last executing test programs: 6m31.933340837s ago: executing program 3 (id=701): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x402c41, 0x88) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800008, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=0x0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c636180aa05401e7363616368652c616e616d653d40"]) socket$inet(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000006900)=[{{&(0x7f0000000f80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000001640), 0x0, &(0x7f0000001700)=""/158, 0x9e}, 0xfff}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000001940)=""/114, 0x72}, {&(0x7f00000019c0)=""/160, 0xa0}, {&(0x7f0000001a80)=""/163, 0xa3}, {&(0x7f0000001b40)=""/232, 0xe8}, {&(0x7f0000001c40)=""/210, 0xd2}, {&(0x7f0000001d40)=""/66, 0x42}, {&(0x7f0000001dc0)=""/107, 0x6b}, {&(0x7f0000001e40)=""/151, 0x97}], 0x9, &(0x7f0000001000)=""/215, 0xd7}, 0x9}, {{0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000020c0)=""/137, 0x89}, 0x5}, {{&(0x7f0000002180)=@caif=@dgm, 0x80, &(0x7f00000018c0)=[{&(0x7f0000002200)=""/216, 0xd8}], 0x1, &(0x7f0000002300)=""/195, 0xc3}, 0x6}, {{&(0x7f0000002400)=@alg, 0x80, &(0x7f0000002580)=[{&(0x7f0000002480)=""/185, 0xb9}, {&(0x7f0000002540)=""/52, 0x34}], 0x2, &(0x7f00000025c0)=""/26, 0x1a}, 0x4}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002600)=""/35, 0x23}, {&(0x7f0000002640)=""/178, 0xb2}, {&(0x7f00000048c0)=""/4096, 0x1000}, {&(0x7f00000058c0)=""/4096, 0x1000}, {&(0x7f0000002700)=""/43, 0x2b}, {&(0x7f0000002740)=""/71, 0x47}, {&(0x7f00000027c0)=""/38, 0x26}], 0x7, &(0x7f00000068c0)=""/38, 0x26}, 0x6}], 0x6, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x213044, &(0x7f0000000280)=ANY=[]) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$radio(&(0x7f0000000200), 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='svc_xprt_dequeue\x00', r5, 0x0, 0x4}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r6, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)="f73ff92fe73804933a4449c568cf70c6314567553545754072ea7560d08be6d646c2b826cd16559a8444332152601e077f8719e0b04b29a3374250c103e0498e81b979157d12c38cfdd22e39bbde7447951380536007dd4a763e5b252edd23caea8de99309c26e666cf84d7006c5581c61d84367499505baca3d1adc0bad9e6c0c526ba45781a42b4c736196fe08a2b0097f035f744dacdafc35f044e2ea67bf969fe9602539c5602df9dcecfdb7485a7895e3af1a8b6e10bedad16c986eecb9935cbe96b452f40b39c02a204028790f843a110ab7c1caf8a3012b7c3ea76c1cadf2e9ac6e9f855452c1ce6a1dc7531faabc34", 0xf3}, {&(0x7f0000000840)="15a3289302379f3b94eae71854d372811de87efb4402d004b77525e30a45c2b322090bd714ddb389c844437c01614bc18e16a41e19dcf1e82654249d5bd583aa8a96c20c349841ad53403bb2bfe6666850e8fa0e030e39dae3af316cb2275d781587156b45e2380a094eea44df70bdc64a90f45bca6b1d73c3be4fb517f239cb696308293442bf3f05d8cc8baab8350924ff5959468e0d0f82430b244d88809b205496c6a05a7019c0f12f2530d7200dd6864c59af29a683257ca91c214216d9043e2516a1f19f6df27a1fcb0eb8b3f4a41d8b0416649a9fdd5690011369f5778d54162aba7b6875355e73463af0", 0xee}, {&(0x7f0000000940)="afff177827f446f9003a6e07249af658d377cc900282bfba57687c58e51415641ad4111e17f7a534c88809c56d4f459e51308ffe39ca96a38b3d517aa0af994ba2cb9a830bdca35ca09dfe57b33f1f5cd60ce2f55aa84f296a5c8f124c6e0013678abdbaba251482858d0130375c67bdd988eb5987e399cedaee2b9b9a5f610c50cc5f30aeb1a8d13a93519a14b53206bc7b6abb9af70349098107dbe5098f65eea83c4a87a2de47845fe56c5b035eac5c41a91a4a6f569e04fd843aca9a43271e26c4ff5b39e5615605af7991defe584cc5a87edd06c94e100992af2a05844070", 0xe1}, {&(0x7f0000000300)="a7b7f78a54536233574db8af6f5aa5e12211380beaa9fca56aea9aa3d9c777c1b9830a263edd77a5af3e9e99dee5f05c5b115c068f9f23ce2d5e605686cd54b98dbaca1a32ec4b2c7370832523f4a67db786e45fc72447a07ac04350d8115bb03e6144a527c64f5c32617991efa3f617c1b349bf099386aac652c474af97da4d1322fb6ed32690", 0x87}, {&(0x7f0000000440)="83a43cfb8df45af6baff6a9de1d4a3b97a4f3cd5ccee2a8c9b0ff3bdf9715e4e816b1827e03ce43879ed15b794b3e5d64348abda9547ac831e58", 0x3a}], 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="11000000000000000000000001000000020000000000000180fe57d2a70e438b0b0014e30c0000000000000000001b6d00005ef3ffff000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x190}}, {{&(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000e80)=[{&(0x7f00000028c0)="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", 0x1000}, {&(0x7f0000000c00)="d2c97f4daed0c92b6cc262635a09f53a4a59ddfc7548254b531a260825fe9a2fd5288c2f031e53a35f6d0b0b614f215eed8e634240ed3150018c89327dae2b242ae5c8114f19f8a8f29e9223ea42390cd241e52299a78e853b9afaa5da9c44e87e18732eece276d2b9b62fd0d12131cca3c6e05303d310e590ee716142cb345e75ec53dbac4c99377872b307f956d2577b889bd2a558c38b65c38b56fb6e36fd54908ef516fad9670da360387c41fc8c81f11315fb3b174a630eb3a48c7b96276068c875b37f8b499c657ac23401ae5ef84ad4ed3de31c74c8861ef9a72e9f0b2af04badd43a0cba3be0897f193d85", 0xef}, {&(0x7f0000000d00)="feb8dbd4b53acaf204ea150892c623b30fa3017565ad0a83969bebfd7d5802e685834c131e38bc732dcc9059d49a78b41840634e2328c481e86f4581a1594e499848e711e85d8ef78817b5eba98f432926280da302119a4844e17bc984730624d63daace68523ed37ed25f5dbc3f8616513141e825dc22851650033758c18d44612b3b0d30f3a0c56d38e58452750d2403", 0x91}, {&(0x7f00000038c0)="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", 0x1000}, {&(0x7f0000000dc0)="f5531cba63a65c55760f4d33e20eeb2e32f289008e3a4bc889be31d2572c4575c2196095573c28fd2c52a1d1b255c03f4d3b694bc081f9f09b87fb387427861dc57c466692988fa8858378ebf68afcbb684ae4f4632841faaba197e35d75baef6a85d740faeb47618576193c65d5a06b70fe913082f874c9d8e2153d0121a1a00ff30c20", 0x84}], 0x5}}], 0x2, 0x44000004) write$binfmt_misc(r6, &(0x7f0000000300), 0xfdef) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r9 = fsopen(&(0x7f0000000100)='befs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r9, 0x3, &(0x7f0000000140)='debug', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff) preadv(r8, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) 6m30.996911521s ago: executing program 3 (id=707): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)={0x9, 0xf88}) (async, rerun: 32) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x120200, 0x10) (rerun: 32) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x80}, 0x4) (async, rerun: 32) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000100)=0x8bac) (rerun: 32) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)={0x2, 'wg1\x00', {0x7}, 0x80}) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockname$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast1}, &(0x7f00000001c0)=0x10) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000200)={0x3, 0xfffffff7}) (async) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r0, 0x4068aea3, &(0x7f0000000240)={0xed, 0x0, 0x4}) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x7, &(0x7f0000000340)=[{0x8000, 0xf, 0x0, 0x2}, {0x1, 0x81, 0xf8, 0x2}, {0x3, 0xf, 0x2, 0x5}, {0x7, 0x10, 0x2, 0x4}, {0x8c5e, 0x13, 0x6a, 0xcab7}, {0x4, 0x9, 0x4b, 0x2}, {0x7, 0x8, 0xff, 0x9f}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000002c0)="546c03502cd545c70c446d99c8ab17a994670f3bd63215d8477c71d4af1735a578e2047e895d4e80a24c88c6cce111f69d500b18c90a41477d69c2497a0f6f7dbf2f15d26429edea81cb6b6f4442d4a547d215215417ff6b11f1fdd28a0fc5a1811521973f235fbe03b0f951f96b3c042873effcf1ed7d074e8d", 0x7a, r3}, 0x68) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000640)={{r4, 0xffffffffffffffff, 0x6, 0x8, 0x6, 0x200, 0x95, 0x0, 0x80, 0x3, 0xe0, 0xe3c, 0x4, 0x8, 0xba2}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000700)={0x1c, 0x4, 0x13, 0x1a, 0x0, 0x6, 0x5, 0x145}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r5, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008094}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r6, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x66}}}}, [@NL80211_ATTR_SSID={0x11, 0x34, @random="7bc3671eeebfcb2dd20fa7cecf"}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f00000009c0)={{r1}, 0xf, 0xcdf, 0x8}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000a00)={'erspan0\x00', 0x0, 0x40, 0x0, 0x3, 0x9, {{0x3b, 0x4, 0x3, 0x4, 0xec, 0x66, 0x0, 0x36, 0x4, 0x0, @remote, @empty, {[@rr={0x7, 0x13, 0x1b, [@rand_addr=0x64010102, @broadcast, @rand_addr=0x64010101, @remote]}, @rr={0x7, 0xb, 0xe8, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0xbb, [@broadcast]}, @cipso={0x86, 0x4a, 0x3, [{0x6, 0xd, "dd2e3058f3c9a4f166f92b"}, {0x2, 0x11, "89716530d4c847e8cfffa84e3a279f"}, {0x1, 0xb, "eaabd3137524956a4d"}, {0x1, 0xb, "79db27493c7568e5d5"}, {0x1, 0x2}, {0x6, 0xe, "741e2e5267ee9195138262f0"}]}, @cipso={0x86, 0xc, 0x1, [{0x7, 0x6, "a32612fe"}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x54, 0xfa, 0x3, 0x5, [{@loopback, 0x5}, {@remote, 0x100}, {@rand_addr=0x5, 0x6}, {@multicast2, 0x1}, {@loopback, 0x9}, {@local, 0x3a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0xa}, {@empty, 0x81}, {@multicast1, 0x89fb}]}]}}}}}) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000b80)={@rand_addr=0x64010100, @private=0xa010102, r7}, 0xc) prlimit64(0x0, 0x0, &(0x7f0000000bc0)={0x29cc, 0x401}, &(0x7f0000000c00)) (async) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000cc0)={0x0, 0x800, 0x1, r0, 0x0, &(0x7f0000000c80)={0x9909d8, 0x8, '\x00', @p_u16=&(0x7f0000000c40)=0x80}}) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000d00)) (async, rerun: 64) r8 = socket$netlink(0x10, 0x3, 0xb) (rerun: 64) sendmsg$AUDIT_TTY_GET(r8, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x10, 0x3f8, 0x400, 0x70bd2d, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) (async) epoll_wait(r0, &(0x7f0000000e40)=[{}], 0x1, 0x738e30b0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r9, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) 6m30.129462208s ago: executing program 3 (id=712): r0 = socket(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="120000007d00000008000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r1, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r0}, 0x20) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 6m29.513876182s ago: executing program 3 (id=715): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) (async) ioctl$KDGKBSENT(r1, 0x4b48, 0xfffffffffffffffd) 6m29.106058693s ago: executing program 3 (id=717): ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x3000000}, 0x8) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)={0x1, 0x0, [{0xdddd0000, 0x31, &(0x7f00000000c0)=""/49}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000005700)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40eb, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000900)={0x5, @raw_data="41fbdc2cbb9c6dfa256512afcacebbfcd262c07edc31bfc0be8a95805fa720d3e636e8b2edda7d288d2ea195aaaab257264876d17f660fa15f54db34b66f8e5404fc51adaf7860c1859e457bd2653c6ed949fd420287524cdd3192cf07cb47695221c0561c550c921bddf3b446c3423100ef4a9641855538684f02ce4ba5c2dbb107803a90055caecb09450ef5d14bd9a5f4c3770758da51c95a8f604cc3a8c5051256a8558af595112b0d9bc5e1b707659e3040b1985c229e110030575db9f9ebe223335a992ab4"}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4089, 0xeedb1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r3 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000380)=0x9d36) 6m26.26452886s ago: executing program 3 (id=723): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, 0x0) connect$bt_rfcomm(r0, 0x0, 0x0) close(r0) 6m11.220832785s ago: executing program 32 (id=723): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, 0x0) connect$bt_rfcomm(r0, 0x0, 0x0) close(r0) 4m38.272023941s ago: executing program 5 (id=1041): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x88}, @exit], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280), 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000240)=0xe) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r5, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x48051}, 0x40) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) r8 = syz_open_procfs(0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) syz_fuse_handle_req(r8, 0x0, 0x0, 0x0) 4m35.864470177s ago: executing program 5 (id=1045): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc4c85513, &(0x7f0000000040)={0xb, 0x2, 0x2, 0x0, '\x00', 0xfffffffe}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r3, 0x20, &(0x7f0000000640)={&(0x7f00000021c0)=""/4096, 0x1000, 0x0, &(0x7f0000000580)=""/139, 0x8b}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0xe, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@generic={0x2, 0x4, 0x1, 0x8, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x6}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}]}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0xb4, &(0x7f0000000340)=""/180, 0x40f00, 0x1, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xe, 0xee, 0x401}, 0x10, r5, 0x0, 0x9, &(0x7f00000006c0)=[r3, r3, r3], &(0x7f0000000700)=[{0x4, 0x1, 0xb, 0xa}, {0x4, 0x1, 0xe, 0xb}, {0x5, 0x5, 0x7, 0xa}, {0x0, 0x1, 0x4, 0xc}, {0x4, 0x5, 0x8, 0x8}, {0x4, 0x3, 0x5, 0x1}, {0x0, 0x2, 0x4, 0xb}, {0x0, 0x5, 0x3, 0x1}, {0x1, 0x3, 0x7, 0xb}], 0x10, 0xf}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000200)={0x1d, r6, 0x0, {0x1, 0x1, 0x1}, 0x2}, 0x18) close(r1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001180)={0xa, {"a2e3ad21ed0d52f91b38090987f70e06d038e7ff7fc6e5539b3244078b089b3407326d090890e0878f0e1ac6e7049b336d959b679a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d61a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec97a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f11f46295d8a0fa17713c5802630933a9a34af674f3f39fe27491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f1b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83cd06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11b58cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb783b2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803335ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c134b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3765b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b33c5260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000000140), 0x3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r8, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r0}, 0x20) readv(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/88, 0x58}], 0x1) 4m35.518548005s ago: executing program 5 (id=1050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000200030008000300", @ANYRES32=0x0, @ANYBLOB="0800a000d608000008009f000d000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x1e1300, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fc, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) syz_open_dev$sg(0x0, 0x0, 0x401) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x7fc, 0x800, 0x3, 0x3, 0xffffffffffffffff, 0x10, 0x1002, 0x3, 0xffd, 0x10, 0x3, 0x0, 0x1, 0x4, 0x800000001], 0xffff1000, 0x4010}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x90) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc0100001000000018000000000000000000000000000000950000000000000038720a013653e84c584fdd38a199f6b2df9e19f1574da4512902e83640d72226cbc0c89b926a"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x9e, &(0x7f0000000380)=""/158}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0x3, &(0x7f0000000000)={0x4000010000, 0x10001, 0x2, 0x0, 0x7, 0xb, 0x5, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x7fff, 0x5, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000004}) ioctl$int_in(r5, 0x5421, &(0x7f0000000040)=0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) close(r5) 4m35.313472697s ago: executing program 5 (id=1051): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r3, &(0x7f0000000040)=[{'SYNTH', @void}], 0x6) close(r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0608262300ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7060000050000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff0000000065090000000000007baaf0ff00000000ad0400000000000000080000f8ffffffbfa40000000000df06040000f0ffffffc70200000800000018260000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m33.647853235s ago: executing program 5 (id=1055): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7, 0x40, 0x4, 0x2, {{0x6, 0x4, 0x2, 0x4, 0x18, 0x67, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8, 0x1, 0x40000, 0x400, {{0x30, 0x4, 0x0, 0x3e, 0xc0, 0x67, 0x0, 0x9, 0x4, 0x0, @multicast1, @remote, {[@ssrr={0x89, 0x1f, 0x2d, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty, @local]}, @noop, @lsrr={0x83, 0x13, 0x12, [@private=0xa010100, @local, @loopback, @rand_addr=0x64010101]}, @noop, @cipso={0x86, 0x69, 0x1, [{0x6, 0x11, "2a43546c625a22beb6b0d68c36e7eb"}, {0x1, 0xe, "3940acd383766af93c20cf25"}, {0x6, 0x4, "1921"}, {0x7, 0xd, "99a50a6bea2912afa34b5a"}, {0x2, 0xf, "da24a4c94b68af6d9681701710"}, {0x1, 0x6, "e0525de3"}, {0x6, 0x10, "9e1098fce6705c7c239a2e2f689a"}, {0xfa4084ace6538a3, 0x6, "13765b14"}, {0x7, 0x8, "19cd984db669"}]}, @timestamp_addr={0x44, 0xc, 0xa1, 0x1, 0x8, [{@multicast1, 0x5}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x50, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8014) socket$rds(0x15, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r9 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x13, r9, 0x6000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40eb, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x201, 0xb, 0x1, 0x0, 0xb}) 4m33.214403613s ago: executing program 5 (id=1058): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x50}}, 0x0) 4m18.056968466s ago: executing program 33 (id=1058): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x50}}, 0x0) 9.571883046s ago: executing program 0 (id=1961): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) socket$nl_route(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x44) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 7.67679867s ago: executing program 0 (id=1966): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = syz_io_uring_setup(0x768f, &(0x7f0000000400)={0x0, 0x100000, 0x10300, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) shutdown(r0, 0x1) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0xfffffffffffffffe, 0x49) r4 = syz_io_uring_setup(0x7ddf, &(0x7f0000000000)={0x0, 0xe1a2, 0x10000, 0x3, 0x2f1}, &(0x7f00000000c0), &(0x7f0000000140)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r6, 0x1, &(0x7f00000001c0)=[&(0x7f0000000d80)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r5, &(0x7f0000000c40)='\r', 0x1, 0x8c44}]) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, &(0x7f00000001c0)={0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="000f8000"], 0x0}, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r1, 0x21, &(0x7f0000000200)={0x0, 0xf076, 0x80, 0x1, 0x1e, 0x0, r4}, 0x1) 5.646636182s ago: executing program 6 (id=1969): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x0, {0x0, 0x80000000, 0x8000005, 0x4, 0x5, 0x80000001}}) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x0, {0x0, 0x80000000, 0x8000005, 0x4, 0x5, 0x80000001}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) unshare(0x2040400) (async) unshare(0x2040400) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$bt_hci(r1, 0x0, 0x1, 0x0, &(0x7f0000000080)=0x2) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x0, 0x0, 0x6, 0x4000}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x2000, 0x20000, 0x0, 0xfffffffe, 0x0, 0x3, 0x2000, 0xfffffffd, 0x3, 0x80, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x3, 0xbffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x145, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x6, 0x5, 0x70000000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x2, 0xfffffffe, 0x105, 0x0, 0x0, 0x80008], [0x10, 0x1, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0xbb, 0x1, 0xfffffffc, 0x9, 0x800, 0xffffffd6, 0xfffffffc, 0x0, 0x1, 0x0, 0x1, 0x2ec6a, 0x5, 0x40000002, 0xffffffff, 0xfffffff8, 0x7fffffff, 0x8001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffdffffc, 0x0, 0x8c, 0x0, 0x2, 0x4, 0x5, 0x10001, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4000000, 0x80, 0x2, 0x3, 0x0, 0x9, 0x800000, 0x7], [0x0, 0x3, 0x0, 0x1000000, 0xffffffff, 0x1, 0xa000000, 0x0, 0x0, 0xb78, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x51, 0x0, 0x7, 0x10000, 0x0, 0x80, 0x520, 0xd, 0x0, 0x0, 0x800000, 0x1ff, 0x0, 0x0, 0x2, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x0, 0x3, 0xa9c5, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x100, 0xff, 0x80000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x8, 0x6, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x3, 0x5, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x1, 0x7fff, 0x0, 0xd, 0x800000, 0x0, 0x0, 0x4000000, 0x0, 0x4, 0x6, 0x0, 0xffffeffd, 0x2, 0x0, 0x0, 0x3, 0x4, 0x88, 0x4, 0x3, 0x0, 0x0, 0x1, 0x80000001, 0x100, 0x0, 0x3, 0x7, 0xffeffffe, 0x53591b24, 0x7fffffd, 0x0, 0x5, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x3, 0x3]}, 0x45c) 5.423520278s ago: