last executing test programs: 24m8.421418256s ago: executing program 4 (id=1136): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40000c0) epoll_create1(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) 24m7.301014417s ago: executing program 4 (id=1142): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmmsg(r0, &(0x7f0000008580)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x4e}], 0x2, 0x1100, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 24m7.00678559s ago: executing program 4 (id=1146): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e08091b0c"], 0xb) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2082) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x6, 0x2, 0x8001) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 24m4.528201119s ago: executing program 4 (id=1152): syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r0 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) 24m3.516083234s ago: executing program 4 (id=1156): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) syz_open_dev$evdev(&(0x7f0000000240), 0x80000002, 0x88440) syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) socket$igmp(0x2, 0x3, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000480), 0x42, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001500), 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000001640)) syz_open_dev$sndpcmp(&(0x7f0000001680), 0x0, 0xa2c65) pselect6(0x40, &(0x7f0000001780)={0x3, 0x0, 0x7fffffff, 0xfffffffffffffffd, 0x2, 0x0, 0x3, 0x49}, 0x0, &(0x7f00000017c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x26}, 0x0, 0x0) 24m2.939099506s ago: executing program 4 (id=1160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000780)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a00)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000280)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000ac0)="05031c00d3fc142efd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000b00)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 24m2.33526662s ago: executing program 32 (id=1160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000780)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a00)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000280)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000ac0)="05031c00d3fc142efd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000b00)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 23m14.975660572s ago: executing program 5 (id=1333): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180)=0x1000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000100)=0x200, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x0, r4}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x17, r3}, 0x10) 23m14.208868249s ago: executing program 5 (id=1335): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)={0x30, r4, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}]}, 0x30}}, 0x4044800) 23m13.18110223s ago: executing program 5 (id=1340): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x363, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000002c0)="c8ed0ec2aff22b790000000000000000", 0x10) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0xb43}], 0x1, 0x2100, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@delneigh={0x1b, 0x1d, 0x1, 0xc00, 0x0, {0x7, 0x0, 0x0, 0x0, 0x40, 0x96, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 23m11.528315531s ago: executing program 5 (id=1343): setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) r4 = dup(r3) inotify_rm_watch(r4, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) 23m10.418930691s ago: executing program 5 (id=1347): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x4, &(0x7f00002d6000/0x3000)=nil, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='e1my_eprob', 0xa) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f000023a000/0x3000)=nil, 0x3000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000349000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000080)=0x60000000000000, 0x9, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, 0x0) 23m7.48508692s ago: executing program 5 (id=1353): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f00000023c0)=ANY=[@ANYBLOB="6105090703040101037f00720209027beeccb5f646e1de4a29056c35ebb0381f6e9cd94ffed8bbb965673889d2914bfe8fcbe7a9d3ea574900b6daf5db9b8fc0e2c027522e3f391f152612ed1ea1da48353c82c399d392b0c70963a1b9900adffe671080fe1edbc038a7c69b4ee803697fe63299dd77f5750a30a4f7b438cffb19cc4f0c5974d37fee6395d6aeb181ce6d2e0aa31f3aa38d3b30b8eb40b07329"], 0x8b) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000003080), 0xce4, r5}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r5, 0x0, 0x100000000000000}, 0x38) read$dsp(r0, &(0x7f0000000280)=""/189, 0xbd) 22m50.921805303s ago: executing program 33 (id=1353): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f00000023c0)=ANY=[@ANYBLOB="6105090703040101037f00720209027beeccb5f646e1de4a29056c35ebb0381f6e9cd94ffed8bbb965673889d2914bfe8fcbe7a9d3ea574900b6daf5db9b8fc0e2c027522e3f391f152612ed1ea1da48353c82c399d392b0c70963a1b9900adffe671080fe1edbc038a7c69b4ee803697fe63299dd77f5750a30a4f7b438cffb19cc4f0c5974d37fee6395d6aeb181ce6d2e0aa31f3aa38d3b30b8eb40b07329"], 0x8b) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000003080), 0xce4, r5}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r5, 0x0, 0x100000000000000}, 0x38) read$dsp(r0, &(0x7f0000000280)=""/189, 0xbd) 7m32.285899132s ago: executing program 1 (id=3600): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r0 = semget(0x0, 0x1, 0x0) semctl$GETALL(r0, 0x0, 0xd, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @sock_ops}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) 7m30.947486466s ago: executing program 1 (id=3602): socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019180)=0x7) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000192c0)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019300)={0x6, 0x3, &(0x7f00000193c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000019400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000019440)={r6, r5, 0x25, 0x0, @void}, 0x10) 7m29.691504381s ago: executing program 1 (id=3603): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) syz_open_dev$sndctrl(0x0, 0x458, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, 0x0, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='sys_mnt\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='lzo', 0x3) 7m26.590142468s ago: executing program 1 (id=3618): r0 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000500)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019500)=0x7) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0xb53d, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000200)={0xffffeffe, 0x1, 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000019540)=ANY=[@ANYRES16=r0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) 7m23.595764199s ago: executing program 1 (id=3614): openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x105000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000640)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019640)=0x80000000000003) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000019700), 0x88b02, 0x0) write$P9_RSTATu(r4, &(0x7f0000019740)=ANY=[], 0x230) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2982, 0x0) 7m22.491860379s ago: executing program 1 (id=3615): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='1\n', 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) r4 = accept4(r1, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000400)='PASV\r\n', 0x6) write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e) shutdown(r3, 0x2) close(r4) close(r3) close(r1) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 7m14.672706046s ago: executing program 0 (id=3631): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) fchdir(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a31000000000800024000000006140000001100"], 0x50}}, 0x20044084) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) close(r4) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a44000000060a0b0400000000000000000200000018000480140001800a0001007265646972000000040002800900010073797a30000000000900020073797a3200000000140000000c0a010200000000000000008c00000514000000110098c507ebcabf5901000000000000000000f500000a"], 0x80}}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) getdents64(r5, &(0x7f00000001c0)=""/163, 0xba974ed140df4995) getdents64(r5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c20000030180c200000108060001080006040001aaaaaaaaaafcac1414bbaaaaaaaaaabbac1414bb"], 0x0) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01a1000000000000000000000000789a50afc61c999d12e67a4964856b2eade3c1d5850c98c81caa912ded4a35f17c635e46a449a544524abb4dc0f5722d2505fab2aa7725863929ae6e706e523b9556ff70b7398f78539a26b400000000eb27eb14bf9601984d7538473acbe41e6ab32dd85dd0b3a18020ee6b109b9fd46181e564e03f872c1235787d373ba554ed98cee19aafe9285a3171c7a99912e91206aea665507193a635cb6d3291f73a41db61a1c7d2ba0c5620d6ee2724e684fd7198bbf758a0a3e9a40d360185a70039a170d2de6fb4c71b55566a870a99a7deeac0"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000010) 7m8.91496019s ago: executing program 0 (id=3646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000011c0)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in6=@initdev}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000480)=0xe8) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 7m7.539528875s ago: executing program 0 (id=3651): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c, 0x80000) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200105}, 0x1c) r3 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) ioctl$MEMREADOOB64(r3, 0x1269, &(0x7f00000000c0)={0x1}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_FLOW={0x8, 0xb, 0x7}]}, 0x24}}, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x1201}], 0x1, 0x0, &(0x7f00000000c0), 0x8) 7m6.215549447s ago: executing program 34 (id=3615): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='1\n', 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) r4 = accept4(r1, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000400)='PASV\r\n', 0x6) write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e) shutdown(r3, 0x2) close(r4) close(r3) close(r1) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 7m5.312541143s ago: executing program 0 (id=3659): io_uring_setup(0x62d2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r3, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x1f) 6m56.515674359s ago: executing program 0 (id=3677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000003880)=""/191, 0xbf}, {&(0x7f0000000040)=""/18, 0x12}], 0x5}, 0x1}], 0x2, 0x100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000340)="5351e31d94", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x403}, 0x50) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) 6m55.066541965s ago: executing program 0 (id=3680): request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='Ri\x00'/18, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='virtiofs\x00', 0x2200892, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r1, &(0x7f00000003c0), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='pim6reg0\x00', 0x3) 6m38.917399331s ago: executing program 35 (id=3680): request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='Ri\x00'/18, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='virtiofs\x00', 0x2200892, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r1, &(0x7f00000003c0), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='pim6reg0\x00', 0x3) 25.533098589s ago: executing program 7 (id=4437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x4801000000000000}, 0x0) r5 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000580)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={'sha384\x00'}}) r6 = add_key$fscrypt_v1(0x0, &(0x7f00000003c0)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r5, r6) 23.984114713s ago: executing program 7 (id=4440): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r2 = getuid() setresuid(r2, 0x0, r2) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r5, 0x0, 0x2, 0x0) openat$cgroup_type(r5, &(0x7f0000000540), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r4, 0x0}]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x40000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 23.170725442s ago: executing program 6 (id=4442): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 23.094869251s ago: executing program 6 (id=4443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x8fa7, 0x4) listen(r3, 0x10040) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup(r5, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 19.153798898s ago: executing program 6 (id=4447): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r2 = syz_clone(0x400, 0x0, 0xffffffb4, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) process_mrelease(r3, 0x700000000000000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x800) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000480)}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 17.866212567s ago: executing program 2 (id=4450): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r2 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 16.283670096s ago: executing program 7 (id=4453): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x40003) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x40000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) file_setattr(r0, 0x0, &(0x7f0000000000)={0x7000, 0xfffffffc, 0x2, 0x0, 0x402}, 0x18, 0x1000) ioctl$sock_ifreq(r0, 0x8934, &(0x7f0000000000)={'team0\x00', @ifru_addrs=@sco={0x1f, @none}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x79}, 0x94) 14.666749591s ago: executing program 7 (id=4464): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r3 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 14.448415957s ago: executing program 2 (id=4455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f00000034c0)=0x9, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='c', 0xffe0, 0x40000b5, &(0x7f000005ffe4)={0xa, 0x4e23, 0x1000000, @loopback}, 0x1c) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0xd000) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000140)=0x1, 0x4) 13.665224916s ago: executing program 3 (id=4456): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r3 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 12.956664289s ago: executing program 2 (id=4457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000003e00)={r0, &(0x7f0000002b40)='\x02\x02\x02\x02\x02\x02', 0x800, &(0x7f0000002b80)={@_ha_fsid={[0x7, 0x4]}, {0xd1f, 0xd76b, 0x8, 0xa}}, 0x7fffffff, &(0x7f0000003d80)={@_ha_fsid}, 0x0}) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000003f40)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x200080e5}, 0x2002889c) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002a00)={{0xffffffffffffffff, &(0x7f0000000000)='](\x00', 0x183c01, &(0x7f00000000c0)={@align=0x3, {0xca, 0x31, 0x4, 0x7}}, 0x3, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1}, 0x8, &(0x7f0000002900)=[{0x2, 0xffffffb7, &(0x7f0000000240)='\x00', &(0x7f0000000280)="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", 0x1000, 0x8}, {0x1, 0x10000, &(0x7f0000001280)='-\x00', &(0x7f00000012c0)="ff27d57f91e80b572876f08c3da2063060ebed4ed223a588dabb492c4d54cfd1edbfe5f1c20197148de7794a189185081aaa4258d87c1a38e4130dbd57e1bcc90de633676f1fd6ad6d0d6ee0b6e7bcff359e577890da9bf4618ec7b745b38c6a19cc964c4fe70dfefccf3e31e7b009f89ef984551cd0ca99a61359784a5ae2c1941e2e247c2ee1a2c774df3d08058eb749e68800aa6ea368c120521807d707340156932639162c5d973be0b80397f4c80bb20b0f4d1828931819f46247eda7a7f1c5d77ac0fe9f774b8bc775fe5ae3cfbc", 0xd1, 0x2}, {0x0, 0x9, &(0x7f00000013c0)='/^,.\x00', &(0x7f0000001400)="81cf6d9e3a0deaf9295c155b9e0f53418e703ced229385795139d3a1e2ce23e7610061e761e05c999f47c8afb1391bb9107a3b5dd6eab17289a1ac8c4e19e483590628a3a53c031670a306fa3b0a48f3a9a87e9c1b1e637b428683cabd40beb52572e0974b3e59fdc9a0d291b1ba8421ac497bff9470e5d43ed7730c9eb8e68c4e836617d12ce20607244b4dd759ed0f79650807d75b526d6592b05551c45759075f81fc2952e94dda281d2bc08afc1ec757eda36d2530cc271d34650fb022c815b5c1718cb196aaf488ea57c26aaa97", 0xd0}, {0x1, 0xe, &(0x7f0000001500)='syzkaller\x00', &(0x7f0000001540)="c20890ba578aff50631b7aa7ed882ea5ae2d8153d69d5e48834c97b1d410c8136d2afd0b9815b3324c222869c8d820ec6ddfe34f433c13f489ba4f7f041cd9a0ada66a0bf04c3a8a83113d75cb22dd", 0x4f, 0x18}, {0x3, 0x66b90487, &(0x7f00000015c0)='.\x00', &(0x7f0000001600)="ba2d1033b7eae40c9a984e223af9bf908803c0616e8ad44b3374291869406fed806f64df5d6207b9bbbee083f2943780724f07370d8d643f3ac7f01cff00575a4809d4127c8931bc1ed07d7e0919915aefd57a189c1a3c94ab02115999b0937932b9d107cc624990ec3ebe68f9e9fbb2210558f2d83594040141b968628fe1b74acab85007ea1ef046c7042b70fb9e5cf8250926ca3d9210ebb138678f7812e2cd40313da3f68c06e2adab60ace0b0cac9720f0114d2efd0708f7330eb9a74f5904e1e4651afa015aef3c8f28c54b09ef10a2a535db39322b91944bce023b0dc03e06d0a45ce12920aabcfa91bb8578e8ec3ac52d9f299c22edb8cfafce65b9e44d5dfe4c13e72be3ee35352ddf135c93b69de4a4f70fb5f47f76e38d4ad82603c1452d945f1e3db74d71a661c7fb112f37baa6e27500bb03858daffe66dd7be033c0d47f5c3b3d720d2132f75fdcaf72ddaba8e979d367b371e65ed63dd5868cdfc7433ff2869bffbc2d43d3ba0b7b7c580912bf4dbdbae98f31519bb664e8d6277561d49313cf485fd6a0c51af690ad5758a424c25b175dde9342a5b3c23bb915d35b949925247d25d3deafd396c9bcd24039be83a5e76a87adbfbb54ba83dd860688301f9a40b0da910604a2f0501a5dbc7511a5a6d666f6bc05acfc8fabe9f40cc33e3180b1e220a7c5f378711380aa98e9b8b99a5aff0532e1c41cc8c6857a230d750e48aaf756027af2365af34bf3043bfc71181aed1336c0da15cf552a3dc1785b45a60489ad27b7f754978a43e03a0506b088ff06f1008d8944ef9192037005b7a7942fa1a9fcf46094bde0bbb1adb6359b4a0afc991526bc5f77184243d0e72797ba9d11386409fe6236de06c8e5de2bdd3749d3424db3d7eaa8d38272960ee8dfc94976c797707aef2e7c0dd6aae64abad7177bb7619690ca809b214a98807cc7ee2d0455a683d44ed9612910b76d1d48527fd4ae4b7d79a90b39f559f2bcffe31ca4bb466e3d4e5b0feca42315340b895fda54cc61173ef2be74fcc5d2ccf3b394ab32d749630556d24f3e4a86696707529f7cf5a710cd84a6ade783be63191189f875d9cb3dbfdf29655da66a345a93fb5fb3fe9911349975a3f82de77946e67262fa29a25f86252fbe75cce2f7539487d1a62de8f5ba325267c84ab0de51e7d9b9a9b3fba2490ecdd87ddcd89da4e143c71d5a799cb2d65ea23e19aff9da1cc72df921ce32f5cfbc1acee03885de275dbf1c981be144c6984a9f5bf68a3d4a1aee8744e8af7bd30bd81b3d298883e99accdf046785d7585b0ebfdeab1a4285f859149cfa58e67d7a0378ccf381fa402fa1aeeab48cc1a9c56640e053f76fa3e4523c01e22f2775248781fe6ca20abdadf633eca809e3b343d6141984e9c72f48a83a2b6d363225936bcc5569f79f5edaf289d629ef26d7829b5501962af29c2bdfc550c456f4644e637027cd7ce6cef8e480238976926a52f6fb642eaa43e4d4bc2a55049db424f99ff1b4a2f91efdcce969b63f4f4c05c119a272901138e45669f24df3ec7e2b45d30251346987ec42d8cedca5bfbf01d54342a0ea5dabfd9c4b1d2fd56bc30dd99a953245ac7ae227b4412ff2a858c524d658905883cb743be75c44401345ec50dc2ac950fd3ac64921ef87d271f46b649deb8b42d13028193c76cbf8d82a853916b05d84d0b58c80f4e239c3a6b86d85bc4759b41b29b4ed40da02f4a2fef877dc2f36ce8fd496edb79489b5ba09d058a6fa280d4581d40724cdcb5d22f9022f51bcbeffdfa4ae46b45fabb20e00b2c0b4a664d5e6bf8d7bef582059fe3df038bbac1c7ea373550bf07e00ce4dffff9e33bd62e4cd6ff363a42aee50d7d1a256f71a10983a33a3cf29789b7c33906299e655c47196bcb398ffc0b31944a61e54ff5438ebf7188b83c35fa96eb17124d93d66c0b45d7b01e4b8a28a1a558ed87732e9bcd534e1a74d4039b6310a0548b1c1b87cbb8c92fd5521dde37f78cd88739aa33b97bc285345d2054539fa45a8541926eb97a2e5147fe2d5eb3a1b80b233e26ac428f7c273ef2696e058abbe7927772060475efd7cba7a26a06cb9767478449c8fdf8242776409d8e5f449798733172825b0fbd9ef85650c8d39219d05b873e413a0813f1ca0d6293551347b4410df2057d932559cf75b5159f4a87b7ab6498199e6d026ef2f1aca0cbd1b97f35689ac0003de4767a737f2603ff5c3147710322a14ff7b0df9a790d2f8448b15886b00af0a6f597c4c0954e5c1ae6923de663bcfcc10e587a612d5ea92301c38a9aa00ea63ee93445b491423f05315bf885965343dab2c73f664ec3c00accfe1df729718572929b65377a54e43e53efed8b3765b75da7a5fd6ced81d32cb8e9e92260d334cc0907ebd382ff931a8259b8b566a6b452f9f27fd4ecf8b9ae91d55f586835511d4e55ebf0c566c4c2bb98803ccb9661cb2412530fbaa1948c58e9b4ac0e4f513aaf67e5ec04e19093a35ca636de08912fbb2130174fcdf0f2d9cf1a3a40f36f4d0a948591792121d8bb9b46ac12cb5388ecee681d98514f0bd05f1270d9335b500851420092dceafac141fdf85c06a9fe875251f4bc1b82a39d62bcb71383f6f96c38222b762fdf5e156aa77351a007eaf0d9030aba516e3d26129d884cb11a67b9e5166fe432fd8c03054f455b68f9de7339f34d959d261f052b3f345cc4a019d9e801811533d03e24f16e8e9833f428adcf8efdc031171d457c8d53e87e7f2228e135fa771f151e8d9d39de66ef93a654c14321cd19ebaa2ccfec8f2272ec8c03173e09fd8d9d129c19488ef336889f37c329ef8b2876641647b49cc4964f2afaf96571eef2992164e0225ee0c7cb13bfe4c50640578035ee289e38a49882c080031f5e75026fa8fdfc0e41e68382eb754887ee007facddbf4e12b8b317414260b7960a889f1de67218e45c39d62b7f787f91df8ff121829335736f7ab816669c7fa9a2bd8fae9b74f8e9fbf84e8c0aeb364584becc42271356789a78ce342d43c04fb91f5a9bf6f4d27636a2ea1e1dd5acd7c30faf04b70c386ee9065ca5dd54eead7373989d82504c9c4356fd1398cab9827b8f44b718f07c771f9888d9eac0718f244b1d4cfdaf8262f10fe4408d7ba2436258204316e21838d9ed0d2d7cda9a76d5630d1e1d06255482e3654c9e54427d8ccdbe986a11ba1072ff79a91b3b9dfaa4436f66c95403d2ec027bf3f7cff86553f2c21e510a4d0383321493d41aabb74805d472038ea6de05de59eb7cb300d80b562fb1007e5d54777638a0d14061394c54c4416875408bde4f14e26555b3c650ab1d2b75d027c5f3ac8a11dbe75e6c96c11f85c4de396b51780ce7d287cd96f86fad81876b8f3329ee689c979f70c7bea6e0a4fec359028a66cb57201babdde80a6f666c5506435069fd3b276e18ac69a0faaac5f90930caf0af5a2c30a6e2698ff53c3ae50d03b0c74df780d0ece4f9aa6fa3cc8397f0c9bfa073cac4c47c4975ba5a73104d0aafa32a4cf9739212289556ad461b315e9442e6eca1b6cee80c738a2c24484559b147837f268756c493c09dfcbd5b7f48a9a6f4a156eaca9abbd55b8dac46e157bb6b819e1bd805f2dc7207e0acef432c6972c5bae8965ecc8561f07e9fd27b360077cbe5ee93f209d699f4424e1ac6eb48aeffd8d7946a50c474cb2957af2adc4f749e3edd5fba24b543453e8f56f286a5ba779ed0bfac64aced425473ed7d710feafacc68d6a72c0bfade557e8479d019ad715312e0265fc83e53bd644dd612b6a1a70eb7d7b2b666872756d8843a637c27957db4a700f83b5bc17c3dfb6c79aa820715f7acd9489ff83d90b132ce08fcfe5457e2b61571a3c6ed96b623fb326897f3cdb68a137d9ca410b04f458783ac99c24722a64a5622d8990dba7f891b64f1e7c4408f64415ba4100d7d70e489b0ae5b1b49df09d153d878b6ed39d39ee13280de62c879eee6d822593d2fa9d367a0ab0e1abe1c674afdb61ec3c5271d1977a04195830d333092800d84c427fe1966c4693a31117ed694315f53082b39eac1571a13748e0e9434db957e5b8216deca67950ed5c50d1777619649dd5975b8ba4e4bb87b77f469806045e31acc825069d5778068aeb3833bacdfd3dbd9f147524d4294731972b38d7fbb32a4d8b461ca840d636a9e036284b39d26004a2d0f07387164121396b95ae0865b7666bef1b769d99dc543d2b84d7ac4fc4065f8f7649bebf6537ed418836aeb5a1026869834ee14e96268fc880b0a7c055589d8edaad5e9b63a52b4f71d825f07c4af540c144b14f5e772cdd051e14af28a749551fda5dbec36c4037bc27b4539842a9c5e81a54aa32744c363a03396698a39587691eca581add145fca1abfd3af424bc5f006341f7636b19a6bbbfa456ca1ed8459ce5ebf090f5a43e7491eebbd350d5e0de63ae05de0f4ae4efc188db5fb23d826069836e13c8a2801e580e868c09c3e87e7537e21748fd565affff175e51ccfa1c4fc30a7272844d787dfafa9ac7219f472a25d7fec4dde77fb7d66b5d812728ff09626c1e8f5346a7c243f41986efe786a508301176c084fbaf5473d9e876a8ec84d2af45f14fcd97a2f94976117fa569b8adcb1db246126b40cf383022dc283f43a6eb9b19cf84b061e30140b905ff83278990b6328e0fb89ac05a733d5ad6132a43c1cf3012c60ee2927cc1937194a554889101a767c96959326834b69234524f5cd5b7a4e068745082dbf10ee6f238d90e4bcc03f31d96af657cc31089ad46c5a4d15ba4c7beb6c83c153b53ce87a1b82fcafa61497cb72a7e288e71320760bdc5777ecdf5230748feb7843319dd2d6e84428b7b139f363c1bd3aea9233a88bf0abaef4a798fd66883c43f5c6a32be8589f51bf049197ed7d00226d4b1e3f7623e99660d5811c3143531ed745ff290951838322ba6caa73e0b204e8e3fa936d25e84a806e041e440926f3f5b39df7d63043b5ef9748a797776d5226759d1f3ac4c20e48f66d39227737310e484a7ac4da611899e7b53374e88e34b6dc80d37f48c9ca44debe9f03ff637c1312f1240ecc70804a1e95f41d3ded3e2b98bd62f904bdb10d6c0eb3454b4428eba4ec7236639bf3db32dec72f156d865cafc91c7228f499d81fa11a0f5b6292c181c9df85bba8c442975189f00bbc68ad0a4cb2c7ca4668efedd0cf8fc6403522bd0b4adab60ecbb423195569db289f0dda9aacad2f03113d078b44b347710f86a08249ec9b76d2609f0344e7bbe4de218a20718aa7619eac02fbdaa6d92a352fbb49046a6671da9b0f147d24bef95e42bf6bf5b13032c00d4abc523b6c4982a1176bd1f6eb575cda55c3b40e358f0c00c56552e416e76ade246ec077372119c4307a0fc18834be5c277e58a6992d1f4380d83b10fbac5a0dde522157a42a16a3b554fb240259d1364d1e79844b2cf2037da1b96129c0dfa536e81023a1c54e5625ff48edd5c688e56e92b2c048de4656be28e0ac952d5d80c37de4e56f296926ac97fb851b3467b2c91b3ab6150296787ee2fc73c1c89bc57f083fa327d7c5afb644920b50ea60ef6c846662a6598bae56023030a8018919caaa5e6d979a397d7cfe284d81dbd3507ed0e63b1b13b2181174fe9429b1312edc7a7fd8b90f9a1b19f43c04874717b343de7e8299521158503144d0c1de6ea9ed3f88fd10274c8fd08242edf558ea71373e2023f8a73414e4cfe7c2929a5c0473433a4c3a8974d2b3f15dbb7368a67f6fcc4c3d77598e54d27ff02", 0x1000, 0x22}, {0x1, 0x2, &(0x7f0000002600)=',/.