0e50283553cbd56d6d7ae4fdbe7cc1bb6315a87bcd0a8e1ede0b65260342b2627216b57029f18b38155380787a4d25bbb275954e3547e5f3419f71eaa90b1232ac8ccd8896342294e5e7b920b1a12674737f4660ec75b9b16d6b1fbe07f899557e8e79668d3abbafdb909b395e93177a53c0d96a1b52f4df2bac701f80da48326de2e5b89bae4cd40579ff6d07cd57ee81d1940bf04fa9e6e8", 0xa6, 0x1}, {&(0x7f0000001780)="32861185464399e03eb98c5d0674fe359f87735d1d1637728e93825fe6728282ebb977bb314af094a866b9d401bbf0b7ff0bc5fb9104523dc8dab791e13090f048c591190a7aec5918d280b4986cceaeff9125b2b2e37b42058bb0c2df80e0997f363101ac20d6f9db87002884ad7660e9e66e7b6148bf364d78", 0x7a, 0x2}, {&(0x7f0000001800)="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", 0xfe, 0x3}, {&(0x7f0000001900)="82efa401da47af3abab63ab6f6fd4d90f0c488240ddc0100aa70e20bfc4069b39972077deee3423a460b830c273d30dd6743503ba0a72b5b260c9da6f6126ae7fe779b15e54c0860c3e7152940e698aae9e38b08f9a861865fe10c67f1a1de5960eb609005f33cf0cf2e76671d0b3f8d7341b425fb8e4dd813de8e82ac1e1e869df076600d17983fb33e95ac627c36995edc44c9c10d0830c175c3f1d218b51804aca681ac511647cdc298cd92ddc8bde6857470693f940ca0151e1da9ff0372aae414de97119e26ec91f072553df56323dac5448bb8635096e273e739e5c25d06dbb5577b41b0aeaa", 0xe9, 0x3}, {&(0x7f0000001a00)="2394d893e82c5484d4418b45d33953fdc7b38f9aa3e62d97ece1d45c1913dfedc76c60b9b4a710538877b1e5fcbf7387b6338fb4e325b3e796ad024834790b86b320e5ef5b1d045f932865b48adda339210e238da3e643ea1fbb9c9db3637a528c7d400754cf92d89c4e5c03da3d074affc362d1a19332419bdf04aa5715e352a04e0b94c8d751ad7bec2259a85a1687e3e93b7678fb58df302f07eda6e5cb334b8fce1b2ed93cc9e2994f64b43ee561f232196ac4ae1a3e1479040a295f6ab4cb5a81d2d38bd591d972c43cea754ce02a5c6bba79711f15", 0xd8, 0x2}]}, 0x6, 0x1}, 0x1)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r7], 0x38}}, 0x10)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

2m38.955268932s ago: executing program 3 (id=435):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00')
r1 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0)
sync()
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000200)=0x8)
sync()
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mo`e\x00', &(0x7f0000000040)='\xfb\x8a\xe1=\x00', 0x0)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/230, 0xfffffffffffffd14}], 0x1, 0x5f11, 0x0)

2m22.661881162s ago: executing program 32 (id=435):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00')
r1 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0)
sync()
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000200)=0x8)
sync()
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mo`e\x00', &(0x7f0000000040)='\xfb\x8a\xe1=\x00', 0x0)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/230, 0xfffffffffffffd14}], 0x1, 0x5f11, 0x0)

16.785647668s ago: executing program 5 (id=826):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000500), &(0x7f0000000540)=0x4)
syz_open_procfs(0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r1, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
ptrace$ARCH_SHSTK_LOCK(0x1e, r2, 0x0, 0x5003)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
socket(0x28, 0x3, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r6, 0x0, 0x0}, 0x10)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40)

14.703589125s ago: executing program 5 (id=834):
r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0)
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
r4 = syz_open_procfs(0x0, 0x0)
getdents64(r4, &(0x7f0000000080)=""/147, 0x93)
sched_setscheduler(r3, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x2, 0x100, 0x0, {0xc0020001, 0xe7fffffd, 0x5, 0x54ef}})
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x3c, &(0x7f0000000040)=ANY=[@ANYBLOB="1100004eaca8daaab8ec2c6b1ff3a37fd8fa0000001300004e574cb0223304b724456a722e4aebdbce019eff000500004e0c5b6d9c17000000"])
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='zonefs\x00', 0x8000, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1c, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)

9.411737201s ago: executing program 1 (id=849):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000500), &(0x7f0000000540)=0x4)
syz_open_procfs(0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r1, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
ptrace$ARCH_SHSTK_LOCK(0x1e, r2, 0x0, 0x5003)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
socket(0x28, 0x3, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r6, 0x0, 0x0}, 0x10)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40)

7.848829223s ago: executing program 1 (id=851):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)
getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, &(0x7f0000000200))
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CAP_HYPERV_SEND_IPI(r1, 0x4068aea3, &(0x7f0000000080))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', <r5=>0x0, 0x7800, 0x8000, 0x1, 0x0, {{0x5, 0x4, 0x0, 0xd, 0x14, 0x3, 0x0, 0xff, 0x4, 0x0, @private=0xa010102, @broadcast}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000040)={'sit0\x00', r5, 0x0, 0x0, 0x0, 0xfffbfffe, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x64010102}}}})
ftruncate(r3, 0x5)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x3, 0x3c, 0xe4, 0x4, 0x6, 0x1, 0x41, 0xc, 0x2, 0x1, 0xc, 0x2, 0x7f, 0xc, 0x4, 0x10}})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

7.089103671s ago: executing program 5 (id=855):
r0 = socket$inet(0x2, 0x3, 0x9)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={@rand_addr=0x64010100, 0x1, 0x0, 0x30, 0x0, [{@loopback}, {@local}, {@remote}]}})
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000f40)=ANY=[@ANYBLOB], 0x123)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000, 0x40000000}], 0x0) (fail_nth: 1)
keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3})
r3 = socket$netlink(0x10, 0x3, 0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x7, 0x5, 0x100000000, 0x2, 0x9, 0x5, 0xfffffffffffff089}, &(0x7f0000001240)={0x8000, 0x2, 0xdf8b, 0x7fffffffffffffff, 0x72b8, 0x3b, 0x94, 0x9}, &(0x7f0000001280)={0x77359400}, &(0x7f0000001300)={0x0})
writev(r3, &(0x7f00000000c0), 0x0)

6.751415838s ago: executing program 1 (id=857):
open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
io_uring_setup(0x7a76, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0)
ioctl$TCSBRKP(r1, 0x5425, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2})
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
msgget$private(0x0, 0x31)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)

6.457846221s ago: executing program 2 (id=858):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x10, 0x0, 0x7fffffffffffffff}]})

6.016100345s ago: executing program 2 (id=860):
r0 = socket(0x2b, 0x1, 0x1)
close(0x4)
r1 = syz_open_procfs$namespace(0x0, 0x0)
unshare(0x6a040000)
unshare(0x40080)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r0, 0x0, 0x0)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x6, 0x0, <r2=>r1})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5)
getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000100037040000800000000000000000", @ANYRES32=r6, @ANYBLOB="0000000070000c00028008000100", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x70bd28, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000)
syz_io_uring_setup(0x38fa, &(0x7f0000000200)={0x0, 0x9943, 0x800, 0x0, 0x359, 0x0, r2}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000))
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0x0, 0x0)

5.861403131s ago: executing program 4 (id=861):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x8000000}})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000340)="0f01c4f0188aad15660f383b8789000f080e66b80500000066b9de1f00000f01c12665f30fc77100baf80c66b840ffcd8266efbafc0c66ed66b9bf0a000066b8217f000066ba000000000f300f019fd500", 0x51}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 5)

5.51130319s ago: executing program 2 (id=862):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x4, 0x2, 0x2, 0x0, 0x1}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x1, 0x752a, &(0x7f0000000040)="41411e854f223bce4b03be661e6f35b3a3ce0d7b37972da7a94d65931f1d79eaf4ea2e6cb5f6"})
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="20010000", @ANYRES16=r5, @ANYBLOB="01002dbd700001dcdf210100000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="bc0002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4], 0x120}, 0x1, 0x400000000000000, 0x0, 0x801}, 0x40810)
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r9, 0xc058534b, &(0x7f0000000240)={0x1, 0x6, 0x80, 0x0, 0xd30a, 0x5})
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10}, 0xc)

4.893726922s ago: executing program 5 (id=864):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x400000}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
r0 = open(&(0x7f00000003c0)='./file0\x00', 0x48040, 0x0)
socket$netlink(0x10, 0x3, 0xe)
finit_module(r0, 0x0, 0x2)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000040)={{@host, 0x1000}, 0x5, 0x400, 0xfffffffffffff908, 0x8, 0xb, 0x7, 0x40, 0xfffffffffffff7fb})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x7e02}, 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000f50f00010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000035000001c0012801700010067656e65766500000c00028008000200e00000021400030067656e65766531000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40840}, 0x22004001)
io_uring_setup(0x7085, &(0x7f0000000140)={0x0, 0xd0a9, 0x400, 0x3, 0x20387})
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x8001, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x10000, 0x1be, 0x85, 0xfffffbc5, 0x0, [{0x6c, 0x4, 0x5, '\x00', 0x12}, {0x7, 0x8, 0x6f, '\x00', 0x3}, {0x0, 0x41, 0x5, '\x00', 0x5}, {0x80, 0x3, 0x8, '\x00', 0x9}, {0x8, 0x52, 0x4, '\x00', 0x49}, {0xf3, 0xf, 0x2, '\x00', 0x7}, {0x6, 0xf4, 0x1, '\x00', 0x8}, {0xa, 0x47, 0xf, '\x00', 0x45}, {0x7, 0xd, 0xfe, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0x6}, {0x38, 0x11, 0xff}, {0x56, 0x4, 0x1}, {0x3, 0xcf, 0x10, '\x00', 0x5}, {0x5, 0x4f, 0x2, '\x00', 0x2}, {0x4, 0x4, 0x1, '\x00', 0x9}, {0x0, 0x2, 0x4, '\x00', 0x7f}, {0x1, 0xb, 0xd5, '\x00', 0x99}, {0xd, 0x3, 0x2, '\x00', 0xff}, {0xa, 0x9e, 0xc0, '\x00', 0x2}, {0x2, 0x3f, 0xd}, {0x7, 0x21, 0x23, '\x00', 0x1}, {0x5, 0x0, 0xff, '\x00', 0xf}, {0x3, 0x1, 0x4, '\x00', 0xe6}, {0x3, 0x4, 0xa, '\x00', 0x54}]}})
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0xc000, 0x10000, 0x3, 0x6, 0x0, [{0x1, 0x1, 0xb3, '\x00', 0x4}, {0xb, 0xe, 0x2, '\x00', 0x2}, {0x2, 0x8}, {0x0, 0xb8, 0x0, '\x00', 0x6}, {0x9, 0x5, 0x2, '\x00', 0x2}, {0x35, 0x5, 0x9, '\x00', 0x72}, {0x0, 0xfd, 0x5, '\x00', 0x6}, {0x57, 0x4, 0x4, '\x00', 0x5}, {0x6, 0x2, 0x2, '\x00', 0x1}, {0x0, 0x9, 0x8d, '\x00', 0x8}, {0x0, 0x96, 0x5, '\x00', 0x2a}, {0xb2, 0x4, 0x91, '\x00', 0x21}, {0x8, 0x5, 0x5, '\x00', 0xc0}, {0xeb, 0x9, 0x1, '\x00', 0x1}, {0x8, 0x1, 0xd, '\x00', 0x5}, {0x6, 0x8, 0x0, '\x00', 0x9}, {0xf8, 0xfe, 0x2, '\x00', 0xe}, {0xa, 0xff, 0xa, '\x00', 0x81}, {0x1, 0x0, 0x4, '\x00', 0x4}, {0xf, 0x0, 0xce, '\x00', 0x9}, {0x1, 0xd3, 0xff, '\x00', 0xf2}, {0x8, 0xe2, 0xfd, '\x00', 0x5d}, {0xda, 0x6, 0xe, '\x00', 0x8}, {0x1, 0x3, 0xf, '\x00', 0x8}]}})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

4.855044486s ago: executing program 2 (id=865):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r4, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)
signalfd(r1, &(0x7f0000000000)={[0xcfa]}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1a, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="00000000c326e973f9983b61ab193edb2e52254608f0ff76f20000bf980000000000005608f8ffffff000085"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', r3, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r4, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) (async)
signalfd(r1, &(0x7f0000000000)={[0xcfa]}, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1a, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="00000000c326e973f9983b61ab193edb2e52254608f0ff76f20000bf980000000000005608f8ffffff000085"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', r3, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)

3.066181696s ago: executing program 1 (id=866):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x1, 0x12c, @ioapic={0xffff1000, 0x7, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x6, '\x00', 0x2}, {0xd, 0x1, 0x1, '\x00', 0x3}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0xff}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x2, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xc6, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x16, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6}]}})
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080))
ioctl$KVM_RUN(r2, 0xae80, 0x700)

3.065789329s ago: executing program 4 (id=867):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
fanotify_init(0x4, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0)
r5 = add_key(&(0x7f0000003300)='cifs.spnego\x00', &(0x7f0000003340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r5)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r7, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000})
ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f0000000040)={0x18, r7})
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0xcbb4, <r9=>r6, 'id0\x00'})
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(r9, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="d8020000a2110b9991615d72646da1a49ce1c4baade923be55a2c9a683c5aa26aeb08c1f4ffaa5e70c3c3510d95e150a13280fa89152e445de2c6f2f324afcad489284143a2463e1be9f", @ANYRES16=r10, @ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x20004004}, 0x80)
ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000000c0)={0x28, 0x1, 0x0, r7, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000400)="830c509e70841c83d438df92f0e8b9ea667426af83c9e0f6a33a8ebe6be8917c983515943a6685be68077c8537e697e648f8eaaa61453a9b554ebb0ef87049a9c6f9124ebccbdd2395e3a6089afa99bdacdbb1fcdd9421a7b15626779aaf43630c0653362af6080678cb7a8e5c99b7fced8195a1f6836b7f30c235b402dea1672c"})

2.846059096s ago: executing program 2 (id=868):
socket$pppoe(0x18, 0x1, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r4, @ANYBLOB="21bfc069f3396daeb8014823db187fcd3038ef17d4c2e33437b9d31b60cff63c83f927f77042c375fde6c821fcb715b48ff66ddea3d310c15e650b8a98eb9bb083643d3ffc42afe92b9cd22cf8b1810cbbc962bb4755d5e8ede7be"], 0x1c}}, 0x0)
mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r8, 0x0, 0x0)
setsockopt$bt_BT_VOICE(r8, 0x112, 0x13, 0x0, 0x0)
io_setup(0x1, &(0x7f00000016c0))
sendfile(r6, r7, 0x0, 0x20000023896)

2.406095206s ago: executing program 0 (id=869):
openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{&(0x7f0000000600)=@can, 0x80, 0x0, 0x0, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad1", 0x42}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a9586391", 0x18}, {&(0x7f0000002840)="4d84a2dbc7313ccd6dec12c5fd58faee59308076b2a40e0a734d46f866906c1539249d348659039711f5d1fc7bb0f878cddf234a0292528175e3b701336590840b2c15c35d21bf8d0e5ada357abf969ea9e7cd16a29a5150a9baf6", 0x5b}, {&(0x7f0000000fc0)}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6a", 0x9d}], 0x5, &(0x7f00000014c0)}}], 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.36904709s ago: executing program 1 (id=870):
socket$rxrpc(0x21, 0x2, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = inotify_init1(0x800)
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x50007a2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
fchmod(r5, 0x50)
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f027, 0x2})

2.085831128s ago: executing program 4 (id=871):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000010010000000ffdbdf250000000092dbbcbd1308b576b0708c00c691bd17517537deee6e53281c6690066b74af267fffffffffffffff7f8b9d5c3abdea005b4f1167fc5ea1acb78f1cc6868622feffbb1bb9a53ac28e59b4133a7a2f19041ddb1f337800"/117, @ANYRES32=r2, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0001000700000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000340)='./file0/../file0/../file0/../file0/../file0\x00')
r5 = fsopen(&(0x7f0000000280)='gfs2meta\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='c::;\xf8\x81N\x80\x1a\x81\x85L\x89\xb4\xb6;o$:\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000100))
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r10 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000080)={0x3ff, 0x10, 0x1, 0x0, <r11=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464b4, &(0x7f0000000400)={r11})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0)
r12 = syz_open_dev$vim2m(&(0x7f0000000300), 0x1b33, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r12, 0xc0405602, &(0x7f0000000400)={0x13, 0x1, 0x2, "18e889cb5bfb8276529323b392b837e339070000000000000000008000", 0x38416761})
r13 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r14 = dup(r13)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r14, 0x2000)

1.909416517s ago: executing program 0 (id=872):
r0 = socket(0x2b, 0x1, 0x1)
close(0x4)
r1 = syz_open_procfs$namespace(0x0, 0x0)
unshare(0x6a040000)
unshare(0x40080)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r0, 0x0, 0x0)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x6, 0x0, <r2=>r1})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5)
getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000100037040000800000000000000000", @ANYRES32=r6, @ANYBLOB="0000000070000c00028008000100", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x70bd28, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000)
syz_io_uring_setup(0x38fa, &(0x7f0000000200)={0x0, 0x9943, 0x800, 0x0, 0x359, 0x0, r2}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000))
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0x0, 0x0)

1.704872468s ago: executing program 1 (id=873):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000007680)=@vmx={0x3, 0x0, 0x2080, {0xdddd0000, 0x0, {0x1}, 0x0, 0x7fffffffffffffff}, {"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", "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"}})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000002500), 0x1, 0x2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x2, 0x17})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50)
io_uring_enter(r6, 0x221d, 0xcf75, 0x37, 0x0, 0x0)
getsockname$unix(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeec, 0x8031, 0xffffffffffffffff, 0x0)
set_mempolicy_home_node(&(0x7f0000688000/0x1000)=nil, 0x1000, 0x0, 0x0)
chdir(0x0)
getsockopt$inet6_tcp_buf(r5, 0x6, 0xe, 0x0, &(0x7f0000000280))
ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000007600)=@multiplanar_overlay={0x9df, 0x4, 0x4, 0x2000, 0xd0, {0x0, 0x2710}, {0x4, 0x8, 0xf, 0xe, 0x1, 0x6, "4b4b85d0"}, 0x0, 0x3, {0x0}})
r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r8, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd})
ioctl$TCSETSF2(r8, 0x402c542d, &(0x7f0000000080)={0x80, 0x6, 0x8000, 0x1, 0x2, "2451d1f94016814731cd320c18cd313da8b8f2", 0x1ff, 0x3})
r9 = dup(r7)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)