executing program 4 (id=1971): r0 = gettid() r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r1, &(0x7f0000000080)=@other={'lock', ' ', 'io'}, 0x8) write$vga_arbiter(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="6c6f636b71cdf8ba6d656d00"], 0xc) write$vga_arbiter(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xa) timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local, 0x200}, {@local}, 0x400, "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"}, 0x418, 0x7fefffff}) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) io_uring_enter(r7, 0x47f6, 0x0, 0x700000000000000, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 5.241033897s ago: executing program 6 (id=1974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) close(0x4) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e65766530"], 0x110}}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)='\n', 0x1}], 0x19) 5.004563279s ago: executing program 2 (id=1975): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000200030008000300", @ANYRES32=0x0, @ANYBLOB="0800a000d608000008009f000d000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x1e1300, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fc, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) syz_open_dev$sg(0x0, 0x0, 0x401) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x7fc, 0x800, 0x3, 0x3, 0xffffffffffffffff, 0x10, 0x1002, 0x3, 0xffd, 0x10, 0x3, 0x0, 0x1, 0x4, 0x800000001], 0xffff1000, 0x4010}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x90) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc0100001000000018000000000000000000000000000000950000000000000038720a013653e84c584fdd38a199f6b2df9e19f1574da4512902e83640d72226cbc0c89b926a"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x9e, &(0x7f0000000380)=""/158}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0x3, &(0x7f0000000000)={0x4000010000, 0x10001, 0x2, 0x0, 0x7, 0xb, 0x5, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x7fff, 0x5, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000004}) ioctl$int_in(r5, 0x5421, &(0x7f0000000040)=0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) close(r5) 4.981760482s ago: executing program 4 (id=1976): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b00"], 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x800000, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x2b, @empty, @empty}}) socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r5, 0x0, r0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x700, 0x0, 0x0) 4.581301968s ago: executing program 6 (id=1977): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) socket$nl_route(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x44) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4.206566007s ago: executing program 0 (id=1978): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xffffffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b70400000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.89506672s ago: executing program 0 (id=1979): ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}}, {0x0, 0x0, 0x0, @rand_addr=0x64010101}}}}}, 0x0) sendmsg(r0, 0x0, 0x0) 3.859981251s ago: executing program 2 (id=1980): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r3 = fspick(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1) fsmount(r3, 0x0, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, r5, 0x25, 0x2}, 0x14) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041}) r7 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r8 = dup(r7) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b0000004f000000cc0002000600000005000000", @ANYRES32, @ANYBLOB="00800000ff2d538d7decf7d213b4ccf161616fdef4180f08181e57d5c5433cfa09ea7abebf6e8cb6bf6da34f2d27b0c57a111a384c3b9bb4a315256fd97ff4dbd370bf660374fd60b6805892c3510137d885290d14948ccca6e2400eddf3bb0648622a18e6ba73fb3563ea22", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r9}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r9}, 0x38) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r10, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x9, 0xc, 0x3, 0x405, 0x1, 0x4, 0x1000, 0x7fffffff, 0x2, 0x8, 0x800, 0x5, 0x3ff, 0x4, 0x7, 0xfffd, 0x7ff, 0x0, 0x4, 0x6, 0x400, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x0, 0xa, 0x8, 0x2, 0x1009, 0x804d81, 0x2, 0x8c00, 0x8, 0x939, 0x5, 0x9, 0x4, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x0, 0x5, 0x80000001, 0x6, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x1, 0x5, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0xfffffffa, 0x5, 0x5, 0x0, 0x24e, 0x2, 0xfffffff7, 0x2, 0x20003, 0x5, 0x9, 0x80, 0xb, 0x1, 0x3c, 0xa1, 0x100004, 0xffffffff, 0x5, 0x10004, 0x1, 0x9, 0x7ff, 0x6, 0x7, 0x0, 0xb, 0xffff3f15, 0xa, 0x2, 0x9, 0x7, 0x5, 0x5, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1000004, 0xb, 0x8, 0x3, 0xfffffff7, 0x2, 0x24c, 0x800001ff, 0x9, 0x5, 0x6, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffa, 0x8, 0xff, 0x1, 0x8000, 0x7, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x7, 0x8, 0x0, 0xa, 0x9, 0x5, 0x4, 0x10003, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x4, 0xff, 0x5, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x40, 0x8000, 0x8e, 0xf3, 0x80004, 0x8, 0x1, 0xfffdff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0x10, 0x1, 0x1, 0xc3, 0x4, 0x7a3], [0x9, 0x3a8d, 0xffff9a7f, 0x6f68, 0x6, 0x2, 0x1, 0xfffffff3, 0xd077, 0x1, 0xffffffff, 0x1f, 0x81, 0x0, 0x6, 0x2, 0x200, 0x1000, 0x2, 0x66608000, 0x5, 0x7fb, 0x6, 0x3, 0xa476, 0x5, 0x29, 0x3, 0xd, 0x0, 0x1, 0x1, 0x8, 0x61, 0x200010, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0x9b3, 0x2, 0x1904, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x2, 0x8, 0x8, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x2, 0x8]}, 0x45c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(0xffffffffffffffff) sendmmsg$unix(r11, &(0x7f0000008380)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x6e, 0x0}}], 0x2, 0x40008004) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 3.569588416s ago: executing program 6 (id=1982): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_usb_connect(0x7, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000c113"], 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000500), 0xc0202, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_DO_IT(r4, 0xab03) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @mss={0x2, 0x59c3}, @window={0x3, 0x6b6a, 0x5}, @sack_perm, @window={0x3, 0x1}, @timestamp, @timestamp], 0x7) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x0, "11000200", "00007cda", "030200", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "c08e00", "0c436d743c97c443084000"]}) 3.503016373s ago: executing program 2 (id=1983): setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000002c0)={0x9, 0x0, 0x9, 0x9}, 0x8) kexec_load(0x5, 0x3, &(0x7f0000001080), 0x3e0000) kexec_load(0x100, 0x3, &(0x7f0000000200)=[{&(0x7f0000000000)="810aeef3e975cd0a00f95dc0d12783804385ab589d97079b80cc2a1f9306b4db324da326fbe3d302ca32ee483e8bca763664b509e4624a04907d4d78b512659edc21b73d40ad54abb13bb31b1a770b40afe1f892fdbef3ff0a8fa2d69fa24b5cd13a654ff4814f1c2518f24301", 0x6d, 0x58e2, 0xff}, {&(0x7f0000000080)="da4a1ebb6e6211e0b3a5ee8284dca25f38ab61230075dd3d605e37a5f2e2203779ce82dd9d6b22fb7073c9d1b9722eabc37a494e5cf31720527ab8f745941213914ea8aba1b20034056334c71f90e335d7bf13961d5b8a350da004416727a860c0f4bbd4224e91cf842a0ea6757bf56b4ac805690f1a82009e000cec4fffbf730988360e97b9c81fa8532923a1dcc8a0f3739ae3eb3b3c806ac6e1e3a60ebdcd79b537e944e7302dc9758c4f0d2f97f8ea7f1a6fcdac0eb7b1891943e424162ad9f5397c169dc1adc05dc205acf245dd16249d8803", 0xd5, 0x800, 0x5}, {&(0x7f0000000180)="83791bb551ddcd20b677674e3d7d1b6ac3e3b629dc0462cbacf574c35efad00f3ec0c7f6620e7f34642663c5addb7a0a949fc9c1f2ddea5149c15902a2eb00cb40f5344992dbd5553bb6587af7d671c3e11ddabec3731fc7b4", 0x59, 0x0, 0x899}], 0x320000) 3.340627181s ago: executing program 0 (id=1984): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x100}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x643}]}}]}, 0x50}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) setreuid(0xee01, 0xee01) write$FUSE_INIT(r4, &(0x7f00000000c0)={0x50, 0x0, r5, {0x7, 0x2b, 0xfffffffd, 0x34054504, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x100, 0x80}}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf8, 0xf8, 0x5, [@restrict={0x1, 0x0, 0x0, 0xb, 0x2}, @enum64={0xf, 0x2, 0x0, 0x13, 0x0, 0xd, [{0x2, 0x8, 0x3643}, {0x6, 0xa6e5, 0x7}]}, @enum64={0x8, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x6, 0x81, 0x3}]}, @struct={0x3, 0x9, 0x0, 0x4, 0x0, 0x1, [{0x4, 0x5, 0x1}, {0x5, 0x1, 0xfffffff8}, {0x5, 0x0, 0x401}, {0xf, 0x5, 0x400}, {0x1, 0x4, 0x2}, {0xa, 0x2, 0x100}, {0x10, 0x0, 0x1}, {0x9, 0x4, 0x3}, {0xf, 0x1, 0xff}]}, @typedef={0xe, 0x0, 0x0, 0x8, 0x1}, @volatile={0x3, 0x0, 0x0, 0x9, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x5}]}, @float={0xe, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x5f, 0x30, 0x0]}}, &(0x7f00000003c0)=""/79, 0x115, 0x4f, 0x0, 0x8000, 0x10000}, 0x28) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000480)=@bloom_filter={0x1e, 0x0, 0x7, 0x9, 0x8064, r0, 0x8, '\x00', r3, r6, 0x2, 0x5, 0x0, 0x0, @value=r7}, 0x50) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad132bc192, 0x4002011, r8, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r9, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000240)={0x20, 0xb, 0xfffffffd, 0xce}, 0x0) connect$rose(r1, &(0x7f0000000540)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x1, @default}, 0x1c) 2.440123954s ago: executing program 0 (id=1985): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000300)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)="c35351bafbcacf177bd5102ef3cc18e51e", 0x11}], 0x1}, 0x20004881) recvmmsg(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000640)=""/189, 0xbd}], 0x1, &(0x7f0000000340)=""/72, 0x48}}], 0x1, 0x40012000, 0x0) syz_emit_vhci(&(0x7f0000000900)=ANY=[@ANYBLOB="04340aa4aaaab1aa12260c20cf"], 0xd) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0xfffffffc, 0x8, 0x5, 0xffffff00, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x6, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x401, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x9, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7d, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x6, 0x4, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x800006, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x4, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x10000, 0x8, 0x2, 0x2, 0x3, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x2, 0x10008, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x55, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x7, 0xfffffff9, 0x2, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14020, 0x1, 0x9]}, 0x45c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000500)=0x10000, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x182, 0x2, 0x14, 0xf0, 0xd, 0x3, 0x800000000007, 0x5, 0x100000000000003, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x10000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 2.18479771s ago: executing program 2 (id=1987): r0 = socket(0x2, 0x80805, 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000006f10"], 0x18}, 0x1, 0x0, 0x0, 0xa045}, 0x4044050) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x12) r5 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$key(r5, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000080)={0x0, 0xc, 0x3, 0x6, 0x1}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000"], 0x78) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'bind', '=relative'}}}]}) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)='5', 0x1}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30}], 0x1, 0x0) 2.184487737s ago: executing program 1 (id=1988): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000000000c00000300000076793f290000000004000000000000"], 0x0, 0x26}, 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x55af) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) pipe2(0x0, 0x10080) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000080)={[{@name={'name', 0x3d, 'noprefix'}}, {@none}]}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000a80)={0x8, 0x80000000, 0x1, 'queue0\x00', 0x2}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000380)=[0x0], &(0x7f00000004c0)=[0x0], 0x0, 0xe9, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x14, 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="9d41100008000000cfd58c0378906761f7f3e3edd0ca0982f7255ab2e830eab3f7a12b5ea799bb90e0d1ea8a19fc85bfa90215bfb49940d787ffb4c4dcfff48ba82c8585467815a09c5202ea371ff846b2b7a46fe855ed6852bdb6cc60e39e9c82e5544abf7c4c1cdfcd09da31a65f79cdd60577e2ed59128278c92df1f212907aa6966639456e67733ec76c3d1ea819b670dde20731c17ba273d15acf5a639e0b9759426bfe6d1739dd664394a98847c9a96cf4077b0c667424dce0e0768ed0ed2f24b81583c984b919598f59726901c109b62bb9aefd2128cf5d6f5ebb1d65dca36ebafd9a8b977545e2b073ce4878c6c6ad1b1c"], &(0x7f00000000c0)='syzkaller\x00', 0x1000, 0x92, &(0x7f0000000100)=""/146, 0x40f00, 0x39, '\x00', 0x0, @fallback=0x9, r0, 0x8, &(0x7f00000001c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x7, 0xfffff8e9, 0xdd}, 0x10, r4, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000980)=[{0x5, 0x1, 0x3, 0x5}, {0x2, 0x4, 0x4, 0x9}], 0x10, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000001680)}}, 0x10) 1.961307758s ago: executing program 1 (id=1989): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xffffffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b70400000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.891646024s ago: executing program 6 (id=1990): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000200030008000300", @ANYRES32=0x0, @ANYBLOB="0800a000d608000008009f000d000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x1e1300, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fc, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) syz_open_dev$sg(0x0, 0x0, 0x401) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x7fc, 0x800, 0x3, 0x3, 0xffffffffffffffff, 0x10, 0x1002, 0x3, 0xffd, 0x10, 0x3, 0x0, 0x1, 0x4, 0x800000001], 0xffff1000, 0x4010}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x90) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc0100001000000018000000000000000000000000000000950000000000000038720a013653e84c584fdd38a199f6b2df9e19f1574da4512902e83640d72226cbc0c89b926a"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x9e, &(0x7f0000000380)=""/158}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0x3, &(0x7f0000000000)={0x4000010000, 0x10001, 0x2, 0x0, 0x7, 0xb, 0x5, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x7fff, 0x5, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000004}) ioctl$int_in(r5, 0x5421, &(0x7f0000000040)=0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) close(r5) 1.761687577s ago: executing program 1 (id=1991): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x17, &(0x7f0000000000), 0x10) 1.761461563s ago: executing program 4 (id=1992): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x17, &(0x7f0000000000), 0x10) (fail_nth: 1) 1.666398241s ago: executing program 1 (id=1993): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r3 = fspick(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1) fsmount(r3, 0x0, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, r5, 0x25, 0x2}, 0x14) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041}) r7 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r8 = dup(r7) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b0000004f000000cc0002000600000005000000", @ANYRES32, @ANYBLOB="00800000ff2d538d7decf7d213b4ccf161616fdef4180f08181e57d5c5433cfa09ea7abebf6e8cb6bf6da34f2d27b0c57a111a384c3b9bb4a315256fd97ff4dbd370bf660374fd60b6805892c3510137d885290d14948ccca6e2400eddf3bb0648622a18e6ba73fb3563ea22", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r9}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r9}, 0x38) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r10, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x9, 0xc, 0x3, 0x405, 0x1, 0x4, 0x1000, 0x7fffffff, 0x2, 0x8, 0x800, 0x5, 0x3ff, 0x4, 0x7, 0xfffd, 0x7ff, 0x0, 0x4, 0x6, 0x400, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x0, 0xa, 0x8, 0x2, 0x1009, 0x804d81, 0x2, 0x8c00, 0x8, 0x939, 0x5, 0x9, 0x4, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x0, 0x5, 0x80000001, 0x6, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x1, 0x5, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0xfffffffa, 0x5, 0x5, 0x0, 0x24e, 0x2, 0xfffffff7, 0x2, 0x20003, 0x5, 0x9, 0x80, 0xb, 0x1, 0x3c, 0xa1, 0x100004, 0xffffffff, 0x5, 0x10004, 0x1, 0x9, 0x7ff, 0x6, 0x7, 0x0, 0xb, 0xffff3f15, 0xa, 0x2, 0x9, 0x7, 0x5, 0x5, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1000004, 0xb, 0x8, 0x3, 0xfffffff7, 0x2, 0x24c, 0x800001ff, 0x9, 0x5, 0x6, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffa, 0x8, 0xff, 0x1, 0x8000, 0x7, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x7, 0x8, 0x0, 0xa, 0x9, 0x5, 0x4, 0x10003, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x4, 0xff, 0x5, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x40, 0x8000, 0x8e, 0xf3, 0x80004, 0x8, 0x1, 0xfffdff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0x10, 0x1, 0x1, 0xc3, 0x4, 0x7a3], [0x9, 0x3a8d, 0xffff9a7f, 0x6f68, 0x6, 0x2, 0x1, 0xfffffff3, 0xd077, 0x1, 0xffffffff, 0x1f, 0x81, 0x0, 0x6, 0x2, 0x200, 0x1000, 0x2, 0x66608000, 0x5, 0x7fb, 0x6, 0x3, 0xa476, 0x5, 0x29, 0x3, 0xd, 0x0, 0x1, 0x1, 0x8, 0x61, 0x200010, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0x9b3, 0x2, 0x1904, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x2, 0x8, 0x8, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x2, 0x8]}, 0x45c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(0xffffffffffffffff) sendmmsg$unix(r11, &(0x7f0000008380)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x6e, 0x0}}], 0x2, 0x40008004) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1.634677834s ago: executing program 4 (id=1994): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="120000007d0000000800000002"], 0x48) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r4, &(0x7f000000c1c0)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x1cb) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) 1.498043512s ago: executing program 2 (id=1995): getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e23}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x90, r7, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x8]}, @NL80211_ATTR_FRAME={0x6a, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="7d8cc6decdc2", {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @void, @void, @val={0x3, 0x1, 0x24}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x7, 0x74, 0x7c}}, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x4, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') 1.461036072s ago: executing program 1 (id=1996): kexec_load(0x5, 0x3, &(0x7f0000001080), 0x3e0020) 374.759728ms ago: executing program 6 (id=1997): recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xc8, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x40740}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f21) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$isdn(0x22, 0x2, 0x2) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 252.072812ms ago: executing program 4 (id=1998): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000001000000000000000005"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000001800000001"], 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00') read$FUSE(r1, &(0x7f0000000700)={0x2020}, 0x2020) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x178, r2, 0x309, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x42}}}}, [@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 208.278298ms ago: executing program 2 (id=1999): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}], 0x1}) r2 = eventfd2(0x8, 0x0) write$eventfd(r2, &(0x7f0000000140)=0x8, 0x8) read(r2, &(0x7f0000000480)=""/82, 0x52) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) read$char_usb(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 77.201296ms ago: executing program 4 (id=2000): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_usb_connect(0x7, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000c113"], 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000500), 0xc0202, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_DO_IT(r4, 0xab03) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @mss={0x2, 0x59c3}, @window={0x3, 0x6b6a, 0x5}, @sack_perm, @window={0x3, 0x1}, @timestamp, @timestamp], 0x7) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x0, "11000200", "00007cda", "030200", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "c08e00", "0c436d743c97c443084000"]}) 