}\x00', &(0x7f0000002640)="cda3f4a5b5272ab4f22b5917577f9b4dfa066edde8f9790f3ebc3e3452a0dbfe41f8f52a7b529f779ec9e9128fdbb1dbdc7453606f2cd6393d035b78017444ee5794671581f2a198115b969a2e1c8f45212ba6b73157d9066036e5d194da6b901e7dcee2fc9b1a6df35309ac83893dc9becbbf881d963cb2de6d946896041421bb3e2f188e0419dade533d1e10aba4cedf3d870667a7b9511aca467cccc064ae036f584035e34c2ce84ce639b0c0aef9d9281b342a95415af35172a8d3f61f11695e20c8bf", 0xc5}, {0x1, 0x7fffffff, &(0x7f0000002740)='\x00', &(0x7f0000002780)="118aaff03258bf51d1214a97b4a732567bc89399de6da56a575b9a4a84a786ea547fab3c1486b11cf548c09b0dcb4326bac5a2a66604fad78793720030e5997f1b74ff81af4599ed12fbdd4c5be55b6b8aab82c3df306b2427e30370dab4e5e5716cd6", 0x63, 0x22}, {0x2, 0x6, &(0x7f0000002800)='$\x00', &(0x7f0000002840)="c6a570b94935b23040b99c3f749a28b96c732eebc296da607136d41f7566f90e0128fed25e3697b64ddc12a1cb039dd77389d24449371421e8b75b9de7cfe3c4ef54434266416de54dc72e8b362d0b01992536ac162e909d81ce0bbcfa379fa66048e5e7cdac093cba40c68b75d3c11a030fe5f2cb21542cab14dc46704c2e2c70c8b47103f5995c2d6447a83d7658790e3f5db33c4f34f3a034c34c55887e9cd0c777914d97ae2c7ac25042fa", 0xad, 0xa}]}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) mkdirat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002b00)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000002c00)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000003ec0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="00082fbd7000ffdbdf257f00000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000600000016000000060048001d0000000a00340002020202020200000600480011000000240034001dab2d48b3eae7c0ed1e22c6e0dd58fa87744ee34e1173d40b617fe46fafdd2e030034000101010101090000"], 0x74}, 0x1, 0x0, 0x0, 0x4040800}, 0x20004044) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000000080)={0x14, r6, 0x315, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x20004804) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000003c80)=@nat={'nat\x00', 0x19, 0x6, 0xfec, [0x200000002c80, 0x0, 0x0, 0x200000002eb4, 0x200000003128], 0x0, &(0x7f0000002c40), &(0x7f0000002c80)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x5, 0xf, 0x805, 'veth0_to_bridge\x00', 'team_slave_0\x00', 'nicvf0\x00', 'gretap0\x00', @remote, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @random="7db08f258757", [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x126, 0x126, 0x15e}, {0x11, 0x8, 0x8035, 'wg0\x00', 'veth0_to_hsr\x00', 'batadv_slave_0\x00', 'bond_slave_0\x00', @remote, [0xff, 0x0, 0x0, 0xff, 0xff], @multicast, [0xff, 0xff, 0xff, 0xf7d0f507cba40f0f, 0x0, 0xff], 0x6e, 0x6e, 0xa6}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x9, 0x18, 0x19, 'dvmrp1\x00', 'ip6erspan0\x00', 'macsec0\x00', 'gretap0\x00', @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @remote, [0x0, 0x0, 0xff, 0x0, 0xff], 0x12e, 0x166, 0x19e, 0x0, [@m802_3]}, {0x9, 0x41, 0xfbfb, 'xfrm0\x00', 'veth1_macvtap\x00', 'ipvlan0\x00', 'ip6erspan0\x00', @random="db4788f3b53e", [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0xa6}]}, {0x0, '\x00', 0x4, 0x0, 0x2, [{0x9, 0x20, 0x8917, 'veth1\x00', 'wlan0\x00', 'wg1\x00', 'batadv0\x00', @empty, [0x0, 0xff, 0x0, 0x0, 0xff], @remote, [0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xa6}, {0x5, 0x4a, 0x806, 'erspan0\x00', 'dummy0\x00', 'batadv_slave_0\x00', 'veth1_to_hsr\x00', @random="ec459d2d4829", [0xff, 0x101, 0x0, 0xff, 0xff], @random="dac889a588e6", [0x0, 0xff, 0xff], 0x98e, 0xa06, 0xa3e, 0x0, [@m802_3, @m802_3]}]}, {0x0, '\x00', 0x6, 0xfffffffffffffffe}]}, 0x5b8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c890}, 0x14) r7 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000040)) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x37, 0x1, 0x2, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 11.266440892s ago: executing program 6 (id=4458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendto(r5, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x4) clock_settime(0x0, &(0x7f00000003c0)) 8.000915581s ago: executing program 6 (id=4460): request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='Ri\x00'/18, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='virtiofs\x00', 0x2200892, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r1, &(0x7f00000003c0), 0x0) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='pim6reg0\x00', 0x3) 7.803138843s ago: executing program 2 (id=4461): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r3 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 6.738330962s ago: executing program 7 (id=4462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x4801000000000000}, 0x0) r5 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000580)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={'sha384\x00'}}) r6 = add_key$fscrypt_v1(0x0, &(0x7f00000003c0)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r5, r6) 6.696502761s ago: executing program 3 (id=4463): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r2 = getuid() setresuid(r2, 0x0, r2) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r5, 0x0, 0x2, 0x0) openat$cgroup_type(r5, &(0x7f0000000540), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r4, 0x0}]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x40000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 5.523660911s ago: executing program 7 (id=4465): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000580)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000640)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000006c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000700), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x6) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) io_setup(0x9, &(0x7f00000007c0)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) 5.327140072s ago: executing program 8 (id=4466): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_open_procfs(0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) socket(0x2b, 0x1, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, 0x0, &(0x7f0000000100)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004440)=@acquire={0x10f8, 0x17, 0x10, 0x10000000, 0xfffffffd, {{@in=@multicast2, 0x200}, @in=@multicast1, {@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x73}, {{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0x2}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x11fffe}, [@algo_comp={0xfc3, 0x3, {{'lzjh\x00'}, 0x7bd8, "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"}}, @iptfs_max_qsize={0x8, 0x28, 0xb}, @extra_flags={0x8, 0x18, 0x7}]}, 0x10f8}}, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)) 5.074987686s ago: executing program 3 (id=4467): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) setreuid(0xee01, 0x0) getuid() r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r4, 0x0, 0x2, 0x0) openat$cgroup_type(r4, &(0x7f0000000540), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r3, 0x0}]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x40000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 4.596092243s ago: executing program 2 (id=4468): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) r0 = syz_open_dev$video4linux(0x0, 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) sched_setparam(0x0, 0x0) mmap$qrtrtun(&(0x7f000048c000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, r1, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r3, &(0x7f0000003240)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000300)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 4.589905072s ago: executing program 8 (id=4478): io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1ff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122102, 0x0) times(0xfffffffffffffffe) syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) sendmsg$nl_route(r1, 0x0, 0x4054) setns(0xc9, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000200), 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003f000500010000000000000001010000000000000f0001006f76732d73797374656d00000800020000000000080009002a"], 0x38}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000e0)=ANY=[@ANYBLOB="180000003f0005000400000000000000020100002a000000"], 0x18}}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5c00, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r4, 0x40186e8d, &(0x7f0000000140)={&(0x7f00000000c0)=[{0x100000000, 0x1, 0x0, {0x3, 0x6, 0x1}}, {0x9, 0x2, 0x0, {0x7, 0x31, 0x2}}, {0x3, 0x0, 0x0, {0xffffffffffffffff, 0x7, 0x2}}, {0x8000000000, 0x2, 0x0, {0x66, 0x400}}], 0x4, 0x20, 0x3, 0x401}) r5 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000280)={0x0, 0xb, 0x1, "ae8815b85b08b9e1093366dc41e523de997347ff2468e2d38dce9f848654c1c8", 0x31303553}) 4.438845815s ago: executing program 3 (id=4469): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x32, 0x0, 0x1, 0xfffffffe}, 0x28) msgget$private(0x0, 0x230) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r2, 0x0, 0x0, 0x4004000, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x5) quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000800)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) io_setup(0x8, 0x0) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000198c0)='./cifs\x00', 0x1ff) mount(&(0x7f0000019900)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000019940)='./cifs\x00', &(0x7f0000019980)='cifs\x00', 0x0, &(0x7f00000199c0)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=2.1,nodfs,witness\x00') 3.043135348s ago: executing program 8 (id=4470): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000004c0)=0x2, 0x4) connect$unix(r0, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_sco(r2, &(0x7f0000000600), 0x8) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000480)=0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x4}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x44}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x7c}}, 0x0) 2.571289714s ago: executing program 3 (id=4471): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x24040021) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14001180090001006c6173740000000004000280400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) close(r0) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0, &(0x7f0000000180)='size=4G\x00') setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x141102) writev(r1, &(0x7f0000002740)=[{&(0x7f0000002780)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000002900)={0x0, 0x210000}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000002940)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) 2.47469559s ago: executing program 8 (id=4472): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r0 = semget(0x0, 0x1, 0x0) semctl$GETALL(r0, 0x0, 0xd, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @sock_ops}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) 1.818781373s ago: executing program 3 (id=4473): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r3 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.751512923s ago: executing program 8 (id=4474): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff}) shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x20000400) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) ioctl$TCFLSH(r1, 0x541b, 0x8000000000000002) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x1) 191.116368ms ago: executing program 8 (id=4475): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000900020073797a300000000104000000000000000c000300686173683a6970001400078005001500ff000000080011400000000c050005000a0000000500010006000000"], 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x74, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040004}, 0x4008000) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCSETSW2(r8, 0x80047456, 0xfffffffffffffffe) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x800, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x9, 0xfff1}, {0x4}, {0x3, 0x8}}, [""]}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x300, 0x0, 0xff, 0x9, 0x0, 0x4}, 0x20) 43.705301ms ago: executing program 6 (id=4476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) socket(0x200000000000011, 0x2, 0x0) r4 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000580)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={'sha384\x00'}}) r5 = add_key$fscrypt_v1(0x0, &(0x7f00000003c0)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r4, r5) 0s ago: executing program 2 (id=4477): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r2 = getuid() setresuid(r2, 0x0, r2) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r5, 0x0, 0x2, 0x0) openat$cgroup_type(r5, &(0x7f0000000540), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r4, 0x0}]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x40000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) kernel console output (not intermixed with test programs): op9, logical block 0, async page read [ 1575.722781][T22138] Buffer I/O error on dev loop9, logical block 0, async page read [ 1575.722855][T22138] Buffer I/O error on dev loop9, logical block 0, async page read [ 1575.722903][T22138] ldm_validate_partition_table(): Disk read failed. [ 1575.723026][T22138] Buffer I/O error on dev loop9, logical block 0, async page read [ 1575.723147][T22138] Buffer I/O error on dev loop9, logical block 0, async page read [ 1575.723437][T22138] Dev loop9: unable to read RDB block 0 [ 1575.724342][T22138] loop9: unable to read partition table [ 1575.725421][T22138] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1576.442781][ T31] audit: type=1800 audit(1792013092.707:3251): pid=22141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15994 res=0 errno=0 [ 1576.534029][ T31] audit: type=1800 audit(1792013092.819:3252): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15994 res=0 errno=0 [ 1576.921934][T22146] fuse: fd is not a fuse device [ 1577.327281][T22147] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4145'. [ 1580.253164][ T31] audit: type=1400 audit(1792013096.271:3253): avc: denied { getopt } for pid=22162 comm="syz.8.4169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1581.713870][ T31] audit: type=1400 audit(1792013097.253:3254): avc: denied { getopt } for pid=22168 comm="syz.7.4154" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1582.045790][ T31] audit: type=1400 audit(1792013097.973:3255): avc: denied { setopt } for pid=22175 comm="syz.8.4162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1583.868611][ T31] audit: type=1400 audit(1792013098.658:3256): avc: denied { setopt } for pid=22185 comm="syz.3.4164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1590.634332][ T31] audit: type=1400 audit(1792013104.953:3257): avc: denied { execute } for pid=22223 comm="syz.3.4173" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=79085 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1591.351457][T22230] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1591.351494][T22230] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1591.351513][T22230] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1593.081511][T22222] syz.2.4171 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1593.081546][T22222] CPU: 0 UID: 0 PID: 22222 Comm: syz.2.4171 Tainted: G L syzkaller #0 PREEMPT(full) [ 1593.081572][T22222] Tainted: [L]=SOFTLOCKUP [ 1593.081579][T22222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1593.081590][T22222] Call Trace: [ 1593.081597][T22222] [ 1593.081605][T22222] dump_stack_lvl+0x100/0x190 [ 1593.081637][T22222] dump_header+0xfb/0x606 [ 1593.081660][T22222] oom_kill_process.cold+0xd/0x380 [ 1593.081683][T22222] out_of_memory+0x340/0x14f0 [ 1593.081720][T22222] ? __pfx_out_of_memory+0x10/0x10 [ 1593.081753][T22222] mem_cgroup_out_of_memory+0xc6/0x130 [ 1593.081778][T22222] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1593.081803][T22222] ? find_held_lock+0x2b/0x80 [ 1593.081837][T22222] ? do_raw_spin_unlock+0x145/0x1e0 [ 1593.081864][T22222] ? _raw_spin_unlock+0x28/0x50 [ 1593.081890][T22222] try_charge_memcg+0x783/0xf60 [ 1593.081917][T22222] ? __pfx_try_charge_memcg+0x10/0x10 [ 1593.081935][T22222] ? find_held_lock+0x2b/0x80 [ 1593.081961][T22222] ? rcu_read_unlock+0x17/0x60 [ 1593.081980][T22222] ? rcu_read_unlock+0x17/0x60 [ 1593.081999][T22222] ? find_held_lock+0x2b/0x80 [ 1593.082028][T22222] ? rcu_read_unlock+0x17/0x60 [ 1593.082054][T22222] charge_memcg+0x1ae/0x210 [ 1593.082076][T22222] __mem_cgroup_charge+0x2b/0x1c0 [ 1593.082101][T22222] shmem_alloc_and_add_folio+0x451/0xd40 [ 1593.082129][T22222] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1593.082150][T22222] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 1593.082177][T22222] shmem_get_folio_gfp+0x75b/0x1980 [ 1593.082202][T22222] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1593.082224][T22222] ? vm_normal_page+0x1d1/0x380 [ 1593.082248][T22222] ? __pfx_vm_normal_page+0x10/0x10 [ 1593.082277][T22222] shmem_write_begin+0x1a4/0x420 [ 1593.082302][T22222] ? __pfx_shmem_write_begin+0x10/0x10 [ 1593.082324][T22222] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1593.082352][T22222] generic_perform_write+0x292/0xa40 [ 1593.082379][T22222] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1593.082408][T22222] ? __pfx_generic_perform_write+0x10/0x10 [ 1593.082439][T22222] ? file_update_time_flags+0x38c/0x520 [ 1593.082464][T22222] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1593.082486][T22222] shmem_file_write_iter+0x10e/0x140 [ 1593.082512][T22222] __kernel_write_iter+0x2ac/0x930 [ 1593.082538][T22222] ? __pfx___kernel_write_iter+0x10/0x10 [ 1593.082561][T22222] ? cgroup1_freezing+0x12c/0x3b0 [ 1593.082586][T22222] ? cgroup1_freezing+0x136/0x3b0 [ 1593.082607][T22222] ? freezing_slow_path+0xb5/0x1a0 [ 1593.082630][T22222] dump_user_range+0x3f9/0xad0 [ 1593.082660][T22222] ? __pfx_dump_user_range+0x10/0x10 [ 1593.082692][T22222] ? __pfx_writenote+0x10/0x10 [ 1593.082722][T22222] ? elf_core_dump+0x1f25/0x3d20 [ 1593.082752][T22222] elf_core_dump+0x2d68/0x3d20 [ 1593.082793][T22222] ? __pfx_elf_core_dump+0x10/0x10 [ 1593.082818][T22222] ? kasan_save_stack+0x3f/0x50 [ 1593.082843][T22222] ? kasan_save_stack+0x30/0x50 [ 1593.082866][T22222] ? kasan_save_track+0x14/0x30 [ 1593.082889][T22222] ? __kasan_kmalloc+0xaa/0xb0 [ 1593.082912][T22222] ? vfs_coredump+0x21f6/0x54a0 [ 1593.082935][T22222] ? get_signal+0x1f2a/0x21e0 [ 1593.082955][T22222] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1593.082989][T22222] ? 