last executing test programs: 17m18.466238098s ago: executing program 1 (id=550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7ac0}]}}}]}]}], {0x14}}, 0xc8}}, 0x4000) 17m18.00127518s ago: executing program 1 (id=552): r0 = io_uring_setup(0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20002}) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000080)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, 0x0, 0x1) io_uring_enter(r0, 0x0, 0x1, 0x9, &(0x7f0000000180), 0x18) 17m17.010077754s ago: executing program 1 (id=556): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x82008000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000000440)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000019480), 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bind$packet(0xffffffffffffffff, &(0x7f00000194c0)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_open_procfs(0x0, &(0x7f0000019500)='net/ptype\x00') 17m16.601605267s ago: executing program 4 (id=559): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="000102030405060708090a0b0c0d", 0xe) 17m16.126540998s ago: executing program 4 (id=560): syz_usb_connect(0x0, 0x36, &(0x7f0000001140)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8", @ANYRES32], &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000011c0)={0x1, &(0x7f0000001200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 17m15.695297924s ago: executing program 1 (id=562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7ac0}]}}}]}]}], {0x14}}, 0xcc}}, 0x4000) 17m14.973480801s ago: executing program 1 (id=563): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="08ffed652a0bfbaee136752e45bba700e82914fef21d8b001b0000"], 0x34}}, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/failslab/times\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) write(r1, &(0x7f0000000880)='3', 0x1) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000900)={0x4, 0x8, 0x6, r1, 0x0, &(0x7f0000000940)={0x9a0907, 0x0, '\x00', @string=0x0}}) write(r0, &(0x7f00000003c0)='100', 0x3) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='5', 0x1) openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x1, &(0x7f0000000400)=[{0x6, 0x4, 0x40, 0x7fff0001}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17m14.689240912s ago: executing program 1 (id=564): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ftruncate(0xffffffffffffffff, 0x8008976) set_mempolicy(0x4005, 0x0, 0x6) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x80010, 0xffffffffffffffff, 0x1000) r0 = add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, 0x0, 0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000700)={{0x2, @broadcast, 0x15, 0x0, 'rr\x00', 0x0, 0x10, 0xfffffffd}, {@loopback, 0x4e21, 0x0, 0x1, 0x0, 0xfffffffd}}, 0x44) socket(0x2b, 0x80801, 0x1) fsopen(&(0x7f0000000780)='9p\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x16, 0x91, 0x0, @empty}}}}}, 0x0) 17m12.935368393s ago: executing program 4 (id=569): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0xef8}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="100f00002400010500000000000000000000000001000000"], 0xf10}}, 0x0) 17m12.56950797s ago: executing program 4 (id=571): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}}, 0x40008c0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="510302"], 0xc) 17m12.038680829s ago: executing program 4 (id=575): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="08ffed652a0bfbaee136752e45bba700e82914fef21d8b001b0000"], 0x34}}, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/failslab/times\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) write(r1, &(0x7f0000000880)='3', 0x1) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000900)={0x4, 0x8, 0x6, r1, 0x0, &(0x7f0000000940)={0x9a0907, 0x0, '\x00', @string=0x0}}) write(r0, &(0x7f00000003c0)='100', 0x3) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='5', 0x1) openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x1, &(0x7f0000000400)=[{0x6, 0x4, 0x40, 0x7fff0001}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17m11.303704259s ago: executing program 4 (id=578): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a0000000000000100100200001267"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca4f400038e0000000000000000100100200001267000000000100100201001001"], 0x0) 17m5.255467331s ago: executing program 2 (id=589): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ftruncate(0xffffffffffffffff, 0x8008976) set_mempolicy(0x4005, 0x0, 0x6) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x80010, 0xffffffffffffffff, 0x1000) r0 = add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, 0x0, 0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000700)={{0x2, @broadcast, 0x15, 0x0, 'rr\x00', 0x0, 0x10, 0xfffffffd}, {@loopback, 0x4e21, 0x0, 0x1, 0x0, 0xfffffffd}}, 0x44) socket(0x2b, 0x80801, 0x1) fsopen(&(0x7f0000000780)='9p\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x16, 0x91, 0x0, @empty}}}}}, 0x0) 17m4.132147829s ago: executing program 2 (id=591): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x82008000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000000440)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000019480), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bind$packet(0xffffffffffffffff, &(0x7f00000194c0)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_open_procfs(0x0, &(0x7f0000019500)='net/ptype\x00') mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) 17m2.142936245s ago: executing program 2 (id=595): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x82008000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000000440)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000019480), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bind$packet(0xffffffffffffffff, &(0x7f00000194c0)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_open_procfs(0x0, &(0x7f0000019500)='net/ptype\x00') write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) 16m59.539525916s ago: executing program 32 (id=564): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ftruncate(0xffffffffffffffff, 0x8008976) set_mempolicy(0x4005, 0x0, 0x6) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x80010, 0xffffffffffffffff, 0x1000) r0 = add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, 0x0, 0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000700)={{0x2, @broadcast, 0x15, 0x0, 'rr\x00', 0x0, 0x10, 0xfffffffd}, {@loopback, 0x4e21, 0x0, 0x1, 0x0, 0xfffffffd}}, 0x44) socket(0x2b, 0x80801, 0x1) fsopen(&(0x7f0000000780)='9p\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x16, 0x91, 0x0, @empty}}}}}, 0x0) 16m59.416764627s ago: executing program 2 (id=599): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x82008000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000000440)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000019480), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bind$packet(0xffffffffffffffff, &(0x7f00000194c0)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) pipe(&(0x7f0000000000)) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) 16m57.62675647s ago: executing program 2 (id=605): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="08ffed652a0bfbaee136752e45bba700e82914fef21d8b001b0000"], 0x34}}, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/failslab/times\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) write(r1, &(0x7f0000000880)='3', 0x1) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000900)={0x4, 0x8, 0x6, r1, 0x0, &(0x7f0000000940)={0x9a0907, 0x0, '\x00', @string=0x0}}) write(r0, &(0x7f00000003c0)='100', 0x3) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='5', 0x1) write(0xffffffffffffffff, &(0x7f0000000500)='1', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x1, &(0x7f0000000400)=[{0x6, 0x4, 0x40, 0x7fff0001}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 16m56.725779713s ago: executing program 2 (id=607): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x82008000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000000440)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000019480), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bind$packet(0xffffffffffffffff, &(0x7f00000194c0)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_open_procfs(0x0, &(0x7f0000019500)='net/ptype\x00') write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) 16m55.751283078s ago: executing program 33 (id=578): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a0000000000000100100200001267"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca4f400038e0000000000000000100100200001267000000000100100201001001"], 0x0) 16m41.57063327s ago: executing program 34 (id=607): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x82008000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000000440)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000019480), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bind$packet(0xffffffffffffffff, &(0x7f00000194c0)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_open_procfs(0x0, &(0x7f0000019500)='net/ptype\x00') write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) 26.449937039s ago: executing program 5 (id=2401): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) bind$unix(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x1ff) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, 0x0, 0x20040080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000440), 0x2, 0x141102) writev(r2, &(0x7f0000000480)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x641, 0x48001018, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x159502, 0x0) r5 = creat(&(0x7f0000000540)='./file1\x00', 0x108) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x10002, 