1.613001784s ago: executing program 0 (id=874):
openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}, {{&(0x7f0000000600)=@can, 0x80, 0x0, 0x0, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a9586391", 0x18}, {&(0x7f0000002840)="4d84a2dbc7313ccd6dec12c5fd58faee59308076b2a40e0a734d46f866906c1539249d348659039711f5d1fc7bb0", 0x2e}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda66", 0x3c}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d", 0x9c}], 0x5, &(0x7f00000014c0)}}], 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.491310373s ago: executing program 5 (id=875):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000080)={0x1, 0x3, 0x5, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x10c00, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8000000000000001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10)
connect$llc(r4, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x4, 0x1, 0x7043})
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000140)='/dev/hwrng\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='\x00')
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fdd000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000005700)=@svm={0x1, 0x1, 0x1080, {0xdddd0000}, {"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"}})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = gettid()
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000002c0), &(0x7f0000000340)=0x4)
rt_sigqueueinfo(r8, 0x21, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb})

688.386728ms ago: executing program 0 (id=876):
openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f0000000600)=@can, 0x80, 0x0, 0x0, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000002840)="4d84a2dbc7313ccd6dec12c5fd58faee59308076b2a40e0a734d46f866906c1539249d348659039711f5d1fc7bb0f878cddf234a0292528175e3b701336590840b2c15c35d21bf8d0e5ada357abf969ea9e7cd16a29a", 0x56}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda66", 0x3c}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203", 0x9a}], 0x4, &(0x7f00000014c0)}}], 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

604.12066ms ago: executing program 5 (id=877):
ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000001c0)={0x40000005, 0x0, <r0=>0xffffffffffffffff})
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000200)={<r1=>r0, &(0x7f0000000780)='cg\x00\x00\x00\x00\x00C/\x17Y\x1d\x807*\x8dcc\xf9jx\xff\xf2\t\xea\xe9\xb6\xa7\x93b\xfc\x82}4\x94\xb4\x10-\xe58\xd4\xd0q\xa8\r\xa0\x04r\xa1\bp\xe7\x1f\x13L|)#\xbdE\x82\xb6d\x83VQ\xa3\xd7B!\xd8\xd3\x8e9\xba\xc0s\xfa\xac\a\xff\x0f\x05\xfaa\x839\xec\xcat\xb3\xa3\xaa\xdd\x17y\x06\xc7J\x8a\xcdf\xcf\xf5*1\x9e\xc8Y\xb5\xb8\xab\x15\xcd\xba\xd9Q\x180z\xb0\x81\x8aMj\xb4\x9dP~\a\xb8\xc2`\xaa\xa2\xd5\x87\x9b\xa1Z}<}\xa8\xc5H\xf5\xd0?{AZ\xc7', 0x20141, 0x0, 0x5, 0x0, 0x0})
preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/70, 0x46}, {&(0x7f00000002c0)=""/166, 0xa6}, {&(0x7f0000000280)=""/16, 0x10}, {&(0x7f00000003c0)=""/122, 0x7a}, {&(0x7f0000000440)}], 0x5, 0x20000002, 0x9) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000200), 0x0, 0x40050)
recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2122, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}}, 0x0) (async)
futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x1) (async)
futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000)=0x6, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x3b) (async)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000)
shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
pipe2$watch_queue(&(0x7f0000001180), 0x80)
add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) (async)
r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r6, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket(0xa, 0x5, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0xffffffffffffff7a) (async)
ptrace(0x10, r7)

518.408388ms ago: executing program 4 (id=878):
openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f0000000600)=@can, 0x80, 0x0, 0x0, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a9586391", 0x18}, {&(0x7f0000002840)="4d84a2dbc7313ccd6dec12c5fd58faee59308076b2a40e0a734d46f866906c1539249d348659039711f5d1fc7bb0f878cddf234a0292528175e3b701336590840b2c15c35d", 0x45}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda66", 0x3c}], 0x4, &(0x7f00000014c0)}}], 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

324.899338ms ago: executing program 4 (id=879):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000001b701000000000000850000007b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x23}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2}, 0x3c)
syz_emit_ethernet(0xfdef, &(0x7f0000000900)=ANY=[], 0x0)

322.076194ms ago: executing program 0 (id=880):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1b)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0xfffffffffffffffd, {0x3, 0x1, 0x0, 0x3, 0xffffffff, 0x0, {0x5, 0x6, 0x6, 0x40000000006, 0xffffffffffffffff, 0x2006, 0x0, 0x290, 0xfffffffc, 0x2000, 0x2, 0x0, 0x0, 0x102, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000b80)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x2, 0x16008011, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) (fail_nth: 5)

261.096796ms ago: executing program 2 (id=881):
openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f0000000600)=@can, 0x80, 0x0, 0x0, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x30}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a9586391", 0x18}, {&(0x7f0000002840)="4d84a2dbc7313ccd6dec12c5fd58faee59308076b2a40e0a734d46f866906c1539249d348659039711f5d1fc7bb0", 0x2e}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda", 0x3b}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6a", 0x9d}], 0x5, &(0x7f00000014c0)}}], 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

211.200755ms ago: executing program 4 (id=882):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
fanotify_init(0x4, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = add_key(0x0, &(0x7f0000003340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r6)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000})
ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r9, r8, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f0000000040)={0x18, r8})
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0xcbb4, <r10=>r7, 'id0\x00'})
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(r10, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="d8020000a2110b9991615d72646da1a49ce1c4baade923be55a2c9a683c5aa26aeb08c1f4ffaa5e70c3c3510d95e150a13280fa89152e445de2c6f2f324afcad489284143a2463e1be9f", @ANYRES16=r11, @ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x20004004}, 0x80)
ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000000c0)={0x28, 0x1, r5, r8, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000400)="830c509e70841c83d438df92f0e8b9ea667426af83c9e0f6a33a8ebe6be8917c983515943a6685be68077c8537e697e648f8eaaa61453a9b554ebb0ef87049a9c6f9124ebccbdd2395e3a6089afa99bdacdbb1fcdd9421a7b15626779aaf43630c0653362af6080678cb7a8e5c99b7fced8195a1f6836b7f30c235b402dea1672c"})

0s ago: executing program 0 (id=883):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10)
fanotify_init(0x4, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = add_key(&(0x7f0000003300)='cifs.spnego\x00', &(0x7f0000003340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r6)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000})
ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r9, r8, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f0000000040)={0x18, r8})
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0xcbb4, <r10=>r7, 'id0\x00'})
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(r10, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="d8020000a2110b9991615d72646da1a49ce1c4baade923be55a2c9a683c5aa26aeb08c1f4ffaa5e70c3c3510d95e150a13280fa89152e445de2c6f2f324afcad489284143a2463e1be9f", @ANYRES16=r11, @ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x20004004}, 0x80)
ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000000c0)={0x28, 0x1, r5, r8, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000400)="830c509e70841c83d438df92f0e8b9ea667426af83c9e0f6a33a8ebe6be8917c983515943a6685be68077c8537e697e648f8eaaa61453a9b554ebb0ef87049a9c6f9124ebccbdd2395e3a6089afa99bdacdbb1fcdd9421a7b15626779aaf43630c0653362af6080678cb7a8e5c99b7fced8195a1f6836b7f30c235b402dea1672c"})

kernel console output (not intermixed with test programs):