0xffffffffff600000 [ 1593.083040][T22222] ? lock_acquire+0x1d1/0x380 [ 1593.083062][T22222] ? get_signal+0x1f2a/0x21e0 [ 1593.083093][T22222] ? vfs_coredump+0x281a/0x54a0 [ 1593.083116][T22222] vfs_coredump+0x281a/0x54a0 [ 1593.083150][T22222] ? __pfx_vfs_coredump+0x10/0x10 [ 1593.083175][T22222] ? __lock_acquire+0x5c0/0x1f40 [ 1593.083202][T22222] ? __lock_acquire+0x5c0/0x1f40 [ 1593.083227][T22222] ? lock_acquire+0x1d1/0x380 [ 1593.083248][T22222] ? unwind_next_frame+0xbd/0x2090 [ 1593.083280][T22222] ? lock_acquire+0x1d1/0x380 [ 1593.083308][T22222] ? bpf_ksym_find+0x128/0x1c0 [ 1593.083328][T22222] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1593.083358][T22222] ? arch_stack_walk+0xa6/0xf0 [ 1593.083392][T22222] ? __sigqueue_free+0xbe/0x2a0 [ 1593.083418][T22222] ? stack_trace_save+0x8e/0xc0 [ 1593.083438][T22222] ? __pfx_stack_trace_save+0x10/0x10 [ 1593.083459][T22222] ? stack_depot_save_flags+0x27/0x9f0 [ 1593.083480][T22222] ? __lock_acquire+0x5c0/0x1f40 [ 1593.083550][T22222] ? proc_coredump_connector+0x2d3/0x4f0 [ 1593.083577][T22222] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1593.083608][T22222] ? rcu_is_watching+0x13/0xc0 [ 1593.083640][T22222] get_signal+0x1f2a/0x21e0 [ 1593.083673][T22222] ? __pfx_get_signal+0x10/0x10 [ 1593.083726][T22222] arch_do_signal_or_restart+0x91/0x7e0 [ 1593.083757][T22222] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1593.083803][T22222] irqentry_exit+0x402/0xa10 [ 1593.083835][T22222] asm_exc_page_fault+0x26/0x30 [ 1593.083853][T22222] RIP: 0033:0x7f087c39e561 [ 1593.083871][T22222] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1593.083888][T22222] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1593.083905][T22222] RAX: 0000000000000000 RBX: 00007f087c626090 RCX: 00007f087c39e559 [ 1593.083917][T22222] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1593.083929][T22222] RBP: 00007f087c4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1593.083941][T22222] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1593.083952][T22222] R13: 00007f087c626128 R14: 00007f087c626090 R15: 00007ffcec08eb28 [ 1593.083980][T22222] [ 1593.128943][T22222] memory: usage 307200kB, limit 307200kB, failcnt 99686 [ 1593.128961][T22222] memory+swap: usage 345880kB, limit 9007199254740988kB, failcnt 0 [ 1593.128973][T22222] kmem: usage 5304kB, limit 9007199254740988kB, failcnt 0 [ 1593.128983][T22222] Memory cgroup stats for /syz2: [ 1593.129072][T22222] cache 308846592 [ 1593.129078][T22222] rss 266240 [ 1593.129082][T22222] rss_huge 0 [ 1593.129086][T22222] shmem 308846592 [ 1593.129090][T22222] mapped_file 154710016 [ 1593.129094][T22222] dirty 0 [ 1593.129098][T22222] writeback 0 [ 1593.129102][T22222] workingset_refault_anon 2987 [ 1593.129106][T22222] workingset_refault_file 38460 [ 1593.129110][T22222] swap 39608320 [ 1593.129114][T22222] swapcached 116654080 [ 1593.129118][T22222] pgpgin 3008829 [ 1593.129122][T22222] pgpgout 2935400 [ 1593.129126][T22222] pgfault 1328835 [ 1593.129130][T22222] pgmajfault 492 [ 1593.129134][T22222] inactive_anon 194703360 [ 1593.129138][T22222] active_anon 114438144 [ 1593.129143][T22222] inactive_file 0 [ 1593.129147][T22222] active_file 0 [ 1593.129150][T22222] unevictable 0 [ 1593.129155][T22222] hierarchical_memory_limit 314572800 [ 1593.129159][T22222] hierarchical_memsw_limit 9223372036854771712 [ 1593.129172][T22222] total_cache 308846592 [ 1593.129177][T22222] total_rss 266240 [ 1593.129181][T22222] total_rss_huge 0 [ 1593.129185][T22222] total_shmem 308846592 [ 1593.129189][T22222] total_mapped_file 154710016 [ 1593.129194][T22222] total_dirty 0 [ 1593.129200][T22222] total_writeback 0 [ 1593.129205][T22222] total_workingset_refault_anon 2987 [ 1593.129212][T22222] total_workingset_refault_file 38460 [ 1593.129219][T22222] total_swap 39608320 [ 1593.129226][T22222] total_swapcached 116654080 [ 1593.129233][T22222] total_pgpgin 3008829 [ 1593.129240][T22222] total_pgpgout 2935400 [ 1593.129246][T22222] total_pgfault 1328835 [ 1593.129253][T22222] total_pgmajfault 492 [ 1593.129260][T22222] total_inactive_anon 194703360 [ 1593.129265][T22222] total_active_anon 114438144 [ 1593.129269][T22222] total_inactive_file 0 [ 1593.129274][T22222] total_active_file 0 [ 1593.129278][T22222] total_unevictable 0 [ 1593.129282][T22222] anon_cost 0 [ 1593.129286][T22222] file_cost 0 [ 1593.129290][T22222] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4118,pid=22010,uid=0 [ 1593.129345][T22222] Memory cgroup out of memory: Killed process 22010 (syz.2.4118) total-vm:200704kB, anon-rss:1276kB, file-rss:20548kB, shmem-rss:79644kB, UID:0 pgtables:276kB oom_score_adj:0 [ 1595.066343][ T5611] syz-executor invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=0 [ 1595.066369][ T5611] CPU: 0 UID: 0 PID: 5611 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1595.066385][ T5611] Tainted: [L]=SOFTLOCKUP [ 1595.066389][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1595.066397][ T5611] Call Trace: [ 1595.066402][ T5611] [ 1595.066407][ T5611] dump_stack_lvl+0x100/0x190 [ 1595.066427][ T5611] dump_header+0xfb/0x606 [ 1595.066441][ T5611] oom_kill_process.cold+0xd/0x380 [ 1595.066456][ T5611] out_of_memory+0x340/0x14f0 [ 1595.066476][ T5611] ? __pfx_out_of_memory+0x10/0x10 [ 1595.066497][ T5611] mem_cgroup_out_of_memory+0xc6/0x130 [ 1595.066513][ T5611] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1595.066527][ T5611] ? find_held_lock+0x2b/0x80 [ 1595.066547][ T5611] ? do_raw_spin_unlock+0x145/0x1e0 [ 1595.066563][ T5611] ? _raw_spin_unlock+0x28/0x50 [ 1595.066579][ T5611] try_charge_memcg+0x783/0xf60 [ 1595.066594][ T5611] ? __pfx_try_charge_memcg+0x10/0x10 [ 1595.066606][ T5611] ? find_held_lock+0x2b/0x80 [ 1595.066622][ T5611] ? rcu_read_unlock+0x17/0x60 [ 1595.066634][ T5611] ? rcu_read_unlock+0x17/0x60 [ 1595.066650][ T5611] obj_cgroup_charge_pages+0x2b/0x1f0 [ 1595.066664][ T5611] __memcg_kmem_charge_page+0x1c4/0x4d0 [ 1595.066678][ T5611] __alloc_frozen_pages_noprof+0x534/0x3300 [ 1595.066700][ T5611] ? lapic_next_event+0x10/0x20 [ 1595.066713][ T5611] ? clockevents_program_event+0x1b1/0x820 [ 1595.066733][ T5611] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1595.066748][ T5611] ? __pfx_clockevents_program_event+0x10/0x10 [ 1595.066767][ T5611] ? timerqueue_linked_add+0x260/0x430 [ 1595.066780][ T5611] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1595.066796][ T5611] ? tick_program_event+0xb0/0x140 [ 1595.066810][ T5611] ? hrtimer_reprogram+0x165/0x6c0 [ 1595.066827][ T5611] ? find_held_lock+0x2b/0x80 [ 1595.066853][ T5611] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1595.066869][ T5611] ? policy_nodemask+0xed/0x4f0 [ 1595.066889][ T5611] alloc_pages_mpol+0x201/0x550 [ 1595.066907][ T5611] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1595.066926][ T5611] ? do_raw_spin_lock+0x128/0x260 [ 1595.066943][ T5611] alloc_pages_noprof+0x1a/0x160 [ 1595.066955][ T5611] pte_alloc_one+0x1c/0x3d0 [ 1595.066975][ T5611] __pte_alloc+0x6d/0x380 [ 1595.066989][ T5611] ? __pfx___pte_alloc+0x10/0x10 [ 1595.067003][ T5611] ? __pfx___might_resched+0x10/0x10 [ 1595.067015][ T5611] ? copy_page_range+0x1c91/0x57c0 [ 1595.067028][ T5611] copy_page_range+0x3b36/0x57c0 [ 1595.067057][ T5611] ? __pfx_copy_page_range+0x10/0x10 [ 1595.067074][ T5611] ? mas_wr_store_entry+0xa4/0x1d50 [ 1595.067091][ T5611] ? lock_acquire+0x1d1/0x380 [ 1595.067103][ T5611] ? dup_mmap+0xd0a/0x2370 [ 1595.067123][ T5611] ? find_held_lock+0x2b/0x80 [ 1595.067140][ T5611] ? dup_mmap+0xe66/0x2370 [ 1595.067155][ T5611] ? dup_mmap+0xe66/0x2370 [ 1595.067171][ T5611] ? down_write+0x146/0x1f0 [ 1595.067191][ T5611] ? up_write+0x2dc/0x5b0 [ 1595.067208][ T5611] dup_mmap+0x1230/0x2370 [ 1595.067231][ T5611] ? __pfx_dup_mmap+0x10/0x10 [ 1595.067246][ T5611] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1595.067265][ T5611] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1595.067292][ T5611] ? __lock_acquire+0x5c0/0x1f40 [ 1595.067322][ T5611] ? lock_acquire+0x1d1/0x380 [ 1595.067343][ T5611] ? copy_process+0x4816/0x8380 [ 1595.067374][ T5611] copy_process+0x4821/0x8380 [ 1595.067406][ T5611] ? __pfx_copy_process+0x10/0x10 [ 1595.067437][ T5611] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1595.067457][ T5611] kernel_clone+0x176/0x9d0 [ 1595.067472][ T5611] ? __pfx_kernel_clone+0x10/0x10 [ 1595.067489][ T5611] ? __might_fault+0xc5/0x140 [ 1595.067500][ T5611] ? find_held_lock+0x2b/0x80 [ 1595.067520][ T5611] ? __might_fault+0xc5/0x140 [ 1595.067541][ T5611] __do_sys_clone+0xd9/0x120 [ 1595.067561][ T5611] ? __pfx___do_sys_clone+0x10/0x10 [ 1595.067605][ T5611] do_syscall_64+0x123/0x790 [ 1595.067630][ T5611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.067642][ T5611] RIP: 0033:0x7f087c3c6fd2 [ 1595.067652][ T5611] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1595.067663][ T5611] RSP: 002b:00007ffcec08ed40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1595.067674][ T5611] RAX: ffffffffffffffda RBX: 00007ffcec08ed40 RCX: 00007f087c3c6fd2 [ 1595.067686][ T5611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1595.067693][ T5611] RBP: 00007ffcec08eecc R08: 0000000000000000 R09: 0000000000000001 [ 1595.067700][ T5611] R10: 000055557eaa87d0 R11: 0000000000000246 R12: 0000000000000001 [ 1595.067707][ T5611] R13: 00000000000927c0 R14: 000000000016d14c R15: 00007ffcec08ef20 [ 1595.067723][ T5611] [ 1595.227548][ T5611] memory: usage 307200kB, limit 307200kB, failcnt 99899 [ 1595.227563][ T5611] memory+swap: usage 345880kB, limit 9007199254740988kB, failcnt 0 [ 1595.227571][ T5611] kmem: usage 5284kB, limit 9007199254740988kB, failcnt 0 [ 1595.227577][ T5611] Memory cgroup stats for /syz2: [ 1595.227717][ T5611] cache 308867072 [ 1595.227723][ T5611] rss 266240 [ 1595.227727][ T5611] rss_huge 0 [ 1595.227731][ T5611] shmem 308867072 [ 1595.227736][ T5611] mapped_file 129040384 [ 1595.227740][ T5611] dirty 0 [ 1595.227744][ T5611] writeback 0 [ 1595.227748][ T5611] workingset_refault_anon 2987 [ 1595.227753][ T5611] workingset_refault_file 38460 [ 1595.227758][ T5611] swap 39608320 [ 1595.227762][ T5611] swapcached 116654080 [ 1595.227766][ T5611] pgpgin 3008834 [ 1595.227770][ T5611] pgpgout 2935400 [ 1595.227774][ T5611] pgfault 1328837 [ 1595.227778][ T5611] pgmajfault 492 [ 1595.227783][ T5611] inactive_anon 194703360 [ 1595.227787][ T5611] active_anon 114458624 [ 1595.227791][ T5611] inactive_file 0 [ 1595.227795][ T5611] active_file 0 [ 1595.227800][ T5611] unevictable 0 [ 1595.227804][ T5611] hierarchical_memory_limit 314572800 [ 1595.227809][ T5611] hierarchical_memsw_limit 9223372036854771712 [ 1595.227814][ T5611] total_cache 308867072 [ 1595.227818][ T5611] total_rss 266240 [ 1595.227822][ T5611] total_rss_huge 0 [ 1595.227826][ T5611] total_shmem 308867072 [ 1595.227831][ T5611] total_mapped_file 129040384 [ 1595.227835][ T5611] total_dirty 0 [ 1595.227839][ T5611] total_writeback 0 [ 1595.227843][ T5611] total_workingset_refault_anon 2987 [ 1595.227848][ T5611] total_workingset_refault_file 38460 [ 1595.227853][ T5611] total_swap 39608320 [ 1595.227857][ T5611] total_swapcached 116654080 [ 1595.227862][ T5611] total_pgpgin 3008834 [ 1595.227866][ T5611] total_pgpgout 2935400 [ 1595.227870][ T5611] total_pgfault 1328837 [ 1595.227874][ T5611] total_pgmajfault 492 [ 1595.227878][ T5611] total_inactive_anon 194703360 [ 1595.227883][ T5611] total_active_anon 114458624 [ 1595.227887][ T5611] total_inactive_file 0 [ 1595.227891][ T5611] total_active_file 0 [ 1595.227895][ T5611] total_unevictable 0 [ 1595.227900][ T5611] anon_cost 0 [ 1595.227904][ T5611] file_cost 0 [ 1595.227908][ T5611] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4122,pid=22024,uid=0 [ 1595.230970][ T5611] Memory cgroup out of memory: Killed process 22024 (syz.2.4122) total-vm:200572kB, anon-rss:1276kB, file-rss:20548kB, shmem-rss:71440kB, UID:0 pgtables:260kB oom_score_adj:0 [ 1595.425823][ T33] oom_reaper: reaped process 22010 (syz.2.4118), now anon-rss:0kB, file-rss:20480kB, shmem-rss:29320kB [ 1595.617574][T22222] syz.2.4171 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1595.617606][T22222] CPU: 0 UID: 0 PID: 22222 Comm: syz.2.4171 Tainted: G L syzkaller #0 PREEMPT(full) [ 1595.617629][T22222] Tainted: [L]=SOFTLOCKUP [ 1595.617636][T22222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1595.617646][T22222] Call Trace: [ 1595.617652][T22222] [ 1595.617659][T22222] dump_stack_lvl+0x100/0x190 [ 1595.617687][T22222] dump_header+0xfb/0x606 [ 1595.617707][T22222] oom_kill_process.cold+0xd/0x380 [ 1595.617728][T22222] out_of_memory+0x340/0x14f0 [ 1595.617757][T22222] ? __pfx_out_of_memory+0x10/0x10 [ 1595.617787][T22222] mem_cgroup_out_of_memory+0xc6/0x130 [ 1595.617808][T22222] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1595.617831][T22222] ? find_held_lock+0x2b/0x80 [ 1595.617859][T22222] ? do_raw_spin_unlock+0x145/0x1e0 [ 1595.617881][T22222] ? _raw_spin_unlock+0x28/0x50 [ 1595.617904][T22222] try_charge_memcg+0x783/0xf60 [ 1595.617927][T22222] ? __pfx_try_charge_memcg+0x10/0x10 [ 1595.617942][T22222] ? find_held_lock+0x2b/0x80 [ 1595.617964][T22222] ? rcu_read_unlock+0x17/0x60 [ 1595.617981][T22222] ? rcu_read_unlock+0x17/0x60 [ 1595.617997][T22222] ? find_held_lock+0x2b/0x80 [ 1595.618021][T22222] ? rcu_read_unlock+0x17/0x60 [ 1595.618043][T22222] charge_memcg+0x1ae/0x210 [ 1595.618062][T22222] __mem_cgroup_charge+0x2b/0x1c0 [ 1595.618082][T22222] shmem_alloc_and_add_folio+0x451/0xd40 [ 1595.618106][T22222] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1595.618125][T22222] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 1595.618148][T22222] shmem_get_folio_gfp+0x75b/0x1980 [ 1595.618171][T22222] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1595.618189][T22222] ? vm_normal_page+0x1d1/0x380 [ 1595.618214][T22222] ? __pfx_vm_normal_page+0x10/0x10 [ 1595.618240][T22222] shmem_write_begin+0x1a4/0x420 [ 1595.618259][T22222] ? __pfx_shmem_write_begin+0x10/0x10 [ 1595.618278][T22222] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1595.618302][T22222] generic_perform_write+0x292/0xa40 [ 1595.618324][T22222] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1595.618350][T22222] ? __pfx_generic_perform_write+0x10/0x10 [ 1595.618375][T22222] ? file_update_time_flags+0x38c/0x520 [ 1595.618397][T22222] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1595.618416][T22222] shmem_file_write_iter+0x10e/0x140 [ 1595.618438][T22222] __kernel_write_iter+0x2ac/0x930 [ 1595.618460][T22222] ? __pfx___kernel_write_iter+0x10/0x10 [ 1595.618479][T22222] ? cgroup1_freezing+0x12c/0x3b0 [ 1595.618501][T22222] ? cgroup1_freezing+0x136/0x3b0 [ 1595.618519][T22222] ? freezing_slow_path+0xb5/0x1a0 [ 1595.618539][T22222] dump_user_range+0x3f9/0xad0 [ 1595.618565][T22222] ? __pfx_dump_user_range+0x10/0x10 [ 1595.618594][T22222] ? __pfx_writenote+0x10/0x10 [ 1595.618615][T22222] ? elf_core_dump+0x1f25/0x3d20 [ 1595.618641][T22222] elf_core_dump+0x2d68/0x3d20 [ 1595.618676][T22222] ? __pfx_elf_core_dump+0x10/0x10 [ 1595.618696][T22222] ? kasan_save_stack+0x3f/0x50 [ 1595.618716][T22222] ? kasan_save_stack+0x30/0x50 [ 1595.618736][T22222] ? kasan_save_track+0x14/0x30 [ 1595.618755][T22222] ? __kasan_kmalloc+0xaa/0xb0 [ 1595.618775][T22222] ? vfs_coredump+0x21f6/0x54a0 [ 1595.618794][T22222] ? get_signal+0x1f2a/0x21e0 [ 1595.618810][T22222] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1595.618839][T22222] ? 0xffffffffff600000 [ 1595.618882][T22222] ? lock_acquire+0x1d1/0x380 [ 1595.618900][T22222] ? get_signal+0x1f2a/0x21e0 [ 1595.618926][T22222] ? vfs_coredump+0x281a/0x54a0 [ 1595.618945][T22222] vfs_coredump+0x281a/0x54a0 [ 1595.618974][T22222] ? __pfx_vfs_coredump+0x10/0x10 [ 1595.618994][T22222] ? __lock_acquire+0x5c0/0x1f40 [ 1595.619018][T22222] ? __lock_acquire+0x5c0/0x1f40 [ 1595.619040][T22222] ? lock_acquire+0x1d1/0x380 [ 1595.619057][T22222] ? unwind_next_frame+0xbd/0x2090 [ 1595.619085][T22222] ? lock_acquire+0x1d1/0x380 [ 1595.619109][T22222] ? bpf_ksym_find+0x128/0x1c0 [ 1595.619126][T22222] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1595.619151][T22222] ? arch_stack_walk+0xa6/0xf0 [ 1595.619180][T22222] ? __sigqueue_free+0xbe/0x2a0 [ 1595.619207][T22222] ? stack_trace_save+0x8e/0xc0 [ 1595.619223][T22222] ? __pfx_stack_trace_save+0x10/0x10 [ 1595.619241][T22222] ? stack_depot_save_flags+0x27/0x9f0 [ 1595.619259][T22222] ? __lock_acquire+0x5c0/0x1f40 [ 1595.619317][T22222] ? proc_coredump_connector+0x2d3/0x4f0 [ 1595.619339][T22222] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1595.619364][T22222] ? rcu_is_watching+0x13/0xc0 [ 1595.619391][T22222] get_signal+0x1f2a/0x21e0 [ 1595.619419][T22222] ? __pfx_get_signal+0x10/0x10 [ 1595.619444][T22222] arch_do_signal_or_restart+0x91/0x7e0 [ 1595.619470][T22222] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1595.619508][T22222] irqentry_exit+0x402/0xa10 [ 1595.619533][T22222] asm_exc_page_fault+0x26/0x30 [ 1595.619548][T22222] RIP: 0033:0x7f087c39e561 [ 1595.619562][T22222] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1595.619577][T22222] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1595.619592][T22222] RAX: 0000000000000000 RBX: 00007f087c626090 RCX: 00007f087c39e559 [ 1595.619602][T22222] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1595.619612][T22222] RBP: 00007f087c4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1595.619622][T22222] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1595.619632][T22222] R13: 00007f087c626128 R14: 00007f087c626090 R15: 00007ffcec08eb28 [ 1595.619656][T22222] [ 1595.645037][T22222] memory: usage 307200kB, limit 307200kB, failcnt 99969 [ 1595.645053][T22222] memory+swap: usage 345868kB, limit 9007199254740988kB, failcnt 0 [ 1595.645065][T22222] kmem: usage 5284kB, limit 9007199254740988kB, failcnt 0 [ 1595.645075][T22222] Memory cgroup stats for /syz2: [ 1595.645180][T22222] cache 308867072 [ 1595.645188][T22222] rss 266240 [ 1595.645195][T22222] rss_huge 0 [ 1595.645206][T22222] shmem 308867072 [ 1595.645212][T22222] mapped_file 43331584 [ 1595.645219][T22222] dirty 0 [ 1595.645225][T22222] writeback 0 [ 1595.645231][T22222] workingset_refault_anon 2987 [ 1595.645237][T22222] workingset_refault_file 38460 [ 1595.645244][T22222] swap 39596032 [ 1595.645250][T22222] swapcached 116813824 [ 1595.645256][T22222] pgpgin 3008912 [ 1595.645262][T22222] pgpgout 2935478 [ 1595.645268][T22222] pgfault 1328841 [ 1595.645274][T22222] pgmajfault 492 [ 1595.645280][T22222] inactive_anon 194220032 [ 1595.645287][T22222] active_anon 114941952 [ 1595.645294][T22222] inactive_file 0 [ 1595.645300][T22222] active_file 0 [ 1595.645306][T22222] unevictable 0 [ 1595.645312][T22222] hierarchical_memory_limit 314572800 [ 1595.645319][T22222] hierarchical_memsw_limit 9223372036854771712 [ 1595.645326][T22222] total_cache 308867072 [ 1595.645333][T22222] total_rss 266240 [ 1595.645339][T22222] total_rss_huge 0 [ 1595.645345][T22222] total_shmem 308867072 [ 1595.645351][T22222] total_mapped_file 43331584 [ 1595.645358][T22222] total_dirty 0 [ 1595.645364][T22222] total_writeback 0 [ 1595.645370][T22222] total_workingset_refault_anon 2987 [ 1595.645377][T22222] total_workingset_refault_file 38460 [ 1595.645384][T22222] total_swap 39596032 [ 1595.645390][T22222] total_swapcached 116813824 [ 1595.645396][T22222] total_pgpgin 3008912 [ 1595.645402][T22222] total_pgpgout 2935478 [ 1595.645408][T22222] total_pgfault 1328841 [ 1595.645414][T22222] total_pgmajfault 492 [ 1595.645420][T22222] total_inactive_anon 194220032 [ 1595.645427][T22222] total_active_anon 114941952 [ 1595.645433][T22222] total_inactive_file 0 [ 1595.645439][T22222] total_active_file 0 [ 1595.645445][T22222] total_unevictable 0 [ 1595.645451][T22222] anon_cost 0 [ 1595.645457][T22222] file_cost 0 [ 1595.645463][T22222] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4171,pid=22222,uid=0 [ 1595.645539][T22222] Memory cgroup out of memory: Killed process 22222 (syz.2.4171) total-vm:104444kB, anon-rss:1440kB, file-rss:27972kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 1595.895931][ T5611] syz-executor invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=0 [ 1595.895965][ T5611] CPU: 0 UID: 0 PID: 5611 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1595.895987][ T5611] Tainted: [L]=SOFTLOCKUP [ 1595.895993][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1595.896002][ T5611] Call Trace: [ 1595.896009][ T5611] [ 1595.896016][ T5611] dump_stack_lvl+0x100/0x190 [ 1595.896044][ T5611] dump_header+0xfb/0x606 [ 1595.896064][ T5611] oom_kill_process.cold+0xd/0x380 [ 1595.896084][ T5611] out_of_memory+0x340/0x14f0 [ 1595.896113][ T5611] ? __pfx_out_of_memory+0x10/0x10 [ 1595.896144][ T5611] mem_cgroup_out_of_memory+0xc6/0x130 [ 1595.896165][ T5611] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1595.896184][ T5611] ? find_held_lock+0x2b/0x80 [ 1595.896213][ T5611] ? do_raw_spin_unlock+0x145/0x1e0 [ 1595.896235][ T5611] ? _raw_spin_unlock+0x28/0x50 [ 1595.896257][ T5611] try_charge_memcg+0x783/0xf60 [ 1595.896280][ T5611] ? __pfx_try_charge_memcg+0x10/0x10 [ 1595.896296][ T5611] ? find_held_lock+0x2b/0x80 [ 1595.896318][ T5611] ? rcu_read_unlock+0x17/0x60 [ 1595.896334][ T5611] ? rcu_read_unlock+0x17/0x60 [ 1595.896359][ T5611] obj_cgroup_charge_pages+0x2b/0x1f0 [ 1595.896379][ T5611] __memcg_kmem_charge_page+0x1c4/0x4d0 [ 1595.896400][ T5611] __alloc_frozen_pages_noprof+0x534/0x3300 [ 1595.896423][ T5611] ? lapic_next_event+0x10/0x20 [ 1595.896441][ T5611] ? clockevents_program_event+0x1b1/0x820 [ 1595.896470][ T5611] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1595.896491][ T5611] ? __pfx_clockevents_program_event+0x10/0x10 [ 1595.896516][ T5611] ? timerqueue_linked_add+0x260/0x430 [ 1595.896534][ T5611] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1595.896557][ T5611] ? tick_program_event+0xb0/0x140 [ 1595.896577][ T5611] ? hrtimer_reprogram+0x165/0x6c0 [ 1595.896600][ T5611] ? find_held_lock+0x2b/0x80 [ 1595.896639][ T5611] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1595.896662][ T5611] ? policy_nodemask+0xed/0x4f0 [ 1595.896692][ T5611] alloc_pages_mpol+0x201/0x550 [ 1595.896717][ T5611] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1595.896743][ T5611] ? do_raw_spin_lock+0x128/0x260 [ 1595.896768][ T5611] alloc_pages_noprof+0x1a/0x160 [ 1595.896786][ T5611] pte_alloc_one+0x1c/0x3d0 [ 1595.896809][ T5611] __pte_alloc+0x6d/0x380 [ 1595.896829][ T5611] ? __pfx___pte_alloc+0x10/0x10 [ 1595.896848][ T5611] ? __pfx___might_resched+0x10/0x10 [ 1595.896865][ T5611] ? copy_page_range+0x1c91/0x57c0 [ 1595.896885][ T5611] copy_page_range+0x3b36/0x57c0 [ 1595.896930][ T5611] ? __pfx_copy_page_range+0x10/0x10 [ 1595.896953][ T5611] ? mas_wr_store_entry+0xa4/0x1d50 [ 1595.896978][ T5611] ? lock_acquire+0x1d1/0x380 [ 1595.896996][ T5611] ? dup_mmap+0xd0a/0x2370 [ 1595.897023][ T5611] ? find_held_lock+0x2b/0x80 [ 1595.897045][ T5611] ? dup_mmap+0xe66/0x2370 [ 1595.897066][ T5611] ? dup_mmap+0xe66/0x2370 [ 1595.897088][ T5611] ? down_write+0x146/0x1f0 [ 1595.897114][ T5611] ? up_write+0x2dc/0x5b0 [ 1595.897137][ T5611] dup_mmap+0x1230/0x2370 [ 1595.897170][ T5611] ? __pfx_dup_mmap+0x10/0x10 [ 1595.897191][ T5611] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1595.897214][ T5611] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1595.897237][ T5611] ? __lock_acquire+0x5c0/0x1f40 [ 1595.897266][ T5611] ? lock_acquire+0x1d1/0x380 [ 1595.897284][ T5611] ? copy_process+0x4816/0x8380 [ 1595.897313][ T5611] copy_process+0x4821/0x8380 [ 1595.897345][ T5611] ? __pfx_copy_process+0x10/0x10 [ 1595.897368][ T5611] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1595.897397][ T5611] kernel_clone+0x176/0x9d0 [ 1595.897418][ T5611] ? __pfx_kernel_clone+0x10/0x10 [ 1595.897442][ T5611] ? __might_fault+0xc5/0x140 [ 1595.897460][ T5611] ? find_held_lock+0x2b/0x80 [ 1595.897482][ T5611] ? __might_fault+0xc5/0x140 [ 1595.897503][ T5611] __do_sys_clone+0xd9/0x120 [ 1595.897522][ T5611] ? __pfx___do_sys_clone+0x10/0x10 [ 1595.897561][ T5611] do_syscall_64+0x123/0x790 [ 1595.897587][ T5611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.897606][ T5611] RIP: 0033:0x7f087c3c6fd2 [ 1595.897621][ T5611] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1595.897636][ T5611] RSP: 002b:00007ffcec08ed40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1595.897652][ T5611] RAX: ffffffffffffffda RBX: 00007ffcec08ed40 RCX: 00007f087c3c6fd2 [ 1595.897663][ T5611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1595.897672][ T5611] RBP: 00007ffcec08eecc R08: 0000000000000000 R09: 0000000000000001 [ 1595.897682][ T5611] R10: 000055557eaa87d0 R11: 0000000000000246 R12: 0000000000000001 [ 1595.897697][ T5611] R13: 00000000000927c0 R14: 000000000016d14c R15: 00007ffcec08ef20 [ 1595.897720][ T5611] [ 1595.897727][ T5611] memory: usage 307200kB, limit 307200kB, failcnt 100003 [ 1595.897737][ T5611] memory+swap: usage 345868kB, limit 9007199254740988kB, failcnt 0 [ 1595.897748][ T5611] kmem: usage 5284kB, limit 9007199254740988kB, failcnt 0 [ 1595.897757][ T5611] Memory cgroup stats for /syz2: [ 1595.897857][ T5611] cache 308867072 [ 1595.897864][ T5611] rss 253952 [ 1595.897870][ T5611] rss_huge 0 [ 1595.897875][ T5611] shmem 308867072 [ 1595.897881][ T5611] mapped_file 569344 [ 1595.897887][ T5611] dirty 0 [ 1595.897893][ T5611] writeback 0 [ 1595.897899][ T5611] workingset_refault_anon 2987 [ 1595.897905][ T5611] workingset_refault_file 38460 [ 1595.897912][ T5611] swap 39596032 [ 1595.897918][ T5611] swapcached 116813824 [ 1595.897924][ T5611] pgpgin 3008912 [ 1595.897930][ T5611] pgpgout 2935478 [ 1595.897936][ T5611] pgfault 1328841 [ 1595.897942][ T5611] pgmajfault 492 [ 1595.897948][ T5611] inactive_anon 194220032 [ 1595.897954][ T5611] active_anon 114941952 [ 1595.897960][ T5611] inactive_file 0 [ 1595.897966][ T5611] active_file 0 [ 1595.897971][ T5611] unevictable 0 [ 1595.897977][ T5611] hierarchical_memory_limit 314572800 [ 1595.897984][ T5611] hierarchical_memsw_limit 9223372036854771712 [ 1595.897991][ T5611] total_cache 308867072 [ 1595.897997][ T5611] total_rss 253952 [ 1595.898003][ T5611] total_rss_huge 0 [ 1595.898009][ T5611] total_shmem 308867072 [ 1595.898016][ T5611] total_mapped_file 569344 [ 1595.898022][ T5611] total_dirty 0 [ 1595.898028][ T5611] total_writeback 0 [ 1595.898034][ T5611] total_workingset_refault_anon 2987 [ 1595.898041][ T5611] total_workingset_refault_file 38460 [ 1595.898048][ T5611] total_swap 39596032 [ 1595.898054][ T5611] total_swapcached 116813824 [ 1595.898060][ T5611] total_pgpgin 3008912 [ 1595.898066][ T5611] total_pgpgout 2935478 [ 1595.898072][ T5611] total_pgfault 1328841 [ 1595.898079][ T5611] total_pgmajfault 492 [ 1595.898085][ T5611] total_inactive_anon 194220032 [ 1595.898091][ T5611] total_active_anon 114941952 [ 1595.898097][ T5611] total_inactive_file 0 [ 1595.898104][ T5611] total_active_file 0 [ 1595.898110][ T5611] total_unevictable 0 [ 1595.898116][ T5611] anon_cost 0 [ 1595.898121][ T5611] file_cost 0 [ 1595.898128][ T5611] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3472,pid=19117,uid=0 [ 1595.898209][ T5611] Memory cgroup out of memory: Killed process 19117 (syz.2.3472) total-vm:102264kB, anon-rss:1272kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:0 [ 1598.281753][ T31] audit: type=1400 audit(1792013112.156:3258): avc: denied { firmware_load } for pid=22253 comm="syz.3.4184" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1600.959453][ T31] audit: type=1400 audit(1792013114.653:3259): avc: denied { getopt } for pid=22280 comm="syz.6.4189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1600.969580][T22284] netlink: 'syz.6.4189': attribute type 11 has an invalid length. [ 1600.969649][T22284] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4189'. [ 1602.297542][ T31] audit: type=1800 audit(1792013115.907:3260): pid=22287 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.4190" name="nullb0" dev="tmpfs" ino=857 res=0 errno=0 [ 1602.484471][T22290] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4191'. [ 1603.920899][ T31] audit: type=1400 audit(1792013117.431:3261): avc: denied { read } for pid=22298 comm="syz.3.4194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1603.979526][ T31] audit: type=1400 audit(1792013117.487:3262): avc: denied { setopt } for pid=22298 comm="syz.3.4194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1604.844086][ T31] audit: type=1800 audit(1792013118.301:3263): pid=22312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4789 res=0 errno=0 [ 1605.173334][ T31] audit: type=1400 audit(1792013118.526:3264): avc: denied { read write } for pid=22318 comm="syz.7.4193" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1605.173386][ T31] audit: type=1400 audit(1792013118.526:3265): avc: denied { open } for pid=22318 comm="syz.7.4193" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1607.188734][T22330] kAFS: unable to lookup cell '(G' [ 1607.303515][ T8898] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1608.081465][T22353] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4206'. [ 1608.093811][ T8898] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1608.094657][ T8898] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1608.094675][ T8898] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1608.096333][ T8898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.096351][ T8898] usb 7-1: Product: syz [ 1608.096365][ T8898] usb 7-1: Manufacturer: syz [ 1608.096377][ T8898] usb 7-1: SerialNumber: syz [ 1608.126670][ T8898] usb 7-1: config 0 descriptor?? [ 1608.141595][ T31] audit: type=1800 audit(1792013121.379:3266): pid=22343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=316848 res=0 errno=0 [ 1608.219995][ T31] audit: type=1800 audit(1792013121.463:3267): pid=22343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=316880 res=0 errno=0 [ 1608.220967][ T31] audit: type=1800 audit(1792013121.463:3268): pid=22343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=316855 res=0 errno=0 [ 1608.223236][ T31] audit: type=1800 audit(1792013121.463:3269): pid=22343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=316856 res=0 errno=0 [ 1608.230676][ T31] audit: type=1800 audit(1792013121.472:3270): pid=22343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=316877 res=0 errno=0 [ 1608.495029][ T8898] usb 7-1: USB disconnect, device number 36 [ 1609.444606][T22355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1609.456603][T22355] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1609.457206][T22355] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1609.457941][T22355] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1609.471196][T22355] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1609.496461][T22355] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1609.497283][T22355] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1609.498543][T22355] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1609.554348][T22355] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1609.608487][T22355] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1609.636727][T22355] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 1609.771197][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1609.771234][ T31] audit: type=1800 audit(1792013122.885:3274): pid=22365 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4211" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 1610.288176][ T60] bridge0: port 3(vlan0) entered blocking state [ 1610.288282][ T60] bridge0: port 3(vlan0) entered forwarding state [ 1610.347170][T18085] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1610.347202][T18085] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1610.347232][T18085] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1610.347253][T18085] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1610.347279][T18085] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1610.347300][T18085] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1610.401207][T18085] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1610.401235][T18085] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1611.306639][T22372] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1611.636437][T22372] netlink: 'syz.6.4215': attribute type 1 has an invalid length. [ 1611.636459][T22372] nbd: error processing sock list [ 1612.984961][ T31] audit: type=1800 audit(1792013125.906:3275): pid=22343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=18823 res=0 errno=0 [ 1613.811017][T22378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4215'. [ 1617.529574][ T31] audit: type=1800 audit(1792013130.162:3276): pid=22429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=316918 res=0 errno=0 [ 1617.579233][T22427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.579692][T22427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.666302][T22431] virtio-fs: tag not found [ 1620.844398][T22427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1620.896672][T22427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1620.994084][T22438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4221'. [ 1621.957177][T11180] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.957222][T11180] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.957254][T11180] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.005577][T11180] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.947142][ T31] audit: type=1800 audit(1792013135.232:3277): pid=22457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=316944 res=0 errno=0 [ 1623.010251][ T31] audit: type=1800 audit(1792013135.288:3278): pid=22458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=316956 res=0 errno=0 [ 1623.039314][ T31] audit: type=1800 audit(1792013135.316:3279): pid=22456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=316932 res=0 errno=0 [ 1625.763014][T22486] xt_CONNSECMARK: invalid mode: 66 [ 1626.923266][ T31] audit: type=1800 audit(1792013138.946:3280): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=316970 res=0 errno=0 [ 1626.928664][ T31] audit: type=1800 audit(1792013138.946:3281): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=316985 res=0 errno=0 [ 1627.229482][T22494] virtio-fs: tag not found [ 1627.823233][T22480] tipc: Started in network mode [ 1627.823260][T22480] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1627.823297][T22480] tipc: Enabling of bearer rejected, failed to enable media [ 1630.522724][T22510] bridge2: entered promiscuous mode [ 1630.987111][ T31] audit: type=1400 audit(1792013142.753:3282): avc: denied { setopt } for pid=22505 comm="syz.6.4243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1631.237795][T22509] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1631.629700][T22516] virtio-fs: tag not found [ 1632.279964][T22520] syzkaller0: entered promiscuous mode [ 1632.279987][T22520] syzkaller0: entered allmulticast mode [ 1632.375271][ T31] audit: type=1800 audit(1792013144.053:3283): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31498 res=0 errno=0 [ 1632.401570][ T31] audit: type=1800 audit(1792013144.062:3284): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31521 res=0 errno=0 [ 1633.656289][ T31] audit: type=1800 audit(1792013145.250:3285): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31548 res=0 errno=0 [ 1633.684722][ T31] audit: type=1800 audit(1792013145.259:3286): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31571 res=0 errno=0 [ 1634.839671][ T8896] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1635.025769][ T8896] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1635.780156][ T8896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.780173][ T8896] usb 9-1: Product: syz [ 1635.780182][ T8896] usb 9-1: Manufacturer: syz [ 1635.780191][ T8896] usb 9-1: SerialNumber: syz [ 1635.783223][ T8896] usb 9-1: config 0 descriptor?? [ 1635.786809][ T31] audit: type=1800 audit(1792013147.243:3287): pid=22529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317245 res=0 errno=0 [ 1635.786853][ T31] audit: type=1800 audit(1792013147.243:3288): pid=22529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=317277 res=0 errno=0 [ 1635.788619][ T31] audit: type=1800 audit(1792013147.243:3289): pid=22529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=317252 res=0 errno=0 [ 1635.788653][ T31] audit: type=1800 audit(1792013147.243:3290): pid=22529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=317253 res=0 errno=0 [ 1635.803631][ T8896] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1635.825098][ T8896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1635.830471][ T8896] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1635.830510][ T8896] usb 9-1: media controller created [ 1635.909574][ T8896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1636.290602][ T8896] DVB: Unable to find symbol mt352_attach() [ 1636.838153][T22572] virtio-fs: tag not found [ 1636.941481][ T8896] DVB: Unable to find symbol nxt6000_attach() [ 1636.941498][ T8896] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1636.948193][ T8896] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input51 [ 1636.974401][ T31] audit: type=1400 audit(1792013148.346:3291): avc: denied { read } for pid=4959 comm="acpid" name="event4" dev="devtmpfs" ino=3806 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1636.974449][ T31] audit: type=1400 audit(1792013148.346:3292): avc: denied { open } for pid=4959 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3806 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1636.974481][ T31] audit: type=1400 audit(1792013148.346:3293): avc: denied { ioctl } for pid=4959 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3806 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1636.977794][ T8896] dvb-usb: schedule remote query interval to 1000 msecs. [ 1636.977811][ T8896] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1636.977826][ T8896] dvb-usb: bulk message failed: -22 (7/0) [ 1636.977839][ T8896] dvb-usb: bulk message failed: -22 (7/0) [ 1637.053014][ T8896] usb 9-1: USB disconnect, device number 5 [ 1637.162205][ T8896] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1637.165022][ T31] audit: type=1800 audit(1792013148.533:3294): pid=22529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=317274 res=0 errno=0 [ 1637.165068][ T31] audit: type=1800 audit(1792013148.533:3295): pid=22529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=317275 res=0 errno=0 [ 1637.175658][ T31] audit: type=1800 audit(1792013148.533:3296): pid=22529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=317254 res=0 errno=0 [ 1638.202409][ T31] audit: type=1400 audit(1792013149.067:3297): avc: denied { bind } for pid=22574 comm="syz.8.4260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1638.202471][ T31] audit: type=1400 audit(1792013149.067:3298): avc: denied { listen } for pid=22574 comm="syz.8.4260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1638.202503][ T31] audit: type=1400 audit(1792013149.076:3299): avc: denied { accept } for pid=22574 comm="syz.8.4260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1638.468207][ T31] audit: type=1800 audit(1792013149.749:3300): pid=22584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=27442 res=0 errno=0 [ 1639.216108][T22599] virtio-fs: tag not found [ 1640.239040][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1640.239091][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1640.980752][T22614] tipc: Enabling of bearer rejected, failed to enable media [ 1641.084698][T22603] batman_adv: batadv0: Adding interface: dummy0 [ 1641.084717][T22603] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1641.084746][T22603] batman_adv: batadv0: Interface activated: dummy0 [ 1641.376991][T22603] batadv0: mtu less than device minimum [ 1641.379627][T22603] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1641.380118][T22603] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1641.380630][T22603] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1641.381108][T22603] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1641.383076][T22603] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1641.383932][T22603] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1641.384783][T22603] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1641.385641][T22603] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1641.386542][T22603] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1643.432412][T22643] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1643.432430][T22643] CPU: 0 UID: 0 PID: 22643 Comm: syz.7.4272 Tainted: G L syzkaller #0 PREEMPT(full) [ 1643.432447][T22643] Tainted: [L]=SOFTLOCKUP [ 1643.432452][T22643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1643.432459][T22643] Call Trace: [ 1643.432464][T22643] [ 1643.432471][T22643] dump_stack_lvl+0x100/0x190 [ 1643.432492][T22643] sysfs_warn_dup.cold+0x1c/0x28 [ 1643.432510][T22643] sysfs_create_dir_ns+0x24b/0x2b0 [ 1643.432531][T22643] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1643.432548][T22643] ? find_held_lock+0x2b/0x80 [ 1643.432564][T22643] ? kobject_add_internal+0x25f/0x930 [ 1643.432577][T22643] ? kobject_add_internal+0x25f/0x930 [ 1643.432592][T22643] ? class_dir_child_ns_type+0xd/0x60 [ 1643.432614][T22643] kobject_add_internal+0x2c8/0x930 [ 1643.432629][T22643] kobject_add+0x16a/0x1e0 [ 1643.432640][T22643] ? __pfx_kobject_add+0x10/0x10 [ 1643.432656][T22643] ? get_device_parent+0x1b3/0x4c0 [ 1643.432687][T22643] ? kobject_put+0xb9/0x640 [ 1643.432703][T22643] device_add+0x294/0x1970 [ 1643.432716][T22643] ? lockdep_init_map_type+0x5c/0x250 [ 1643.432730][T22643] ? __pfx_device_add+0x10/0x10 [ 1643.432741][T22643] ? lockdep_init_map_type+0x5c/0x250 [ 1643.432754][T22643] ? __init_waitqueue_head+0xca/0x150 [ 1643.432773][T22643] tty_register_device_attr+0x388/0x810 [ 1643.432790][T22643] ? lockdep_init_map_type+0x5c/0x250 [ 1643.432804][T22643] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1643.432824][T22643] ? tty_port_init+0x156/0x1c0 [ 1643.432843][T22643] gsm_activate_mux+0x155/0x2a0 [ 1643.432860][T22643] gsmld_ioctl+0xbbc/0x15c0 [ 1643.432876][T22643] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1643.432898][T22643] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1643.432913][T22643] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 1643.432929][T22643] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1643.432940][T22643] tty_ioctl+0x12f0/0x1800 [ 1643.432957][T22643] ? __pfx_tty_ioctl+0x10/0x10 [ 1643.432979][T22643] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1643.433000][T22643] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1643.433020][T22643] ? __fget_files+0x34/0x3d0 [ 1643.433044][T22643] ? selinux_file_ioctl+0x13b/0x290 [ 1643.433061][T22643] ? selinux_file_ioctl+0xb6/0x290 [ 1643.433079][T22643] ? __pfx_tty_ioctl+0x10/0x10 [ 1643.433096][T22643] __x64_sys_ioctl+0x18e/0x210 [ 1643.433111][T22643] do_syscall_64+0x123/0x790 [ 1643.433128][T22643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.433140][T22643] RIP: 0033:0x7f6e8bd9e559 [ 1643.433151][T22643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1643.433161][T22643] RSP: 002b:00007f6e8ccaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1643.433173][T22643] RAX: ffffffffffffffda RBX: 00007f6e8c026180 RCX: 00007f6e8bd9e559 [ 1643.433180][T22643] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 1643.433187][T22643] RBP: 00007f6e8be358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1643.433194][T22643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1643.433200][T22643] R13: 00007f6e8c026218 R14: 00007f6e8c026180 R15: 00007fffb3b379d8 [ 1643.433215][T22643] [ 1643.433227][T22643] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1644.045915][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 1644.045937][ T31] audit: type=1400 audit(1792013154.969:3302): avc: denied { mount } for pid=22639 comm="syz.3.4273" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1644.587724][ T31] audit: type=1800 audit(1792013155.465:3303): pid=22645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317432 res=0 errno=0 [ 1644.647424][ T31] audit: type=1800 audit(1792013155.530:3304): pid=22650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317456 res=0 errno=0 [ 1644.696735][ T31] audit: type=1800 audit(1792013155.558:3305): pid=22649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317444 res=0 errno=0 [ 1644.731636][ T31] audit: type=1800 audit(1792013155.605:3306): pid=22652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317469 res=0 errno=0 [ 1644.760055][ T31] audit: type=1800 audit(1792013155.624:3307): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317493 res=0 errno=0 [ 1644.760101][ T31] audit: type=1800 audit(1792013155.633:3308): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317505 res=0 errno=0 [ 1644.782478][ T31] audit: type=1800 audit(1792013155.652:3309): pid=22653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317481 res=0 errno=0 [ 1644.854390][ T31] audit: type=1800 audit(1792013155.717:3310): pid=22658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317517 res=0 errno=0 [ 1644.856733][ T8896] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1644.889965][ T31] audit: type=1800 audit(1792013155.755:3311): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=317529 res=0 errno=0 [ 1645.096743][ T8896] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1645.116825][ T8896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.116842][ T8896] usb 7-1: Product: syz [ 1645.116850][ T8896] usb 7-1: Manufacturer: syz [ 1645.116862][ T8896] usb 7-1: SerialNumber: syz [ 1645.170190][ T8896] usb 7-1: config 0 descriptor?? [ 1645.176142][ T8896] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1645.251784][ T8896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1645.255305][ T8896] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1645.255332][ T8896] usb 7-1: media controller created [ 1645.318342][T22665] virtio-fs: tag not found [ 1645.330158][ T8896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1645.792457][ T8896] DVB: Unable to find symbol mt352_attach() [ 1646.381680][T22645] udevd[22645]: setting mode of /dev/gsmtty31 to 020600 failed: No such file or directory [ 1646.381799][T22645] udevd[22645]: setting owner of /dev/gsmtty31 to uid=0, gid=0 failed: No such file or directory [ 1646.558995][ T8896] DVB: Unable to find symbol nxt6000_attach() [ 1646.559010][ T8896] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1646.644983][ T8896] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input52 [ 1646.713177][ T8896] dvb-usb: schedule remote query interval to 1000 msecs. [ 1646.713198][ T8896] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1646.713208][ T8896] dvb-usb: bulk message failed: -22 (7/0) [ 1646.713216][ T8896] dvb-usb: bulk message failed: -22 (7/0) [ 1646.807580][ T8896] usb 7-1: USB disconnect, device number 37 [ 1646.820754][T22680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4281'. [ 1647.162086][ T8896] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1651.299277][ T8896] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1651.649270][T22713] random: crng reseeded on system resumption [ 1651.649316][ T31] kauditd_printk_skb: 50 callbacks suppressed [ 1651.649324][ T31] audit: type=1400 audit(1792013162.078:3362): avc: denied { write } for pid=22712 comm="syz.8.4280" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1651.649352][ T31] audit: type=1400 audit(1792013162.078:3363): avc: denied { open } for pid=22712 comm="syz.8.4280" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1652.211221][T22722] jffs2: notice: (22722) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 1 orphan) found. [ 1652.283209][ T31] audit: type=1400 audit(1792013162.667:3364): avc: denied { write } for pid=22712 comm="syz.8.4280" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1652.283258][ T31] audit: type=1400 audit(1792013162.667:3365): avc: denied { add_name } for pid=22712 comm="syz.8.4280" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1652.283293][ T31] audit: type=1400 audit(1792013162.667:3366): avc: denied { create } for pid=22712 comm="syz.8.4280" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1652.365700][ T31] audit: type=1400 audit(1792013162.751:3367): avc: denied { read write } for pid=22712 comm="syz.8.4280" name="fillfile" dev="jffs2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1652.398005][ T31] audit: type=1400 audit(1792013162.751:3368): avc: denied { open } for pid=22712 comm="syz.8.4280" path="/newroot/71/mnt/fillfile" dev="jffs2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1653.962262][T22730] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1654.073121][ T8896] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1654.073155][ T8896] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 1654.073786][ T8896] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1654.073806][ T8896] usb 9-1: can't read configurations, error -71 [ 1665.714300][T22823] rxe_eth0 speed is unknown, defaulting to 1000 [ 1665.852658][T17781] Bluetooth: hci6: unexpected event for opcode 0x1001 [ 1665.856451][ T31] audit: type=1400 audit(1792013174.715:3369): avc: denied { mount } for pid=22820 comm="syz.8.4321" name="/" dev="ramfs" ino=80595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1665.861398][T22823] lo speed is unknown, defaulting to 1000 [ 1668.139586][ T31] audit: type=1804 audit(1792013177.493:3370): pid=22851 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.4327" name="file0" dev="tmpfs" ino=5601 res=1 errno=0 [ 1668.298289][T22841] batman_adv: batadv0: Adding interface: dummy0 [ 1668.298310][T22841] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1668.298337][T22841] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1668.863565][T22859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4330'. [ 1674.863316][T22896] rxe_eth0 speed is unknown, defaulting to 1000 [ 1674.962561][T22896] lo speed is unknown, defaulting to 1000 [ 1675.240055][T22899] virtio-fs: tag not found [ 1677.362566][T22909] syz.6.4344 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1677.362593][T22909] CPU: 1 UID: 0 PID: 22909 Comm: syz.6.4344 Tainted: G L syzkaller #0 PREEMPT(full) [ 1677.362609][T22909] Tainted: [L]=SOFTLOCKUP [ 1677.362613][T22909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1677.362620][T22909] Call Trace: [ 1677.362624][T22909] [ 1677.362629][T22909] dump_stack_lvl+0x100/0x190 [ 1677.362650][T22909] dump_header+0xfb/0x606 [ 1677.362665][T22909] oom_kill_process.cold+0xd/0x380 [ 1677.362679][T22909] out_of_memory+0x340/0x14f0 [ 1677.362699][T22909] ? __pfx_out_of_memory+0x10/0x10 [ 1677.362719][T22909] mem_cgroup_out_of_memory+0xc6/0x130 [ 1677.362735][T22909] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1677.362749][T22909] ? find_held_lock+0x2b/0x80 [ 1677.362769][T22909] ? do_raw_spin_unlock+0x145/0x1e0 [ 1677.362785][T22909] ? _raw_spin_unlock+0x28/0x50 [ 1677.362800][T22909] try_charge_memcg+0x783/0xf60 [ 1677.362815][T22909] ? __pfx_try_charge_memcg+0x10/0x10 [ 1677.362826][T22909] ? find_held_lock+0x2b/0x80 [ 1677.362843][T22909] ? rcu_read_unlock+0x17/0x60 [ 1677.362854][T22909] ? rcu_read_unlock+0x17/0x60 [ 1677.362866][T22909] ? find_held_lock+0x2b/0x80 [ 1677.362883][T22909] ? rcu_read_unlock+0x17/0x60 [ 1677.362898][T22909] charge_memcg+0x1ae/0x210 [ 1677.362910][T22909] __mem_cgroup_charge+0x2b/0x1c0 [ 1677.362925][T22909] shmem_alloc_and_add_folio+0x451/0xd40 [ 1677.362940][T22909] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1677.362953][T22909] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 1677.362969][T22909] shmem_get_folio_gfp+0x75b/0x1980 [ 1677.362984][T22909] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1677.362997][T22909] ? vm_normal_page+0x1d1/0x380 [ 1677.363011][T22909] ? __pfx_vm_normal_page+0x10/0x10 [ 1677.363029][T22909] shmem_write_begin+0x1a4/0x420 [ 1677.363042][T22909] ? __pfx_shmem_write_begin+0x10/0x10 [ 1677.363055][T22909] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1677.363071][T22909] generic_perform_write+0x292/0xa40 [ 1677.363086][T22909] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1677.363104][T22909] ? __pfx_generic_perform_write+0x10/0x10 [ 1677.363122][T22909] ? file_update_time_flags+0x38c/0x520 [ 1677.363141][T22909] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1677.363155][T22909] shmem_file_write_iter+0x10e/0x140 [ 1677.363170][T22909] __kernel_write_iter+0x2ac/0x930 [ 1677.363185][T22909] ? __pfx___kernel_write_iter+0x10/0x10 [ 1677.363199][T22909] ? cgroup1_freezing+0x12c/0x3b0 [ 1677.363214][T22909] ? cgroup1_freezing+0x136/0x3b0 [ 1677.363226][T22909] ? freezing_slow_path+0xb5/0x1a0 [ 1677.363239][T22909] dump_user_range+0x3f9/0xad0 [ 1677.363257][T22909] ? __pfx_dump_user_range+0x10/0x10 [ 1677.363276][T22909] ? __pfx_writenote+0x10/0x10 [ 1677.363291][T22909] ? elf_core_dump+0x1f25/0x3d20 [ 1677.363309][T22909] elf_core_dump+0x2d68/0x3d20 [ 1677.363332][T22909] ? __pfx_elf_core_dump+0x10/0x10 [ 1677.363347][T22909] ? kasan_save_stack+0x3f/0x50 [ 1677.363362][T22909] ? kasan_save_stack+0x30/0x50 [ 1677.363376][T22909] ? kasan_save_track+0x14/0x30 [ 1677.363390][T22909] ? __kasan_kmalloc+0xaa/0xb0 [ 1677.363404][T22909] ? vfs_coredump+0x21f6/0x54a0 [ 1677.363417][T22909] ? get_signal+0x1f2a/0x21e0 [ 1677.363429][T22909] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1677.363449][T22909] ? 0xffffffffff600000 [ 1677.363475][T22909] ? lock_acquire+0x1d1/0x380 [ 1677.363488][T22909] ? get_signal+0x1f2a/0x21e0 [ 1677.363505][T22909] ? vfs_coredump+0x281a/0x54a0 [ 1677.363518][T22909] vfs_coredump+0x281a/0x54a0 [ 1677.363538][T22909] ? __pfx_vfs_coredump+0x10/0x10 [ 1677.363552][T22909] ? __lock_acquire+0x5c0/0x1f40 [ 1677.363569][T22909] ? __lock_acquire+0x5c0/0x1f40 [ 1677.363583][T22909] ? lock_acquire+0x1d1/0x380 [ 1677.363596][T22909] ? unwind_next_frame+0xbd/0x2090 [ 1677.363614][T22909] ? lock_acquire+0x1d1/0x380 [ 1677.363630][T22909] ? bpf_ksym_find+0x128/0x1c0 [ 1677.363642][T22909] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1677.363658][T22909] ? arch_stack_walk+0xa6/0xf0 [ 1677.363678][T22909] ? __sigqueue_free+0xbe/0x2a0 [ 1677.363693][T22909] ? stack_trace_save+0x8e/0xc0 [ 1677.363704][T22909] ? __pfx_stack_trace_save+0x10/0x10 [ 1677.363717][T22909] ? stack_depot_save_flags+0x27/0x9f0 [ 1677.363728][T22909] ? __lock_acquire+0x5c0/0x1f40 [ 1677.363766][T22909] ? proc_coredump_connector+0x2d3/0x4f0 [ 1677.363781][T22909] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1677.363799][T22909] ? rcu_is_watching+0x13/0xc0 [ 1677.363818][T22909] get_signal+0x1f2a/0x21e0 [ 1677.363836][T22909] ? __pfx_get_signal+0x10/0x10 [ 1677.363853][T22909] arch_do_signal_or_restart+0x91/0x7e0 [ 1677.363871][T22909] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1677.363897][T22909] irqentry_exit+0x402/0xa10 [ 1677.363915][T22909] asm_exc_page_fault+0x26/0x30 [ 1677.363927][T22909] RIP: 0033:0x7f684eb9e561 [ 1677.363937][T22909] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1677.363948][T22909] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1677.363958][T22909] RAX: 0000000000000000 RBX: 00007f684ee26090 RCX: 00007f684eb9e559 [ 1677.363965][T22909] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1677.363972][T22909] RBP: 00007f684ec358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1677.363979][T22909] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1677.363986][T22909] R13: 00007f684ee26128 R14: 00007f684ee26090 R15: 00007ffec107b588 [ 1677.364001][T22909] [ 1677.364006][T22909] memory: usage 307200kB, limit 307200kB, failcnt 66710 [ 1677.364013][T22909] memory+swap: usage 416620kB, limit 9007199254740988kB, failcnt 0 [ 1677.364020][T22909] kmem: usage 9880kB, limit 9007199254740988kB, failcnt 0 [ 1677.364027][T22909] Memory cgroup stats for /syz6: [ 1677.364099][T22909] cache 302931968 [ 1677.364104][T22909] rss 1236992 [ 1677.364109][T22909] rss_huge 0 [ 1677.364113][T22909] shmem 302919680 [ 1677.364117][T22909] mapped_file 19431424 [ 1677.364121][T22909] dirty 0 [ 1677.364125][T22909] writeback 0 [ 1677.364129][T22909] workingset_refault_anon 368 [ 1677.364134][T22909] workingset_refault_file 9798 [ 1677.364142][T22909] swap 112046080 [ 1677.364147][T22909] swapcached 199892992 [ 1677.364151][T22909] pgpgin 2534001 [ 1677.364155][T22909] pgpgout 2461253 [ 1677.364159][T22909] pgfault 898537 [ 1677.364163][T22909] pgmajfault 3398 [ 1677.364167][T22909] inactive_anon 245866496 [ 1677.364172][T22909] active_anon 58355712 [ 1677.364176][T22909] inactive_file 4096 [ 1677.364180][T22909] active_file 8192 [ 1677.364184][T22909] unevictable 0 [ 1677.364188][T22909] hierarchical_memory_limit 314572800 [ 1677.364193][T22909] hierarchical_memsw_limit 9223372036854771712 [ 1677.364198][T22909] total_cache 302931968 [ 1677.364202][T22909] total_rss 1236992 [ 1677.364206][T22909] total_rss_huge 0 [ 1677.364210][T22909] total_shmem 302919680 [ 1677.364215][T22909] total_mapped_file 19431424 [ 1677.364220][T22909] total_dirty 0 [ 1677.364224][T22909] total_writeback 0 [ 1677.364228][T22909] total_workingset_refault_anon 368 [ 1677.364232][T22909] total_workingset_refault_file 9798 [ 1677.364237][T22909] total_swap 112046080 [ 1677.364241][T22909] total_swapcached 199892992 [ 1677.364246][T22909] total_pgpgin 2534001 [ 1677.364250][T22909] total_pgpgout 2461253 [ 1677.364255][T22909] total_pgfault 898537 [ 1677.364259][T22909] total_pgmajfault 3398 [ 1677.364263][T22909] total_inactive_anon 245866496 [ 1677.364268][T22909] total_active_anon 58355712 [ 1677.364273][T22909] total_inactive_file 4096 [ 1677.364277][T22909] total_active_file 8192 [ 1677.364282][T22909] total_unevictable 0 [ 1677.364286][T22909] anon_cost 0 [ 1677.364290][T22909] file_cost 0 [ 1677.364294][T22909] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4344,pid=22909,uid=0 [ 1677.364346][T22909] Memory cgroup out of memory: Killed process 22909 (syz.6.4344) total-vm:102396kB, anon-rss:1448kB, file-rss:27060kB, shmem-rss:7616kB, UID:0 pgtables:228kB oom_score_adj:1000 [ 1681.531437][ T31] audit: type=1400 audit(1792013190.028:3371): avc: denied { create } for pid=22936 comm="syz.7.4353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1681.891061][ T31] audit: type=1800 audit(1792013190.364:3372): pid=22941 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.4353" name="unbind" dev="sysfs" ino=5733 res=0 errno=0 [ 1681.957282][ T31] audit: type=1800 audit(1792013190.430:3373): pid=22941 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.4353" name="bind" dev="sysfs" ino=5734 res=0 errno=0 [ 1682.141207][ T31] audit: type=1800 audit(1792013190.598:3374): pid=22945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=1339 res=0 errno=0 [ 1682.355560][ T31] audit: type=1800 audit(1792013190.795:3375): pid=22946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=1324 res=0 errno=0 [ 1683.978141][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 33 (since boot) is 1034 jiffies old. [ 1687.734547][T22993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4366'. [ 1687.750198][ T31] audit: type=1400 audit(1792013195.855:3376): avc: denied { create } for pid=22992 comm="syz.3.4367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1687.936324][ T31] audit: type=1400 audit(1792013196.005:3377): avc: denied { sys_admin } for pid=22992 comm="syz.3.4367" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1688.074741][ T31] audit: type=1800 audit(1792013196.145:3378): pid=22993 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.4366" name="protocol" dev="sysfs" ino=45988 res=0 errno=0 [ 1688.100547][ T31] audit: type=1400 audit(1792013196.145:3379): avc: denied { accept } for pid=22995 comm="syz.8.4368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1688.177937][T22998] netdevsim netdevsim8 : renamed from netdevsim0 [ 1689.684844][ T31] audit: type=1400 audit(1792013197.661:3380): avc: denied { remount } for pid=23006 comm="syz.8.4370" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1690.818335][ T31] audit: type=1400 audit(1792013198.718:3381): avc: denied { write } for pid=23029 comm="syz.2.4376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1690.820572][T23035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4376'. [ 1690.986510][ T31] audit: type=1400 audit(1792013198.792:3382): avc: denied { mounton } for pid=23031 comm="syz.7.4378" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1691.411539][T23044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4379'. [ 1691.611237][ T31] audit: type=1400 audit(1792013199.457:3383): avc: denied { cmd } for pid=23033 comm="iou-wrk-23034" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 1691.669634][ T31] audit: type=1800 audit(1792013199.513:3384): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=326206 res=0 errno=0 [ 1691.763186][ T31] audit: type=1400 audit(1792013199.597:3385): avc: denied { map } for pid=23033 comm="syz.6.4377" path="/dev/ublkc5" dev="devtmpfs" ino=3920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1693.800351][T23058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=23058 comm=syz.2.4382 [ 1694.242517][ T31] audit: type=1400 audit(1792013201.917:3386): avc: denied { ioctl } for pid=23062 comm="syz.6.4385" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1694.663437][T23068] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4387'. [ 1696.000335][ T8888] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1696.182735][ T8888] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1696.188470][ T8888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.188495][ T8888] usb 7-1: Product: syz [ 1696.188508][ T8888] usb 7-1: Manufacturer: syz [ 1696.188521][ T8888] usb 7-1: SerialNumber: syz [ 1696.190051][ T8888] usb 7-1: config 0 descriptor?? [ 1696.192898][ T31] audit: type=1800 audit(1792013203.741:3387): pid=23077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=326304 res=0 errno=0 [ 1696.229395][ T8888] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1696.275417][ T8888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1696.276527][ T8888] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1696.276572][ T8888] usb 7-1: media controller created [ 1696.306389][ T31] audit: type=1800 audit(1792013203.853:3388): pid=23077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=326336 res=0 errno=0 [ 1696.307175][ T31] audit: type=1800 audit(1792013203.853:3389): pid=23077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=326311 res=0 errno=0 [ 1696.340100][ T31] audit: type=1800 audit(1792013203.881:3390): pid=23077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=326312 res=0 errno=0 [ 1696.389561][ T8888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1696.710620][ T8888] DVB: Unable to find symbol mt352_attach() [ 1697.010776][ T8888] DVB: Unable to find symbol nxt6000_attach() [ 1697.010787][ T8888] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1697.012211][ T8888] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input53 [ 1697.073963][ T8888] dvb-usb: schedule remote query interval to 1000 msecs. [ 1697.073977][ T8888] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1697.073987][ T8888] dvb-usb: bulk message failed: -22 (7/0) [ 1697.073995][ T8888] dvb-usb: bulk message failed: -22 (7/0) [ 1697.074843][ T31] audit: type=1800 audit(1792013204.573:3391): pid=23077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=326333 res=0 errno=0 [ 1697.075509][ T31] audit: type=1800 audit(1792013204.573:3392): pid=23077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=326334 res=0 errno=0 [ 1697.156002][ T8888] usb 7-1: USB disconnect, device number 38 [ 1697.266578][T23089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4394'. [ 1697.560357][ T8888] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1697.653444][ T31] audit: type=1800 audit(1792013205.106:3393): pid=23077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=326335 res=0 errno=0 [ 1701.450473][T23127] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4403'. [ 1701.566683][ T31] audit: type=1400 audit(1792013208.754:3394): avc: denied { mounton } for pid=23126 comm="syz.8.4402" path="/93/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1703.085090][ T31] audit: type=1800 audit(1792013210.186:3395): pid=23139 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.4408" name="file0" dev="tmpfs" ino=3068 res=0 errno=0 [ 1703.098959][ T31] audit: type=1400 audit(1792013210.195:3396): avc: denied { ioctl } for pid=23137 comm="syz.6.4408" path="socket:[82262]" dev="sockfs" ino=82262 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1703.332902][ T31] audit: type=1804 audit(1792013210.419:3397): pid=23139 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.4408" name="/newroot/551/file0" dev="tmpfs" ino=3068 res=1 errno=0 [ 1703.959382][ T8888] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1704.222603][ T8888] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1704.266677][ T8888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.266695][ T8888] usb 9-1: Product: syz [ 1704.266716][ T8888] usb 9-1: Manufacturer: syz [ 1704.266726][ T8888] usb 9-1: SerialNumber: syz [ 1704.269625][ T8888] usb 9-1: config 0 descriptor?? [ 1704.291375][ T31] audit: type=1800 audit(1792013211.317:3398): pid=23153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=326573 res=0 errno=0 [ 1704.333099][ T8888] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1704.352140][ T31] audit: type=1800 audit(1792013211.383:3399): pid=23153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=326605 res=0 errno=0 [ 1704.352612][ T8888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1704.353180][ T8888] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1704.353220][ T8888] usb 9-1: media controller created [ 1704.353363][ T31] audit: type=1800 audit(1792013211.383:3400): pid=23153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=326580 res=0 errno=0 [ 1704.441924][ T8888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1704.442338][ T31] audit: type=1800 audit(1792013211.458:3401): pid=23153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=326581 res=0 errno=0 [ 1705.433623][ T8888] DVB: Unable to find symbol mt352_attach() [ 1705.900927][ T8888] DVB: Unable to find symbol nxt6000_attach() [ 1705.900944][ T8888] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1705.927970][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1705.928000][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1705.929878][ T8888] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input54 [ 1707.817165][ T8888] dvb-usb: schedule remote query interval to 1000 msecs. [ 1707.817179][ T8888] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1707.817188][ T8888] dvb-usb: bulk message failed: -22 (7/0) [ 1707.817197][ T8888] dvb-usb: bulk message failed: -22 (7/0) [ 1707.835894][ T8888] usb 9-1: USB disconnect, device number 8 [ 1709.035092][ T8888] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1709.036813][ T31] audit: type=1800 audit(1792013215.761:3402): pid=23153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=326602 res=0 errno=0 [ 1709.037346][ T31] audit: type=1800 audit(1792013215.761:3403): pid=23153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=326603 res=0 errno=0 [ 1709.037986][ T31] audit: type=1800 audit(1792013215.761:3404): pid=23153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=326582 res=0 errno=0 [ 1709.158928][ T31] audit: type=1800 audit(1792013215.873:3405): pid=23153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=326604 res=0 errno=0 [ 1710.678574][ T31] audit: type=1800 audit(1792013217.295:3406): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=326757 res=0 errno=0 [ 1710.882870][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 37 (since boot) is 1079 jiffies old. [ 1712.854711][T23198] syz.3.4421 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1712.854735][T23198] CPU: 1 UID: 0 PID: 23198 Comm: syz.3.4421 Tainted: G L syzkaller #0 PREEMPT(full) [ 1712.854751][T23198] Tainted: [L]=SOFTLOCKUP [ 1712.854756][T23198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1712.854763][T23198] Call Trace: [ 1712.854767][T23198] [ 1712.854772][T23198] dump_stack_lvl+0x100/0x190 [ 1712.854793][T23198] dump_header+0xfb/0x606 [ 1712.854807][T23198] oom_kill_process.cold+0xd/0x380 [ 1712.854822][T23198] out_of_memory+0x340/0x14f0 [ 1712.854843][T23198] ? __pfx_out_of_memory+0x10/0x10 [ 1712.854863][T23198] mem_cgroup_out_of_memory+0xc6/0x130 [ 1712.854884][T23198] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1712.854905][T23198] ? find_held_lock+0x2b/0x80 [ 1712.854925][T23198] ? do_raw_spin_unlock+0x145/0x1e0 [ 1712.854948][T23198] ? _raw_spin_unlock+0x28/0x50 [ 1712.854964][T23198] try_charge_memcg+0x783/0xf60 [ 1712.854979][T23198] ? __pfx_try_charge_memcg+0x10/0x10 [ 1712.854990][T23198] ? find_held_lock+0x2b/0x80 [ 1712.855012][T23198] ? rcu_read_unlock+0x17/0x60 [ 1712.855031][T23198] ? rcu_read_unlock+0x17/0x60 [ 1712.855044][T23198] ? find_held_lock+0x2b/0x80 [ 1712.855061][T23198] ? rcu_read_unlock+0x17/0x60 [ 1712.855076][T23198] charge_memcg+0x1ae/0x210 [ 1712.855089][T23198] __mem_cgroup_charge+0x2b/0x1c0 [ 1712.855103][T23198] shmem_alloc_and_add_folio+0x451/0xd40 [ 1712.855119][T23198] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1712.855132][T23198] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 1712.855147][T23198] shmem_get_folio_gfp+0x75b/0x1980 [ 1712.855163][T23198] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1712.855176][T23198] ? filemap_map_pages+0x1155/0x2060 [ 1712.855196][T23198] shmem_fault+0x1fb/0xa30 [ 1712.855209][T23198] ? __pfx_shmem_fault+0x10/0x10 [ 1712.855222][T23198] ? __pfx_filemap_map_pages+0x10/0x10 [ 1712.855241][T23198] ? find_held_lock+0x2b/0x80 [ 1712.855260][T23198] ? __pfx_filemap_map_pages+0x10/0x10 [ 1712.855276][T23198] __do_fault+0x10b/0x440 [ 1712.855291][T23198] do_fault+0xb3f/0x1830 [ 1712.855307][T23198] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 1712.855320][T23198] ? __pfx_do_fault+0x10/0x10 [ 1712.855335][T23198] ? rcu_read_unlock+0x2d/0xb0 [ 1712.855346][T23198] ? rcu_read_unlock+0x2d/0xb0 [ 1712.855357][T23198] ? __pte_offset_map+0x179/0x310 [ 1712.855374][T23198] __handle_mm_fault+0x150b/0x2f60 [ 1712.855389][T23198] ? __pfx___handle_mm_fault+0x10/0x10 [ 1712.855400][T23198] ? pte_offset_map_lock+0x174/0x320 [ 1712.855415][T23198] ? find_held_lock+0x2b/0x80 [ 1712.855432][T23198] ? find_held_lock+0x2b/0x80 [ 1712.855451][T23198] ? follow_page_pte+0x536/0x1050 [ 1712.855475][T23198] handle_mm_fault+0x363/0xa20 [ 1712.855489][T23198] __get_user_pages+0x8ae/0x2c30 [ 1712.855508][T23198] ? __pfx_mt_find+0x10/0x10 [ 1712.855526][T23198] ? __pfx___get_user_pages+0x10/0x10 [ 1712.855547][T23198] populate_vma_page_range+0x267/0x3f0 [ 1712.855565][T23198] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1712.855580][T23198] ? __pfx_find_vma_intersection+0x10/0x10 [ 1712.855600][T23198] __mm_populate+0x107/0x3a0 [ 1712.855617][T23198] ? __pfx___mm_populate+0x10/0x10 [ 1712.855634][T23198] ? up_write+0x2dc/0x5b0 [ 1712.855650][T23198] vm_mmap_pgoff+0x441/0x470 [ 1712.855666][T23198] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1712.855684][T23198] ? __pfx_do_futex+0x10/0x10 [ 1712.855703][T23198] ksys_mmap_pgoff+0xe4/0x610 [ 1712.855719][T23198] ? __x64_sys_futex+0x358/0x4d0 [ 1712.855736][T23198] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1712.855751][T23198] ? xfd_validate_state+0x129/0x190 [ 1712.855767][T23198] __x64_sys_mmap+0x125/0x190 [ 1712.855782][T23198] do_syscall_64+0x123/0x790 [ 1712.855800][T23198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.855812][T23198] RIP: 0033:0x7f17f299e559 [ 1712.855822][T23198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1712.855832][T23198] RSP: 002b:00007f17f3806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1712.855844][T23198] RAX: ffffffffffffffda RBX: 00007f17f2c25fa0 RCX: 00007f17f299e559 [ 1712.855851][T23198] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1712.855858][T23198] RBP: 00007f17f2a358b0 R08: ffffffffffffffff R09: 000000001b5cb000 [ 1712.855865][T23198] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1712.855872][T23198] R13: 00007f17f2c26038 R14: 00007f17f2c25fa0 R15: 00007ffd85bf4358 [ 1712.855890][T23198] [ 1712.855901][T23198] memory: usage 307200kB, limit 307200kB, failcnt 78263 [ 1712.855909][T23198] memory+swap: usage 361000kB, limit 9007199254740988kB, failcnt 0 [ 1712.855916][T23198] kmem: usage 6420kB, limit 9007199254740988kB, failcnt 0 [ 1712.855923][T23198] Memory cgroup stats for /syz3: [ 1713.392306][T23198] cache 307249152 [ 1713.392318][T23198] rss 688128 [ 1713.392322][T23198] rss_huge 0 [ 1713.392326][T23198] shmem 307195904 [ 