0x2) r7 = syz_open_procfs(0x0, &(0x7f00000005c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000600)) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000640)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000680)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000006c0)={0xf0f046, 0x100410}) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r5, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000800)) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x268, 0x268, 0x33a, 0x0, 0x268, 0x3a0, 0x460, 0x460, 0x3a0, 0x460, 0xc, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0x0, 0xffffffff, 0xff, 0xff000000], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'macvlan0\x00', 'vlan0\x00', {0xff}, {}, 0xc, 0x6, 0x0, 0x5a}, 0x0, 0x220, 0x268, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x10000000, 0x5, 0x9}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'dvmrp1\x00', {0xfffffffffffff000}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000310009002abd7000000000000400000008001180040028808e3f840f0b34391c1dcfb10a0a53456c80b0f62f5e38ff42a10c2eb3ceeacfaf23373ba13e8c170eace08cec0b14d825f60ca0679673d04c485c9529b6c152d83ec5445d6709b44772f16f849aa5bc31a5bbdce4f1a823fe996c76825a7963c9d1967bebbbec41e9b1e53cf807ea8f12325c75f9d673e153860151850e250a97229bcc480f7afed90436bfc90a515d8117da70cd0e76dc0e2f64e365f7586be07d6c8dd70eeb535e0e110154aeec1786"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 23.133329527s ago: executing program 5 (id=2405): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) bind$unix(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x1ff) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, 0x0, 0x20040080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000440), 0x2, 0x141102) writev(r2, &(0x7f0000000480)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x641, 0x48001018, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x159502, 0x0) r5 = creat(&(0x7f0000000540)='./file1\x00', 0x108) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x10002, 0x2) r7 = syz_open_procfs(0x0, &(0x7f00000005c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000600)) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000640)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000680)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000006c0)={0xf0f046, 0x100410}) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r5, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mount(&(0x7f0000000700)=@filename='./dev/sda1\x00', &(0x7f0000000740)='./mnt\x00', &(0x7f0000000780)='ext4\x00', 0x8410, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x268, 0x268, 0x33a, 0x0, 0x268, 0x3a0, 0x460, 0x460, 0x3a0, 0x460, 0xc, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0x0, 0xffffffff, 0xff, 0xff000000], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'macvlan0\x00', 'vlan0\x00', {0xff}, {}, 0xc, 0x6, 0x0, 0x5a}, 0x0, 0x220, 0x268, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x10000000, 0x5, 0x9}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'dvmrp1\x00', {0xfffffffffffff000}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000310009002abd7000000000000400000008001180040028808e3f840f0b34391c1dcfb10a0a53456c80b0f62f5e38ff42a10c2eb3ceeacfaf23373ba13e8c170eace08cec0b14d825f60ca0679673d04c485c9529b6c152d83ec5445d6709b44772f16f849aa5bc31a5bbdce4f1a823fe996c76825a7963c9d1967bebbbec41e9b1e53cf807ea8f12325c75f9d673e153860151850e250a97229bcc480f7afed90436bfc90a515d8117da70cd0e76dc0e2f64e365f7586be07d6c8dd70eeb535e0e110154aeec1786"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 20.016749127s ago: executing program 5 (id=2407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000001070104000000020000000002bdd8000c000244000000000000e4780800054000000002040007800c000240000000000000ffff0900010073797a310000000008000540000000030c0002400000000000000056"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4004850) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000000080002400000000084000000060a010400000000000000000200000008000b40000000005c000480580001800a000100696e6e65720000004800028008000240000000810800034000000001080004400000003a080001400000000024000580090001006d6574610000000028000280080001400000000c08000240000000010900010073797a30"], 0x10c}}, 0x400c0d0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r4, &(0x7f0000000540), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='1', 0x1) close(r5) close(0xffffffffffffffff) r6 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) 19.787287172s ago: executing program 6 (id=2408): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000280)) 19.337506007s ago: executing program 5 (id=2411): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) bind$unix(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x1ff) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, 0x0, 0x20040080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000440), 0x2, 0x141102) writev(r2, &(0x7f0000000480)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x641, 0x48001018, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x159502, 0x0) r5 = creat(&(0x7f0000000540)='./file1\x00', 0x108) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x10002, 0x2) r7 = syz_open_procfs(0x0, &(0x7f00000005c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000600)) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000640)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000680)=0x2) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r5, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mount(&(0x7f0000000700)=@filename='./dev/sda1\x00', &(0x7f0000000740)='./mnt\x00', &(0x7f0000000780)='ext4\x00', 0x8410, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000800)) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x268, 0x268, 0x33a, 0x0, 0x268, 0x3a0, 0x460, 0x460, 0x3a0, 0x460, 0xc, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0x0, 0xffffffff, 0xff, 0xff000000], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'macvlan0\x00', 'vlan0\x00', {0xff}, {}, 0xc, 0x6, 0x0, 0x5a}, 0x0, 0x220, 0x268, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x10000000, 0x5, 0x9}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'dvmrp1\x00', {0xfffffffffffff000}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000310009002abd7000000000000400000008001180040028808e3f840f0b34391c1dcfb10a0a53456c80b0f62f5e38ff42a10c2eb3ceeacfaf23373ba13e8c170eace08cec0b14d825f60ca0679673d04c485c9529b6c152d83ec5445d6709b44772f16f849aa5bc31a5bbdce4f1a823fe996c76825a7963c9d1967bebbbec41e9b1e53cf807ea8f12325c75f9d673e153860151850e250a97229bcc480f7afed90436bfc90a515d8117da70cd0e76dc0e2f64e365f7586be07d6c8dd70eeb535e0e110154aeec1786"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 19.250071505s ago: executing program 6 (id=2413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4004850) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000000080002400000000084000000060a010400000000000000000200000008000b40000000005c000480580001800a000100696e6e65720000004800028008000240000000810800034000000001080004400000003a080001400000000024000580090001006d6574610000000028000280080001400000000c08000240000000010900010073797a30"], 0x10c}}, 0x400c0d0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r4, &(0x7f0000000540), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='1', 0x1) close(r5) r6 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) 18.344935054s ago: executing program 3 (id=2414): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) bind$unix(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x1ff) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, 0x0, 0x20040080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000440), 0x2, 0x141102) writev(r2, &(0x7f0000000480)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x641, 0x48001018, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x159502, 0x0) creat(&(0x7f0000000540)='./file1\x00', 0x108) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x10002, 0x2) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000600)) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000640)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000680)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000006c0)={0xf0f046, 0x100410}) fallocate(r4, 0x0, 0x1000000, 0x3) mount(&(0x7f0000000700)=@filename='./dev/sda1\x00', &(0x7f0000000740)='./mnt\x00', &(0x7f0000000780)='ext4\x00', 0x8410, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000800)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x268, 0x268, 0x33a, 0x0, 0x268, 0x3a0, 0x460, 0x460, 0x3a0, 0x460, 0xc, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0x0, 0xffffffff, 0xff, 0xff000000], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'macvlan0\x00', 'vlan0\x00', {0xff}, {}, 0xc, 0x6, 0x0, 0x5a}, 0x0, 0x220, 0x268, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x10000000, 0x5, 0x9}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'dvmrp1\x00', {0xfffffffffffff000}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000310009002abd7000000000000400000008001180040028808e3f840f0b34391c1dcfb10a0a53456c80b0f62f5e38ff42a10c2eb3ceeacfaf23373ba13e8c170eace08cec0b14d825f60ca0679673d04c485c9529b6c152d83ec5445d6709b44772f16f849aa5bc31a5bbdce4f1a823fe996c76825a7963c9d1967bebbbec41e9b1e53cf807ea8f12325c75f9d673e153860151850e250a97229bcc480f7afed90436bfc90a515d8117da70cd0e76dc0e2f64e365f7586be07d6c8dd70eeb535e0e110154aeec1786"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 17.930989569s ago: executing program 6 (id=2415): ioctl$DVB_DEMUX_DMX_DQBUF(0xffffffffffffffff, 0xc0186f40, &(0x7f0000000000)={0x2, 0x89, 0xff, 0xb, 0x4, 