1775825343.659:368): avc:  denied  { write } for  pid=7704 comm="syz.2.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  225.727519][   T30] audit: type=1400 audit(1775825343.679:369): avc:  denied  { listen } for  pid=7704 comm="syz.2.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  225.772551][  T792] STV06xx 1-1:1.0: probe with driver STV06xx failed with error -71
[  226.056389][ T5921] usb 5-1: 2:0: failed to get current value for ch 0 (-71)
[  226.064678][ T5921] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22
[  226.066431][  T792] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  226.158486][ T5921] usb 5-1: selecting invalid altsetting 1
[  226.287329][ T5805] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  226.296830][  T792] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  226.297327][ T5921] usb 5-1: unit 6 not found!
[  226.311624][ T5921] usb 5-1: 2:0: failed to get current value for ch 0 (-71)
[  226.437909][ T7714] sp0: Synchronizing with TNC
[  226.482241][ T7714] netlink: 3 bytes leftover after parsing attributes in process `syz.4.467'.
[  226.492020][ T7714] netlink: 3 bytes leftover after parsing attributes in process `syz.4.467'.
[  226.502657][ T7714] netlink: 3 bytes leftover after parsing attributes in process `syz.4.467'.
[  226.511565][ T7714] netlink: 3 bytes leftover after parsing attributes in process `syz.4.467'.
[  226.522070][ T7714] netlink: 3 bytes leftover after parsing attributes in process `syz.4.467'.
[  226.532102][ T7714] netlink: 3 bytes leftover after parsing attributes in process `syz.4.467'.
[  226.542542][ T7714] netlink: 3 bytes leftover after parsing attributes in process `syz.4.467'.
[  226.551414][ T7714] netlink: 3 bytes leftover after parsing attributes in process `syz.4.467'.
[  226.561654][ T7714] netlink: 3 bytes leftover after parsing attributes in process `syz.4.467'.
[  227.289413][  T792] usb 1-1: USB disconnect, device number 21
[  227.965753][ T5805] usb 2-1: device descriptor read/64, error -71
[  228.012814][ T6269] udevd[6269]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  228.087814][ T5921] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22
[  228.110459][ T5921] usb 5-1: USB disconnect, device number 14
[  228.317328][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  228.339532][ T5805] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  229.457095][ T5807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  229.469697][ T5807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  229.478026][ T5807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  229.486056][ T5807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  229.493568][ T5807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  229.747229][   T30] audit: type=1400 audit(1775825347.729:370): avc:  denied  { ioctl } for  pid=7729 comm="syz.1.471" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  229.835852][   T30] audit: type=1400 audit(1775825347.759:371): avc:  denied  { accept } for  pid=7729 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  230.025308][   T30] audit: type=1400 audit(1775825347.999:372): avc:  denied  { write } for  pid=7737 comm="syz.2.473" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  230.027365][ T5921] kernel read not supported for file /cpu/0/msr (pid: 5921 comm: kworker/1:6)
[  230.339339][ T7727] chnl_net:caif_netlink_parms(): no params data found
[  230.348024][ T7743] mkiss: ax0: crc mode is auto.
[  230.504784][   T30] audit: type=1400 audit(1775825348.409:373): avc:  denied  { mount } for  pid=7750 comm="syz.1.475" name="/" dev="ramfs" ino=23587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  230.578630][ T7755] FAULT_INJECTION: forcing a failure.
[  230.578630][ T7755] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  230.610791][ T7755] CPU: 1 UID: 0 PID: 7755 Comm: syz.0.476 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  230.610822][ T7755] Tainted: [L]=SOFTLOCKUP
[  230.610828][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  230.610838][ T7755] Call Trace:
[  230.610844][ T7755]  <TASK>
[  230.610851][ T7755]  dump_stack_lvl+0x100/0x190
[  230.610885][ T7755]  should_fail_ex.cold+0x5/0xa
[  230.610909][ T7755]  _copy_from_iter+0x1f4/0x1690
[  230.610933][ T7755]  ? __asan_memset+0x23/0x50
[  230.610959][ T7755]  ? __pfx__copy_from_iter+0x10/0x10
[  230.610979][ T7755]  ? __pfx___alloc_skb+0x10/0x10
[  230.611014][ T7755]  netlink_sendmsg+0x808/0xda0
[  230.611037][ T7755]  ? __pfx_netlink_sendmsg+0x10/0x10
[  230.611053][ T7755]  ? __might_fault+0x50/0x140
[  230.611087][ T7755]  ____sys_sendmsg+0x9e1/0xb70
[  230.611105][ T7755]  ? __pfx_netlink_sendmsg+0x10/0x10
[  230.611124][ T7755]  ? __pfx_____sys_sendmsg+0x10/0x10
[  230.611155][ T7755]  ___sys_sendmsg+0x190/0x1e0
[  230.611177][ T7755]  ? __pfx____sys_sendmsg+0x10/0x10
[  230.611227][ T7755]  __sys_sendmsg+0x170/0x220
[  230.611254][ T7755]  ? __pfx___sys_sendmsg+0x10/0x10
[  230.611295][ T7755]  do_syscall_64+0x106/0xf80
[  230.611312][ T7755]  ? clear_bhb_loop+0x40/0x90
[  230.611334][ T7755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.611352][ T7755] RIP: 0033:0x7f7e8339c819
[  230.611368][ T7755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  230.611385][ T7755] RSP: 002b:00007f7e841e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  230.611402][ T7755] RAX: ffffffffffffffda RBX: 00007f7e83615fa0 RCX: 00007f7e8339c819
[  230.611413][ T7755] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004
[  230.611424][ T7755] RBP: 00007f7e841e7090 R08: 0000000000000000 R09: 0000000000000000
[  230.611434][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  230.611443][ T7755] R13: 00007f7e83616038 R14: 00007f7e83615fa0 R15: 00007ffcc96f2ea8
[  230.611467][ T7755]  </TASK>
[  230.823086][ T7727] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.833411][ T7727] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.966860][ T7763] FAULT_INJECTION: forcing a failure.
[  230.966860][ T7763] name failslab, interval 1, probability 0, space 0, times 0
[  231.010844][ T7727] bridge_slave_0: entered allmulticast mode
[  231.049679][ T7727] bridge_slave_0: entered promiscuous mode
[  231.083324][ T7727] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.143609][ T7763] CPU: 0 UID: 0 PID: 7763 Comm: syz.1.475 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  231.143641][ T7763] Tainted: [L]=SOFTLOCKUP
[  231.143647][ T7763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  231.143657][ T7763] Call Trace:
[  231.143663][ T7763]  <TASK>
[  231.143670][ T7763]  dump_stack_lvl+0x100/0x190
[  231.143703][ T7763]  should_fail_ex.cold+0x5/0xa
[  231.143728][ T7763]  ? iter_file_splice_write+0x1d8/0x10a0
[  231.143748][ T7763]  should_failslab+0xc2/0x120
[  231.143767][ T7763]  __kmalloc_noprof+0xe0/0x850
[  231.143803][ T7763]  iter_file_splice_write+0x1d8/0x10a0
[  231.143831][ T7763]  ? atime_needs_update+0x8b/0x6b0
[  231.143864][ T7763]  ? __pfx_iter_file_splice_write+0x10/0x10
[  231.143885][ T7763]  ? __lock_acquire+0x4a5/0x2630
[  231.143905][ T7763]  ? shmem_file_splice_read+0x724/0xdd0
[  231.143954][ T7763]  ? __pfx_iter_file_splice_write+0x10/0x10
[  231.143977][ T7763]  direct_splice_actor+0x192/0x6c0
[  231.144000][ T7763]  splice_direct_to_actor+0x345/0xa30
[  231.144023][ T7763]  ? __pfx_direct_splice_actor+0x10/0x10
[  231.144048][ T7763]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  231.144077][ T7763]  do_splice_direct+0x174/0x240
[  231.144098][ T7763]  ? __pfx_do_splice_direct+0x10/0x10
[  231.144118][ T7763]  ? avc_policy_seqno+0x9/0x20
[  231.144138][ T7763]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  231.144163][ T7763]  ? rw_verify_area+0xce/0x6d0
[  231.144191][ T7763]  do_sendfile+0xadc/0xe20
[  231.144223][ T7763]  ? __pfx_do_sendfile+0x10/0x10
[  231.144259][ T7763]  __x64_sys_sendfile64+0x154/0x220
[  231.144282][ T7763]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  231.144311][ T7763]  do_syscall_64+0x106/0xf80
[  231.144328][ T7763]  ? clear_bhb_loop+0x40/0x90
[  231.144350][ T7763]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.144368][ T7763] RIP: 0033:0x7f310ef9c819
[  231.144383][ T7763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  231.144401][ T7763] RSP: 002b:00007f310fdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  231.144418][ T7763] RAX: ffffffffffffffda RBX: 00007f310f216180 RCX: 00007f310ef9c819
[  231.144430][ T7763] RDX: 00002000000000c0 RSI: 0000000000000007 RDI: 0000000000000007
[  231.144440][ T7763] RBP: 00007f310fdf6090 R08: 0000000000000000 R09: 0000000000000000
[  231.144450][ T7763] R10: 00000000006fecb1 R11: 0000000000000246 R12: 0000000000000001
[  231.144460][ T7763] R13: 00007f310f216218 R14: 00007f310f216180 R15: 00007fff2e8d94a8
[  231.144485][ T7763]  </TASK>
[  231.435329][ T7727] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.454759][ T7771] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  231.475062][ T7727] bridge_slave_1: entered allmulticast mode
[  231.488379][ T7727] bridge_slave_1: entered promiscuous mode
[  231.536503][ T5807] Bluetooth: hci5: command tx timeout
[  231.758654][ T7727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.966383][ T7727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  233.026330][ T7727] team0: Port device team_slave_0 added
[  233.034272][ T7727] team0: Port device team_slave_1 added
[  233.061167][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_0
[  233.068171][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  233.095779][ T7727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.108205][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.115156][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  233.141905][ T7727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  233.279961][ T7727] hsr_slave_0: entered promiscuous mode
[  233.289491][ T7727] hsr_slave_1: entered promiscuous mode
[  233.296008][ T7727] debugfs: 'hsr0' already exists in 'hsr'
[  233.305523][ T7727] Cannot create hsr debugfs directory
[  233.415829][ T7791] __nla_validate_parse: 139 callbacks suppressed
[  233.415848][ T7791] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.486'.
[  233.464660][ T7791] bridge_slave_1: default FDB implementation only supports local addresses
[  233.565547][ T5921] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  233.615588][ T5807] Bluetooth: hci5: command tx timeout
[  233.662635][ T7794] syzkaller0: entered promiscuous mode
[  233.740024][ T5921] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  233.754230][ T5921] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  233.777836][ T5921] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  233.805341][ T5921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.831302][ T5921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.842358][ T7727] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  233.855220][ T7727] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  233.867425][ T5921] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  233.877718][ T7727] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  233.884442][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  233.900276][ T7727] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  233.916000][ T5921] usb 1-1: Product: syz
[  233.923581][ T5921] usb 1-1: Manufacturer: syz
[  233.961994][ T5921] cdc_wdm 1-1:1.0: skipping garbage
[  233.978414][ T5921] cdc_wdm 1-1:1.0: skipping garbage
[  234.012118][ T5921] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  234.029504][ T5921] cdc_wdm 1-1:1.0: Unknown control protocol
[  234.160889][ T7789] FAULT_INJECTION: forcing a failure.
[  234.160889][ T7789] name failslab, interval 1, probability 0, space 0, times 0
[  234.182675][ T7789] CPU: 1 UID: 0 PID: 7789 Comm: syz.0.485 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  234.182705][ T7789] Tainted: [L]=SOFTLOCKUP
[  234.182709][ T7789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  234.182715][ T7789] Call Trace:
[  234.182719][ T7789]  <TASK>
[  234.182724][ T7789]  dump_stack_lvl+0x100/0x190
[  234.182747][ T7789]  should_fail_ex.cold+0x5/0xa
[  234.182762][ T7789]  should_failslab+0xc2/0x120
[  234.182774][ T7789]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  234.182790][ T7789]  ? security_file_alloc+0x34/0x2c0
[  234.182808][ T7789]  ? trace_kmem_cache_alloc+0xf3/0x120
[  234.182822][ T7789]  security_file_alloc+0x34/0x2c0
[  234.182839][ T7789]  init_file+0x95/0x480
[  234.182853][ T7789]  alloc_empty_file+0x73/0x1c0
[  234.182868][ T7789]  path_openat+0xe8/0x31a0
[  234.182879][ T7789]  ? kasan_save_stack+0x3f/0x50
[  234.182895][ T7789]  ? kasan_save_stack+0x30/0x50
[  234.182910][ T7789]  ? kasan_save_track+0x14/0x30
[  234.182926][ T7789]  ? __kasan_slab_alloc+0x89/0x90
[  234.182935][ T7789]  ? kmem_cache_alloc_noprof+0x241/0x6e0
[  234.182951][ T7789]  ? do_getname+0x35/0x390
[  234.182965][ T7789]  ? do_sys_openat2+0xc5/0x1e0
[  234.182978][ T7789]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.182991][ T7789]  ? __pfx_path_openat+0x10/0x10
[  234.183008][ T7789]  do_file_open+0x20e/0x430
[  234.183022][ T7789]  ? __pfx_do_file_open+0x10/0x10
[  234.183043][ T7789]  ? alloc_fd+0x476/0x790
[  234.183058][ T7789]  ? do_getname+0x191/0x390
[  234.183073][ T7789]  do_sys_openat2+0x10d/0x1e0
[  234.183087][ T7789]  ? __pfx_do_sys_openat2+0x10/0x10
[  234.183101][ T7789]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  234.183115][ T7789]  ? __fget_files+0x21f/0x3d0
[  234.183128][ T7789]  __x64_sys_openat+0x12d/0x210
[  234.183143][ T7789]  ? __pfx___x64_sys_openat+0x10/0x10
[  234.183156][ T7789]  ? ksys_write+0x1ac/0x250
[  234.183171][ T7789]  do_syscall_64+0x106/0xf80
[  234.183181][ T7789]  ? clear_bhb_loop+0x40/0x90
[  234.183194][ T7789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.183205][ T7789] RIP: 0033:0x7f7e8335d04e
[  234.183215][ T7789] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  234.183225][ T7789] RSP: 002b:00007f7e841e6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  234.183236][ T7789] RAX: ffffffffffffffda RBX: 00007f7e841e76c0 RCX: 00007f7e8335d04e
[  234.183242][ T7789] RDX: 0000000000000002 RSI: 00007f7e841e6c00 RDI: ffffffffffffff9c
[  234.183249][ T7789] RBP: 00007f7e841e7090 R08: 0000000000000000 R09: 0000000000000000
[  234.183255][ T7789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  234.183260][ T7789] R13: 00007f7e83616038 R14: 00007f7e83615fa0 R15: 00007ffcc96f2ea8
[  234.183274][ T7789]  </TASK>
[  234.638890][ T5921] usb 1-1: USB disconnect, device number 22
[  234.905637][ T5963] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  235.008668][ T7823] forcing mempool usage for bio_alloc_bioset+0x392/0x850
[  235.166307][ T5963] usb 5-1: config 0 has no interfaces?
[  235.178165][ T5963] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  235.231822][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.321982][ T5963] usb 5-1: config 0 descriptor??
[  235.695645][ T5807] Bluetooth: hci5: command tx timeout
[  236.168374][ T7831] netlink: 256 bytes leftover after parsing attributes in process `syz.4.490'.
[  236.836948][ T5963] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  236.976621][ T7819] netlink: 'syz.4.490': attribute type 5 has an invalid length.
[  236.999305][ T7727] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.009275][ T5963] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  237.021328][ T5963] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  237.046477][ T5963] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  237.057946][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.066550][ T5963] usb 1-1: Product: syz
[  237.073412][ T5963] usb 1-1: Manufacturer: syz
[  237.081359][ T5963] usb 1-1: SerialNumber: syz
[  237.092025][ T5963] cdc_mbim 1-1:1.0: skipping garbage
[  237.190585][ T7727] 8021q: adding VLAN 0 to HW filter on device team0
[  237.203134][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.210318][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.237895][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.245132][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.292780][ T7825] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  237.295308][ T7727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  237.310530][ T7727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  237.429294][ T5935] usb 5-1: USB disconnect, device number 15
[  237.546372][ T7727] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.571483][   T30] audit: type=1400 audit(1775825355.549:374): avc:  denied  { read } for  pid=7842 comm="syz.2.496" lport=39928 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  237.638800][   T30] audit: type=1400 audit(1775825355.599:375): avc:  denied  { setopt } for  pid=7842 comm="syz.2.496" lport=39928 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  237.733091][ T5963] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS
[  237.746628][ T5963] cdc_mbim 1-1:1.0: bind() failure
[  237.764724][ T5963] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  237.784373][ T5807] Bluetooth: hci5: command tx timeout
[  237.795106][ T5963] cdc_ncm 1-1:1.1: bind() failure
[  237.847177][ T7727] veth0_vlan: entered promiscuous mode
[  237.857170][ T7727] veth1_vlan: entered promiscuous mode
[  237.889979][ T7727] veth0_macvtap: entered promiscuous mode
[  237.908602][ T7727] veth1_macvtap: entered promiscuous mode
[  237.927354][ T7727] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.939568][ T7727] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.990978][   T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.049327][ T7702] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.064481][ T7702] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.097785][ T7702] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.194930][   T30] audit: type=1400 audit(1775825356.149:376): avc:  denied  { map } for  pid=7865 comm="syz.1.500" path="socket:[24262]" dev="sockfs" ino=24262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  238.435178][   T30] audit: type=1400 audit(1775825356.149:377): avc:  denied  { read accept } for  pid=7865 comm="syz.1.500" path="socket:[24262]" dev="sockfs" ino=24262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  238.547181][ T7702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.561308][ T7702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.605408][   T30] audit: type=1400 audit(1775825356.579:378): avc:  denied  { ioctl } for  pid=7869 comm="syz.4.501" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  238.670119][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.703481][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.775673][   T30] audit: type=1400 audit(1775825356.749:379): avc:  denied  { mounton } for  pid=7727 comm="syz-executor" path="/root/syzkaller.2xTYb7/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  238.802489][   T30] audit: type=1400 audit(1775825356.779:380): avc:  denied  { mounton } for  pid=7727 comm="syz-executor" path="/root/syzkaller.2xTYb7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  238.837301][   T30] audit: type=1400 audit(1775825356.779:381): avc:  denied  { mounton } for  pid=7727 comm="syz-executor" path="/root/syzkaller.2xTYb7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=24296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  238.865676][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.502'.
[  238.874459][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.502'.
[  238.885023][   T30] audit: type=1326 audit(1775825356.809:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7872 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7fb9c819 code=0x7ffc0000
[  238.909584][  T792] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  238.924140][   T30] audit: type=1326 audit(1775825356.809:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7872 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7fb9c819 code=0x7ffc0000
[  239.078191][  T792] usb 5-1: Using ep0 maxpacket: 8
[  239.129069][  T792] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  239.158925][    T9] usb 1-1: USB disconnect, device number 23
[  239.555229][  T792] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  239.883854][  T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.902811][  T792] usb 5-1: config 0 descriptor??
[  240.015888][ T5150] block nbd0: Possible stuck request ffff8880279b2200: control (read@0,1024B). Runtime 90 seconds
[  240.026844][ T5150] block nbd0: Possible stuck request ffff8880279b2400: control (read@1024,1024B). Runtime 90 seconds
[  240.038010][ T5150] block nbd0: Possible stuck request ffff8880279b2600: control (read@2048,1024B). Runtime 90 seconds
[  240.049940][ T5150] block nbd0: Possible stuck request ffff8880279b2800: control (read@3072,1024B). Runtime 90 seconds
[  240.402737][  T792] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22
[  242.584961][ T7911] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  242.663990][ T7910] sp0: Synchronizing with TNC
[  242.674378][ T7910] netlink: 3 bytes leftover after parsing attributes in process `syz.1.510'.