0s ago: executing program 1 (id=2001): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x80012, r0, 0x3e5bc000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x2, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r4, &(0x7f000000c1c0)=ANY=[@ANYRES32, @ANYBLOB], 0x1cb) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): T37] audit: type=1400 audit(1899732287.055:174785): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7464 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 607.764342][ T37] audit: type=1400 audit(1899732287.055:174786): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7464 comm="syz-executor" name="/" dev="devtmpfs" ino=1 [ 607.764529][ T37] audit: type=1400 audit(1899732287.055:174787): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=7464 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 [ 607.984576][ T5986] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 607.984602][ T5986] em28xx 5-1:0.0: No AC97 audio processor [ 608.136907][T10645] afs: Unknown parameter '00000000000000000000003' [ 608.268341][T10645] overlayfs: invalid origin (0000) [ 609.038814][T10656] block nbd6: shutting down sockets [ 609.243238][ T6044] usb 5-1: USB disconnect, device number 59 [ 609.254620][ T6044] em28xx 5-1:0.0: Disconnecting em28xx [ 609.310757][ T6044] em28xx 5-1:0.0: Freeing device [ 610.126860][T10678] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 610.126889][T10678] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 610.130051][T10678] vhci_hcd vhci_hcd.0: Device attached [ 610.143902][T10680] vhci_hcd: cannot find the pending unlink 4294967287 [ 610.170514][T10680] vhci_hcd: connection closed [ 610.172006][ T6625] vhci_hcd vhci_hcd.6: stop threads [ 610.172035][ T6625] vhci_hcd vhci_hcd.6: release socket [ 610.172081][ T6625] vhci_hcd vhci_hcd.6: disconnect device [ 610.632583][T10691] vivid-004: disconnect [ 610.653644][T10690] vivid-004: reconnect [ 611.179612][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'. [ 612.344118][ T5986] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 612.474251][ T5986] usb 5-1: device descriptor read/64, error -71 [ 612.714237][ T5986] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 612.765838][ T37] kauditd_printk_skb: 3428 callbacks suppressed [ 612.765860][ T37] audit: type=1400 audit(1899732292.067:178216): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5801 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 612.766154][ T37] audit: type=1400 audit(1899732292.067:178217): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5801 comm="syz-executor" name="342" dev="tmpfs" ino=1845 [ 612.774128][ T37] audit: type=1400 audit(1899732292.067:178218): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5801 comm="syz-executor" name="342" dev="tmpfs" ino=1845 [ 612.776278][ T37] audit: type=1400 audit(1899732292.077:178219): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5801 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1849 [ 612.776523][ T37] audit: type=1400 audit(1899732292.077:178220): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5801 comm="syz-executor" name="342" dev="tmpfs" ino=1845 [ 612.776995][ T37] audit: type=1400 audit(1899732292.077:178221): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5801 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 612.777234][ T37] audit: type=1400 audit(1899732292.077:178222): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5801 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 612.777484][ T37] audit: type=1400 audit(1899732292.077:178223): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5801 comm="syz-executor" name="342" dev="tmpfs" ino=1845 [ 612.778952][ T37] audit: type=1400 audit(1899732292.077:178224): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5801 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 612.779210][ T37] audit: type=1400 audit(1899732292.077:178225): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5801 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 612.846451][ T5986] usb 5-1: device descriptor read/64, error -71 [ 612.877156][T10721] vivid-001: disconnect [ 612.938235][T10720] vivid-001: reconnect [ 612.954966][ T5986] usb usb5-port1: attempt power cycle [ 613.623686][ T5986] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 613.655499][ T5986] usb 5-1: device descriptor read/8, error -71 [ 614.082257][ T5986] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 614.098820][ T5986] usb 5-1: device descriptor read/8, error -71 [ 614.205215][ T5986] usb usb5-port1: unable to enumerate USB device [ 614.659935][T10743] loop2: detected capacity change from 0 to 7 [ 614.667504][T10743] Dev loop2: unable to read RDB block 7 [ 614.667555][T10743] loop2: unable to read partition table [ 614.667817][T10743] loop2: partition table beyond EOD, truncated [ 614.667838][T10743] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 615.903919][T10759] vivid-003: disconnect [ 615.961815][T10758] vivid-003: reconnect [ 616.516749][T10767] FAULT_INJECTION: forcing a failure. [ 616.516749][T10767] name failslab, interval 1, probability 0, space 0, times 0 [ 616.516791][T10767] CPU: 1 UID: 0 PID: 10767 Comm: syz.4.1464 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 616.516821][T10767] Tainted: [L]=SOFTLOCKUP [ 616.516829][T10767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 616.516842][T10767] Call Trace: [ 616.516852][T10767] [ 616.516861][T10767] dump_stack_lvl+0x189/0x250 [ 616.516895][T10767] ? __pfx____ratelimit+0x10/0x10 [ 616.516924][T10767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 616.516952][T10767] ? __pfx__printk+0x10/0x10 [ 616.516981][T10767] ? __pfx___might_resched+0x10/0x10 [ 616.517009][T10767] should_fail_ex+0x46c/0x600 [ 616.517040][T10767] should_failslab+0xa8/0x100 [ 616.517063][T10767] __kmalloc_cache_noprof+0x84/0x6d0 [ 616.517095][T10767] ? rtnl_newlink+0xfb/0x1c90 [ 616.517120][T10767] rtnl_newlink+0xfb/0x1c90 [ 616.517137][T10767] ? kasan_save_track+0x3e/0x80 [ 616.517164][T10767] ? kasan_save_free_info+0x46/0x50 [ 616.517186][T10767] ? __kasan_slab_free+0x5c/0x80 [ 616.517214][T10767] ? kmem_cache_free+0x18f/0x8d0 [ 616.517241][T10767] ? nlmon_xmit+0xb0/0x100 [ 616.517262][T10767] ? dev_hard_start_xmit+0x2e0/0x840 [ 616.517285][T10767] ? __dev_queue_xmit+0x14b4/0x31d0 [ 616.517318][T10767] ? __netlink_deliver_tap+0x5ad/0x850 [ 616.517341][T10767] ? netlink_deliver_tap+0x19c/0x1b0 [ 616.517362][T10767] ? netlink_unicast+0x811/0xa10 [ 616.517380][T10767] ? netlink_sendmsg+0x805/0xb30 [ 616.517401][T10767] ? __sock_sendmsg+0x21c/0x270 [ 616.517427][T10767] ? ____sys_sendmsg+0x508/0x810 [ 616.517446][T10767] ? ___sys_sendmsg+0x21f/0x2a0 [ 616.517466][T10767] ? __x64_sys_sendmsg+0x1a1/0x260 [ 616.517489][T10767] ? __pfx_rtnl_newlink+0x10/0x10 [ 616.517512][T10767] ? __lock_acquire+0x6b6/0x2cf0 [ 616.517562][T10767] ? __local_bh_enable+0x27b/0x410 [ 616.517593][T10767] ? __local_bh_enable+0x28c/0x410 [ 616.517616][T10767] ? reacquire_held_locks+0x121/0x1c0 [ 616.517650][T10767] ? __pfx___local_bh_enable+0x10/0x10 [ 616.517683][T10767] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 616.517708][T10767] ? lockdep_hardirqs_on+0x98/0x140 [ 616.517750][T10767] ? __lock_acquire+0x6b6/0x2cf0 [ 616.517786][T10767] ? __dev_queue_xmit+0x259/0x31d0 [ 616.517815][T10767] ? __dev_queue_xmit+0x259/0x31d0 [ 616.517840][T10767] ? __dev_queue_xmit+0x1936/0x31d0 [ 616.517864][T10767] ? netlink_unicast+0x811/0xa10 [ 616.517882][T10767] ? netlink_sendmsg+0x805/0xb30 [ 616.517935][T10767] ? __pfx_rtnl_newlink+0x10/0x10 [ 616.517955][T10767] rtnetlink_rcv_msg+0x7cf/0xb70 [ 616.517991][T10767] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 616.518021][T10767] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 616.518049][T10767] ? ref_tracker_free+0x61e/0x7c0 [ 616.518075][T10767] ? __asan_memcpy+0x40/0x70 [ 616.518101][T10767] ? __pfx_ref_tracker_free+0x10/0x10 [ 616.518124][T10767] ? __skb_clone+0x63/0x7a0 [ 616.518158][T10767] netlink_rcv_skb+0x208/0x470 [ 616.518191][T10767] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 616.518225][T10767] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 616.518262][T10767] ? netlink_deliver_tap+0x2e/0x1b0 [ 616.518302][T10767] netlink_unicast+0x846/0xa10 [ 616.518334][T10767] ? __pfx_netlink_unicast+0x10/0x10 [ 616.518357][T10767] ? netlink_sendmsg+0x642/0xb30 [ 616.518377][T10767] ? skb_put+0x11b/0x210 [ 616.518403][T10767] netlink_sendmsg+0x805/0xb30 [ 616.518439][T10767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.518473][T10767] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 616.518502][T10767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.518527][T10767] __sock_sendmsg+0x21c/0x270 [ 616.518559][T10767] ____sys_sendmsg+0x508/0x810 [ 616.518589][T10767] ? __pfx_____sys_sendmsg+0x10/0x10 [ 616.518623][T10767] ? import_iovec+0x74/0xa0 [ 616.518654][T10767] ___sys_sendmsg+0x21f/0x2a0 [ 616.518678][T10767] ? __pfx____sys_sendmsg+0x10/0x10 [ 616.518736][T10767] ? __fget_files+0x2a/0x420 [ 616.518757][T10767] ? __fget_files+0x3a6/0x420 [ 616.518788][T10767] __x64_sys_sendmsg+0x1a1/0x260 [ 616.518812][T10767] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 616.518844][T10767] ? __pfx_ksys_write+0x10/0x10 [ 616.518875][T10767] ? do_syscall_64+0xbe/0xf80 [ 616.518906][T10767] do_syscall_64+0xfa/0xf80 [ 616.518931][T10767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.518953][T10767] ? clear_bhb_loop+0x60/0xb0 [ 616.518979][T10767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.519000][T10767] RIP: 0033:0x7fd766ecf749 [ 616.519020][T10767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.519039][T10767] RSP: 002b:00007fd765136038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 616.519063][T10767] RAX: ffffffffffffffda RBX: 00007fd767125fa0 RCX: 00007fd766ecf749 [ 616.519080][T10767] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 616.519094][T10767] RBP: 00007fd765136090 R08: 0000000000000000 R09: 0000000000000000 [ 616.519109][T10767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.519123][T10767] R13: 00007fd767126038 R14: 00007fd767125fa0 R15: 00007ffef90400c8 [ 616.519160][T10767] [ 617.442601][ T6044] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 617.605459][ T6044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.605494][ T6044] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 617.605540][ T6044] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 617.605564][ T6044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.615293][ T6044] usb 5-1: config 0 descriptor?? [ 617.638490][ T6044] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 617.813409][T10779] 8021q: adding VLAN 0 to HW filter on device bond2 [ 617.866736][ T6044] usb 5-1: USB disconnect, device number 64 [ 617.912812][ T37] kauditd_printk_skb: 2726 callbacks suppressed [ 617.912834][ T37] audit: type=1400 audit(1899732297.179:180478): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10760 comm="syz.6.1463" name="newroot" dev="tmpfs" ino=2 [ 617.912884][ T37] audit: type=1400 audit(1899732297.179:180479): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10760 comm="syz.6.1463" name="/" dev="devtmpfs" ino=1 [ 617.912926][ T37] audit: type=1400 audit(1899732297.179:180480): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10760 comm="syz.6.1463" name="dri" dev="devtmpfs" ino=625 [ 617.912988][ T37] audit: type=1400 audit(1899732297.179:180481): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=10760 comm="syz.6.1463" name="card1" dev="devtmpfs" ino=628 [ 617.913031][ T37] audit: type=1400 audit(1899732297.179:180482): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=10760 comm="syz.6.1463" path="/dev/dri/card1" dev="devtmpfs" ino=628 [ 617.913071][ T37] audit: type=1400 audit(1899732297.199:180483): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=10760 comm="syz.6.1463" path="/dev/dri/card1" dev="devtmpfs" ino=628 [ 617.913112][ T37] audit: type=1400 audit(1899732297.199:180484): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=10760 comm="syz.6.1463" path="/dev/dri/card1" dev="devtmpfs" ino=628 [ 617.913152][ T37] audit: type=1400 audit(1899732297.209:180485): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10760 comm="syz.6.1463" name="newroot" dev="tmpfs" ino=2 [ 617.913192][ T37] audit: type=1400 audit(1899732297.209:180486): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10760 comm="syz.6.1463" name="/" dev="devtmpfs" ino=1 [ 617.913247][ T37] audit: type=1400 audit(1899732297.209:180487): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10760 comm="syz.6.1463" name="dri" dev="devtmpfs" ino=625 [ 618.551491][T10792] vivid-004: disconnect [ 618.593952][T10791] vivid-004: reconnect [ 620.271393][T10660] syz.2.1426 (10660): drop_caches: 3 [ 620.689711][T10820] ptrace attach of "./syz-executor exec"[7464] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  /dev/cpu/#/msr  [ 620.841529][ T5864] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 621.009844][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 621.010290][ T5864] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 621.010317][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.091137][ T5864] usb 5-1: config 0 descriptor?? [ 621.123694][T10816] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 621.667202][ T5864] elan 0003:04F3:0755.000B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 621.819359][ T10] usb 5-1: USB disconnect, device number 65 [ 621.849923][T10827] vivid-003: disconnect [ 621.882226][T10826] vivid-003: reconnect [ 622.744247][T10844] dvmrp1: entered allmulticast mode [ 622.927498][ T37] kauditd_printk_skb: 2941 callbacks suppressed [ 622.927521][ T37] audit: type=1400 audit(1899732302.230:183267): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5801 comm="syz-executor" name="355" dev="tmpfs" ino=1910 [ 622.927569][ T37] audit: type=1400 audit(1899732302.230:183268): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5801 comm="syz-executor" path="/355/cgroup.cpu" dev="tmpfs" ino=1912 [ 622.927604][ T37] audit: type=1400 audit(1899732302.230:183269): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5801 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 622.927639][ T37] audit: type=1400 audit(1899732302.230:183270): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5801 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 622.927664][ T37] audit: type=1400 audit(1899732302.230:183271): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5801 comm="syz-executor" name="355" dev="tmpfs" ino=1910 [ 622.927693][ T37] audit: type=1400 audit(1899732302.230:183272): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5801 comm="syz-executor" name="355" dev="tmpfs" ino=1910 [ 622.927771][ T37] audit: type=1400 audit(1899732302.230:183273): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5801 comm="syz-executor" name="cgroup.cpu" dev="tmpfs" ino=1912 [ 622.927798][ T37] audit: type=1400 audit(1899732302.230:183274): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5801 comm="syz-executor" name="355" dev="tmpfs" ino=1910 [ 622.927822][ T37] audit: type=1400 audit(1899732302.230:183275): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5801 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 622.927855][ T37] audit: type=1400 audit(1899732302.230:183276): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5801 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 623.348201][T10851] team0: Device xfrm1 is of different type [ 624.087960][T10863] vivid-000: disconnect [ 624.141186][T10862] vivid-000: reconnect [ 624.368803][T10870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1498'. [ 624.400385][ T6044] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 624.483365][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.483530][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.692287][T10870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 624.872890][T10870] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1498'. [ 629.332112][ T37] kauditd_printk_skb: 2000 callbacks suppressed [ 629.332137][ T37] audit: type=1400 audit(1899732307.042:184932): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=10898 comm="syz-executor" name="319" dev="tmpfs" ino=1717 [ 629.332294][ T37] audit: type=1400 audit(1899732307.042:184933): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=10896 comm="syz.6.1508" opid=10896 ocomm="syz.6.1508" [ 629.332433][ T37] audit: type=1400 audit(1899732307.212:184934): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10900 comm="syz.6.1508" name="50" dev="tmpfs" ino=284 [ 629.332581][ T37] audit: type=1400 audit(1899732307.212:184935): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10900 comm="syz.6.1508" name="50" dev="tmpfs" ino=284 [ 629.332728][ T37] audit: type=1400 audit(1899732307.212:184936): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=10900 comm="syz.6.1508" name="50" dev="tmpfs" ino=284 [ 629.332887][ T37] audit: type=1400 audit(1899732307.212:184937): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=10900 comm="syz.6.1508" path="/50/core" dev="tmpfs" ino=289 [ 629.333024][ T37] audit: type=1400 audit(1899732307.212:184938): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=10900 comm="syz.6.1508" name="core" dev="tmpfs" ino=289 [ 629.333248][ T37] audit: type=1400 audit(1899732307.312:184939): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=10896 comm="syz.6.1508" saddr=10.128.0.169 src=30008 daddr=10.128.1.93 dest=36966 netif=eth0 [ 629.333385][ T37] audit: type=1400 audit(1899732307.312:184940): lsm=SMACK fn=smack_ptrace_access_check action=granted subject="_" object="_" requested=r pid=10896 comm="syz.6.1508" opid=10896 ocomm="syz.6.1508" [ 629.568695][ T37] audit: type=1400 audit(1899732307.322:184941): lsm=SMACK fn=smack_ptrace_access_check action=granted subject="_" object="_" requested=r pid=10896 comm="syz.6.1508" opid=10896 ocomm="syz.6.1508" [ 629.579052][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 629.659714][T10901] sctp: [Deprecated]: syz.4.1509 (pid 10901) Use of struct sctp_assoc_value in delayed_ack socket option. [ 629.659714][T10901] Use struct sctp_sack_info instead [ 630.212858][ T6992] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 630.338696][ T5959] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 630.519396][ T5959] usb 5-1: config 0 has an invalid interface number: 182 but max is 1 [ 630.519428][ T5959] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.519448][ T5959] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 630.519470][ T5959] usb 5-1: config 0 has no interface number 0 [ 630.519523][ T5959] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 630.519548][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.526554][ T5959] usb 5-1: config 0 descriptor?? [ 632.722085][ T5879] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 632.815860][T10937] overlayfs: failed to clone upperpath [ 632.875893][ T5879] usb 7-1: config 0 has an invalid interface number: 182 but max is 1 [ 632.875927][ T5879] usb 7-1: config 0 has no interface number 1 [ 632.875998][ T5879] usb 7-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 632.876025][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.929429][ T5879] usb 7-1: config 0 descriptor?? [ 634.368001][ T37] kauditd_printk_skb: 1829 callbacks suppressed [ 634.368022][ T37] audit: type=1400 audit(1899732312.703:186525): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5801 comm="syz-executor" name="366" dev="tmpfs" ino=1969 [ 634.370830][ T37] audit: type=1400 audit(1899732312.703:186526): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5801 comm="syz-executor" name="366" dev="tmpfs" ino=1969 [ 634.370980][ T37] audit: type=1400 audit(1899732312.703:186527): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5801 comm="syz-executor" name="cgroup" dev="tmpfs" ino=1970 [ 634.380855][ T37] audit: type=1400 audit(1899732312.703:186528): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5801 comm="syz-executor" name="366" dev="tmpfs" ino=1969 [ 634.381047][ T37] audit: type=1400 audit(1899732312.713:186529): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5801 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 634.381227][ T37] audit: type=1400 audit(1899732312.713:186530): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5801 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 634.381367][ T37] audit: type=1400 audit(1899732312.713:186531): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5801 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 634.381508][ T37] audit: type=1400 audit(1899732312.713:186532): lsm=SMACK fn=smack_inode_rmdir action=granted subject="_" object="_" requested=w pid=5801 comm="syz-executor" name="366" dev="tmpfs" ino=1969 [ 634.381649][ T37] audit: type=1400 audit(1899732312.713:186533): lsm=SMACK fn=smack_inode_rmdir action=granted subject="_" object="_" requested=w pid=5801 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 634.381793][ T37] audit: type=1400 audit(1899732312.713:186534): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5801 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 634.732126][ T10] usb 5-1: USB disconnect, device number 67 [ 634.974536][T10951] overlayfs: failed to clone lowerpath [ 635.607025][T10955] overlayfs: failed to clone lowerpath [ 635.891989][ T7032] usb 7-1: USB disconnect, device number 6 [ 635.986995][T10958] vivid-000: disconnect [ 636.058954][T10962] block nbd4: shutting down sockets [ 636.092498][T10954] vivid-000: reconnect [ 637.756285][T10981] afs: Unknown parameter '00000000000000000000003' [ 639.374796][T10987] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1534'. [ 639.386890][ T37] kauditd_printk_skb: 2087 callbacks suppressed [ 639.386910][ T37] audit: type=1400 audit(1899732318.685:188043): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=10982 comm="syz.6.1533" saddr=10.128.0.169 src=30008 daddr=10.128.1.93 dest=36966 netif=eth0 [ 639.386961][ T37] audit: type=1400 audit(1899732318.685:188044): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=10982 comm="syz.6.1533" saddr=10.128.0.169 src=30008 daddr=10.128.1.93 dest=36966 netif=eth0 [ 639.387009][ T37] audit: type=1400 audit(1899732318.685:188045): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=10982 comm="syz.6.1533" saddr=10.128.0.169 src=30008 daddr=10.128.1.93 dest=36966 netif=eth0 [ 639.387057][ T37] audit: type=1400 audit(1899732318.685:188046): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=10982 comm="syz.6.1533" saddr=10.128.0.169 src=30008 daddr=10.128.1.93 dest=36966 netif=eth0 [ 639.387105][ T37] audit: type=1400 audit(1899732318.695:188047): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=30 comm="ksoftirqd/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.93 dest=36966 netif=eth0 [ 639.390873][ T37] audit: type=1400 audit(1899732318.695:188048): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10988 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 639.391375][ T37] audit: type=1400 audit(1899732318.695:188049): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10988 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 639.391951][ T37] audit: type=1400 audit(1899732318.695:188050): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10988 comm="syz-executor" name="320" dev="tmpfs" ino=1700 [ 639.392465][ T37] audit: type=1400 audit(1899732318.695:188051): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=10988 comm="syz-executor" opid=10988 ocomm="syz-executor" [ 639.393990][ T37] audit: type=1400 audit(1899732318.695:188052): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10988 comm="syz-executor" name="320" dev="tmpfs" ino=1700 [ 640.005636][ T990] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 640.171453][ T990] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 640.171484][ T990] usb 5-1: config 0 has no interface number 0 [ 640.171539][ T990] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 640.171565][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.229190][ T990] usb 5-1: config 0 descriptor?? [ 640.245896][ T990] usb 5-1: selecting invalid altsetting 1 [ 640.247556][ T990] dvb_ttusb_budget: ttusb_init_controller: error [ 640.247576][ T990] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 640.267945][T11004] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1543'. [ 640.408999][ T990] DVB: Unable to find symbol cx22700_attach() [ 641.003129][ T990] DVB: Unable to find symbol tda10046_attach() [ 641.003147][ T990] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 642.229171][ T6044] usb 5-1: USB disconnect, device number 68 [ 644.005479][T11060] afs: Unknown parameter '01777777777777777777777' [ 644.397671][ T37] kauditd_printk_skb: 3504 callbacks suppressed [ 644.397694][ T37] audit: type=1400 audit(1899732323.687:191107): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=11056 comm="syz.2.1558" name="work" dev="tmpfs" ino=1731 [ 644.399248][ T37] audit: type=1400 audit(1899732323.697:191108): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=11056 comm="syz.2.1558" name="work" dev="tmpfs" ino=1731 [ 644.399648][ T37] audit: type=1400 audit(1899732323.697:191109): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=11056 comm="syz.2.1558" name="#1e" dev="tmpfs" ino=1733 [ 644.399798][ T37] audit: type=1400 audit(1899732323.697:191110): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=11056 comm="syz.2.1558" name="work" dev="tmpfs" ino=1731 [ 644.414792][ T37] audit: type=1400 audit(1899732323.717:191111): lsm=SMACK fn=smack_inode_setxattr action=granted subject="_" object="_" requested=w pid=11056 comm="syz.2.1558" name="work" dev="tmpfs" ino=1731 [ 644.806643][ T37] audit: type=1400 audit(1899732324.097:191112): lsm=SMACK fn=smack_inode_removexattr action=granted subject="_" object="_" requested=w pid=11056 comm="syz.2.1558" name="work" dev="tmpfs" ino=1731 [ 644.806739][ T37] audit: type=1400 audit(1899732324.107:191113): lsm=SMACK fn=smack_sb_statfs action=granted subject="_" object="_" requested=r pid=11056 comm="syz.2.1558" name="file0" dev="tmpfs" ino=1728 [ 644.806779][ T37] audit: type=1400 audit(1899732324.107:191114): lsm=SMACK fn=smack_inode_getxattr action=granted subject="_" object="_" requested=r pid=11056 comm="syz.2.1558" name="file1" dev="tmpfs" ino=1729 [ 644.806815][ T37] audit: type=1400 audit(1899732324.107:191115): lsm=SMACK fn=smack_inode_getxattr action=granted subject="_" object="_" requested=r pid=11056 comm="syz.2.1558" name="file1" dev="tmpfs" ino=1729 [ 644.806854][ T37] audit: type=1400 audit(1899732324.107:191116): lsm=SMACK fn=smack_inode_setxattr action=granted subject="_" object="_" requested=w pid=11056 comm="syz.2.1558" name="file1" dev="tmpfs" ino=1729 [ 644.932148][T11060] overlayfs: invalid origin (0000) [ 645.185853][T11065] block nbd0: shutting down sockets [ 647.331306][T11086] 9p: Bad value for 'rfdno' [ 647.381195][T11088] netlink: 'syz.4.1569': attribute type 21 has an invalid length. [ 647.381268][T11088] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1569'. [ 647.381294][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1569'. [ 648.850408][T11101] afs: Unknown parameter '01777777777777777777777' [ 648.964213][T11101] overlayfs: invalid origin (0000) [ 649.815983][T11112] FAULT_INJECTION: forcing a failure. [ 649.815983][T11112] name failslab, interval 1, probability 0, space 0, times 0 [ 649.816048][T11112] CPU: 0 UID: 0 PID: 11112 Comm: syz.4.1577 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 649.816078][T11112] Tainted: [L]=SOFTLOCKUP [ 649.816086][T11112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 649.816098][T11112] Call Trace: [ 649.816106][T11112] [ 649.816111][T11112] dump_stack_lvl+0x189/0x250 [ 649.816133][T11112] ? __pfx____ratelimit+0x10/0x10 [ 649.816151][T11112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 649.816166][T11112] ? __pfx__printk+0x10/0x10 [ 649.816183][T11112] ? __pfx___might_resched+0x10/0x10 [ 649.816199][T11112] should_fail_ex+0x46c/0x600 [ 649.816217][T11112] should_failslab+0xa8/0x100 [ 649.816231][T11112] __kmalloc_noprof+0xe0/0x7e0 [ 649.816247][T11112] ? kfree+0x4d/0x900 [ 649.816260][T11112] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 649.816281][T11112] tomoyo_realpath_from_path+0xe3/0x5d0 [ 649.816298][T11112] ? tomoyo_domain+0xd9/0x130 [ 649.816318][T11112] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 649.816332][T11112] tomoyo_path_number_perm+0x1e8/0x5a0 [ 649.816348][T11112] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 649.816373][T11112] ? trace_irq_disable+0x37/0x100 [ 649.816399][T11112] ? __fget_files+0x2a/0x420 [ 649.816415][T11112] ? __fget_files+0x3a6/0x420 [ 649.816426][T11112] ? __fget_files+0x2a/0x420 [ 649.816441][T11112] security_file_ioctl+0xcb/0x2d0 [ 649.816457][T11112] __se_sys_ioctl+0x47/0x170 [ 649.816474][T11112] do_syscall_64+0xfa/0xf80 [ 649.816491][T11112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.816503][T11112] ? clear_bhb_loop+0x60/0xb0 [ 649.816518][T11112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.816529][T11112] RIP: 0033:0x7fd766ecf749 [ 649.816540][T11112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.816558][T11112] RSP: 002b:00007fd765115038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 649.816573][T11112] RAX: ffffffffffffffda RBX: 00007fd767126090 RCX: 00007fd766ecf749 [ 649.816582][T11112] RDX: 0000200000000800 RSI: 00000000c0285629 RDI: 0000000000000005 [ 649.816590][T11112] RBP: 00007fd765115090 R08: 0000000000000000 R09: 0000000000000000 [ 649.816597][T11112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.816605][T11112] R13: 00007fd767126128 R14: 00007fd767126090 R15: 00007ffef90400c8 [ 649.816625][T11112] [ 649.816654][T11112] ERROR: Out of memory at tomoyo_realpath_from_path. [ 650.988360][ T7464] audit_log_start: 2627 callbacks suppressed [ 650.988379][ T7464] audit: audit_backlog=65 > audit_backlog_limit=64 [ 650.988393][ T7464] audit: audit_lost=49266 audit_rate_limit=0 audit_backlog_limit=64 [ 650.988407][ T7464] audit: backlog limit exceeded [ 650.988421][ T7464] audit: audit_backlog=65 > audit_backlog_limit=64 [ 650.988432][ T7464] audit: audit_lost=49267 audit_rate_limit=0 audit_backlog_limit=64 [ 650.988446][ T7464] audit: backlog limit exceeded [ 650.988467][ T7464] audit: audit_backlog=65 > audit_backlog_limit=64 [ 650.988478][ T7464] audit: audit_lost=49268 audit_rate_limit=0 audit_backlog_limit=64 [ 650.988491][ T7464] audit: backlog limit exceeded [ 650.988600][ T7464] audit: audit_backlog=65 > audit_backlog_limit=64 [ 651.366368][T11119] bond2: entered promiscuous mode [ 653.098366][T11158] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1584'. [ 654.066348][T11171] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.1590'. [ 654.066512][T11171] net_ratelimit: 85 callbacks suppressed [ 654.066528][T11171] openvswitch: netlink: nsh attr 0 has unexpected len 5 expected 0 [ 654.133604][T11169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1587'. [ 654.135482][T11169] openvswitch: netlink: Flow key attr not present in new flow. [ 654.218316][T11176] afs: Unknown parameter '01777777777777777777777' [ 654.413292][T11176] overlayfs: invalid origin (0000) [ 654.439997][T11172] overlayfs: missing 'workdir' [ 654.908043][T11187] bond3: entered promiscuous mode [ 654.909894][T11193] vivid-003: disconnect [ 655.079188][T11189] vivid-003: reconnect [ 657.160288][ T9663] audit_log_start: 9443 callbacks suppressed [ 657.160308][ T9663] audit: audit_backlog=65 > audit_backlog_limit=64 [ 657.160322][ T9663] audit: audit_lost=51400 audit_rate_limit=0 audit_backlog_limit=64 [ 657.160337][ T9663] audit: backlog limit exceeded [ 657.160362][ T9663] audit: audit_backlog=65 > audit_backlog_limit=64 [ 657.160375][ T9663] audit: audit_lost=51401 audit_rate_limit=0 audit_backlog_limit=64 [ 657.160390][ T9663] audit: backlog limit exceeded [ 657.160520][ T9663] audit: audit_backlog=65 > audit_backlog_limit=64 [ 657.160534][ T9663] audit: audit_lost=51402 audit_rate_limit=0 audit_backlog_limit=64 [ 657.160548][ T9663] audit: backlog limit exceeded [ 657.160569][ T9663] audit: audit_backlog=65 > audit_backlog_limit=64 [ 657.327707][T11205] vlan2: entered allmulticast mode [ 657.327741][T11205] hsr0: entered allmulticast mode [ 657.327755][T11205] hsr_slave_0: entered allmulticast mode [ 657.327777][T11205] hsr_slave_1: entered allmulticast mode [ 659.193238][ T990] hid-generic 0000:0000:0000.000C: unknown main item tag 0x1 [ 659.193278][ T990] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 659.193303][ T990] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 659.193330][ T990] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 659.193355][ T990] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 659.193381][ T990] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 659.193564][ T990] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 659.193600][ T990] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 659.193627][ T990] hid-generic 0000:0000:0000.000C: unknown main item tag 0x2 [ 659.193653][ T990] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 659.232594][ T990] hid-generic 0000:0000:0000.000C: hidraw0: HID v8.00 Device [syz0] on syz1 [ 659.453491][T11228] vivid-000: disconnect [ 659.619895][T11227] vivid-000: reconnect [ 659.792982][T11235] netlink: 'syz.6.1611': attribute type 3 has an invalid length. [ 660.613964][T11260] loop2: detected capacity change from 0 to 7 [ 660.635551][T11260] Dev loop2: unable to read RDB block 7 [ 660.635593][T11260] loop2: unable to read partition table [ 660.635744][T11260] loop2: partition table beyond EOD, truncated [ 660.635757][T11260] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 660.980404][T11267] vivid-004: disconnect [ 661.029468][T11265] vivid-004: reconnect [ 661.132628][T11273] FAULT_INJECTION: forcing a failure. [ 661.132628][T11273] name failslab, interval 1, probability 0, space 0, times 0 [ 661.132668][T11273] CPU: 1 UID: 0 PID: 11273 Comm: syz.4.1625 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 661.132697][T11273] Tainted: [L]=SOFTLOCKUP [ 661.132706][T11273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 661.132718][T11273] Call Trace: [ 661.132735][T11273] [ 661.132744][T11273] dump_stack_lvl+0x189/0x250 [ 661.132778][T11273] ? __pfx____ratelimit+0x10/0x10 [ 661.132807][T11273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 661.132836][T11273] ? __pfx__printk+0x10/0x10 [ 661.132865][T11273] ? __pfx___might_resched+0x10/0x10 [ 661.132893][T11273] should_fail_ex+0x46c/0x600 [ 661.132923][T11273] ? __alloc_skb+0x255/0x430 [ 661.132942][T11273] should_failslab+0xa8/0x100 [ 661.132964][T11273] ? __alloc_skb+0x255/0x430 [ 661.132981][T11273] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 661.133021][T11273] __alloc_skb+0x255/0x430 [ 661.133045][T11273] ? __pfx___alloc_skb+0x10/0x10 [ 661.133072][T11273] ? netlink_ack_tlv_len+0x6c/0x210 [ 661.133101][T11273] netlink_ack+0x146/0xa50 [ 661.133121][T11273] ? __pfx_genl_rcv_msg+0x10/0x10 [ 661.133172][T11273] netlink_rcv_skb+0x28c/0x470 [ 661.133197][T11273] ? __pfx_genl_rcv_msg+0x10/0x10 [ 661.133228][T11273] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 661.133271][T11273] ? netlink_deliver_tap+0x2e/0x1b0 [ 661.133294][T11273] ? netlink_deliver_tap+0x2e/0x1b0 [ 661.133324][T11273] genl_rcv+0x28/0x40 [ 661.133350][T11273] netlink_unicast+0x846/0xa10 [ 661.133383][T11273] ? __pfx_netlink_unicast+0x10/0x10 [ 661.133407][T11273] ? netlink_sendmsg+0x642/0xb30 [ 661.133429][T11273] ? skb_put+0x11b/0x210 [ 661.133454][T11273] netlink_sendmsg+0x805/0xb30 [ 661.133490][T11273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.133525][T11273] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 661.133553][T11273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.133579][T11273] __sock_sendmsg+0x21c/0x270 [ 661.133612][T11273] ____sys_sendmsg+0x508/0x810 [ 661.133642][T11273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 661.133678][T11273] ? import_iovec+0x74/0xa0 [ 661.133713][T11273] ___sys_sendmsg+0x21f/0x2a0 [ 661.133748][T11273] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.133816][T11273] ? __fget_files+0x2a/0x420 [ 661.133839][T11273] ? __fget_files+0x3a6/0x420 [ 661.133875][T11273] __x64_sys_sendmsg+0x1a1/0x260 [ 661.133902][T11273] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 661.133938][T11273] ? __pfx_ksys_write+0x10/0x10 [ 661.133973][T11273] ? do_syscall_64+0xbe/0xf80 [ 661.134007][T11273] do_syscall_64+0xfa/0xf80 [ 661.134037][T11273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.134058][T11273] ? clear_bhb_loop+0x60/0xb0 [ 661.134086][T11273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.134107][T11273] RIP: 0033:0x7fd766ecf749 [ 661.134126][T11273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.134145][T11273] RSP: 002b:00007fd765136038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.134169][T11273] RAX: ffffffffffffffda RBX: 00007fd767125fa0 RCX: 00007fd766ecf749 [ 661.134186][T11273] RDX: 000000000c000810 RSI: 0000200000001100 RDI: 0000000000000004 [ 661.134200][T11273] RBP: 00007fd765136090 R08: 0000000000000000 R09: 0000000000000000 [ 661.134215][T11273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.134228][T11273] R13: 00007fd767126038 R14: 00007fd767125fa0 R15: 00007ffef90400c8 [ 661.134266][T11273] [ 662.175764][ T37] kauditd_printk_skb: 4213 callbacks suppressed [ 662.175785][ T37] audit: type=1400 audit(1899732341.483:199929): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11285 comm="syz.1.1630" name="newroot" dev="tmpfs" ino=2 [ 662.176091][ T37] audit: type=1400 audit(1899732341.483:199930): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11285 comm="syz.1.1630" name="dev" dev="tmpfs" ino=3 [ 662.197308][ T37] audit: type=1400 audit(1899732341.503:199931): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11287 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 662.197563][ T37] audit: type=1400 audit(1899732341.503:199932): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11287 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 662.197818][ T37] audit: type=1400 audit(1899732341.503:199933): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11287 comm="syz-executor" name="215" dev="tmpfs" ino=1177 [ 662.198159][ T37] audit: type=1400 audit(1899732341.503:199934): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=11287 comm="syz-executor" opid=11287 ocomm="syz-executor" [ 662.206524][ T37] audit: type=1400 audit(1899732341.513:199935): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11287 comm="syz-executor" name="215" dev="tmpfs" ino=1177 [ 662.206781][ T37] audit: type=1400 audit(1899732341.513:199936): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11287 comm="syz-executor" name="215" dev="tmpfs" ino=1177 [ 662.207228][ T37] audit: type=1400 audit(1899732341.513:199937): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=11287 comm="syz-executor" name="215" dev="tmpfs" ino=1177 [ 662.207843][ T37] audit: type=1400 audit(1899732341.513:199938): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11287 comm="syz-executor" name="215" dev="tmpfs" ino=1177 [ 663.166653][T11295] FAULT_INJECTION: forcing a failure. [ 663.166653][T11295] name failslab, interval 1, probability 0, space 0, times 0 [ 663.166723][T11295] CPU: 1 UID: 0 PID: 11295 Comm: syz.6.1632 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 663.166753][T11295] Tainted: [L]=SOFTLOCKUP [ 663.166762][T11295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 663.166775][T11295] Call Trace: [ 663.166785][T11295] [ 663.166795][T11295] dump_stack_lvl+0x189/0x250 [ 663.166829][T11295] ? __pfx____ratelimit+0x10/0x10 [ 663.166859][T11295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.166887][T11295] ? __pfx__printk+0x10/0x10 [ 663.166917][T11295] ? __pfx___might_resched+0x10/0x10 [ 663.166946][T11295] should_fail_ex+0x46c/0x600 [ 663.166978][T11295] should_failslab+0xa8/0x100 [ 663.167002][T11295] __kmalloc_node_noprof+0xe7/0x820 [ 663.167035][T11295] ? __vmalloc_node_range_noprof+0x5df/0x16a0 [ 663.167072][T11295] __vmalloc_node_range_noprof+0x5df/0x16a0 [ 663.167117][T11295] ? trace_irq_disable+0x37/0x100 [ 663.167141][T11295] ? preempt_schedule_irq+0xde/0x150 [ 663.167188][T11295] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 663.167237][T11295] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 663.167262][T11295] __vmalloc_noprof+0xd2/0x120 [ 663.167291][T11295] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 663.167322][T11295] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 663.167354][T11295] bpf_prog_alloc+0x3c/0x1a0 [ 663.167382][T11295] bpf_prog_load+0x735/0x1a10 [ 663.167423][T11295] ? __pfx_bpf_prog_load+0x10/0x10 [ 663.167484][T11295] ? bpf_lsm_bpf+0x9/0x20 [ 663.167504][T11295] ? security_bpf+0x7e/0x300 [ 663.167534][T11295] __sys_bpf+0x507/0x860 [ 663.167561][T11295] ? __pfx___sys_bpf+0x10/0x10 [ 663.167623][T11295] __x64_sys_bpf+0x7c/0x90 [ 663.167647][T11295] do_syscall_64+0xfa/0xf80 [ 663.167677][T11295] ? rcu_is_watching+0x15/0xb0 [ 663.167695][T11295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.167716][T11295] ? clear_bhb_loop+0x60/0xb0 [ 663.167743][T11295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.167764][T11295] RIP: 0033:0x7f4b003ef749 [ 663.167783][T11295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.167801][T11295] RSP: 002b:00007f4afe614038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 663.167825][T11295] RAX: ffffffffffffffda RBX: 00007f4b00646180 RCX: 00007f4b003ef749 [ 663.167841][T11295] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 