1713.392331][T23198] mapped_file 112070656 [ 1713.392335][T23198] dirty 0 [ 1713.392339][T23198] writeback 0 [ 1713.392343][T23198] workingset_refault_anon 7323 [ 1713.392348][T23198] workingset_refault_file 29881 [ 1713.392353][T23198] swap 55091200 [ 1713.392357][T23198] swapcached 139071488 [ 1713.392361][T23198] pgpgin 3333864 [ 1713.392366][T23198] pgpgout 3260713 [ 1713.392370][T23198] pgfault 1453219 [ 1713.392374][T23198] pgmajfault 949 [ 1713.392378][T23198] inactive_anon 73326592 [ 1713.392383][T23198] active_anon 234618880 [ 1713.392387][T23198] inactive_file 8192 [ 1713.392391][T23198] active_file 45056 [ 1713.392395][T23198] unevictable 0 [ 1713.392400][T23198] hierarchical_memory_limit 314572800 [ 1713.392404][T23198] hierarchical_memsw_limit 9223372036854771712 [ 1713.392410][T23198] total_cache 307249152 [ 1713.392414][T23198] total_rss 688128 [ 1713.392418][T23198] total_rss_huge 0 [ 1713.392422][T23198] total_shmem 307195904 [ 1713.392427][T23198] total_mapped_file 112070656 [ 1713.392431][T23198] total_dirty 0 [ 1713.392440][T23198] total_writeback 0 [ 1713.392445][T23198] total_workingset_refault_anon 7323 [ 1713.392449][T23198] total_workingset_refault_file 29881 [ 1713.392454][T23198] total_swap 55091200 [ 1713.392459][T23198] total_swapcached 139071488 [ 1713.392463][T23198] total_pgpgin 3333864 [ 1713.392467][T23198] total_pgpgout 3260713 [ 1713.392472][T23198] total_pgfault 1453219 [ 1713.392476][T23198] total_pgmajfault 949 [ 1713.392480][T23198] total_inactive_anon 73326592 [ 1713.392485][T23198] total_active_anon 234618880 [ 1713.392490][T23198] total_inactive_file 8192 [ 1713.392494][T23198] total_active_file 45056 [ 1713.392499][T23198] total_unevictable 0 [ 1713.392503][T23198] anon_cost 0 [ 1713.392507][T23198] file_cost 0 [ 1713.392511][T23198] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4352,pid=22938,uid=0 [ 1713.392566][T23198] Memory cgroup out of memory: Killed process 22938 (syz.3.4352) total-vm:202752kB, anon-rss:1264kB, file-rss:20548kB, shmem-rss:61208kB, UID:0 pgtables:236kB oom_score_adj:0 [ 1713.738811][T23208] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4419'. [ 1713.904673][T23148] syz.3.4407 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1713.904697][T23148] CPU: 0 UID: 0 PID: 23148 Comm: syz.3.4407 Tainted: G L syzkaller #0 PREEMPT(full) [ 1713.904713][T23148] Tainted: [L]=SOFTLOCKUP [ 1713.904717][T23148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1713.904726][T23148] Call Trace: [ 1713.904731][T23148] [ 1713.904735][T23148] dump_stack_lvl+0x100/0x190 [ 1713.904756][T23148] dump_header+0xfb/0x606 [ 1713.904769][T23148] oom_kill_process.cold+0xd/0x380 [ 1713.904784][T23148] out_of_memory+0x340/0x14f0 [ 1713.904804][T23148] ? __pfx_out_of_memory+0x10/0x10 [ 1713.904825][T23148] mem_cgroup_out_of_memory+0xc6/0x130 [ 1713.904840][T23148] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1713.904854][T23148] ? find_held_lock+0x2b/0x80 [ 1713.904874][T23148] ? do_raw_spin_unlock+0x145/0x1e0 [ 1713.904890][T23148] ? _raw_spin_unlock+0x28/0x50 [ 1713.904907][T23148] try_charge_memcg+0x783/0xf60 [ 1713.904922][T23148] ? __pfx_try_charge_memcg+0x10/0x10 [ 1713.904932][T23148] ? find_held_lock+0x2b/0x80 [ 1713.904949][T23148] ? rcu_read_unlock+0x17/0x60 [ 1713.904960][T23148] ? rcu_read_unlock+0x17/0x60 [ 1713.904972][T23148] ? find_held_lock+0x2b/0x80 [ 1713.904989][T23148] ? rcu_read_unlock+0x17/0x60 [ 1713.905004][T23148] charge_memcg+0x1ae/0x210 [ 1713.905016][T23148] __mem_cgroup_charge+0x2b/0x1c0 [ 1713.905030][T23148] shmem_alloc_and_add_folio+0x451/0xd40 [ 1713.905046][T23148] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1713.905059][T23148] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 1713.905074][T23148] shmem_get_folio_gfp+0x75b/0x1980 [ 1713.905090][T23148] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1713.905102][T23148] ? vm_normal_page+0x1d1/0x380 [ 1713.905117][T23148] ? __pfx_vm_normal_page+0x10/0x10 [ 1713.905134][T23148] shmem_write_begin+0x1a4/0x420 [ 1713.905147][T23148] ? __pfx_shmem_write_begin+0x10/0x10 [ 1713.905160][T23148] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1713.905176][T23148] generic_perform_write+0x292/0xa40 [ 1713.905192][T23148] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1713.905210][T23148] ? __pfx_generic_perform_write+0x10/0x10 [ 1713.905228][T23148] ? file_update_time_flags+0x38c/0x520 [ 1713.905242][T23148] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1713.905256][T23148] shmem_file_write_iter+0x10e/0x140 [ 1713.905271][T23148] __kernel_write_iter+0x2ac/0x930 [ 1713.905285][T23148] ? find_held_lock+0x2b/0x80 [ 1713.905302][T23148] ? __pfx___kernel_write_iter+0x10/0x10 [ 1713.905315][T23148] ? cgroup1_freezing+0x12c/0x3b0 [ 1713.905330][T23148] ? cgroup1_freezing+0x136/0x3b0 [ 1713.905342][T23148] ? freezing_slow_path+0xb5/0x1a0 [ 1713.905355][T23148] dump_user_range+0x3f9/0xad0 [ 1713.905372][T23148] ? __pfx_dump_user_range+0x10/0x10 [ 1713.905392][T23148] ? __pfx_writenote+0x10/0x10 [ 1713.905407][T23148] ? elf_core_dump+0x1f25/0x3d20 [ 1713.905425][T23148] elf_core_dump+0x2d68/0x3d20 [ 1713.905448][T23148] ? __pfx_elf_core_dump+0x10/0x10 [ 1713.905463][T23148] ? kasan_save_stack+0x3f/0x50 [ 1713.905478][T23148] ? kasan_save_stack+0x30/0x50 [ 1713.905492][T23148] ? kasan_save_track+0x14/0x30 [ 1713.905505][T23148] ? __kasan_kmalloc+0xaa/0xb0 [ 1713.905520][T23148] ? vfs_coredump+0x21f6/0x54a0 [ 1713.905549][T23148] ? get_signal+0x1f2a/0x21e0 [ 1713.905561][T23148] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1713.905581][T23148] ? 0xffffffffff600000 [ 1713.905609][T23148] ? lock_acquire+0x1d1/0x380 [ 1713.905621][T23148] ? get_signal+0x1f2a/0x21e0 [ 1713.905639][T23148] ? vfs_coredump+0x281a/0x54a0 [ 1713.905652][T23148] vfs_coredump+0x281a/0x54a0 [ 1713.905672][T23148] ? __pfx_vfs_coredump+0x10/0x10 [ 1713.905687][T23148] ? __lock_acquire+0x5c0/0x1f40 [ 1713.905703][T23148] ? __lock_acquire+0x5c0/0x1f40 [ 1713.905718][T23148] ? lock_acquire+0x1d1/0x380 [ 1713.905730][T23148] ? unwind_next_frame+0xbd/0x2090 [ 1713.905750][T23148] ? lock_acquire+0x1d1/0x380 [ 1713.905766][T23148] ? bpf_ksym_find+0x128/0x1c0 [ 1713.905778][T23148] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1713.905795][T23148] ? arch_stack_walk+0xa6/0xf0 [ 1713.905815][T23148] ? __sigqueue_free+0xbe/0x2a0 [ 1713.905831][T23148] ? stack_trace_save+0x8e/0xc0 [ 1713.905842][T23148] ? __pfx_stack_trace_save+0x10/0x10 [ 1713.905854][T23148] ? stack_depot_save_flags+0x27/0x9f0 [ 1713.905866][T23148] ? __lock_acquire+0x5c0/0x1f40 [ 1713.905904][T23148] ? proc_coredump_connector+0x2d3/0x4f0 [ 1713.905920][T23148] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1713.905938][T23148] ? rcu_is_watching+0x13/0xc0 [ 1713.905957][T23148] get_signal+0x1f2a/0x21e0 [ 1713.905975][T23148] ? __pfx_get_signal+0x10/0x10 [ 1713.905988][T23148] ? __pfx_force_sig_fault+0x10/0x10 [ 1713.906007][T23148] arch_do_signal_or_restart+0x91/0x7e0 [ 1713.906031][T23148] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1713.906063][T23148] irqentry_exit+0x402/0xa10 [ 1713.906081][T23148] asm_exc_page_fault+0x26/0x30 [ 1713.906093][T23148] RIP: 0033:0x0 [ 1713.906101][T23148] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1713.906107][T23148] RSP: 002b:00002000000002c8 EFLAGS: 00010217 [ 1713.906117][T23148] RAX: 0000000000000000 RBX: 00007f17f2c25fa0 RCX: 00007f17f299e559 [ 1713.906124][T23148] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000020000 [ 1713.906131][T23148] RBP: 00007f17f2a358b0 R08: 00002000000007c0 R09: 00002000000007c0 [ 1713.906138][T23148] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1713.906145][T23148] R13: 00007f17f2c26038 R14: 00007f17f2c25fa0 R15: 00007ffd85bf4358 [ 1713.906160][T23148] [ 1713.922337][T23148] memory: usage 307200kB, limit 307200kB, failcnt 78540 [ 1713.922351][T23148] memory+swap: usage 361000kB, limit 9007199254740988kB, failcnt 0 [ 1713.922359][T23148] kmem: usage 6420kB, limit 9007199254740988kB, failcnt 0 [ 1713.922366][T23148] Memory cgroup stats for /syz3: [ 1713.934390][T23148] cache 307249152 [ 1713.934400][T23148] rss 688128 [ 1713.934404][T23148] rss_huge 0 [ 1713.934408][T23148] shmem 307245056 [ 1713.934412][T23148] mapped_file 102928384 [ 1713.934417][T23148] dirty 0 [ 1713.934421][T23148] writeback 0 [ 1713.934425][T23148] workingset_refault_anon 7323 [ 1713.934429][T23148] workingset_refault_file 29882 [ 1713.934434][T23148] swap 55091200 [ 1713.934438][T23148] swapcached 139071488 [ 1713.934442][T23148] pgpgin 3333877 [ 1713.934446][T23148] pgpgout 3260726 [ 1713.934450][T23148] pgfault 1453224 [ 1713.934454][T23148] pgmajfault 950 [ 1713.934458][T23148] inactive_anon 158015488 [ 1713.934463][T23148] active_anon 149979136 [ 1713.934467][T23148] inactive_file 0 [ 1713.934471][T23148] active_file 0 [ 1713.934475][T23148] unevictable 0 [ 1713.934479][T23148] hierarchical_memory_limit 314572800 [ 1713.934484][T23148] hierarchical_memsw_limit 9223372036854771712 [ 1714.321238][T23148] total_cache 307249152 [ 1714.321250][T23148] total_rss 688128 [ 1714.321254][T23148] total_rss_huge 0 [ 1714.321258][T23148] total_shmem 307245056 [ 1714.321262][T23148] total_mapped_file 102928384 [ 1714.321267][T23148] total_dirty 0 [ 1714.321271][T23148] total_writeback 0 [ 1714.321275][T23148] total_workingset_refault_anon 7323 [ 1714.321280][T23148] total_workingset_refault_file 29882 [ 1714.321285][T23148] total_swap 55091200 [ 1714.321289][T23148] total_swapcached 139071488 [ 1714.321293][T23148] total_pgpgin 3333877 [ 1714.321297][T23148] total_pgpgout 3260726 [ 1714.321302][T23148] total_pgfault 1453224 [ 1714.321306][T23148] total_pgmajfault 950 [ 1714.321310][T23148] total_inactive_anon 158015488 [ 1714.321315][T23148] total_active_anon 149979136 [ 1714.321319][T23148] total_inactive_file 0 [ 1714.321323][T23148] total_active_file 0 [ 1714.325577][T23148] total_unevictable 0 [ 1714.325587][T23148] anon_cost 0 [ 1714.325593][T23148] file_cost 0 [ 1714.325600][T23148] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4372,pid=23021,uid=0 [ 1714.327964][T23148] Memory cgroup out of memory: Killed process 23021 (syz.3.4372) total-vm:200572kB, anon-rss:1264kB, file-rss:20548kB, shmem-rss:43948kB, UID:0 pgtables:204kB oom_score_adj:0 [ 1714.688017][T23113] syz.3.4399 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1714.688042][T23113] CPU: 0 UID: 0 PID: 23113 Comm: syz.3.4399 Tainted: G L syzkaller #0 PREEMPT(full) [ 1714.688058][T23113] Tainted: [L]=SOFTLOCKUP [ 1714.688062][T23113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1714.688069][T23113] Call Trace: [ 1714.688073][T23113] [ 1714.688078][T23113] dump_stack_lvl+0x100/0x190 [ 1714.688100][T23113] dump_header+0xfb/0x606 [ 1714.688114][T23113] oom_kill_process.cold+0xd/0x380 [ 1714.688128][T23113] out_of_memory+0x340/0x14f0 [ 1714.688149][T23113] ? __pfx_out_of_memory+0x10/0x10 [ 1714.688169][T23113] mem_cgroup_out_of_memory+0xc6/0x130 [ 1714.688186][T23113] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1714.688200][T23113] ? find_held_lock+0x2b/0x80 [ 1714.688220][T23113] ? do_raw_spin_unlock+0x145/0x1e0 [ 1714.688236][T23113] ? _raw_spin_unlock+0x28/0x50 [ 1714.688252][T23113] try_charge_memcg+0x783/0xf60 [ 1714.688267][T23113] ? __pfx_try_charge_memcg+0x10/0x10 [ 1714.688278][T23113] ? find_held_lock+0x2b/0x80 [ 1714.688294][T23113] ? rcu_read_unlock+0x17/0x60 [ 1714.688306][T23113] ? rcu_read_unlock+0x17/0x60 [ 1714.688317][T23113] ? find_held_lock+0x2b/0x80 [ 1714.688335][T23113] ? rcu_read_unlock+0x17/0x60 [ 1714.688349][T23113] charge_memcg+0x1ae/0x210 [ 1714.688362][T23113] __mem_cgroup_charge+0x2b/0x1c0 [ 1714.688376][T23113] shmem_alloc_and_add_folio+0x451/0xd40 [ 1714.688392][T23113] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1714.688405][T23113] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 1714.688418][T23113] ? __lock_acquire+0x5c0/0x1f40 [ 1714.688432][T23113] shmem_get_folio_gfp+0x75b/0x1980 [ 1714.688447][T23113] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1714.688458][T23113] ? inode_set_ctime_current+0x9c/0x850 [ 1714.688470][T23113] ? find_held_lock+0x2b/0x80 [ 1714.688488][T23113] ? timestamp_truncate+0x22e/0x2f0 [ 1714.688507][T23113] shmem_write_begin+0x1a4/0x420 [ 1714.688521][T23113] ? __pfx_shmem_write_begin+0x10/0x10 [ 1714.688537][T23113] ? inode_set_ctime_current+0x283/0x850 [ 1714.688548][T23113] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1714.688562][T23113] ? inode_maybe_inc_iversion+0x169/0x220 [ 1714.688579][T23113] generic_perform_write+0x292/0xa40 [ 1714.688595][T23113] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1714.688613][T23113] ? __pfx_generic_perform_write+0x10/0x10 [ 1714.688630][T23113] ? mnt_put_write_access_file+0x4e/0x100 [ 1714.688647][T23113] ? file_update_time_flags+0x38c/0x520 [ 1714.688661][T23113] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1714.688675][T23113] shmem_file_write_iter+0x10e/0x140 [ 1714.688690][T23113] __kernel_write_iter+0x2ac/0x930 [ 1714.688705][T23113] ? find_held_lock+0x2b/0x80 [ 1714.688722][T23113] ? __pfx___kernel_write_iter+0x10/0x10 [ 1714.688735][T23113] ? cgroup1_freezing+0x12c/0x3b0 [ 1714.688750][T23113] ? cgroup1_freezing+0x136/0x3b0 [ 1714.688762][T23113] ? freezing_slow_path+0xb5/0x1a0 [ 1714.688775][T23113] dump_user_range+0x3f9/0xad0 [ 1714.688793][T23113] ? __pfx_dump_user_range+0x10/0x10 [ 1714.688813][T23113] ? __pfx_writenote+0x10/0x10 [ 1714.688828][T23113] ? elf_core_dump+0x2714/0x3d20 [ 1714.688846][T23113] elf_core_dump+0x2d68/0x3d20 [ 1714.688869][T23113] ? __pfx_elf_core_dump+0x10/0x10 [ 1714.688884][T23113] ? kasan_save_stack+0x3f/0x50 [ 1714.688898][T23113] ? kasan_save_stack+0x30/0x50 [ 1714.688912][T23113] ? kasan_save_track+0x14/0x30 [ 1714.688926][T23113] ? __kasan_kmalloc+0xaa/0xb0 [ 1714.688940][T23113] ? vfs_coredump+0x21f6/0x54a0 [ 1714.688953][T23113] ? get_signal+0x1f2a/0x21e0 [ 1714.688965][T23113] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1714.688985][T23113] ? 0xffffffffff600000 [ 1714.689012][T23113] ? lock_acquire+0x1d1/0x380 [ 1714.689025][T23113] ? get_signal+0x1f2a/0x21e0 [ 1714.689042][T23113] ? vfs_coredump+0x281a/0x54a0 [ 1714.689055][T23113] vfs_coredump+0x281a/0x54a0 [ 1714.689075][T23113] ? __pfx_vfs_coredump+0x10/0x10 [ 1714.689089][T23113] ? __lock_acquire+0x5c0/0x1f40 [ 1714.689106][T23113] ? __lock_acquire+0x5c0/0x1f40 [ 1714.689120][T23113] ? lock_acquire+0x1d1/0x380 [ 1714.689133][T23113] ? unwind_next_frame+0xbd/0x2090 [ 1714.689152][T23113] ? lock_acquire+0x1d1/0x380 [ 1714.689168][T23113] ? bpf_ksym_find+0x128/0x1c0 [ 1714.689180][T23113] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1714.689197][T23113] ? arch_stack_walk+0xa6/0xf0 [ 1714.689217][T23113] ? __sigqueue_free+0xbe/0x2a0 [ 1714.689233][T23113] ? stack_trace_save+0x8e/0xc0 [ 1714.689244][T23113] ? __pfx_stack_trace_save+0x10/0x10 [ 1714.689256][T23113] ? stack_depot_save_flags+0x27/0x9f0 [ 1714.689269][T23113] ? __lock_acquire+0x5c0/0x1f40 [ 1714.689306][T23113] ? proc_coredump_connector+0x2d3/0x4f0 [ 1714.689322][T23113] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1714.689340][T23113] ? rcu_is_watching+0x13/0xc0 [ 1714.689358][T23113] get_signal+0x1f2a/0x21e0 [ 1714.689377][T23113] ? __pfx_get_signal+0x10/0x10 [ 1714.689389][T23113] ? __pfx_force_sig_fault+0x10/0x10 [ 1714.689405][T23113] arch_do_signal_or_restart+0x91/0x7e0 [ 1714.689424][T23113] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1714.689450][T23113] irqentry_exit+0x402/0xa10 [ 1714.689468][T23113] asm_exc_page_fault+0x26/0x30 [ 1714.689479][T23113] RIP: 0033:0x0 [ 1714.689487][T23113] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1714.689492][T23113] RSP: 002b:00002000000002c8 EFLAGS: 00010217 [ 1714.689502][T23113] RAX: 0000000000000000 RBX: 00007f17f2c25fa0 RCX: 00007f17f299e559 [ 1714.689509][T23113] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000020000 [ 1714.689516][T23113] RBP: 00007f17f2a358b0 R08: 00002000000007c0 R09: 00002000000007c0 [ 1714.689526][T23113] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1714.689533][T23113] R13: 00007f17f2c26038 R14: 00007f17f2c25fa0 R15: 00007ffd85bf4358 [ 1714.689549][T23113] [ 1714.715067][T23113] memory: usage 307200kB, limit 307200kB, failcnt 78569 [ 1714.715083][T23113] memory+swap: usage 361000kB, limit 9007199254740988kB, failcnt 0 [ 1714.715094][T23113] kmem: usage 6420kB, limit 9007199254740988kB, failcnt 0 [ 1714.715104][T23113] Memory cgroup stats for /syz3: [ 1714.720875][T23113] cache 307249152 [ 1714.720887][T23113] rss 688128 [ 1714.720893][T23113] rss_huge 0 [ 1714.720899][T23113] shmem 307245056 [ 1714.720905][T23113] mapped_file 70610944 [ 1714.720912][T23113] dirty 0 [ 1714.720917][T23113] writeback 0 [ 1714.720923][T23113] workingset_refault_anon 7323 [ 1714.720930][T23113] workingset_refault_file 29882 [ 1714.720936][T23113] swap 55091200 [ 1714.720942][T23113] swapcached 139071488 [ 1714.720948][T23113] pgpgin 3333877 [ 1714.720954][T23113] pgpgout 3260726 [ 1714.720960][T23113] pgfault 1453225 [ 1714.720966][T23113] pgmajfault 950 [ 1714.720972][T23113] inactive_anon 149979136 [ 1714.722159][T23113] active_anon 158015488 [ 1714.722169][T23113] inactive_file 0 [ 1714.722176][T23113] active_file 4096 [ 1714.722183][T23113] unevictable 0 [ 1714.722189][T23113] hierarchical_memory_limit 314572800 [ 1714.722196][T23113] hierarchical_memsw_limit 9223372036854771712 [ 1714.722203][T23113] total_cache 307249152 [ 1714.722210][T23113] total_rss 688128 [ 1714.722217][T23113] total_rss_huge 0 [ 1714.722223][T23113] total_shmem 307245056 [ 1714.722230][T23113] total_mapped_file 70610944 [ 1714.722236][T23113] total_dirty 0 [ 1714.722242][T23113] total_writeback 0 [ 1714.722249][T23113] total_workingset_refault_anon 7323 [ 1714.722256][T23113] total_workingset_refault_file 29882 [ 1714.724680][T23113] total_swap 55091200 [ 1714.724689][T23113] total_swapcached 139071488 [ 1714.724695][T23113] total_pgpgin 3333877 [ 1714.724702][T23113] total_pgpgout 3260726 [ 1714.724708][T23113] total_pgfault 1453225 [ 1714.724714][T23113] total_pgmajfault 950 [ 1714.724720][T23113] total_inactive_anon 149979136 [ 1714.724727][T23113] total_active_anon 158015488 [ 1714.724734][T23113] total_inactive_file 0 [ 1714.724740][T23113] total_active_file 4096 [ 1714.724746][T23113] total_unevictable 0 [ 1714.724753][T23113] anon_cost 0 [ 1714.724758][T23113] file_cost 0 [ 1714.724765][T23113] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4388,pid=23070,uid=0 [ 1715.099169][T23113] Memory cgroup out of memory: Killed process 23070 (syz.3.4388) total-vm:102264kB, anon-rss:1392kB, file-rss:53912kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:0 [ 1715.652321][ T33] oom_reaper: reaped process 22938 (syz.3.4352), now anon-rss:0kB, file-rss:20480kB, shmem-rss:9532kB [ 1716.802652][ T31] audit: type=1400 audit(1792013223.019:3407): avc: denied { mount } for pid=23225 comm="syz.6.4428" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1717.439915][T23230] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4429'. [ 1717.653765][ T31] audit: type=1400 audit(1792013223.824:3408): avc: denied { unmount } for pid=10936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1718.594467][ T31] audit: type=1800 audit(1792013224.703:3409): pid=23242 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.4434" name="nullb0" dev="tmpfs" ino=857 res=0 errno=0 [ 1719.177568][T20045] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1719.339020][T20045] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1719.342493][T20045] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.342510][T20045] usb 7-1: Product: syz [ 1719.342520][T20045] usb 7-1: Manufacturer: syz [ 1719.342528][T20045] usb 7-1: SerialNumber: syz [ 1719.375968][T20045] usb 7-1: config 0 descriptor?? [ 1719.410714][T20045] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1719.467039][T23248] virtio-fs: tag not found [ 1719.473482][ T31] audit: type=1800 audit(1792013225.461:3410): pid=23227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=326976 res=0 errno=0 [ 1719.517139][ T31] audit: type=1800 audit(1792013225.564:3411): pid=23227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=327008 res=0 errno=0 [ 1719.518001][ T31] audit: type=1800 audit(1792013225.564:3412): pid=23227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=326983 res=0 errno=0 [ 1719.571419][ T31] audit: type=1800 audit(1792013225.610:3413): pid=23227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=326984 res=0 errno=0 [ 1719.762030][T20045] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1719.767909][T20045] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1719.767937][T20045] usb 7-1: media controller created [ 1719.880232][T23251] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4438'. [ 1719.911280][T20045] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1721.414951][T20045] DVB: Unable to find symbol mt352_attach() [ 1721.595933][T20045] DVB: Unable to find symbol nxt6000_attach() [ 1721.595949][T20045] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1721.633555][T20045] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input55 [ 1721.656363][T20045] dvb-usb: schedule remote query interval to 1000 msecs. [ 1721.656379][T20045] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1721.656388][T20045] dvb-usb: bulk message failed: -22 (7/0) [ 1721.656396][T20045] dvb-usb: bulk message failed: -22 (7/0) [ 1721.773209][ T31] audit: type=1800 audit(1792013227.668:3414): pid=23227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=327005 res=0 errno=0 [ 1721.773817][ T31] audit: type=1800 audit(1792013227.668:3415): pid=23227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=327006 res=0 errno=0 [ 1721.774346][ T31] audit: type=1800 audit(1792013227.668:3416): pid=23227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=326985 res=0 errno=0 [ 1721.858355][T20045] usb 7-1: USB disconnect, device number 39 [ 1722.338232][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 1722.338244][ T31] audit: type=1800 audit(1792013228.201:3421): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=327046 res=0 errno=0 [ 1722.376069][ T31] audit: type=1800 audit(1792013228.239:3422): pid=23223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=327047 res=0 errno=0 [ 1722.729548][T23279] fuse: fd is not a fuse device [ 1723.083783][T20045] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1724.274484][ T31] audit: type=1400 audit(1792013230.007:3423): avc: denied { ioctl } for pid=23280 comm="syz.3.4445" path="socket:[82563]" dev="sockfs" ino=82563 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1725.245998][T23286] jffs2: notice: (23286) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (2 unchecked, 0 orphan) and 6 of xref (0 dead, 1 orphan) found. [ 1726.947151][T23303] virtio-fs: tag not found [ 1730.954939][T23324] tipc: Enabling of bearer rejected, already enabled [ 1731.984906][ T31] audit: type=1400 audit(1792013236.732:3424): avc: denied { mount } for pid=23327 comm="syz.2.4455" name="/" dev="hugetlbfs" ino=82653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1732.455407][ T8896] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1732.617258][ T8896] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1732.623262][ T8896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.623287][ T8896] usb 7-1: Product: syz [ 1732.623302][ T8896] usb 7-1: Manufacturer: syz [ 1732.623323][ T8896] usb 7-1: SerialNumber: syz [ 1732.712490][ T8896] usb 7-1: config 0 descriptor?? [ 1732.717470][ T8896] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1732.728337][ T31] audit: type=1800 audit(1792013237.920:3425): pid=23334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=327319 res=0 errno=0 [ 1732.761822][ T31] audit: type=1800 audit(1792013237.939:3426): pid=23334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=327351 res=0 errno=0 [ 1732.788958][ T8896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1732.790484][ T8896] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1732.790510][ T8896] usb 7-1: media controller created [ 1732.816332][ T31] audit: type=1800 audit(1792013237.986:3427): pid=23334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=327326 res=0 errno=0 [ 1732.816362][ T31] audit: type=1800 audit(1792013237.986:3428): pid=23334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=327327 res=0 errno=0 [ 1732.876083][ T8896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1732.961180][ T8896] DVB: Unable to find symbol mt352_attach() [ 1733.217669][ T8896] DVB: Unable to find symbol nxt6000_attach() [ 1733.217681][ T8896] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1733.219187][ T8896] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input56 [ 1733.223094][ T8896] dvb-usb: schedule remote query interval to 1000 msecs. [ 1733.223106][ T8896] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1733.223115][ T8896] dvb-usb: bulk message failed: -22 (7/0) [ 1733.223122][ T8896] dvb-usb: bulk message failed: -22 (7/0) [ 1733.224101][ T31] audit: type=1800 audit(1792013238.379:3429): pid=23334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=327348 res=0 errno=0 [ 1733.231530][ T31] audit: type=1800 audit(1792013238.388:3430): pid=23334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=327349 res=0 errno=0 [ 1733.231572][ T31] audit: type=1800 audit(1792013238.388:3431): pid=23334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=327328 res=0 errno=0 [ 1733.231607][ T31] audit: type=1800 audit(1792013238.388:3432): pid=23334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=327350 res=0 errno=0 [ 1733.336875][ T8896] usb 7-1: USB disconnect, device number 40 [ 1733.508251][ T31] audit: type=1800 audit(1792013238.650:3433): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=327398 res=0 errno=0 [ 1733.669117][ T8896] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1740.685408][T23389] ovs-system: entered promiscuous mode [ 1740.712092][T23389] ovs-system: left promiscuous mode [ 1741.931105][T23396] CIFS: Witness protocol support is experimental [ 1741.931121][T23396] CIFS: Attempting to mount //127.0.0.1/share [ 1742.186621][T23402] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4470'. [ 1742.320716][T23396] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1742.320757][T23396] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1743.136481][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 37 (since boot) is 4096 jiffies old. [ 1743.283625][T23409] virtio-fs: tag not found [ 1745.443915][T23426] syz.6.4476 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1745.443950][T23426] CPU: 0 UID: 0 PID: 23426 Comm: syz.6.4476 Tainted: G L syzkaller #0 PREEMPT(full) [ 1745.443975][T23426] Tainted: [L]=SOFTLOCKUP [ 1745.443981][T23426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1745.443992][T23426] Call Trace: [ 1745.443999][T23426] [ 1745.444007][T23426] dump_stack_lvl+0x100/0x190 [ 1745.444039][T23426] dump_header+0xfb/0x606 [ 1745.444061][T23426] oom_kill_process.cold+0xd/0x380 [ 1745.444085][T23426] out_of_memory+0x340/0x14f0 [ 1745.444118][T23426] ? __pfx_out_of_memory+0x10/0x10 [ 1745.444153][T23426] mem_cgroup_out_of_memory+0xc6/0x130 [ 1745.444177][T23426] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1745.444200][T23426] ? find_held_lock+0x2b/0x80 [ 1745.444232][T23426] ? do_raw_spin_unlock+0x145/0x1e0 [ 1745.444258][T23426] ? _raw_spin_unlock+0x28/0x50 [ 1745.444283][T23426] try_charge_memcg+0x783/0xf60 [ 1745.444308][T23426] ? __pfx_try_charge_memcg+0x10/0x10 [ 1745.444325][T23426] ? find_held_lock+0x2b/0x80 [ 1745.444353][T23426] ? rcu_read_unlock+0x17/0x60 [ 1745.444365][T23426] ? rcu_read_unlock+0x17/0x60 [ 1745.444376][T23426] ? find_held_lock+0x2b/0x80 [ 1745.444393][T23426] ? rcu_read_unlock+0x17/0x60 [ 1745.444408][T23426] charge_memcg+0x1ae/0x210 [ 1745.444420][T23426] __mem_cgroup_charge+0x2b/0x1c0 [ 1745.444435][T23426] shmem_alloc_and_add_folio+0x451/0xd40 [ 1745.444450][T23426] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1745.444463][T23426] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 1745.444479][T23426] shmem_get_folio_gfp+0x75b/0x1980 [ 1745.444494][T23426] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1745.444506][T23426] ? vm_normal_page+0x1d1/0x380 [ 1745.444521][T23426] ? __pfx_vm_normal_page+0x10/0x10 [ 1745.444539][T23426] shmem_write_begin+0x1a4/0x420 [ 1745.444552][T23426] ? __pfx_shmem_write_begin+0x10/0x10 [ 1745.444565][T23426] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1745.444581][T23426] generic_perform_write+0x292/0xa40 [ 1745.444597][T23426] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1745.444614][T23426] ? __pfx_generic_perform_write+0x10/0x10 [ 1745.444632][T23426] ? file_update_time_flags+0x38c/0x520 [ 1745.444647][T23426] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1745.444660][T23426] shmem_file_write_iter+0x10e/0x140 [ 1745.444675][T23426] __kernel_write_iter+0x2ac/0x930 [ 1745.444690][T23426] ? __pfx___kernel_write_iter+0x10/0x10 [ 1745.444704][T23426] ? cgroup1_freezing+0x12c/0x3b0 [ 1745.444719][T23426] ? cgroup1_freezing+0x136/0x3b0 [ 1745.444731][T23426] ? freezing_slow_path+0xb5/0x1a0 [ 1745.444744][T23426] dump_user_range+0x3f9/0xad0 [ 1745.444762][T23426] ? __pfx_dump_user_range+0x10/0x10 [ 1745.444781][T23426] ? __pfx_writenote+0x10/0x10 [ 1745.444797][T23426] ? elf_core_dump+0x1f25/0x3d20 [ 1745.444814][T23426] elf_core_dump+0x2d68/0x3d20 [ 1745.444837][T23426] ? __pfx_elf_core_dump+0x10/0x10 [ 1745.444852][T23426] ? kasan_save_stack+0x3f/0x50 [ 1745.444867][T23426] ? kasan_save_stack+0x30/0x50 [ 1745.444881][T23426] ? kasan_save_track+0x14/0x30 [ 1745.444895][T23426] ? __kasan_kmalloc+0xaa/0xb0 [ 1745.444909][T23426] ? vfs_coredump+0x21f6/0x54a0 [ 1745.444922][T23426] ? get_signal+0x1f2a/0x21e0 [ 1745.444934][T23426] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1745.444955][T23426] ? 0xffffffffff600000 [ 1745.444981][T23426] ? lock_acquire+0x1d1/0x380 [ 1745.444994][T23426] ? get_signal+0x1f2a/0x21e0 [ 1745.445011][T23426] ? vfs_coredump+0x281a/0x54a0 [ 1745.445025][T23426] vfs_coredump+0x281a/0x54a0 [ 1745.445044][T23426] ? __pfx_vfs_coredump+0x10/0x10 [ 1745.445059][T23426] ? __lock_acquire+0x5c0/0x1f40 [ 1745.445075][T23426] ? __lock_acquire+0x5c0/0x1f40 [ 1745.445090][T23426] ? lock_acquire+0x1d1/0x380 [ 1745.445102][T23426] ? unwind_next_frame+0xbd/0x2090 [ 1745.445121][T23426] ? lock_acquire+0x1d1/0x380 [ 1745.445137][T23426] ? bpf_ksym_find+0x128/0x1c0 [ 1745.445149][T23426] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1745.445166][T23426] ? arch_stack_walk+0xa6/0xf0 [ 1745.445185][T23426] ? __sigqueue_free+0xbe/0x2a0 [ 1745.445200][T23426] ? stack_trace_save+0x8e/0xc0 [ 1745.445212][T23426] ? __pfx_stack_trace_save+0x10/0x10 [ 1745.445224][T23426] ? stack_depot_save_flags+0x27/0x9f0 [ 1745.445236][T23426] ? __lock_acquire+0x5c0/0x1f40 [ 1745.445272][T23426] ? proc_coredump_connector+0x2d3/0x4f0 [ 1745.445288][T23426] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1745.445306][T23426] ? rcu_is_watching+0x13/0xc0 [ 1745.445324][T23426] get_signal+0x1f2a/0x21e0 [ 1745.445347][T23426] ? __pfx_get_signal+0x10/0x10 [ 1745.445364][T23426] arch_do_signal_or_restart+0x91/0x7e0 [ 1745.445382][T23426] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1745.445407][T23426] irqentry_exit+0x402/0xa10 [ 1745.445426][T23426] asm_exc_page_fault+0x26/0x30 [ 1745.445437][T23426] RIP: 0033:0x7f684eb9e561 [ 1745.445447][T23426] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1745.445458][T23426] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1745.445468][T23426] RAX: 0000000000000000 RBX: 00007f684ee26090 RCX: 00007f684eb9e559 [ 1745.445475][T23426] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1745.445482][T23426] RBP: 00007f684ec358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1745.445489][T23426] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1745.445496][T23426] R13: 00007f684ee26128 R14: 00007f684ee26090 R15: 00007ffec107b588 [ 1745.445510][T23426] [ 1745.445515][T23426] memory: usage 307200kB, limit 307200kB, failcnt 79561 [ 1745.445522][T23426] memory+swap: usage 410000kB, limit 9007199254740988kB, failcnt 0 [ 1745.445529][T23426] kmem: usage 9600kB, limit 9007199254740988kB, failcnt 0 [ 1745.445536][T23426] Memory cgroup stats for /syz6: [ 1745.445606][T23426] cache 304144384 [ 1745.445611][T23426] rss 507904 [ 1745.445615][T23426] rss_huge 0 [ 1745.445619][T23426] shmem 304144384 [ 1745.445623][T23426] mapped_file 162918400 [ 1745.445628][T23426] dirty 0 [ 1745.445631][T23426] writeback 0 [ 1745.445635][T23426] workingset_refault_anon 406 [ 1745.445640][T23426] workingset_refault_file 12076 [ 1745.445644][T23426] swap 105267200 [ 1745.445648][T23426] swapcached 234430464 [ 1745.445652][T23426] pgpgin 2727817 [ 1745.445656][T23426] pgpgout 2654952 [ 1745.445660][T23426] pgfault 963088 [ 1745.445664][T23426] pgmajfault 3457 [ 1745.445668][T23426] inactive_anon 202956800 [ 1745.445673][T23426] active_anon 101769216 [ 1745.445677][T23426] inactive_file 0 [ 1745.445681][T23426] active_file 0 [ 1745.445685][T23426] unevictable 0 [ 1745.445689][T23426] hierarchical_memory_limit 314572800 [ 1745.445694][T23426] hierarchical_memsw_limit 9223372036854771712 [ 1745.445699][T23426] total_cache 304144384 [ 1745.445703][T23426] total_rss 507904 [ 1745.445707][T23426] total_rss_huge 0 [ 1745.445711][T23426] total_shmem 304144384 [ 1745.445716][T23426] total_mapped_file 162918400 [ 1745.445720][T23426] total_dirty 0 [ 1745.445724][T23426] total_writeback 0 [ 1745.445728][T23426] total_workingset_refault_anon 406 [ 1745.445733][T23426] total_workingset_refault_file 12076 [ 1745.445737][T23426] total_swap 105267200 [ 1745.445742][T23426] total_swapcached 234430464 [ 1745.445746][T23426] total_pgpgin 2727817 [ 1745.445750][T23426] total_pgpgout 2654952 [ 1745.445754][T23426] total_pgfault 963088 [ 1745.445759][T23426] total_pgmajfault 3457 [ 1745.445763][T23426] total_inactive_anon 202956800 [ 1745.445767][T23426] total_active_anon 101769216 [ 1745.445772][T23426] total_inactive_file 0 [ 1745.445776][T23426] total_active_file 0 [ 1745.445780][T23426] total_unevictable 0 [ 1745.445784][T23426] anon_cost 0 [ 1745.445788][T23426] file_cost 0 [ 1745.445793][T23426] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4389,pid=23075,uid=0 [ 1745.445844][T23426] Memory cgroup out of memory: Killed process 23075 (syz.6.4389) total-vm:200572kB, anon-rss:1260kB, file-rss:20548kB, shmem-rss:111016kB, UID:0 pgtables:336kB oom_score_adj:1000 [ 1860.752661][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1861.449735][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23417/1:b..l P23075/1:b..l P23398/1:b..l [ 1861.460181][ C1] rcu: (detected by 1, t=10567 jiffies, g=126937, q=651 ncpus=2) [ 1861.467972][ C1] task:syz.2.4468 state:R running task stack:23448 pid:23398 tgid:23398 ppid:5611 task_flags:0x40064c flags:0x00080003 [ 1861.481454][ C1] Call Trace: [ 1861.484735][ C1] [ 1861.487666][ C1] __schedule+0x1259/0x6920 [ 1861.492195][ C1] ? __pfx___schedule+0x10/0x10 [ 1861.497048][ C1] ? irqentry_exit+0x24d/0xa10 [ 1861.501822][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1861.507905][ C1] preempt_schedule_notrace+0x57/0xd0 [ 1861.513281][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 1861.519179][ C1] rcu_is_watching+0x90/0xc0 [ 1861.523775][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1861.528976][ C1] lock_release+0x24d/0x310 [ 1861.533482][ C1] unwind_next_frame+0x3c3/0x2090 [ 1861.538596][ C1] ? free_unref_folios+0xa4a/0x1790 [ 1861.543808][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1861.549963][ C1] arch_stack_walk+0x94/0xf0 [ 1861.554537][ C1] ? folios_put_refs+0x585/0xaa0 [ 1861.559466][ C1] stack_trace_save+0x8e/0xc0 [ 1861.564118][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1861.569463][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1861.574381][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1861.580165][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 1861.585336][ C1] save_stack+0x162/0x1e0 [ 1861.589648][ C1] ? __pfx_save_stack+0x10/0x10 [ 1861.594470][ C1] ? free_unref_folios+0xa4a/0x1790 [ 1861.599642][ C1] ? page_ext_put+0x3e/0xd0 [ 1861.604128][ C1] __reset_page_owner+0x84/0x190 [ 1861.609059][ C1] free_unref_folios+0xa4a/0x1790 [ 1861.614068][ C1] ? folios_put_refs+0x51d/0xaa0 [ 1861.618990][ C1] ? folios_put_refs+0x51d/0xaa0 [ 1861.623907][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1861.629699][ C1] folios_put_refs+0x585/0xaa0 [ 1861.634439][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 1861.639701][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 1861.645999][ C1] shmem_undo_range+0x5e5/0x1570 [ 1861.650925][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 1861.656278][ C1] ? lock_acquire+0x1d1/0x380 [ 1861.660926][ C1] ? is_bpf_text_address+0x25/0x1a0 [ 1861.666113][ C1] shmem_evict_inode+0x3b1/0xca0 [ 1861.671022][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1861.676450][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1861.682499][ C1] ? lock_acquire+0x1d1/0x380 [ 1861.687146][ C1] ? find_held_lock+0x2b/0x80 [ 1861.691796][ C1] ? evict+0x37e/0xad0 [ 1861.695835][ C1] ? evict+0x37e/0xad0 [ 1861.699874][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1861.705311][ C1] evict+0x3c2/0xad0 [ 1861.709176][ C1] ? fsnotify_grab_connector+0x4b/0x290 [ 1861.714694][ C1] ? __pfx_evict+0x10/0x10 [ 1861.719077][ C1] ? lock_acquire+0x1d1/0x380 [ 1861.723726][ C1] ? iput.part.0+0x981/0x1050 [ 1861.728375][ C1] iput.part.0+0x989/0x1050 [ 1861.732851][ C1] iput+0x35/0x40 [ 1861.736455][ C1] dentry_unlink_inode+0x284/0x470 [ 1861.741549][ C1] dentry_kill+0x25d/0xc20 [ 1861.745946][ C1] dput.part.0+0xd7/0x240 [ 1861.750256][ C1] dput+0x1f/0x30 [ 1861.753860][ C1] __fput+0x51a/0xb60 [ 1861.757819][ C1] task_work_run+0x150/0x240 [ 1861.762384][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1861.767482][ C1] do_exit+0x8da/0x2a50 [ 1861.771611][ C1] ? __pfx_do_exit+0x10/0x10 [ 1861.776179][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1861.782145][ C1] do_group_exit+0xd5/0x2a0 [ 1861.786621][ C1] get_signal+0x1ec7/0x21e0 [ 1861.791099][ C1] ? __pfx_get_signal+0x10/0x10 [ 1861.795920][ C1] ? __pfx_force_sig_fault+0x10/0x10 [ 1861.801178][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 1861.806708][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1861.812843][ C1] irqentry_exit+0x402/0xa10 [ 1861.817418][ C1] asm_exc_page_fault+0x26/0x30 [ 1861.822249][ C1] RIP: 0033:0x0 [ 1861.825681][ C1] RSP: 002b:00002000000002c8 EFLAGS: 00010217 [ 1861.831725][ C1] RAX: 0000000000000000 RBX: 00007f087c625fa0 RCX: 00007f087c39e559 [ 1861.839667][ C1] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000020000 [ 1861.847617][ C1] RBP: 00007f087c4358b0 R08: 00002000000007c0 R09: 00002000000007c0 [ 1861.855555][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1861.863494][ C1] R13: 00007f087c626038 R14: 00007f087c625fa0 R15: 00007ffcec08eb28 [ 1861.871441][ C1] [ 1861.874433][ C1] task:syz.6.4389 state:R running task stack:19528 pid:23075 tgid:23075 ppid:10936 task_flags:0x400e40 flags:0x0008000b [ 1861.887877][ C1] Call Trace: [ 1861.891135][ C1] [ 1861.894039][ C1] __schedule+0x1259/0x6920 [ 1861.898518][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 1861.904734][ C1] ? __pfx___schedule+0x10/0x10 [ 1861.909557][ C1] ? mark_held_locks+0x40/0x70 [ 1861.914294][ C1] preempt_schedule_irq+0x4e/0x90 [ 1861.919301][ C1] irqentry_exit+0x205/0xa10 [ 1861.923871][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1861.929822][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x20 [ 1861.936555][ C1] Code: 0c 24 0f b7 d6 0f b7 f7 bf 03 00 00 00 e9 48 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 1a fe ff ff [ 1861.956130][ C1] RSP: 0018:ffffc900067160b8 EFLAGS: 00000246 [ 1861.962171][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000000 [ 1861.970110][ C1] RDX: ffff88802e758000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1861.978050][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1861.985998][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000000a [ 1861.993951][ C1] R13: ffff88801ea8ee00 R14: 0000000000000000 R15: ffff88801ea8ee00 [ 1862.001908][ C1] list_lru_count_one+0x12c/0x320 [ 1862.006902][ C1] super_cache_count+0x1dc/0x290 [ 1862.011811][ C1] do_shrink_slab+0x83/0x1200 [ 1862.016456][ C1] ? find_held_lock+0x2b/0x80 [ 1862.021107][ C1] ? shrink_slab+0xa57/0x12e0 [ 1862.025752][ C1] ? shrink_slab+0xa57/0x12e0 [ 1862.030400][ C1] shrink_slab+0xa82/0x12e0 [ 1862.034873][ C1] ? shrink_slab+0x677/0x12e0 [ 1862.039533][ C1] ? __pfx_shrink_slab+0x10/0x10 [ 1862.044451][ C1] ? __pfx___might_resched+0x10/0x10 [ 1862.049705][ C1] ? page_counter_calculate_protection+0x344/0x730 [ 1862.056178][ C1] shrink_node+0x812/0x4320 [ 1862.060656][ C1] ? __pfx_shrink_node+0x10/0x10 [ 1862.065566][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1862.071432][ C1] ? do_try_to_free_pages+0x33e/0x16d0 [ 1862.076857][ C1] do_try_to_free_pages+0x33e/0x16d0 [ 1862.082115][ C1] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 1862.087819][ C1] try_to_free_mem_cgroup_pages+0x2bf/0x840 [ 1862.093690][ C1] ? psi_group_change+0x457/0xa20 [ 1862.098693][ C1] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 1862.105079][ C1] ? psi_memstall_enter+0x226/0x3b0 [ 1862.110245][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 1862.115424][ C1] ? psi_memstall_enter+0x226/0x3b0 [ 1862.120599][ C1] try_charge_memcg+0x50b/0xf60 [ 1862.125430][ C1] ? __pfx_try_charge_memcg+0x10/0x10 [ 1862.130771][ C1] ? find_held_lock+0x2b/0x80 [ 1862.135420][ C1] ? rcu_read_unlock+0x17/0x60 [ 1862.140163][ C1] ? rcu_read_unlock+0x17/0x60 [ 1862.144893][ C1] ? find_held_lock+0x2b/0x80 [ 1862.149544][ C1] ? rcu_read_unlock+0x17/0x60 [ 1862.154287][ C1] charge_memcg+0x1ae/0x210 [ 1862.158769][ C1] __mem_cgroup_charge+0x2b/0x1c0 [ 1862.163763][ C1] shmem_alloc_and_add_folio+0x451/0xd40 [ 1862.169367][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1862.175499][ C1] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 1862.181450][ C1] shmem_get_folio_gfp+0x75b/0x1980 [ 1862.186621][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1862.192224][ C1] ? filemap_map_pages+0x1155/0x2060 [ 1862.197485][ C1] shmem_fault+0x1fb/0xa30 [ 1862.201879][ C1] ? find_held_lock+0x2b/0x80 [ 1862.206529][ C1] ? __pfx_shmem_fault+0x10/0x10 [ 1862.211435][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1862.217220][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 1862.222388][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1862.228173][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 1862.234732][ C1] ? __rcu_read_unlock+0x26a/0x5e0 [ 1862.239826][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1862.245257][ C1] __do_fault+0x10b/0x440 [ 1862.249568][ C1] do_fault+0xb3f/0x1830 [ 1862.253785][ C1] ? __pfx_do_fault+0x10/0x10 [ 1862.258446][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 1862.263179][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 1862.267923][ C1] ? __pte_offset_map+0x179/0x310 [ 1862.272921][ C1] __handle_mm_fault+0x150b/0x2f60 [ 1862.278008][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1862.283434][ C1] ? pte_offset_map_lock+0x174/0x320 [ 1862.288700][ C1] ? find_held_lock+0x2b/0x80 [ 1862.293358][ C1] ? find_held_lock+0x2b/0x80 [ 1862.298010][ C1] ? follow_page_pte+0x536/0x1050 [ 1862.303022][ C1] handle_mm_fault+0x363/0xa20 [ 1862.307756][ C1] __get_user_pages+0x8ae/0x2c30 [ 1862.312668][ C1] ? lock_acquire+0x1d1/0x380 [ 1862.317315][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 1862.322668][ C1] ? __pfx___might_resched+0x10/0x10 [ 1862.327920][ C1] ? cgroup1_freezing+0x27/0x3b0 [ 1862.332829][ C1] get_dump_page+0x27e/0x3d0 [ 1862.337402][ C1] ? __pfx_get_dump_page+0x10/0x10 [ 1862.342485][ C1] ? cgroup1_freezing+0x136/0x3b0 [ 1862.347479][ C1] ? freezing_slow_path+0xb5/0x1a0 [ 1862.352560][ C1] dump_user_range+0x18d/0xad0 [ 1862.357297][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 1862.362558][ C1] ? __pfx_writenote+0x10/0x10 [ 1862.367294][ C1] ? elf_core_dump+0x1f25/0x3d20 [ 1862.372205][ C1] elf_core_dump+0x2d68/0x3d20 [ 1862.376947][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 1862.382029][ C1] ? kasan_save_stack+0x3f/0x50 [ 1862.386860][ C1] ? kasan_save_stack+0x30/0x50 [ 1862.391682][ C1] ? kasan_save_track+0x14/0x30 [ 1862.396504][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 1862.401238][ C1] ? vfs_coredump+0x21f6/0x54a0 [ 1862.406059][ C1] ? get_signal+0x1f2a/0x21e0 [ 1862.410714][ C1] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1862.416409][ C1] ? 