last executing test programs: 30m24.745941787s ago: executing program 2 (id=318): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r2 = dup(r1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x222200, 0x0) r4 = fcntl$dupfd(r0, 0x0, r3) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/251, 0x0, 0xe000}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000006c0)={0x0, r2}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 30m24.407591812s ago: executing program 2 (id=321): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x22242, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000340)={0x2, 0x1}, 0x2) 30m24.354802905s ago: executing program 3 (id=322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4841}, 0x24000004) 30m24.34072787s ago: executing program 2 (id=323): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_add_vcpu$x86(r1, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4002, 0x10200000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x13, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control64=0x2004, 0x408000}}, @nested_vmlaunch={0x12f, 0x18}], 0x108}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 30m24.247086316s ago: executing program 2 (id=325): userfaultfd(0x80001) socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) socket$kcm(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000740)='ns/user\x00') open_by_handle_at(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="20000000f1000100"], 0x0) 30m24.22001817s ago: executing program 2 (id=326): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000500)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/fcloop/ctl/del_remote_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='wwnn=0x1000000044001122,wwpn=0x2000000044001122', 0x2f) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) setrlimit(0x5, &(0x7f0000000140)={0xca7, 0x200000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000000700)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f00000003c0)="300000001c00010401000000000000002d000000010000808000000105000100280000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100270000000a0002000000000000000000300000001d00010401000000000000002d0000000100007e3d9a4c01050001002800000009000200ce15000000000000", 0x90) 30m24.215642829s ago: executing program 3 (id=327): r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r0, &(0x7f0000000dc0)='0', 0x1) socket$can_bcm(0x1d, 0x2, 0x2) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="230000000800000002000000ffff00"], 0x48) mkdir(&(0x7f0000000140)='./my_configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r4, &(0x7f0000006680)=""/102392, 0x18ff8) syz_emit_ethernet(0x66, &(0x7f000001f680)={@local, @random="42238e910adb", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @private0, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "3e090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}, @pad1]}]}}}}}, 0x0) sched_setaffinity(r3, 0x8, &(0x7f000001f700)=0x40003) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f000001f740)=0x46c, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f000001f780)={0x2, &(0x7f000001f7c0)=[{0x8048, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f000001f900)={0x0, 0x0, &(0x7f000001f940)={&(0x7f000001f980)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) 30m23.184799121s ago: executing program 3 (id=328): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8001, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESHEX=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', 0x280a00, 0x0) file_getattr(r1, &(0x7f0000002280)='./file0\x00', 0x0, 0x0, 0x100) 30m22.622414181s ago: executing program 2 (id=330): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x400, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80420, &(0x7f0000002340)={[{@inode32}, {@grpquota_inode_hardlimit}]}) 30m22.367273374s ago: executing program 3 (id=332): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x804040, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0xfffffee2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file5\x00', 0x86c0, 0x101) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x5000003a, r1, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00') setuid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file7/file0\x00', 0x0) symlinkat(&(0x7f00000003c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file7/file0\x00', 0x0) 30m20.622205616s ago: executing program 3 (id=341): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000500)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/fcloop/ctl/del_remote_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='wwnn=0x1000000044001122,wwpn=0x2000000044001122', 0x2f) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) setrlimit(0x5, &(0x7f0000000140)={0xca7, 0x200000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000000700)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f00000003c0)="300000001c00010401000000000000002d000000010000808000000105000100280000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100270000000a0002000000000000000000300000001d00010401000000000000002d0000000100007e3d9a4c01050001002800000009000200ce15000000000000", 0x90) 30m19.972667161s ago: executing program 3 (id=343): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='mtd0\x00', &(0x7f0000000540)='./mnt\x00', &(0x7f0000000580)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/fillfile\x00', 0x242, 0x1fd) open_by_handle_at(r0, &(0x7f0000000700)=ANY=[], 0x200000) 30m13.376089935s ago: executing program 32 (id=301): socket(0x11, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000040b7204015000000"], 0x0) socket$inet(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 30m7.014148263s ago: executing program 33 (id=330): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x400, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80420, &(0x7f0000002340)={[{@inode32}, {@grpquota_inode_hardlimit}]}) 30m4.621837896s ago: executing program 34 (id=343): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='mtd0\x00', &(0x7f0000000540)='./mnt\x00', &(0x7f0000000580)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/fillfile\x00', 0x242, 0x1fd) open_by_handle_at(r0, &(0x7f0000000700)=ANY=[], 0x200000) 14m35.758819619s ago: executing program 0 (id=2359): r0 = syz_open_dev$sg(&(0x7f0000000340), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r0, 0x0) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800004000000053, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000000fc010000000000000000000000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012"], 0xa0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000140)=[@ioring_restriction_register_op], 0x1) syz_io_uring_setup(0x201, &(0x7f0000000180)={0x0, 0x4395, 0x80, 0x3, 0xffffffff}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "fff5000000000000"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}}, 0x0) 14m35.576176162s ago: executing program 0 (id=2362): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862a01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000140)={0x57, 0x0, 0x7ff, {0xffff, 0x1}, {0x45, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0x80cb, 0x9}, {0x81, 0x1, 0x1, 0x7, 0x6, 0x2}]}) write$char_usb(r0, &(0x7f0000000180)="e2", 0x2250) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2d, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) add_key$user(0x0, &(0x7f0000000580), &(0x7f00000005c0), 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff) mount(&(0x7f0000000640)=@filename='none\x00', &(0x7f0000000680)='./sys\x00', &(0x7f00000006c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/cpu/drivers/processor\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000740)='unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000780)='cpu1', 0x4) write(r5, &(0x7f00000007c0)='cpu0\n', 0x5) r6 = openat(r4, &(0x7f0000000800)='bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000840)='cpu1', 0x4) write(r6, &(0x7f0000000880)='cpu0', 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000240), r1) 14m32.816838314s ago: executing program 0 (id=2367): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./debug\x00', &(0x7f00000005c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/bluetooth/hci0/msft_opcode\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='64542\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000100)='4', 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x3, &(0x7f0000000440)=[{0x48, 0x33, 0x57}, {0x28, 0x1, 0xf7, 0xfffff010}, {0x6, 0x6, 0x0, 0x5}]}, 0x10) sendto$unix(r2, &(0x7f0000000480)='QW', 0x2, 0x4000000, 0x0, 0x0) add_key(&(0x7f0000000140)='rxrpc\x00', 0x0, &(0x7f0000000180)="01000000020000a9584109b35ae059630b008145f94cd9776ef916feff", 0xa918, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @dev={0xac, 0x14, 0x14, 0x13}}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "63b98f0e664ba112bd6e8eaf35934614"}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) 14m32.350881592s ago: executing program 0 (id=2370): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RREAD(r1, &(0x7f0000000180)={0x3c, 0x75, 0x2, {0x31, "8bbd921fc65ca4ec3dccde15fbc97a428d87a6d7192808e6e3d47b21736677923604746065c6db55210a03e5135a5a900d"}}, 0x3c) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) readv(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(0x0, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) ioctl$KDSIGACCEPT(r0, 0x5607, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x50, 0x3, 0x8, @private0, @private0, 0x7800, 0x20, 0x7bed, 0x588}}) 14m29.852827333s ago: executing program 0 (id=2374): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000010340)={0x2, 0x1111, @loopback}, 0x10) clock_gettime(0x7, &(0x7f0000000000)) io_getevents(0x0, 0x2e5, 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)=""/139, &(0x7f00000002c0)=0x8b) r1 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x141102) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000480)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000006c0)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000740)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000800)={0x0, 0x96, "25bbc0834ec51a41c20a4fe34f94ee68e8a02d31450b050da0de2cf8fb33290a33254201c2edebe6725757979253295aae50d41ca164d67cd0b0e95767d50854775dffec166646fafb7241224d7cc33b6063b3d839605dcbd1b9b878f406504103fd7789bacce2575e1493e513fee1830e843e9927fe81d13f01e175a3c3b77ee3d6fc6d674883efcb12400cbeca1b29940feb1e666c"}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000900)={'lo\x00', @random="01300134b1ff"}) socket$igmp(0x2, 0x3, 0x2) 14m28.267344404s ago: executing program 0 (id=2380): personality(0x4100001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="002222000000962313927b7c070c0000007e24591de11d47eadb132a76009b01f6216683"], 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000380), 0x40, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000380), 0x40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) unshare(0x20000400) (async) unshare(0x20000400) socket$inet6(0xa, 0x3, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write$cgroup_pid(r3, &(0x7f0000000100)=0xffffffffffffffff, 0x12) (async) write$cgroup_pid(r3, &(0x7f0000000100)=0xffffffffffffffff, 0x12) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8, 0x0) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0x400000003, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2}, 0x0, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000200)={0x0, 0x400000003, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2}, 0x0, 0x0, 0x0, 0x0) timer_create(0x8, &(0x7f0000000240)={0x0, 0x21, 0x800000000004}, &(0x7f0000000280)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000004000000007a0c5b5bcee30652f08ab64c6b1aa8f3b90f5381f143501e6a4f98248278af14b22fdcd7d8c5c7cd1727ff9ef1af5ca51d9df87e3fc415e36c257a2ef9423f315b78fc7ef05eef6e70edbf6f5fb3ba0c7204fafd2888922af56344c703bf03e66b5803fde84140e5e896b86342a51f00365376461d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, &(0x7f0000000840)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, &(0x7f0000000840)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000008c0)={r7}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000008c0)={r7}, 0xc) 14m13.225723252s ago: executing program 35 (id=2380): personality(0x4100001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="002222000000962313927b7c070c0000007e24591de11d47eadb132a76009b01f6216683"], 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000380), 0x40, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000380), 0x40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) unshare(0x20000400) (async) unshare(0x20000400) socket$inet6(0xa, 0x3, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write$cgroup_pid(r3, &(0x7f0000000100)=0xffffffffffffffff, 0x12) (async) write$cgroup_pid(r3, &(0x7f0000000100)=0xffffffffffffffff, 0x12) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8, 0x0) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0x400000003, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2}, 0x0, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000200)={0x0, 0x400000003, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2}, 0x0, 0x0, 0x0, 0x0) timer_create(0x8, &(0x7f0000000240)={0x0, 0x21, 0x800000000004}, &(0x7f0000000280)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000004000000007a0c5b5bcee30652f08ab64c6b1aa8f3b90f5381f143501e6a4f98248278af14b22fdcd7d8c5c7cd1727ff9ef1af5ca51d9df87e3fc415e36c257a2ef9423f315b78fc7ef05eef6e70edbf6f5fb3ba0c7204fafd2888922af56344c703bf03e66b5803fde84140e5e896b86342a51f00365376461d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, &(0x7f0000000840)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, &(0x7f0000000840)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000008c0)={r7}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000008c0)={r7}, 0xc) 7m0.374820724s ago: executing program 4 (id=3335): socket$inet_udp(0x2, 0x2, 0x0) epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x1, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x700) 6m59.690981463s ago: executing program 4 (id=3336): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000000080)=[{&(0x7f0000003280)="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", 0x1000}, {&(0x7f0000004280)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000042c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(0x3) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000000c0), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000280)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1e, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r4, 0x0, 0xe, 0x0, &(0x7f0000000780)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) memfd_secret(0x80000) 6m58.657033488s ago: executing program 4 (id=3338): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_SET_DEBUGREGS(r5, 0x4080aea2, &(0x7f0000000280)={[0x8080000, 0xdddd0000, 0x27000, 0x80b7002], 0x40, 0x76, 0x2}) 6m56.52954228s ago: executing program 4 (id=3341): openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./dev\x00', &(0x7f0000000a80)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./dev/cpu/0/msr\x00', 0x2, 0x0) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2008c2, &(0x7f00000000c0)={'trans=xen,', {[{@cache_readahead}, {@nodevmap}, {@posixacl}, {@access_user}, {@access_user}, {@version_u}, {@cache_fscache}, {@version_L}, {@mmap}, {@cache_none}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}]}}) ioctl$TCSBRKP(r0, 0x5425, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000000b80)=""/102392, 0x18ff8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000019b80), 0x42, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000019bc0), 0x2) r5 = memfd_create(&(0x7f0000019c00)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000019c40)={r5, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000019c80)=0x2) close_range(r3, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000b40)="f700040000000000", 0x8, 0x830) 6m56.057848573s ago: executing program 4 (id=3344): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000140)='\b', 0x1, 0x1090) fsync(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001a80)=ANY=[@ANYBLOB="f4010000", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf250b00000008000280040004004400078008000100000400000c0003005c310000000000000c00030005000000000000000c00040004000000000000000c00040001040000000000000800010070000000c00005800c000280080002000b000000070001"], 0x1f4}, 0x1, 0x0, 0x0, 0x40800}, 0x10) 6m55.299358151s ago: executing program 4 (id=3345): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x143102) bind(r0, &(0x7f0000000240)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(&(0x7f0000000340), 0x4000) shutdown(r0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, r3, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x44) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r4, &(0x7f0000000500)=""/9, 0xfffffd87) unshare(0x22020600) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r6 = fsopen(&(0x7f0000000740)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@fallback=r7, 0x35, 0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={r8, &(0x7f00000008c0)}, 0x20) write$tun(r4, 0x0, 0xffe) add_key(&(0x7f0000000540)='pkcs7_test\x00', 0x0, &(0x7f00000005c0)="307106092a864886f70d010702a0643062020101310f300d06096086480165030402010500300b06092a864886f70d010701313f303d0201113014300f310d300b0603550403130454657374020101300d06096086480165030402010500300d06092a864886f70d0101010500040401020304", 0x73, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x2, 0x0) 6m54.473324129s ago: executing program 36 (id=3345): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x143102) bind(r0, &(0x7f0000000240)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(&(0x7f0000000340), 0x4000) shutdown(r0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, r3, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x44) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r4, &(0x7f0000000500)=""/9, 0xfffffd87) unshare(0x22020600) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r6 = fsopen(&(0x7f0000000740)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@fallback=r7, 0x35, 0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={r8, &(0x7f00000008c0)}, 0x20) write$tun(r4, 0x0, 0xffe) add_key(&(0x7f0000000540)='pkcs7_test\x00', 0x0, &(0x7f00000005c0)="307106092a864886f70d010702a0643062020101310f300d06096086480165030402010500300b06092a864886f70d010701313f303d0201113014300f310d300b0603550403130454657374020101300d06096086480165030402010500300d06092a864886f70d0101010500040401020304", 0x73, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x2, 0x0) 3m13.519127511s ago: executing program 7 (id=3904): socket(0x840000000002, 0x3, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) socket$kcm(0x1e, 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f00000007c0), &(0x7f0000000800)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000880)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000008c0)={@local, @empty, @void, {@ipv6={0x8100, @udp={0x0, 0x6, "a24b9f", 0x18, 0x2b, 0x0, @remote, @local, {[], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 3m13.3020776s ago: executing program 7 (id=3907): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000010000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000e2ffffffb702000008000000b703000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xc8948000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000000)=""/106, &(0x7f0000000340)="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", &(0x7f00000004c0), 0x80, r6, 0x0, 0x7}, 0x38) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x92}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040000}, 0x801) r7 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r7, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x48840, &(0x7f0000001100)={0xa, 0x1, 0x0, @loopback}, 0x1c) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0100000003"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x6, 0x10, &(0x7f0000000e80)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r9, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000f00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r10, 0x0, 0xe, 0x0, &(0x7f0000000fc0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xe}]}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x8, 0x10000, 0x44, @dev={0xfe, 0x80, '\x00', 0x44}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x40, 0x2, 0x8}}) r13 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r13, &(0x7f0000000600)='res', 0x3) 3m12.125252321s ago: executing program 7 (id=3908): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/set_event\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x9}}, 0x20) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000780)="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", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000009c0)="b826c4139a86353cbda69434b1660c9490c1dce0068251193a8d0bbe9ef1d234afe76884532fc1418ff5250c917485f0ff345b39a90da2123a68e59c81b4e1291b7fa7c753d100d8ac26326a5828673dbb1f284799a2655eb91a1d1d35f4adc7c85920", 0x63}], 