663.167855][T11295] RBP: 00007f4afe614090 R08: 0000000000000000 R09: 0000000000000000 [ 663.167869][T11295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.167883][T11295] R13: 00007f4b00646218 R14: 00007f4b00646180 R15: 00007ffcc170bca8 [ 663.167922][T11295] [ 663.167996][T11295] syz.6.1632: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 663.168277][T11295] CPU: 1 UID: 0 PID: 11295 Comm: syz.6.1632 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 663.168306][T11295] Tainted: [L]=SOFTLOCKUP [ 663.168314][T11295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 663.168327][T11295] Call Trace: [ 663.168336][T11295] [ 663.168345][T11295] dump_stack_lvl+0x189/0x250 [ 663.168374][T11295] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 663.168404][T11295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.168432][T11295] ? __pfx__printk+0x10/0x10 [ 663.168463][T11295] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 663.168495][T11295] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 663.168535][T11295] warn_alloc+0x22e/0x3b0 [ 663.168570][T11295] ? __pfx___might_resched+0x10/0x10 [ 663.168599][T11295] ? __pfx_warn_alloc+0x10/0x10 [ 663.168637][T11295] ? rcu_is_watching+0x15/0xb0 [ 663.168659][T11295] ? trace_kmalloc+0x1f/0xb0 [ 663.168686][T11295] ? __kmalloc_node_noprof+0x3c5/0x820 [ 663.168715][T11295] ? __vmalloc_node_range_noprof+0x5df/0x16a0 [ 663.168751][T11295] __vmalloc_node_range_noprof+0x97d/0x16a0 [ 663.168796][T11295] ? trace_irq_disable+0x37/0x100 [ 663.168843][T11295] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 663.168891][T11295] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 663.168915][T11295] __vmalloc_noprof+0xd2/0x120 [ 663.168945][T11295] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 663.168975][T11295] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 663.169007][T11295] bpf_prog_alloc+0x3c/0x1a0 [ 663.169036][T11295] bpf_prog_load+0x735/0x1a10 [ 663.169077][T11295] ? __pfx_bpf_prog_load+0x10/0x10 [ 663.169142][T11295] ? bpf_lsm_bpf+0x9/0x20 [ 663.169160][T11295] ? security_bpf+0x7e/0x300 [ 663.169190][T11295] __sys_bpf+0x507/0x860 [ 663.169218][T11295] ? __pfx___sys_bpf+0x10/0x10 [ 663.169280][T11295] __x64_sys_bpf+0x7c/0x90 [ 663.169303][T11295] do_syscall_64+0xfa/0xf80 [ 663.169333][T11295] ? rcu_is_watching+0x15/0xb0 [ 663.169351][T11295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.169373][T11295] ? clear_bhb_loop+0x60/0xb0 [ 663.169399][T11295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.169420][T11295] RIP: 0033:0x7f4b003ef749 [ 663.169438][T11295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.169464][T11295] RSP: 002b:00007f4afe614038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 663.169486][T11295] RAX: ffffffffffffffda RBX: 00007f4b00646180 RCX: 00007f4b003ef749 [ 663.169501][T11295] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 663.169515][T11295] RBP: 00007f4afe614090 R08: 0000000000000000 R09: 0000000000000000 [ 663.169529][T11295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.169542][T11295] R13: 00007f4b00646218 R14: 00007f4b00646180 R15: 00007ffcc170bca8 [ 663.169578][T11295] [ 663.169618][T11295] Mem-Info: [ 663.169656][T11295] active_anon:28 inactive_anon:29828 isolated_anon:0 [ 663.169656][T11295] active_file:13576 inactive_file:3684 isolated_file:0 [ 663.169656][T11295] unevictable:768 dirty:61 writeback:0 [ 663.169656][T11295] slab_reclaimable:12245 slab_unreclaimable:135388 [ 663.169656][T11295] mapped:33412 shmem:26290 pagetables:1315 [ 663.169656][T11295] sec_pagetables:0 bounce:0 [ 663.169656][T11295] kernel_misc_reclaimable:0 [ 663.169656][T11295] free:1288986 free_pcp:4685 free_cma:0 [ 663.169741][T11295] Node 0 active_anon:112kB inactive_anon:119312kB active_file:54304kB inactive_file:14600kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133648kB dirty:244kB writeback:0kB shmem:103624kB kernel_stack:13712kB pagetables:5108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 663.169818][T11295] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 663.169893][T11295] Node 0 DMA free:15356kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 663.170012][T11295] lowmem_reserve[]: 0 2514 2515 2515 2515 [ 663.170250][T11295] Node 0 DMA32 free:1240444kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:112kB inactive_anon:119312kB active_file:54304kB inactive_file:14600kB unevictable:1536kB writepending:244kB zspages:0kB present:3129332kB managed:2574600kB mlocked:0kB bounce:0kB free_pcp:17072kB local_pcp:4512kB free_cma:0kB [ 663.170371][T11295] lowmem_reserve[]: 0 0 1 1 1 [ 663.170617][T11295] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 663.170744][T11295] lowmem_reserve[]: 0 0 0 0 0 [ 663.170952][T11295] Node 1 Normal free:3900144kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1668kB local_pcp:0kB free_cma:0kB [ 663.171072][T11295] lowmem_reserve[]: 0 0 0 0 0 [ 663.171310][T11295] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 663.172106][T11295] Node 0 DMA32: 119*4kB (UE) 1681*8kB (U) 1066*16kB (UME) 212*32kB (UME) 277*64kB (UME) 241*128kB (UME) 188*256kB (UM) 88*512kB (UME) 48*1024kB (UM) 26*2048kB (UME) 234*4096kB (UM) = 1240388kB [ 663.172848][T11295] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 663.173344][T11295] Node 1 Normal: 208*4kB (UME) 58*8kB (UME) 46*16kB (UME) 218*32kB (UME) 93*64kB (UME) 33*128kB (UM) 14*256kB (UME) 11*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 944*4096kB (UM) = 3900144kB [ 663.174207][T11295] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 663.174253][T11295] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 663.174299][T11295] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 663.174345][T11295] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 663.174391][T11295] 43546 total pagecache pages [ 663.174428][T11295] 0 pages in swap cache [ 663.174471][T11295] Free swap = 124996kB [ 663.174507][T11295] Total swap = 124996kB [ 663.174517][T11295] 2097051 pages RAM [ 663.174554][T11295] 0 pages HighMem/MovableOnly [ 663.174590][T11295] 421375 pages reserved [ 663.174626][T11295] 0 pages cma reserved [ 664.101392][T11299] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1633'. [ 664.101419][T11299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1633'. [ 664.101434][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1633'. [ 664.379430][T11303] vivid-003: disconnect [ 664.434792][T11300] vivid-003: reconnect [ 665.575082][ T6992] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 666.408820][T11320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1642'. [ 666.408855][T11320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1642'. [ 667.393990][ T37] kauditd_printk_skb: 1803 callbacks suppressed [ 667.394013][ T37] audit: type=1400 audit(1899732346.704:201433): lsm=SMACK fn=smack_ipc_permission action=granted subject="_" object="_" requested=w pid=11321 comm="syz.4.1643" ipc_key=2 [ 667.394116][ T37] audit: type=1400 audit(1899732346.704:201434): lsm=SMACK fn=smk_curacc_sem action=granted subject="_" object="_" requested=rw pid=11321 comm="syz.4.1643" ipc_key=2 [ 667.394429][ T37] audit: type=1400 audit(1899732346.704:201435): lsm=SMACK fn=smack_ipc_permission action=granted subject="_" object="_" requested=r pid=11321 comm="syz.4.1643" ipc_key=2 [ 667.394486][ T37] audit: type=1400 audit(1899732346.704:201436): lsm=SMACK fn=smk_curacc_sem action=granted subject="_" object="_" requested=rw pid=11321 comm="syz.4.1643" ipc_key=2 [ 667.399097][ T37] audit: type=1400 audit(1899732346.714:201437): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11329 comm="syz.6.1645" name="78" dev="tmpfs" ino=435 [ 667.399159][ T37] audit: type=1400 audit(1899732346.714:201438): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11329 comm="syz.6.1645" name="78" dev="tmpfs" ino=435 [ 667.399639][ T37] audit: type=1400 audit(1899732346.714:201439): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=11329 comm="syz.6.1645" name="78" dev="tmpfs" ino=435 [ 667.400207][ T37] audit: type=1400 audit(1899732346.714:201440): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11329 comm="syz.6.1645" name="newroot" dev="tmpfs" ino=2 [ 667.400902][ T37] audit: type=1400 audit(1899732346.714:201441): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11329 comm="syz.6.1645" name="/" dev="proc" ino=1 [ 667.400952][ T37] audit: type=1400 audit(1899732346.714:201442): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11329 comm="syz.6.1645" name="/" dev="proc" ino=1 [ 667.402000][T11332] FAULT_INJECTION: forcing a failure. [ 667.402000][T11332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.402036][T11332] CPU: 0 UID: 0 PID: 11332 Comm: syz.6.1645 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 667.402064][T11332] Tainted: [L]=SOFTLOCKUP [ 667.402072][T11332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 667.402085][T11332] Call Trace: [ 667.402095][T11332] [ 667.402104][T11332] dump_stack_lvl+0x189/0x250 [ 667.402137][T11332] ? __pfx____ratelimit+0x10/0x10 [ 667.402167][T11332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 667.402196][T11332] ? __pfx__printk+0x10/0x10 [ 667.402235][T11332] should_fail_ex+0x46c/0x600 [ 667.402267][T11332] strncpy_from_user+0x36/0x2c0 [ 667.402295][T11332] getname_flags+0xf3/0x540 [ 667.402323][T11332] user_path_at+0x24/0x60 [ 667.402349][T11332] __se_sys_mount+0x2d4/0x410 [ 667.402377][T11332] ? __pfx___se_sys_mount+0x10/0x10 [ 667.402405][T11332] ? do_syscall_64+0xbe/0xf80 [ 667.402430][T11332] ? __x64_sys_mount+0x20/0xc0 [ 667.402455][T11332] do_syscall_64+0xfa/0xf80 [ 667.402485][T11332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.402507][T11332] ? clear_bhb_loop+0x60/0xb0 [ 667.402533][T11332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.402554][T11332] RIP: 0033:0x7f4b003ef749 [ 667.402573][T11332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.402591][T11332] RSP: 002b:00007f4afe635038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 667.402624][T11332] RAX: ffffffffffffffda RBX: 00007f4b00646090 RCX: 00007f4b003ef749 [ 667.402639][T11332] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 667.402653][T11332] RBP: 00007f4afe635090 R08: 00002000000003c0 R09: 0000000000000000 [ 667.402668][T11332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.402681][T11332] R13: 00007f4b00646128 R14: 00007f4b00646090 R15: 00007ffcc170bca8 [ 667.402718][T11332] [ 668.372110][T11344] vivid-003: disconnect [ 668.420945][T11343] vivid-003: reconnect [ 668.633331][T11346] overlayfs: invalid origin (0000) [ 669.863609][T11366] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.485869][ T6207] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 670.645786][ T6207] usb 5-1: Using ep0 maxpacket: 8 [ 670.651595][ T6207] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.651671][ T6207] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 670.651697][ T6207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.694986][ T6207] usb 5-1: config 0 descriptor?? [ 670.709224][ T6207] uvcvideo 5-1:0.0: Found UVC 0.00 device (2833:0201) [ 670.709259][ T6207] uvcvideo 5-1:0.0: No valid video chain found. [ 671.585926][T11381] ./file0: Can't lookup blockdev [ 671.988207][T11379] bond0: entered promiscuous mode [ 671.988226][T11379] bond_slave_0: entered promiscuous mode [ 671.988391][T11379] bond_slave_1: entered promiscuous mode [ 672.189006][ T6625] wlan0: Trigger new scan to find an IBSS to join [ 672.344920][ T7032] usb 5-1: USB disconnect, device number 69 [ 672.426011][ T37] kauditd_printk_skb: 2441 callbacks suppressed [ 672.426031][ T37] audit: type=1400 audit(1899732351.706:203554): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7464 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 672.426080][ T37] audit: type=1400 audit(1899732351.716:203555): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11384 comm="modprobe" name="/" dev="sda1" ino=2 [ 672.426126][ T37] audit: type=1400 audit(1899732351.736:203556): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11380 comm="syz.1.1662" dev="tmpfs" ino=172 [ 672.426170][ T37] audit: type=1400 audit(1899732351.736:203557): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11384 comm="modprobe" name="usr" dev="sda1" ino=1480 [ 672.426215][ T37] audit: type=1400 audit(1899732351.736:203558): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=11380 comm="syz.1.1662" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=172 [ 672.426265][ T37] audit: type=1400 audit(1899732351.736:203559): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11384 comm="modprobe" name="usr" dev="sda1" ino=1480 [ 672.426309][ T37] audit: type=1400 audit(1899732351.736:203560): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11384 comm="modprobe" name="lib" dev="sda1" ino=1642 [ 672.426364][ T37] audit: type=1400 audit(1899732351.736:203561): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11384 comm="modprobe" name="/" dev="sda1" ino=2 [ 672.426410][ T37] audit: type=1400 audit(1899732351.736:203562): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11384 comm="modprobe" name="usr" dev="sda1" ino=1480 [ 672.426453][ T37] audit: type=1400 audit(1899732351.736:203563): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11384 comm="modprobe" name="usr" dev="sda1" ino=1480 [ 674.902941][T11415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1673'. [ 675.057382][T11420] overlayfs: failed to resolve './file0': -2 [ 675.088694][T11421] vivid-004: disconnect [ 675.115199][T11419] vivid-004: reconnect [ 675.484228][ T7032] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 675.634149][ T7032] usb 5-1: Using ep0 maxpacket: 8 [ 675.670333][ T7032] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.670400][ T7032] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 675.670425][ T7032] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.708696][ T7032] usb 5-1: config 0 descriptor?? [ 675.753024][ T7032] uvcvideo 5-1:0.0: Found UVC 0.00 device (2833:0201) [ 675.753063][ T7032] uvcvideo 5-1:0.0: No valid video chain found. [ 675.931339][ T5879] usb 5-1: USB disconnect, device number 70 [ 675.967992][ T69] wlan0: Trigger new scan to find an IBSS to join [ 677.455945][ T37] kauditd_printk_skb: 2736 callbacks suppressed [ 677.455967][ T37] audit: type=1400 audit(1899732356.777:206255): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=29 comm="ktimers/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.93 dest=36966 netif=eth0 [ 677.554422][ T37] audit: type=1400 audit(1899732356.877:206256): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=29 comm="ktimers/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.93 dest=36966 netif=eth0 [ 677.555438][ T37] audit: type=1400 audit(1899732356.877:206257): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=29 comm="ktimers/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.93 dest=36966 netif=eth0 [ 677.639892][ T37] audit: type=1400 audit(1899732356.877:206258): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=29 comm="ktimers/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.93 dest=36966 netif=eth0 [ 677.640033][ T37] audit: type=1400 audit(1899732356.877:206259): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=29 comm="ktimers/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.93 dest=36966 netif=eth0 [ 677.640164][ T37] audit: type=1400 audit(1899732356.877:206260): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=29 comm="ktimers/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.93 dest=36966 netif=eth0 [ 677.640300][ T37] audit: type=1400 audit(1899732356.877:206261): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=29 comm="ktimers/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.93 dest=36966 netif=eth0 [ 677.649925][ T37] audit: type=1400 audit(1899732356.957:206262): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5799 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 677.650076][ T37] audit: type=1400 audit(1899732356.957:206263): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5799 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 677.853647][ T37] audit: type=1400 audit(1899732357.177:206264): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5799 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 678.091393][T11452] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 678.091415][T11452] PKCS7: Only support pkcs7_signedData type [ 678.231557][ T1454] wlan0: Creating new IBSS network, BSSID f6:9e:b9:b6:07:13 [ 678.266161][T11456] vivid-004: disconnect [ 678.309907][T11453] vivid-004: reconnect [ 678.544302][T11463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1693'. [ 678.544329][T11463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1693'. [ 679.138498][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1694'. [ 679.886625][T11478] overlayfs: failed to resolve './file0': -2 [ 679.941544][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1698'. [ 680.242993][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 680.392615][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 680.409146][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.409212][ T10] usb 7-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 680.409246][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.425811][ T10] usb 7-1: config 0 descriptor?? [ 680.490629][ T10] uvcvideo 7-1:0.0: Found UVC 0.00 device (2833:0201) [ 680.490652][ T10] uvcvideo 7-1:0.0: No valid video chain found. [ 680.659447][ T7032] usb 7-1: USB disconnect, device number 7 [ 681.047035][T11502] ieee802154 phy0 wpan0: encryption failed: -22 [ 681.296886][T11508] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1708'. [ 681.622432][ T10] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 681.772401][ T10] usb 5-1: device descriptor read/64, error -71 [ 682.283688][ T10] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 683.102591][ T37] kauditd_printk_skb: 2941 callbacks suppressed [ 683.102645][ T37] audit: type=1400 audit(1899732361.799:208792): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=29 comm="ktimers/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.93 dest=36966 netif=eth0 [ 683.103018][ T37] audit: type=1400 audit(1899732361.809:208793): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=29 comm="ktimers/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.93 dest=36966 netif=eth0 [ 683.103381][ T37] audit: type=1400 audit(1899732361.809:208794): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=29 comm="ktimers/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.93 dest=36966 netif=eth0 [ 683.103463][ T37] audit: type=1400 audit(1899732361.859:208795): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=11514 comm="syz.6.1710" saddr=10.128.0.169 src=45082 daddr=10.128.1.93 dest=22 netif=eth0 [ 683.103804][ T37] audit: type=1400 audit(1899732361.959:208796): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11514 comm="syz.6.1710" name="newroot" dev="tmpfs" ino=2 [ 683.104075][ T37] audit: type=1400 audit(1899732361.959:208797): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11514 comm="syz.6.1710" name="/" dev="proc" ino=1 [ 683.104498][ T37] audit: type=1400 audit(1899732361.959:208798): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11514 comm="syz.6.1710" name="/" dev="proc" ino=1 [ 683.104574][ T37] audit: type=1400 audit(1899732361.959:208799): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11514 comm="syz.6.1710" name="277" dev="proc" ino=34556 [ 683.104848][ T37] audit: type=1400 audit(1899732361.959:208800): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11514 comm="syz.6.1710" name="ns" dev="proc" ino=34564 [ 683.105125][ T37] audit: type=1400 audit(1899732361.969:208801): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11514 comm="syz.6.1710" name="newroot" dev="tmpfs" ino=2 [ 683.606040][ T10] usb 5-1: device descriptor read/64, error -71 [ 683.784083][T11522] netlink: 'syz.1.1712': attribute type 4 has an invalid length. [ 683.784136][T11522] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1712'. [ 683.820157][ T10] usb usb5-port1: attempt power cycle [ 684.942503][T11526] afs: Unknown parameter '01777777777777777777777' [ 684.964174][ T10] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 684.973163][T11526] overlayfs: invalid origin (0000) [ 685.094753][ T10] usb 5-1: device descriptor read/8, error -71 [ 685.156183][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 685.431086][T11533] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1717'. [ 685.431119][T11533] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1717'. [ 685.431135][T11533] netlink: 'syz.6.1717': attribute type 6 has an invalid length. [ 685.431163][T11533] netlink: 'syz.6.1717': attribute type 5 has an invalid length. [ 685.431177][T11533] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1717'. [ 