[  242.683283][ T7910] netlink: 3 bytes leftover after parsing attributes in process `syz.1.510'.
[  242.693886][ T7910] netlink: 3 bytes leftover after parsing attributes in process `syz.1.510'.
[  242.702791][ T7910] netlink: 3 bytes leftover after parsing attributes in process `syz.1.510'.
[  242.714716][ T7910] netlink: 3 bytes leftover after parsing attributes in process `syz.1.510'.
[  242.723624][ T7910] netlink: 3 bytes leftover after parsing attributes in process `syz.1.510'.
[  242.735266][ T7910] netlink: 3 bytes leftover after parsing attributes in process `syz.1.510'.
[  242.744813][ T7910] netlink: 3 bytes leftover after parsing attributes in process `syz.1.510'.
[  242.887820][ T2059] block nbd1: Possible stuck request ffff888027a00000: control (read@0,1024B). Runtime 90 seconds
[  242.900456][ T2059] block nbd1: Possible stuck request ffff888027a00200: control (read@1024,1024B). Runtime 90 seconds
[  243.541524][ T2059] block nbd1: Possible stuck request ffff888027a00400: control (read@2048,1024B). Runtime 90 seconds
[  243.962175][ T2059] block nbd1: Possible stuck request ffff888027a00600: control (read@3072,1024B). Runtime 90 seconds
[  244.382986][  T791] usb 5-1: USB disconnect, device number 16
[  245.009007][ T7922] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  245.745546][    T9] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  245.893343][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  245.893358][   T30] audit: type=1400 audit(1775825363.870:401): avc:  denied  { mounton } for  pid=7941 comm="syz.5.519" path="/file1" dev="ramfs" ino=25080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  245.982324][    T9] usb 1-1: config 5 has an invalid interface number: 123 but max is 0
[  245.995122][    T9] usb 1-1: config 5 has no interface number 0
[  246.008277][    T9] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  246.035609][    T9] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0
[  246.056119][    T9] usb 1-1: config 5 interface 123 has no altsetting 0
[  246.072791][    T9] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  246.082318][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.103538][    T9] usb 1-1: Product: syz
[  246.115754][    T9] usb 1-1: Manufacturer: syz
[  246.125665][    T9] usb 1-1: SerialNumber: syz
[  246.307329][ T7946] capability: warning: `syz.4.521' uses deprecated v2 capabilities in a way that may be insecure
[  246.332528][   T30] audit: type=1400 audit(1775825364.310:402): avc:  denied  { create } for  pid=7945 comm="syz.4.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  246.346566][ T7933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.377394][   T30] audit: type=1400 audit(1775825364.310:403): avc:  denied  { setopt } for  pid=7945 comm="syz.4.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  246.400375][   T30] audit: type=1326 audit(1775825364.360:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7943 comm="syz.1.520" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f310ef9c819 code=0x0
[  246.406546][ T7933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.632368][   T30] audit: type=1400 audit(1775825364.610:405): avc:  denied  { map } for  pid=7952 comm="syz.4.522" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  246.708132][    T9] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device.
[  246.764376][    T9] usb 1-1: USB disconnect, device number 24
[  247.909072][ T7975] blktrace: Concurrent blktraces are not allowed on sg0
[  248.992274][ T7986] FAULT_INJECTION: forcing a failure.
[  248.992274][ T7986] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  249.024414][ T7986] CPU: 1 UID: 0 PID: 7986 Comm: syz.2.532 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  249.024447][ T7986] Tainted: [L]=SOFTLOCKUP
[  249.024453][ T7986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  249.024463][ T7986] Call Trace:
[  249.024469][ T7986]  <TASK>
[  249.024477][ T7986]  dump_stack_lvl+0x100/0x190
[  249.024512][ T7986]  should_fail_ex.cold+0x5/0xa
[  249.024541][ T7986]  _copy_from_user+0x2e/0xd0
[  249.024563][ T7986]  bpf_test_init.isra.0+0xaf/0x100
[  249.024593][ T7986]  bpf_prog_test_run_xdp+0x57e/0x1670
[  249.024629][ T7986]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  249.024663][ T7986]  ? fput+0x79/0x100
[  249.024685][ T7986]  ? __bpf_prog_get+0x97/0x2a0
[  249.024711][ T7986]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  249.024737][ T7986]  __sys_bpf+0x1725/0x4b90
[  249.024762][ T7986]  ? __pfx___sys_bpf+0x10/0x10
[  249.024778][ T7986]  ? proc_fail_nth_write+0x9f/0x220
[  249.024804][ T7986]  ? find_held_lock+0x2b/0x80
[  249.024834][ T7986]  ? find_held_lock+0x2b/0x80
[  249.024856][ T7986]  ? ksys_write+0x190/0x250
[  249.024878][ T7986]  ? __mutex_unlock_slowpath+0x15c/0x790
[  249.024897][ T7986]  ? __fget_files+0x215/0x3d0
[  249.024931][ T7986]  ? fput+0x79/0x100
[  249.024952][ T7986]  ? ksys_write+0x1ac/0x250
[  249.024968][ T7986]  ? __pfx_ksys_write+0x10/0x10
[  249.024989][ T7986]  __x64_sys_bpf+0x7b/0xc0
[  249.025008][ T7986]  ? lockdep_hardirqs_on+0x78/0x100
[  249.025025][ T7986]  do_syscall_64+0x106/0xf80
[  249.025040][ T7986]  ? clear_bhb_loop+0x40/0x90
[  249.025062][ T7986]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.025080][ T7986] RIP: 0033:0x7f3e7fb9c819
[  249.025095][ T7986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  249.025112][ T7986] RSP: 002b:00007f3e80b0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  249.025129][ T7986] RAX: ffffffffffffffda RBX: 00007f3e7fe15fa0 RCX: 00007f3e7fb9c819
[  249.025140][ T7986] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a
[  249.025150][ T7986] RBP: 00007f3e80b0c090 R08: 0000000000000000 R09: 0000000000000000
[  249.025160][ T7986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  249.025170][ T7986] R13: 00007f3e7fe16038 R14: 00007f3e7fe15fa0 R15: 00007ffc789bbd48
[  249.025194][ T7986]  </TASK>
[  249.397154][   T30] audit: type=1400 audit(1775825367.370:406): avc:  denied  { create } for  pid=7989 comm="syz.0.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  249.422331][  T792] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  249.932163][  T792] usb 5-1: unable to get BOS descriptor or descriptor too short
[  249.941092][  T792] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  249.956746][  T792] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  249.978134][  T792] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40
[  249.992264][   T30] audit: type=1804 audit(1775825367.970:407): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.537" name="file1" dev="ramfs" ino=26088 res=1 errno=0
[  250.020157][  T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.035402][  T792] usb 5-1: Product: syz
[  250.047159][   T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  250.301812][  T792] usb 5-1: Manufacturer: syz
[  250.307090][  T792] usb 5-1: SerialNumber: syz
[  250.313614][  T792] usb 5-1: can't set config #1, error -71
[  250.329026][  T792] usb 5-1: USB disconnect, device number 17
[  250.461549][   T30] audit: type=1400 audit(1775825368.440:408): avc:  denied  { open } for  pid=8005 comm="syz.5.539" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  250.526965][   T10] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  250.535402][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.592818][ T8010] SET target dimension over the limit!
[  250.955892][   T10] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  250.965107][   T10] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  250.989543][   T10] usb 1-1: Manufacturer: syz
[  251.004383][   T10] usb 1-1: config 0 descriptor??
[  251.065667][   T10] rc_core: IR keymap rc-hauppauge not found
[  251.072556][   T10] Registered IR keymap rc-empty
[  251.080283][   T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  251.095662][  T792] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  251.112420][   T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10
[  251.124998][   T30] audit: type=1400 audit(1775825369.100:409): avc:  denied  { read } for  pid=5163 comm="acpid" name="event4" dev="devtmpfs" ino=2985 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  251.186447][   T30] audit: type=1400 audit(1775825369.100:410): avc:  denied  { open } for  pid=5163 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2985 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  251.247146][   T30] audit: type=1400 audit(1775825369.110:411): avc:  denied  { ioctl } for  pid=5163 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2985 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  251.373519][  T792] usb 5-1: config 253 has an invalid interface number: 183 but max is 0
[  251.401495][  T792] usb 5-1: config 253 has no interface number 0
[  251.425248][  T792] usb 5-1: config 253 interface 183 altsetting 5 endpoint 0x4 has invalid maxpacket 2047, setting to 64
[  251.440317][   T30] audit: type=1400 audit(1775825369.310:412): avc:  denied  { mounton } for  pid=8013 comm="syz.2.541" path="/proc/398" dev="proc" ino=26111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  251.473500][  T792] usb 5-1: config 253 interface 183 has no altsetting 0
[  251.484397][   T10] usb 1-1: USB disconnect, device number 25
[  251.539176][  T792] usb 5-1: New USB device found, idVendor=2304, idProduct=022e, bcdDevice=80.f8
[  251.562044][  T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.664761][ T8023] sp0: Synchronizing with TNC
[  251.681276][ T8023] __nla_validate_parse: 144 callbacks suppressed
[  251.681304][ T8023] netlink: 3 bytes leftover after parsing attributes in process `syz.5.542'.
[  251.696605][ T8023] netlink: 3 bytes leftover after parsing attributes in process `syz.5.542'.
[  251.707358][ T8023] netlink: 3 bytes leftover after parsing attributes in process `syz.5.542'.
[  251.717684][ T8023] netlink: 3 bytes leftover after parsing attributes in process `syz.5.542'.
[  251.728644][ T8023] netlink: 3 bytes leftover after parsing attributes in process `syz.5.542'.
[  251.737630][ T8023] netlink: 3 bytes leftover after parsing attributes in process `syz.5.542'.
[  251.748171][ T8023] netlink: 3 bytes leftover after parsing attributes in process `syz.5.542'.
[  251.779817][ T8023] netlink: 3 bytes leftover after parsing attributes in process `syz.5.542'.
[  251.790393][ T8023] netlink: 3 bytes leftover after parsing attributes in process `syz.5.542'.
[  251.799305][ T8023] netlink: 3 bytes leftover after parsing attributes in process `syz.5.542'.
[  252.521329][  T792] usb 5-1: Product: syz
[  252.525650][  T792] usb 5-1: Manufacturer: syz
[  252.530253][  T792] usb 5-1: SerialNumber: syz
[  252.566389][   T30] audit: type=1400 audit(1775825370.550:413): avc:  denied  { getopt } for  pid=8020 comm="syz.2.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  252.613452][   T30] audit: type=1326 audit(1775825370.550:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8020 comm="syz.2.544" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e7fb9c819 code=0x0
[  253.565639][ T5871] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  254.144347][ T5871] usb 2-1: config 0 has an invalid interface number: 69 but max is 0
[  254.226622][ T5871] usb 2-1: config 0 has no interface number 0
[  254.335109][ T5871] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  254.363908][  T792] dvb-usb: found a 'Pinnacle Expresscard 320cx' in warm state.
[  254.379717][  T792] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  254.389633][ T5871] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  254.399772][  T792] dvbdev: DVB: registering new adapter (Pinnacle Expresscard 320cx)
[  254.408832][  T792] usb 5-1: media controller created
[  254.436909][ T5871] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  254.457137][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.465252][ T5871] usb 2-1: Product: syz
[  254.469796][ T5871] usb 2-1: Manufacturer: syz
[  254.482667][ T5871] usb 2-1: SerialNumber: syz
[  254.491479][ T5871] usb 2-1: config 0 descriptor??
[  254.507083][ T8031] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  254.516799][ T5871] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  254.532389][ T5871] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  254.685772][  T791] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  254.838718][  T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  254.855992][  T791] usb 6-1: Using ep0 maxpacket: 8
[  254.900513][  T791] usb 6-1: config 2 has an invalid interface number: 31 but max is 0
[  254.909865][  T792] DVB: Unable to find symbol dib7000p_attach()
[  254.916886][  T792] dvb-usb: no frontend was attached by 'Pinnacle Expresscard 320cx'
[  254.919453][  T791] usb 6-1: config 2 has no interface number 0
[  254.942456][  T791] usb 6-1: config 2 interface 31 has no altsetting 0
[  254.952266][  T791] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  254.963276][  T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.985860][  T791] usb 6-1: Product: syz
[  254.986203][  T792] rc_core: IR keymap rc-dib0700-rc5 not found
[  254.990127][  T791] usb 6-1: Manufacturer: syz
[  254.990148][  T791] usb 6-1: SerialNumber: syz
[  254.999707][ T5871] usb 2-1: USB disconnect, device number 22
[  255.035359][ T5871] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  255.054530][ T5871] cyberjack 2-1:0.69: device disconnected
[  255.128870][  T792] Registered IR keymap rc-empty
[  255.137154][  T792] dvb-usb: could not initialize remote control.
[  255.143495][  T792] dvb-usb: Pinnacle Expresscard 320cx successfully initialized and connected.
[  255.155266][  T792] dib0700: There's no endpoint for remote controller
[  255.335926][  T792] usb 5-1: USB disconnect, device number 18
[  255.396856][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  255.404281][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  257.710309][ T8052] zonefs (nullb0) ERROR: Not a zoned block device
[  257.772553][  T792] dvb-usb: Pinnacle Expresscard 320cx successfully deinitialized and disconnected.
[  258.391274][ T8073] x_tables: ip6_tables: mh match: only valid for protocol 135
[  258.492395][ T8073] syz.1.553 uses obsolete (PF_INET,SOCK_PACKET)
[  258.927843][  T791] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22
[  259.126084][  T791] usb 6-1: USB disconnect, device number 2
[  259.212276][ T8082] __nla_validate_parse: 136 callbacks suppressed
[  259.212294][ T8082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.556'.
[  261.428417][ T8113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.561'.
[  261.441238][   T30] audit: type=1400 audit(1775825379.420:415): avc:  denied  { module_request } for  pid=8098 comm="syz.0.561" kmod=72746E6C2D6C696E6B2D627269B0A34CE3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  261.704217][ T8108] netlink: 'syz.4.560': attribute type 2 has an invalid length.
[  261.787365][ T8109] netlink: 'syz.4.560': attribute type 2 has an invalid length.
[  261.806638][ T8108] !: entered promiscuous mode
[  262.339459][ T8125] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  262.659662][ T8128] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  263.188900][ T8139] netlink: 24 bytes leftover after parsing attributes in process `syz.5.569'.
[  263.852645][ T8148] zonefs (nullb0) ERROR: Not a zoned block device
[  264.802853][ T8155] bridge6: entered promiscuous mode
[  264.808180][ T8155] bridge6: entered allmulticast mode
[  265.786711][ T8181] FAULT_INJECTION: forcing a failure.
[  265.786711][ T8181] name failslab, interval 1, probability 0, space 0, times 0
[  265.799527][ T8181] CPU: 0 UID: 0 PID: 8181 Comm: syz.2.578 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  265.799554][ T8181] Tainted: [L]=SOFTLOCKUP
[  265.799561][ T8181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  265.799571][ T8181] Call Trace:
[  265.799578][ T8181]  <TASK>
[  265.799585][ T8181]  dump_stack_lvl+0x100/0x190
[  265.799620][ T8181]  should_fail_ex.cold+0x5/0xa
[  265.799644][ T8181]  should_failslab+0xc2/0x120
[  265.799664][ T8181]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  265.799698][ T8181]  ? __alloc_skb+0x140/0x710
[  265.799727][ T8181]  __alloc_skb+0x140/0x710
[  265.799747][ T8181]  ? __alloc_skb+0x5b7/0x710
[  265.799769][ T8181]  ? __pfx___alloc_skb+0x10/0x10
[  265.799793][ T8181]  netlink_alloc_large_skb+0x69/0x150
[  265.799808][ T8181]  netlink_sendmsg+0x680/0xda0
[  265.799824][ T8181]  ? __pfx_netlink_sendmsg+0x10/0x10
[  265.799836][ T8181]  ? __might_fault+0x50/0x140
[  265.799861][ T8181]  ____sys_sendmsg+0x9e1/0xb70
[  265.799875][ T8181]  ? __pfx_netlink_sendmsg+0x10/0x10
[  265.799890][ T8181]  ? __pfx_____sys_sendmsg+0x10/0x10
[  265.799913][ T8181]  ___sys_sendmsg+0x190/0x1e0
[  265.799930][ T8181]  ? __pfx____sys_sendmsg+0x10/0x10
[  265.799968][ T8181]  __sys_sendmsg+0x170/0x220
[  265.799988][ T8181]  ? __pfx___sys_sendmsg+0x10/0x10
[  265.800019][ T8181]  do_syscall_64+0x106/0xf80
[  265.800031][ T8181]  ? clear_bhb_loop+0x40/0x90
[  265.800048][ T8181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.800062][ T8181] RIP: 0033:0x7f3e7fb9c819
[  265.800074][ T8181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  265.800087][ T8181] RSP: 002b:00007f3e80aca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  265.800101][ T8181] RAX: ffffffffffffffda RBX: 00007f3e7fe16180 RCX: 00007f3e7fb9c819
[  265.800110][ T8181] RDX: 0000000020040800 RSI: 0000200000000100 RDI: 0000000000000003
[  265.800118][ T8181] RBP: 00007f3e80aca090 R08: 0000000000000000 R09: 0000000000000000
[  265.800126][ T8181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  265.800134][ T8181] R13: 00007f3e7fe16218 R14: 00007f3e7fe16180 R15: 00007ffc789bbd48
[  265.800152][ T8181]  </TASK>
[  266.185209][  T791] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  266.438178][  T791] usb 5-1: Using ep0 maxpacket: 8
[  266.449213][  T791] usb 5-1: config 2 has an invalid interface number: 31 but max is 0
[  266.534148][  T791] usb 5-1: config 2 has no interface number 0
[  266.540843][  T791] usb 5-1: config 2 interface 31 has no altsetting 0
[  266.587346][  T791] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  266.596593][  T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.605787][  T791] usb 5-1: Product: syz
[  266.610597][  T791] usb 5-1: Manufacturer: syz
[  267.874059][  T791] usb 5-1: SerialNumber: syz
[  268.285582][ T5963] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  268.457008][ T5963] usb 1-1: Using ep0 maxpacket: 32
[  268.477648][ T5963] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  268.512656][ T5963] usb 1-1: config 0 has no interface number 0
[  268.527187][   T30] audit: type=1400 audit(1775825386.510:416): avc:  denied  { mount } for  pid=8198 comm="syz.5.583" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  268.554939][ T5963] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  268.584877][ T5963] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  268.597236][ T8200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.582'.
[  268.614293][   T30] audit: type=1400 audit(1775825386.560:417): avc:  denied  { unmount } for  pid=7727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  268.652360][ T5963] usb 1-1: config 0 interface 85 has no altsetting 0
[  268.688015][ T5963] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  268.715295][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.729166][ T8203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.584'.
[  268.743301][ T5963] usb 1-1: Product: syz
[  268.758807][ T5963] usb 1-1: Manufacturer: syz
[  268.860478][ T5963] usb 1-1: SerialNumber: syz
[  268.878904][ T5963] usb 1-1: config 0 descriptor??
[  269.143791][ T8189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.152595][ T8189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.333075][ T5963] appletouch 1-1:0.85: Failed to read mode from device.
[  269.341904][ T5963] appletouch 1-1:0.85: probe with driver appletouch failed with error -5
[  269.523824][ T8210] bridge1: entered promiscuous mode
[  269.529605][ T8210] bridge1: entered allmulticast mode
[  270.095703][ T5150] block nbd0: Possible stuck request ffff8880279b2200: control (read@0,1024B). Runtime 120 seconds
[  270.106619][ T5150] block nbd0: Possible stuck request ffff8880279b2400: control (read@1024,1024B). Runtime 120 seconds
[  270.118322][ T5150] block nbd0: Possible stuck request ffff8880279b2600: control (read@2048,1024B). Runtime 120 seconds
[  270.130451][ T5150] block nbd0: Possible stuck request ffff8880279b2800: control (read@3072,1024B). Runtime 120 seconds
[  270.248182][ T8218] xt_cgroup: path and classid specified
[  271.103254][ T5963] usb 1-1: USB disconnect, device number 26
[  271.749753][  T791] ch9200 5-1:2.31: probe with driver ch9200 failed with error -71
[  272.245338][  T791] usb 5-1: USB disconnect, device number 19
[  272.561929][ T8241] block device autoloading is deprecated and will be removed.
[  272.861608][ T8253] sctp: [Deprecated]: syz.5.595 (pid 8253) Use of int in max_burst socket option.