0x1}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000e80)="98b00967c5c7904da7c6a62237c944f98187705d27ec2e87121ee503bb029dec67124692e4438e228f72bcfae7e07eeaf3b852086a93b875080cf4181532b7d7685cc71acff78b2a50a8685f487267f1ad7e4197bf9ec3ffc2e57a8bd6bac61b0e09e610c92d57c7cd482583d053f748e1176b4c63df7f34e9985f66ab1a1b3195be50d2a1f75f67350c05a766b12b0a74a55af4d13421a740b7427e556eeb926f66fa51be722882b51a1d994a3d8399ea598d9426171d119f70f42e1808a18a9207264c57af29f2e43ae70110758d0184910d57ee7abe042be58159301a3fc51b4aa32a5e752d017b89ae8d70959b271345bd5a27d58659e5a8d858c1923c8821ffa65d235af453f86f810ffc61d45c658dac96d4f20335ab7edd445d52433b307d16478e3578d96cffaf3bdc40d9c3e2c67a892cce2e8409be7ff568cfba1b9ca5feead69388f90d986f45246000e48f83b1f8e363bd21a753067660057610e40ef5d87e095059a389718a772ef4205691bbe55e55d053c6c0bd599b0a27dcc5d1b9a327bd365f60ad8a880566ef5705a3a016fcffaab758235851456b8084cd5ea851e0cc214e468e1d2a6e882904bbc099a9b819c18264", 0x1b9}], 0x1}}], 0x3, 0x0) sendmsg(r0, &(0x7f0000003940)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f00000002c0)="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", 0xfb}, {&(0x7f0000002240)="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", 0x176}], 0x2}, 0x0) 3m11.910677273s ago: executing program 7 (id=3913): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x862b81) r1 = syz_clone(0x0, 0x0, 0xfffffffffffffe36, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x56, 0x0, 0xac, {0x5, 0x1}, {0x4f, 0x2}, @cond=[{0x9, 0x5299, 0xc, 0x1000, 0xf531, 0xf4a}, {0x8001, 0x807, 0x4, 0x17, 0x0, 0xfffe}]}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000180)="e2", 0x2250) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) close(0x3) r3 = syz_open_dev$vim2m(&(0x7f0000000280), 0xf7f, 0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000340)=""/4096, &(0x7f0000001340)=0x1000) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000001380)={0xf0f003, 0x6}) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000040)=' ', 0x1}, {&(0x7f0000000240)=' 1', 0x2}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x862b81) (async) syz_clone(0x0, 0x0, 0xfffffffffffffe36, 0x0, 0x0, 0x0) (async) ptrace(0x10, r1) (async) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x0, 0x0) (async) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x56, 0x0, 0xac, {0x5, 0x1}, {0x4f, 0x2}, @cond=[{0x9, 0x5299, 0xc, 0x1000, 0xf531, 0xf4a}, {0x8001, 0x807, 0x4, 0x17, 0x0, 0xfffe}]}) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) (async) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) (async) write$char_usb(r0, &(0x7f0000000180)="e2", 0x2250) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) close(0x3) (async) syz_open_dev$vim2m(&(0x7f0000000280), 0xf7f, 0x2) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000340)=""/4096, &(0x7f0000001340)=0x1000) (async) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000001380)={0xf0f003, 0x6}) (async) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) (async) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000040)=' ', 0x1}, {&(0x7f0000000240)=' 1', 0x2}], 0x2) (async) 3m11.667193162s ago: executing program 7 (id=3916): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x82001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000180)={0xb, 0x86, 0xfffffffffffffffe, 0x9, 0x7, 0xb, 0x651, 0xffffffff, 0x9657, 0x0, 0x7fffffff, 0x0, 0x0, 0xb, 0x80000000000000, 0xcc3, 0x1, 0x1, 0x94d6, 0x0, 0xfffffffd, 0x8, 0x8, 0xfffffffffffffffa, 0x3, 0x6}) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x4001, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) brk(0x689d80000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/ksm/merge_across_nodes\x00', 0x2, 0x0) write$sysctl(r0, &(0x7f0000000400)='7\x00', 0x2) 3m10.277146219s ago: executing program 7 (id=3924): syz_emit_ethernet(0x4e, &(0x7f0000000a80)=ANY=[], 0x0) 3m10.068355159s ago: executing program 37 (id=3924): syz_emit_ethernet(0x4e, &(0x7f0000000a80)=ANY=[], 0x0) 16.272876738s ago: executing program 9 (id=4366): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 12.41514864s ago: executing program 1 (id=4372): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a2050000000000000016"}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000004c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000640)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000740)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f0000000300)="b800000500000000", &(0x7f0000000340)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) sendmsg$nl_route(r6, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0x9, 0x0}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000002f000900270c7000fddbdf250500000008000a000b000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008033}, 0x40844) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r7, 0x4) r9 = syz_open_dev$media(&(0x7f0000000a00), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r9, 0x80047c05, &(0x7f0000000b40)) r10 = openat$nullb(0xffffffffffffff9c, 0x0, 0x181002, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r11, 0x3553000) 12.414930768s ago: executing program 9 (id=4373): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file3\x00', 0x105042, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaeaaaaaaabb0800450000140051e2cd5a89907800000000ffffffff"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r1, 0x4b4a, 0x100000600081009) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000005c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000005c0), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000600)=0x2) recvmmsg(r2, &(0x7f0000000640), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000800)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000840)='./file0/file0\x00') r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000880)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000008c0)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000980)='status\x00') read$FUSE(r5, &(0x7f00000009c0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000300)='./file3\x00', &(0x7f0000000340)='ceph\x00', 0x0, &(0x7f0000000380)='acl') 11.512151051s ago: executing program 1 (id=4376): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x7145cd2950b730d2}, {0x0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x40800) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r2 = gettid() bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x10001, 0x5, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r3 = mq_open(&(0x7f00000001c0)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000200)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r5, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, &(0x7f0000000240)={0x77359400}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00'}) syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7, 0x40, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x23, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xa, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x9, 0x2, 0x3, {0xa, 0x25, 0x25, 0x1, 0x6, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x43, 0x1, {0xa, 0x25, 0x25, 0x1, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 11.007045819s ago: executing program 8 (id=4378): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000010340)={0x2, 0x1111, @loopback}, 0x10) clock_gettime(0x7, &(0x7f0000000000)) io_getevents(0x0, 0x2e5, 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x141102) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000480)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000006c0)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000740)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000800)={0x0, 0x96, "25bbc0834ec51a41c20a4fe34f94ee68e8a02d31450b050da0de2cf8fb33290a33254201c2edebe6725757979253295aae50d41ca164d67cd0b0e95767d50854775dffec166646fafb7241224d7cc33b6063b3d839605dcbd1b9b878f406504103fd7789bacce2575e1493e513fee1830e843e9927fe81d13f01e175a3c3b77ee3d6fc6d674883efcb12400cbeca1b29940feb1e666c"}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000900)={'lo\x00', @random="01300134b1ff"}) socket$igmp(0x2, 0x3, 0x2) 9.602478186s ago: executing program 5 (id=4380): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x6a) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) getdents(r5, &(0x7f0000000140)=""/117, 0x75) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000020f000010b800000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 9.547252327s ago: executing program 8 (id=4381): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f0000001380), 0x2012c14, &(0x7f0000001780)=ANY=[@ANYBLOB='\x00'/10, @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c76ec7273696f6e5b3970323030302e752c00", @ANYRESOCT=r1, @ANYRES32=r2, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRESDEC=0x0, @ANYRES16=r0]) write$P9_RVERSION(r4, &(0x7f0000001440)=ANY=[@ANYBLOB="150000006bffff"], 0x15) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000002c0)="b45e309704f552bfcb7e990fae1f02d04dba77890e44b9eb9122950fb9f684a34d6ba4be530392ef1f262234014d752164854e215620805c85422f8bbb37ca98cfb80146ca0096b3e068372d3735a0de4d6fb82dfa71bedb8bd4fe0925a5ba06f725dd595ec000c4bda9989bf1611ea068033aeb5d23c173e6084dc04104fd9a9bb6696a7ae9d5273bb4c8ec984eb5"}, {0x0}, {&(0x7f0000000380)="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", 0x58}, {&(0x7f00000004c0)="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", 0xb35}], 0x5}}, {{0x0, 0x4b, 0x0}}], 0x3fffffffffffe97, 0x2404c845) 9.245961418s ago: executing program 6 (id=4382): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fddbdf252700000008000300", @ANYRES32=r1, @ANYBLOB="0a00060000000000bf006aad44090000004cd3910000146a36008100000000000000"], 0x30}}, 0x20000004) 9.160596765s ago: executing program 8 (id=4383): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000400000006"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000200000004000000010000", @ANYRES32=r0], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a0000000400000001"], 0x50) 9.066610856s ago: executing program 9 (id=4384): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80020, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002b00), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002b40)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002b80)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000002bc0), 0x2, 0x143102) writev(r1, &(0x7f0000002c00)=[{&(0x7f0000002c40)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002c80)={0x6, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x82300, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$xdp(0x2c, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000002900)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002940), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002a00)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x820) bind$inet6(r4, &(0x7f0000002a40)={0xa, 0xe22, 0x0, @empty}, 0x1c) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002480)="5c00000014006b05c84e21000ab16d6e2306010001000000440002000000000000000000b556a705251e6182149a08c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c1504bb918689d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40044) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002840)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000002880)={0x3, &(0x7f00000028c0)=[{0x20, 0x5, 0x2, 0x70ff}, {0x28, 0x7, 0x1, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8.996712991s ago: executing program 8 (id=4385): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80020, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002b00), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002b40)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002b80)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000002bc0), 0x2, 0x143102) writev(r1, &(0x7f0000002c00)=[{&(0x7f0000002c40)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002c80)={0x6, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x82300, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000002d40)=0x40000000, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000002900)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002940), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002a00)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x820) bind$inet6(r4, &(0x7f0000002a40)={0xa, 0xe22, 0x0, @empty}, 0x1c) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002480)="5c00000014006b05c84e21000ab16d6e2306010001000000440002000000000000000000b556a705251e6182149a08c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c1504bb918689d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40044) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002840)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000002880)={0x3, &(0x7f00000028c0)=[{0x20, 0x5, 0x2, 0x70ff}, {0x28, 0x7, 0x1, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8.739122191s ago: executing program 6 (id=4386): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a2050000000000000016"}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000004c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000640)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000740)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f0000000300)="b800000500000000", &(0x7f0000000340)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) sendmsg$nl_route(r6, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0x9, 0x0}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000002f000900270c7000fddbdf250500000008000a000b000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008033}, 0x40844) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r7, 0x4) r9 = syz_open_dev$media(&(0x7f0000000a00), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r9, 0x80047c05, &(0x7f0000000b40)) r10 = openat$nullb(0xffffffffffffff9c, 0x0, 0x181002, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r11, 0x3553000) 7.111984118s ago: executing program 6 (id=4387): syz_io_uring_setup(0x141c, &(0x7f0000000140)={0x0, 0x91c1, 0x491, 0x1, 0x1000006}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_modify_offsets$generic(r0, r1, 0x2c, 0x10000) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f00000004c0)=0x4, 0x4) pread64(r2, &(0x7f00000002c0)=""/116, 0x74, 0x4) (fail_nth: 1) 6.617303356s ago: executing program 1 (id=4388): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='dctcp', 0x5) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f0000000500)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000540), 0xffffffffffffff64, 0x4015, 0x0, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000580)) 6.512252705s ago: executing program 9 (id=4389): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="59cd717509641e9d040000000010"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r4}, 0x38) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r2) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="03000000f8a9f48d5bc457ad14e172662ef657a8e6810e1c1d07f73a4ae90b0f173aa2bdddfcd640672a13f571456d4e47b82790db916b955e7e42412af4869b9bccccdde172e5ea530bdb633f6f94938c07f4f9cae22e4e128a4383d2865a66f2c384d4235c20a103d5e574ef12b08b2d8f37aada76d9d7c42e9847e612c318fb9476fac5a7bd15f9654c774252b750bfe11b98b2820c2fc2214e", @ANYRES16=r5, @ANYBLOB="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"], 0x18c}, 0x1, 0x0, 0x0, 0x4004000}, 0x400c0) syz_open_dev$dri(0x0, 0x0, 0x402) r6 = syz_open_dev$swradio(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r8 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r8) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100001040000000000dde40000000000", @ANYRES32=r10, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_open_dev$video(&(0x7f0000000000), 0xb, 0x883c1) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$VIDIOC_S_FBUF(r6, 0x4030560b, &(0x7f0000000040)={0x0, 0x10, 0x0, {0x6, 0x3, 0x44495658, 0x4, 0x0, 0x7, 0x9, 0x8}}) 6.23899328s ago: executing program 5 (id=4390): socket(0x840000000002, 0x3, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40241, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) socket$kcm(0x1e, 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f00000007c0), &(0x7f0000000800)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000880)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000008c0)={@local, @empty, @void, {@ipv6={0x8100, @udp={0x0, 0x6, "a24b9f", 0x18, 0x2b, 0x0, @remote, @local, {[], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 4.400763674s ago: executing program 8 (id=4391): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000040)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0xc8, 0x2, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_EXPECT_MASTER={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4050}, 0x40040) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000280)) syz_usb_connect(0x0, 0x5a, &(0x7f00000012c0)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d02"], 0x0) 4.375137046s ago: executing program 1 (id=4392): read$FUSE(0xffffffffffffffff, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000600)=[{&(0x7f0000000640)=""/156, 0x9c}], 0x1, &(0x7f0000000700)=[{&(0x7f0000000740)=""/116, 0xd8d0481}], 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x4000010, r1, 0xc36e3000) 4.328042969s ago: executing program 5 (id=4393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) setns(0xc9, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000002080)=0x7f, 0x4) connect$inet6(r3, &(0x7f00000020c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r3, &(0x7f0000002100)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}}, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) r7 = dup2(r2, r2) read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2020) 4.227427894s ago: executing program 6 (id=4394): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000005c0)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, 0x0, 0x0, 0x2000c044) writev(r1, &(0x7f0000000d00)=[{&(0x7f0000000d40)="2c26e4c60fe17de9e06d0b8ec0341a62ee36a0e9b2ef0d94ce397c67cf63f4fd92f781273fc72ad67016aff664", 0x2d}], 0x1) 4.088949171s ago: executing program 6 (id=4395): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) setns(0xc9, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000002080)=0x7f, 0x4) connect$inet6(r3, &(0x7f00000020c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r3, &(0x7f0000002100)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}}, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) r7 = dup2(r2, r2) read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2020) 3.852359384s ago: executing program 9 (id=4396): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44e, 0x120b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xba4e7a40265e5c6b, 0x2c, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000300)={0x0, 'bond_slave_1\x00', {0x2}, 0x5}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x802, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000500)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x2982, 0x0) eventfd2(0x50, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 testdomain', 0x24) 3.640391873s ago: executing program 5 (id=4397): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a2050000000000000016"}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000004c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000640)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000740)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f0000000300)="b800000500000000", &(0x7f0000000340)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) sendmsg$nl_route(r6, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0x9, 0x0}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000002f000900270c7000fddbdf250500000008000a000b000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008033}, 0x40844) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r7, 0x4) r9 = syz_open_dev$media(&(0x7f0000000a00), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r9, 0x80047c05, &(0x7f0000000b40)) r10 = openat$nullb(0xffffffffffffff9c, 0x0, 0x181002, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r11, 0x3553000) 3.040790676s ago: executing program 6 (id=4398): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) getdents(r6, &(0x7f0000000140)=""/117, 0x75) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000020f000010b800000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 2.979310266s ago: executing program 1 (id=4399): socketpair(0x2a, 0x2, 0x5, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000440)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000640)={0x0, 0x595f, 0x10000, 0x400, 0x51}, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x0, 0x0) syz_io_uring_submit(r6, r7, 0x0, 0x0) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000740)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000780)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f00000007c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0xf4ffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}}, 0x0) 2.304974799s ago: executing program 5 (id=4400): openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r3, 0x0, 0x31, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x8c00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000040), 