686.451022][T11542] FAULT_INJECTION: forcing a failure. [ 686.451022][T11542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.451063][T11542] CPU: 0 UID: 0 PID: 11542 Comm: syz.4.1720 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 686.451092][T11542] Tainted: [L]=SOFTLOCKUP [ 686.451100][T11542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 686.451113][T11542] Call Trace: [ 686.451122][T11542] [ 686.451132][T11542] dump_stack_lvl+0x189/0x250 [ 686.451166][T11542] ? __pfx____ratelimit+0x10/0x10 [ 686.451196][T11542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 686.451224][T11542] ? __pfx__printk+0x10/0x10 [ 686.451265][T11542] should_fail_ex+0x46c/0x600 [ 686.451297][T11542] _copy_to_user+0x31/0xb0 [ 686.451340][T11542] simple_read_from_buffer+0xe1/0x170 [ 686.451370][T11542] proc_fail_nth_read+0x1b6/0x220 [ 686.451405][T11542] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 686.451440][T11542] ? rw_verify_area+0x2ac/0x4e0 [ 686.451468][T11542] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 686.451501][T11542] vfs_read+0x206/0xa30 [ 686.451540][T11542] ? __pfx_vfs_read+0x10/0x10 [ 686.451565][T11542] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 686.451601][T11542] ? mutex_lock_nested+0x154/0x1d0 [ 686.451623][T11542] ? fdget_pos+0x253/0x320 [ 686.451657][T11542] ksys_read+0x14b/0x260 [ 686.451689][T11542] ? __pfx_ksys_read+0x10/0x10 [ 686.451723][T11542] ? do_syscall_64+0xbe/0xf80 [ 686.451757][T11542] do_syscall_64+0xfa/0xf80 [ 686.451787][T11542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.451809][T11542] ? clear_bhb_loop+0x60/0xb0 [ 686.451836][T11542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.451856][T11542] RIP: 0033:0x7fd766ece15c [ 686.451875][T11542] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 686.451894][T11542] RSP: 002b:00007fd765136030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 686.451918][T11542] RAX: ffffffffffffffda RBX: 00007fd767125fa0 RCX: 00007fd766ece15c [ 686.451934][T11542] RDX: 000000000000000f RSI: 00007fd7651360a0 RDI: 0000000000000003 [ 686.451947][T11542] RBP: 00007fd765136090 R08: 0000000000000000 R09: 0000000000000000 [ 686.451961][T11542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.451974][T11542] R13: 00007fd767126038 R14: 00007fd767125fa0 R15: 00007ffef90400c8 [ 686.452012][T11542] [ 686.505276][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.505358][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.144949][ T5799] audit_log_start: 2027 callbacks suppressed [ 688.144958][ T7464] audit: audit_backlog=66 > audit_backlog_limit=64 [ 688.144968][ T5799] audit: audit_backlog=66 > audit_backlog_limit=64 [ 688.144975][ T7464] audit: audit_lost=52117 audit_rate_limit=0 audit_backlog_limit=64 [ 688.144980][ T5799] audit: audit_lost=52118 audit_rate_limit=0 audit_backlog_limit=64 [ 688.144991][ T7464] audit: backlog limit exceeded [ 688.144996][ T5799] audit: backlog limit exceeded [ 688.145049][ T7464] audit: audit_backlog=66 > audit_backlog_limit=64 [ 688.145058][ T5799] audit: audit_backlog=66 > audit_backlog_limit=64 [ 688.145063][ T7464] audit: audit_lost=52119 audit_rate_limit=0 audit_backlog_limit=64 [ 688.145072][ T5799] audit: audit_lost=52120 audit_rate_limit=0 audit_backlog_limit=64 [ 688.243972][T11558] afs: Unknown parameter '01777777777777777777777' [ 689.082183][T11558] overlayfs: invalid origin (0000) [ 689.124596][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1728'. [ 691.649209][ T8579] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 691.843776][ T8579] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 691.843809][ T8579] usb 7-1: config 0 has no interface number 0 [ 691.843862][ T8579] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 691.843888][ T8579] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.886502][ T8579] usb 7-1: config 0 descriptor?? [ 691.914755][ T8579] usb 7-1: selecting invalid altsetting 1 [ 691.914954][ T8579] dvb_ttusb_budget: ttusb_init_controller: error [ 691.914969][ T8579] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 692.046963][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1743'. [ 693.016405][ T8579] DVB: Unable to find symbol cx22700_attach() [ 693.741994][ T7464] audit_log_start: 2975 callbacks suppressed [ 693.742009][ T7464] audit: audit_backlog=65 > audit_backlog_limit=64 [ 693.742017][ T7464] audit: audit_lost=52403 audit_rate_limit=0 audit_backlog_limit=64 [ 693.742026][ T7464] audit: backlog limit exceeded [ 693.742069][ T7464] audit: audit_backlog=65 > audit_backlog_limit=64 [ 693.742077][ T7464] audit: audit_lost=52404 audit_rate_limit=0 audit_backlog_limit=64 [ 693.742092][ T7464] audit: backlog limit exceeded [ 693.742101][ T7464] audit: audit_backlog=65 > audit_backlog_limit=64 [ 693.742109][ T7464] audit: audit_lost=52405 audit_rate_limit=0 audit_backlog_limit=64 [ 693.742120][ T7464] audit: backlog limit exceeded [ 693.742134][ T7464] audit: audit_backlog=65 > audit_backlog_limit=64 [ 693.889048][ T8579] DVB: Unable to find symbol tda10046_attach() [ 693.889066][ T8579] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 693.908501][ T8579] usb 7-1: USB disconnect, device number 8 [ 694.110900][T11616] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1748'. [ 694.112331][T11616] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1748'. [ 694.112354][T11616] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1748'. [ 696.671806][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'. [ 698.758131][ T37] kauditd_printk_skb: 3868 callbacks suppressed [ 698.758152][ T37] audit: type=1400 audit(1899732378.084:215229): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=11682 comm="syz-executor" name="oom_score_adj" dev="proc" ino=35851 [ 698.758469][ T37] audit: type=1400 audit(1899732378.084:215230): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=11682 comm="syz-executor" path="/proc/1072/oom_score_adj" dev="proc" ino=35851 [ 698.758978][ T37] audit: type=1400 audit(1899732378.084:215231): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11682 comm="syz-executor" name="361" dev="tmpfs" ino=1926 [ 698.759116][ T37] audit: type=1400 audit(1899732378.084:215232): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11682 comm="syz-executor" name="361" dev="tmpfs" ino=1926 [ 698.759521][ T37] audit: type=1400 audit(1899732378.084:215233): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=11682 comm="syz-executor" name="361" dev="tmpfs" ino=1926 [ 698.830151][ T37] audit: type=1400 audit(1899732378.154:215234): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11682 comm="syz.2.1768" name="newroot" dev="tmpfs" ino=2 [ 698.830434][ T37] audit: type=1400 audit(1899732378.154:215235): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11682 comm="syz.2.1768" name="/" dev="proc" ino=1 [ 698.831774][ T37] audit: type=1400 audit(1899732378.154:215236): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11682 comm="syz.2.1768" name="/" dev="proc" ino=1 [ 698.832031][ T37] audit: type=1400 audit(1899732378.154:215237): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11682 comm="syz.2.1768" name="1072" dev="proc" ino=35550 [ 698.832396][ T37] audit: type=1400 audit(1899732378.154:215238): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11682 comm="syz.2.1768" name="task" dev="proc" ino=35553 [ 698.833697][T11685] FAULT_INJECTION: forcing a failure. [ 698.833697][T11685] name failslab, interval 1, probability 0, space 0, times 0 [ 698.833728][T11685] CPU: 0 UID: 0 PID: 11685 Comm: syz.2.1768 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 698.833754][T11685] Tainted: [L]=SOFTLOCKUP [ 698.833761][T11685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 698.833773][T11685] Call Trace: [ 698.833781][T11685] [ 698.833789][T11685] dump_stack_lvl+0x189/0x250 [ 698.833818][T11685] ? __pfx____ratelimit+0x10/0x10 [ 698.833844][T11685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 698.833867][T11685] ? __pfx__printk+0x10/0x10 [ 698.833893][T11685] ? __pfx___might_resched+0x10/0x10 [ 698.833913][T11685] ? fs_reclaim_acquire+0x7d/0x100 [ 698.833935][T11685] should_fail_ex+0x46c/0x600 [ 698.833963][T11685] should_failslab+0xa8/0x100 [ 698.833984][T11685] __kmalloc_noprof+0xe0/0x7e0 [ 698.834009][T11685] ? sock_kmalloc+0xd6/0x160 [ 698.834036][T11685] sock_kmalloc+0xd6/0x160 [ 698.834060][T11685] hash_sendmsg+0x666/0x11d0 [ 698.834111][T11685] ? __pfx_hash_sendmsg+0x10/0x10 [ 698.834138][T11685] __sock_sendmsg+0x21c/0x270 [ 698.834166][T11685] ____sys_sendmsg+0x508/0x810 [ 698.834193][T11685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 698.834231][T11685] ? import_iovec+0x74/0xa0 [ 698.834260][T11685] ___sys_sendmsg+0x21f/0x2a0 [ 698.834283][T11685] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.834342][T11685] ? __fget_files+0x2a/0x420 [ 698.834362][T11685] ? __fget_files+0x3a6/0x420 [ 698.834392][T11685] __x64_sys_sendmsg+0x1a1/0x260 [ 698.834415][T11685] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 698.834447][T11685] ? __pfx_ksys_write+0x10/0x10 [ 698.834477][T11685] ? do_syscall_64+0xbe/0xf80 [ 698.834505][T11685] do_syscall_64+0xfa/0xf80 [ 698.834531][T11685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.834550][T11685] ? clear_bhb_loop+0x60/0xb0 [ 698.834572][T11685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.834590][T11685] RIP: 0033:0x7efdab80f749 [ 698.834607][T11685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.834624][T11685] RSP: 002b:00007efda9a6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.834645][T11685] RAX: ffffffffffffffda RBX: 00007efdaba65fa0 RCX: 00007efdab80f749 [ 698.834660][T11685] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 698.834672][T11685] RBP: 00007efda9a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 698.834684][T11685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.834696][T11685] R13: 00007efdaba66038 R14: 00007efdaba65fa0 R15: 00007ffdfee83748 [ 698.834729][T11685] [ 700.273760][T11709] devpts: Bad value for 'uid' [ 700.273775][T11709] devpts: Bad value for 'uid' [ 701.002291][ T69] Bluetooth: hci5: Frame reassembly failed (-84) [ 701.002385][ T69] Bluetooth: hci5: Frame reassembly failed (-84) [ 701.002457][ T69] Bluetooth: hci5: Frame reassembly failed (-84) [ 701.002524][ T69] Bluetooth: hci5: Frame reassembly failed (-84) [ 701.002598][ T69] Bluetooth: hci5: Frame reassembly failed (-84) [ 701.002666][ T69] Bluetooth: hci5: Frame reassembly failed (-84) [ 701.948077][T11727] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 701.974515][T11727] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.001339][T11727] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.995551][ T6992] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 703.845198][T11746] audit_log_start: 2760 callbacks suppressed [ 703.845224][T11746] audit: audit_backlog=65 > audit_backlog_limit=64 [ 703.845240][T11746] audit: audit_lost=52902 audit_rate_limit=0 audit_backlog_limit=64 [ 703.845257][T11746] audit: backlog limit exceeded [ 703.845276][T11746] audit: audit_backlog=65 > audit_backlog_limit=64 [ 703.845291][T11746] audit: audit_lost=52903 audit_rate_limit=0 audit_backlog_limit=64 [ 703.845307][T11746] audit: backlog limit exceeded [ 703.845531][T11746] audit: audit_backlog=65 > audit_backlog_limit=64 [ 703.845545][T11746] audit: audit_lost=52904 audit_rate_limit=0 audit_backlog_limit=64 [ 703.845562][T11746] audit: backlog limit exceeded [ 703.945186][T11746] audit: audit_backlog=65 > audit_backlog_limit=64 [ 707.466058][T11763] FAULT_INJECTION: forcing a failure. [ 707.466058][T11763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.466107][T11763] CPU: 0 UID: 0 PID: 11763 Comm: syz.6.1788 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 707.466137][T11763] Tainted: [L]=SOFTLOCKUP [ 707.466145][T11763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 707.466158][T11763] Call Trace: [ 707.466167][T11763] [ 707.466177][T11763] dump_stack_lvl+0x189/0x250 [ 707.466210][T11763] ? __pfx____ratelimit+0x10/0x10 [ 707.466240][T11763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 707.466267][T11763] ? __pfx__printk+0x10/0x10 [ 707.466290][T11763] ? __might_fault+0xb0/0x130 [ 707.466334][T11763] should_fail_ex+0x46c/0x600 [ 707.466365][T11763] _copy_from_user+0x2d/0xb0 [ 707.466396][T11763] ___sys_sendmsg+0x158/0x2a0 [ 707.466423][T11763] ? __pfx____sys_sendmsg+0x10/0x10 [ 707.466488][T11763] ? __fget_files+0x2a/0x420 [ 707.466510][T11763] ? __fget_files+0x3a6/0x420 [ 707.466545][T11763] __x64_sys_sendmsg+0x1a1/0x260 [ 707.466572][T11763] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 707.466605][T11763] ? __pfx_ksys_write+0x10/0x10 [ 707.466640][T11763] ? do_syscall_64+0xbe/0xf80 [ 707.466674][T11763] do_syscall_64+0xfa/0xf80 [ 707.466705][T11763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.466727][T11763] ? clear_bhb_loop+0x60/0xb0 [ 707.466754][T11763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.466776][T11763] RIP: 0033:0x7f4b003ef749 [ 707.466795][T11763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.466813][T11763] RSP: 002b:00007f4afe614038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 707.466838][T11763] RAX: ffffffffffffffda RBX: 00007f4b00646180 RCX: 00007f4b003ef749 [ 707.466854][T11763] RDX: 0000000020000080 RSI: 00002000000000c0 RDI: 0000000000000006 [ 707.466869][T11763] RBP: 00007f4afe614090 R08: 0000000000000000 R09: 0000000000000000 [ 707.466883][T11763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.466897][T11763] R13: 00007f4b00646218 R14: 00007f4b00646180 R15: 00007ffcc170bca8 [ 707.466934][T11763] [ 708.637187][ T1898] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 708.876018][ T37] kauditd_printk_skb: 808 callbacks suppressed [ 708.876039][ T37] audit: type=1400 audit(1899732388.207:218391): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11768 comm="syz.6.1791" name="newroot" dev="tmpfs" ino=2 [ 708.876355][ T37] audit: type=1400 audit(1899732388.207:218392): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11768 comm="syz.6.1791" name="/" dev="proc" ino=1 [ 708.876688][ T37] audit: type=1400 audit(1899732388.207:218393): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11768 comm="syz.6.1791" name="/" dev="proc" ino=1 [ 708.877020][ T37] audit: type=1400 audit(1899732388.207:218394): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11768 comm="syz.6.1791" name="328" dev="proc" ino=36108 [ 708.877521][ T37] audit: type=1400 audit(1899732388.207:218395): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11768 comm="syz.6.1791" name="ns" dev="proc" ino=36110 [ 708.880940][ T37] audit: type=1400 audit(1899732388.207:218396): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=11768 comm="syz.6.1791" dev="nsfs" ino=4026532797 [ 708.880996][ T37] audit: type=1400 audit(1899732388.207:218397): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=11768 comm="syz.6.1791" path="net:[4026532797]" dev="nsfs" ino=4026532797 [ 708.905000][ T37] audit: type=1400 audit(1899732388.237:218398): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11770 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 708.908039][ T37] audit: type=1400 audit(1899732388.237:218399): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11770 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 708.908091][ T37] audit: type=1400 audit(1899732388.237:218400): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11770 comm="syz-executor" name="435" dev="tmpfs" ino=2335 [ 709.666758][T11789] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 709.667072][T11789] overlayfs: failed to set xattr on upper [ 709.667083][T11789] overlayfs: ...falling back to redirect_dir=nofollow. [ 709.667093][T11789] overlayfs: ...falling back to index=off. [ 709.667101][T11789] overlayfs: ...falling back to uuid=null. [ 710.775765][T11806] ./file0: Can't lookup blockdev [ 712.078921][T11813] FAULT_INJECTION: forcing a failure. [ 712.078921][T11813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.078961][T11813] CPU: 0 UID: 0 PID: 11813 Comm: syz.4.1806 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 712.078990][T11813] Tainted: [L]=SOFTLOCKUP [ 712.078998][T11813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 712.079019][T11813] Call Trace: [ 712.079028][T11813] [ 712.079038][T11813] dump_stack_lvl+0x189/0x250 [ 712.079071][T11813] ? __pfx____ratelimit+0x10/0x10 [ 712.079100][T11813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 712.079124][T11813] ? __pfx__printk+0x10/0x10 [ 712.079163][T11813] should_fail_ex+0x46c/0x600 [ 712.079193][T11813] _copy_to_user+0x31/0xb0 [ 712.079222][T11813] simple_read_from_buffer+0xe1/0x170 [ 712.079249][T11813] proc_fail_nth_read+0x1b6/0x220 [ 712.079282][T11813] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 712.079315][T11813] ? rw_verify_area+0x2ac/0x4e0 [ 712.079343][T11813] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 712.079373][T11813] vfs_read+0x206/0xa30 [ 712.079410][T11813] ? __pfx_vfs_read+0x10/0x10 [ 712.079434][T11813] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 712.079470][T11813] ? mutex_lock_nested+0x154/0x1d0 [ 712.079492][T11813] ? fdget_pos+0x253/0x320 [ 712.079522][T11813] ksys_read+0x14b/0x260 [ 712.079551][T11813] ? __pfx_ksys_read+0x10/0x10 [ 712.079583][T11813] ? do_syscall_64+0xbe/0xf80 [ 712.079614][T11813] do_syscall_64+0xfa/0xf80 [ 712.079643][T11813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.079664][T11813] ? clear_bhb_loop+0x60/0xb0 [ 712.079689][T11813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.079709][T11813] RIP: 0033:0x7fd766ece15c [ 712.079726][T11813] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 712.079744][T11813] RSP: 002b:00007fd765136030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 712.079766][T11813] RAX: ffffffffffffffda RBX: 00007fd767125fa0 RCX: 00007fd766ece15c [ 712.079780][T11813] RDX: 000000000000000f RSI: 00007fd7651360a0 RDI: 0000000000000003 [ 712.079793][T11813] RBP: 00007fd765136090 R08: 0000000000000000 R09: 0000000000000000 [ 712.079807][T11813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.079820][T11813] R13: 00007fd767126038 R14: 00007fd767125fa0 R15: 00007ffef90400c8 [ 712.079857][T11813] [ 712.359832][T11817] vivid-004: disconnect [ 712.406884][T11815] vivid-004: reconnect [ 715.921799][ T37] kauditd_printk_skb: 2700 callbacks suppressed [ 715.921823][ T37] audit: type=1400 audit(1899732393.209:220771): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=11821 comm="syz.0.1812" opid=11821 ocomm="syz.0.1812" [ 715.921878][ T37] audit: type=1400 audit(1899732393.399:220772): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11826 comm="syz.0.1812" name="252" dev="tmpfs" ino=1383 [ 715.921927][ T37] audit: type=1400 audit(1899732393.399:220773): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=11826 comm="syz.0.1812" name="252" dev="tmpfs" ino=1383 [ 715.921968][ T37] audit: type=1400 audit(1899732393.399:220774): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=11826 comm="syz.0.1812" name="core" dev="tmpfs" ino=1389 [ 715.922061][ T37] audit: type=1400 audit(1899732393.399:220775): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=11826 comm="syz.0.1812" name="252" dev="tmpfs" ino=1383 [ 715.922110][ T37] audit: type=1400 audit(1899732393.499:220776): lsm=SMACK fn=smack_ptrace_access_check action=granted subject="_" object="_" requested=r pid=11821 comm="syz.0.1812" opid=11821 ocomm="syz.0.1812" [ 715.922158][ T37] audit: type=1400 audit(1899732393.499:220777): lsm=SMACK fn=smack_ptrace_access_check action=granted subject="_" object="_" requested=r pid=11821 comm="syz.0.1812" opid=11821 ocomm="syz.0.1812" [ 715.922205][ T37] audit: type=1400 audit(1899732393.599:220778): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11821 comm="syz.0.1812" name="newroot" dev="tmpfs" ino=2 [ 715.922253][ T37] audit: type=1400 audit(1899732393.599:220779): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11821 comm="syz.0.1812" name="/" dev="devtmpfs" ino=1 [ 715.922301][ T37] audit: type=1400 audit(1899732393.599:220780): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11821 comm="syz.0.1812" name="cpu" dev="devtmpfs" ino=85 [ 717.002071][T11832] ./file0: Can't lookup blockdev [ 719.156864][T11851] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1824'. [ 719.160124][T11850] vivid-000: disconnect [ 719.191833][T11848] vivid-000: reconnect [ 721.789480][ T37] kauditd_printk_skb: 2443 callbacks suppressed [ 721.789501][ T37] audit: type=1400 audit(1899732400.141:223071): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9663 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 721.789556][ T37] audit: type=1400 audit(1899732400.161:223072): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9663 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 721.789604][ T37] audit: type=1400 