[  272.861608][ T8253] Use struct sctp_assoc_value instead
[  272.903977][   T30] audit: type=1400 audit(1775825390.880:418): avc:  denied  { lock } for  pid=8252 comm="syz.5.595" path="socket:[27015]" dev="sockfs" ino=27015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  272.955518][  T791] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  273.115520][  T791] usb 1-1: Using ep0 maxpacket: 8
[  273.229392][  T791] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  273.237621][  T791] usb 1-1: config 0 has no interface number 0
[  273.246764][  T791] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  273.364674][ T8257] bridge2: entered promiscuous mode
[  273.370003][ T8257] bridge2: entered allmulticast mode
[  273.699022][  T791] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  273.711767][  T791] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  273.722935][  T791] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  273.745987][  T791] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  273.756140][  T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.792197][  T791] usb 1-1: config 0 descriptor??
[  273.806818][  T791] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  273.943828][ T7915] block nbd1: Possible stuck request ffff888027a00000: control (read@0,1024B). Runtime 120 seconds
[  273.995596][ T7915] block nbd1: Possible stuck request ffff888027a00200: control (read@1024,1024B). Runtime 120 seconds
[  274.035699][ T7915] block nbd1: Possible stuck request ffff888027a00400: control (read@2048,1024B). Runtime 120 seconds
[  274.048026][ T7915] block nbd1: Possible stuck request ffff888027a00600: control (read@3072,1024B). Runtime 120 seconds
[  274.101211][   T30] audit: type=1400 audit(1775825392.080:419): avc:  denied  { checkpoint_restore } for  pid=8244 comm="syz.0.593" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  274.547171][ T8265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.597'.
[  274.608020][ T5921] usb 1-1: USB disconnect, device number 27
[  274.625084][ T5921] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  275.042305][ T8280] blktrace: Concurrent blktraces are not allowed on sg0
[  275.655594][ T5871] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  275.845570][ T5871] usb 5-1: Using ep0 maxpacket: 8
[  275.888821][ T5871] usb 5-1: config 2 has an invalid interface number: 31 but max is 0
[  275.954802][ T5871] usb 5-1: config 2 has no interface number 0
[  275.955126][ T5871] usb 5-1: config 2 interface 31 has no altsetting 0
[  276.004135][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'.
[  276.004631][ T8285] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  276.153330][   T30] audit: type=1400 audit(1775825393.970:420): avc:  denied  { write } for  pid=8281 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  276.251137][ T8285] batman_adv: batadv0: Removing interface: batadv_slave_0
[  276.259846][ T5871] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  276.278958][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.287931][ T5871] usb 5-1: Product: syz
[  276.293533][ T5871] usb 5-1: Manufacturer: syz
[  276.299406][ T5871] usb 5-1: SerialNumber: syz
[  276.604891][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.607'.
[  277.234934][ T8294] 9p: Bad value for 'rfdno'
[  277.365402][   T30] audit: type=1400 audit(1775825395.340:421): avc:  denied  { remount } for  pid=8293 comm="syz.0.608" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  277.474281][ T8301] netlink: 24 bytes leftover after parsing attributes in process `syz.2.610'.
[  277.537155][ T8298] netlink: 'syz.5.609': attribute type 1 has an invalid length.
[  278.096517][ T8302] zonefs (nullb0) ERROR: Not a zoned block device
[  278.322424][ T8320] sp0: Synchronizing with TNC
[  278.350283][ T8320] netlink: 3 bytes leftover after parsing attributes in process `syz.0.611'.
[  278.359339][ T8320] netlink: 3 bytes leftover after parsing attributes in process `syz.0.611'.
[  278.371892][ T8320] netlink: 3 bytes leftover after parsing attributes in process `syz.0.611'.
[  278.380877][ T8320] netlink: 3 bytes leftover after parsing attributes in process `syz.0.611'.
[  278.393429][ T8320] netlink: 3 bytes leftover after parsing attributes in process `syz.0.611'.
[  278.402476][ T8320] netlink: 3 bytes leftover after parsing attributes in process `syz.0.611'.
[  278.621732][ T8320] bridge6: left promiscuous mode
[  279.167383][ T5871] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22
[  279.359753][ T8322] sp0: Synchronizing with TNC
[  279.555596][ T8322] __nla_validate_parse: 280 callbacks suppressed
[  279.555644][ T8322] netlink: 3 bytes leftover after parsing attributes in process `syz.2.612'.
[  279.572623][ T8322] netlink: 3 bytes leftover after parsing attributes in process `syz.2.612'.
[  279.584700][ T8322] netlink: 3 bytes leftover after parsing attributes in process `syz.2.612'.
[  279.593726][ T8322] netlink: 3 bytes leftover after parsing attributes in process `syz.2.612'.
[  279.605691][ T8322] netlink: 3 bytes leftover after parsing attributes in process `syz.2.612'.
[  279.614639][ T8322] netlink: 3 bytes leftover after parsing attributes in process `syz.2.612'.
[  279.626394][ T8322] netlink: 3 bytes leftover after parsing attributes in process `syz.2.612'.
[  279.635293][ T8322] netlink: 3 bytes leftover after parsing attributes in process `syz.2.612'.
[  279.647166][ T8322] netlink: 3 bytes leftover after parsing attributes in process `syz.2.612'.
[  279.656121][ T8322] netlink: 3 bytes leftover after parsing attributes in process `syz.2.612'.
[  282.394683][ T5871] usb 5-1: USB disconnect, device number 20
[  283.923389][   T30] audit: type=1326 audit(1775825401.900:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310ef9c819 code=0x7ffc0000
[  283.965640][   T30] audit: type=1326 audit(1775825401.900:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310ef9c819 code=0x7ffc0000
[  283.998579][   T30] audit: type=1326 audit(1775825401.900:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310ef9c819 code=0x7ffc0000
[  284.055129][   T30] audit: type=1326 audit(1775825401.900:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f310ef9c582 code=0x7ffc0000
[  284.180867][   T30] audit: type=1326 audit(1775825401.900:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f310ef9c617 code=0x7ffc0000
[  284.238459][   T30] audit: type=1326 audit(1775825401.900:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f310ef59511 code=0x7ffc0000
[  284.307405][   T30] audit: type=1326 audit(1775825401.900:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f310ef9d609 code=0x7ffc0000
[  284.570630][   T30] audit: type=1326 audit(1775825401.900:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f310ef9c819 code=0x7ffc0000
[  284.705990][ T8364] __nla_validate_parse: 14 callbacks suppressed
[  284.706051][ T8364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.622'.
[  285.592058][   T30] audit: type=1326 audit(1775825401.900:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310ef9c819 code=0x7ffc0000
[  285.794123][   T30] audit: type=1326 audit(1775825401.900:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310ef9c819 code=0x7ffc0000
[  286.565646][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'.
[  286.766409][ T5871] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  286.935556][ T5871] usb 3-1: Using ep0 maxpacket: 8
[  286.954372][ T5871] usb 3-1: config 2 has an invalid interface number: 31 but max is 0
[  286.962891][ T5871] usb 3-1: config 2 has no interface number 0
[  287.230270][ T5871] usb 3-1: config 2 interface 31 has no altsetting 0
[  290.065099][ T5178] udevd[5178]: worker [5797] /devices/virtual/block/nbd1 is taking a long time
[  290.158314][ T8390] bridge4: entered promiscuous mode
[  290.163562][ T8390] bridge4: entered allmulticast mode
[  290.192790][ T5178] udevd[5178]: worker [5794] /devices/virtual/block/nbd0 is taking a long time
[  290.204064][ T5871] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  290.271765][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.310299][ T5871] usb 3-1: Product: syz
[  290.325593][ T5871] usb 3-1: Manufacturer: syz
[  290.387513][ T5871] usb 3-1: SerialNumber: syz
[  290.607366][ T5871] usb 3-1: can't set config #2, error -71
[  290.652353][ T8399] vlan2: entered allmulticast mode
[  290.667097][ T5871] usb 3-1: USB disconnect, device number 20
[  290.680982][ T8403] netlink: 14 bytes leftover after parsing attributes in process `syz.5.632'.
[  290.709842][ T8399] bond0: entered allmulticast mode
[  290.799848][ T8399] bond_slave_0: entered allmulticast mode
[  290.807375][ T8399] bond_slave_1: entered allmulticast mode
[  290.872982][ T8403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  290.883582][ T8403] bond_slave_0: left allmulticast mode
[  290.929376][ T8403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  290.972428][ T8403] bond_slave_1: left allmulticast mode
[  291.019213][ T8403] bond0 (unregistering): Released all slaves
[  291.803785][ T5871] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  291.943756][ T8436] bridge7: entered promiscuous mode
[  291.949076][ T8436] bridge7: entered allmulticast mode
[  292.617696][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86
[  292.638163][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  292.648232][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  292.663490][ T5871] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  292.674497][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.683822][ T5871] usb 3-1: Product: syz
[  292.688123][ T5871] usb 3-1: Manufacturer: syz
[  292.693317][ T8439] FAULT_INJECTION: forcing a failure.
[  292.693317][ T8439] name failslab, interval 1, probability 0, space 0, times 0
[  292.709182][ T8439] CPU: 1 UID: 0 PID: 8439 Comm: syz.0.642 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  292.709203][ T8439] Tainted: [L]=SOFTLOCKUP
[  292.709206][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  292.709213][ T8439] Call Trace:
[  292.709218][ T8439]  <TASK>
[  292.709222][ T8439]  dump_stack_lvl+0x100/0x190
[  292.709244][ T8439]  should_fail_ex.cold+0x5/0xa
[  292.709260][ T8439]  should_failslab+0xc2/0x120
[  292.709272][ T8439]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  292.709289][ T8439]  ? __alloc_skb+0x140/0x710
[  292.709312][ T8439]  __alloc_skb+0x140/0x710
[  292.709326][ T8439]  ? __alloc_skb+0x5b7/0x710
[  292.709340][ T8439]  ? __pfx___alloc_skb+0x10/0x10
[  292.709355][ T8439]  ? trace_contention_end+0x140/0x180
[  292.709370][ T8439]  netlink_dump+0x19b/0xd30
[  292.709385][ T8439]  ? __netlink_lookup+0x652/0x900
[  292.709401][ T8439]  ? __netlink_lookup+0x652/0x900
[  292.709417][ T8439]  ? __pfx_netlink_dump+0x10/0x10
[  292.709433][ T8439]  ? __pfx___mutex_lock+0x10/0x10
[  292.709444][ T8439]  ? __netlink_lookup+0x65c/0x900
[  292.709469][ T8439]  __netlink_dump_start+0x6d6/0x990
[  292.709487][ T8439]  ? __pfx_neigh_dump_info+0x10/0x10
[  292.709504][ T8439]  rtnetlink_rcv_msg+0xb3e/0xe90
[  292.709521][ T8439]  ? __pfx_neigh_dump_info+0x10/0x10
[  292.709538][ T8439]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  292.709555][ T8439]  ? __pfx_neigh_dump_info+0x10/0x10
[  292.709575][ T8439]  ? ref_tracker_free+0x37e/0x6c0
[  292.709590][ T8439]  netlink_rcv_skb+0x159/0x420
[  292.709600][ T8439]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  292.709617][ T8439]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  292.709633][ T8439]  ? netlink_deliver_tap+0x1ae/0xcc0
[  292.709652][ T8439]  netlink_unicast+0x5aa/0x870
[  292.709665][ T8439]  ? __pfx_netlink_unicast+0x10/0x10
[  292.709680][ T8439]  netlink_sendmsg+0x8b0/0xda0
[  292.709693][ T8439]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.709709][ T8439]  sock_write_iter+0x524/0x5a0
[  292.709720][ T8439]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.709730][ T8439]  ? __pfx_sock_write_iter+0x10/0x10
[  292.709748][ T8439]  ? __pfx_file_has_perm+0x10/0x10
[  292.709763][ T8439]  do_iter_readv_writev+0x6ee/0x920
[  292.709781][ T8439]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  292.709797][ T8439]  ? selinux_file_permission+0x8f/0x6d0
[  292.709815][ T8439]  ? bpf_lsm_file_permission+0x9/0x10
[  292.709831][ T8439]  ? security_file_permission+0x76/0x210
[  292.709849][ T8439]  ? rw_verify_area+0xce/0x6d0
[  292.709866][ T8439]  vfs_writev+0x360/0xe10
[  292.709886][ T8439]  ? __pfx_vfs_writev+0x10/0x10
[  292.709903][ T8439]  ? find_held_lock+0x2b/0x80
[  292.709925][ T8439]  ? __fget_files+0x21f/0x3d0
[  292.709940][ T8439]  ? do_writev+0x28a/0x340
[  292.709956][ T8439]  do_writev+0x28a/0x340
[  292.709973][ T8439]  ? __pfx_do_writev+0x10/0x10
[  292.709992][ T8439]  do_syscall_64+0x106/0xf80
[  292.710002][ T8439]  ? clear_bhb_loop+0x40/0x90
[  292.710016][ T8439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.710027][ T8439] RIP: 0033:0x7f7e8339c819
[  292.710037][ T8439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  292.710047][ T8439] RSP: 002b:00007f7e841e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  292.710058][ T8439] RAX: ffffffffffffffda RBX: 00007f7e83615fa0 RCX: 00007f7e8339c819
[  292.710064][ T8439] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004
[  292.710070][ T8439] RBP: 00007f7e841e7090 R08: 0000000000000000 R09: 0000000000000000
[  292.710076][ T8439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  292.710082][ T8439] R13: 00007f7e83616038 R14: 00007f7e83615fa0 R15: 00007ffcc96f2ea8
[  292.710096][ T8439]  </TASK>
[  292.710248][ T5871] usb 3-1: SerialNumber: syz
[  293.126379][ T5871] usb 3-1: config 0 descriptor??
[  293.138481][ T5871] port100 3-1:0.0: NFC: Could not get supported command types
[  293.344400][ T8444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.644'.
[  293.965460][ T5963] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  294.056554][ T5871] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  294.250734][ T5871] usb 2-1: config 0 has no interfaces?
[  294.260805][ T5871] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  294.270140][ T5963] usb 5-1: Using ep0 maxpacket: 8
[  294.275663][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.294145][ T5871] usb 2-1: config 0 descriptor??
[  294.312202][ T5963] usb 5-1: config 2 has an invalid interface number: 31 but max is 0
[  294.336755][ T5963] usb 5-1: config 2 has no interface number 0
[  294.343698][ T5963] usb 5-1: config 2 interface 31 has no altsetting 0
[  294.363043][ T5963] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  294.373669][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.382040][ T5963] usb 5-1: Product: syz
[  294.386866][ T5963] usb 5-1: Manufacturer: syz
[  294.391542][ T5963] usb 5-1: SerialNumber: syz
[  294.453732][   T30] kauditd_printk_skb: 36 callbacks suppressed
[  294.453768][   T30] audit: type=1400 audit(1775825412.430:468): avc:  denied  { name_bind } for  pid=8472 comm="syz.0.652" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  294.551954][  T792] usb 2-1: USB disconnect, device number 23
[  294.706546][   T30] audit: type=1400 audit(1775825412.670:469): avc:  denied  { setopt } for  pid=8482 comm="syz.1.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  294.717819][    T9] usb 3-1: USB disconnect, device number 21
[  294.813807][ T8490] FAULT_INJECTION: forcing a failure.
[  294.813807][ T8490] name failslab, interval 1, probability 0, space 0, times 0
[  294.841684][   T30] audit: type=1400 audit(1775825412.820:470): avc:  denied  { relabelfrom } for  pid=8488 comm="syz.2.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  294.862601][ T8490] CPU: 1 UID: 0 PID: 8490 Comm: syz.5.655 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  294.862629][ T8490] Tainted: [L]=SOFTLOCKUP
[  294.862634][ T8490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  294.862644][ T8490] Call Trace:
[  294.862649][ T8490]  <TASK>
[  294.862656][ T8490]  dump_stack_lvl+0x100/0x190
[  294.862690][ T8490]  should_fail_ex.cold+0x5/0xa
[  294.862715][ T8490]  should_failslab+0xc2/0x120
[  294.862734][ T8490]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  294.862762][ T8490]  ? __alloc_skb+0x140/0x710
[  294.862791][ T8490]  __alloc_skb+0x140/0x710
[  294.862813][ T8490]  ? __alloc_skb+0x5b7/0x710
[  294.862836][ T8490]  ? __pfx___alloc_skb+0x10/0x10
[  294.862867][ T8490]  netlink_alloc_large_skb+0x69/0x150
[  294.862888][ T8490]  netlink_sendmsg+0x680/0xda0
[  294.862907][ T8490]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.862923][ T8490]  ? __might_fault+0x50/0x140
[  294.862958][ T8490]  ____sys_sendmsg+0x9e1/0xb70
[  294.862976][ T8490]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.862995][ T8490]  ? __pfx_____sys_sendmsg+0x10/0x10
[  294.863027][ T8490]  ___sys_sendmsg+0x190/0x1e0
[  294.863048][ T8490]  ? __pfx____sys_sendmsg+0x10/0x10
[  294.863099][ T8490]  __sys_sendmsg+0x170/0x220
[  294.863126][ T8490]  ? __pfx___sys_sendmsg+0x10/0x10
[  294.863168][ T8490]  do_syscall_64+0x106/0xf80
[  294.863184][ T8490]  ? clear_bhb_loop+0x40/0x90
[  294.863207][ T8490]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.863225][ T8490] RIP: 0033:0x7ff9b6b9c819
[  294.863241][ T8490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  294.863258][ T8490] RSP: 002b:00007ff9b79fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.863275][ T8490] RAX: ffffffffffffffda RBX: 00007ff9b6e15fa0 RCX: 00007ff9b6b9c819
[  294.863286][ T8490] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  294.863297][ T8490] RBP: 00007ff9b79fd090 R08: 0000000000000000 R09: 0000000000000000
[  294.863311][ T8490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  294.863320][ T8490] R13: 00007ff9b6e16038 R14: 00007ff9b6e15fa0 R15: 00007ffcc4b6f898
[  294.863344][ T8490]  </TASK>
[  294.863597][   T30] audit: type=1400 audit(1775825412.820:471): avc:  denied  { relabelto } for  pid=8488 comm="syz.2.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  295.113452][   T30] audit: type=1400 audit(1775825413.040:472): avc:  denied  { append } for  pid=8492 comm="syz.5.658" name="dvr0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  295.153155][   T30] audit: type=1326 audit(1775825413.130:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.5.658" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff9b6b9c819 code=0x0
[  295.428669][ T8497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.657'.
[  295.756173][ T8495] zonefs (nullb0) ERROR: Not a zoned block device
[  296.829041][ T5963] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22
[  297.936955][ T5963] usb 5-1: USB disconnect, device number 21
[  299.193100][   T30] audit: type=1400 audit(1775825417.110:474): avc:  denied  { ioctl } for  pid=8523 comm="syz.1.663" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  299.247001][ T8527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  299.278620][ T8533] netlink: 'syz.0.664': attribute type 2 has an invalid length.
[  299.293872][   T30] audit: type=1400 audit(1775825417.150:475): avc:  denied  { read } for  pid=8523 comm="syz.1.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  299.571716][   T30] audit: type=1400 audit(1775825417.540:476): avc:  denied  { map } for  pid=8536 comm="syz.1.667" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  299.895305][   T30] audit: type=1400 audit(1775825417.870:477): avc:  denied  { ioctl } for  pid=8536 comm="syz.1.667" path="socket:[29280]" dev="sockfs" ino=29280 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  299.969072][ T8546] loop8: detected capacity change from 0 to 7
[  299.987915][ T7645] Dev loop8: unable to read RDB block 7
[  300.013762][ T7645]  loop8: AHDI p1 p2 p3
[  300.034732][ T7645] loop8: partition table partially beyond EOD, truncated
[  300.072916][ T7645] loop8: p1 start 1601398130 is beyond EOD, truncated
[  300.087378][ T7645] loop8: p2 start 1702059890 is beyond EOD, truncated
[  300.186222][ T5150] block nbd0: Possible stuck request ffff8880279b2200: control (read@0,1024B). Runtime 150 seconds
[  300.197100][ T5150] block nbd0: Possible stuck request ffff8880279b2400: control (read@1024,1024B). Runtime 150 seconds
[  300.208151][ T5150] block nbd0: Possible stuck request ffff8880279b2600: control (read@2048,1024B). Runtime 150 seconds
[  300.225508][ T5150] block nbd0: Possible stuck request ffff8880279b2800: control (read@3072,1024B). Runtime 150 seconds
[  300.256303][ T8549] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  300.277851][ T8549] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  300.413703][ T8546] Dev loop8: unable to read RDB block 7
[  300.456493][ T8551] mkiss: ax0: crc mode is auto.
[  300.467136][   T30] audit: type=1400 audit(1775825418.450:478): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  300.508529][ T8553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.521380][ T8546]  loop8: AHDI p1 p2 p3
[  300.526754][ T8546] loop8: partition table partially beyond EOD, truncated
[  300.534398][ T8546] loop8: p1 start 1601398130 is beyond EOD, truncated
[  300.541499][ T8546] loop8: p2 start 1702059890 is beyond EOD, truncated