0x4003) gettid() r4 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0xfffffc79}, 0x58) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 2.208329925s ago: executing program 8 (id=4401): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x6a) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) getdents(r5, &(0x7f0000000140)=""/117, 0x75) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000020f000010b800000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 1.992759438s ago: executing program 1 (id=4402): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44e, 0x120b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xba4e7a40265e5c6b, 0x2c, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000300)={0x0, 'bond_slave_1\x00', {0x2}, 0x5}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x802, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000500)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x2982, 0x0) eventfd2(0x50, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) 320.131831ms ago: executing program 9 (id=4403): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x16b000, 0x86) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x1, 0x4) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) socket$inet_udp(0x2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000600)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000640), 0x3, 0x632860) openat$sysfs(0xffffffffffffff9c, 0x0, 0x60f83, 0x88) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r4 = eventfd(0x80000000) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f00000006c0)=r4) r5 = socket$key(0xf, 0x3, 0x2) recvmmsg(r5, &(0x7f0000000700), 0x6f5, 0x2000000022, &(0x7f0000000740)={0x77359400}) setsockopt$sock_int(r5, 0x1, 0x52, &(0x7f0000000780)=0x80000000, 0x4) sendmsg$key(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="02128ed102"], 0x10}}, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r0}) openat$full(0xffffff9c, &(0x7f00000008c0), 0x248200, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000900)={0x0, 0x0, 0x0, &(0x7f0000000940)=""/75, 0x0, 0xf000}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000009c0)={0x1, 0x1, &(0x7f0000000a00)=""/247, &(0x7f0000000b00)=""/87, &(0x7f0000000b80)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e00)={0x8, 0x0, [{0x54000, 0xa1, &(0x7f0000000100)=""/161}, {0x3000, 0xba, &(0x7f00000001c0)=""/186}, {0xffff1000, 0xd1, &(0x7f0000000280)=""/209}, {0x5000, 0xd, &(0x7f0000000380)=""/13}, {0xffe, 0xeb, &(0x7f00000003c0)=""/235}, {0x1, 0x2b, &(0x7f00000004c0)=""/43}, {0x10000, 0xac, &(0x7f0000000c40)=""/172}, {0x3ff8, 0xd2, &(0x7f0000000d00)=""/210}]}) 0s ago: executing program 5 (id=4404): prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r3, &(0x7f00000005c0)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000195c0)={0x0, 0x0, &(0x7f0000019600)={&(0x7f0000019640)=ANY=[@ANYBLOB="600000000206030000000000b8791fa800000000140007800800124000000000050015000100000005000100060000000500050002000000050004"], 0x60}}, 0x0) r4 = socket(0x3, 0x1, 0x4) recvmsg$unix(r4, &(0x7f0000019680)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r4, &(0x7f00000196c0)={0x0, 0x0, &(0x7f0000019700)={&(0x7f0000019740)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f, 0x2, 0x25dfdbfd}, 0x18}}, 0x4000) r5 = socket$kcm(0x11, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0xcd74, 0xa}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)='G', 0x1}], 0x1}, 0x200480c0) syz_open_dev$dvb_frontend(&(0x7f0000000180), 0x0, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000000906030000000000000000000a0000002c0007800c000180080001407f0000010c00000100470000007b00020073597a3194b60a00"], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) kernel console output (not intermixed with test programs): 14548][T22877] vidtv_mux_init+0x1f9/0xbf0 [ 1931.514575][T22877] vidtv_start_feed+0x34e/0x500 [ 1931.514603][T22877] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1931.514631][T22877] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1931.514658][T22877] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1931.514692][T22877] ? mark_held_locks+0x40/0x70 [ 1931.514720][T22877] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1931.514748][T22877] dmx_ts_feed_start_filtering+0xf6/0x220 [ 1931.514770][T22877] dvb_dmxdev_start_feed+0x273/0x3f0 [ 1931.514800][T22877] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 1931.514833][T22877] dvb_demux_do_ioctl+0x786/0x1200 [ 1931.514861][T22877] ? do_vfs_ioctl+0x226/0x13e0 [ 1931.514887][T22877] dvb_usercopy+0x167/0x340 [ 1931.514909][T22877] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1931.514939][T22877] ? __pfx_dvb_usercopy+0x10/0x10 [ 1931.514961][T22877] ? __fget_files+0x34/0x3d0 [ 1931.514997][T22877] ? selinux_file_ioctl+0x13b/0x290 [ 1931.515023][T22877] ? selinux_file_ioctl+0xb6/0x290 [ 1931.515051][T22877] dvb_demux_ioctl+0x29/0x40 [ 1931.515073][T22877] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1931.515096][T22877] __x64_sys_ioctl+0x18e/0x210 [ 1931.515120][T22877] do_syscall_64+0x123/0x790 [ 1931.515149][T22877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.515169][T22877] RIP: 0033:0x7f18bc79e559 [ 1931.515185][T22877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1931.515205][T22877] RSP: 002b:00007f18bd754028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1931.515223][T22877] RAX: ffffffffffffffda RBX: 00007f18bca25fa0 RCX: 00007f18bc79e559 [ 1931.515236][T22877] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000006 [ 1931.515248][T22877] RBP: 00007f18bc835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1931.515259][T22877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1931.515271][T22877] R13: 00007f18bca26038 R14: 00007f18bca25fa0 R15: 00007fff9bc3f438 [ 1931.515299][T22877] [ 1931.515398][T22877] Mem-Info: [ 1931.515409][T22877] active_anon:20758 inactive_anon:0 isolated_anon:0 [ 1931.515409][T22877] active_file:352 inactive_file:67876 isolated_file:0 [ 1931.515409][T22877] unevictable:0 dirty:473 writeback:0 [ 1931.515409][T22877] slab_reclaimable:12813 slab_unreclaimable:106020 [ 1931.515409][T22877] mapped:41841 shmem:12016 pagetables:1753 [ 1931.515409][T22877] sec_pagetables:0 bounce:0 [ 1931.515409][T22877] kernel_misc_reclaimable:0 [ 1931.515409][T22877] free:1252318 free_pcp:14661 free_cma:0 [ 1931.515456][T22877] Node 0 active_anon:83032kB inactive_anon:0kB active_file:1408kB inactive_file:271308kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:167364kB dirty:1892kB writeback:0kB shmem:48064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14112kB pagetables:6864kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1931.515508][T22877] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1931.515555][T22877] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1931.515607][T22877] lowmem_reserve[]: 0 2452 2452 2452 2452 [ 1931.515639][T22877] Node 0 DMA32 free:1069108kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:83032kB inactive_anon:0kB active_file:1408kB inactive_file:271308kB unevictable:0kB writepending:1892kB zspages:0kB present:3129332kB managed:2510920kB mlocked:0kB bounce:0kB free_pcp:44524kB local_pcp:10976kB free_cma:0kB [ 1931.515689][T22877] lowmem_reserve[]: 0 0 0 0 0 [ 1931.515720][T22877] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:60kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1931.515766][T22877] lowmem_reserve[]: 0 0 0 0 0 [ 1931.515797][T22877] Node 1 Normal free:3924804kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:14120kB local_pcp:0kB free_cma:0kB [ 1931.515846][T22877] lowmem_reserve[]: 0 0 0 0 0 [ 1931.515875][T22877] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1931.515975][T22877] Node 0 DMA32: 243*4kB (UME) 1387*8kB (UM) 536*16kB (UME) 936*32kB (UME) 1032*64kB (UME) 642*128kB (UME) 329*256kB (UME) 137*512kB (UM) 63*1024kB (UME) 22*2048kB (UM) 148*4096kB (UM) = 1068964kB [ 1931.516118][T22877] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1931.516207][T22877] Node 1 Normal: 11*4kB (UM) 9*8kB (UM) 13*16kB (UM) 6*32kB (UM) 11*64kB (UM) 17*128kB (UM) 16*256kB (M) 15*512kB (UM) 6*1024kB (M) 8*2048kB (UM) 949*4096kB (UM) = 3924804kB [ 1931.516355][T22877] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1931.516381][T22877] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 1931.516397][T22877] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1931.516411][T22877] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1931.516514][T22877] 80265 total pagecache pages [ 1931.516522][T22877] 0 pages in swap cache [ 1931.516529][T22877] Free swap = 124996kB [ 1931.516536][T22877] Total swap = 124996kB [ 1931.516544][T22877] 2097051 pages RAM [ 1931.516551][T22877] 0 pages HighMem/MovableOnly [ 1931.516558][T22877] 437690 pages reserved [ 1931.516566][T22877] 0 pages cma reserved [ 1931.522595][T22877] FAULT_INJECTION: forcing a failure. [ 1931.522595][T22877] name failslab, interval 1, probability 5, space 0, times 9997 [ 1931.522628][T22877] CPU: 1 UID: 0 PID: 22877 Comm: syz.9.4237 Tainted: G L syzkaller #0 PREEMPT(full) [ 1931.522655][T22877] Tainted: [L]=SOFTLOCKUP [ 1931.522662][T22877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1931.522673][T22877] Call Trace: [ 1931.522679][T22877] [ 1931.522687][T22877] dump_stack_lvl+0x100/0x190 [ 1931.522718][T22877] should_fail_ex.cold+0x5/0xa [ 1931.522744][T22877] should_failslab+0xc2/0x120 [ 1931.522769][T22877] __kmalloc_cache_noprof+0x91/0x6d0 [ 1931.522789][T22877] ? __kasan_kmalloc+0xaa/0xb0 [ 1931.522810][T22877] ? vidtv_psi_network_name_desc_init+0x68/0x310 [ 1931.522835][T22877] vidtv_psi_network_name_desc_init+0x68/0x310 [ 1931.522856][T22877] vidtv_psi_nit_table_init+0x291/0x5f0 [ 1931.522879][T22877] vidtv_channel_si_init+0xccf/0x18f0 [ 1931.522909][T22877] vidtv_mux_init+0x522/0xbf0 [ 1931.522935][T22877] vidtv_start_feed+0x34e/0x500 [ 1931.522962][T22877] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1931.522986][T22877] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1931.523010][T22877] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1931.523041][T22877] ? mark_held_locks+0x40/0x70 [ 1931.523065][T22877] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1931.523090][T22877] dmx_ts_feed_start_filtering+0xf6/0x220 [ 1931.523111][T22877] dvb_dmxdev_start_feed+0x273/0x3f0 [ 1931.523138][T22877] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 1931.523170][T22877] dvb_demux_do_ioctl+0x786/0x1200 [ 1931.523197][T22877] ? do_vfs_ioctl+0x226/0x13e0 [ 1931.523221][T22877] dvb_usercopy+0x167/0x340 [ 1931.523242][T22877] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1931.523268][T22877] ? __pfx_dvb_usercopy+0x10/0x10 [ 1931.523289][T22877] ? __fget_files+0x34/0x3d0 [ 1931.523331][T22877] ? selinux_file_ioctl+0x13b/0x290 [ 1931.523355][T22877] ? selinux_file_ioctl+0xb6/0x290 [ 1931.523383][T22877] dvb_demux_ioctl+0x29/0x40 [ 1931.523407][T22877] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1931.523435][T22877] __x64_sys_ioctl+0x18e/0x210 [ 1931.523460][T22877] do_syscall_64+0x123/0x790 [ 1931.523488][T22877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.523507][T22877] RIP: 0033:0x7f18bc79e559 [ 1931.523522][T22877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1931.523538][T22877] RSP: 002b:00007f18bd754028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1931.523556][T22877] RAX: ffffffffffffffda RBX: 00007f18bca25fa0 RCX: 00007f18bc79e559 [ 1931.523568][T22877] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000006 [ 1931.523580][T22877] RBP: 00007f18bc835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1931.523591][T22877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1931.523603][T22877] R13: 00007f18bca26038 R14: 00007f18bca25fa0 R15: 00007fff9bc3f438 [ 1931.523630][T22877] [ 1931.527526][T22877] FAULT_INJECTION: forcing a failure. [ 1931.527526][T22877] name failslab, interval 1, probability 5, space 0, times 9996 [ 1931.527559][T22877] CPU: 1 UID: 0 PID: 22877 Comm: syz.9.4237 Tainted: G L syzkaller #0 PREEMPT(full) [ 1931.527583][T22877] Tainted: [L]=SOFTLOCKUP [ 1931.527590][T22877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1931.527601][T22877] Call Trace: [ 1931.527609][T22877] [ 1931.527616][T22877] dump_stack_lvl+0x100/0x190 [ 1931.527645][T22877] should_fail_ex.cold+0x5/0xa [ 1931.527669][T22877] should_failslab+0xc2/0x120 [ 1931.527695][T22877] __kmalloc_noprof+0xfc/0x840 [ 1931.527716][T22877] ? rcu_is_watching+0x13/0xc0 [ 1931.527740][T22877] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1931.527764][T22877] tomoyo_realpath_from_path+0xb6/0x690 [ 1931.527787][T22877] tomoyo_path_number_perm+0x23c/0x580 [ 1931.527809][T22877] ? tomoyo_path_number_perm+0x22e/0x580 [ 1931.527831][T22877] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1931.527855][T22877] ? __pfx_futex_wait+0x10/0x10 [ 1931.527880][T22877] ? __lock_acquire+0x5c0/0x1f40 [ 1931.527911][T22877] ? __fget_files+0x34/0x3d0 [ 1931.527936][T22877] ? find_held_lock+0x2b/0x80 [ 1931.527959][T22877] ? hook_file_ioctl_common+0x140/0x440 [ 1931.527983][T22877] ? __fget_files+0x21f/0x3d0 [ 1931.528011][T22877] security_file_ioctl+0xd3/0x230 [ 1931.528036][T22877] __x64_sys_ioctl+0xb7/0x210 [ 1931.528062][T22877] do_syscall_64+0x123/0x790 [ 1931.528089][T22877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.528106][T22877] RIP: 0033:0x7f18bc79e559 [ 1931.528121][T22877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1931.528137][T22877] RSP: 002b:00007f18bd754028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1931.528155][T22877] RAX: ffffffffffffffda RBX: 00007f18bca25fa0 RCX: 00007f18bc79e559 [ 1931.528167][T22877] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000006 [ 1931.528178][T22877] RBP: 00007f18bc835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1931.528189][T22877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1931.528199][T22877] R13: 00007f18bca26038 R14: 00007f18bca25fa0 R15: 00007fff9bc3f438 [ 1931.528223][T22877] [ 1931.528346][T22877] FAULT_INJECTION: forcing a failure. [ 1931.528346][T22877] name failslab, interval 1, probability 5, space 0, times 9995 [ 1931.528368][T22877] CPU: 1 UID: 0 PID: 22877 Comm: syz.9.4237 Tainted: G L syzkaller #0 PREEMPT(full) [ 1931.528391][T22877] Tainted: [L]=SOFTLOCKUP [ 1931.528396][T22877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1931.528407][T22877] Call Trace: [ 1931.528413][T22877] [ 1931.528420][T22877] dump_stack_lvl+0x100/0x190 [ 1931.528446][T22877] should_fail_ex.cold+0x5/0xa [ 1931.528470][T22877] should_failslab+0xc2/0x120 [ 1931.528494][T22877] __kmalloc_cache_noprof+0x91/0x6d0 [ 1931.528512][T22877] ? rcu_is_watching+0x13/0xc0 [ 1931.528536][T22877] ? vidtv_mux_init+0x55/0xbf0 [ 1931.528563][T22877] vidtv_mux_init+0x55/0xbf0 [ 1931.528588][T22877] vidtv_start_feed+0x34e/0x500 [ 1931.528614][T22877] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1931.528638][T22877] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1931.528662][T22877] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1931.528693][T22877] ? mark_held_locks+0x40/0x70 [ 1931.528717][T22877] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1931.528741][T22877] dmx_ts_feed_start_filtering+0xf6/0x220 [ 1931.528762][T22877] dvb_dmxdev_start_feed+0x273/0x3f0 [ 1931.528789][T22877] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 1931.528821][T22877] dvb_demux_do_ioctl+0x786/0x1200 [ 1931.528847][T22877] ? do_vfs_ioctl+0x226/0x13e0 [ 1931.528872][T22877] dvb_usercopy+0x167/0x340 [ 1931.528893][T22877] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1931.528920][T22877] ? __pfx_dvb_usercopy+0x10/0x10 [ 1931.528940][T22877] ? __fget_files+0x34/0x3d0 [ 1931.528975][T22877] ? selinux_file_ioctl+0x13b/0x290 [ 1931.528998][T22877] ? selinux_file_ioctl+0xb6/0x290 [ 1931.529025][T22877] dvb_demux_ioctl+0x29/0x40 [ 1931.529049][T22877] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1931.529073][T22877] __x64_sys_ioctl+0x18e/0x210 [ 1931.529096][T22877] do_syscall_64+0x123/0x790 [ 1931.529123][T22877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.529141][T22877] RIP: 0033:0x7f18bc79e559 [ 1931.529155][T22877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1931.529171][T22877] RSP: 002b:00007f18bd754028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1931.529188][T22877] RAX: ffffffffffffffda RBX: 00007f18bca25fa0 RCX: 00007f18bc79e559 [ 1931.529200][T22877] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000006 [ 1931.529211][T22877] RBP: 00007f18bc835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1931.529223][T22877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1931.529234][T22877] R13: 00007f18bca26038 R14: 00007f18bca25fa0 R15: 00007fff9bc3f438 [ 1931.529258][T22877] [ 1931.531855][T22877] FAULT_INJECTION: forcing a failure. [ 1931.531855][T22877] name failslab, interval 1, probability 5, space 0, times 9994 [ 1931.531885][T22877] CPU: 1 UID: 0 PID: 22877 Comm: syz.9.4237 Tainted: G L syzkaller #0 PREEMPT(full) [ 1931.531908][T22877] Tainted: [L]=SOFTLOCKUP [ 1931.531914][T22877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1931.531924][T22877] Call Trace: [ 1931.531931][T22877] [ 1931.531938][T22877] dump_stack_lvl+0x100/0x190 [ 1931.531967][T22877] should_fail_ex.cold+0x5/0xa [ 1931.531992][T22877] should_failslab+0xc2/0x120 [ 1931.532017][T22877] __kmalloc_cache_noprof+0x91/0x6d0 [ 1931.532038][T22877] ? kvm_dev_ioctl+0xb48/0x1b50 [ 1931.532062][T22877] kvm_dev_ioctl+0xb48/0x1b50 [ 1931.532090][T22877] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1931.532115][T22877] ? selinux_file_ioctl+0x13b/0x290 [ 1931.532138][T22877] ? selinux_file_ioctl+0xb6/0x290 [ 1931.532164][T22877] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1931.532186][T22877] __x64_sys_ioctl+0x18e/0x210 [ 1931.532208][T22877] do_syscall_64+0x123/0x790 [ 1931.532235][T22877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.532252][T22877] RIP: 0033:0x7f18bc79e559 [ 1931.532267][T22877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1931.532283][T22877] RSP: 002b:00007f18bd754028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1931.532300][T22877] RAX: ffffffffffffffda RBX: 00007f18bca25fa0 RCX: 00007f18bc79e559 [ 1931.532319][T22877] RDX: 0000000000001000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 1931.532330][T22877] RBP: 00007f18bc835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1931.532341][T22877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1931.532352][T22877] R13: 00007f18bca26038 R14: 00007f18bca25fa0 R15: 00007fff9bc3f438 [ 1931.532376][T22877] [ 1931.783669][ T5612] Bluetooth: hci2: unexpected event for opcode 0x0035 [ 1932.289190][T22883] FAULT_INJECTION: forcing a failure. [ 1932.289190][T22883] name failslab, interval 1, probability 5, space 0, times 9993 [ 1932.289221][T22883] CPU: 1 UID: 0 PID: 22883 Comm: syz.1.4239 Tainted: G L syzkaller #0 PREEMPT(full) [ 1932.289245][T22883] Tainted: [L]=SOFTLOCKUP [ 1932.289251][T22883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1932.289263][T22883] Call Trace: [ 1932.289270][T22883] [ 1932.289278][T22883] dump_stack_lvl+0x100/0x190 [ 1932.289310][T22883] should_fail_ex.cold+0x5/0xa [ 1932.289337][T22883] should_failslab+0xc2/0x120 [ 1932.289365][T22883] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1932.289387][T22883] ? __pfx_map_id_range_down+0x10/0x10 [ 1932.289409][T22883] ? security_inode_alloc+0x3b/0x2c0 [ 1932.289437][T22883] security_inode_alloc+0x3b/0x2c0 [ 1932.289461][T22883] inode_init_always_gfp+0xc6f/0xfb0 [ 1932.289490][T22883] alloc_inode+0x8e/0x250 [ 1932.289511][T22883] new_inode+0x22/0x1c0 [ 1932.289533][T22883] proc_pid_make_inode+0x22/0x160 [ 1932.289553][T22883] proc_pident_instantiate+0x85/0x310 [ 1932.289575][T22883] proc_fill_cache+0x2a3/0x3a0 [ 1932.289595][T22883] ? __pfx_proc_pident_instantiate+0x10/0x10 [ 1932.289617][T22883] ? __pfx_proc_fill_cache+0x10/0x10 [ 1932.289649][T22883] proc_pident_readdir+0x1bc/0x530 [ 1932.289673][T22883] iterate_dir+0x2ba/0xc10 [ 1932.289699][T22883] __x64_sys_getdents64+0x13b/0x2c0 [ 1932.289720][T22883] ? __x64_sys_futex+0x358/0x4d0 [ 1932.289746][T22883] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 1932.289770][T22883] ? __pfx_filldir64+0x10/0x10 [ 1932.289801][T22883] do_syscall_64+0x123/0x790 [ 1932.289829][T22883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1932.289847][T22883] RIP: 0033:0x7f189719e559 [ 1932.289862][T22883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1932.289880][T22883] RSP: 002b:00007f1897f96028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1932.289898][T22883] RAX: ffffffffffffffda RBX: 00007f1897425fa0 RCX: 00007f189719e559 [ 1932.289910][T22883] RDX: 0000000000001000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1932.289921][T22883] RBP: 00007f1897235ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1932.289931][T22883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1932.289942][T22883] R13: 00007f1897426038 R14: 00007f1897425fa0 R15: 00007ffe2995cf88 [ 1932.289968][T22883] [ 1933.084723][T18981] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1933.630468][T18981] usb 10-1: Using ep0 maxpacket: 32 [ 1933.633959][T18981] usb 10-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 