audit(1899732400.171:223073): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9663 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 721.789658][ T37] audit: type=1400 audit(1899732400.171:223074): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=9663 comm="syz-executor" name="114" dev="tmpfs" ino=636 [ 721.789706][ T37] audit: type=1400 audit(1899732400.171:223075): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=9663 comm="syz-executor" path="/114" dev="tmpfs" ino=636 [ 721.789752][ T37] audit: type=1400 audit(1899732400.351:223076): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=9663 comm="syz-executor" path="/114" dev="tmpfs" ino=636 [ 721.789800][ T37] audit: type=1400 audit(1899732400.361:223077): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9663 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 721.789846][ T37] audit: type=1400 audit(1899732400.361:223078): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9663 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 721.789893][ T37] audit: type=1400 audit(1899732400.371:223079): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9663 comm="syz-executor" name="114" dev="tmpfs" ino=636 [ 721.789938][ T37] audit: type=1400 audit(1899732400.381:223080): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9663 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 724.154938][T11918] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 724.774172][T11925] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1848'. [ 726.893173][ T37] kauditd_printk_skb: 2820 callbacks suppressed [ 726.893198][ T37] audit: type=1400 audit(1899732405.953:225337): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11944 comm="syz.1.1855" name="newroot" dev="tmpfs" ino=2 [ 726.893248][ T37] audit: type=1400 audit(1899732405.953:225338): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5799 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 726.893291][ T37] audit: type=1400 audit(1899732405.953:225339): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11944 comm="syz.1.1855" name="syzcgroup" dev="tmpfs" ino=8 [ 726.893334][ T37] audit: type=1400 audit(1899732405.953:225340): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5799 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 726.893377][ T37] audit: type=1400 audit(1899732405.953:225341): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11944 comm="syz.1.1855" name="unified" dev="tmpfs" ino=9 [ 726.893420][ T37] audit: type=1400 audit(1899732405.953:225342): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5799 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 726.893461][ T37] audit: type=1400 audit(1899732405.953:225343): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5799 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 726.893505][ T37] audit: type=1400 audit(1899732405.953:225344): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5799 comm="syz-executor" name="376" dev="tmpfs" ino=2032 [ 726.893547][ T37] audit: type=1400 audit(1899732405.953:225345): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5799 comm="syz-executor" path="/376" dev="tmpfs" ino=2032 [ 726.893599][ T37] audit: type=1400 audit(1899732405.953:225346): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5799 comm="syz-executor" path="/376" dev="tmpfs" ino=2032 [ 728.028486][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1859'. [ 728.870114][T11981] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 729.066595][T11988] binder: 11984:11988 ioctl 8933 200000000140 returned -22 [ 729.189737][T11990] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 730.424438][T11983] IPVS: Scheduler module ip_vs_ not found [ 730.424568][T11986] IPVS: length: 8 != 318730305200 [ 731.581171][T12019] FAULT_INJECTION: forcing a failure. [ 731.581171][T12019] name failslab, interval 1, probability 0, space 0, times 0 [ 731.581214][T12019] CPU: 0 UID: 0 PID: 12019 Comm: syz.4.1880 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 731.581243][T12019] Tainted: [L]=SOFTLOCKUP [ 731.581251][T12019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 731.581264][T12019] Call Trace: [ 731.581273][T12019] [ 731.581284][T12019] dump_stack_lvl+0x189/0x250 [ 731.581316][T12019] ? __pfx____ratelimit+0x10/0x10 [ 731.581345][T12019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 731.581373][T12019] ? __pfx__printk+0x10/0x10 [ 731.581403][T12019] ? __pfx___might_resched+0x10/0x10 [ 731.581431][T12019] ? fs_reclaim_acquire+0x7d/0x100 [ 731.581456][T12019] should_fail_ex+0x46c/0x600 [ 731.581487][T12019] should_failslab+0xa8/0x100 [ 731.581510][T12019] __kmalloc_noprof+0xe0/0x7e0 [ 731.581537][T12019] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 731.581573][T12019] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 731.581611][T12019] genl_family_rcv_msg_doit+0xb8/0x300 [ 731.581648][T12019] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 731.581680][T12019] ? rcu_is_watching+0x15/0xb0 [ 731.581701][T12019] ? cap_capable+0x123/0x440 [ 731.581724][T12019] ? safesetid_security_capable+0xa9/0x1a0 [ 731.581750][T12019] ? bpf_lsm_capable+0x9/0x20 [ 731.581771][T12019] ? security_capable+0x7e/0x2e0 [ 731.581816][T12019] genl_rcv_msg+0x60e/0x790 [ 731.581853][T12019] ? __pfx_genl_rcv_msg+0x10/0x10 [ 731.581881][T12019] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 731.581924][T12019] netlink_rcv_skb+0x208/0x470 [ 731.581950][T12019] ? __pfx_genl_rcv_msg+0x10/0x10 [ 731.581981][T12019] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 731.582024][T12019] ? netlink_deliver_tap+0x2e/0x1b0 [ 731.582047][T12019] ? netlink_deliver_tap+0x2e/0x1b0 [ 731.582077][T12019] genl_rcv+0x28/0x40 [ 731.582104][T12019] netlink_unicast+0x846/0xa10 [ 731.582136][T12019] ? __pfx_netlink_unicast+0x10/0x10 [ 731.582161][T12019] ? netlink_sendmsg+0x642/0xb30 [ 731.582182][T12019] ? skb_put+0x11b/0x210 [ 731.582209][T12019] netlink_sendmsg+0x805/0xb30 [ 731.582246][T12019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.582281][T12019] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 731.582308][T12019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.582334][T12019] __sock_sendmsg+0x21c/0x270 [ 731.582368][T12019] ____sys_sendmsg+0x508/0x810 [ 731.582399][T12019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 731.582434][T12019] ? import_iovec+0x74/0xa0 [ 731.582468][T12019] ___sys_sendmsg+0x21f/0x2a0 [ 731.582495][T12019] ? __pfx____sys_sendmsg+0x10/0x10 [ 731.582562][T12019] ? __fget_files+0x2a/0x420 [ 731.582583][T12019] ? __fget_files+0x3a6/0x420 [ 731.582617][T12019] __x64_sys_sendmsg+0x1a1/0x260 [ 731.582644][T12019] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 731.582685][T12019] ? do_syscall_64+0xbe/0xf80 [ 731.582718][T12019] do_syscall_64+0xfa/0xf80 [ 731.582745][T12019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.582766][T12019] ? clear_bhb_loop+0x60/0xb0 [ 731.582800][T12019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.582821][T12019] RIP: 0033:0x7fd766ecf749 [ 731.582841][T12019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 731.582859][T12019] RSP: 002b:00007fd765136038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 731.582883][T12019] RAX: ffffffffffffffda RBX: 00007fd767125fa0 RCX: 00007fd766ecf749 [ 731.582899][T12019] RDX: 0000000000088010 RSI: 00002000000004c0 RDI: 0000000000000004 [ 731.582914][T12019] RBP: 00007fd765136090 R08: 0000000000000000 R09: 0000000000000000 [ 731.582927][T12019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.582940][T12019] R13: 00007fd767126038 R14: 00007fd767125fa0 R15: 00007ffef90400c8 [ 731.582978][T12019] [ 731.884336][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1881'. [ 731.934344][ T37] kauditd_printk_skb: 2858 callbacks suppressed [ 731.934363][ T37] audit: type=1400 audit(1899732411.265:228205): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12023 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 731.934409][ T37] audit: type=1400 audit(1899732411.265:228206): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12023 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 731.934450][ T37] audit: type=1400 audit(1899732411.265:228207): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12023 comm="syz-executor" name="121" dev="tmpfs" ino=673 [ 731.934490][ T37] audit: type=1400 audit(1899732411.265:228208): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=12023 comm="syz-executor" opid=12023 ocomm="syz-executor" [ 731.940633][ T37] audit: type=1400 audit(1899732411.265:228209): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12023 comm="syz-executor" name="121" dev="tmpfs" ino=673 [ 731.940681][ T37] audit: type=1400 audit(1899732411.275:228210): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12023 comm="syz-executor" name="121" dev="tmpfs" ino=673 [ 731.940723][ T37] audit: type=1400 audit(1899732411.275:228211): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=12023 comm="syz-executor" name="121" dev="tmpfs" ino=673 [ 731.942659][ T37] audit: type=1400 audit(1899732411.275:228212): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12023 comm="syz-executor" name="121" dev="tmpfs" ino=673 [ 731.944424][ T37] audit: type=1400 audit(1899732411.275:228213): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12023 comm="syz-executor" name="121" dev="tmpfs" ino=673 [ 731.946868][ T37] audit: type=1400 audit(1899732411.275:228214): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=12023 comm="syz-executor" name="121" dev="tmpfs" ino=673 [ 732.281022][T12030] FAULT_INJECTION: forcing a failure. [ 732.281022][T12030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.281064][T12030] CPU: 1 UID: 0 PID: 12030 Comm: syz.2.1884 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 732.281094][T12030] Tainted: [L]=SOFTLOCKUP [ 732.281103][T12030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 732.281116][T12030] Call Trace: [ 732.281125][T12030] [ 732.281134][T12030] dump_stack_lvl+0x189/0x250 [ 732.281168][T12030] ? __pfx____ratelimit+0x10/0x10 [ 732.281198][T12030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 732.281225][T12030] ? __pfx__printk+0x10/0x10 [ 732.281262][T12030] should_fail_ex+0x46c/0x600 [ 732.281293][T12030] _copy_from_user+0x2d/0xb0 [ 732.281324][T12030] __copy_msghdr+0x3c5/0x5b0 [ 732.281353][T12030] ___sys_sendmsg+0x1a5/0x2a0 [ 732.281379][T12030] ? __pfx____sys_sendmsg+0x10/0x10 [ 732.281400][T12030] ? __lock_acquire+0x6b6/0x2cf0 [ 732.281479][T12030] ? __might_fault+0xb0/0x130 [ 732.281516][T12030] __sys_sendmmsg+0x22d/0x430 [ 732.281543][T12030] ? __pfx___sys_sendmmsg+0x10/0x10 [ 732.281570][T12030] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 732.281609][T12030] ? ksys_write+0x230/0x260 [ 732.281641][T12030] ? __pfx_ksys_write+0x10/0x10 [ 732.281677][T12030] __x64_sys_sendmmsg+0xa0/0xc0 [ 732.281703][T12030] do_syscall_64+0xfa/0xf80 [ 732.281734][T12030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.281754][T12030] ? clear_bhb_loop+0x60/0xb0 [ 732.281789][T12030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.281810][T12030] RIP: 0033:0x7efdab80f749 [ 732.281829][T12030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.281848][T12030] RSP: 002b:00007efda9a6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 732.281873][T12030] RAX: ffffffffffffffda RBX: 00007efdaba65fa0 RCX: 00007efdab80f749 [ 732.281889][T12030] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: 0000000000000004 [ 732.281903][T12030] RBP: 00007efda9a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 732.281916][T12030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.281929][T12030] R13: 00007efdaba66038 R14: 00007efdaba65fa0 R15: 00007ffdfee83748 [ 732.281966][T12030] [ 732.300920][T12028] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1883'. [ 732.300947][T12028] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1883'. [ 733.038967][T12045] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1891'. [ 733.423094][T12053] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1894'. [ 733.423122][T12053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1894'. [ 735.657266][ T5996] usb 5-1: new low-speed USB device number 75 using dummy_hcd [ 735.825338][ T5996] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 735.825486][ T5996] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 735.825508][ T5996] usb 5-1: config 0 has no interface number 0 [ 735.825561][ T5996] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 735.825604][ T5996] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 735.825627][ T5996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.696278][T12099] ./file0: Can't lookup blockdev [ 737.217184][ T5801] audit_log_start: 3261 callbacks suppressed [ 737.217203][ T5801] audit: audit_backlog=65 > audit_backlog_limit=64 [ 737.217216][ T5801] audit: audit_lost=53339 audit_rate_limit=0 audit_backlog_limit=64 [ 737.217231][ T5801] audit: backlog limit exceeded [ 737.217245][ T5801] audit: audit_backlog=65 > audit_backlog_limit=64 [ 737.217256][ T5801] audit: audit_lost=53340 audit_rate_limit=0 audit_backlog_limit=64 [ 737.217269][ T5801] audit: backlog limit exceeded [ 737.225761][ T37] audit: type=1400 audit(1899732415.236:231230): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=12097 comm="syz.1.1907" opid=12097 ocomm="syz.1.1907" [ 737.225813][ T37] audit: type=1400 audit(1899732415.406:231231): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12101 comm="syz.1.1907" name="474" dev="tmpfs" ino=2534 [ 737.225853][ T37] audit: type=1400 audit(1899732415.406:231232): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12101 comm="syz.1.1907" name="474" dev="tmpfs" ino=2534 [ 737.225893][ T37] audit: type=1400 audit(1899732415.406:231233): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=12101 comm="syz.1.1907" name="474" dev="tmpfs" ino=2534 [ 737.351616][ T5996] usb 5-1: config 0 descriptor?? [ 737.474658][ T5986] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 737.660643][ T6207] usb 5-1: USB disconnect, device number 75 [ 737.695827][T12107] No source specified [ 738.063130][T12117] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 738.083435][T12117] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 739.305209][T12121] vivid-003: disconnect [ 739.395672][T12120] vivid-003: reconnect [ 739.651068][T12133] ubi31: attaching mtd0 [ 739.658643][T12133] ubi31: scanning is finished [ 741.549543][T12133] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 742.225796][ T37] kauditd_printk_skb: 2403 callbacks suppressed [ 742.225819][ T37] audit: type=1400 audit(1899732421.568:233637): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12167 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 742.225913][ T37] audit: type=1400 audit(1899732421.568:233638): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12167 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 742.226060][ T37] audit: type=1400 audit(1899732421.568:233639): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12167 comm="syz-executor" name="390" dev="tmpfs" ino=2106 [ 742.226268][ T37] audit: type=1400 audit(1899732421.568:233640): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=12167 comm="syz-executor" opid=12167 ocomm="syz-executor" [ 742.226929][ T37] audit: type=1400 audit(1899732421.568:233641): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12167 comm="syz-executor" name="390" dev="tmpfs" ino=2106 [ 742.227056][ T37] audit: type=1400 audit(1899732421.568:233642): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12167 comm="syz-executor" name="390" dev="tmpfs" ino=2106 [ 742.227321][ T37] audit: type=1400 audit(1899732421.568:233643): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=12167 comm="syz-executor" name="390" dev="tmpfs" ino=2106 [ 742.227668][ T37] audit: type=1400 audit(1899732421.568:233644): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12167 comm="syz-executor" name="390" dev="tmpfs" ino=2106 [ 742.227796][ T37] audit: type=1400 audit(1899732421.568:233645): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12167 comm="syz-executor" name="390" dev="tmpfs" ino=2106 [ 742.228073][ T37] audit: type=1400 audit(1899732421.568:233646): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=12167 comm="syz-executor" name="390" dev="tmpfs" ino=2106 [ 742.534894][T12135] block nbd2: shutting down sockets [ 742.555450][T12169] overlayfs: invalid origin (0000) [ 742.593075][ T6207] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 742.753457][ T6207] usb 7-1: Using ep0 maxpacket: 32 [ 742.756378][ T6207] usb 7-1: config 61 has an invalid interface number: 9 but max is 0 [ 742.756406][ T6207] usb 7-1: config 61 has an invalid descriptor of length 36, skipping remainder of the config [ 742.756427][ T6207] usb 7-1: config 61 has no interface number 0 [ 742.756462][ T6207] usb 7-1: config 61 interface 9 has no altsetting 0 [ 742.762041][ T6207] usb 7-1: New USB device found, idVendor=0bb4, idProduct=0a56, bcdDevice=37.44 [ 742.762074][ T6207] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.762095][ T6207] usb 7-1: Product: syz [ 742.762111][ T6207] usb 7-1: Manufacturer: syz [ 742.762126][ T6207] usb 7-1: SerialNumber: syz [ 742.935189][T12171] vivid-000: disconnect [ 743.061304][T12170] vivid-000: reconnect [ 743.273863][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1932'. [ 743.653277][T12183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1937'. [ 745.132999][ T6207] usb 7-1: USB disconnect, device number 10 [ 745.148557][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'. [ 745.303647][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'. [ 745.491695][T12206] overlayfs: invalid origin (0000) [ 746.158837][T12218] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1948'. [ 746.282641][ T5996] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 747.514573][T12194] block nbd4: shutting down sockets [ 747.516532][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.516608][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.542420][ T37] kauditd_printk_skb: 2828 callbacks suppressed [ 747.542436][ T37] audit: type=1400 audit(1899732425.679:236475): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=12219 comm="syz.1.1951" opid=12219 ocomm="syz.1.1951" [ 747.542471][ T37] audit: type=1400 audit(1899732425.849:236476): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12224 comm="syz.1.1951" name="485" dev="tmpfs" ino=2596 [ 747.542515][ T37] audit: type=1400 audit(1899732425.849:236477): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12224 comm="syz.1.1951" name="485" dev="tmpfs" ino=2596 [ 747.542562][ T37] audit: type=1400 audit(1899732425.849:236478): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=12224 comm="syz.1.1951" name="485" dev="tmpfs" ino=2596 [ 747.542619][ T37] audit: type=1400 audit(1899732425.849:236479): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=12224 comm="syz.1.1951" path="/485/core" dev="tmpfs" ino=2601 [ 747.542653][ T37] audit: type=1400 audit(1899732425.849:236480): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=12224 comm="syz.1.1951" name="core" dev="tmpfs" ino=2601 [ 747.542677][ T37] audit: type=1400 audit(1899732426.089:236481): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=12219 comm="syz.1.1951" saddr=10.128.0.169 src=30008 daddr=10.128.1.93 dest=36966 netif=eth0 [ 747.542704][ T37] audit: type=1400 audit(1899732426.089:236482): lsm=SMACK fn=smack_ptrace_access_check action=granted subject="_" object="_" requested=r pid=12219 comm="syz.1.1951" opid=12219 ocomm="syz.1.1951" [ 747.542728][ T37] audit: type=1400 audit(1899732426.089:236483): lsm=SMACK fn=smack_ptrace_access_check action=granted subject="_" object="_" requested=r pid=12219 comm="syz.1.1951" opid=12219 ocomm="syz.1.1951" [ 747.542752][ T37] audit: type=1400 audit(1899732426.189:236484): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12219 comm="syz.1.1951" name="newroot" dev="tmpfs" ino=2 [ 747.742394][ T5996] usb 7-1: config 16 has an invalid interface number: 168 but max is 0 [ 747.742425][ T5996] usb 7-1: config 16 has no interface number 0 [ 747.742481][ T5996] usb 7-1: config 16 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 747.742509][ T5996] usb 7-1: config 16 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 747.742554][ T5996] usb 7-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a [ 747.742605][ T5996] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.830842][T12214] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 747.848075][ T5996] HFC-S_USB 7-1:16.168: probe with driver HFC-S_USB failed with error -5 [ 748.084932][ T5996] usb 7-1: USB disconnect, device number 11 [ 749.467429][T12245] netlink: 428 bytes leftover after parsing attributes in process `syz.6.1959'. [ 749.467469][T12245] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1959'. [ 