0x101}) epoll_create(0x9) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019280)={0xffffffffffffffff}) bind$unix(r4, &(0x7f00000192c0)=@file={0x1, './file1\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000193c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000019400)='./file0\x00', &(0x7f0000019440)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000019480)='./file0\x00', &(0x7f00000194c0), 0x0, &(0x7f0000019500)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000019540)='./file0\x00', &(0x7f0000019580), 0x0, &(0x7f00000195c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000019780)=@base={0x5, 0x7, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000019800)={0x11, 0x14, &(0x7f00000198c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000010080000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000019980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.097196035s ago: executing program 7 (id=2416): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) bind$unix(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x1ff) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, 0x0, 0x20040080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000440), 0x2, 0x141102) writev(r2, &(0x7f0000000480)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x641, 0x48001018, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x159502, 0x0) r5 = creat(&(0x7f0000000540)='./file1\x00', 0x108) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x10002, 0x2) r7 = syz_open_procfs(0x0, &(0x7f00000005c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000600)) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000640)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000680)=0x2) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r5, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mount(&(0x7f0000000700)=@filename='./dev/sda1\x00', &(0x7f0000000740)='./mnt\x00', &(0x7f0000000780)='ext4\x00', 0x8410, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000800)) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x268, 0x268, 0x33a, 0x0, 0x268, 0x3a0, 0x460, 0x460, 0x3a0, 0x460, 0xc, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0x0, 0xffffffff, 0xff, 0xff000000], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'macvlan0\x00', 'vlan0\x00', {0xff}, {}, 0xc, 0x6, 0x0, 0x5a}, 0x0, 0x220, 0x268, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x10000000, 0x5, 0x9}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'dvmrp1\x00', {0xfffffffffffff000}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000310009002abd7000000000000400000008001180040028808e3f840f0b34391c1dcfb10a0a53456c80b0f62f5e38ff42a10c2eb3ceeacfaf23373ba13e8c170eace08cec0b14d825f60ca0679673d04c485c9529b6c152d83ec5445d6709b44772f16f849aa5bc31a5bbdce4f1a823fe996c76825a7963c9d1967bebbbec41e9b1e53cf807ea8f12325c75f9d673e153860151850e250a97229bcc480f7afed90436bfc90a515d8117da70cd0e76dc0e2f64e365f7586be07d6c8dd70eeb535e0e110154aeec1786"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 14.210150571s ago: executing program 6 (id=2417): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580), 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="5a000000020000", 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$PTP_ENABLE_PPS(r4, 0x40043d04, 0x0) r5 = gettid() r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x2, 0x7}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r8, 0x6}, 0x8) sendmsg$rds(r7, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) 14.178488634s ago: executing program 5 (id=2418): ioctl$DVB_DEMUX_DMX_DQBUF(0xffffffffffffffff, 0xc0186f40, &(0x7f0000000000)={0x2, 0x89, 0xff, 0xb, 0x4, 0x101}) epoll_create(0x9) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019280)={0xffffffffffffffff}) bind$unix(r4, &(0x7f00000192c0)=@file={0x1, './file1\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000193c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000019400)='./file0\x00', &(0x7f0000019440)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000019480)='./file0\x00', &(0x7f00000194c0), 0x0, &(0x7f0000019500)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000019540)='./file0\x00', &(0x7f0000019580), 0x0, &(0x7f00000195c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000019780)=@base={0x5, 0x7, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000019800)={0x11, 0x14, &(0x7f00000198c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000010080000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000019980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.107047932s ago: executing program 0 (id=2419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000001070104000000020000000002bdd8000c000244000000000000e4780800054000000002040007800c000240000000000000ffff0900010073797a310000000008000540000000030c0002400000000000000056"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4004850) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000000080002400000000084000000060a010400000000000000000200000008000b40000000005c000480580001800a000100696e6e65720000004800028008000240000000810800034000000001080004400000003a080001400000000024000580090001006d6574610000000028000280080001400000000c08000240000000010900010073797a30"], 0x10c}}, 0x400c0d0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000540)='/dev/nullb1', 0xb) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='1', 0x1) close(r5) close(0xffffffffffffffff) r6 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) 14.103947989s ago: executing program 3 (id=2420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000001070104000000020000000002bdd8000c000244000000000000e4780800054000000002040007800c000240000000000000ffff0900010073797a310000000008000540000000030c0002400000000000000056"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4004850) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000000080002400000000084000000060a010400000000000000000200000008000b40000000005c000480580001800a000100696e6e65720000004800028008000240000000810800034000000001080004400000003a080001400000000024000580090001006d6574610000000028000280080001400000000c08000240000000010900010073797a30"], 0x10c}}, 0x400c0d0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='/dev/nullb1', 0xb) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='1', 0x1) close(r5) close(0xffffffffffffffff) r6 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r6, 0x0, 0x0) close(r6) 11.895800378s ago: executing program 5 (id=2421): ioctl$DVB_DEMUX_DMX_DQBUF(0xffffffffffffffff, 0xc0186f40, &(0x7f0000000000)={0x2, 0x89, 0xff, 0xb, 0x4, 0x101}) epoll_create(0x9) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019280)={0xffffffffffffffff}) bind$unix(r4, &(0x7f00000192c0)=@file={0x1, './file1\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000193c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000019400)='./file0\x00', &(0x7f0000019440)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000019480)='./file0\x00', &(0x7f00000194c0), 0x0, &(0x7f0000019500)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000019540)='./file0\x00', &(0x7f0000019580), 0x0, &(0x7f00000195c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$MAP_CREATE(0x0, &(0x7f0000019780)=@base={0x5, 0x7, 0x2, 0x4}, 0x50) 11.893720701s ago: executing program 3 (id=2422): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) bind$unix(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x1ff) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, 0x0, 0x20040080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000440), 0x2, 0x141102) writev(r2, &(0x7f0000000480)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x641, 0x48001018, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x159502, 0x0) r5 = creat(&(0x7f0000000540)='./file1\x00', 0x108) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x10002, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000600)) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000640)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000680)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000006c0)={0xf0f046, 0x100410}) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r5, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mount(&(0x7f0000000700)=@filename='./dev/sda1\x00', &(0x7f0000000740)='./mnt\x00', &(0x7f0000000780)='ext4\x00', 0x8410, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000800)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x268, 0x268, 0x33a, 0x0, 0x268, 0x3a0, 0x460, 0x460, 0x3a0, 0x460, 0xc, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0x0, 0xffffffff, 0xff, 0xff000000], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'macvlan0\x00', 'vlan0\x00', {0xff}, {}, 0xc, 0x6, 0x0, 0x5a}, 0x0, 0x220, 0x268, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x10000000, 0x5, 0x9}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'dvmrp1\x00', {0xfffffffffffff000}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000310009002abd7000000000000400000008001180040028808e3f840f0b34391c1dcfb10a0a53456c80b0f62f5e38ff42a10c2eb3ceeacfaf23373ba13e8c170eace08cec0b14d825f60ca0679673d04c485c9529b6c152d83ec5445d6709b44772f16f849aa5bc31a5bbdce4f1a823fe996c76825a7963c9d1967bebbbec41e9b1e53cf807ea8f12325c75f9d673e153860151850e250a97229bcc480f7afed90436bfc90a515d8117da70cd0e76dc0e2f64e365f7586be07d6c8dd70eeb535e0e110154aeec1786"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 10.840942397s ago: executing program 0 (id=2423): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x121602, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f00000002c0)=0x3, 0x4) sendmmsg(r4, 0x0, 0x0, 0x4000041) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) close_range(r0, r5, 0x0) r6 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000090583"], 0x0) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x8, &(0x7f0000000200)=ANY=[]) 