1933.641629][T18981] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1933.641660][T18981] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1933.641684][T18981] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1933.641710][T18981] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.645517][T18981] usb 10-1: config 0 descriptor?? [ 1933.685230][ T5600] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1933.687466][T22891] sctp_transport_update_pmtu: 46 callbacks suppressed [ 1933.687483][T22891] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1933.687905][T22891] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1933.695849][T22891] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1933.696606][T22891] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1933.797199][T22891] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1933.804603][T22891] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1933.805112][T22891] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1933.805569][T22891] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1934.395478][T22891] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1934.396126][T22891] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1934.481199][ T5600] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1934.481243][ T5600] usb 9-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1934.489278][ T5600] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1934.491413][ T5600] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1934.491433][ T5600] usb 9-1: Product: syz [ 1934.491447][ T5600] usb 9-1: Manufacturer: syz [ 1934.534537][T22892] ±ÿ: renamed from lo (while UP) [ 1935.546657][ T5600] uvcvideo 9-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 1935.547426][ T5600] uvcvideo 9-1:1.0: No streaming interface found for terminal 32770. [ 1935.938861][T19393] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 1936.247692][T19393] usb 7-1: Using ep0 maxpacket: 32 [ 1936.274007][T19393] usb 7-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 1936.657661][T19393] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1936.657698][T19393] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1936.657736][T19393] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1936.657765][T19393] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1936.712913][T19393] usb 7-1: config 0 descriptor?? [ 1936.761631][T22906] rxe_eth0 speed is unknown, defaulting to 1000 [ 1936.809475][T18981] usbhid 10-1:0.0: can't add hid device: -71 [ 1936.809540][T18981] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1936.815274][T18981] usb 10-1: USB disconnect, device number 18 [ 1937.097376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1938.738481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1939.647145][T19393] usbhid 7-1:0.0: can't add hid device: -71 [ 1939.647200][T19393] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1939.667853][T19393] usb 7-1: USB disconnect, device number 113 [ 1939.701107][T22915] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1940.839710][T22952] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4252'. [ 1941.463575][T22950] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4253'. [ 1942.519390][T22964] FAULT_INJECTION: forcing a failure. [ 1942.519390][T22964] name failslab, interval 1, probability 5, space 0, times 10000 [ 1942.519427][T22964] CPU: 0 UID: 0 PID: 22964 Comm: syz.5.4256 Tainted: G L syzkaller #0 PREEMPT(full) [ 1942.519459][T22964] Tainted: [L]=SOFTLOCKUP [ 1942.519467][T22964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1942.519480][T22964] Call Trace: [ 1942.519487][T22964] [ 1942.519496][T22964] dump_stack_lvl+0x100/0x190 [ 1942.519532][T22964] should_fail_ex.cold+0x5/0xa [ 1942.519562][T22964] should_failslab+0xc2/0x120 [ 1942.519591][T22964] __kmalloc_cache_noprof+0x91/0x6d0 [ 1942.519616][T22964] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 1942.519648][T22964] vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 1942.519675][T22964] vidtv_channel_s302m_init+0x302/0x9b0 [ 1942.519701][T22964] ? __kasan_kmalloc+0xaa/0xb0 [ 1942.519729][T22964] ? __pfx_vidtv_channel_s302m_init+0x10/0x10 [ 1942.519753][T22964] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 1942.519788][T22964] ? __asan_memcpy+0x3c/0x60 [ 1942.519815][T22964] vidtv_channels_init+0x4c/0xb0 [ 1942.519841][T22964] vidtv_mux_init+0x9d9/0xbf0 [ 1942.519871][T22964] vidtv_start_feed+0x34e/0x500 [ 1942.519903][T22964] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1942.519933][T22964] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1942.519962][T22964] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1942.519998][T22964] ? mark_held_locks+0x40/0x70 [ 1942.520035][T22964] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1942.520066][T22964] dmx_ts_feed_start_filtering+0xf6/0x220 [ 1942.520090][T22964] dvb_dmxdev_start_feed+0x273/0x3f0 [ 1942.520119][T22964] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 1942.520154][T22964] dvb_demux_do_ioctl+0x786/0x1200 [ 1942.520184][T22964] ? do_vfs_ioctl+0x226/0x13e0 [ 1942.520212][T22964] dvb_usercopy+0x167/0x340 [ 1942.520238][T22964] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1942.520269][T22964] ? __pfx_dvb_usercopy+0x10/0x10 [ 1942.520293][T22964] ? __fget_files+0x34/0x3d0 [ 1942.520335][T22964] ? selinux_file_ioctl+0x13b/0x290 [ 1942.520365][T22964] ? selinux_file_ioctl+0xb6/0x290 [ 1942.520398][T22964] dvb_demux_ioctl+0x29/0x40 [ 1942.520423][T22964] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1942.520451][T22964] __x64_sys_ioctl+0x18e/0x210 [ 1942.520479][T22964] do_syscall_64+0x123/0x790 [ 1942.520512][T22964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1942.520530][T22964] RIP: 0033:0x7fc60cd9e559 [ 1942.520548][T22964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1942.520567][T22964] RSP: 002b:00007fc60dc6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1942.520587][T22964] RAX: ffffffffffffffda RBX: 00007fc60d025fa0 RCX: 00007fc60cd9e559 [ 1942.520600][T22964] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000006 [ 1942.520612][T22964] RBP: 00007fc60ce35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1942.520624][T22964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1942.520636][T22964] R13: 00007fc60d026038 R14: 00007fc60d025fa0 R15: 00007fff360de9f8 [ 1942.520666][T22964] [ 1942.641193][T22966] binder: 22959:22966 ioctl 4018620d 0 returned -22 [ 1942.686903][T18981] usb 9-1: USB disconnect, device number 39 [ 1942.989770][T22964] FAULT_INJECTION: forcing a failure. [ 1942.989770][T22964] name failslab, interval 1, probability 5, space 0, times 9999 [ 1942.989802][T22964] CPU: 0 UID: 0 PID: 22964 Comm: syz.5.4256 Tainted: G L syzkaller #0 PREEMPT(full) [ 1942.989828][T22964] Tainted: [L]=SOFTLOCKUP [ 1942.989837][T22964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1942.989848][T22964] Call Trace: [ 1942.989855][T22964] [ 1942.989863][T22964] dump_stack_lvl+0x100/0x190 [ 1942.989895][T22964] should_fail_ex.cold+0x5/0xa [ 1942.989920][T22964] should_failslab+0xc2/0x120 [ 1942.989951][T22964] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1942.989976][T22964] ? __kasan_kmalloc+0xaa/0xb0 [ 1942.989999][T22964] ? vidtv_psi_short_event_desc_init+0x1bf/0x5f0 [ 1942.990024][T22964] kstrdup+0x51/0xe0 [ 1942.990046][T22964] vidtv_psi_short_event_desc_init+0x1bf/0x5f0 [ 1942.990076][T22964] vidtv_channel_s302m_init+0x4fd/0x9b0 [ 1942.990100][T22964] ? __pfx_vidtv_channel_s302m_init+0x10/0x10 [ 1942.990121][T22964] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 1942.990151][T22964] ? __asan_memcpy+0x3c/0x60 [ 1942.990174][T22964] vidtv_channels_init+0x4c/0xb0 [ 1942.990198][T22964] vidtv_mux_init+0x9d9/0xbf0 [ 1942.990225][T22964] vidtv_start_feed+0x34e/0x500 [ 1942.990255][T22964] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1942.990282][T22964] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1942.990307][T22964] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1942.990339][T22964] ? mark_held_locks+0x40/0x70 [ 1942.990364][T22964] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1942.990389][T22964] dmx_ts_feed_start_filtering+0xf6/0x220 [ 1942.990410][T22964] dvb_dmxdev_start_feed+0x273/0x3f0 [ 1942.990437][T22964] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 1942.990470][T22964] dvb_demux_do_ioctl+0x786/0x1200 [ 1942.990497][T22964] ? do_vfs_ioctl+0x226/0x13e0 [ 1942.990522][T22964] dvb_usercopy+0x167/0x340 [ 1942.990542][T22964] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1942.990568][T22964] ? __pfx_dvb_usercopy+0x10/0x10 [ 1942.990589][T22964] ? __fget_files+0x34/0x3d0 [ 1942.990625][T22964] ? selinux_file_ioctl+0x13b/0x290 [ 1942.990650][T22964] ? selinux_file_ioctl+0xb6/0x290 [ 1942.990677][T22964] dvb_demux_ioctl+0x29/0x40 [ 1942.990699][T22964] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1942.990722][T22964] __x64_sys_ioctl+0x18e/0x210 [ 1942.990745][T22964] do_syscall_64+0x123/0x790 [ 1942.990774][T22964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1942.990792][T22964] RIP: 0033:0x7fc60cd9e559 [ 1942.990808][T22964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1942.990825][T22964] RSP: 002b:00007fc60dc6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1942.990844][T22964] RAX: ffffffffffffffda RBX: 00007fc60d025fa0 RCX: 00007fc60cd9e559 [ 1942.990857][T22964] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000006 [ 1942.990869][T22964] RBP: 00007fc60ce35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1942.990881][T22964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1942.990893][T22964] R13: 00007fc60d026038 R14: 00007fc60d025fa0 R15: 00007fff360de9f8 [ 1942.990920][T22964] [ 1943.096586][T22964] FAULT_INJECTION: forcing a failure. [ 1943.096586][T22964] name failslab, interval 1, probability 5, space 0, times 9998 [ 1943.096620][T22964] CPU: 0 UID: 0 PID: 22964 Comm: syz.5.4256 Tainted: G L syzkaller #0 PREEMPT(full) [ 1943.096646][T22964] Tainted: [L]=SOFTLOCKUP [ 1943.096653][T22964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1943.096665][T22964] Call Trace: [ 1943.096672][T22964] [ 1943.096680][T22964] dump_stack_lvl+0x100/0x190 [ 1943.096710][T22964] should_fail_ex.cold+0x5/0xa [ 1943.096747][T22964] should_failslab+0xc2/0x120 [ 1943.096774][T22964] __kmalloc_cache_noprof+0x91/0x6d0 [ 1943.096796][T22964] ? kvm_dev_ioctl+0xb48/0x1b50 [ 1943.096823][T22964] kvm_dev_ioctl+0xb48/0x1b50 [ 1943.096851][T22964] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1943.096876][T22964] ? selinux_file_ioctl+0x13b/0x290 [ 1943.096902][T22964] ? selinux_file_ioctl+0xb6/0x290 [ 1943.096928][T22964] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1943.096950][T22964] __x64_sys_ioctl+0x18e/0x210 [ 1943.096973][T22964] do_syscall_64+0x123/0x790 [ 1943.097003][T22964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1943.097021][T22964] RIP: 0033:0x7fc60cd9e559 [ 1943.097036][T22964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1943.097053][T22964] RSP: 002b:00007fc60dc6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1943.097077][T22964] RAX: ffffffffffffffda RBX: 00007fc60d025fa0 RCX: 00007fc60cd9e559 [ 1943.097088][T22964] RDX: 0000000000001000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 1943.097099][T22964] RBP: 00007fc60ce35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1943.097110][T22964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1943.097121][T22964] R13: 00007fc60d026038 R14: 00007fc60d025fa0 R15: 00007fff360de9f8 [ 1943.097148][T22964] [ 1944.148087][T22974] sctp_transport_update_pmtu: 105 callbacks suppressed [ 1944.148158][T22974] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1944.150643][T22974] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1944.152281][T22974] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1944.153377][T22974] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1944.154497][T22974] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1944.155892][T22974] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1944.157283][T22974] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1944.158855][T22974] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1944.159945][T22974] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1944.161379][T22974] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1944.393315][T22978] binder: 22971:22978 ioctl 4018620d 0 returned -22 [ 1945.232503][T22988] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:bb to non-existent VLAN 2048 [ 1947.182043][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1948.000551][T23012] PKCS7: Unsupported SignerInfo version [ 1948.996023][T23024] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4270'. [ 1949.344853][T18981] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1949.348726][ T985] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1949.486110][T22733] Bluetooth: hci1: command 0x0406 tx timeout [ 1949.528373][ T985] usb 2-1: Using ep0 maxpacket: 32 [ 1949.529265][ T985] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 1949.531926][ T985] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1949.531968][ T985] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1949.531995][ T985] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1949.532025][ T985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.533352][T18981] usb 9-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 1949.534306][T18981] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.536234][ T985] usb 2-1: config 0 descriptor?? [ 1949.590736][T19393] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1949.631762][T18981] usb-storage 9-1:1.0: USB Mass Storage device detected [ 1949.753381][T19393] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1949.753424][T19393] usb 6-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1949.754476][T19393] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1949.756438][T19393] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1949.756460][T19393] usb 6-1: Product: syz [ 1949.756475][T19393] usb 6-1: Manufacturer: syz [ 1949.784955][T19393] uvcvideo 6-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 1949.785010][T19393] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770. [ 1949.993226][T19393] usb 6-1: USB disconnect, device number 72 [ 1951.754248][T18981] scsi host1: usb-storage 9-1:1.0 [ 1952.147571][T18981] usb 9-1: USB disconnect, device number 40 [ 1952.244163][ T985] usbhid 2-1:0.0: can't add hid device: -71 [ 1952.244248][ T985] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1952.249747][ T985] usb 2-1: USB disconnect, device number 15 [ 1952.425206][ T30] audit: type=1326 audit(1792455645.607:7739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23055 comm="syz.1.4275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189719e559 code=0x7ffc0000 [ 1952.429108][T23058] ip_tables: iptables: counters copy to user failed while replacing table [ 1952.431423][ T30] audit: type=1326 audit(1792455645.607:7740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23055 comm="syz.1.4275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189719e559 code=0x7ffc0000 [ 1952.502752][ T30] audit: type=1326 audit(1792455645.672:7741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23055 comm="syz.1.4275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f189719e559 code=0x7ffc0000 [ 1952.502807][ T30] audit: type=1326 audit(1792455645.672:7742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23055 comm="syz.1.4275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189719e559 code=0x7ffc0000 [ 1952.502846][ T30] audit: type=1326 audit(1792455645.672:7743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23055 comm="syz.1.4275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189719e559 code=0x7ffc0000 [ 1952.502897][ T30] audit: type=1326 audit(1792455645.672:7744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23055 comm="syz.1.4275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f189719e559 code=0x7ffc0000 [ 1952.502938][ T30] audit: type=1326 audit(1792455645.672:7745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23055 comm="syz.1.4275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189719e559 code=0x7ffc0000 [ 1952.502978][ T30] audit: type=1326 audit(1792455645.672:7746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23055 comm="syz.1.4275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189719e559 code=0x7ffc0000 [ 1952.507440][ T30] audit: type=1326 audit(1792455645.672:7747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23055 comm="syz.1.4275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f189715ed8e code=0x7ffc0000 [ 1952.507492][ T30] audit: type=1326 audit(1792455645.672:7748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23055 comm="syz.1.4275" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f189719e1eb code=0x7ffc0000 [ 1952.647534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1953.033745][ T985] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1953.197311][ T985] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1953.548978][ T985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.549010][ T985] usb 2-1: Product: syz [ 1953.549076][ T985] usb 2-1: Manufacturer: syz [ 1953.549120][ T985] usb 2-1: SerialNumber: syz [ 1953.880355][ T985] usb 2-1: USB2VGA dongle found at address 16 [ 1954.092686][ T985] usb 2-1: Allocated 8 output buffers [ 1954.726289][ T5612] Bluetooth: hci0: unexpected event for opcode 0x0035 [ 1954.778896][T18981] usb 7-1: new full-speed USB device number 114 using dummy_hcd [ 1954.932224][T19393] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1954.979627][T18981] usb 7-1: New USB device found, idVendor=ff9c, idProduct=ffff, bcdDevice=5b.7f [ 1954.980808][T18981] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1954.980858][T18981] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1954.982734][T18981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.982756][T18981] usb 7-1: Product: syz [ 1954.982771][T18981] usb 7-1: Manufacturer: syz [ 1954.982786][T18981] usb 7-1: SerialNumber: syz [ 1954.987346][T18981] usb 7-1: config 0 descriptor?? [ 1954.988312][T23074] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1955.090015][T19393] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1955.090057][T19393] usb 9-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1955.090953][T19393] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1955.092393][T19393] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1955.092415][T19393] usb 9-1: Product: syz [ 1955.092431][T19393] usb 9-1: Manufacturer: syz [ 1955.173762][T19393] uvcvideo 9-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 1955.173825][T19393] uvcvideo 9-1:1.0: No streaming interface found for terminal 32770. [ 1955.208842][T23074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1955.209270][T23074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1955.217134][T18981] usb 7-1: USB disconnect, device number 114 [ 1955.227759][T23086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4285'. [ 1955.253217][ T985] usb 2-1: Failed to early initialize device [ 1955.265419][ T985] usb 2-1: USB disconnect, device number 16 [ 1955.392338][T18325] usb 9-1: USB disconnect, device number 41 [ 1955.809994][T23090] syz_tun: entered allmulticast mode [ 1955.895055][T23092] syz_tun: entered allmulticast mode [ 1955.896470][T23092] FAULT_INJECTION: forcing a failure. [ 1955.896470][T23092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1955.896499][T23092] CPU: 1 UID: 0 PID: 23092 Comm: syz.1.4287 Tainted: G L syzkaller #0 PREEMPT(full) [ 1955.896526][T23092] Tainted: [L]=SOFTLOCKUP [ 1955.896533][T23092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1955.896545][T23092] Call Trace: [ 1955.896552][T23092] [ 1955.896561][T23092] dump_stack_lvl+0x100/0x190 [ 1955.896599][T23092] should_fail_ex.cold+0x5/0xa [ 1955.896627][T23092] _copy_from_user+0x2e/0xd0 [ 1955.896669][T23092] ip_mroute_setsockopt+0xe3c/0x12b0 [ 1955.896701][T23092] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 1955.896728][T23092] ? avc_has_perm_noaudit+0x145/0x470 [ 1955.896757][T23092] ? __pfx_avc_has_perm+0x10/0x10 [ 1955.896783][T23092] do_ip_setsockopt+0x382/0x3310 [ 1955.896816][T23092] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1955.896843][T23092] ? __pfx_sock_has_perm+0x10/0x10 [ 1955.896867][T23092] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 1955.896897][T23092] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 1955.896936][T23092] ip_setsockopt+0x5a/0xf0 [ 1955.896967][T23092] raw_setsockopt+0x60/0x1b0 [ 1955.896994][T23092] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1955.897021][T23092] do_sock_setsockopt+0xf3/0x1d0 [ 1955.897047][T23092] __sys_setsockopt+0x195/0x220 [ 1955.897075][T23092] __x64_sys_setsockopt+0xbd/0x160 [ 1955.897093][T23092] ? do_syscall_64+0xae/0x790 [ 1955.897120][T23092] ? lockdep_hardirqs_on+0x7d/0x110 [ 1955.897146][T23092] do_syscall_64+0x123/0x790 [ 1955.897176][T23092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1955.897196][T23092] RIP: 0033:0x7f189719e559 [ 1955.897213][T23092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1955.897230][T23092] RSP: 