[  300.634125][ T8553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.766056][  T792] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  300.883061][ T8562] netlink: 24 bytes leftover after parsing attributes in process `syz.5.672'.
[  302.572513][   T30] audit: type=1326 audit(1775825420.550:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8576 comm="syz.0.677" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e8339c819 code=0x0
[  302.709246][   T30] audit: type=1326 audit(1775825420.600:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8578 comm="syz.4.674" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf0059c819 code=0x0
[  303.799396][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  304.894903][ T7915] block nbd1: Possible stuck request ffff888027a00000: control (read@0,1024B). Runtime 150 seconds
[  304.905790][ T7915] block nbd1: Possible stuck request ffff888027a00200: control (read@1024,1024B). Runtime 150 seconds
[  304.916873][ T7915] block nbd1: Possible stuck request ffff888027a00400: control (read@2048,1024B). Runtime 150 seconds
[  304.929863][ T7915] block nbd1: Possible stuck request ffff888027a00600: control (read@3072,1024B). Runtime 150 seconds
[  306.070810][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'.
[  306.088358][ T8592] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  306.579431][ T8595] xt_connbytes: Forcing CT accounting to be enabled
[  306.658655][   T30] audit: type=1326 audit(1775825424.630:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.2.682" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e7fb9c819 code=0x0
[  309.355784][ T8623] netlink: 24 bytes leftover after parsing attributes in process `syz.5.686'.
[  309.377976][   T30] audit: type=1400 audit(1775825427.360:482): avc:  denied  { mount } for  pid=8617 comm="syz.2.687" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  309.735535][    T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  309.985970][ T8637] syzkaller0: entered promiscuous mode
[  309.991460][ T8637] syzkaller0: entered allmulticast mode
[  310.097023][    T9] usb 3-1: Using ep0 maxpacket: 32
[  310.118948][    T9] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  310.142740][    T9] usb 3-1: config 0 has no interface number 0
[  310.152416][    T9] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  310.459194][    T9] usb 3-1: config 0 interface 85 has no altsetting 0
[  310.474277][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  310.504067][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.522606][    T9] usb 3-1: Product: syz
[  310.529276][    T9] usb 3-1: Manufacturer: syz
[  310.548600][ T8644] blktrace: Concurrent blktraces are not allowed on sg0
[  310.555667][    T9] usb 3-1: SerialNumber: syz
[  311.032734][    T9] usb 3-1: config 0 descriptor??
[  311.242199][ T8633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.251728][ T8633] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.261877][    T9] appletouch 3-1:0.85: Failed to read mode from device.
[  311.271854][    T9] appletouch 3-1:0.85: probe with driver appletouch failed with error -5
[  312.325851][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.696'.
[  312.735873][ T5871] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  312.957517][ T5871] usb 2-1: Using ep0 maxpacket: 8
[  312.983618][ T5871] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  313.003337][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.027575][ T5871] usb 2-1: Product: syz
[  313.044946][ T5871] usb 2-1: Manufacturer: syz
[  313.055089][ T5871] usb 2-1: SerialNumber: syz
[  313.077585][ T5871] usb 2-1: config 0 descriptor??
[  313.104779][ T5871] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  313.108283][   T30] audit: type=1400 audit(1775825431.080:483): avc:  denied  { append } for  pid=8675 comm="syz.0.699" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  313.114475][ T5871] pctv452e: pctv452e_power_ctrl: 1
[  313.114475][ T5871] 
[  313.173505][ T5871] usb 2-1: selecting invalid altsetting 3
[  313.186072][ T5871] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  313.186072][ T5871] 
[  313.218298][ T5871] dvb-usb: bulk message failed: -22 (5/0)
[  313.237758][ T5871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  313.256333][ T5871] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  313.266978][ T5871] usb 2-1: media controller created
[  313.288687][ T5871] dvb-usb: bulk message failed: -22 (8/0)
[  313.295581][ T5871] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[  313.314704][ T5871] dvb-usb: MAC address reading failed.
[  313.342672][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  313.412781][ T5871] DVB: Unable to find symbol stb0899_attach()
[  313.422019][ T5871] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  313.487910][ T5871] rc_core: IR keymap rc-tt-1500 not found
[  313.494432][ T5871] Registered IR keymap rc-empty
[  313.511357][ T5871] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  313.529281][ T5871] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input14
[  313.551008][ T5871] dvb-usb: schedule remote query interval to 100 msecs.
[  313.558712][ T5871] pctv452e: pctv452e_power_ctrl: 0
[  313.558712][ T5871] 
[  313.570399][ T5871] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  313.671732][ T5871] dvb-usb: bulk message failed: -22 (4/0)
[  313.678749][ T5871] dvb-usb: error -22 while querying for an remote control event.
[  313.798604][ T5871] dvb-usb: bulk message failed: -22 (4/0)
[  313.810229][ T5871] dvb-usb: error -22 while querying for an remote control event.
[  313.926501][ T5871] dvb-usb: bulk message failed: -22 (4/0)
[  313.935460][ T5871] dvb-usb: error -22 while querying for an remote control event.
[  314.066026][ T5871] dvb-usb: bulk message failed: -22 (4/0)
[  314.071959][ T5871] dvb-usb: error -22 while querying for an remote control event.
[  314.186345][ T5871] dvb-usb: bulk message failed: -22 (4/0)
[  314.192343][ T5871] dvb-usb: error -22 while querying for an remote control event.
[  314.315541][ T5871] dvb-usb: bulk message failed: -22 (4/0)
[  314.321402][ T5871] dvb-usb: error -22 while querying for an remote control event.
[  314.370428][    T9] usb 3-1: USB disconnect, device number 22
[  314.435628][ T5871] dvb-usb: bulk message failed: -22 (4/0)
[  314.447508][ T8684] FAULT_INJECTION: forcing a failure.
[  314.447508][ T8684] name failslab, interval 1, probability 0, space 0, times 0
[  314.461971][ T8684] CPU: 0 UID: 0 PID: 8684 Comm: syz.4.701 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  314.461999][ T8684] Tainted: [L]=SOFTLOCKUP
[  314.462005][ T8684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  314.462015][ T8684] Call Trace:
[  314.462020][ T8684]  <TASK>
[  314.462026][ T8684]  dump_stack_lvl+0x100/0x190
[  314.462059][ T8684]  should_fail_ex.cold+0x5/0xa
[  314.462082][ T8684]  should_failslab+0xc2/0x120
[  314.462100][ T8684]  __kmalloc_cache_noprof+0x7a/0x6f0
[  314.462122][ T8684]  ? rtnl_newlink+0x126/0x2380
[  314.462150][ T8684]  ? __pfx_rtnl_newlink+0x10/0x10
[  314.462176][ T8684]  rtnl_newlink+0x126/0x2380
[  314.462216][ T8684]  ? __pfx_rtnl_newlink+0x10/0x10
[  314.462239][ T8684]  ? find_held_lock+0x2b/0x80
[  314.462261][ T8684]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  314.462281][ T8684]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  314.462305][ T8684]  ? avc_has_perm_noaudit+0x145/0x3b0
[  314.462331][ T8684]  ? __lock_acquire+0x4a5/0x2630
[  314.462361][ T8684]  ? find_held_lock+0x2b/0x80
[  314.462383][ T8684]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  314.462408][ T8684]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  314.462434][ T8684]  ? __pfx_rtnl_newlink+0x10/0x10
[  314.462459][ T8684]  rtnetlink_rcv_msg+0x95e/0xe90
[  314.462486][ T8684]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  314.462518][ T8684]  ? ref_tracker_free+0x37e/0x6c0
[  314.462543][ T8684]  netlink_rcv_skb+0x159/0x420
[  314.462559][ T8684]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  314.462585][ T8684]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  314.462610][ T8684]  ? netlink_deliver_tap+0x1ae/0xcc0
[  314.462641][ T8684]  netlink_unicast+0x5aa/0x870
[  314.462661][ T8684]  ? __pfx_netlink_unicast+0x10/0x10
[  314.462686][ T8684]  netlink_sendmsg+0x8b0/0xda0
[  314.462707][ T8684]  ? __pfx_netlink_sendmsg+0x10/0x10
[  314.462723][ T8684]  ? __might_fault+0x50/0x140
[  314.462755][ T8684]  ____sys_sendmsg+0x9e1/0xb70
[  314.462771][ T8684]  ? __pfx_netlink_sendmsg+0x10/0x10
[  314.462789][ T8684]  ? __pfx_____sys_sendmsg+0x10/0x10
[  314.462811][ T8684]  ? __pfx__kstrtoull+0x10/0x10
[  314.462840][ T8684]  ___sys_sendmsg+0x190/0x1e0
[  314.462859][ T8684]  ? __pfx____sys_sendmsg+0x10/0x10
[  314.462889][ T8684]  ? find_held_lock+0x2b/0x80
[  314.462923][ T8684]  __sys_sendmmsg+0x205/0x430
[  314.462947][ T8684]  ? __pfx___sys_sendmmsg+0x10/0x10
[  314.462978][ T8684]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  314.463005][ T8684]  ? fput+0x79/0x100
[  314.463025][ T8684]  ? ksys_write+0x1ac/0x250
[  314.463040][ T8684]  ? __pfx_ksys_write+0x10/0x10
[  314.463061][ T8684]  __x64_sys_sendmmsg+0x9c/0x100
[  314.463083][ T8684]  ? lockdep_hardirqs_on+0x78/0x100
[  314.463099][ T8684]  do_syscall_64+0x106/0xf80
[  314.463114][ T8684]  ? clear_bhb_loop+0x40/0x90
[  314.463135][ T8684]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.463151][ T8684] RIP: 0033:0x7fbf0059c819
[  314.463167][ T8684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  314.463182][ T8684] RSP: 002b:00007fbf01502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  314.463204][ T8684] RAX: ffffffffffffffda RBX: 00007fbf00815fa0 RCX: 00007fbf0059c819
[  314.463215][ T8684] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003
[  314.463225][ T8684] RBP: 00007fbf01502090 R08: 0000000000000000 R09: 0000000000000000
[  314.463235][ T8684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  314.463244][ T8684] R13: 00007fbf00816038 R14: 00007fbf00815fa0 R15: 00007ffe33c4c9c8
[  314.463267][ T8684]  </TASK>
[  314.465115][ T5871] dvb-usb: error -22 while querying for an remote control event.
[  315.995814][ T5871] dvb-usb: bulk message failed: -22 (4/0)
[  316.001593][ T5871] dvb-usb: error -22 while querying for an remote control event.
[  316.019212][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.703'.
[  316.030721][ T8688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.700'.
[  316.099073][   T10] usb 2-1: USB disconnect, device number 24
[  316.239155][   T10] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  316.824240][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  316.830751][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  316.915519][   T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  317.066978][   T10] usb 2-1: Using ep0 maxpacket: 32
[  317.074355][   T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  317.182456][   T10] usb 2-1: config 0 has no interface number 0
[  317.276396][   T10] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  317.297414][   T10] usb 2-1: config 0 interface 85 has no altsetting 0
[  317.461797][   T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  317.471244][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.479538][   T10] usb 2-1: Product: syz
[  317.483679][   T10] usb 2-1: Manufacturer: syz
[  317.489710][   T10] usb 2-1: SerialNumber: syz
[  317.497570][   T10] usb 2-1: config 0 descriptor??
[  317.707080][ T8716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.715884][ T8716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.745268][   T10] appletouch 2-1:0.85: Failed to read mode from device.
[  317.815561][   T10] appletouch 2-1:0.85: probe with driver appletouch failed with error -5
[  318.718549][ T8733] netlink: 12 bytes leftover after parsing attributes in process `syz.5.712'.
[  318.802868][   T30] audit: type=1400 audit(1775825436.780:484): avc:  denied  { write } for  pid=8730 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  319.444742][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.715'.
[  320.158010][   T10] usb 2-1: USB disconnect, device number 25
[  320.712828][   T30] audit: type=1400 audit(1775825438.690:485): avc:  denied  { mounton } for  pid=8757 comm="syz.2.719" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  320.812382][ T8759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.718'.
[  321.814217][   T30] audit: type=1326 audit(1775825439.790:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8780 comm="syz.4.726" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf0059c819 code=0x0
[  321.895677][   T30] audit: type=1400 audit(1775825439.840:487): avc:  denied  { bind } for  pid=8778 comm="syz.2.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  322.431659][ T5935] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  322.564019][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.730'.
[  322.605504][ T5935] usb 1-1: Using ep0 maxpacket: 32
[  323.574142][ T5935] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  323.583240][ T5935] usb 1-1: config 0 has no interface number 0
[  323.589892][ T5935] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  323.602277][ T5935] usb 1-1: config 0 interface 85 has no altsetting 0
[  323.651278][ T5935] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  323.680916][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.847330][ T5935] usb 1-1: Product: syz
[  323.851589][ T5935] usb 1-1: Manufacturer: syz
[  323.897367][ T5935] usb 1-1: SerialNumber: syz
[  323.976407][ T5935] usb 1-1: config 0 descriptor??
[  323.993279][   T30] audit: type=1400 audit(1775825441.880:488): avc:  denied  { read } for  pid=8798 comm="syz.1.731" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  324.062547][   T30] audit: type=1400 audit(1775825441.880:489): avc:  denied  { open } for  pid=8798 comm="syz.1.731" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  324.144696][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.733'.
[  324.252072][ T8788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.260797][ T8788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.274401][ T5935] appletouch 1-1:0.85: Failed to read mode from device.
[  324.367214][ T5935] appletouch 1-1:0.85: probe with driver appletouch failed with error -5
[  324.729719][   T30] audit: type=1326 audit(1775825442.710:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.5.734" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff9b6b9c819 code=0x0
[  327.057951][ T5935] usb 1-1: USB disconnect, device number 29
[  327.206488][ T8824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.735'.
[  327.734280][ T8843] tmpfs: Unknown parameter '……²™a'
[  329.008331][ T8861] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  330.091303][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.745'.
[  330.625035][ T5150] block nbd0: Possible stuck request ffff8880279b2200: control (read@0,1024B). Runtime 180 seconds
[  330.625098][ T5150] block nbd0: Possible stuck request ffff8880279b2400: control (read@1024,1024B). Runtime 180 seconds
[  330.625113][ T5150] block nbd0: Possible stuck request ffff8880279b2600: control (read@2048,1024B). Runtime 180 seconds
[  330.625126][ T5150] block nbd0: Possible stuck request ffff8880279b2800: control (read@3072,1024B). Runtime 180 seconds
[  331.478034][ T5805] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  331.558352][ T8886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.750'.
[  331.585316][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.749'.
[  331.654326][ T5805] usb 3-1: Using ep0 maxpacket: 32
[  331.709634][ T5805] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  331.738537][ T5805] usb 3-1: config 0 has no interface number 0
[  331.744705][ T5805] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  331.908067][ T8892] FAULT_INJECTION: forcing a failure.
[  331.908067][ T8892] name failslab, interval 1, probability 0, space 0, times 0
[  331.923533][ T5805] usb 3-1: config 0 interface 85 has no altsetting 0
[  331.953203][ T5805] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  331.968452][ T8892] CPU: 1 UID: 0 PID: 8892 Comm: syz.5.751 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  331.968480][ T8892] Tainted: [L]=SOFTLOCKUP
[  331.968485][ T8892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  331.968495][ T8892] Call Trace:
[  331.968500][ T8892]  <TASK>
[  331.968506][ T8892]  dump_stack_lvl+0x100/0x190
[  331.968538][ T8892]  should_fail_ex.cold+0x5/0xa
[  331.968559][ T8892]  should_failslab+0xc2/0x120
[  331.968576][ T8892]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  331.968600][ T8892]  ? skb_clone+0x190/0x400
[  331.968630][ T8892]  skb_clone+0x190/0x400
[  331.968655][ T8892]  netlink_deliver_tap+0xaed/0xcc0
[  331.968684][ T8892]  netlink_unicast+0x650/0x870
[  331.968702][ T8892]  ? __pfx_netlink_unicast+0x10/0x10
[  331.968728][ T8892]  netlink_sendmsg+0x8b0/0xda0
[  331.968749][ T8892]  ? __pfx_netlink_sendmsg+0x10/0x10
[  331.968764][ T8892]  ? __might_fault+0x50/0x140
[  331.968797][ T8892]  ____sys_sendmsg+0x9e1/0xb70
[  331.968815][ T8892]  ? __pfx_netlink_sendmsg+0x10/0x10
[  331.968834][ T8892]  ? __pfx_____sys_sendmsg+0x10/0x10
[  331.968865][ T8892]  ___sys_sendmsg+0x190/0x1e0
[  331.968886][ T8892]  ? __pfx____sys_sendmsg+0x10/0x10
[  331.968937][ T8892]  __sys_sendmsg+0x170/0x220
[  331.968963][ T8892]  ? __pfx___sys_sendmsg+0x10/0x10
[  331.969001][ T8892]  do_syscall_64+0x106/0xf80
[  331.969017][ T8892]  ? clear_bhb_loop+0x40/0x90
[  331.969036][ T8892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.969052][ T8892] RIP: 0033:0x7ff9b6b9c819
[  331.969065][ T8892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  331.969079][ T8892] RSP: 002b:00007ff9b79fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  331.969095][ T8892] RAX: ffffffffffffffda RBX: 00007ff9b6e15fa0 RCX: 00007ff9b6b9c819
[  331.969105][ T8892] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  331.969114][ T8892] RBP: 00007ff9b79fd090 R08: 0000000000000000 R09: 0000000000000000
[  331.969123][ T8892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  331.969131][ T8892] R13: 00007ff9b6e16038 R14: 00007ff9b6e15fa0 R15: 00007ffcc4b6f898
[  331.969154][ T8892]  </TASK>
[  331.969209][ T8892] netlink: 68 bytes leftover after parsing attributes in process `syz.5.751'.
[  331.982773][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.258146][ T5805] usb 3-1: Product: syz
[  332.265102][ T5805] usb 3-1: Manufacturer: syz
[  332.270165][ T5805] usb 3-1: SerialNumber: syz
[  332.311168][ T5805] usb 3-1: config 0 descriptor??
[  332.558454][ T8876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  332.567093][ T8876] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  332.611557][ T5805] appletouch 3-1:0.85: Failed to read mode from device.
[  332.635908][ T5805] appletouch 3-1:0.85: probe with driver appletouch failed with error -5
[  333.155438][ T8915] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  334.505851][ T8921] FAULT_INJECTION: forcing a failure.
[  334.505851][ T8921] name failslab, interval 1, probability 0, space 0, times 0
[  334.594942][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.758'.
[  335.013899][ T8921] CPU: 1 UID: 0 PID: 8921 Comm: syz.1.757 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  335.013923][ T8921] Tainted: [L]=SOFTLOCKUP
[  335.013927][ T8921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  335.013934][ T8921] Call Trace:
[  335.013938][ T8921]  <TASK>
[  335.013943][ T8921]  dump_stack_lvl+0x100/0x190
[  335.013966][ T8921]  should_fail_ex.cold+0x5/0xa
[  335.013988][ T8921]  should_failslab+0xc2/0x120
[  335.014006][ T8921]  __kmalloc_cache_node_noprof+0x7d/0x770
[  335.014037][ T8921]  ? __get_vm_area_node+0x101/0x330
[  335.014058][ T8921]  __get_vm_area_node+0x101/0x330
[  335.014072][ T8921]  __vmalloc_node_range_noprof+0x213/0x1530
[  335.014086][ T8921]  ? vhost_task_create+0x1db/0x370
[  335.014098][ T8921]  ? find_held_lock+0x2b/0x80
[  335.014119][ T8921]  ? local_lock_release+0x99/0x130
[  335.014138][ T8921]  ? local_lock_release+0x99/0x130
[  335.014161][ T8921]  ? vhost_task_create+0x1db/0x370
[  335.014186][ T8921]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  335.014208][ T8921]  ? __memcg_slab_post_alloc_hook+0x51b/0x990
[  335.014226][ T8921]  ? rcu_is_watching+0x12/0xc0
[  335.014239][ T8921]  ? trace_kmem_cache_alloc+0xf3/0x120
[  335.014262][ T8921]  ? vhost_task_create+0x1db/0x370
[  335.014280][ T8921]  __vmalloc_node_noprof+0xad/0xf0
[  335.014300][ T8921]  ? vhost_task_create+0x1db/0x370
[  335.014322][ T8921]  copy_process+0x5ec/0x7a40
[  335.014353][ T8921]  ? __pfx_copy_process+0x10/0x10
[  335.014370][ T8921]  ? lockdep_init_map_type+0x5c/0x250
[  335.014383][ T8921]  ? lockdep_init_map_type+0x5c/0x250
[  335.014395][ T8921]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  335.014418][ T8921]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  335.014441][ T8921]  vhost_task_create+0x1db/0x370
[  335.014460][ T8921]  ? __pfx_vhost_task_create+0x10/0x10
[  335.014478][ T8921]  ? trace_contention_end+0x140/0x180