10.647502297s ago: executing program 7 (id=2424): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) bind$unix(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x1ff) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, 0x0, 0x20040080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000440), 0x2, 0x141102) writev(r2, &(0x7f0000000480)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x641, 0x48001018, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x159502, 0x0) r5 = creat(&(0x7f0000000540)='./file1\x00', 0x108) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x10002, 0x2) r7 = syz_open_procfs(0x0, &(0x7f00000005c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000600)) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000640)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000680)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000006c0)={0xf0f046, 0x100410}) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r5, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mount(&(0x7f0000000700)=@filename='./dev/sda1\x00', &(0x7f0000000740)='./mnt\x00', &(0x7f0000000780)='ext4\x00', 0x8410, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000800)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x268, 0x268, 0x33a, 0x0, 0x268, 0x3a0, 0x460, 0x460, 0x3a0, 0x460, 0xc, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0x0, 0xffffffff, 0xff, 0xff000000], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'macvlan0\x00', 'vlan0\x00', {0xff}, {}, 0xc, 0x6, 0x0, 0x5a}, 0x0, 0x220, 0x268, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x10000000, 0x5, 0x9}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'dvmrp1\x00', {0xfffffffffffff000}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000310009002abd7000000000000400000008001180040028808e3f840f0b34391c1dcfb10a0a53456c80b0f62f5e38ff42a10c2eb3ceeacfaf23373ba13e8c170eace08cec0b14d825f60ca0679673d04c485c9529b6c152d83ec5445d6709b44772f16f849aa5bc31a5bbdce4f1a823fe996c76825a7963c9d1967bebbbec41e9b1e53cf807ea8f12325c75f9d673e153860151850e250a97229bcc480f7afed90436bfc90a515d8117da70cd0e76dc0e2f64e365f7586be07d6c8dd70eeb535e0e110154aeec1786"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 8.681540756s ago: executing program 0 (id=2425): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) bind$unix(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x1ff) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, 0x0, 0x20040080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000440), 0x2, 0x141102) writev(r2, &(0x7f0000000480)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x641, 0x48001018, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x159502, 0x0) r5 = creat(&(0x7f0000000540)='./file1\x00', 0x108) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x10002, 0x2) r7 = syz_open_procfs(0x0, &(0x7f00000005c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000600)) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000640)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000006c0)={0xf0f046, 0x100410}) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r5, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mount(&(0x7f0000000700)=@filename='./dev/sda1\x00', &(0x7f0000000740)='./mnt\x00', &(0x7f0000000780)='ext4\x00', 0x8410, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000800)) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x268, 0x268, 0x33a, 0x0, 0x268, 0x3a0, 0x460, 0x460, 0x3a0, 0x460, 0xc, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0x0, 0xffffffff, 0xff, 0xff000000], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'macvlan0\x00', 'vlan0\x00', {0xff}, {}, 0xc, 0x6, 0x0, 0x5a}, 0x0, 0x220, 0x268, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x10000000, 0x5, 0x9}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'dvmrp1\x00', {0xfffffffffffff000}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000310009002abd7000000000000400000008001180040028808e3f840f0b34391c1dcfb10a0a53456c80b0f62f5e38ff42a10c2eb3ceeacfaf23373ba13e8c170eace08cec0b14d825f60ca0679673d04c485c9529b6c152d83ec5445d6709b44772f16f849aa5bc31a5bbdce4f1a823fe996c76825a7963c9d1967bebbbec41e9b1e53cf807ea8f12325c75f9d673e153860151850e250a97229bcc480f7afed90436bfc90a515d8117da70cd0e76dc0e2f64e365f7586be07d6c8dd70eeb535e0e110154aeec1786"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 8.666558114s ago: executing program 3 (id=2426): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) bind$unix(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x1ff) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, 0x0, 0x20040080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000440), 0x2, 0x141102) writev(r2, &(0x7f0000000480)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x641, 0x48001018, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x159502, 0x0) r5 = creat(&(0x7f0000000540)='./file1\x00', 0x108) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x10002, 0x2) r7 = syz_open_procfs(0x0, &(0x7f00000005c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000600)) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000640)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000680)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000006c0)={0xf0f046, 0x100410}) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r5, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mount(&(0x7f0000000700)=@filename='./dev/sda1\x00', &(0x7f0000000740)='./mnt\x00', &(0x7f0000000780)='ext4\x00', 0x8410, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x268, 0x268, 0x33a, 0x0, 0x268, 0x3a0, 0x460, 0x460, 0x3a0, 0x460, 0xc, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0x0, 0xffffffff, 0xff, 0xff000000], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'macvlan0\x00', 'vlan0\x00', {0xff}, {}, 0xc, 0x6, 0x0, 0x5a}, 0x0, 0x220, 0x268, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x10000000, 0x5, 0x9}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'dvmrp1\x00', {0xfffffffffffff000}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000310009002abd7000000000000400000008001180040028808e3f840f0b34391c1dcfb10a0a53456c80b0f62f5e38ff42a10c2eb3ceeacfaf23373ba13e8c170eace08cec0b14d825f60ca0679673d04c485c9529b6c152d83ec5445d6709b44772f16f849aa5bc31a5bbdce4f1a823fe996c76825a7963c9d1967bebbbec41e9b1e53cf807ea8f12325c75f9d673e153860151850e250a97229bcc480f7afed90436bfc90a515d8117da70cd0e76dc0e2f64e365f7586be07d6c8dd70eeb535e0e110154aeec1786"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 5.852150304s ago: executing program 7 (id=2427): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 5.447187334s ago: executing program 0 (id=2428): ioctl$DVB_DEMUX_DMX_DQBUF(0xffffffffffffffff, 0xc0186f40, &(0x7f0000000000)={0x2, 0x89, 0xff, 0xb, 0x4, 0x101}) epoll_create(0x9) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019280)={0xffffffffffffffff}) bind$unix(r4, &(0x7f00000192c0)=@file={0x1, './file1\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000193c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000019400)='./file0\x00', &(0x7f0000019440)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000019480)='./file0\x00', &(0x7f00000194c0), 0x0, &(0x7f0000019500)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000019540)='./file0\x00', &(0x7f0000019580), 0x0, &(0x7f00000195c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000019780)=@base={0x5, 0x7, 0x2, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000019800)={0x11, 0x14, &(0x7f00000198c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000010080000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000019980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000199c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000019640)='.\x00', 0x8880, 0x85) getdents(r7, &(0x7f0000019680)=""/208, 0xd0) 4.646404497s ago: executing program 0 (id=2429): ioctl$DVB_DEMUX_DMX_DQBUF(0xffffffffffffffff, 0xc0186f40, &(0x7f0000000000)={0x2, 0x89, 0xff, 0xb, 0x4, 0x101}) epoll_create(0x9) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019280)={0xffffffffffffffff}) bind$unix(r4, &(0x7f00000192c0)=@file={0x1, './file1\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000193c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000019400)='./file0\x00', &(0x7f0000019440)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000019480)='./file0\x00', &(0x7f00000194c0), 0x0, &(0x7f0000019500)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000019540)='./file0\x00', &(0x7f0000019580), 0x0, &(0x7f00000195c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000019780)=@base={0x5, 0x7, 0x2, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000019800)={0x11, 0x14, &(0x7f00000198c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000010080000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000019980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000199c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000019600)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000019640)='.