002b:00007f1897f96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1955.897249][T23092] RAX: ffffffffffffffda RBX: 00007f1897425fa0 RCX: 00007f189719e559 [ 1955.897262][T23092] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 1955.897274][T23092] RBP: 00007f1897f96090 R08: 000000000000003c R09: 0000000000000000 [ 1955.897286][T23092] R10: 0000200000000640 R11: 0000000000000246 R12: 0000000000000001 [ 1955.897297][T23092] R13: 00007f1897426038 R14: 00007f1897425fa0 R15: 00007ffe2995cf88 [ 1955.897325][T23092] [ 1956.870986][ T5612] Bluetooth: hci3: unexpected event for opcode 0x0035 [ 1957.471846][ T5612] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1959.535517][T23133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4299'. [ 1959.727269][T18325] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1960.892069][T18325] usb 9-1: Using ep0 maxpacket: 16 [ 1960.893468][T18325] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1960.896928][T18325] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 1960.896954][T18325] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 1960.896974][T18325] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 1960.896993][T18325] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 1960.897012][T18325] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1960.897031][T18325] usb 9-1: config 0 has no interface number 0 [ 1960.897065][T18325] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1960.897089][T18325] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1960.897110][T18325] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1960.897137][T18325] usb 9-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1960.897161][T18325] usb 9-1: config 0 interface 125 has no altsetting 0 [ 1960.902290][T18325] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.902316][T18325] usb 9-1: Product: syz [ 1960.902331][T18325] usb 9-1: Manufacturer: syz [ 1960.902346][T18325] usb 9-1: SerialNumber: syz [ 1960.907848][T18325] usb 9-1: config 0 descriptor?? [ 1961.222081][ C1] usb 9-1: async_complete: urb error -71 [ 1961.222192][ C1] usb 9-1: async_complete: urb error -71 [ 1961.222659][ C1] usb 9-1: async_complete: urb error -71 [ 1961.228961][ C1] usb 9-1: async_complete: urb error -71 [ 1961.229107][T18325] get_1284_register: usb error -71 [ 1961.905058][T18325] usb 9-1: USB disconnect, device number 42 [ 1961.955182][T19393] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1962.178402][T19393] usb 2-1: New USB device found, idVendor=0100, idProduct=0209, bcdDevice=7b.20 [ 1962.178446][T19393] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 1962.205435][T19393] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1962.205471][T19393] usb 2-1: can't read configurations, error -61 [ 1962.376846][T19393] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1962.486301][ T5612] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 1962.569401][T19393] usb 2-1: New USB device found, idVendor=0100, idProduct=0209, bcdDevice=7b.20 [ 1962.569525][T19393] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 1962.581047][T19393] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1962.581249][T19393] usb 2-1: can't read configurations, error -61 [ 1962.585716][T19393] usb usb2-port1: attempt power cycle [ 1963.008061][T19393] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1963.032866][T19393] usb 2-1: New USB device found, idVendor=0100, idProduct=0209, bcdDevice=7b.20 [ 1963.032965][T19393] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 1963.079882][T19393] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1963.080670][T19393] usb 2-1: can't read configurations, error -61 [ 1963.267484][T19393] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1963.338240][T19393] usb 2-1: New USB device found, idVendor=0100, idProduct=0209, bcdDevice=7b.20 [ 1963.338419][T19393] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 1963.389554][T19393] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1963.389718][T19393] usb 2-1: can't read configurations, error -61 [ 1963.415374][T19393] usb usb2-port1: unable to enumerate USB device [ 1963.741300][T23167] syz.8.4307: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1963.741374][T23167] CPU: 1 UID: 0 PID: 23167 Comm: syz.8.4307 Tainted: G L syzkaller #0 PREEMPT(full) [ 1963.741401][T23167] Tainted: [L]=SOFTLOCKUP [ 1963.741408][T23167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1963.741421][T23167] Call Trace: [ 1963.741428][T23167] [ 1963.741437][T23167] dump_stack_lvl+0x100/0x190 [ 1963.741466][T23167] warn_alloc.cold+0x9e/0xb2 [ 1963.741481][T23167] ? __pfx_warn_alloc+0x10/0x10 [ 1963.741494][T23167] ? __kasan_kmalloc+0xaa/0xb0 [ 1963.741510][T23167] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1963.741523][T23167] ? xskq_create+0x52/0x290 [ 1963.741538][T23167] ? do_sock_setsockopt+0xf3/0x1d0 [ 1963.741552][T23167] ? do_syscall_64+0x123/0x790 [ 1963.741568][T23167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1963.741587][T23167] ? xsk_setsockopt+0x743/0xab0 [ 1963.741603][T23167] __vmalloc_node_range_noprof+0x123b/0x1420 [ 1963.741628][T23167] ? xsk_setsockopt+0x743/0xab0 [ 1963.741645][T23167] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1963.741663][T23167] ? kasan_save_track+0x14/0x30 [ 1963.741678][T23167] ? __kasan_kmalloc+0xaa/0xb0 [ 1963.741694][T23167] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1963.741708][T23167] ? xskq_create+0x52/0x290 [ 1963.741722][T23167] ? xsk_setsockopt+0x743/0xab0 [ 1963.741736][T23167] xskq_create+0x18f/0x290 [ 1963.741750][T23167] ? xsk_setsockopt+0x743/0xab0 [ 1963.741765][T23167] xsk_setsockopt+0x743/0xab0 [ 1963.741780][T23167] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1963.741794][T23167] ? find_held_lock+0x2b/0x80 [ 1963.741811][T23167] ? __fget_files+0x215/0x3d0 [ 1963.741829][T23167] ? selinux_socket_setsockopt+0x6a/0x80 [ 1963.741847][T23167] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1963.741863][T23167] do_sock_setsockopt+0xf3/0x1d0 [ 1963.741879][T23167] __sys_setsockopt+0x195/0x220 [ 1963.741897][T23167] __x64_sys_setsockopt+0xbd/0x160 [ 1963.741908][T23167] ? do_syscall_64+0xae/0x790 [ 1963.741924][T23167] ? lockdep_hardirqs_on+0x7d/0x110 [ 1963.741940][T23167] do_syscall_64+0x123/0x790 [ 1963.741958][T23167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1963.741970][T23167] RIP: 0033:0x7f57c6d9e559 [ 1963.741981][T23167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1963.741992][T23167] RSP: 002b:00007f57c7cf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1963.742004][T23167] RAX: ffffffffffffffda RBX: 00007f57c7026090 RCX: 00007f57c6d9e559 [ 1963.742012][T23167] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1963.742020][T23167] RBP: 00007f57c6e35ad8 R08: 0000000000000004 R09: 0000000000000000 [ 1963.742028][T23167] R10: 0000200000002d40 R11: 0000000000000246 R12: 0000000000000000 [ 1963.742035][T23167] R13: 00007f57c7026128 R14: 00007f57c7026090 R15: 00007fff0c332f38 [ 1963.742051][T23167] [ 1963.742066][T23167] Mem-Info: [ 1963.742073][T23167] active_anon:9175 inactive_anon:0 isolated_anon:0 [ 1963.742073][T23167] active_file:352 inactive_file:67838 isolated_file:0 [ 1963.742073][T23167] unevictable:0 dirty:510 writeback:0 [ 1963.742073][T23167] slab_reclaimable:13469 slab_unreclaimable:105265 [ 1963.742073][T23167] mapped:32091 shmem:536 pagetables:1666 [ 1963.742073][T23167] sec_pagetables:0 bounce:0 [ 1963.742073][T23167] kernel_misc_reclaimable:0 [ 1963.742073][T23167] free:1254462 free_pcp:15326 free_cma:0 [ 1963.742102][T23167] Node 0 active_anon:36700kB inactive_anon:0kB active_file:1408kB inactive_file:271156kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128364kB dirty:2040kB writeback:0kB shmem:2144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13824kB pagetables:6516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1963.742133][T23167] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1963.742162][T23167] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1963.742194][T23167] lowmem_reserve[]: 0 2452 2452 2452 2452 [ 1963.742216][T23167] Node 0 DMA32 free:1078188kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36700kB inactive_anon:0kB active_file:1408kB inactive_file:271156kB unevictable:0kB writepending:2040kB zspages:0kB present:3129332kB managed:2510920kB mlocked:0kB bounce:0kB free_pcp:46680kB local_pcp:24536kB free_cma:0kB [ 1963.742250][T23167] lowmem_reserve[]: 0 0 0 0 0 [ 1963.742268][T23167] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:60kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1963.742297][T23167] lowmem_reserve[]: 0 0 0 0 0 [ 1963.742315][T23167] Node 1 Normal free:3924300kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:14624kB local_pcp:2520kB free_cma:0kB [ 1963.742350][T23167] lowmem_reserve[]: 0 0 0 0 0 [ 1963.742368][T23167] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1963.742433][T23167] Node 0 DMA32: 2277*4kB (UME) 982*8kB (UME) 1776*16kB (UME) 1457*32kB (UME) 1090*64kB (UME) 642*128kB (UME) 329*256kB (UME) 139*512kB (UM) 65*1024kB (UME) 23*2048kB (UM) 138*4096kB (UM) = 1078244kB [ 1963.742529][T23167] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1963.742585][T23167] Node 1 Normal: 3*4kB (UM) 6*8kB (UM) 11*16kB (UM) 3*32kB (UM) 8*64kB (UM) 6*128kB (UM) 15*256kB (M) 16*512kB (UM) 5*1024kB (M) 9*2048kB (UM) 949*4096kB (UM) = 3924300kB [ 1963.742668][T23167] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1963.742676][T23167] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1963.742685][T23167] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1963.742693][T23167] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1963.742702][T23167] 68722 total pagecache pages [ 1963.742706][T23167] 0 pages in swap cache [ 1963.742711][T23167] Free swap = 124996kB [ 1963.742717][T23167] Total swap = 124996kB [ 1963.742723][T23167] 2097051 pages RAM [ 1963.742729][T23167] 0 pages HighMem/MovableOnly [ 1963.742735][T23167] 437690 pages reserved [ 1963.742741][T23167] 0 pages cma reserved [ 1964.329984][T23174] PKCS7: Unsupported SignerInfo version [ 1964.756957][T23166] netlink: 'syz.8.4307': attribute type 2 has an invalid length. [ 1965.577894][T23189] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:bb to non-existent VLAN 2048 [ 1966.186761][T18325] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1966.407042][T18325] usb 10-1: Using ep0 maxpacket: 32 [ 1966.407713][T18325] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1966.408835][T18325] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 34, changing to 9 [ 1966.408863][T18325] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41318, setting to 1024 [ 1966.408941][T18325] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1966.411541][T18325] usb 10-1: config 0 descriptor?? [ 1966.478311][T18325] hub 10-1:0.0: USB hub found [ 1966.636494][T18325] hub 10-1:0.0: 1 port detected [ 1966.859496][T23213] binder: 23205:23213 ioctl 4018620d 0 returned -22 [ 1967.281683][T23211] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4320'. [ 1967.648489][T19393] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1967.927882][T19393] usb 2-1: Using ep0 maxpacket: 16 [ 1967.930479][T19393] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1967.956612][T19393] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1967.956641][T19393] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1967.956662][T19393] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1967.956681][T19393] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1967.956700][T19393] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1967.956719][T19393] usb 2-1: config 0 has no interface number 0 [ 1967.956753][T19393] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1967.956778][T19393] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1967.956799][T19393] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1967.956827][T19393] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1967.956852][T19393] usb 2-1: config 0 interface 125 has no altsetting 0 [ 1968.097025][T19393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.097054][T19393] usb 2-1: Product: syz [ 1968.097069][T19393] usb 2-1: Manufacturer: syz [ 1968.097085][T19393] usb 2-1: SerialNumber: syz [ 1968.115085][T18883] usb 10-1: USB disconnect, device number 19 [ 1968.158846][T19393] usb 2-1: config 0 descriptor?? [ 1968.454745][T23229] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1969.304131][ C0] usb 2-1: async_complete: urb error -71 [ 1969.304249][ C0] usb 2-1: async_complete: urb error -71 [ 1969.308044][ C0] usb 2-1: async_complete: urb error -71 [ 1969.308128][ C0] usb 2-1: async_complete: urb error -71 [ 1969.336416][T18981] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1969.415663][T23231] FAULT_INJECTION: forcing a failure. [ 1969.415663][T23231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1969.415727][T23231] CPU: 1 UID: 0 PID: 23231 Comm: syz.6.4323 Tainted: G L syzkaller #0 PREEMPT(full) [ 1969.415755][T23231] Tainted: [L]=SOFTLOCKUP [ 1969.415763][T23231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1969.415775][T23231] Call Trace: [ 1969.415783][T23231] [ 1969.415792][T23231] dump_stack_lvl+0x100/0x190 [ 1969.415827][T23231] should_fail_ex.cold+0x5/0xa [ 1969.415855][T23231] _copy_from_user+0x2e/0xd0 [ 1969.415886][T23231] __sys_bpf+0x2f5/0x4a30 [ 1969.415918][T23231] ? __pfx___sys_bpf+0x10/0x10 [ 1969.415940][T23231] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 1969.415987][T23231] ? rcu_is_watching+0x13/0xc0 [ 1969.416025][T23231] ? rcu_is_watching+0x13/0xc0 [ 1969.416054][T23231] ? trace_sched_exit_tp+0x120/0x160 [ 1969.416098][T23231] ? __x64_sys_futex+0x34f/0x4d0 [ 1969.416127][T23231] ? __x64_sys_futex+0x358/0x4d0 [ 1969.416160][T23231] ? xfd_validate_state+0x129/0x190 [ 1969.416187][T23231] ? __x64_sys_bpf+0xce/0x140 [ 1969.416209][T23231] __x64_sys_bpf+0xce/0x140 [ 1969.416236][T23231] ? do_syscall_64+0xae/0x790 [ 1969.416269][T23231] do_syscall_64+0x123/0x790 [ 1969.416300][T23231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1969.416322][T23231] RIP: 0033:0x7fb28119e559 [ 1969.416339][T23231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1969.416365][T23231] RSP: 002b:00007fb27f3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1969.416386][T23231] RAX: ffffffffffffffda RBX: 00007fb281426090 RCX: 00007fb28119e559 [ 1969.416401][T23231] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 1969.416414][T23231] RBP: 00007fb281235ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1969.416427][T23231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1969.416439][T23231] R13: 00007fb281426128 R14: 00007fb281426090 R15: 00007fff5ccdbb28 [ 1969.416467][T23231] [ 1969.486521][T18981] usb 6-1: device descriptor read/64, error -71 [ 1969.769689][T18981] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 1969.928940][T19393] get_1284_register: usb error -71 [ 1969.929856][T18981] usb 6-1: device descriptor read/64, error -71 [ 1970.046561][T18981] usb usb6-port1: attempt power cycle [ 1970.048003][T19393] usb 2-1: USB disconnect, device number 21 [ 1970.285451][T23236] FAULT_INJECTION: forcing a failure. [ 1970.285451][T23236] name failslab, interval 1, probability 5, space 0, times 9992 [ 1970.285491][T23236] CPU: 1 UID: 0 PID: 23236 Comm: syz.6.4325 Tainted: G L syzkaller #0 PREEMPT(full) [ 1970.285516][T23236] Tainted: [L]=SOFTLOCKUP [ 1970.285523][T23236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1970.285534][T23236] Call Trace: [ 1970.285541][T23236] [ 1970.285549][T23236] dump_stack_lvl+0x100/0x190 [ 1970.285582][T23236] should_fail_ex.cold+0x5/0xa [ 1970.285609][T23236] should_failslab+0xc2/0x120 [ 1970.285636][T23236] __kmalloc_noprof+0xfc/0x840 [ 1970.285661][T23236] ? rcu_is_watching+0x13/0xc0 [ 1970.285691][T23236] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1970.285716][T23236] tomoyo_realpath_from_path+0xb6/0x690 [ 1970.285740][T23236] tomoyo_path_number_perm+0x23c/0x580 [ 1970.285763][T23236] ? tomoyo_path_number_perm+0x22e/0x580 [ 1970.285789][T23236] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1970.285823][T23236] ? __lock_acquire+0x5c0/0x1f40 [ 1970.285858][T23236] ? __fget_files+0x34/0x3d0 [ 1970.285884][T23236] ? find_held_lock+0x2b/0x80 [ 1970.285910][T23236] ? hook_file_ioctl_common+0x140/0x440 [ 1970.285936][T23236] ? __fget_files+0x21f/0x3d0 [ 1970.285966][T23236] security_file_ioctl+0xd3/0x230 [ 1970.285992][T23236] __x64_sys_ioctl+0xb7/0x210 [ 1970.286017][T23236] do_syscall_64+0x123/0x790 [ 1970.286046][T23236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1970.286065][T23236] RIP: 0033:0x7fb28119e559 [ 1970.286080][T23236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1970.286097][T23236] RSP: 002b:00007fb281f88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1970.286116][T23236] RAX: ffffffffffffffda RBX: 00007fb281425fa0 RCX: 00007fb28119e559 [ 1970.286128][T23236] RDX: 0000200000000280 RSI: 000000004020ae46 RDI: 0000000000000004 [ 1970.286140][T23236] RBP: 00007fb281f88090 R08: 0000000000000000 R09: 0000000000000000 [ 1970.286152][T23236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1970.286163][T23236] R13: 00007fb281426038 R14: 00007fb281425fa0 R15: 00007fff5ccdbb28 [ 1970.286189][T23236] [ 1970.389433][T23236] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1970.767932][T23249] pimreg: entered allmulticast mode [ 1970.780687][T23249] pimreg: left allmulticast mode [ 1970.838681][ T50] IPVS: starting estimator thread 0... [ 1970.840791][T23250] IPv6: NLM_F_CREATE should be specified when creating new route [ 1970.841746][T23250] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1970.988396][T23255] netlink: 'syz.6.4332': attribute type 10 has an invalid length. [ 1970.988990][T23253] IPVS: using max 47 ests per chain, 112800 per kthread [ 1971.038885][T23255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1971.088608][T23255] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1971.731317][T23261] No source specified [ 1972.129060][T23263] ceph: No source [ 1973.684336][T23278] loop9: detected capacity change from 0 to 2640 [ 1973.684844][T23278] buffer_io_error: 32 callbacks suppressed [ 1973.684859][T23278] Buffer I/O error on dev loop9, logical block 0, async page read [ 1973.684891][T23278] Buffer I/O error on dev loop9, logical block 0, async page read [ 1973.684920][T23278] Buffer I/O error on dev loop9, logical block 0, async page read [ 1973.684948][T23278] Buffer I/O error on dev loop9, logical block 0, async page read [ 1973.684975][T23278] Buffer I/O error on dev loop9, logical block 0, async page read [ 1973.685013][T23278] Buffer I/O error on dev loop9, logical block 0, async page read [ 1973.685051][T23278] Buffer I/O error on dev loop9, logical block 0, async page read [ 1973.685078][T23278] Buffer I/O error on dev loop9, logical block 0, async page read [ 1973.685093][T23278] ldm_validate_partition_table(): Disk read failed. [ 1973.685117][T23278] Buffer I/O error on dev loop9, logical block 0, async page read [ 1973.685144][T23278] Buffer I/O error on dev loop9, logical block 0, async page read [ 1973.685185][T23278] Dev loop9: unable to read RDB block 0 [ 1973.685319][T23278] loop9: unable to read partition table [ 1973.685474][T23278] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1973.936613][T23276] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input194 [ 1975.145924][T23281] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 1975.145941][T23281] syzkaller1: group set to 0 [ 1975.401819][ T5612] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1976.327733][T23287] sctp_transport_update_pmtu: 44 callbacks suppressed [ 1976.327759][T23287] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1976.364212][T23287] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1976.364485][T23287] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1976.364690][T23287] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1976.365401][T23287] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1976.365602][T23287] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1976.365803][T23287] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1976.366001][T23287] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1976.366203][T23287] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1976.366424][T23287] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1977.050697][T23304] FAULT_INJECTION: forcing a failure. [ 1977.050697][T23304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1977.050720][T23304] CPU: 0 UID: 0 PID: 23304 Comm: syz.8.4342 Tainted: G L syzkaller #0 PREEMPT(full) [ 1977.050736][T23304] Tainted: [L]=SOFTLOCKUP [ 1977.050740][T23304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1977.050753][T23304] Call Trace: [ 1977.050757][T23304] [ 1977.050762][T23304] dump_stack_lvl+0x100/0x190 [ 1977.050783][T23304] should_fail_ex.cold+0x5/0xa [ 1977.050799][T23304] _copy_from_user+0x2e/0xd0 [ 1977.050816][T23304] copy_msghdr_from_user+0x9f/0x4c0 [ 1977.050833][T23304] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1977.050851][T23304] ? _kstrtoull+0x144/0x200 [ 1977.050862][T23304] ? __pfx__kstrtoull+0x10/0x10 [ 1977.050877][T23304] ___sys_sendmsg+0x106/0x1e0 [ 1977.050893][T23304] ? __pfx____sys_sendmsg+0x10/0x10 [ 1977.050914][T23304] ? __fget_files+0x34/0x3d0 [ 1977.050940][T23304] __sys_sendmmsg+0x20c/0x440 [ 1977.050954][T23304] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1977.050965][T23304] ? ksys_write+0x190/0x250 [ 1977.050990][T23304] ? fput+0x7c/0x100 [ 1977.051006][T23304] ? ksys_write+0x1ac/0x250 [ 1977.051019][T23304] ? __pfx_ksys_write+0x10/0x10 [ 1977.051035][T23304] __x64_sys_sendmmsg+0x9c/0x100 [ 1977.051047][T23304] ? lockdep_hardirqs_on+0x7d/0x110 [ 1977.051063][T23304] do_syscall_64+0x123/0x790 [ 1977.051081][T23304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1977.051093][T23304] RIP: 0033:0x7f57c6d9e559 [ 1977.051103][T23304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1977.051115][T23304] RSP: 002b:00007f57c7cf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1977.051127][T23304] RAX: ffffffffffffffda RBX: 00007f57c7026090 RCX: 00007f57c6d9e559 [ 1977.051134][T23304] RDX: 0000000000000001 RSI: 00002000000034c0 RDI: 0000000000000004 [ 1977.051141][T23304] RBP: 00007f57c7cf3090 R08: 0000000000000000 R09: 0000000000000000 [ 1977.051147][T23304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1977.051154][T23304] R13: 00007f57c7026128 R14: 00007f57c7026090 R15: 00007fff0c332f38 [ 1977.051168][T23304] [ 1978.547079][T23319] FAULT_INJECTION: forcing a failure. [ 1978.547079][T23319] name failslab, interval 1, probability 5, space 0, times 10000 [ 1978.547117][T23319] CPU: 1 UID: 0 PID: 23319 Comm: syz.8.4347 Tainted: G L syzkaller #0 PREEMPT(full) [ 1978.547148][T23319] Tainted: [L]=SOFTLOCKUP [ 1978.547156][T23319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1978.547169][T23319] Call Trace: [ 1978.547177][T23319] [ 1978.547186][T23319] dump_stack_lvl+0x100/0x190 [ 1978.547221][T23319] should_fail_ex.cold+0x5/0xa [ 1978.547251][T23319] should_failslab+0xc2/0x120 [ 1978.547283][T23319] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1978.547310][T23319] ? do_getname+0x35/0x390 [ 1978.547339][T23319] do_getname+0x35/0x390 [ 1978.547364][T23319] do_sys_openat2+0xc7/0x1e0 [ 1978.547386][T23319] ? __pfx_do_sys_openat2+0x10/0x10 [ 1978.547404][T23319] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1978.547444][T23319] __x64_sys_openat+0x12d/0x210 [ 1978.547466][T23319] ? __pfx___x64_sys_openat+0x10/0x10 [ 1978.547497][T23319] do_syscall_64+0x123/0x790 [ 1978.547530][T23319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1978.547551][T23319] RIP: 0033:0x7f57c6d5ed8e [ 1978.547568][T23319] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1978.547587][T23319] RSP: 002b:00007f57c7d13b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1978.547608][T23319] RAX: ffffffffffffffda RBX: 00007f57c7d146c0 RCX: 00007f57c6d5ed8e [ 1978.547621][T23319] RDX: 0000000000000002 RSI: 00007f57c7d13c00 RDI: ffffffffffffff9c [ 1978.547634][T23319] RBP: 00007f57c7d13c00 R08: 0000000000000000 R09: 0000000000000000 [ 1978.547646][T23319] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1978.547659][T23319] R13: 00007f57c7026038 R14: 00007f57c7025fa0 R15: 00007fff0c332f38 [ 1978.547690][T23319] [ 1978.771291][T23319] FAULT_INJECTION: forcing a failure. [ 1978.771291][T23319] name failslab, interval 1, probability 5, space 0, times 9999 [ 1978.771325][T23319] CPU: 0 UID: 0 PID: 23319 Comm: syz.8.4347 Tainted: G L syzkaller #0 PREEMPT(full) [ 1978.771356][T23319] Tainted: [L]=SOFTLOCKUP [ 1978.771364][T23319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1978.771375][T23319] Call Trace: [ 1978.771382][T23319] [ 1978.771390][T23319] dump_stack_lvl+0x100/0x190 [ 1978.771421][T23319] should_fail_ex.cold+0x5/0xa [ 1978.771446][T23319] should_failslab+0xc2/0x120 [ 1978.771473][T23319] __kmalloc_cache_noprof+0x91/0x6d0 [ 1978.771493][T23319] ? kvm_dev_ioctl+0xb48/0x1b50 [ 1978.771519][T23319] kvm_dev_ioctl+0xb48/0x1b50 [ 1978.771549][T23319] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1978.771574][T23319] ? selinux_file_ioctl+0x13b/0x290 [ 1978.771598][T23319] ? selinux_file_ioctl+0xb6/0x290 [ 1978.771624][T23319] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1978.771646][T23319] __x64_sys_ioctl+0x18e/0x210 [ 1978.771669][T23319] do_syscall_64+0x123/0x790 [ 1978.771696][T23319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1978.771714][T23319] RIP: 0033:0x7f57c6d9e559 [ 1978.771730][T23319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1978.771747][T23319] RSP: 002b:00007f57c7d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1978.771765][T23319] RAX: ffffffffffffffda RBX: 00007f57c7025fa0 RCX: 00007f57c6d9e559 [ 1978.771777][T23319] RDX: 0000000000001000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 1978.771788][T23319] RBP: 00007f57c6e35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1978.771800][T23319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1978.771811][T23319] R13: 00007f57c7026038 R14: 00007f57c7025fa0 R15: 00007fff0c332f38 [ 1978.771836][T23319] [ 1979.187535][T23331] binder: 23325:23331 ioctl 4018620d 0 returned -22 [ 1980.440425][T23341] FAULT_INJECTION: forcing a failure. [ 1980.440425][T23341] name failslab, interval 1, probability 5, space 0, times 10000 [ 1980.440531][T23341] CPU: 1 UID: 0 PID: 23341 Comm: syz.8.4352 Tainted: G L syzkaller #0 PREEMPT(full) [ 1980.440559][T23341] Tainted: [L]=SOFTLOCKUP [ 1980.440566][T23341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1980.440597][T23341] Call Trace: [ 1980.440604][T23341] [ 1980.440613][T23341] dump_stack_lvl+0x100/0x190 [ 1980.440647][T23341] should_fail_ex.cold+0x5/0xa [ 1980.440676][T23341] should_failslab+0xc2/0x120 [ 1980.440703][T23341] __kmalloc_cache_noprof+0x91/0x6d0 [ 1980.440725][T23341] ? vidtv_psi_pat_table_init+0x46/0x2c0 [ 1980.440753][T23341] vidtv_psi_pat_table_init+0x46/0x2c0 [ 1980.440778][T23341] vidtv_channel_si_init+0x67/0x18f0 [ 1980.440807][T23341] ? __asan_memcpy+0x3c/0x60 [ 1980.440834][T23341] vidtv_mux_init+0x522/0xbf0 [ 1980.440863][T23341] vidtv_start_feed+0x34e/0x500 [ 1980.440894][T23341] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1980.440921][T23341] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1980.440949][T23341] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1980.440987][T23341] ? mark_held_locks+0x40/0x70 [ 1980.441015][T23341] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1980.441044][T23341] dmx_ts_feed_start_filtering+0xf6/0x220 [ 1980.441068][T23341] dvb_dmxdev_start_feed+0x273/0x3f0 [ 1980.441099][T23341] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 1980.441133][T23341] dvb_demux_do_ioctl+0x786/0x1200 [ 1980.441162][T23341] ? do_vfs_ioctl+0x226/0x13e0 [ 1980.441190][T23341] dvb_usercopy+0x167/0x340 [ 1980.441223][T23341] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1980.441252][T23341] ? __pfx_dvb_usercopy+0x10/0x10 [ 1980.441276][T23341] ? __fget_files+0x34/0x3d0 [ 1980.441315][T23341] ? selinux_file_ioctl+0x13b/0x290 [ 1980.441344][T23341] ? selinux_file_ioctl+0xb6/0x290 [ 1980.441375][T23341] dvb_demux_ioctl+0x29/0x40 [ 1980.441400][T23341] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1980.441426][T23341] __x64_sys_ioctl+0x18e/0x210 [ 1980.441451][T23341] do_syscall_64+0x123/0x790 [ 1980.441483][T23341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1980.441504][T23341] RIP: 0033:0x7f57c6d9e559 [ 1980.441521][T23341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1980.441538][T23341] RSP: 002b:00007f57c7d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1980.441558][T23341] RAX: ffffffffffffffda RBX: 00007f57c7025fa0 RCX: 00007f57c6d9e559 [ 1980.441570][T23341] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000006 [ 1980.441580][T23341] RBP: 00007f57c6e35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1980.441591][T23341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1980.441600][T23341] R13: 00007f57c7026038 R14: 00007f57c7025fa0 R15: 00007fff0c332f38 [ 1980.441625][T23341] [ 1981.106507][T23347] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4353'. [ 1981.404699][T23346] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1981.454454][ T30] kauditd_printk_skb: 583 callbacks suppressed [ 1981.454474][ T30] audit: type=1400 audit(1792455672.275:8332): avc: denied { create } for pid=23338 comm="syz.6.4353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1981.559349][T23341] FAULT_INJECTION: forcing a failure. [ 1981.559349][T23341] name failslab, interval 1, probability 5, space 0, times 9999 [ 1981.559385][T23341] CPU: 0 UID: 0 PID: 23341 Comm: syz.8.4352 Tainted: G L syzkaller #0 PREEMPT(full) [ 1981.559411][T23341] Tainted: [L]=SOFTLOCKUP [ 1981.559419][T23341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1981.559430][T23341] Call Trace: [ 1981.559438][T23341] [ 1981.559446][T23341] dump_stack_lvl+0x100/0x190 [ 1981.559477][T23341] should_fail_ex.cold+0x5/0xa [ 1981.559502][T23341] should_failslab+0xc2/0x120 [ 1981.559529][T23341] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1981.559552][T23341] ? do_getname+0x35/0x390 [ 1981.559575][T23341] do_getname+0x35/0x390 [ 1981.559595][T23341] do_sys_openat2+0xc7/0x1e0 [ 1981.559612][T23341] ? __pfx_do_sys_openat2+0x10/0x10 [ 1981.559628][T23341] ? __fget_files+0x34/0x3d0 [ 1981.559660][T23341] __x64_sys_open+0xfe/0x1d0 [ 1981.559677][T23341] ? __pfx___x64_sys_open+0x10/0x10 [ 1981.559703][T23341] do_syscall_64+0x123/0x790 [ 1981.559732][T23341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1981.559750][T23341] RIP: 0033:0x7f57c6d9e559 [ 1981.559764][T23341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1981.559781][T23341] RSP: 002b:00007f57c7d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1981.559800][T23341] RAX: ffffffffffffffda RBX: 00007f57c7025fa0 RCX: 00007f57c6d9e559 [ 1981.559812][T23341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000012c0 [ 1981.559823][T23341] RBP: 00007f57c6e35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1981.559834][T23341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1981.559845][T23341] R13: 00007f57c7026038 R14: 00007f57c7025fa0 R15: 00007fff0c332f38 [ 1981.559869][T23341] [ 1982.498936][T23357] syz.1.4358: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1982.499176][T23357] CPU: 0 UID: 0 PID: 23357 Comm: syz.1.4358 Tainted: G L syzkaller #0 PREEMPT(full) [ 1982.499204][T23357] Tainted: [L]=SOFTLOCKUP [ 1982.499212][T23357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1982.499233][T23357] Call Trace: [ 1982.499242][T23357] [ 1982.499251][T23357] dump_stack_lvl+0x100/0x190 [ 1982.499287][T23357] warn_alloc.cold+0x9e/0xb2 [ 1982.499320][T23357] ? __pfx_warn_alloc+0x10/0x10 [ 1982.499344][T23357] ? __kasan_kmalloc+0xaa/0xb0 [ 1982.499371][T23357] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1982.499395][T23357] ? xskq_create+0x52/0x290 [ 1982.499423][T23357] ? do_sock_setsockopt+0xf3/0x1d0 [ 1982.499449][T23357] ? do_syscall_64+0x123/0x790 [ 1982.499477][T23357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1982.499515][T23357] ? xsk_setsockopt+0x743/0xab0 [ 1982.499541][T23357] __vmalloc_node_range_noprof+0x123b/0x1420 [ 1982.499585][T23357] ? xsk_setsockopt+0x743/0xab0 [ 1982.499615][T23357] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1982.499647][T23357] ? kasan_save_track+0x14/0x30 [ 1982.499674][T23357] ? __kasan_kmalloc+0xaa/0xb0 [ 1982.499703][T23357] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1982.499725][T23357] ? xskq_create+0x52/0x290 [ 1982.499752][T23357] ? xsk_setsockopt+0x743/0xab0 [ 1982.499777][T23357] xskq_create+0x18f/0x290 [ 1982.499803][T23357] ? xsk_setsockopt+0x743/0xab0 [ 1982.499831][T23357] xsk_setsockopt+0x743/0xab0 [ 1982.499858][T23357] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1982.499883][T23357] ? find_held_lock+0x2b/0x80 [ 1982.499920][T23357] ? __fget_files+0x215/0x3d0 [ 1982.499953][T23357] ? selinux_socket_setsockopt+0x6a/0x80 [ 1982.499983][T23357] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1982.500011][T23357] do_sock_setsockopt+0xf3/0x1d0 [ 1982.500040][T23357] __sys_setsockopt+0x195/0x220 [ 1982.500069][T23357] __x64_sys_setsockopt+0xbd/0x160 [ 1982.500090][T23357] ? do_syscall_64+0xae/0x790 [ 1982.500120][T23357] ? lockdep_hardirqs_on+0x7d/0x110 [ 1982.500150][T23357] do_syscall_64+0x123/0x790 [ 1982.500183][T23357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1982.500204][T23357] RIP: 0033:0x7f189719e559 [ 1982.500237][T23357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1982.500266][T23357] RSP: 002b:00007f18953f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1982.500287][T23357] RAX: ffffffffffffffda RBX: 00007f1897426090 RCX: 00007f189719e559 [ 1982.500301][T23357] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1982.500314][T23357] RBP: 00007f1897235ad8 R08: 0000000000000004 R09: 0000000000000000 [ 1982.500328][T23357] R10: 0000200000002d40 R11: 0000000000000246 R12: 0000000000000000 [ 1982.500342][T23357] R13: 00007f1897426128 R14: 00007f1897426090 R15: 00007ffe2995cf88 [ 1982.500379][T23357] [ 1982.500409][T23357] Mem-Info: [ 1982.500460][T23357] active_anon:39139 inactive_anon:0 isolated_anon:0 [ 1982.500460][T23357] active_file:352 inactive_file:67907 isolated_file:0 [ 1982.500460][T23357] unevictable:1334 dirty:748 writeback:0 [ 1982.500460][T23357] slab_reclaimable:11736 slab_unreclaimable:106493 [ 1982.500460][T23357] mapped:43644 shmem:30432 pagetables:1732 [ 1982.500460][T23357] sec_pagetables:0 bounce:0 [ 1982.500460][T23357] kernel_misc_reclaimable:0 [ 1982.500460][T23357] free:1219338 free_pcp:19010 free_cma:0 [ 1982.500517][T23357] Node 0 active_anon:156556kB inactive_anon:0kB active_file:1408kB inactive_file:271432kB unevictable:5336kB isolated(anon):0kB isolated(file):0kB mapped:174576kB dirty:2992kB writeback:0kB shmem:121728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13780kB pagetables:6780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1982.500596][T23357] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1982.500653][T23357] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1982.500713][T23357] lowmem_reserve[]: 0 2452 2452 2452 2452 [ 1982.500804][T23357] Node 0 DMA32 free:935424kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:156556kB inactive_anon:0kB active_file:1408kB inactive_file:271432kB unevictable:5336kB writepending:2992kB zspages:0kB present:3129332kB managed:2510920kB mlocked:0kB bounce:0kB free_pcp:63684kB local_pcp:34896kB free_cma:0kB [ 1982.500956][T23357] lowmem_reserve[]: 0 0 0 0 0 [ 1982.501241][T23357] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:60kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1982.501383][T23357] lowmem_reserve[]: 0 0 0 0 0 [ 1982.501561][T23357] Node 1 Normal free:3926568kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:12356kB local_pcp:11096kB free_cma:0kB [ 1982.501672][T23357] lowmem_reserve[]: 0 0 0 0 0 [ 1982.501991][T23357] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1982.502620][T23357] Node 0 DMA32: 710*4kB (UME) 437*8kB (UME) 71*16kB (UE) 109*32kB (UME) 136*64kB (UME) 610*128kB (UME) 330*256kB (UME) 141*512kB (UM) 65*1024kB (UME) 24*2048kB (UM) 138*4096kB (UM) = 935376kB [ 1982.503553][T23357] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1982.504132][T23357] Node 1 Normal: 10*4kB (UM) 12*8kB (UM) 14*16kB (UM) 6*32kB (UM) 12*64kB (UM) 6*128kB (UM) 16*256kB (M) 17*512kB (UM) 4*1024kB (M) 8*2048kB (UM) 950*4096kB (UM) = 3926568kB [ 1982.504924][T23357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1982.504968][T23357] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1982.504993][T23357] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1982.505037][T23357] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1982.505074][T23357] 100021 total pagecache pages [ 1982.505083][T23357] 0 pages in swap cache [ 1982.505126][T23357] Free swap = 124996kB [ 1982.505159][T23357] Total swap = 124996kB [ 1982.505200][T23357] 2097051 pages RAM [ 1982.505235][T23357] 0 pages HighMem/MovableOnly [ 1982.505243][T23357] 437690 pages reserved [ 1982.505284][T23357] 0 pages cma reserved [ 1982.648190][T23352] FAULT_INJECTION: forcing a failure. [ 1982.648190][T23352] name failslab, interval 1, probability 5, space 0, times 10000 [ 1982.648229][T23352] CPU: 0 UID: 0 PID: 23352 Comm: syz.8.4356 Tainted: G L syzkaller #0 PREEMPT(full) [ 1982.648258][T23352] Tainted: [L]=SOFTLOCKUP [ 1982.648266][T23352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1982.648278][T23352] Call Trace: [ 1982.648286][T23352] [ 1982.648294][T23352] dump_stack_lvl+0x100/0x190 [ 1982.648328][T23352] should_fail_ex.cold+0x5/0xa [ 1982.648357][T23352] should_failslab+0xc2/0x120 [ 1982.648387][T23352] __kmalloc_noprof+0xfc/0x840 [ 1982.648412][T23352] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1982.648433][T23352] ? vidtv_psi_registration_desc_init+0x31/0x220 [ 1982.648461][T23352] vidtv_psi_registration_desc_init+0x31/0x220 [ 1982.648486][T23352] vidtv_channel_s302m_init+0x346/0x9b0 [ 1982.648513][T23352] ? __kasan_kmalloc+0xaa/0xb0 [ 1982.648543][T23352] ? __pfx_vidtv_channel_s302m_init+0x10/0x10 [ 1982.648568][T23352] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 1982.648601][T23352] ? __asan_memcpy+0x3c/0x60 [ 1982.648626][T23352] vidtv_channels_init+0x4c/0xb0 [ 1982.648651][T23352] vidtv_mux_init+0x9d9/0xbf0 [ 1982.648679][T23352] vidtv_start_feed+0x34e/0x500 [ 1982.648708][T23352] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1982.648735][T23352] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1982.648765][T23352] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1982.648809][T23352] ? mark_held_locks+0x40/0x70 [ 1982.648838][T23352] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1982.648870][T23352] dmx_ts_feed_start_filtering+0xf6/0x220 [ 1982.648896][T23352] dvb_dmxdev_start_feed+0x273/0x3f0 [ 1982.648929][T23352] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 1982.648970][T23352] dvb_demux_do_ioctl+0x786/0x1200 [ 1982.649004][T23352] ? do_vfs_ioctl+0x226/0x13e0 [ 1982.649033][T23352] dvb_usercopy+0x167/0x340 [ 1982.649059][T23352] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1982.649091][T23352] ? __pfx_dvb_usercopy+0x10/0x10 [ 1982.649116][T23352] ? __fget_files+0x34/0x3d0 [ 1982.649158][T23352] ? selinux_file_ioctl+0x13b/0x290 [ 1982.649189][T23352] ? selinux_file_ioctl+0xb6/0x290 [ 1982.649222][T23352] dvb_demux_ioctl+0x29/0x40 [ 1982.649248][T23352] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1982.649275][T23352] __x64_sys_ioctl+0x18e/0x210 [ 1982.649302][T23352] do_syscall_64+0x123/0x790 [ 1982.649335][T23352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1982.649356][T23352] RIP: 0033:0x7f57c6d9e559 [ 1982.649374][T23352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1982.649395][T23352] RSP: 002b:00007f57c7d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1982.649417][T23352] RAX: ffffffffffffffda RBX: 00007f57c7025fa0 RCX: 00007f57c6d9e559 [ 1982.649430][T23352] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000006 [ 1982.649441][T23352] RBP: 00007f57c6e35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1982.649454][T23352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1982.649466][T23352] R13: 00007f57c7026038 R14: 00007f57c7025fa0 R15: 00007fff0c332f38 [ 1982.649496][T23352] [ 1982.662938][T23357] netlink: 'syz.1.4358': attribute type 2 has an invalid length. [ 1982.747532][T23352] FAULT_INJECTION: forcing a failure. [ 1982.747532][T23352] name failslab, interval 1, probability 5, space 0, times 9999 [ 1982.747565][T23352] CPU: 0 UID: 0 PID: 23352 Comm: syz.8.4356 Tainted: G L syzkaller #0 PREEMPT(full) [ 1982.747590][T23352] Tainted: [L]=SOFTLOCKUP [ 1982.747597][T23352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1982.747609][T23352] Call Trace: [ 1982.747615][T23352] [ 1982.747623][T23352] dump_stack_lvl+0x100/0x190 [ 1982.747657][T23352] should_fail_ex.cold+0x5/0xa [ 1982.747683][T23352] should_failslab+0xc2/0x120 [ 1982.747716][T23352] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1982.747741][T23352] ? vidtv_psi_short_event_desc_init+0x312/0x5f0 [ 1982.747768][T23352] kstrdup+0x51/0xe0 [ 1982.747789][T23352] vidtv_psi_short_event_desc_init+0x312/0x5f0 [ 1982.747814][T23352] vidtv_psi_desc_clone+0x33f/0x5d0 [ 1982.747837][T23352] vidtv_channel_si_init+0x76c/0x18f0 [ 1982.747869][T23352] vidtv_mux_init+0x522/0xbf0 [ 1982.747894][T23352] vidtv_start_feed+0x34e/0x500 [ 1982.747920][T23352] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1982.747969][T23352] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1982.747996][T23352] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1982.748029][T23352] ? mark_held_locks+0x40/0x70 [ 1982.748057][T23352] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1982.748084][T23352] dmx_ts_feed_start_filtering+0xf6/0x220 [ 1982.748106][T23352] dvb_dmxdev_start_feed+0x273/0x3f0 [ 1982.748132][T23352] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 1982.748165][T23352] dvb_demux_do_ioctl+0x786/0x1200 [ 1982.748192][T23352] ? do_vfs_ioctl+0x226/0x13e0 [ 1982.748216][T23352] dvb_usercopy+0x167/0x340 [ 1982.748237][T23352] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1982.748263][T23352] ? __pfx_dvb_usercopy+0x10/0x10 [ 1982.748284][T23352] ? __fget_files+0x34/0x3d0 [ 1982.748321][T23352] ? selinux_file_ioctl+0x13b/0x290 [ 1982.748347][T23352] ? selinux_file_ioctl+0xb6/0x290 [ 