[  335.014495][ T8921]  ? __pfx_vhost_task_fn+0x10/0x10
[  335.014509][ T8921]  ? __pfx___mutex_lock+0x10/0x10
[  335.014520][ T8921]  ? kasan_quarantine_put+0x104/0x240
[  335.014536][ T8921]  ? lockdep_hardirqs_on+0x78/0x100
[  335.014550][ T8921]  kvm_mmu_post_init_vm+0x1b3/0x370
[  335.014571][ T8921]  kvm_arch_vcpu_ioctl_run+0x66/0x1830
[  335.014591][ T8921]  ? kvm_vcpu_ioctl+0x155c/0x1730
[  335.014619][ T8921]  kvm_vcpu_ioctl+0x730/0x1730
[  335.014640][ T8921]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  335.014656][ T8921]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  335.014673][ T8921]  ? do_vfs_ioctl+0x226/0x13e0
[  335.014690][ T8921]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  335.014714][ T8921]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  335.014747][ T8921]  ? __fget_files+0x215/0x3d0
[  335.014763][ T8921]  ? hook_file_ioctl_common+0x146/0x410
[  335.014781][ T8921]  ? selinux_file_ioctl+0x139/0x290
[  335.014797][ T8921]  ? selinux_file_ioctl+0xb4/0x290
[  335.014821][ T8921]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  335.014846][ T8921]  __x64_sys_ioctl+0x18e/0x210
[  335.014872][ T8921]  do_syscall_64+0x106/0xf80
[  335.014888][ T8921]  ? clear_bhb_loop+0x40/0x90
[  335.014907][ T8921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.014923][ T8921] RIP: 0033:0x7f310ef9c819
[  335.014932][ T8921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  335.014942][ T8921] RSP: 002b:00007f310fe17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  335.014953][ T8921] RAX: ffffffffffffffda RBX: 00007f310f216090 RCX: 00007f310ef9c819
[  335.014960][ T8921] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  335.014966][ T8921] RBP: 00007f310fe17090 R08: 0000000000000000 R09: 0000000000000000
[  335.014972][ T8921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  335.014981][ T8921] R13: 00007f310f216128 R14: 00007f310f216090 R15: 00007fff2e8d94a8
[  335.015005][ T8921]  </TASK>
[  335.414538][ T5805] usb 3-1: USB disconnect, device number 23
[  335.440546][ T8921] syz.1.757: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  335.455706][ T8921] CPU: 1 UID: 0 PID: 8921 Comm: syz.1.757 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  335.455725][ T8921] Tainted: [L]=SOFTLOCKUP
[  335.455729][ T8921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  335.455735][ T8921] Call Trace:
[  335.455739][ T8921]  <TASK>
[  335.455743][ T8921]  dump_stack_lvl+0x100/0x190
[  335.455765][ T8921]  warn_alloc.cold+0x95/0x1c1
[  335.455785][ T8921]  ? __pfx_warn_alloc+0x10/0x10
[  335.455800][ T8921]  ? trace_kmalloc+0x101/0x130
[  335.455813][ T8921]  ? __kmalloc_cache_node_noprof+0x2d9/0x770
[  335.455831][ T8921]  ? __kasan_kmalloc+0x8a/0xb0
[  335.455848][ T8921]  ? __get_vm_area_node+0x208/0x330
[  335.455864][ T8921]  __vmalloc_node_range_noprof+0xbf4/0x1530
[  335.455877][ T8921]  ? find_held_lock+0x2b/0x80
[  335.455891][ T8921]  ? local_lock_release+0x99/0x130
[  335.455904][ T8921]  ? local_lock_release+0x99/0x130
[  335.455918][ T8921]  ? vhost_task_create+0x1db/0x370
[  335.455935][ T8921]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  335.455949][ T8921]  ? __memcg_slab_post_alloc_hook+0x51b/0x990
[  335.455964][ T8921]  ? rcu_is_watching+0x12/0xc0
[  335.455977][ T8921]  ? trace_kmem_cache_alloc+0xf3/0x120
[  335.455989][ T8921]  ? vhost_task_create+0x1db/0x370
[  335.456008][ T8921]  __vmalloc_node_noprof+0xad/0xf0
[  335.456021][ T8921]  ? vhost_task_create+0x1db/0x370
[  335.456035][ T8921]  copy_process+0x5ec/0x7a40
[  335.456057][ T8921]  ? __pfx_copy_process+0x10/0x10
[  335.456074][ T8921]  ? lockdep_init_map_type+0x5c/0x250
[  335.456086][ T8921]  ? lockdep_init_map_type+0x5c/0x250
[  335.456097][ T8921]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  335.456115][ T8921]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  335.456130][ T8921]  vhost_task_create+0x1db/0x370
[  335.456143][ T8921]  ? __pfx_vhost_task_create+0x10/0x10
[  335.456155][ T8921]  ? trace_contention_end+0x140/0x180
[  335.456171][ T8921]  ? __pfx_vhost_task_fn+0x10/0x10
[  335.456184][ T8921]  ? __pfx___mutex_lock+0x10/0x10
[  335.456195][ T8921]  ? kasan_quarantine_put+0x104/0x240
[  335.456212][ T8921]  ? lockdep_hardirqs_on+0x78/0x100
[  335.456225][ T8921]  kvm_mmu_post_init_vm+0x1b3/0x370
[  335.456239][ T8921]  kvm_arch_vcpu_ioctl_run+0x66/0x1830
[  335.456254][ T8921]  ? kvm_vcpu_ioctl+0x155c/0x1730
[  335.456273][ T8921]  kvm_vcpu_ioctl+0x730/0x1730
[  335.456290][ T8921]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  335.456306][ T8921]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  335.456323][ T8921]  ? do_vfs_ioctl+0x226/0x13e0
[  335.456340][ T8921]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  335.456356][ T8921]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  335.456378][ T8921]  ? __fget_files+0x215/0x3d0
[  335.456389][ T8921]  ? hook_file_ioctl_common+0x146/0x410
[  335.456404][ T8921]  ? selinux_file_ioctl+0x139/0x290
[  335.456420][ T8921]  ? selinux_file_ioctl+0xb4/0x290
[  335.456436][ T8921]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  335.456453][ T8921]  __x64_sys_ioctl+0x18e/0x210
[  335.456470][ T8921]  do_syscall_64+0x106/0xf80
[  335.456480][ T8921]  ? clear_bhb_loop+0x40/0x90
[  335.456493][ T8921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.456504][ T8921] RIP: 0033:0x7f310ef9c819
[  335.456514][ T8921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  335.456524][ T8921] RSP: 002b:00007f310fe17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  335.456534][ T8921] RAX: ffffffffffffffda RBX: 00007f310f216090 RCX: 00007f310ef9c819
[  335.456541][ T8921] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  335.456547][ T8921] RBP: 00007f310fe17090 R08: 0000000000000000 R09: 0000000000000000
[  335.456553][ T8921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  335.456559][ T8921] R13: 00007f310f216128 R14: 00007f310f216090 R15: 00007fff2e8d94a8
[  335.456572][ T8921]  </TASK>
[  335.456576][ T8921] Mem-Info:
[  335.842805][ T7915] block nbd1: Possible stuck request ffff888027a00000: control (read@0,1024B). Runtime 180 seconds
[  335.843166][ T8921] active_anon:38131 inactive_anon:0 isolated_anon:0
[  335.843166][ T8921]  active_file:21715 inactive_file:40795 isolated_file:0
[  335.843166][ T8921]  unevictable:768 dirty:386 writeback:0
[  335.843166][ T8921]  slab_reclaimable:10088 slab_unreclaimable:101231
[  335.843166][ T8921]  mapped:39707 shmem:28194 pagetables:1451
[  335.843166][ T8921]  sec_pagetables:0 bounce:0
[  335.843166][ T8921]  kernel_misc_reclaimable:0
[  335.843166][ T8921]  free:1253506 free_pcp:14993 free_cma:0
[  335.853797][ T7915] block nbd1: Possible stuck request ffff888027a00200: control (read@1024,1024B). Runtime 180 seconds
[  335.913234][ T7915] block nbd1: Possible stuck request ffff888027a00400: control (read@2048,1024B). Runtime 180 seconds
[  335.924249][ T7915] block nbd1: Possible stuck request ffff888027a00600: control (read@3072,1024B). Runtime 180 seconds
[  335.985725][ T8921] Node 0 active_anon:153224kB inactive_anon:0kB active_file:86860kB inactive_file:162980kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:159528kB dirty:1544kB writeback:0kB shmem:111940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12900kB pagetables:5736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  336.024218][ T8921] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  336.057360][ T8921] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  336.128240][ T8921] lowmem_reserve[]: 0 2477 2478 2478 2478
[  336.134003][ T8921] Node 0 DMA32 free:1081976kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:142224kB inactive_anon:0kB active_file:86860kB inactive_file:162980kB unevictable:1536kB writepending:1544kB zspages:0kB present:3129332kB managed:2537032kB mlocked:0kB bounce:0kB free_pcp:54404kB local_pcp:30328kB free_cma:0kB
[  336.172258][ T8921] lowmem_reserve[]: 0 0 1 1 1
[  336.177464][ T8921] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1044kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  336.214094][ T8921] lowmem_reserve[]: 0 0 0 0 0
[  336.219276][ T8921] Node 1 Normal free:3930420kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:0kB free_cma:0kB
[  336.265856][ T8921] lowmem_reserve[]: 0 0 0 0 0
[  336.282086][   T30] audit: type=1326 audit(1775825454.260:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.0.761" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e8339c819 code=0x0
[  336.282119][ T8921] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB
[  336.331073][ T8921] Node 0 DMA32: 1267*4kB (UME) 1023*8kB (UME) 583*16kB (UME) 136*32kB (UM) 39*64kB (UME) 76*128kB (UME) 38*256kB (UME) 32*512kB (UME) 15*1024kB (M) 13*2048kB (UME) 238*4096kB (UM) = 1082100kB
[  336.423961][ T8921] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  336.509451][ T8921] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 7*16kB (UM) 9*32kB (UM) 4*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 3*2048kB (UM) 957*4096kB (M) = 3930420kB
[  336.549203][ T8921] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  336.559483][ T8921] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  336.568901][ T8921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  337.617610][ T8921] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  337.745222][ T8921] 87803 total pagecache pages
[  337.750433][ T8941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.763'.
[  337.773247][ T8921] 0 pages in swap cache
[  337.806718][ T8921] Free swap  = 124996kB
[  337.825516][ T8921] Total swap = 124996kB
[  337.831370][ T8921] 2097051 pages RAM
[  337.926080][ T8921] 0 pages HighMem/MovableOnly
[  338.005432][ T8921] 430917 pages reserved
[  338.075962][ T8921] 0 pages cma reserved
[  339.224634][ T8974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'.
[  340.836394][ T9000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.777'.
[  341.101966][ T9010] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  341.774948][ T9012] blktrace: Concurrent blktraces are not allowed on sg0
[  344.058014][ T9044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.790'.
[  344.095508][   T10] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  344.309673][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  344.342982][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  344.381851][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  344.397503][   T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  344.409362][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.428927][   T10] usb 1-1: config 0 descriptor??
[  344.501483][   T30] audit: type=1400 audit(1775825462.460:492): avc:  denied  { getopt } for  pid=9049 comm="syz.1.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  344.540387][   T30] audit: type=1400 audit(1775825462.520:493): avc:  denied  { create } for  pid=9049 comm="syz.1.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  344.599680][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.793'.
[  344.669754][   T30] audit: type=1400 audit(1775825462.520:494): avc:  denied  { ioctl } for  pid=9049 comm="syz.1.792" path="socket:[33553]" dev="sockfs" ino=33553 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  344.669844][   T30] audit: type=1400 audit(1775825462.520:495): avc:  denied  { setopt } for  pid=9049 comm="syz.1.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  344.728477][ T9057] netlink: 'syz.2.786': attribute type 10 has an invalid length.
[  344.728615][ T9057] netlink: 228 bytes leftover after parsing attributes in process `syz.2.786'.
[  344.840940][ T9058] x_tables: unsorted entry at hook 2
[  344.929747][   T10] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max
[  344.947156][   T10] microsoft 0003:045E:07DA.0003: unsupported Resolution Multiplier 0
[  344.980848][   T10] microsoft 0003:045E:07DA.0003: implement() called with n (152) > 32! (kworker/0:1)
[  345.100416][   T30] audit: type=1400 audit(1775825463.080:496): avc:  denied  { read open } for  pid=9069 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  345.147636][   T30] audit: type=1400 audit(1775825463.080:497): avc:  denied  { getattr } for  pid=9069 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  345.215208][   T10] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  345.259771][   T10] microsoft 0003:045E:07DA.0003: no inputs found
[  345.268742][   T10] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway
[  345.305956][   T10] usb 1-1: USB disconnect, device number 30
[  345.583934][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.795'.
[  345.671126][ T9076] fido_id[9076]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  345.783431][   T30] audit: type=1400 audit(1775825463.760:498): avc:  denied  { add_name } for  pid=9066 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  345.871108][   T30] audit: type=1400 audit(1775825463.760:499): avc:  denied  { create } for  pid=9066 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  346.018569][   T30] audit: type=1400 audit(1775825463.760:500): avc:  denied  { write } for  pid=9066 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=4957 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  346.145474][   T30] audit: type=1400 audit(1775825463.790:501): avc:  denied  { append } for  pid=9066 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=4957 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  348.128669][ T9128] netlink: 24 bytes leftover after parsing attributes in process `syz.5.801'.
[  348.356308][ T5805] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  349.616041][ T5805] usb 5-1: Using ep0 maxpacket: 32
[  349.684803][ T5805] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  349.763713][ T5805] usb 5-1: config 0 has no interface number 0
[  349.800505][ T5805] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  349.860523][ T5805] usb 5-1: config 0 interface 85 has no altsetting 0
[  349.883814][ T5805] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  349.902447][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.933012][ T5805] usb 5-1: Product: syz
[  349.947294][ T5805] usb 5-1: Manufacturer: syz
[  349.962414][ T5805] usb 5-1: SerialNumber: syz
[  349.989985][ T5805] usb 5-1: config 0 descriptor??
[  350.220012][ T9127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.231180][ T9127] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  350.241353][ T5805] appletouch 5-1:0.85: Failed to read mode from device.
[  350.258454][ T5805] appletouch 5-1:0.85: probe with driver appletouch failed with error -5
[  351.952563][ T9211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.816'.
[  352.139731][ T5805] usb 5-1: USB disconnect, device number 22
[  352.373704][ T9223] netlink: 40 bytes leftover after parsing attributes in process `syz.4.819'.
[  353.511777][ T9243] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  353.858873][ T9244] overlayfs: missing 'lowerdir'
[  354.263831][ T9226] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  354.491615][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  354.491632][   T30] audit: type=1326 audit(1775825472.470:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9258 comm="syz.5.826" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff9b6b9c819 code=0x0
[  354.737093][   T51] Bluetooth: hci5: command 0x0406 tx timeout
[  355.733624][ T9278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.830'.
[  356.157676][ T9289] blktrace: Concurrent blktraces are not allowed on sg0
[  356.902813][   T30] audit: type=1326 audit(1775825474.880:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9295 comm="syz.0.835" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e8339c819 code=0x0
[  356.926716][ T5921] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  357.170916][ T5921] usb 6-1: Using ep0 maxpacket: 8
[  357.185776][ T5921] usb 6-1: config 2 has an invalid interface number: 31 but max is 0
[  357.196348][ T5921] usb 6-1: config 2 has no interface number 0
[  357.202729][ T5921] usb 6-1: config 2 interface 31 has no altsetting 0
[  357.212621][ T5921] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  357.246117][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.264291][ T5921] usb 6-1: Product: syz
[  357.281020][ T5921] usb 6-1: Manufacturer: syz
[  357.309460][ T5921] usb 6-1: SerialNumber: syz
[  357.496662][   T30] audit: type=1804 audit(1775825475.480:508): pid=9306 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.837" name="file1" dev="ramfs" ino=35276 res=1 errno=0
[  357.709152][ T9307] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  358.149978][ T9314] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  358.571541][ T9318] overlayfs: missing 'lowerdir'
[  359.425568][ T5871] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  359.637649][ T5871] usb 1-1: Using ep0 maxpacket: 16
[  359.660837][ T5871] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  359.864536][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  359.975558][   T30] audit: type=1400 audit(1775825477.860:509): avc:  denied  { ioctl } for  pid=9338 comm="syz.1.846" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  360.000830][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  360.014957][ T5871] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  360.021307][ T9313] zonefs (nullb0) ERROR: Not a zoned block device
[  360.031515][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  360.316569][ T9345] netlink: 'syz.1.846': attribute type 1 has an invalid length.
[  360.324318][ T9345] netlink: 96 bytes leftover after parsing attributes in process `syz.1.846'.
[  360.334833][ T9345] netlink: 658 bytes leftover after parsing attributes in process `syz.1.846'.
[  360.343968][ T9345] netlink: 1 bytes leftover after parsing attributes in process `syz.1.846'.
[  360.447550][ T5921] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22
[  360.475064][ T5871] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  360.510765][ T9344] bridge5: the hash_elasticity option has been deprecated and is always 16
[  360.519577][ T5871] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  360.533693][ T5871] usb 1-1: Manufacturer: syz
[  360.550484][ T5871] usb 1-1: config 0 descriptor??
[  360.978123][ T5150] block nbd0: Possible stuck request ffff8880279b2200: control (read@0,1024B). Runtime 210 seconds
[  360.989027][ T5150] block nbd0: Possible stuck request ffff8880279b2400: control (read@1024,1024B). Runtime 210 seconds
[  360.989171][ T9349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.847'.
[  361.001251][ T5150] block nbd0: Possible stuck request ffff8880279b2600: control (read@2048,1024B). Runtime 210 seconds
[  361.020854][ T5150] block nbd0: Possible stuck request ffff8880279b2800: control (read@3072,1024B). Runtime 210 seconds
[  361.081512][ T5871] rc_core: IR keymap rc-hauppauge not found
[  361.090478][ T5871] Registered IR keymap rc-empty
[  361.105535][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.127690][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.156354][ T5871] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  361.187112][ T5871] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19
[  361.326119][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.387374][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.397660][   T30] audit: type=1326 audit(1775825479.370:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9358 comm="syz.1.849" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f310ef9c819 code=0x0
[  361.538094][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.565690][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.595484][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.626147][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.646499][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.745558][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  362.606607][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  362.965522][ T5871] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  363.019841][  T791] usb 6-1: USB disconnect, device number 3
[  363.031305][ T5871] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  363.082654][ T5871] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  363.296786][ T9376] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  363.497102][ T5871] usb 1-1: USB disconnect, device number 31
[  364.073590][ T9388] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.081983][ T9388] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.925710][ T9404] netlink: 24 bytes leftover after parsing attributes in process `syz.2.860'.
[  365.343564][ T9406] FAULT_INJECTION: forcing a failure.
[  365.343564][ T9406] name failslab, interval 1, probability 0, space 0, times 0
[  365.379855][ T9406] CPU: 1 UID: 0 PID: 9406 Comm: syz.4.861 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  365.379884][ T9406] Tainted: [L]=SOFTLOCKUP
[  365.379889][ T9406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  365.379898][ T9406] Call Trace:
[  365.379903][ T9406]  <TASK>