\x00', 0x8880, 0x85) 4.642992551s ago: executing program 3 (id=2430): socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat$nsim_port_qreset(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x31}, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r5, &(0x7f0000000a80)=""/102392, 0x18ff8) sendmsg$nl_generic(r1, &(0x7f0000019a80)={0x0, 0x0, &(0x7f0000019ac0)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000100001072abd7000000000000a0000000c0002006e6c383032313100813bd6d20de056b491556845a243a161733f1e47706cc04f7547efd1ed89818f5817559824e90cf1c655821820fb8ee0018d6655355505652c181ba34e5bcd3ce484fcf5181d296f77e7b826d6bfb48d6547cf7d10d0e83684ca647c0aebbead44c8380f5a0774648c866e7942efa1b123f43c3495be6796b6ac6e1de2f2ddac093cd5597f0e76ed632d0d6781ed84cec06dc7c266386bb65b1887aff3ea989524d83b0e9763d3de"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000019b40)={{0x1, 0x1, 0x18, r0, {0x5d27963e}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000019bc0)) write$nsim_port_qreset(r0, &(0x7f0000019c00)={0x32, 0x20, 0x33}, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/console\x00', 0x1, 0x0) 3.76036084s ago: executing program 7 (id=2431): r0 = socket$can_bcm(0x1d, 0x2, 0x2) read(r0, &(0x7f0000000100)=""/184, 0xb8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setregid(0xffffffffffffffff, 0xffffffffffffffff) bind$bt_l2cap(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1a7) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='ext4\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), 0xfffffffb, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0), 0x1000, r3}, 0x38) r4 = open$dir(&(0x7f0000000500)='./mnt\x00', 0x0, 0x2) renameat2(r4, 0x0, r4, &(0x7f0000000580)='./mnt\x00', 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x20, r7, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000700)=0x189d, 0x1a) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000740)=0x4, 0x4) recvmmsg(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x60, 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) sendmmsg$sock(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000009c0)="3c288d8b3b7d97f8c475ed07c88ca0836243c44dddf9e0f57bfa33a4", 0x1c}], 0x1}}], 0x2, 0x20004090) 3.013340112s ago: executing program 3 (id=2432): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) bind$unix(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x1ff) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, 0x0, 0x20040080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000440), 0x2, 0x141102) writev(r2, &(0x7f0000000480)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x641, 0x48001018, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x159502, 0x0) r5 = creat(&(0x7f0000000540)='./file1\x00', 0x108) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x10002, 0x2) r7 = syz_open_procfs(0x0, &(0x7f00000005c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000600)) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000640)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000006c0)={0xf0f046, 0x100410}) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r5, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mount(&(0x7f0000000700)=@filename='./dev/sda1\x00', &(0x7f0000000740)='./mnt\x00', &(0x7f0000000780)='ext4\x00', 0x8410, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000800)) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x268, 0x268, 0x33a, 0x0, 0x268, 0x3a0, 0x460, 0x460, 0x3a0, 0x460, 0xc, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0x0, 0xffffffff, 0xff, 0xff000000], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'macvlan0\x00', 'vlan0\x00', {0xff}, {}, 0xc, 0x6, 0x0, 0x5a}, 0x0, 0x220, 0x268, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x10000000, 0x5, 0x9}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'dvmrp1\x00', {0xfffffffffffff000}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000310009002abd7000000000000400000008001180040028808e3f840f0b34391c1dcfb10a0a53456c80b0f62f5e38ff42a10c2eb3ceeacfaf23373ba13e8c170eace08cec0b14d825f60ca0679673d04c485c9529b6c152d83ec5445d6709b44772f16f849aa5bc31a5bbdce4f1a823fe996c76825a7963c9d1967bebbbec41e9b1e53cf807ea8f12325c75f9d673e153860151850e250a97229bcc480f7afed90436bfc90a515d8117da70cd0e76dc0e2f64e365f7586be07d6c8dd70eeb535e0e110154aeec1786"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1.840520261s ago: executing program 7 (id=2433): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000310009002abd7000000000000400000008001180040028808e3f840f0b34391c1dcfb10a0a53456c80b0f62f5e38ff42a10c2eb3ceeacfaf23373ba13e8c170eace08cec0b14d825f60ca0679673d04c485c9529b6c152d83ec5445d6709b44772f16f849aa5bc31a5bbdce4f1a823fe996c76825a7963c9d1967bebbbec41e9b1e53cf807ea8f12325c75f9d673e153860151850e250a97229bcc480f7afed90436bfc90a515d8117da70cd0e76dc0e2f64e365f7586be07d6c8dd70eeb535e0e110154aeec1786"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1.73925381s ago: executing program 6 (id=2434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000001070104000000020000000002bdd8000c000244000000000000e4780800054000000002040007800c000240000000000000ffff0900010073797a310000000008000540000000030c0002400000000000000056"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4004850) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000000080002400000000084000000060a010400000000000000000200000008000b40000000005c000480580001800a000100696e6e65720000004800028008000240000000810800034000000001080004400000003a080001400000000024000580090001006d6574610000000028000280080001400000000c08000240000000010900010073797a30"], 0x10c}}, 0x400c0d0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='/dev/null', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='1', 0x1) close(r5) close(0xffffffffffffffff) r6 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) 1.528029596s ago: executing program 7 (id=2435): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x121602, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f00000002c0)=0x3, 0x4) sendmmsg(r4, 0x0, 0x0, 0x4000041) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) close_range(r0, r5, 0x0) r6 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000090583"], 0x0) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x8, &(0x7f0000000200)=ANY=[]) 456.102664ms ago: executing program 0 (id=2436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000001070104000000020000000002bdd8000c000244000000000000e4780800054000000002040007800c000240000000000000ffff0900010073797a310000000008000540000000030c0002400000000000000056"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4004850) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000000080002400000000084000000060a010400000000000000000200000008000b40000000005c000480580001800a000100696e6e65720000004800028008000240000000810800034000000001080004400000003a080001400000000024000580090001006d6574610000000028000280080001400000000c08000240000000010900010073797a30"], 0x10c}}, 0x400c0d0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='/dev/nullb', 0xa) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='1', 0x1) close(r5) close(0xffffffffffffffff) r6 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) 0s ago: executing program 6 (id=2437): ioctl$DVB_DEMUX_DMX_DQBUF(0xffffffffffffffff, 0xc0186f40, &(0x7f0000000000)={0x2, 0x89, 0xff, 0xb, 0x4, 0x101}) epoll_create(0x9) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019280)={0xffffffffffffffff}) bind$unix(r4, &(0x7f00000192c0)=@file={0x1, './file1\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000193c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000019400)='./file0\x00', &(0x7f0000019440)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000019480)='./file0\x00', &(0x7f00000194c0), 0x0, &(0x7f0000019500)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000019540)='./file0\x00', &(0x7f0000019580), 0x0, &(0x7f00000195c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000019780)=@base={0x5, 0x7, 0x2, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000019800)={0x11, 0x14, &(0x7f00000198c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000010080000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000019980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000199c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000019600)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000019640)='.\x00', 0x8880, 0x85) kernel console output (not intermixed with test programs): 2] mtrr_ioctl+0xbc8/0xcf0 [ 804.493490][T13762] ? __pfx_mtrr_ioctl+0x10/0x10 [ 804.493515][T13762] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 804.493556][T13762] ? irqentry_exit+0x202/0xab0 [ 804.493589][T13762] ? __pfx_mtrr_ioctl+0x10/0x10 [ 804.493619][T13762] proc_reg_unlocked_ioctl+0x229/0x320 [ 804.493652][T13762] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 804.493684][T13762] __x64_sys_ioctl+0x18e/0x210 [ 804.493721][T13762] do_syscall_64+0x123/0x790 [ 804.493743][T13762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.493766][T13762] RIP: 0033:0x7fb90479f559 [ 804.493782][T13762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.493805][T13762] RSP: 002b:00007fb905671028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 804.493822][T13762] RAX: ffffffffffffffda RBX: 00007fb904a26180 RCX: 00007fb90479f559 [ 804.493833][T13762] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000007 [ 804.493849][T13762] RBP: 00007fb904836b50 R08: 0000000000000000 R09: 0000000000000000 [ 804.493861][T13762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.493873][T13762] R13: 00007fb904a26218 R14: 00007fb904a26180 R15: 00007ffd88367118 [ 804.493909][T13762] [ 804.505844][T13762] input: syz1 as /devices/virtual/input/input54 [ 804.881575][ T30] audit: type=1400 audit(1793533509.118:514): avc: denied { write } for pid=13764 comm="syz.5.1732" name="auth.unix.ip" dev="proc" ino=4026533968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 805.138433][T13768] input: syz1 as /devices/virtual/input/input55 [ 806.119741][ T30] audit: type=1400 audit(1793533510.368:515): avc: denied { write } for pid=13780 comm="syz.5.1735" name="auth.unix.ip" dev="proc" ino=4026533968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 806.852221][T13785] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1734'. [ 807.965796][T13795] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 808.123521][T13799] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1739'. [ 808.623899][ C0] net_ratelimit: 65 callbacks suppressed [ 