1982.748378][T23352] dvb_demux_ioctl+0x29/0x40 [ 1982.748404][T23352] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1982.748431][T23352] __x64_sys_ioctl+0x18e/0x210 [ 1982.748459][T23352] do_syscall_64+0x123/0x790 [ 1982.748492][T23352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1982.748514][T23352] RIP: 0033:0x7f57c6d9e559 [ 1982.748532][T23352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1982.748552][T23352] RSP: 002b:00007f57c7d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1982.748572][T23352] RAX: ffffffffffffffda RBX: 00007f57c7025fa0 RCX: 00007f57c6d9e559 [ 1982.748586][T23352] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000006 [ 1982.748599][T23352] RBP: 00007f57c6e35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1982.748612][T23352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1982.748624][T23352] R13: 00007f57c7026038 R14: 00007f57c7025fa0 R15: 00007fff0c332f38 [ 1982.748654][T23352] [ 1982.799624][T23352] FAULT_INJECTION: forcing a failure. [ 1982.799624][T23352] name failslab, interval 1, probability 5, space 0, times 9998 [ 1982.799669][T23352] CPU: 0 UID: 0 PID: 23352 Comm: syz.8.4356 Tainted: G L syzkaller #0 PREEMPT(full) [ 1982.799695][T23352] Tainted: [L]=SOFTLOCKUP [ 1982.799708][T23352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1982.799719][T23352] Call Trace: [ 1982.799727][T23352] [ 1982.799734][T23352] dump_stack_lvl+0x100/0x190 [ 1982.799763][T23352] should_fail_ex.cold+0x5/0xa [ 1982.799791][T23352] should_failslab+0xc2/0x120 [ 1982.799817][T23352] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1982.799842][T23352] ? __kasan_kmalloc+0xaa/0xb0 [ 1982.799865][T23352] ? vidtv_psi_desc_clone+0x3aa/0x5d0 [ 1982.799888][T23352] kmemdup_noprof+0x29/0x60 [ 1982.799908][T23352] vidtv_psi_desc_clone+0x3aa/0x5d0 [ 1982.799929][T23352] vidtv_channel_si_init+0x12c9/0x18f0 [ 1982.799959][T23352] vidtv_mux_init+0x522/0xbf0 [ 1982.799984][T23352] vidtv_start_feed+0x34e/0x500 [ 1982.800012][T23352] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1982.800036][T23352] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1982.800061][T23352] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1982.800092][T23352] ? mark_held_locks+0x40/0x70 [ 1982.800116][T23352] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1982.800142][T23352] dmx_ts_feed_start_filtering+0xf6/0x220 [ 1982.800163][T23352] dvb_dmxdev_start_feed+0x273/0x3f0 [ 1982.800190][T23352] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 1982.800221][T23352] dvb_demux_do_ioctl+0x786/0x1200 [ 1982.800250][T23352] ? do_vfs_ioctl+0x226/0x13e0 [ 1982.800276][T23352] dvb_usercopy+0x167/0x340 [ 1982.800297][T23352] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1982.800323][T23352] ? __pfx_dvb_usercopy+0x10/0x10 [ 1982.800344][T23352] ? __fget_files+0x34/0x3d0 [ 1982.800380][T23352] ? selinux_file_ioctl+0x13b/0x290 [ 1982.800404][T23352] ? selinux_file_ioctl+0xb6/0x290 [ 1982.800431][T23352] dvb_demux_ioctl+0x29/0x40 [ 1982.800453][T23352] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1982.800476][T23352] __x64_sys_ioctl+0x18e/0x210 [ 1982.800500][T23352] do_syscall_64+0x123/0x790 [ 1982.800530][T23352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1982.800549][T23352] RIP: 0033:0x7f57c6d9e559 [ 1982.800565][T23352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1982.800582][T23352] RSP: 002b:00007f57c7d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1982.800600][T23352] RAX: ffffffffffffffda RBX: 00007f57c7025fa0 RCX: 00007f57c6d9e559 [ 1982.800613][T23352] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000006 [ 1982.800623][T23352] RBP: 00007f57c6e35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1982.800634][T23352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1982.800645][T23352] R13: 00007f57c7026038 R14: 00007f57c7025fa0 R15: 00007fff0c332f38 [ 1982.800670][T23352] [ 1982.800722][T23352] FAULT_INJECTION: forcing a failure. [ 1982.800722][T23352] name failslab, interval 1, probability 5, space 0, times 9997 [ 1982.800745][T23352] CPU: 0 UID: 0 PID: 23352 Comm: syz.8.4356 Tainted: G L syzkaller #0 PREEMPT(full) [ 1982.800770][T23352] Tainted: [L]=SOFTLOCKUP [ 1982.800777][T23352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1982.800789][T23352] Call Trace: [ 1982.800796][T23352] [ 1982.800803][T23352] dump_stack_lvl+0x100/0x190 [ 1982.800832][T23352] should_fail_ex.cold+0x5/0xa [ 1982.800858][T23352] should_failslab+0xc2/0x120 [ 1982.800884][T23352] __kmalloc_cache_noprof+0x91/0x6d0 [ 1982.800903][T23352] ? __pfx___debug_object_init+0x10/0x10 [ 1982.800920][T23352] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 1982.800949][T23352] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 1982.800975][T23352] vidtv_mux_create_pid_ctx_once+0xe6/0x140 [ 1982.801000][T23352] vidtv_mux_init+0x725/0xbf0 [ 1982.801025][T23352] vidtv_start_feed+0x34e/0x500 [ 1982.801054][T23352] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1982.801079][T23352] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1982.801103][T23352] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1982.801135][T23352] ? mark_held_locks+0x40/0x70 [ 1982.801159][T23352] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1982.801184][T23352] dmx_ts_feed_start_filtering+0xf6/0x220 [ 1982.801205][T23352] dvb_dmxdev_start_feed+0x273/0x3f0 [ 1982.801232][T23352] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 1982.801264][T23352] dvb_demux_do_ioctl+0x786/0x1200 [ 1982.801290][T23352] ? do_vfs_ioctl+0x226/0x13e0 [ 1982.801315][T23352] dvb_usercopy+0x167/0x340 [ 1982.801336][T23352] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1982.801367][T23352] ? __pfx_dvb_usercopy+0x10/0x10 [ 1982.801388][T23352] ? __fget_files+0x34/0x3d0 [ 1982.801422][T23352] ? selinux_file_ioctl+0x13b/0x290 [ 1982.801445][T23352] ? selinux_file_ioctl+0xb6/0x290 [ 1982.801475][T23352] dvb_demux_ioctl+0x29/0x40 [ 1982.801498][T23352] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1982.801522][T23352] __x64_sys_ioctl+0x18e/0x210 [ 1982.801547][T23352] do_syscall_64+0x123/0x790 [ 1982.801574][T23352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1982.801591][T23352] RIP: 0033:0x7f57c6d9e559 [ 1982.801605][T23352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1982.801621][T23352] RSP: 002b:00007f57c7d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1982.801637][T23352] RAX: ffffffffffffffda RBX: 00007f57c7025fa0 RCX: 00007f57c6d9e559 [ 1982.801648][T23352] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000006 [ 1982.801659][T23352] RBP: 00007f57c6e35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1982.801670][T23352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1982.801681][T23352] R13: 00007f57c7026038 R14: 00007f57c7025fa0 R15: 00007fff0c332f38 [ 1982.801711][T23352] [ 1984.056979][T23363] FAULT_INJECTION: forcing a failure. [ 1984.056979][T23363] name failslab, interval 1, probability 5, space 0, times 10000 [ 1984.057011][T23363] CPU: 1 UID: 0 PID: 23363 Comm: syz.8.4359 Tainted: G L syzkaller #0 PREEMPT(full) [ 1984.057036][T23363] Tainted: [L]=SOFTLOCKUP [ 1984.057042][T23363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1984.057054][T23363] Call Trace: [ 1984.057060][T23363] [ 1984.057068][T23363] dump_stack_lvl+0x100/0x190 [ 1984.057100][T23363] should_fail_ex.cold+0x5/0xa [ 1984.057124][T23363] should_failslab+0xc2/0x120 [ 1984.057154][T23363] __kmalloc_cache_noprof+0x91/0x6d0 [ 1984.057173][T23363] ? lock_acquire+0x1d1/0x380 [ 1984.057193][T23363] ? dvb_dmxdev_add_pid+0x14f/0x4f0 [ 1984.057222][T23363] dvb_dmxdev_add_pid+0x14f/0x4f0 [ 1984.057250][T23363] dvb_demux_do_ioctl+0x6b5/0x1200 [ 1984.057282][T23363] dvb_usercopy+0x167/0x340 [ 1984.057304][T23363] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1984.057330][T23363] ? __pfx_dvb_usercopy+0x10/0x10 [ 1984.057353][T23363] ? __fget_files+0x34/0x3d0 [ 1984.057389][T23363] ? selinux_file_ioctl+0x13b/0x290 [ 1984.057419][T23363] ? selinux_file_ioctl+0xb6/0x290 [ 1984.057446][T23363] dvb_demux_ioctl+0x29/0x40 [ 1984.057467][T23363] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1984.057490][T23363] __x64_sys_ioctl+0x18e/0x210 [ 1984.057513][T23363] do_syscall_64+0x123/0x790 [ 1984.057543][T23363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1984.057562][T23363] RIP: 0033:0x7f57c6d9e559 [ 1984.057578][T23363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1984.057594][T23363] RSP: 002b:00007f57c7d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1984.057612][T23363] RAX: ffffffffffffffda RBX: 00007f57c7025fa0 RCX: 00007f57c6d9e559 [ 1984.057623][T23363] RDX: 00002000000016c0 RSI: 0000000040146f2c RDI: 0000000000000006 [ 1984.057635][T23363] RBP: 00007f57c6e35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1984.057645][T23363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1984.057655][T23363] R13: 00007f57c7026038 R14: 00007f57c7025fa0 R15: 00007fff0c332f38 [ 1984.057681][T23363] [ 1984.084844][T23363] FAULT_INJECTION: forcing a failure. [ 1984.084844][T23363] name failslab, interval 1, probability 5, space 0, times 9999 [ 1984.084875][T23363] CPU: 1 UID: 0 PID: 23363 Comm: syz.8.4359 Tainted: G L syzkaller #0 PREEMPT(full) [ 1984.084901][T23363] Tainted: [L]=SOFTLOCKUP [ 1984.084908][T23363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1984.084919][T23363] Call Trace: [ 1984.084926][T23363] [ 1984.084933][T23363] dump_stack_lvl+0x100/0x190 [ 1984.084961][T23363] should_fail_ex.cold+0x5/0xa [ 1984.084985][T23363] should_failslab+0xc2/0x120 [ 1984.085012][T23363] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1984.085033][T23363] ? __pfx_map_id_range_down+0x10/0x10 [ 1984.085054][T23363] ? rcu_is_watching+0x13/0xc0 [ 1984.085077][T23363] ? security_inode_alloc+0x3b/0x2c0 [ 1984.085105][T23363] security_inode_alloc+0x3b/0x2c0 [ 1984.085129][T23363] inode_init_always_gfp+0xc6f/0xfb0 [ 1984.085158][T23363] alloc_inode+0x8e/0x250 [ 1984.085180][T23363] sock_alloc+0x44/0x280 [ 1984.085198][T23363] ? security_socket_create+0x7f/0x250 [ 1984.085221][T23363] __sock_create+0xc2/0x860 [ 1984.085251][T23363] __sys_socket+0x14d/0x260 [ 1984.085275][T23363] ? __pfx___sys_socket+0x10/0x10 [ 1984.085306][T23363] __x64_sys_socket+0x72/0xb0 [ 1984.085328][T23363] ? lockdep_hardirqs_on+0x7d/0x110 [ 1984.085353][T23363] do_syscall_64+0x123/0x790 [ 1984.085380][T23363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1984.085398][T23363] RIP: 0033:0x7f57c6d9e559 [ 1984.085419][T23363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1984.085436][T23363] RSP: 002b:00007f57c7d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1984.085453][T23363] RAX: ffffffffffffffda RBX: 00007f57c7025fa0 RCX: 00007f57c6d9e559 [ 1984.085465][T23363] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010 [ 1984.085476][T23363] RBP: 00007f57c6e35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1984.085486][T23363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1984.085497][T23363] R13: 00007f57c7026038 R14: 00007f57c7025fa0 R15: 00007fff0c332f38 [ 1984.085522][T23363] [ 1984.085609][T23363] socket: no more sockets [ 1986.223128][T23383] sctp_transport_update_pmtu: 48 callbacks suppressed [ 1986.223279][T23383] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1986.225201][T23383] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1986.227073][T23383] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1986.229663][T23383] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1986.231936][T23383] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1986.233892][T23383] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1986.235846][T23383] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1986.236887][T23383] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1986.238140][T23383] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1986.239132][T23383] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1986.798400][ T30] audit: type=1400 audit(1792455677.756:8333): avc: denied { read } for pid=23392 comm="syz.9.4366" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1986.800366][ T30] audit: type=1400 audit(1792455677.756:8334): avc: denied { open } for pid=23392 comm="syz.9.4366" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1987.974707][T23396] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1987.979556][T23396] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1988.062364][T23396] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1988.062445][T23396] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1988.215104][T23406] PKCS7: Unsupported SignerInfo version [ 1988.937487][T23396] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1988.937547][T23396] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1989.129882][T23396] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1989.129973][T23396] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1989.150565][T23413] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4368'. [ 1989.152457][T23396] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1989.153404][T23396] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1990.097482][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 1990.159032][T23422] netlink: 'syz.6.4370': attribute type 2 has an invalid length. [ 1990.268746][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 1991.132677][T23431] FAULT_INJECTION: forcing a failure. [ 1991.132677][T23431] name failslab, interval 1, probability 5, space 0, times 10000 [ 1991.132712][T23431] CPU: 0 UID: 0 PID: 23431 Comm: syz.8.4371 Tainted: G L syzkaller #0 PREEMPT(full) [ 1991.132739][T23431] Tainted: [L]=SOFTLOCKUP [ 1991.132748][T23431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1991.132761][T23431] Call Trace: [ 1991.132767][T23431] [ 1991.132775][T23431] dump_stack_lvl+0x100/0x190 [ 1991.132809][T23431] should_fail_ex.cold+0x5/0xa [ 1991.132837][T23431] should_failslab+0xc2/0x120 [ 1991.132866][T23431] __kmalloc_node_noprof+0xff/0x880 [ 1991.132891][T23431] ? __get_vm_area_node+0x1ff/0x350 [ 1991.132917][T23431] ? __get_vm_area_node+0x22b/0x350 [ 1991.132942][T23431] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 1991.132976][T23431] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 1991.133007][T23431] ? lock_acquire+0x1d1/0x380 [ 1991.133036][T23431] ? dvb_dmxdev_filter_start+0x914/0xdd0 [ 1991.133072][T23431] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1991.133107][T23431] ? __pfx___mutex_lock+0x10/0x10 [ 1991.133139][T23431] ? dvb_dmxdev_filter_start+0x914/0xdd0 [ 1991.133176][T23431] __vmalloc_node_noprof+0xad/0xf0 [ 1991.133206][T23431] ? dvb_dmxdev_filter_start+0x914/0xdd0 [ 1991.133241][T23431] dvb_dmxdev_filter_start+0x914/0xdd0 [ 1991.133276][T23431] dvb_demux_do_ioctl+0x786/0x1200 [ 1991.133304][T23431] ? do_vfs_ioctl+0x226/0x13e0 [ 1991.133331][T23431] dvb_usercopy+0x167/0x340 [ 1991.133354][T23431] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1991.133380][T23431] ? __pfx_dvb_usercopy+0x10/0x10 [ 1991.133402][T23431] ? __fget_files+0x34/0x3d0 [ 1991.133438][T23431] ? selinux_file_ioctl+0x13b/0x290 [ 1991.133466][T23431] ? selinux_file_ioctl+0xb6/0x290 [ 1991.133499][T23431] dvb_demux_ioctl+0x29/0x40 [ 1991.133524][T23431] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1991.133552][T23431] __x64_sys_ioctl+0x18e/0x210 [ 1991.133580][T23431] do_syscall_64+0x123/0x790 [ 1991.133612][T23431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1991.133633][T23431] RIP: 0033:0x7f57c6d9e559 [ 1991.133651][T23431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1991.133668][T23431] RSP: 002b:00007f57c7d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1991.133690][T23431] RAX: ffffffffffffffda RBX: 00007f57c7025fa0 RCX: 00007f57c6d9e559 [ 1991.133704][T23431] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000006 [ 1991.133717][T23431] RBP: 00007f57c6e35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1991.133730][T23431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1991.133744][T23431] R13: 00007f57c7026038 R14: 00007f57c7025fa0 R15: 00007fff0c332f38 [ 1991.133774][T23431] [ 1991.272982][T23431] FAULT_INJECTION: forcing a failure. [ 1991.272982][T23431] name failslab, interval 1, probability 5, space 0, times 9999 [ 1991.273037][T23431] CPU: 1 UID: 0 PID: 23431 Comm: syz.8.4371 Tainted: G L syzkaller #0 PREEMPT(full) [ 1991.273061][T23431] Tainted: [L]=SOFTLOCKUP [ 1991.273068][T23431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1991.273080][T23431] Call Trace: [ 1991.273087][T23431] [ 1991.273095][T23431] dump_stack_lvl+0x100/0x190 [ 1991.273126][T23431] should_fail_ex.cold+0x5/0xa [ 1991.273151][T23431] should_failslab+0xc2/0x120 [ 1991.273178][T23431] __kmalloc_noprof+0xfc/0x840 [ 1991.273201][T23431] ? rcu_is_watching+0x13/0xc0 [ 1991.273249][T23431] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1991.273273][T23431] tomoyo_realpath_from_path+0xb6/0x690 [ 1991.273299][T23431] tomoyo_path_number_perm+0x23c/0x580 [ 1991.273323][T23431] ? tomoyo_path_number_perm+0x22e/0x580 [ 1991.273349][T23431] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1991.273376][T23431] ? __pfx_futex_wait+0x10/0x10 [ 1991.273402][T23431] ? __lock_acquire+0x5c0/0x1f40 [ 1991.273434][T23431] ? __fget_files+0x34/0x3d0 [ 1991.273458][T23431] ? find_held_lock+0x2b/0x80 [ 1991.273482][T23431] ? hook_file_ioctl_common+0x140/0x440 [ 1991.273507][T23431] ? __fget_files+0x21f/0x3d0 [ 1991.273535][T23431] security_file_ioctl+0xd3/0x230 [ 1991.273561][T23431] __x64_sys_ioctl+0xb7/0x210 [ 1991.273584][T23431] do_syscall_64+0x123/0x790 [ 1991.273612][T23431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1991.273629][T23431] RIP: 0033:0x7f57c6d9e559 [ 1991.273645][T23431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1991.273667][T23431] RSP: 002b:00007f57c7d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1991.273685][T23431] RAX: ffffffffffffffda RBX: 00007f57c7025fa0 RCX: 00007f57c6d9e559 [ 1991.273696][T23431] RDX: 0000000000001000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 1991.273708][T23431] RBP: 00007f57c6e35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1991.273719][T23431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1991.273729][T23431] R13: 00007f57c7026038 R14: 00007f57c7025fa0 R15: 00007fff0c332f38 [ 1991.273754][T23431] [ 1991.277088][T23431] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1991.277202][T23431] FAULT_INJECTION: forcing a failure. [ 1991.277202][T23431] name failslab, interval 1, probability 5, space 0, times 9998 [ 1991.277228][T23431] CPU: 1 UID: 0 PID: 23431 Comm: syz.8.4371 Tainted: G L syzkaller #0 PREEMPT(full) [ 1991.277256][T23431] Tainted: [L]=SOFTLOCKUP [ 1991.277264][T23431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1991.277276][T23431] Call Trace: [ 1991.277283][T23431] [ 1991.277291][T23431] dump_stack_lvl+0x100/0x190 [ 1991.277320][T23431] should_fail_ex.cold+0x5/0xa [ 1991.277345][T23431] should_failslab+0xc2/0x120 [ 1991.277371][T23431] __kmalloc_cache_noprof+0x91/0x6d0 [ 1991.277391][T23431] ? kvm_init_irq_routing+0x43/0xf0 [ 1991.277408][T23431] ? kvm_dev_ioctl+0xb48/0x1b50 [ 1991.277432][T23431] kvm_dev_ioctl+0xb48/0x1b50 [ 1991.277460][T23431] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1991.277485][T23431] ? selinux_file_ioctl+0x13b/0x290 [ 1991.277509][T23431] ? selinux_file_ioctl+0xb6/0x290 [ 1991.277535][T23431] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1991.277557][T23431] __x64_sys_ioctl+0x18e/0x210 [ 1991.277580][T23431] do_syscall_64+0x123/0x790 [ 1991.277607][T23431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1991.277625][T23431] RIP: 0033:0x7f57c6d9e559 [ 1991.277640][T23431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1991.277656][T23431] RSP: 002b:00007f57c7d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1991.277681][T23431] RAX: ffffffffffffffda RBX: 00007f57c7025fa0 RCX: 00007f57c6d9e559 [ 1991.277693][T23431] RDX: 0000000000001000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 1991.277704][T23431] RBP: 00007f57c6e35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1991.277714][T23431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1991.277725][T23431] R13: 00007f57c7026038 R14: 00007f57c7025fa0 R15: 00007fff0c332f38 [ 1991.277748][T23431] [ 1991.294817][T22733] Bluetooth: hci3: command 0x206a tx timeout [ 1991.294849][T22733] Bluetooth: hci0: command 0x0406 tx timeout [ 1991.294960][ T5612] Bluetooth: hci1: command 0x0406 tx timeout [ 1991.488460][T18981] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 1991.693737][T18981] usb 7-1: Using ep0 maxpacket: 16 [ 1991.719528][T18981] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1991.736713][T18981] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 1991.736741][T18981] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 1991.736766][T18981] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 1991.736785][T18981] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 1991.736802][T18981] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1991.736820][T18981] usb 7-1: config 0 has no interface number 0 [ 1991.736852][T18981] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1991.736877][T18981] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1991.736898][T18981] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1991.736923][T18981] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1991.736947][T18981] usb 