0xffffffffff600000 [ 1862.420545][ C1] ? lock_acquire+0x1d1/0x380 [ 1862.425200][ C1] ? get_signal+0x1f2a/0x21e0 [ 1862.429859][ C1] ? vfs_coredump+0x281a/0x54a0 [ 1862.434682][ C1] vfs_coredump+0x281a/0x54a0 [ 1862.439334][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 1862.444331][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1862.449249][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1862.454157][ C1] ? lock_acquire+0x1d1/0x380 [ 1862.458815][ C1] ? unwind_next_frame+0xbd/0x2090 [ 1862.463901][ C1] ? lock_acquire+0x1d1/0x380 [ 1862.468550][ C1] ? bpf_ksym_find+0x128/0x1c0 [ 1862.473281][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1862.479407][ C1] ? arch_stack_walk+0xa6/0xf0 [ 1862.484156][ C1] ? __sigqueue_free+0xbe/0x2a0 [ 1862.488979][ C1] ? stack_trace_save+0x8e/0xc0 [ 1862.493801][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1862.499142][ C1] ? stack_depot_save_flags+0x27/0x9f0 [ 1862.504569][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1862.509498][ C1] ? proc_coredump_connector+0x2d3/0x4f0 [ 1862.515111][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1862.521064][ C1] ? rcu_is_watching+0x13/0xc0 [ 1862.525813][ C1] get_signal+0x1f2a/0x21e0 [ 1862.530291][ C1] ? __pfx_get_signal+0x10/0x10 [ 1862.535113][ C1] ? __pfx_force_sig_fault+0x10/0x10 [ 1862.540379][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 1862.545899][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1862.552033][ C1] irqentry_exit+0x402/0xa10 [ 1862.556606][ C1] asm_exc_page_fault+0x26/0x30 [ 1862.561425][ C1] RIP: 0033:0x7f684eb9e561 [ 1862.565817][ C1] RSP: 002b:00000000ffffffb0 EFLAGS: 00010217 [ 1862.571849][ C1] RAX: 0000000000000000 RBX: 00007f684ee25fa0 RCX: 00007f684eb9e559 [ 1862.579799][ C1] RDX: 0000000000000000 RSI: 00000000ffffffb0 RDI: 0000000000000400 [ 1862.587737][ C1] RBP: 00007f684ec358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1862.595676][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1862.603703][ C1] R13: 00007f684ee26038 R14: 00007f684ee25fa0 R15: 00007ffec107b588 [ 1862.611649][ C1] [ 1862.614640][ C1] task:syz.3.4473 state:R running task stack:23448 pid:23417 tgid:23417 ppid:23413 task_flags:0x400640 flags:0x00080001 [ 1862.628075][ C1] Call Trace: [ 1862.631325][ C1] [ 1862.634229][ C1] __schedule+0x1259/0x6920 [ 1862.638711][ C1] ? __pfx___schedule+0x10/0x10 [ 1862.643535][ C1] ? mark_held_locks+0x40/0x70 [ 1862.648272][ C1] preempt_schedule_irq+0x4e/0x90 [ 1862.653278][ C1] irqentry_exit+0x205/0xa10 [ 1862.657842][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1862.663791][ C1] RIP: 0010:unwind_next_frame+0x157d/0x2090 [ 1862.669657][ C1] Code: 0f 84 f3 ed ff ff 48 89 ef e8 9f e2 ff ff 49 8d 7d 40 48 89 fa 48 89 c5 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 <0f> 84 17 fa ff ff e8 38 c2 c6 00 e9 0d fa ff ff 48 b8 00 00 00 00 [ 1862.689234][ C1] RSP: 0018:ffffc9000dd76290 EFLAGS: 00000246 [ 1862.695267][ C1] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff92f8814e [ 1862.703216][ C1] RDX: 1ffff92001baec68 RSI: ffffc9000dd76518 RDI: ffffc9000dd76340 [ 1862.711156][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000007 [ 1862.719096][ C1] R10: 0000000000000200 R11: 0000000000018b50 R12: ffffc9000dd76350 [ 1862.727034][ C1] R13: ffffc9000dd76300 R14: ffffc9000dd76548 R15: ffffc9000dd76334 [ 1862.734982][ C1] ? save_stack+0x162/0x1e0 [ 1862.739464][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1862.745596][ C1] arch_stack_walk+0x94/0xf0 [ 1862.750160][ C1] ? __set_page_owner+0x8c/0x540 [ 1862.755074][ C1] stack_trace_save+0x8e/0xc0 [ 1862.759721][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1862.765069][ C1] ? lock_acquire+0x1d1/0x380 [ 1862.769715][ C1] save_stack+0x162/0x1e0 [ 1862.774017][ C1] ? __pfx_save_stack+0x10/0x10 [ 1862.778856][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1862.783765][ C1] __set_page_owner+0x8c/0x540 [ 1862.788515][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 1862.793879][ C1] ? bad_range+0x257/0x3f0 [ 1862.798290][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 1862.803468][ C1] ? get_page_from_freelist+0x10e6/0x35d0 [ 1862.809162][ C1] post_alloc_hook+0xfd/0x120 [ 1862.813820][ C1] get_page_from_freelist+0x110d/0x35d0 [ 1862.819346][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1862.825210][ C1] ? prepare_alloc_pages+0x1f0/0x5b0 [ 1862.830468][ C1] ? kvm_clock_get_cycles+0x42/0x70 [ 1862.835637][ C1] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1862.841503][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 1862.847633][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1862.852542][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1862.858841][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1862.863763][ C1] ? lock_acquire+0x1d1/0x380 [ 1862.868409][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1862.873415][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1862.878760][ C1] ? find_held_lock+0x2b/0x80 [ 1862.883425][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1862.888342][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1862.894217][ C1] ? policy_nodemask+0xed/0x4f0 [ 1862.899042][ C1] alloc_pages_mpol+0x201/0x550 [ 1862.903869][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1862.909224][ C1] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 1862.915094][ C1] folio_alloc_mpol_noprof+0x36/0x260 [ 1862.920442][ C1] shmem_alloc_folio+0x135/0x160 [ 1862.925362][ C1] shmem_alloc_and_add_folio+0x371/0xd40 [ 1862.930966][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1862.937088][ C1] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 1862.943040][ C1] shmem_get_folio_gfp+0x75b/0x1980 [ 1862.948211][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1862.953813][ C1] ? vm_normal_page+0x1d1/0x380 [ 1862.958635][ C1] ? __pfx_vm_normal_page+0x10/0x10 [ 1862.963807][ C1] shmem_write_begin+0x1a4/0x420 [ 1862.968728][ C1] ? __pfx_shmem_write_begin+0x10/0x10 [ 1862.974168][ C1] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1862.980990][ C1] generic_perform_write+0x292/0xa40 [ 1862.986258][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1862.992038][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 1862.997828][ C1] ? file_update_time_flags+0x38c/0x520 [ 1863.003345][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1863.009131][ C1] shmem_file_write_iter+0x10e/0x140 [ 1863.014389][ C1] __kernel_write_iter+0x2ac/0x930 [ 1863.019482][ C1] ? find_held_lock+0x2b/0x80 [ 1863.024146][ C1] ? __pfx___kernel_write_iter+0x10/0x10 [ 1863.029748][ C1] ? cgroup1_freezing+0x12c/0x3b0 [ 1863.034759][ C1] ? cgroup1_freezing+0x136/0x3b0 [ 1863.039752][ C1] ? freezing_slow_path+0xb5/0x1a0 [ 1863.044842][ C1] dump_user_range+0x3f9/0xad0 [ 1863.049580][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 1863.054843][ C1] ? __pfx_writenote+0x10/0x10 [ 1863.059590][ C1] ? elf_core_dump+0x1f25/0x3d20 [ 1863.064501][ C1] elf_core_dump+0x2d68/0x3d20 [ 1863.069254][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 1863.074336][ C1] ? kasan_save_stack+0x3f/0x50 [ 1863.079158][ C1] ? kasan_save_stack+0x30/0x50 [ 1863.083987][ C1] ? kasan_save_track+0x14/0x30 [ 1863.088808][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 1863.093542][ C1] ? vfs_coredump+0x21f6/0x54a0 [ 1863.098363][ C1] ? get_signal+0x1f2a/0x21e0 [ 1863.103008][ C1] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1863.108705][ C1] ? 0xffffffffff600000 [ 1863.112844][ C1] ? lock_acquire+0x1d1/0x380 [ 1863.117499][ C1] ? get_signal+0x1f2a/0x21e0 [ 1863.122150][ C1] ? vfs_coredump+0x281a/0x54a0 [ 1863.126981][ C1] vfs_coredump+0x281a/0x54a0 [ 1863.131636][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 1863.136633][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1863.141546][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1863.146455][ C1] ? lock_acquire+0x1d1/0x380 [ 1863.151102][ C1] ? unwind_next_frame+0xbd/0x2090 [ 1863.156197][ C1] ? lock_acquire+0x1d1/0x380 [ 1863.160847][ C1] ? bpf_ksym_find+0x128/0x1c0 [ 1863.165589][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1863.171717][ C1] ? arch_stack_walk+0xa6/0xf0 [ 1863.176457][ C1] ? __sigqueue_free+0xbe/0x2a0 [ 1863.181290][ C1] ? stack_trace_save+0x8e/0xc0 [ 1863.186125][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1863.191476][ C1] ? stack_depot_save_flags+0x27/0x9f0 [ 1863.196905][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1863.201837][ C1] ? proc_coredump_connector+0x2d3/0x4f0 [ 1863.207447][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1863.213399][ C1] ? rcu_is_watching+0x13/0xc0 [ 1863.218139][ C1] get_signal+0x1f2a/0x21e0 [ 1863.222617][ C1] ? __pfx_get_signal+0x10/0x10 [ 1863.227447][ C1] ? __pfx_force_sig_fault+0x10/0x10 [ 1863.232704][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 1863.238224][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1863.244358][ C1] irqentry_exit+0x402/0xa10 [ 1863.248923][ C1] asm_exc_page_fault+0x26/0x30 [ 1863.253746][ C1] RIP: 0033:0x0 [ 1863.257184][ C1] RSP: 002b:00002000000002c8 EFLAGS: 00010217 [ 1863.263220][ C1] RAX: 0000000000000000 RBX: 00007f17f2c25fa0 RCX: 00007f17f299e559 [ 1863.271159][ C1] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000020000 [ 1863.279098][ C1] RBP: 00007f17f2a358b0 R08: 00002000000007c0 R09: 00002000000007c0 [ 1863.287048][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1863.294988][ C1] R13: 00007f17f2c26038 R14: 00007f17f2c25fa0 R15: 00007ffd85bf4358 [ 1863.302943][ C1] [ 1863.305974][ C1] rcu: rcu_preempt kthread starved for 10570 jiffies! g126937 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 1863.317080][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1863.327026][ C1] rcu: RCU grace-period kthread stack dump: [ 1863.332892][ C1] task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1863.346360][ C1] Call Trace: [ 1863.349618][ C1] [ 1863.352526][ C1] __schedule+0x1259/0x6920 [ 1863.357015][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1863.361946][ C1] ? __pfx___schedule+0x10/0x10 [ 1863.366794][ C1] ? find_held_lock+0x2b/0x80 [ 1863.371478][ C1] ? schedule+0x225/0x2c0 [ 1863.375823][ C1] schedule+0xdd/0x2c0 [ 1863.379898][ C1] schedule_timeout+0x127/0x280 [ 1863.384761][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1863.390133][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1863.395420][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1863.401222][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1863.406679][ C1] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 1863.411441][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1863.416722][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1863.421654][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1863.426861][ C1] ? rcu_is_watching+0x13/0xc0 [ 1863.431630][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1863.437436][ C1] rcu_gp_kthread+0x17a/0x220 [ 1863.442106][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1863.447311][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1863.453116][ C1] ? __kthread_parkme+0x18f/0x230 [ 1863.458138][ C1] ? kthread+0x13a/0x450 [ 1863.462379][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1863.467567][ C1] kthread+0x373/0x450 [ 1863.471632][ C1] ? __pfx_kthread+0x10/0x10 [ 1863.476220][ C1] ret_from_fork+0x730/0xd60 [ 1863.480805][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1863.485910][ C1] ? __switch_to+0x800/0x10f0 [ 1863.490591][ C1] ? __pfx_kthread+0x10/0x10 [ 1863.495178][ C1] ret_from_fork_asm+0x1a/0x30 [ 1863.499947][ C1] [ 1863.502956][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1863.509261][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1863.514456][ C0] NMI backtrace for cpu 0 [ 1863.514470][ C0] CPU: 0 UID: 0 PID: 23425 Comm: syz.6.4476 Tainted: G L syzkaller #0 PREEMPT(full) [ 1863.514489][ C0] Tainted: [L]=SOFTLOCKUP [ 1863.514495][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1863.514503][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 1863.514522][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 8b 82 9e f5 cc [ 1863.514535][ C0] RSP: 0000:ffffc90005017578 EFLAGS: 00000296 [ 1863.514548][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc9000fb16000 [ 1863.514558][ C0] RDX: 0000000000000001 RSI: ffffffff8c625500 RDI: ffffffff8c625540 [ 1863.514567][ C0] RBP: 1ffff92000a02ec1 R08: 0000000000000005 R09: 0000000000000000 [ 1863.514576][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82590587 [ 1863.514585][ C0] R13: 0000000000000000 R14: ffff88801ea8fb00 R15: dffffc0000000000 [ 1863.514595][ C0] FS: 00007f684fb076c0(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 1863.514610][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1863.514619][ C0] CR2: 00007f684f95d520 CR3: 0000000071151000 CR4: 00000000003526f0 [ 1863.514628][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000063235cd5 [ 1863.514637][ C0] DR3: 0000000000007000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1863.514646][ C0] Call Trace: [ 1863.514651][ C0] [ 1863.514656][ C0] rcu_is_watching+0x13/0xc0 [ 1863.514676][ C0] shrink_slab+0xc43/0x12e0 [ 1863.514695][ C0] ? __pfx_shrink_slab+0x10/0x10 [ 1863.514711][ C0] ? __pfx___might_resched+0x10/0x10 [ 1863.514724][ C0] ? page_counter_calculate_protection+0x344/0x730 [ 1863.514744][ C0] shrink_node+0x812/0x4320 [ 1863.514762][ C0] ? __pfx_shrink_node+0x10/0x10 [ 1863.514777][ C0] ? queue_work_on+0x11b/0x1e0 [ 1863.514790][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 1863.514809][ C0] ? queue_work_on+0x141/0x1e0 [ 1863.514823][ C0] ? do_try_to_free_pages+0x33e/0x16d0 [ 1863.514837][ C0] do_try_to_free_pages+0x33e/0x16d0 [ 1863.514855][ C0] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 1863.514872][ C0] try_to_free_mem_cgroup_pages+0x2bf/0x840 [ 1863.514886][ C0] ? psi_group_change+0x457/0xa20 [ 1863.514902][ C0] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 1863.514920][ C0] ? psi_memstall_enter+0x226/0x3b0 [ 1863.514933][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 1863.514950][ C0] ? psi_memstall_enter+0x226/0x3b0 [ 1863.514965][ C0] try_charge_memcg+0x50b/0xf60 [ 1863.514981][ C0] ? __pfx_try_charge_memcg+0x10/0x10 [ 1863.514995][ C0] ? find_held_lock+0x2b/0x80 [ 1863.515013][ C0] ? rcu_read_unlock+0x17/0x60 [ 1863.515027][ C0] ? rcu_read_unlock+0x17/0x60 [ 1863.515044][ C0] obj_cgroup_charge_pages+0x2b/0x1f0 [ 1863.515059][ C0] __memcg_slab_post_alloc_hook+0x47f/0x10c0 [ 1863.515078][ C0] ? kasan_save_track+0x14/0x30 [ 1863.515096][ C0] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 1863.515114][ C0] ? sock_alloc_inode+0x26/0x2c0 [ 1863.515132][ C0] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1863.515147][ C0] sock_alloc_inode+0x26/0x2c0 [ 1863.515162][ C0] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1863.515177][ C0] alloc_inode+0x68/0x250 [ 1863.515193][ C0] sock_alloc+0x44/0x280 [ 1863.515206][ C0] ? security_socket_create+0x7f/0x250 [ 1863.515223][ C0] __sock_create+0xc2/0x860 [ 1863.515239][ C0] ? irqentry_exit+0x24d/0xa10 [ 1863.515258][ C0] __sys_socket+0x14d/0x260 [ 1863.515276][ C0] ? __pfx___sys_socket+0x10/0x10 [ 1863.515296][ C0] __x64_sys_socket+0x72/0xb0 [ 1863.515313][ C0] do_syscall_64+0x123/0x790 [ 1863.515333][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1863.515347][ C0] RIP: 0033:0x7f684eb9e559 [ 1863.515359][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1863.515371][ C0] RSP: 002b:00007f684fb07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1863.515384][ C0] RAX: ffffffffffffffda RBX: 00007f684ee26090 RCX: 00007f684eb9e559 [ 1863.515393][ C0] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1863.515401][ C0] RBP: 00007f684ec358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1863.515410][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1863.515425][ C0] R13: 00007f684ee26128 R14: 00007f684ee26090 R15: 00007ffec107b588 [ 1863.515440][ C0] [ 1865.522138][ T33] oom_reaper: reaped process 23075 (syz.6.4389), now anon-rss:0kB, file-rss:20480kB, shmem-rss:111016kB [ 1865.532233][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 37 (since boot) is 15545 jiffies old. [ 1865.532630][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1865.532669][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1865.534088][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1865.534123][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1865.794963][T23426] syz.6.4476 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1865.794987][T23426] CPU: 1 UID: 0 PID: 23426 Comm: syz.6.4476 Tainted: G L syzkaller #0 PREEMPT(full) [ 1865.795002][T23426] Tainted: [L]=SOFTLOCKUP [ 1865.795007][T23426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1865.795013][T23426] Call Trace: [ 1865.795018][T23426] [ 1865.795023][T23426] dump_stack_lvl+0x100/0x190 [ 1865.795043][T23426] dump_header+0xfb/0x606 [ 1865.795056][T23426] oom_kill_process.cold+0xd/0x380 [ 1865.795075][T23426] out_of_memory+0x340/0x14f0 [ 1865.795096][T23426] ? __pfx_out_of_memory+0x10/0x10 [ 1865.795117][T23426] mem_cgroup_out_of_memory+0xc6/0x130 [ 1865.795137][T23426] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1865.795156][T23426] ? find_held_lock+0x2b/0x80 [ 1865.795180][T23426] ? do_raw_spin_unlock+0x145/0x1e0 [ 1865.795196][T23426] ? _raw_spin_unlock+0x28/0x50 [ 1865.795212][T23426] try_charge_memcg+0x783/0xf60 [ 1865.795227][T23426] ? __pfx_try_charge_memcg+0x10/0x10 [ 1865.795238][T23426] ? find_held_lock+0x2b/0x80 [ 1865.795255][T23426] ? rcu_read_unlock+0x17/0x60 [ 1865.795266][T23426] ? rcu_read_unlock+0x17/0x60 [ 1865.795277][T23426] ? find_held_lock+0x2b/0x80 [ 1865.795294][T23426] ? rcu_read_unlock+0x17/0x60 [ 1865.795309][T23426] charge_memcg+0x1ae/0x210 [ 1865.795322][T23426] __mem_cgroup_charge+0x2b/0x1c0 [ 1865.795336][T23426] shmem_alloc_and_add_folio+0x451/0xd40 [ 1865.795352][T23426] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1865.795365][T23426] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 1865.795380][T23426] shmem_get_folio_gfp+0x75b/0x1980 [ 1865.795396][T23426] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1865.795408][T23426] ? vm_normal_page+0x1d1/0x380 [ 1865.795422][T23426] ? __pfx_vm_normal_page+0x10/0x10 [ 1865.795440][T23426] shmem_write_begin+0x1a4/0x420 [ 1865.795453][T23426] ? __pfx_shmem_write_begin+0x10/0x10 [ 1865.795466][T23426] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1865.795482][T23426] generic_perform_write+0x292/0xa40 [ 1865.795497][T23426] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1865.795515][T23426] ? __pfx_generic_perform_write+0x10/0x10 [ 1865.795532][T23426] ? file_update_time_flags+0x38c/0x520 [ 1865.795547][T23426] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1865.795560][T23426] shmem_file_write_iter+0x10e/0x140 [ 1865.795577][T23426] __kernel_write_iter+0x2ac/0x930 [ 1865.795592][T23426] ? __pfx___kernel_write_iter+0x10/0x10 [ 1865.795612][T23426] ? cgroup1_freezing+0x12c/0x3b0 [ 1865.795634][T23426] ? cgroup1_freezing+0x136/0x3b0 [ 1865.795652][T23426] ? freezing_slow_path+0xb5/0x1a0 [ 1865.795672][T23426] dump_user_range+0x3f9/0xad0 [ 1865.795701][T23426] ? __pfx_dump_user_range+0x10/0x10 [ 1865.795734][T23426] ? __pfx_writenote+0x10/0x10 [ 1865.795757][T23426] ? elf_core_dump+0x1f25/0x3d20 [ 1865.795785][T23426] elf_core_dump+0x2d68/0x3d20 [ 1865.795825][T23426] ? __pfx_elf_core_dump+0x10/0x10 [ 1865.795847][T23426] ? kasan_save_stack+0x3f/0x50 [ 1865.795871][T23426] ? kasan_save_stack+0x30/0x50 [ 1865.795891][T23426] ? kasan_save_track+0x14/0x30 [ 1865.795911][T23426] ? __kasan_kmalloc+0xaa/0xb0 [ 1865.795933][T23426] ? vfs_coredump+0x21f6/0x54a0 [ 1865.795954][T23426] ? get_signal+0x1f2a/0x21e0 [ 1865.795971][T23426] ? arch_do_signal_or_restart+0x91/0x7e0 [ 1865.796002][T23426] ? 0xffffffffff600000 [ 1865.796030][T23426] ? lock_acquire+0x1d1/0x380 [ 1865.796042][T23426] ? get_signal+0x1f2a/0x21e0 [ 1865.796060][T23426] ? vfs_coredump+0x281a/0x54a0 [ 1865.796078][T23426] vfs_coredump+0x281a/0x54a0 [ 1865.796098][T23426] ? __pfx_vfs_coredump+0x10/0x10 [ 1865.796113][T23426] ? __lock_acquire+0x5c0/0x1f40 [ 1865.796129][T23426] ? __lock_acquire+0x5c0/0x1f40 [ 1865.796144][T23426] ? lock_acquire+0x1d1/0x380 [ 1865.796156][T23426] ? unwind_next_frame+0xbd/0x2090 [ 1865.796176][T23426] ? lock_acquire+0x1d1/0x380 [ 1865.796192][T23426] ? bpf_ksym_find+0x128/0x1c0 [ 1865.796204][T23426] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1865.796221][T23426] ? arch_stack_walk+0xa6/0xf0 [ 1865.796240][T23426] ? __sigqueue_free+0xbe/0x2a0 [ 1865.796256][T23426] ? stack_trace_save+0x8e/0xc0 [ 1865.796267][T23426] ? __pfx_stack_trace_save+0x10/0x10 [ 1865.796279][T23426] ? stack_depot_save_flags+0x27/0x9f0 [ 1865.796291][T23426] ? __lock_acquire+0x5c0/0x1f40 [ 1865.796329][T23426] ? proc_coredump_connector+0x2d3/0x4f0 [ 1865.796345][T23426] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1865.796363][T23426] ? rcu_is_watching+0x13/0xc0 [ 1865.796381][T23426] get_signal+0x1f2a/0x21e0 [ 1865.796400][T23426] ? __pfx_get_signal+0x10/0x10 [ 1865.796417][T23426] arch_do_signal_or_restart+0x91/0x7e0 [ 1865.796435][T23426] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1865.796461][T23426] irqentry_exit+0x402/0xa10 [ 1865.796479][T23426] asm_exc_page_fault+0x26/0x30 [ 1865.796490][T23426] RIP: 0033:0x7f684eb9e561 [ 1865.796500][T23426] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1865.796510][T23426] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1865.796520][T23426] RAX: 0000000000000000 RBX: 00007f684ee26090 RCX: 00007f684eb9e559 [ 1865.796527][T23426] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1865.796534][T23426] RBP: 00007f684ec358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1865.796541][T23426] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1865.796547][T23426] R13: 00007f684ee26128 R14: 00007f684ee26090 R15: 00007ffec107b588 [ 1865.796563][T23426] [ 1865.796746][T23426] memory: usage 307200kB, limit 307200kB, failcnt 506000 [ 1865.796755][T23426] memory+swap: usage 410080kB, limit 9007199254740988kB, failcnt 0 [ 1865.796762][T23426] kmem: usage 9644kB, limit 9007199254740988kB, failcnt 0 [ 1865.796768][T23426] Memory cgroup stats for /syz6: [ 1865.796830][T23426] cache 304013312 [ 1865.796835][T23426] rss 512000 [ 1865.796839][T23426] rss_huge 0 [ 1865.796843][T23426] shmem 304013312 [ 1865.796847][T23426] mapped_file 162918400 [ 1865.796851][T23426] dirty 0 [ 1865.796855][T23426] writeback 0 [ 1865.796859][T23426] workingset_refault_anon 406 [ 1865.796863][T23426] workingset_refault_file 12076 [ 1865.796868][T23426] swap 105349120 [ 1865.796872][T23426] swapcached 234692608 [ 1865.796876][T23426] pgpgin 2727851 [ 1865.796880][T23426] pgpgout 2655017 [ 1865.796884][T23426] pgfault 963093 [ 1865.796888][T23426] pgmajfault 3457 [ 1865.796892][T23426] inactive_anon 202690560 [ 1865.796896][T23426] active_anon 101916672 [ 1865.796901][T23426] inactive_file 0 [ 1865.796905][T23426] active_file 0 [ 1865.796908][T23426] unevictable 0 [ 1865.796912][T23426] hierarchical_memory_limit 314572800 [ 1865.796917][T23426] hierarchical_memsw_limit 9223372036854771712 [ 1865.796922][T23426] total_cache 304013312 [ 1865.796926][T23426] total_rss 512000 [ 1865.796930][T23426] total_rss_huge 0 [ 1865.796935][T23426] total_shmem 304013312 [ 1865.796939][T23426] total_mapped_file 162918400 [ 1865.796943][T23426] total_dirty 0 [ 1865.796947][T23426] total_writeback 0 [ 1865.796952][T23426] total_workingset_refault_anon 406 [ 1865.796956][T23426] total_workingset_refault_file 12076 [ 1865.796961][T23426] total_swap 105349120 [ 1865.796965][T23426] total_swapcached 234692608 [ 1865.796970][T23426] total_pgpgin 2727851 [ 1865.796974][T23426] total_pgpgout 2655017 [ 1865.796978][T23426] total_pgfault 963093 [ 1865.796982][T23426] total_pgmajfault 3457 [ 1865.796987][T23426] total_inactive_anon 202690560 [ 1865.796991][T23426] total_active_anon 101916672 [ 1865.796996][T23426] total_inactive_file 0 [ 1865.797001][T23426] total_active_file 0 [ 1865.797005][T23426] total_unevictable 0 [ 1865.797009][T23426] anon_cost 0 [ 1865.797013][T23426] file_cost 0 [ 1865.797017][T23426] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4447,pid=23333,uid=0 [ 1865.797074][T23426] Memory cgroup out of memory: Killed process 23333 (syz.6.4447) total-vm:200572kB, anon-rss:1436kB, file-rss:20548kB, shmem-rss:33400kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 1868.251202][ T33] oom_reaper: reaped process 23333 (syz.6.4447), now anon-rss:0kB, file-rss:19540kB, shmem-rss:0kB SYZFAIL: failed to send rpc fd=3 want=240 sent=0 n=-1 (errno 32: Broken pipe) [ 1868.438872][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1868.438896][ T31] audit: type=1400 audit(1792013363.863:3436): avc: denied { write } for pid=5592 comm="syz-executor" path="pipe:[4556]" dev="pipefs" ino=4556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1