808.690471][T13415] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 808.864205][T13415] usb 6-1: Using ep0 maxpacket: 8 [ 808.869723][T13415] usb 6-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 808.879568][T13415] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 808.879581][T13415] usb 6-1: config 179 has no interface number 0 [ 808.879618][T13415] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 808.879634][T13415] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 808.879648][T13415] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 808.879660][T13415] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 808.879691][T13415] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.953197][T13795] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 810.544734][T13822] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 810.991392][T11784] usb 6-1: USB disconnect, device number 12 [ 811.346263][T13830] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 811.365148][T13830] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 812.049654][ T30] audit: type=1400 audit(1793533516.298:516): avc: denied { write } for pid=13828 comm="syz.5.1745" name="auth.unix.ip" dev="proc" ino=4026533968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 812.268079][T13835] size and base must be multiples of 4 kiB [ 812.268130][T13835] CPU: 1 UID: 0 PID: 13835 Comm: syz.5.1745 Tainted: G L syzkaller #0 PREEMPT(full) [ 812.268159][T13835] Tainted: [L]=SOFTLOCKUP [ 812.268166][T13835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 812.268177][T13835] Call Trace: [ 812.268185][T13835] [ 812.268193][T13835] dump_stack_lvl+0x100/0x190 [ 812.268230][T13835] mtrr_del.cold+0x72/0x85 [ 812.268250][T13835] mtrr_ioctl+0xbc8/0xcf0 [ 812.268274][T13835] ? __pfx_lockdep_hardirqs_on+0x1/0x10 [ 812.268294][T13835] ? __pfx_mtrr_ioctl+0x10/0x10 [ 812.268319][T13835] ? irqentry_exit+0x202/0xab0 [ 812.268337][T13835] ? lockdep_hardirqs_on+0x7d/0x110 [ 812.268355][T13835] ? irqentry_exit+0x202/0xab0 [ 812.268382][T13835] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 812.268413][T13835] ? __pfx_mtrr_ioctl+0x10/0x10 [ 812.268435][T13835] proc_reg_unlocked_ioctl+0x229/0x320 [ 812.268463][T13835] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 812.268494][T13835] __x64_sys_ioctl+0x18e/0x210 [ 812.268527][T13835] do_syscall_64+0x123/0x790 [ 812.268549][T13835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.268569][T13835] RIP: 0033:0x7f047619f559 [ 812.268587][T13835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.268605][T13835] RSP: 002b:00007f0477067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 812.268624][T13835] RAX: ffffffffffffffda RBX: 00007f0476426180 RCX: 00007f047619f559 [ 812.268637][T13835] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000007 [ 812.268649][T13835] RBP: 00007f0476236b50 R08: 0000000000000000 R09: 0000000000000000 [ 812.268661][T13835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.268672][T13835] R13: 00007f0476426218 R14: 00007f0476426180 R15: 00007ffef8df1648 [ 812.268699][T13835] [ 812.279420][T13835] input: syz1 as /devices/virtual/input/input56 [ 812.842646][T13834] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1746'. [ 813.699703][ T5749] net_ratelimit: 73 callbacks suppressed [ 814.419015][ T30] audit: type=1400 audit(1793533518.668:517): avc: denied { write } for pid=13850 comm="syz.6.1749" name="auth.unix.ip" dev="proc" ino=4026534146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 814.672396][T13860] size and base must be multiples of 4 kiB [ 814.672430][T13860] CPU: 0 UID: 0 PID: 13860 Comm: syz.6.1749 Tainted: G L syzkaller #0 PREEMPT(full) [ 814.672457][T13860] Tainted: [L]=SOFTLOCKUP [ 814.672464][T13860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 814.672476][T13860] Call Trace: [ 814.672484][T13860] [ 814.672493][T13860] dump_stack_lvl+0x100/0x190 [ 814.672528][T13860] mtrr_del.cold+0x72/0x85 [ 814.672549][T13860] mtrr_ioctl+0xbc8/0xcf0 [ 814.672574][T13860] ? __pfx_mtrr_ioctl+0x10/0x10 [ 814.672596][T13860] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 814.672630][T13860] ? __fget_files+0x34/0x3d0 [ 814.672666][T13860] ? __pfx_mtrr_ioctl+0x10/0x10 [ 814.672690][T13860] proc_reg_unlocked_ioctl+0x229/0x320 [ 814.672720][T13860] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 814.672751][T13860] __x64_sys_ioctl+0x18e/0x210 [ 814.672782][T13860] do_syscall_64+0x123/0x790 [ 814.672804][T13860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.672824][T13860] RIP: 0033:0x7fe2d359f559 [ 814.672839][T13860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.672858][T13860] RSP: 002b:00007fe2d44bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 814.672878][T13860] RAX: ffffffffffffffda RBX: 00007fe2d3826180 RCX: 00007fe2d359f559 [ 814.672890][T13860] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000007 [ 814.672902][T13860] RBP: 00007fe2d3636b50 R08: 0000000000000000 R09: 0000000000000000 [ 814.672914][T13860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.672925][T13860] R13: 00007fe2d3826218 R14: 00007fe2d3826180 R15: 00007ffd420aeac8 [ 814.672958][T13860] [ 814.683564][T13860] input: syz1 as /devices/virtual/input/input57 [ 815.233423][T13865] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1752'. [ 816.194339][T13876] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 816.200042][T13876] can0: slcan on ttyS3. [ 816.744963][T13876] can0 (unregistered): slcan off ttyS3. [ 817.302170][T13885] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 817.317765][T13885] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 817.666426][T13890] kAFS: unparsable volume name [ 818.018078][ T30] audit: type=1400 audit(1793533522.268:518): avc: denied { write } for pid=13892 comm="syz.6.1758" name="auth.unix.ip" dev="proc" ino=4026534146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 818.322677][T13898] input: syz1 as /devices/virtual/input/input58 [ 818.506970][T13900] kAFS: unparsable volume name [ 818.944186][ C1] net_ratelimit: 69 callbacks suppressed [ 819.087995][T13905] kAFS: unparsable volume name [ 822.884463][ T30] audit: type=1400 audit(1793533527.138:519): avc: denied { write } for pid=13937 comm="syz.7.1769" name="auth.unix.ip" dev="proc" ino=4026533275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 823.018655][T13940] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1768'. [ 823.119540][T13941] input: syz1 as /devices/virtual/input/input59 [ 824.129832][T13948] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 824.144737][T13948] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 824.554112][ C0] net_ratelimit: 87 callbacks suppressed [ 824.849681][T13953] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1772'. [ 824.873637][T13954] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1773'. [ 825.091944][T13958] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1775'. [ 825.583423][T13966] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 825.601377][T13966] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 825.878176][T13968] kAFS: unparsable volume name [ 826.473340][T13978] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1780'. [ 827.435101][T13995] kAFS: unparsable volume name [ 828.747309][T14006] kAFS: unparsable volume name [ 829.408562][ T30] audit: type=1400 audit(1793533533.658:520): avc: denied { write } for pid=14008 comm="syz.0.1774" name="auth.unix.ip" dev="proc" ino=4026533584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 829.651649][T14011] input: syz1 as /devices/virtual/input/input60 [ 830.223863][ C1] net_ratelimit: 90 callbacks suppressed [ 831.466745][T14024] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1789'. [ 831.957316][T14034] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 831.963061][T14034] can0: slcan on ttyS3. [ 832.140805][ T30] audit: type=1400 audit(1793533536.388:521): avc: denied { write } for pid=14032 comm="syz.7.1792" name="auth.unix.ip" dev="proc" ino=4026533275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 832.264120][T14034] can0 (unregistered): slcan off ttyS3. [ 832.365777][T14039] input: syz1 as /devices/virtual/input/input61 [ 833.037474][ T30] audit: type=1400 audit(1793533537.288:522): avc: denied { write } for pid=14043 comm="syz.5.1796" name="auth.unix.ip" dev="proc" ino=4026533968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 833.270152][T14047] input: syz1 as /devices/virtual/input/input62 [ 833.467733][T14049] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 833.507855][T14049] can0: slcan on ttyS3. [ 833.898579][T14049] can0 (unregistered): slcan off ttyS3. [ 834.086084][T14055] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1797'. [ 834.478006][T14063] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1799'. [ 835.263871][ C0] net_ratelimit: 85 callbacks suppressed [ 835.840678][T14072] kAFS: unparsable volume name [ 836.589822][T14077] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1804'. [ 837.117256][T14085] kAFS: unparsable volume name [ 837.886323][ T30] audit: type=1400 audit(1793533542.138:523): avc: denied { write } for pid=14087 comm="syz.7.1806" name="auth.unix.ip" dev="proc" ino=4026533275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 838.102516][T14091] input: syz1 as /devices/virtual/input/input63 [ 839.022381][T14098] kAFS: unparsable volume name [ 839.650646][T14108] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 839.667215][T14108] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 840.383857][ C0] net_ratelimit: 67 callbacks suppressed [ 841.899658][T14118] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 841.919303][T14118] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 842.341685][T14120] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 