749.686433][T12251] FAULT_INJECTION: forcing a failure. [ 749.686433][T12251] name failslab, interval 1, probability 0, space 0, times 0 [ 749.686474][T12251] CPU: 0 UID: 0 PID: 12251 Comm: syz.6.1962 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 749.686504][T12251] Tainted: [L]=SOFTLOCKUP [ 749.686513][T12251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 749.686526][T12251] Call Trace: [ 749.686536][T12251] [ 749.686544][T12251] dump_stack_lvl+0x189/0x250 [ 749.686573][T12251] ? __pfx____ratelimit+0x10/0x10 [ 749.686601][T12251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 749.686626][T12251] ? __pfx__printk+0x10/0x10 [ 749.686655][T12251] ? __pfx___might_resched+0x10/0x10 [ 749.686684][T12251] should_fail_ex+0x46c/0x600 [ 749.686710][T12251] ? __alloc_skb+0x255/0x430 [ 749.686729][T12251] should_failslab+0xa8/0x100 [ 749.686750][T12251] ? __alloc_skb+0x255/0x430 [ 749.686766][T12251] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 749.686803][T12251] __alloc_skb+0x255/0x430 [ 749.686826][T12251] ? __pfx___alloc_skb+0x10/0x10 [ 749.686856][T12251] alloc_skb_with_frags+0xca/0x890 [ 749.686896][T12251] sock_alloc_send_pskb+0x859/0x990 [ 749.686942][T12251] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 749.686971][T12251] ? __pfx___scm_send+0x10/0x10 [ 749.686997][T12251] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 749.687037][T12251] unix_dgram_sendmsg+0x454/0x1840 [ 749.687071][T12251] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 749.687119][T12251] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 749.687143][T12251] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 749.687186][T12251] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 749.687216][T12251] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 749.687240][T12251] __sock_sendmsg+0x21c/0x270 [ 749.687272][T12251] ____sys_sendmsg+0x508/0x810 [ 749.687302][T12251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 749.687356][T12251] __sys_sendmsg_sock+0x28/0x40 [ 749.687379][T12251] io_sendmsg+0x1fa/0x580 [ 749.687413][T12251] __io_issue_sqe+0x181/0x4b0 [ 749.687436][T12251] ? io_file_get_normal+0xec/0x2d0 [ 749.687460][T12251] io_issue_sqe+0x165/0x1060 [ 749.687481][T12251] ? io_sendmsg_prep+0x3d2/0x5f0 [ 749.687513][T12251] io_submit_sqes+0xbf4/0x2140 [ 749.687571][T12251] __se_sys_io_uring_enter+0x2df/0x2b00 [ 749.687607][T12251] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 749.687639][T12251] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 749.687668][T12251] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 749.687701][T12251] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 749.687720][T12251] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 749.687748][T12251] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 749.687770][T12251] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 749.687805][T12251] ? fput+0xa0/0xd0 [ 749.687829][T12251] ? ksys_write+0x230/0x260 [ 749.687858][T12251] ? __pfx_ksys_write+0x10/0x10 [ 749.687889][T12251] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 749.687914][T12251] do_syscall_64+0xfa/0xf80 [ 749.687943][T12251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.687963][T12251] ? clear_bhb_loop+0x60/0xb0 [ 749.687987][T12251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.688006][T12251] RIP: 0033:0x7f4b003ef749 [ 749.688026][T12251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.688044][T12251] RSP: 002b:00007f4afe656038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 749.688068][T12251] RAX: ffffffffffffffda RBX: 00007f4b00645fa0 RCX: 00007f4b003ef749 [ 749.688083][T12251] RDX: 000000000080ffff RSI: 00000000000047f6 RDI: 0000000000000005 [ 749.688095][T12251] RBP: 00007f4afe656090 R08: 0000000000000000 R09: 0000000000000000 [ 749.688109][T12251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.688122][T12251] R13: 00007f4b00646038 R14: 00007f4b00645fa0 R15: 00007ffcc170bca8 [ 749.688158][T12251] [ 749.820361][T12252] overlayfs: invalid origin (0000) [ 752.421503][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 753.109766][ T37] kauditd_printk_skb: 3040 callbacks suppressed [ 753.109790][ T37] audit: type=1400 audit(1899732431.991:238988): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5886 comm="kworker/0:6" saddr=127.0.0.1 src=20003 daddr=127.0.0.1 dest=20003 netif=lo [ 753.109848][ T37] audit: type=1400 audit(1899732431.991:238989): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=12275 comm="modprobe" path="/usr/lib/libpcre2-8.so.0.13.0" dev="sda1" ino=1723 [ 753.109898][ T37] audit: type=1400 audit(1899732432.011:238990): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12274 comm="modprobe" name="/" dev="sda1" ino=2 [ 753.109945][ T37] audit: type=1400 audit(1899732432.031:238991): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12274 comm="modprobe" name="etc" dev="sda1" ino=116 [ 753.109993][ T37] audit: type=1400 audit(1899732432.041:238992): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12274 comm="modprobe" name="selinux" dev="sda1" ino=196 [ 753.110041][ T37] audit: type=1400 audit(1899732432.371:238993): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=29 comm="ktimers/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.93 dest=36966 netif=eth0 [ 753.110089][ T37] audit: type=1400 audit(1899732432.371:238994): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=29 comm="ktimers/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.93 dest=36966 netif=eth0 [ 753.110138][ T37] audit: type=1400 audit(1899732432.371:238995): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=29 comm="ktimers/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.93 dest=36966 netif=eth0 [ 753.110317][ T37] audit: type=1400 audit(1899732432.401:238996): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12278 comm="syz.1.1955" name="newroot" dev="tmpfs" ino=2 [ 753.110368][ T37] audit: type=1400 audit(1899732432.401:238997): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12278 comm="syz.1.1955" name="dev" dev="tmpfs" ino=3 [ 753.372525][T12260] block nbd2: shutting down sockets [ 753.509290][T12283] input: syz1 as /devices/virtual/input/input29 [ 754.449401][ T6207] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 754.660237][ T6207] usb 5-1: no configurations [ 754.660259][ T6207] usb 5-1: can't read configurations, error -22 [ 754.728894][T12306] overlayfs: invalid origin (0000) [ 754.791771][ T6207] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 754.943911][ T6207] usb 5-1: no configurations [ 754.943935][ T6207] usb 5-1: can't read configurations, error -22 [ 754.944355][ T6207] usb usb5-port1: attempt power cycle [ 755.301984][ T6207] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 755.390617][T12313] vivid-000: disconnect [ 755.408644][ T6207] usb 5-1: no configurations [ 755.408665][ T6207] usb 5-1: can't read configurations, error -22 [ 755.433903][T12312] vivid-000: reconnect [ 755.538925][ T6207] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 755.561887][ T6207] usb 5-1: no configurations [ 755.561910][ T6207] usb 5-1: can't read configurations, error -22 [ 755.563389][ T6207] usb usb5-port1: unable to enumerate USB device [ 756.725604][T12320] kexec: Could not allocate control_code_buffer [ 756.754973][ T6992] Bluetooth: hci0: unexpected event 0x34 length: 10 > 6 [ 756.971789][T12342] tmpfs: Bad value for 'mpol' [ 758.572288][ T37] kauditd_printk_skb: 4077 callbacks suppressed [ 758.572310][ T37] audit: type=1400 audit(1899732437.913:242925): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=12361 comm="syz-executor" name="495" dev="tmpfs" ino=2649 [ 758.591351][ T37] audit: type=1400 audit(1899732437.933:242926): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9663 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 758.591488][ T37] audit: type=1400 audit(1899732437.933:242927): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9663 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 758.591723][ T37] audit: type=1400 audit(1899732437.933:242928): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9663 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 758.591844][ T37] audit: type=1400 audit(1899732437.933:242929): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9663 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 758.591999][ T37] audit: type=1400 audit(1899732437.933:242930): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=9663 comm="syz-executor" name="146" dev="tmpfs" ino=810 [ 758.592277][ T37] audit: type=1400 audit(1899732437.933:242931): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=9663 comm="syz-executor" path="/146" dev="tmpfs" ino=810 [ 758.592548][ T37] audit: type=1400 audit(1899732437.933:242932): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=9663 comm="syz-executor" path="/146" dev="tmpfs" ino=810 [ 758.592843][ T37] audit: type=1400 audit(1899732437.933:242933): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9663 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 758.592986][ T37] audit: type=1400 audit(1899732437.933:242934): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9663 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 759.469424][ T38] INFO: task kworker/1:5:5915 blocked for more than 144 seconds. [ 759.469524][ T38] Tainted: G L syzkaller #0 [ 759.469524][ T38] Tainted: G L syzkaller #0 [ 759.469576][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 759.469628][ T38] task:kworker/1:5 state:D stack:20392 pid:5915 tgid:5915 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 759.469922][ T38] Workqueue: usb_hub_wq hub_event [ 759.470020][ T38] Call Trace: [ 759.470071][ T38] [ 759.470159][ T38] __schedule+0x1480/0x50a0 [ 759.470444][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 759.470581][ T38] ? __pfx___schedule+0x10/0x10 [ 759.470717][ T38] ? schedule+0x91/0x360 [ 759.470817][ T38] schedule+0x165/0x360 [ 759.470915][ T38] schedule_timeout+0x9a/0x270 [ 759.470980][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 759.477369][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 759.477440][ T38] ? lockdep_hardirqs_on+0x98/0x140 [ 759.477672][ T38] ? wait_for_completion+0x267/0x5d0 [ 759.477774][ T38] wait_for_completion+0x2bf/0x5d0 [ 759.477975][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 759.478179][ T38] i2c_del_adapter+0x591/0x760 [ 759.478331][ T38] ? lockdep_hardirqs_on+0x98/0x140 [ 759.478432][ T38] ? __pfx_i2c_del_adapter+0x10/0x10 [ 759.478499][ T38] ? dvb_usb_adapter_exit+0xd7/0x240 [ 759.478562][ T38] ? kfree+0x1bd/0x900 [ 759.479212][ T38] dvb_usb_i2c_exit+0x64/0xb0 [ 759.479312][ T38] dvb_usb_device_exit+0x1be/0x350 [ 759.479410][ T38] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 759.479481][ T38] ? usb_disable_interface+0x31d/0x350 [ 759.479646][ T38] usb_unbind_interface+0x26e/0x910 [ 759.479810][ T38] ? __pfx_usb_unbind_interface+0x10/0x10 [ 759.479906][ T38] device_release_driver_internal+0x4d9/0x800 [ 759.480036][ T38] bus_remove_device+0x355/0x450 [ 759.480166][ T38] device_del+0x515/0x8e0 [ 759.480852][ T38] ? __pfx_device_del+0x10/0x10 [ 759.480960][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 759.481028][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 759.481874][ T38] usb_disable_device+0x3d4/0x8e0 [ 759.481949][ T38] usb_disconnect+0x315/0x970 [ 759.482122][ T38] hub_event+0x1cd9/0x4f30 [ 759.482671][ T38] ? __pfx_hub_event+0x10/0x10 [ 759.482732][ T38] ? process_scheduled_works+0x9ef/0x1770 [ 759.482831][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 759.482895][ T38] ? process_scheduled_works+0x9ef/0x1770 [ 759.482956][ T38] ? process_scheduled_works+0x9ef/0x1770 [ 759.483053][ T38] process_scheduled_works+0xad1/0x1770 [ 759.483393][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 759.483595][ T38] worker_thread+0x8a0/0xda0 [ 759.483694][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 759.483831][ T38] ? __kthread_parkme+0x7b/0x200 [ 759.484101][ T38] kthread+0x711/0x8a0 [ 759.484204][ T38] ? __pfx_worker_thread+0x10/0x10 [ 759.484265][ T38] ? __pfx_kthread+0x10/0x10 [ 759.484327][ T38] ? rt_spin_unlock+0x150/0x200 [ 759.484422][ T38] ? rt_spin_unlock+0x161/0x200 [ 759.484480][ T38] ? __pfx_kthread+0x10/0x10 [ 759.484578][ T38] ret_from_fork+0x599/0xb30 [ 759.484672][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 759.484865][ T38] ? __switch_to_asm+0x39/0x70 [ 759.484928][ T38] ? __switch_to_asm+0x33/0x70 [ 759.484991][ T38] ? __pfx_kthread+0x10/0x10 [ 759.485089][ T38] ret_from_fork_asm+0x1a/0x30 [ 759.485343][ T38] [ 759.485694][ T38] [ 759.485694][ T38] Showing all locks held in the system: [ 759.485747][ T38] 4 locks held by pr/legacy/17: [ 759.485799][ T38] 4 locks held by rcuc/0/20: [ 759.485849][ T38] 1 lock held by khungtaskd/38: [ 759.485899][ T38] #0: ffffffff8d5ae880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 759.486173][ T38] 5 locks held by kworker/u8:2/43: [ 759.486234][ T38] 6 locks held by kworker/u8:4/69: [ 759.486316][ T38] 7 locks held by kworker/u8:7/174: [ 759.486435][ T38] 3 locks held by kworker/u8:11/1432: [ 759.486479][ T38] 6 locks held by kworker/u8:12/1454: [ 759.486664][ T38] 1 lock held by klogd/5155: [ 759.486718][ T38] 2 locks held by getty/5555: [ 759.486769][ T38] #0: ffff8880349f50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 759.487021][ T38] #1: ffffc90003e7b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 759.501037][ T38] 3 locks held by syz-executor/5801: [ 759.501157][ T38] 5 locks held by kworker/1:5/5915: [ 759.501169][ T38] #0: ffff88801eefcd38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 759.501416][ T38] #1: ffffc9000541fb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 759.501675][ T38] #2: ffff888027bc6188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4f30 [ 759.501818][ T38] #3: ffff8880392b1188 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xde/0x970 [ 759.502535][ T38] #4: ffff88805e46c150 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 759.502773][ T38] 6 locks held by kworker/0:9/5996: [ 759.502826][ T38] 4 locks held by kworker/u8:21/6618: [ 759.502876][ T38] 4 locks held by kworker/u8:24/6625: [ 759.502996][ T38] 3 locks held by syz.4.2000/12369: [ 759.503053][ T38] 3 locks held by syz.4.2000/12372: [ 759.503129][ T38] #0: ffff888024bdfa48 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xe10 [ 759.503358][ T38] #1: ffff88814236db38 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: nbd_add_socket+0x312/0xbb0 [ 759.503664][ T38] #2: ffff88814236db70 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: nbd_add_socket+0x312/0xbb0 [ 759.503878][ T38] 1 lock held by syz.4.2000/12373: [ 759.503929][ T38] #0: ffff888024bdfa48 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xe10 [ 759.504182][ T38] 4 locks held by syz-executor/12371: [ 759.504192][ T38] [ 759.504196][ T38] ============================================= [ 759.504196][ T38] [ 759.504203][ T38] NMI backtrace for cpu 1 [ 759.504220][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 759.504246][ T38] Tainted: [L]=SOFTLOCKUP [ 759.504253][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 759.504265][ T38] Call Trace: [ 759.504273][ T38] [ 759.504282][ T38] dump_stack_lvl+0x189/0x250 [ 759.504311][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 759.504335][ T38] ? __pfx__printk+0x10/0x10 [ 759.504365][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 759.504389][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 759.504421][ T38] ? __pfx__printk+0x10/0x10 [ 759.504444][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 759.504476][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 759.504499][ T38] sys_info+0x135/0x170 [ 759.504516][ T38] watchdog+0xf95/0xfe0 [ 759.504542][ T38] ? watchdog+0x20a/0xfe0 [ 759.504569][ T38] kthread+0x711/0x8a0 [ 759.504597][ T38] ? __pfx_watchdog+0x10/0x10 [ 759.504617][ T38] ? __pfx_kthread+0x10/0x10 [ 759.504639][ T38] ? rt_spin_unlock+0x150/0x200 [ 759.504664][ T38] ? rt_spin_unlock+0x161/0x200 [ 759.504682][ T38] ? __pfx_kthread+0x10/0x10 [ 759.504708][ T38] ret_from_fork+0x599/0xb30 [ 759.504731][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 759.504761][ T38] ? __switch_to_asm+0x39/0x70 [ 759.504784][ T38] ? __switch_to_asm+0x33/0x70 [ 759.504806][ T38] ? __pfx_kthread+0x10/0x10 [ 759.504832][ T38] ret_from_fork_asm+0x1a/0x30 [ 759.504872][ T38] [ 759.504882][ T38] Sending NMI from CPU 1 to CPUs 0: [ 759.504910][ C0] NMI backtrace for cpu 0 [ 759.504928][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 759.504951][ C0] Tainted: [L]=SOFTLOCKUP [ 759.504957][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 759.504967][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 759.504990][ C0] Code: e8 9e fa b5 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 7f 61 18 fd 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 8a 3f cc 05 cc 44 89 f9 80 e1 07 [ 759.505004][ C0] RSP: 0018:ffffc900001678d0 EFLAGS: 00000202 [ 759.505020][ C0] RAX: 1ffffffff31f0700 RBX: 00000000000003fd RCX: 0000000000000000 [ 759.505032][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 759.505042][ C0] RBP: ffffffff98f83fd0 R08: 0000000000000000 R09: 0000000000000000 [ 759.505053][ C0] R10: dffffc0000000000 R11: ffffffff850a7750 R12: dffffc0000000000 [ 759.505065][ C0] R13: 0000000000000000 R14: ffffffff98f83d40 R15: 0000000000000000 [ 759.505076][ C0] FS: 0000000000000000(0000) GS:ffff888126d06000(0000) knlGS:0000000000000000 [ 759.505090][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 759.505103][ C0] CR2: 00007fd764cd1d58 CR3: 00000000663b6000 CR4: 00000000003526f0 [ 759.505120][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 759.505132][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 759.505144][ C0] Call Trace: [ 759.505151][ C0] [ 759.505160][ C0] wait_for_lsr+0x1aa/0x2f0 [ 759.505186][ C0] serial8250_console_write+0x11bd/0x1b40 [ 759.505281][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 759.505309][ C0] ? console_flush_one_record+0x10b/0xbe0 [ 759.505333][ C0] ? console_flush_one_record+0x4a0/0xbe0 [ 759.505355][ C0] console_flush_one_record+0x6b5/0xbe0 [ 759.505379][ C0] ? console_flush_one_record+0x10b/0xbe0 [ 759.505402][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 759.505424][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 759.505447][ C0] ? schedule+0x91/0x360 [ 759.505472][ C0] legacy_kthread_func+0x16f/0x210 [ 759.505493][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 759.505514][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 759.505536][ C0] ? __kthread_parkme+0x7b/0x200 [ 759.505555][ C0] ? __kthread_parkme+0x1a1/0x200 [ 759.505577][ C0] kthread+0x711/0x8a0 [ 759.505600][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 759.505620][ C0] ? __pfx_kthread+0x10/0x10 [ 759.505640][ C0] ? rt_spin_unlock+0x150/0x200 [ 759.505660][ C0] ? rt_spin_unlock+0x161/0x200 [ 759.505677][ C0] ? __pfx_kthread+0x10/0x10 [ 759.505699][ C0] ret_from_fork+0x599/0xb30 [ 759.505718][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 759.505741][ C0] ? __switch_to_asm+0x39/0x70 [ 759.505764][ C0] ? __switch_to_asm+0x33/0x70 [ 759.505786][ C0] ? __pfx_kthread+0x10/0x10 [ 759.505809][ C0] ret_from_fork_asm+0x1a/0x30 [ 759.505838][ C0] [ 759.505973][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 759.505997][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 759.506024][ T38] Tainted: [L]=SOFTLOCKUP [ 759.506033][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 759.506044][ T38] Call Trace: [ 759.506053][ T38] [ 759.506063][ T38] dump_stack_lvl+0x99/0x250 [ 759.506091][ T38] ? __asan_memcpy+0x40/0x70 [ 759.506117][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 759.506142][ T38] ? __pfx__printk+0x10/0x10 [ 759.506174][ T38] vpanic+0x237/0x6d0 [ 759.506199][ T38] ? __pfx_vpanic+0x10/0x10 [ 759.506225][ T38] ? preempt_schedule_common+0x83/0xd0 [ 759.506256][ T38] panic+0xb9/0xc0 [ 759.506280][ T38] ? __pfx_panic+0x10/0x10 [ 759.506306][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 759.506333][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 759.506359][ T38] watchdog+0xfdf/0xfe0 [ 759.506386][ T38] ? watchdog+0x20a/0xfe0 [ 759.506414][ T38] kthread+0x711/0x8a0 [ 759.506452][ T38] ? __pfx_watchdog+0x10/0x10 [ 759.506473][ T38] ? __pfx_kthread+0x10/0x10 [ 759.506495][ T38] ? rt_spin_unlock+0x150/0x200 [ 759.506521][ T38] ? rt_spin_unlock+0x161/0x200 [ 759.506540][ T38] ? __pfx_kthread+0x10/0x10 [ 759.506568][ T38] ret_from_fork+0x599/0xb30 [ 759.506591][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 759.506623][ T38] ? __switch_to_asm+0x39/0x70 [ 759.506647][ T38] ? __switch_to_asm+0x33/0x70 [ 759.506671][ T38] ? __pfx_kthread+0x10/0x10 [ 759.506697][ T38] ret_from_fork_asm+0x1a/0x30 [ 759.506739][ T38] [ 759.507141][ T38] Kernel Offset: disabled