[  365.379910][ T9406]  dump_stack_lvl+0x100/0x190
[  365.379941][ T9406]  should_fail_ex.cold+0x5/0xa
[  365.379965][ T9406]  ? lsm_blob_alloc+0x68/0x90
[  365.379983][ T9406]  should_failslab+0xc2/0x120
[  365.380002][ T9406]  __kmalloc_noprof+0xe0/0x850
[  365.380028][ T9406]  ? audit_alloc+0xa2/0x7b0
[  365.380059][ T9406]  lsm_blob_alloc+0x68/0x90
[  365.380078][ T9406]  security_task_alloc+0x2a/0x260
[  365.380102][ T9406]  copy_process+0x258f/0x7a40
[  365.380138][ T9406]  ? __pfx_copy_process+0x10/0x10
[  365.380165][ T9406]  ? lockdep_init_map_type+0x5c/0x250
[  365.380186][ T9406]  ? lockdep_init_map_type+0x5c/0x250
[  365.380204][ T9406]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  365.380231][ T9406]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  365.380256][ T9406]  vhost_task_create+0x1db/0x370
[  365.380277][ T9406]  ? __pfx_vhost_task_create+0x10/0x10
[  365.380296][ T9406]  ? trace_contention_end+0x140/0x180
[  365.380321][ T9406]  ? __pfx_vhost_task_fn+0x10/0x10
[  365.380343][ T9406]  ? __pfx___mutex_lock+0x10/0x10
[  365.380361][ T9406]  ? kasan_quarantine_put+0x104/0x240
[  365.380385][ T9406]  ? lockdep_hardirqs_on+0x78/0x100
[  365.380408][ T9406]  kvm_mmu_post_init_vm+0x1b3/0x370
[  365.380430][ T9406]  kvm_arch_vcpu_ioctl_run+0x66/0x1830
[  365.380450][ T9406]  ? kvm_vcpu_ioctl+0x155c/0x1730
[  365.380482][ T9406]  kvm_vcpu_ioctl+0x730/0x1730
[  365.380510][ T9406]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  365.380535][ T9406]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  365.380562][ T9406]  ? do_vfs_ioctl+0x226/0x13e0
[  365.380589][ T9406]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  365.380616][ T9406]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  365.380651][ T9406]  ? __fget_files+0x215/0x3d0
[  365.380668][ T9406]  ? hook_file_ioctl_common+0x146/0x410
[  365.380695][ T9406]  ? selinux_file_ioctl+0x139/0x290
[  365.380719][ T9406]  ? selinux_file_ioctl+0xb4/0x290
[  365.380744][ T9406]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  365.380770][ T9406]  __x64_sys_ioctl+0x18e/0x210
[  365.380798][ T9406]  do_syscall_64+0x106/0xf80
[  365.380814][ T9406]  ? clear_bhb_loop+0x40/0x90
[  365.380835][ T9406]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.380852][ T9406] RIP: 0033:0x7fbf0059c819
[  365.380866][ T9406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  365.380887][ T9406] RSP: 002b:00007fbf01502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  365.380903][ T9406] RAX: ffffffffffffffda RBX: 00007fbf00815fa0 RCX: 00007fbf0059c819
[  365.380915][ T9406] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  365.380925][ T9406] RBP: 00007fbf01502090 R08: 0000000000000000 R09: 0000000000000000
[  365.380935][ T9406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  365.380944][ T9406] R13: 00007fbf00816038 R14: 00007fbf00815fa0 R15: 00007ffe33c4c9c8
[  365.380967][ T9406]  </TASK>
[  365.904678][   T30] audit: type=1400 audit(1775825483.880:511): avc:  denied  { create } for  pid=9414 comm="syz.5.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[  366.033140][ T9418] mkiss: ax0: crc mode is auto.
[  367.642259][ T7915] block nbd1: Possible stuck request ffff888027a00000: control (read@0,1024B). Runtime 210 seconds
[  367.654103][ T7915] block nbd1: Possible stuck request ffff888027a00200: control (read@1024,1024B). Runtime 210 seconds
[  367.665142][ T7915] block nbd1: Possible stuck request ffff888027a00400: control (read@2048,1024B). Runtime 210 seconds
[  367.676205][ T7915] block nbd1: Possible stuck request ffff888027a00600: control (read@3072,1024B). Runtime 210 seconds
[  367.954165][ T9431] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  368.438264][   T30] audit: type=1400 audit(1775825486.420:512): avc:  denied  { watch } for  pid=9436 comm="syz.1.870" path="/178" dev="tmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  368.748732][ T9443] netlink: 32 bytes leftover after parsing attributes in process `syz.4.871'.
[  369.039311][ T9447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.872'.
[  369.428177][ T9456] blktrace: Concurrent blktraces are not allowed on sg0
[  370.515202][ T9468] FAULT_INJECTION: forcing a failure.
[  370.515202][ T9468] name failslab, interval 1, probability 0, space 0, times 0
[  370.564350][ T9468] CPU: 1 UID: 0 PID: 9468 Comm: syz.0.880 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  370.564383][ T9468] Tainted: [L]=SOFTLOCKUP
[  370.564389][ T9468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  370.564398][ T9468] Call Trace:
[  370.564404][ T9468]  <TASK>
[  370.564411][ T9468]  dump_stack_lvl+0x100/0x190
[  370.564443][ T9468]  should_fail_ex.cold+0x5/0xa
[  370.564466][ T9468]  should_failslab+0xc2/0x120
[  370.564485][ T9468]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  370.564509][ T9468]  ? __d_alloc+0x34/0xa80
[  370.564535][ T9468]  __d_alloc+0x34/0xa80
[  370.564557][ T9468]  d_alloc_parallel+0x111/0x14e0
[  370.564578][ T9468]  ? find_held_lock+0x2b/0x80
[  370.564600][ T9468]  ? __d_lookup+0x25c/0x4a0
[  370.564614][ T9468]  ? __pfx_d_alloc_parallel+0x10/0x10
[  370.564632][ T9468]  ? __d_lookup+0x266/0x4a0
[  370.564653][ T9468]  lookup_open.isra.0+0x57c/0x11b0
[  370.564682][ T9468]  ? __pfx_lookup_open.isra.0+0x10/0x10
[  370.564711][ T9468]  ? __pfx___might_resched+0x10/0x10
[  370.564730][ T9468]  ? mnt_get_write_access+0x52/0x2f0
[  370.564758][ T9468]  ? __pfx_down_write+0x10/0x10
[  370.564778][ T9468]  ? rcu_read_lock_any_held+0x6a/0xa0
[  370.564808][ T9468]  path_openat+0x2291/0x31a0
[  370.564834][ T9468]  ? __pfx_path_openat+0x10/0x10
[  370.564861][ T9468]  do_file_open+0x20e/0x430
[  370.564881][ T9468]  ? __pfx_do_file_open+0x10/0x10
[  370.564916][ T9468]  ? alloc_fd+0x476/0x790
[  370.564936][ T9468]  ? do_getname+0x191/0x390
[  370.564959][ T9468]  do_sys_openat2+0x10d/0x1e0
[  370.564980][ T9468]  ? __pfx_do_sys_openat2+0x10/0x10
[  370.565000][ T9468]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  370.565019][ T9468]  ? __fget_files+0x21f/0x3d0
[  370.565040][ T9468]  __x64_sys_openat+0x12d/0x210
[  370.565061][ T9468]  ? __pfx___x64_sys_openat+0x10/0x10
[  370.565081][ T9468]  ? ksys_write+0x1ac/0x250
[  370.565103][ T9468]  do_syscall_64+0x106/0xf80
[  370.565118][ T9468]  ? clear_bhb_loop+0x40/0x90
[  370.565137][ T9468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.565154][ T9468] RIP: 0033:0x7f7e8339c819
[  370.565168][ T9468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  370.565183][ T9468] RSP: 002b:00007f7e841e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  370.565199][ T9468] RAX: ffffffffffffffda RBX: 00007f7e83615fa0 RCX: 00007f7e8339c819
[  370.565208][ T9468] RDX: 0000000000000042 RSI: 00002000000013c0 RDI: ffffffffffffff9c
[  370.565218][ T9468] RBP: 00007f7e841e7090 R08: 0000000000000000 R09: 0000000000000000
[  370.565227][ T9468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  370.565236][ T9468] R13: 00007f7e83616038 R14: 00007f7e83615fa0 R15: 00007ffcc96f2ea8
[  370.565258][ T9468]  </TASK>
[  370.575792][   T31] INFO: task syz.3.435:7584 blocked for more than 144 seconds.
[  370.846822][   T31]       Tainted: G             L      syzkaller #0
[  370.853341][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  370.862287][   T31] task:syz.3.435       state:D stack:28136 pid:7584  tgid:7583  ppid:5803   task_flags:0x400140 flags:0x00080002
[  370.874766][   T31] Call Trace:
[  370.878266][   T31]  <TASK>
[  370.881230][   T31]  __schedule+0xfee/0x6120
[  370.885971][   T31]  ? __lock_acquire+0x4a5/0x2630
[  370.890930][   T31]  ? __pfx___schedule+0x10/0x10
[  370.896445][   T31]  ? find_held_lock+0x2b/0x80
[  370.901404][   T31]  ? schedule+0x2bf/0x390
[  370.955463][   T31]  schedule+0xdd/0x390
[  370.961149][   T30] audit: type=1400 audit(1775825488.940:513): avc:  denied  { ioctl } for  pid=9476 comm="syz.5.877" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  371.002210][   T31]  schedule_preempt_disabled+0x13/0x30
[  371.012722][   T31]  __mutex_lock+0xc9a/0x1b90
[  371.021528][   T31]  ? sync_bdevs+0x153/0x480
[  371.033981][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  371.042484][   T31]  ? __mutex_unlock_slowpath+0x15c/0x790
[  371.061421][   T31]  ? iput.part.0+0x1a0/0xf50
[  371.075467][   T31]  ? sync_bdevs+0x153/0x480
[  371.080010][   T31]  sync_bdevs+0x153/0x480
[  371.084334][   T31]  ksys_sync+0xb0/0xf0
[  371.092366][   T31]  ? __pfx_ksys_sync+0x10/0x10
[  371.097442][   T31]  ? do_syscall_64+0x95/0xf80
[  371.102186][   T31]  __do_sys_sync+0xe/0x20
[  371.106604][   T31]  do_syscall_64+0x106/0xf80
[  371.111244][   T31]  ? clear_bhb_loop+0x40/0x90
[  371.121686][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.128106][   T31] RIP: 0033:0x7ff93ed9c819
[  371.132549][   T31] RSP: 002b:00007ff93fc88028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  371.141485][   T31] RAX: ffffffffffffffda RBX: 00007ff93f015fa0 RCX: 00007ff93ed9c819
[  371.165408][ T9472] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  371.214665][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  371.232188][   T31] RBP: 00007ff93f015fa0 R08: 0000000000000000 R09: 0000000000000000
[  371.240782][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  371.248859][   T31] R13: 00007ff93f016038 R14: 00007ff93f015fa0 R15: 00007fffd692a558
[  371.257463][   T31]  </TASK>
[  371.260601][   T31] INFO: task syz.3.435:7586 blocked for more than 145 seconds.
[  371.268532][   T31]       Tainted: G             L      syzkaller #0
[  371.275091][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  371.284240][   T31] task:syz.3.435       state:D stack:29000 pid:7586  tgid:7583  ppid:5803   task_flags:0x400040 flags:0x00080002
[  371.303704][   T31] Call Trace:
[  371.307124][   T31]  <TASK>
[  371.310134][   T31]  __schedule+0xfee/0x6120
[  371.319987][   T31]  ? __lock_acquire+0x4a5/0x2630
[  371.325052][   T31]  ? __pfx___schedule+0x10/0x10
[  371.329959][   T31]  ? find_held_lock+0x2b/0x80
[  371.334634][   T31]  ? schedule+0x2bf/0x390
[  371.339184][   T31]  schedule+0xdd/0x390
[  371.343289][   T31]  schedule_preempt_disabled+0x13/0x30
[  371.348784][   T31]  __mutex_lock+0xc9a/0x1b90
[  371.353386][   T31]  ? sync_bdevs+0x153/0x480
[  371.358075][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  371.363111][   T31]  ? __mutex_unlock_slowpath+0x15c/0x790
[  371.368902][   T31]  ? iput.part.0+0x1a0/0xf50
[  371.373497][   T31]  ? sync_bdevs+0x153/0x480
[  371.378254][   T31]  sync_bdevs+0x153/0x480
[  371.382573][   T31]  ksys_sync+0xb0/0xf0
[  371.387438][   T31]  ? __pfx_ksys_sync+0x10/0x10
[  371.392235][   T31]  ? do_syscall_64+0x95/0xf80
[  371.397013][   T31]  __do_sys_sync+0xe/0x20
[  371.401399][   T31]  do_syscall_64+0x106/0xf80
[  371.408595][   T31]  ? clear_bhb_loop+0x40/0x90
[  371.413302][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.419326][   T31] RIP: 0033:0x7ff93ed9c819
[  371.445425][ T5921] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  371.477428][   T31] RSP: 002b:00007ff93fc67028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  371.486144][   T31] RAX: ffffffffffffffda RBX: 00007ff93f016090 RCX: 00007ff93ed9c819
[  371.494148][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  371.502214][   T31] RBP: 00007ff93f016090 R08: 0000000000000000 R09: 0000000000000000
[  371.510211][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  371.519970][   T31] R13: 00007ff93f016128 R14: 00007ff93f016090 R15: 00007fffd692a558
[  371.528889][   T31]  </TASK>
[  371.531996][   T31] 
[  371.531996][   T31] Showing all locks held in the system:
[  371.540329][   T31] 3 locks held by kworker/0:0/9:
[  371.545303][   T31]  #0: ffff88813fe67148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0
[  371.556023][   T31]  #1: ffffc900000e7d08 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0
[  371.571817][   T31]  #2: ffffffff8e7f3340 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0
[  371.581957][   T31] 1 lock held by khungtaskd/31:
[  371.588061][   T31]  #0: ffffffff8e7e7920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  371.599999][   T31] 2 locks held by kworker/u8:7/1098:
[  371.605297][   T31]  #0: ffff88801ebb6148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0
[  371.616465][   T31]  #1: ffffc90004287d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0
[  371.638343][   T31] 2 locks held by getty/5564:
[  371.643202][   T31]  #0: ffff8880339ae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  371.653047][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[  371.665589][ T5921] usb 6-1: Using ep0 maxpacket: 32
[  371.744861][   T31] 1 lock held by udevd/5794:
[  371.750108][   T31]  #0: ffff888027909358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[  371.759636][   T31] 1 lock held by udevd/5797:
[  371.768543][ T5921] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[  371.770048][   T31]  #0: ffff888026dcd358 (&disk->open_mutex){+.+.}-{4:4}
[  371.778828][ T5921] usb 6-1: config 0 has no interface number 0
[  371.793185][   T31] , at: bdev_open+0x41a/0xe40
[  371.793233][ T5921] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  371.872483][ T9485] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  372.200375][   T31] 3 locks held by kworker/1:6/5921:
[  372.205671][   T31] 1 lock held by syz.3.435/7584:
[  372.210644][   T31]  #0: ffff888026dcd358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480
[  372.220168][   T31] 1 lock held by syz.3.435/7586:
[  372.225435][   T31]  #0: ffff888026dcd358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480
[  372.236026][   T31] 1 lock held by syz.1.873/9464:
[  372.241824][   T31] 1 lock held by syz.2.881/9469:
[  372.246840][   T31]  #0: ffffffff8e7f3340 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0
[  372.247858][ T5921] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  372.256953][   T31] 
[  372.268320][   T31] =============================================
[  372.268320][   T31] 
[  372.287325][   T31] NMI backtrace for cpu 0
[  372.287346][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  372.287371][   T31] Tainted: [L]=SOFTLOCKUP
[  372.287376][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  372.287386][   T31] Call Trace:
[  372.287392][   T31]  <TASK>
[  372.287398][   T31]  dump_stack_lvl+0x100/0x190
[  372.287432][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[  372.287453][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  372.287471][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[  372.287497][   T31]  sys_info+0x141/0x190
[  372.287517][   T31]  watchdog+0xd25/0x1050
[  372.287549][   T31]  ? __pfx_watchdog+0x10/0x10
[  372.287574][   T31]  ? __kthread_parkme+0x18c/0x230
[  372.287602][   T31]  ? kthread+0x13a/0x450
[  372.287617][   T31]  ? __pfx_watchdog+0x10/0x10
[  372.287640][   T31]  kthread+0x370/0x450
[  372.287656][   T31]  ? __pfx_kthread+0x10/0x10
[  372.287675][   T31]  ret_from_fork+0x754/0xd80
[  372.287694][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  372.287714][   T31]  ? __switch_to+0x7b4/0x1120
[  372.287737][   T31]  ? __pfx_kthread+0x10/0x10
[  372.287756][   T31]  ret_from_fork_asm+0x1a/0x30
[  372.287789][   T31]  </TASK>
[  372.287795][   T31] Sending NMI from CPU 0 to CPUs 1:
[  372.326967][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.329501][    C1] NMI backtrace for cpu 1
[  372.329516][    C1] CPU: 1 UID: 0 PID: 5921 Comm: kworker/1:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  372.329536][    C1] Tainted: [L]=SOFTLOCKUP
[  372.329540][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  372.329549][    C1] Workqueue: usb_hub_wq hub_event
[  372.329573][    C1] RIP: 0010:delay_tsc+0x32/0xc0
[  372.329592][    C1] Code: fd bf 01 00 00 00 41 54 55 53 e8 29 f0 45 f6 e8 24 78 01 00 41 89 c4 0f 01 f9 66 90 48 c1 e2 20 48 09 c2 48 89 d5 eb 16 f3 90 <bf> 01 00 00 00 e8 04 f0 45 f6 e8 ff 77 01 00 44 39 e0 75 36 0f 01
[  372.329604][    C1] RSP: 0018:ffffc9000216f1a0 EFLAGS: 00000002
[  372.329615][    C1] RAX: 0000000000000003 RBX: 000000f7a1ad463b RCX: 0000000000000000
[  372.329624][    C1] RDX: 0000000000000002 RSI: ffffffff8c1b1e20 RDI: 0000000000000001
[  372.329632][    C1] RBP: 000000f7a1ad3bb5 R08: 0000000000000005 R09: 0000000000000000
[  372.329641][    C1] R10: 00000000000007d5 R11: 0000000000000000 R12: 0000000000000001
[  372.329649][    C1] R13: 0000000000000af1 R14: fffffbfff3695c5a R15: dffffc0000000000
[  372.329658][    C1] FS:  0000000000000000(0000) GS:ffff888124438000(0000) knlGS:0000000000000000
[  372.329672][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  372.329681][    C1] CR2: 00007f310f1eb4b8 CR3: 00000000363de000 CR4: 00000000003526f0
[  372.329690][    C1] Call Trace:
[  372.329694][    C1]  <TASK>
[  372.329700][    C1]  wait_for_lsr+0xf3/0x210
[  372.329723][    C1]  ? __pfx_io_serial_out+0x10/0x10
[  372.329738][    C1]  serial8250_console_write+0xdb9/0x1900
[  372.329754][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  372.329767][    C1]  ? lock_acquire+0x1cf/0x380
[  372.329784][    C1]  console_flush_one_record+0x790/0xe50
[  372.329803][    C1]  ? __pfx_console_flush_one_record+0x10/0x10
[  372.329822][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  372.329842][    C1]  console_unlock+0x103/0x260
[  372.329857][    C1]  ? __pfx_console_unlock+0x10/0x10
[  372.329873][    C1]  ? lock_acquire+0x180/0x380
[  372.329888][    C1]  vprintk_emit+0x407/0x6b0
[  372.329905][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  372.329921][    C1]  ? usb_cache_string+0xf2/0x140
[  372.329937][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  372.329956][    C1]  dev_vprintk_emit+0x394/0x3e0
[  372.329974][    C1]  ? __pfx_dev_vprintk_emit+0x10/0x10
[  372.329989][    C1]  ? kasan_save_track+0x14/0x30
[  372.330010][    C1]  ? kthread+0x370/0x450
[  372.330023][    C1]  ? ret_from_fork+0x754/0xd80
[  372.330036][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  372.330054][    C1]  dev_printk_emit+0xd2/0x10d
[  372.330069][    C1]  ? __pfx_dev_printk_emit+0x10/0x10
[  372.330090][    C1]  __dev_printk+0xcb/0x100
[  372.330106][    C1]  _dev_info+0xef/0x127
[  372.330126][    C1]  ? __pfx__dev_info+0x10/0x10
[  372.330142][    C1]  ? usb_match_device+0xd5/0x570
[  372.330161][    C1]  ? usb_detect_static_quirks+0x335/0x3e0
[  372.330178][    C1]  ? kfree+0x1f6/0x6b0
[  372.330196][    C1]  usb_new_device.cold+0x3df/0x115c
[  372.330215][    C1]  ? do_raw_spin_lock+0x128/0x260
[  372.330230][    C1]  ? __pfx_usb_new_device+0x10/0x10
[  372.330248][    C1]  ? mark_held_locks+0x40/0x70
[  372.330262][    C1]  hub_event+0x314d/0x4af0
[  372.330288][    C1]  ? __pfx_hub_event+0x10/0x10
[  372.330305][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  372.330329][    C1]  ? rcu_is_watching+0x12/0xc0
[  372.330347][    C1]  process_one_work+0xa23/0x19a0
[  372.330365][    C1]  ? __pfx_process_one_work+0x10/0x10
[  372.330382][    C1]  ? __pfx_hub_event+0x10/0x10
[  372.330400][    C1]  worker_thread+0x5ef/0xe50
[  372.330417][    C1]  ? __pfx_worker_thread+0x10/0x10
[  372.330431][    C1]  ? kthread+0x13a/0x450
[  372.330443][    C1]  ? __pfx_worker_thread+0x10/0x10
[  372.330456][    C1]  kthread+0x370/0x450
[  372.330467][    C1]  ? __pfx_kthread+0x10/0x10
[  372.330481][    C1]  ret_from_fork+0x754/0xd80
[  372.330494][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  372.330508][    C1]  ? __switch_to+0x7b4/0x1120
[  372.330525][    C1]  ? __pfx_kthread+0x10/0x10
[  372.330538][    C1]  ret_from_fork_asm+0x1a/0x30
[  372.330558][    C1]  </TASK>
[  372.333556][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  372.333575][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  372.333597][   T31] Tainted: [L]=SOFTLOCKUP
[  372.333603][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  372.333613][   T31] Call Trace:
[  372.333619][   T31]  <TASK>
[  372.333626][   T31]  dump_stack_lvl+0x100/0x190
[  372.333654][   T31]  vpanic+0x552/0x970
[  372.333671][   T31]  ? __pfx_vpanic+0x10/0x10
[  372.333689][   T31]  ? rcu_is_watching+0x12/0xc0
[  372.333713][   T31]  panic+0xd1/0xe0
[  372.333728][   T31]  ? __pfx_panic+0x10/0x10
[  372.333746][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[  372.333768][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[  372.333789][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[  372.333808][   T31]  ? watchdog.cold+0x198/0x1ca
[  372.333826][   T31]  ? watchdog+0xd35/0x1050
[  372.333849][   T31]  watchdog.cold+0x1a9/0x1ca
[  372.333879][   T31]  ? __pfx_watchdog+0x10/0x10
[  372.333902][   T31]  ? __kthread_parkme+0x18c/0x230
[  372.333928][   T31]  ? kthread+0x13a/0x450
[  372.333943][   T31]  ? __pfx_watchdog+0x10/0x10
[  372.333963][   T31]  kthread+0x370/0x450
[  372.333979][   T31]  ? __pfx_kthread+0x10/0x10
[  372.333996][   T31]  ret_from_fork+0x754/0xd80
[  372.334014][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  372.334033][   T31]  ? __switch_to+0x7b4/0x1120
[  372.334053][   T31]  ? __pfx_kthread+0x10/0x10
[  372.334071][   T31]  ret_from_fork_asm+0x1a/0x30
[  372.334100][   T31]  </TASK>
[  372.334762][   T31] Kernel Offset: disabled