7-1: config 0 interface 125 has no altsetting 0 [ 1991.784059][T18981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.784085][T18981] usb 7-1: Product: syz [ 1991.784101][T18981] usb 7-1: Manufacturer: syz [ 1991.784116][T18981] usb 7-1: SerialNumber: syz [ 1991.863332][T18981] usb 7-1: config 0 descriptor?? [ 1992.036647][T19393] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1992.285527][T19393] usb 2-1: Using ep0 maxpacket: 32 [ 1992.320693][T19393] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1992.320833][T19393] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1992.321454][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 1992.409406][T23449] sctp_transport_update_pmtu: 102 callbacks suppressed [ 1992.409472][T23449] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1992.410390][T23449] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1992.411299][T23449] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1992.412526][T23449] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1992.417638][T23449] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1992.418975][T23449] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1992.420185][T23449] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1992.422078][T23449] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1992.423900][T23449] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1992.425574][T23449] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1992.429346][T19393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.429409][T19393] usb 2-1: Product: syz [ 1992.429794][T19393] usb 2-1: Manufacturer: syz [ 1992.429834][T19393] usb 2-1: SerialNumber: syz [ 1992.492157][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 1992.550040][ C1] usb 7-1: async_complete: urb error -71 [ 1992.550147][ C1] usb 7-1: async_complete: urb error -71 [ 1992.550394][ C1] usb 7-1: async_complete: urb error -71 [ 1992.550455][ C1] usb 7-1: async_complete: urb error -71 [ 1992.552384][T18981] get_1284_register: usb error -71 [ 1992.562504][T18981] usb 7-1: USB disconnect, device number 115 [ 1992.649355][T23452] ceph: No source [ 1993.524724][ T5612] Bluetooth: hci1: command 0x0406 tx timeout [ 1993.524766][ T5612] Bluetooth: hci0: command 0x0406 tx timeout [ 1993.524788][ T5612] Bluetooth: hci3: command 0x206a tx timeout [ 1993.618858][ T5604] Bluetooth: hci2: unexpected event for opcode 0x0035 [ 1994.143552][T23469] netlink: 'syz.9.4384': attribute type 2 has an invalid length. [ 1996.223587][T19393] usb 2-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 1996.223975][T19393] usb 2-1: incorrect wMaxPacketSize 0x200 for BADD profile [ 1996.302338][T19393] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1996.329879][T19393] usb 2-1: USB disconnect, device number 22 [ 1996.506826][T23481] netlink: 'syz.8.4385': attribute type 2 has an invalid length. [ 1996.902637][T23478] FAULT_INJECTION: forcing a failure. [ 1996.902637][T23478] name failslab, interval 1, probability 5, space 0, times 9997 [ 1996.902669][T23478] CPU: 1 UID: 0 PID: 23478 Comm: syz.6.4387 Tainted: G L syzkaller #0 PREEMPT(full) [ 1996.902693][T23478] Tainted: [L]=SOFTLOCKUP [ 1996.902700][T23478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1996.902712][T23478] Call Trace: [ 1996.902719][T23478] [ 1996.902727][T23478] dump_stack_lvl+0x100/0x190 [ 1996.902759][T23478] should_fail_ex.cold+0x5/0xa [ 1996.902786][T23478] should_failslab+0xc2/0x120 [ 1996.902815][T23478] __kvmalloc_node_noprof+0x113/0x9b0 [ 1996.902843][T23478] ? traverse.part.0.constprop.0+0x397/0x650 [ 1996.902875][T23478] traverse.part.0.constprop.0+0x397/0x650 [ 1996.902902][T23478] ? lock_acquire+0x1d1/0x380 [ 1996.902923][T23478] ? __might_fault+0xc5/0x140 [ 1996.902948][T23478] seq_read_iter+0x93f/0x1270 [ 1996.902985][T23478] seq_read+0x344/0x4d0 [ 1996.903011][T23478] ? __pfx_seq_read+0x10/0x10 [ 1996.903041][T23478] ? avc_policy_seqno+0x9/0x20 [ 1996.903060][T23478] ? selinux_file_permission+0x8f/0x6d0 [ 1996.903101][T23478] ? rw_verify_area+0xce/0x6d0 [ 1996.903121][T23478] ? __pfx_seq_read+0x10/0x10 [ 1996.903147][T23478] vfs_read+0x1e4/0xb40 [ 1996.903170][T23478] ? lock_acquire+0x1d1/0x380 [ 1996.903190][T23478] ? __fget_files+0x34/0x3d0 [ 1996.903217][T23478] ? __pfx_vfs_read+0x10/0x10 [ 1996.903237][T23478] ? find_held_lock+0x2b/0x80 [ 1996.903263][T23478] ? __fget_files+0x215/0x3d0 [ 1996.903289][T23478] ? __fget_files+0x215/0x3d0 [ 1996.903320][T23478] ? __fget_files+0x21f/0x3d0 [ 1996.903352][T23478] __x64_sys_pread64+0x1eb/0x250 [ 1996.903376][T23478] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1996.903408][T23478] do_syscall_64+0x123/0x790 [ 1996.903439][T23478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1996.903458][T23478] RIP: 0033:0x7fb28119e559 [ 1996.903474][T23478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1996.903491][T23478] RSP: 002b:00007fb281f88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1996.903510][T23478] RAX: ffffffffffffffda RBX: 00007fb281425fa0 RCX: 00007fb28119e559 [ 1996.903522][T23478] RDX: 0000000000000074 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1996.903535][T23478] RBP: 00007fb281f88090 R08: 0000000000000000 R09: 0000000000000000 [ 1996.903547][T23478] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 1996.903558][T23478] R13: 00007fb281426038 R14: 00007fb281425fa0 R15: 00007fff5ccdbb28 [ 1996.903583][T23478] [ 1997.412440][ T30] audit: type=1400 audit(1792455687.690:8335): avc: denied { name_bind } for pid=23479 comm="syz.1.4388" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1998.688204][T23499] ip_tables: iptables: counters copy to user failed while replacing table [ 1998.863895][T19393] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1999.035825][T19393] usb 9-1: Using ep0 maxpacket: 16 [ 1999.036577][T19393] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1999.037557][T19393] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 1999.037582][T19393] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 1999.037602][T19393] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 1999.037620][T19393] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 1999.037638][T19393] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1999.037655][T19393] usb 9-1: config 0 has no interface number 0 [ 1999.037688][T19393] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1999.037712][T19393] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1999.037732][T19393] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1999.037760][T19393] usb 9-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1999.037784][T19393] usb 9-1: config 0 interface 125 has no altsetting 0 [ 1999.039612][T19393] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.039635][T19393] usb 9-1: Product: syz [ 1999.039650][T19393] usb 9-1: Manufacturer: syz [ 1999.039665][T19393] usb 9-1: SerialNumber: syz [ 1999.042019][T19393] usb 9-1: config 0 descriptor?? [ 1999.261968][ C0] usb 9-1: async_complete: urb error -71 [ 1999.262095][ C0] usb 9-1: async_complete: urb error -71 [ 1999.262381][ C0] usb 9-1: async_complete: urb error -71 [ 1999.262448][ C0] usb 9-1: async_complete: urb error -71 [ 1999.262489][T19393] get_1284_register: usb error -71 [ 1999.267316][T19393] usb 9-1: USB disconnect, device number 43 [ 1999.387742][T18325] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1999.569522][T18325] usb 10-1: Using ep0 maxpacket: 32 [ 1999.571265][T18325] usb 10-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 1999.576136][T18325] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1999.576186][T18325] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1999.576241][T18325] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1999.576369][T18325] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1999.600495][T18325] usb 10-1: config 0 descriptor?? [ 2000.067212][T23521] binder: 23517:23521 ioctl 4018620d 0 returned -22 [ 2000.527663][ T5604] Bluetooth: hci3: unexpected event for opcode 0x0035 [ 2000.647335][T18325] hid_parser_main: 32 callbacks suppressed [ 2000.647360][T18325] hid-alps 0003:044E:120B.0039: unknown main item tag 0x0 [ 2000.647384][T18325] hid-alps 0003:044E:120B.0039: unknown main item tag 0x0 [ 2000.647405][T18325] hid-alps 0003:044E:120B.0039: unknown main item tag 0x0 [ 2000.647437][T18325] hid-alps 0003:044E:120B.0039: unknown main item tag 0x0 [ 2000.647458][T18325] hid-alps 0003:044E:120B.0039: unknown main item tag 0x0 [ 2000.647478][T18325] hid-alps 0003:044E:120B.0039: unknown main item tag 0x0 [ 2000.647499][T18325] hid-alps 0003:044E:120B.0039: unknown main item tag 0x0 [ 2000.647519][T18325] hid-alps 0003:044E:120B.0039: unknown main item tag 0x0 [ 2000.647539][T18325] hid-alps 0003:044E:120B.0039: unknown main item tag 0x0 [ 2000.647564][T18325] hid-alps 0003:044E:120B.0039: unknown main item tag 0x0 [ 2000.647607][T18325] hid-alps 0003:044E:120B.0039: unbalanced collection at end of report description [ 2000.667241][T18325] hid-alps 0003:044E:120B.0039: parse failed [ 2000.667322][T18325] hid-alps 0003:044E:120B.0039: probe with driver hid-alps failed with error -22 [ 2000.968796][ T5604] Bluetooth: hci4: unexpected event for opcode 0x0035 [ 2001.172914][T19393] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2001.597474][T19393] usb 2-1: Using ep0 maxpacket: 32 [ 2001.641438][T19393] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 2001.730202][T19393] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 2001.730239][T19393] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2001.730264][T19393] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2001.730295][T19393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2002.025501][T19393] usb 2-1: config 0 descriptor?? [ 2002.553535][T18981] usb 10-1: USB disconnect, device number 20 [ 2002.611747][ T30] audit: type=1400 audit(1792455692.545:8336): avc: denied { setopt } for pid=23536 comm="syz.9.4403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2002.622575][ T30] audit: type=1400 audit(1792455692.554:8337): avc: denied { read } for pid=23536 comm="syz.9.4403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2002.679762][ T30] audit: type=1400 audit(1792455692.601:8338): avc: denied { setopt } for pid=23536 comm="syz.9.4403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2002.701196][T19393] hid-alps 0003:044E:120B.003A: unbalanced collection at end of report description [ 2002.703452][T19393] hid-alps 0003:044E:120B.003A: parse failed [ 2002.703522][T19393] hid-alps 0003:044E:120B.003A: probe with driver hid-alps failed with error -22 [ 2003.475047][T23543] ================================================================== [ 2003.475063][T23543] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 2003.475096][T23543] Read of size 8 at addr ffff88802e60d618 by task syz.5.4404/23543 [ 2003.475109][T23543] [ 2003.475118][T23543] CPU: 0 UID: 0 PID: 23543 Comm: syz.5.4404 Tainted: G L syzkaller #0 PREEMPT(full) [ 2003.475134][T23543] Tainted: [L]=SOFTLOCKUP [ 2003.475138][T23543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2003.475146][T23543] Call Trace: [ 2003.475152][T23543] [ 2003.475157][T23543] dump_stack_lvl+0x100/0x190 [ 2003.475175][T23543] print_report+0x13d/0x4b0 [ 2003.475191][T23543] ? __virt_addr_valid+0x239/0x430 [ 2003.475205][T23543] ? dvb_device_open+0x33f/0x3b0 [ 2003.475218][T23543] kasan_report+0xdf/0x1c0 [ 2003.475236][T23543] ? dvb_device_open+0x33f/0x3b0 [ 2003.475251][T23543] ? __pfx_dvb_device_open+0x10/0x10 [ 2003.475266][T23543] dvb_device_open+0x33f/0x3b0 [ 2003.475280][T23543] ? __pfx_dvb_device_open+0x10/0x10 [ 2003.475294][T23543] chrdev_open+0x234/0x6a0 [ 2003.475311][T23543] ? __pfx_chrdev_open+0x10/0x10 [ 2003.475327][T23543] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 2003.475344][T23543] do_dentry_open+0x6ab/0x14d0 [ 2003.475358][T23543] ? __pfx_chrdev_open+0x10/0x10 [ 2003.475374][T23543] vfs_open+0x82/0x3f0 [ 2003.475391][T23543] path_openat+0x1a23/0x2450 [ 2003.475408][T23543] ? __pfx_path_openat+0x10/0x10 [ 2003.475426][T23543] do_file_open+0x20e/0x430 [ 2003.475442][T23543] ? __pfx_do_file_open+0x10/0x10 [ 2003.475463][T23543] ? _raw_spin_unlock+0x28/0x50 [ 2003.475477][T23543] ? alloc_fd+0x471/0x7a0 [ 2003.475495][T23543] do_sys_openat2+0x10f/0x1e0 [ 2003.475505][T23543] ? __pfx_do_sys_openat2+0x10/0x10 [ 2003.475516][T23543] ? fput+0x7c/0x100 [ 2003.475533][T23543] __x64_sys_openat+0x12d/0x210 [ 2003.475543][T23543] ? __pfx___x64_sys_openat+0x10/0x10 [ 2003.475557][T23543] do_syscall_64+0x123/0x790 [ 2003.475574][T23543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2003.475587][T23543] RIP: 0033:0x7fc60cd5ed8e [ 2003.475598][T23543] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2003.475609][T23543] RSP: 002b:00007fc60dc2bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2003.475621][T23543] RAX: ffffffffffffffda RBX: 00007fc60dc2c6c0 RCX: 00007fc60cd5ed8e [ 2003.475629][T23543] RDX: 0000000000000002 RSI: 00007fc60dc2bc00 RDI: ffffffffffffff9c [ 2003.475636][T23543] RBP: 00007fc60dc2bc00 R08: 0000000000000000 R09: 0000000000000000 [ 2003.475643][T23543] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 2003.475658][T23543] R13: 00007fc60d026218 R14: 00007fc60d026180 R15: 00007fff360de9f8 [ 2003.475673][T23543] [ 2003.475678][T23543] [ 2003.475681][T23543] Allocated by task 1: [ 2003.475687][T23543] kasan_save_stack+0x30/0x50 [ 2003.475702][T23543] kasan_save_track+0x14/0x30 [ 2003.475716][T23543] __kasan_kmalloc+0xaa/0xb0 [ 2003.475730][T23543] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 2003.475741][T23543] dvb_register_device+0x1d6/0x1e20 [ 2003.475754][T23543] dvb_register_frontend+0x552/0x820 [ 2003.475766][T23543] vidtv_bridge_probe+0x44b/0xa30 [ 2003.475782][T23543] platform_probe+0x106/0x1d0 [ 2003.475795][T23543] really_probe+0x241/0xa60 [ 2003.475808][T23543] __driver_probe_device+0x210/0x460 [ 2003.475821][T23543] driver_probe_device+0x4a/0x140 [ 2003.475835][T23543] __driver_attach+0x21f/0x5b0 [ 2003.475850][T23543] bus_for_each_dev+0x13e/0x1d0 [ 2003.475868][T23543] bus_add_driver+0x305/0x5b0 [ 2003.475889][T23543] driver_register+0x1e2/0x360 [ 2003.475904][T23543] vidtv_bridge_init+0x52/0x80 [ 2003.475919][T23543] do_one_initcall+0x11c/0x6f0 [ 2003.475936][T23543] kernel_init_freeable+0x6ea/0x7b0 [ 2003.475956][T23543] kernel_init+0x21/0x1e0 [ 2003.475972][T23543] ret_from_fork+0x730/0xd60 [ 2003.475986][T23543] ret_from_fork_asm+0x1a/0x30 [ 2003.475996][T23543] [ 2003.475999][T23543] Freed by task 23346: [ 2003.476005][T23543] kasan_save_stack+0x30/0x50 [ 2003.476018][T23543] kasan_save_track+0x14/0x30 [ 2003.476031][T23543] kasan_save_free_info+0x3b/0x70 [ 2003.476042][T23543] __kasan_slab_free+0x5f/0x80 [ 2003.476056][T23543] kfree+0x22b/0x6d0 [ 2003.476065][T23543] dvb_device_put.part.0+0x57/0x90 [ 2003.476077][T23543] dvb_device_open+0x2ba/0x3b0 [ 2003.476090][T23543] chrdev_open+0x234/0x6a0 [ 2003.476104][T23543] do_dentry_open+0x6ab/0x14d0 [ 2003.476116][T23543] vfs_open+0x82/0x3f0 [ 2003.476130][T23543] path_openat+0x1a23/0x2450 [ 2003.476145][T23543] do_file_open+0x20e/0x430 [ 2003.476161][T23543] do_sys_openat2+0x10f/0x1e0 [ 2003.476170][T23543] __x64_sys_openat+0x12d/0x210 [ 2003.476178][T23543] do_syscall_64+0x123/0x790 [ 2003.476193][T23543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2003.476203][T23543] [ 2003.476205][T23543] The buggy address belongs to the object at ffff88802e60d600 [ 2003.476205][T23543] which belongs to the cache kmalloc-256 of size 256 [ 2003.476214][T23543] The buggy address is located 24 bytes inside of [ 2003.476214][T23543] freed 256-byte region [ffff88802e60d600, ffff88802e60d700) [ 2003.476225][T23543] [ 2003.476228][T23543] The buggy address belongs to the physical page: [ 2003.476233][T23543] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802e60d600 pfn:0x2e60c [ 2003.476244][T23543] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2003.476253][T23543] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 2003.476264][T23543] page_type: f5(slab) [ 2003.476289][T23543] raw: 00fff00000000240 ffff88801d032b40 ffffea0001e80b10 ffffea0001fdc610 [ 2003.476299][T23543] raw: ffff88802e60d600 000000000010000f 00000000f5000000 0000000000000000 [ 2003.476309][T23543] head: 00fff00000000240 ffff88801d032b40 ffffea0001e80b10 ffffea0001fdc610 [ 2003.476319][T23543] head: ffff88802e60d600 000000000010000f 00000000f5000000 0000000000000000 [ 2003.476329][T23543] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 2003.476339][T23543] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 2003.476346][T23543] page dumped because: kasan: bad access detected [ 2003.476351][T23543] page_owner tracks the page as allocated [ 2003.476355][T23543] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9433720904 [ 2003.476373][T23543] post_alloc_hook+0xfd/0x120 [ 2003.476384][T23543] get_page_from_freelist+0x110d/0x35d0 [ 2003.476396][T23543] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 2003.476408][T23543] new_slab+0xa9/0x6e0 [ 2003.476418][T23543] refill_objects+0xe3/0x410 [ 2003.476429][T23543] __pcs_replace_empty_main+0x35e/0x650 [ 2003.476439][T23543] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 2003.476450][T23543] bus_add_driver+0x92/0x5b0 [ 2003.476464][T23543] driver_register+0x1e2/0x360 [ 2003.476474][T23543] i2c_register_driver+0xd9/0x1f0 [ 2003.476487][T23543] do_one_initcall+0x11c/0x6f0 [ 2003.476498][T23543] kernel_init_freeable+0x6ea/0x7b0 [ 2003.476510][T23543] kernel_init+0x21/0x1e0 [ 2003.476520][T23543] ret_from_fork+0x730/0xd60 [ 2003.476531][T23543] ret_from_fork_asm+0x1a/0x30 [ 2003.476541][T23543] page_owner free stack trace missing [ 2003.476545][T23543] [ 2003.476547][T23543] Memory state around the buggy address: [ 2003.476553][T23543] ffff88802e60d500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2003.476560][T23543] ffff88802e60d580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2003.476568][T23543] >ffff88802e60d600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2003.476573][T23543] ^ [ 2003.476579][T23543] ffff88802e60d680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2003.476586][T23543] ffff88802e60d700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2003.476592][T23543] ================================================================== [ 2003.476620][T23543] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2004.231998][T23543] CPU: 0 UID: 0 PID: 23543 Comm: syz.5.4404 Tainted: G L syzkaller #0 PREEMPT(full) [ 2004.243018][T23543] Tainted: [L]=SOFTLOCKUP [ 2004.247320][T23543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 2004.257355][T23543] Call Trace: [ 2004.260619][T23543] [ 2004.263532][T23543] dump_stack_lvl+0x100/0x190 [ 2004.268215][T23543] vpanic+0x553/0x970 [ 2004.272186][T23543] ? __pfx_vpanic+0x10/0x10 [ 2004.276679][T23543] ? dvb_device_open+0x33f/0x3b0 [ 2004.281605][T23543] panic+0xd1/0xe0 [ 2004.285310][T23543] ? __pfx_panic+0x10/0x10 [ 2004.289715][T23543] ? dvb_device_open+0x33f/0x3b0 [ 2004.294645][T23543] ? preempt_schedule_common+0x3c/0xb0 [ 2004.300094][T23543] check_panic_on_warn.cold+0x19/0x34 [ 2004.305447][T23543] end_report.part.0+0x3a/0x90 [ 2004.310200][T23543] kasan_report.cold+0xe/0x18 [ 2004.314878][T23543] ? dvb_device_open+0x33f/0x3b0 [ 2004.319803][T23543] ? __pfx_dvb_device_open+0x10/0x10 [ 2004.325171][T23543] dvb_device_open+0x33f/0x3b0 [ 2004.329932][T23543] ? __pfx_dvb_device_open+0x10/0x10 [ 2004.335213][T23543] chrdev_open+0x234/0x6a0 [ 2004.339631][T23543] ? __pfx_chrdev_open+0x10/0x10 [ 2004.344581][T23543] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 2004.350894][T23543] do_dentry_open+0x6ab/0x14d0 [ 2004.355660][T23543] ? __pfx_chrdev_open+0x10/0x10 [ 2004.360588][T23543] vfs_open+0x82/0x3f0 [ 2004.364645][T23543] path_openat+0x1a23/0x2450 [ 2004.369224][T23543] ? __pfx_path_openat+0x10/0x10 [ 2004.374156][T23543] do_file_open+0x20e/0x430 [ 2004.378652][T23543] ? __pfx_do_file_open+0x10/0x10 [ 2004.383688][T23543] ? _raw_spin_unlock+0x28/0x50 [ 2004.388539][T23543] ? alloc_fd+0x471/0x7a0 [ 2004.392859][T23543] do_sys_openat2+0x10f/0x1e0 [ 2004.397629][T23543] ? __pfx_do_sys_openat2+0x10/0x10 [ 2004.402808][T23543] ? fput+0x7c/0x100 [ 2004.406703][T23543] __x64_sys_openat+0x12d/0x210 [ 2004.411649][T23543] ? __pfx___x64_sys_openat+0x10/0x10 [ 2004.417094][T23543] do_syscall_64+0x123/0x790 [ 2004.421674][T23543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2004.427550][T23543] RIP: 0033:0x7fc60cd5ed8e [ 2004.431955][T23543] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2004.451557][T23543] RSP: 002b:00007fc60dc2bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2004.459962][T23543] RAX: ffffffffffffffda RBX: 00007fc60dc2c6c0 RCX: 00007fc60cd5ed8e [ 2004.467917][T23543] RDX: 0000000000000002 RSI: 00007fc60dc2bc00 RDI: ffffffffffffff9c [ 2004.475871][T23543] RBP: 00007fc60dc2bc00 R08: 0000000000000000 R09: 0000000000000000 [ 2004.483825][T23543] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 2004.491780][T23543] R13: 00007fc60d026218 R14: 00007fc60d026180 R15: 00007fff360de9f8 [ 2004.499739][T23543] [ 2004.502861][T23543] Kernel Offset: disabled [ 2004.507172][T23543] Rebooting in 86400 seconds..