842.347287][T14120] can0: slcan on ttyS3. [ 842.877510][T14120] can0 (unregistered): slcan off ttyS3. [ 844.790615][T14136] kAFS: unparsable volume name [ 844.927806][T14138] kAFS: unparsable volume name [ 845.503886][ C1] net_ratelimit: 99 callbacks suppressed [ 845.841362][T14146] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 845.878100][T14146] can0: slcan on ttyS3. [ 845.884154][T14145] kAFS: unparsable volume name [ 846.600717][T14155] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1821'. [ 847.209111][T14159] kAFS: unparsable volume name [ 847.504269][T14146] can0 (unregistered): slcan off ttyS3. [ 847.650440][T14161] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 847.654727][T14161] can0: slcan on ttyS3. [ 848.688495][T14161] can0 (unregistered): slcan off ttyS3. [ 848.788122][T14175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1826'. [ 848.893334][T14179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1827'. [ 850.543859][ C0] net_ratelimit: 68 callbacks suppressed [ 853.209606][T14210] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 853.227671][T14210] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 855.050412][T14219] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 855.743857][ C0] net_ratelimit: 87 callbacks suppressed [ 855.947118][T14224] kAFS: unparsable volume name [ 857.125105][T14232] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 857.142711][T14232] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 858.077006][T14236] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 858.105884][T14236] can0: slcan on ttyS3. [ 858.694527][T14236] can0 (unregistered): slcan off ttyS3. [ 858.953236][ T30] audit: type=1400 audit(1793533563.198:524): avc: denied { write } for pid=14240 comm="syz.6.1835" name="auth.unix.ip" dev="proc" ino=4026534146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 859.194791][T14245] input: syz1 as /devices/virtual/input/input64 [ 859.797947][T14248] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1841'. [ 860.013649][T14252] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 860.128973][ T30] audit: type=1400 audit(1793533564.378:525): avc: denied { write } for pid=14257 comm="syz.3.1843" name="auth.unix.ip" dev="proc" ino=4026533108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 860.290872][T14259] size and base must be multiples of 4 kiB [ 860.290888][T14259] CPU: 0 UID: 0 PID: 14259 Comm: syz.3.1843 Tainted: G L syzkaller #0 PREEMPT(full) [ 860.290903][T14259] Tainted: [L]=SOFTLOCKUP [ 860.290908][T14259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 860.290914][T14259] Call Trace: [ 860.290919][T14259] [ 860.290924][T14259] dump_stack_lvl+0x100/0x190 [ 860.290947][T14259] mtrr_del.cold+0x72/0x85 [ 860.290959][T14259] mtrr_ioctl+0xbc8/0xcf0 [ 860.290975][T14259] ? __pfx_mtrr_ioctl+0x10/0x10 [ 860.290991][T14259] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 860.291012][T14259] ? __fget_files+0x34/0x3d0 [ 860.291031][T14259] ? __pfx_mtrr_ioctl+0x10/0x10 [ 860.291043][T14259] proc_reg_unlocked_ioctl+0x229/0x320 [ 860.291059][T14259] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 860.291077][T14259] __x64_sys_ioctl+0x18e/0x210 [ 860.291095][T14259] do_syscall_64+0x123/0x790 [ 860.291107][T14259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.291118][T14259] RIP: 0033:0x7f8023b9f559 [ 860.291127][T14259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.291138][T14259] RSP: 002b:00007f8021dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 860.291149][T14259] RAX: ffffffffffffffda RBX: 00007f8023e26090 RCX: 00007f8023b9f559 [ 860.291155][T14259] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000007 [ 860.291162][T14259] RBP: 00007f8023c36b50 R08: 0000000000000000 R09: 0000000000000000 [ 860.291168][T14259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.291175][T14259] R13: 00007f8023e26128 R14: 00007f8023e26090 R15: 00007ffc3a4d1438 [ 860.291189][T14259] [ 860.295286][T14259] input: syz1 as /devices/virtual/input/input65 [ 860.496616][ T5754] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 860.685431][ T5754] usb 6-1: Using ep0 maxpacket: 8 [ 860.686196][ T5754] usb 6-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 860.687303][ T5754] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 860.687315][ T5754] usb 6-1: config 179 has no interface number 0 [ 860.687336][ T5754] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 860.687349][ T5754] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 860.687363][ T5754] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 860.687375][ T5754] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 860.687411][ T5754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.781107][T14252] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 860.783858][ C0] net_ratelimit: 94 callbacks suppressed [ 860.985809][T11784] usb 6-1: USB disconnect, device number 13 [ 862.112592][T14273] kAFS: unparsable volume name [ 862.920651][ T30] audit: type=1400 audit(1793533567.168:526): avc: denied { write } for pid=14275 comm="syz.3.1848" name="auth.unix.ip" dev="proc" ino=4026533108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 863.099436][T14277] input: syz1 as /devices/virtual/input/input66 [ 864.706840][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.706887][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 865.002312][T14288] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1850'. [ 865.366138][ T30] audit: type=1400 audit(1793533569.618:527): avc: denied { write } for pid=14293 comm="syz.0.1852" name="auth.unix.ip" dev="proc" ino=4026533584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 865.578237][T14298] size and base must be multiples of 4 kiB [ 865.578258][T14298] CPU: 0 UID: 0 PID: 14298 Comm: syz.0.1852 Tainted: G L syzkaller #0 PREEMPT(full) [ 865.578286][T14298] Tainted: [L]=SOFTLOCKUP [ 865.578293][T14298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 865.578305][T14298] Call Trace: [ 865.578312][T14298] [ 865.578321][T14298] dump_stack_lvl+0x100/0x190 [ 865.578358][T14298] mtrr_del.cold+0x72/0x85 [ 865.578378][T14298] mtrr_ioctl+0xbc8/0xcf0 [ 865.578404][T14298] ? __pfx_mtrr_ioctl+0x10/0x10 [ 865.578428][T14298] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 865.578462][T14298] ? __fget_files+0x34/0x3d0 [ 865.578498][T14298] ? __pfx_mtrr_ioctl+0x10/0x10 [ 865.578521][T14298] proc_reg_unlocked_ioctl+0x229/0x320 [ 865.578549][T14298] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 865.578581][T14298] __x64_sys_ioctl+0x18e/0x210 [ 865.578612][T14298] do_syscall_64+0x123/0x790 [ 865.578634][T14298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.578654][T14298] RIP: 0033:0x7fb90479f559 [ 865.578670][T14298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.578688][T14298] RSP: 002b:00007fb905671028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 865.578707][T14298] RAX: ffffffffffffffda RBX: 00007fb904a26180 RCX: 00007fb90479f559 [ 865.578720][T14298] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000007 [ 865.578733][T14298] RBP: 00007fb904836b50 R08: 0000000000000000 R09: 0000000000000000 [ 865.578744][T14298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.578756][T14298] R13: 00007fb904a26218 R14: 00007fb904a26180 R15: 00007ffd88367118 [ 865.578783][T14298] [ 865.583728][T14298] input: syz1 as /devices/virtual/input/input67 [ 865.871817][ T30] audit: type=1400 audit(1793533570.118:528): avc: denied { write } for pid=14296 comm="syz.6.1854" name="auth.unix.ip" dev="proc" ino=4026534146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 865.903860][ C1] net_ratelimit: 69 callbacks suppressed [ 867.154195][T14311] size and base must be multiples of 4 kiB [ 867.154214][T14311] CPU: 1 UID: 0 PID: 14311 Comm: syz.6.1854 Tainted: G L syzkaller #0 PREEMPT(full) [ 867.154240][T14311] Tainted: [L]=SOFTLOCKUP [ 867.154247][T14311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 867.154259][T14311] Call Trace: [ 867.154266][T14311] [ 867.154275][T14311] dump_stack_lvl+0x100/0x190 [ 867.154311][T14311] mtrr_del.cold+0x72/0x85 [ 867.154333][T14311] mtrr_ioctl+0xbc8/0xcf0 [ 867.154359][T14311] ? __pfx_mtrr_ioctl+0x10/0x10 [ 867.154381][T14311] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 867.154425][T14311] ? __fget_files+0x34/0x3d0 [ 867.154461][T14311] ? __pfx_mtrr_ioctl+0x10/0x10 [ 867.154486][T14311] proc_reg_unlocked_ioctl+0x229/0x320 [ 867.154517][T14311] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 867.154551][T14311] __x64_sys_ioctl+0x18e/0x210 [ 867.154582][T14311] do_syscall_64+0x123/0x790 [ 867.154604][T14311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.154624][T14311] RIP: 0033:0x7fe2d359f559 [ 867.154640][T14311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.154659][T14311] RSP: 002b:00007fe2d447a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 867.154679][T14311] RAX: ffffffffffffffda RBX: 00007fe2d3826360 RCX: 00007fe2d359f559 [ 867.154692][T14311] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000007 [ 867.154703][T14311] RBP: 00007fe2d3636b50 R08: 0000000000000000 R09: 0000000000000000 [ 867.154715][T14311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.154726][T14311] R13: 00007fe2d38263f8 R14: 00007fe2d3826360 R15: 00007ffd420aeac8 [ 867.154752][T14311] [ 867.157270][T14311] input: syz1 as /devices/virtual/input/input68 [ 869.393004][T14315] syz.0.1856 (14315) used greatest stack depth: 17192 bytes left [ 869.733077][T14320] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 869.769120][T14320] can0: slcan on ttyS3. [ 870.244339][T14320] can0 (unregistered): slcan off ttyS3. [ 870.559125][T14329] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1861'. [ 870.719924][ T30] audit: type=1400 audit(1793533574.968:529): avc: denied { write } for pid=14324 comm="syz.7.1858" name="auth.unix.ip" dev="proc" ino=4026533275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 871.368387][T14335] size and base must be multiples of 4 kiB [ 871.368402][T14335] CPU: 1 UID: 0 PID: 14335 Comm: syz.7.1858 Tainted: G L syzkaller #0 PREEMPT(full) [ 871.368418][T14335] Tainted: [L]=SOFTLOCKUP [ 871.368422][T14335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 871.368428][T14335] Call Trace: [ 871.368432][T14335] [ 871.368438][T14335] dump_stack_lvl+0x100/0x190 [ 871.368460][T14335] mtrr_del.cold+0x72/0x85 [ 871.368474][T14335] mtrr_ioctl+0xbc8/0xcf0 [ 871.368489][T14335] ? __pfx_mtrr_ioctl+0x10/0x10 [ 871.368501][T14335] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 871.368521][T14335] ? __fget_files+0x34/0x3d0 [ 871.368540][T14335] ? __pfx_mtrr_ioctl+0x10/0x10 [ 871.368554][T14335] proc_reg_unlocked_ioctl+0x229/0x320 [ 871.368571][T14335] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 871.368588][T14335] __x64_sys_ioctl+0x18e/0x210 [ 871.368606][T14335] do_syscall_64+0x123/0x790 [ 871.368618][T14335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.368631][T14335] RIP: 0033:0x7f458599f559 [ 871.368641][T14335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.368651][T14335] RSP: 002b:00007f45867e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 871.368662][T14335] RAX: ffffffffffffffda RBX: 00007f4585c26090 RCX: 00007f458599f559 [ 871.368668][T14335] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000007 [ 871.368675][T14335] RBP: 00007f4585a36b50 R08: 0000000000000000 R09: 0000000000000000 [ 871.368681][T14335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.368687][T14335] R13: 00007f4585c26128 R14: 00007f4585c26090 R15: 00007ffc77c36a88 [ 871.368701][T14335] [ 871.503865][ C1] net_ratelimit: 90 callbacks suppressed [ 874.343726][T14361] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1865'. [ 875.982799][ T30] audit: type=1400 audit(1793533580.228:530): avc: denied { write } for pid=14371 comm="syz.3.1868" name="auth.unix.ip" dev="proc" ino=4026533108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 876.174943][T14373] size and base must be multiples of 4 kiB [ 876.174958][T14373] CPU: 1 UID: 0 PID: 14373 Comm: syz.3.1868 Tainted: G L syzkaller #0 PREEMPT(full) [ 876.174974][T14373] Tainted: [L]=SOFTLOCKUP [ 876.174978][T14373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 876.174984][T14373] Call Trace: [ 876.174989][T14373] [ 876.174994][T14373] dump_stack_lvl+0x100/0x190 [ 876.175016][T14373] mtrr_del.cold+0x72/0x85 [ 876.175029][T14373] mtrr_ioctl+0xbc8/0xcf0 [ 876.175043][T14373] ? __pfx_mtrr_ioctl+0x10/0x10 [ 876.175056][T14373] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 876.175076][T14373] ? __fget_files+0x34/0x3d0 [ 876.175094][T14373] ? __pfx_mtrr_ioctl+0x10/0x10 [ 876.175109][T14373] proc_reg_unlocked_ioctl+0x229/0x320 [ 876.175126][T14373] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 876.175145][T14373] __x64_sys_ioctl+0x18e/0x210 [ 876.175162][T14373] do_syscall_64+0x123/0x790 [ 876.175175][T14373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.175186][T14373] RIP: 0033:0x7f8023b9f559 [ 876.175195][T14373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.175205][T14373] RSP: 002b:00007f8021dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 876.175217][T14373] RAX: ffffffffffffffda RBX: 00007f8023e26090 RCX: 00007f8023b9f559 [ 876.175223][T14373] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000007 [ 876.175233][T14373] RBP: 00007f8023c36b50 R08: 0000000000000000 R09: 0000000000000000 [ 876.175240][T14373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 876.175246][T14373] R13: 00007f8023e26128 R14: 00007f8023e26090 R15: 00007ffc3a4d1438 [ 876.175260][T14373] [ 876.178147][T14373] input: syz1 as /devices/virtual/input/input70 [ 876.597286][T14375] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1869'. [ 876.740545][T14381] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 876.759995][T14381] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 876.863850][ C0] net_ratelimit: 73 callbacks suppressed [ 877.244437][ T30] audit: type=1400 audit(1793533581.498:531): avc: denied { write } for pid=14380 comm="syz.6.1871" name="auth.unix.ip" dev="proc" ino=4026534146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 880.041416][T14408] kAFS: unparsable volume name [ 880.806379][T14414] kAFS: unparsable volume name [ 882.063835][ C1] net_ratelimit: 70 callbacks suppressed [ 883.514176][T14437] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1883'. [ 883.722555][T14445] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 883.740356][ T30] audit: type=1400 audit(1793533587.988:532): avc: denied { write } for pid=14443 comm="syz.0.1885" name="auth.unix.ip" dev="proc" ino=4026533584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 883.850334][T14445] can0: slcan on ttyS3. [ 884.730163][T14445] can0 (unregistered): slcan off ttyS3. [ 887.577868][T14471] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 887.579474][T14471] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 887.663837][ C1] net_ratelimit: 88 callbacks suppressed [ 889.581463][T14483] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 889.583011][T14483] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 889.783646][T14485] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1893'. [ 890.379197][T14491] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1897'. [ 890.445658][T14495] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 890.538872][T14500] can0: slcan on ttyS3. [ 890.569261][ T30] audit: type=1400 audit(1793533594.818:533): avc: denied { write } for pid=14494 comm="syz.6.1898" name="auth.unix.ip" dev="proc" ino=4026534146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 890.743546][T14502] size and base must be multiples of 4 kiB [ 890.743568][T14502] CPU: 0 UID: 0 PID: 14502 Comm: syz.6.1898 Tainted: G L syzkaller #0 PREEMPT(full) [ 890.743595][T14502] Tainted: [L]=SOFTLOCKUP [ 890.743603][T14502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 890.743615][T14502] Call Trace: [ 890.743622][T14502] [ 890.743631][T14502] dump_stack_lvl+0x100/0x190 [ 890.743668][T14502] mtrr_del.cold+0x72/0x85 [ 890.743689][T14502] mtrr_ioctl+0xbc8/0xcf0 [ 890.743715][T14502] ? __pfx_mtrr_ioctl+0x10/0x10 [ 890.743738][T14502] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 890.743775][T14502] ? __fget_files+0x34/0x3d0 [ 890.743813][T14502] ? __pfx_mtrr_ioctl+0x10/0x10 [ 890.743838][T14502] proc_reg_unlocked_ioctl+0x229/0x320 [ 890.743869][T14502] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 890.743903][T14502] __x64_sys_ioctl+0x18e/0x210 [ 890.743941][T14502] do_syscall_64+0x123/0x790 [ 890.743964][T14502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.743984][T14502] RIP: 0033:0x7fe2d359f559 [ 890.744000][T14502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.744019][T14502] RSP: 002b:00007fe2d44dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 890.744039][T14502] RAX: ffffffffffffffda RBX: 00007fe2d3826090 RCX: 00007fe2d359f559 [ 890.744052][T14502] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000007 [ 890.744064][T14502] RBP: 00007fe2d3636b50 R08: 0000000000000000 R09: 0000000000000000 [ 890.744076][T14502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 890.744087][T14502] R13: 00007fe2d3826128 R14: 00007fe2d3826090 R15: 00007ffd420aeac8 [ 890.744114][T14502] [ 890.748674][T14502] input: syz1 as /devices/virtual/input/input71 [ 891.210302][T14500] can0 (unregistered): slcan off ttyS3. [ 892.169912][T14518] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 892.175788][T14518] can0: slcan on ttyS3. [ 892.284535][T14518] can0 (unregistered): slcan off ttyS3. [ 892.332664][T14510] kAFS: unparsable volume name [ 892.407719][ T30] audit: type=1400 audit(1793533596.658:534): avc: denied { write } for pid=14519 comm="syz.3.1895" name="auth.unix.ip" dev="proc" ino=4026533108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 892.541866][T14520] size and base must be multiples of 4 kiB [ 892.541888][T14520] CPU: 1 UID: 0 PID: 14520 Comm: syz.3.1895 Tainted: G L syzkaller #0 PREEMPT(full) [ 892.541912][T14520] Tainted: [L]=SOFTLOCKUP [ 892.541920][T14520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 892.541930][T14520] Call Trace: [ 892.541938][T14520] [ 892.541947][T14520] dump_stack_lvl+0x100/0x190 [ 892.541982][T14520] mtrr_del.cold+0x72/0x85 [ 892.542001][T14520] mtrr_ioctl+0xbc8/0xcf0 [ 892.542024][T14520] ? __pfx_mtrr_ioctl+0x10/0x10 [ 892.542044][T14520] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 892.542077][T14520] ? __fget_files+0x34/0x3d0 [ 892.542111][T14520] ? __pfx_mtrr_ioctl+0x10/0x10 [ 892.542132][T14520] proc_reg_unlocked_ioctl+0x229/0x320 [ 892.542157][T14520] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 892.542183][T14520] __x64_sys_ioctl+0x18e/0x210 [ 892.542210][T14520] do_syscall_64+0x123/0x790 [ 892.542230][T14520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.542247][T14520] RIP: 0033:0x7f8023b9f559 [ 892.542263][T14520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.542278][T14520] RSP: 002b:00007f8021df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 892.542296][T14520] RAX: ffffffffffffffda RBX: 00007f8023e25fa0 RCX: 00007f8023b9f559 [ 892.542307][T14520] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000005 [ 892.542317][T14520] RBP: 00007f8023c36b50 R08: 0000000000000000 R09: 0000000000000000 [ 892.542328][T14520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.542338][T14520] R13: 00007f8023e26038 R14: 00007f8023e25fa0 R15: 00007ffc3a4d1438 [ 892.542361][T14520] [ 892.863855][ C0] net_ratelimit: 88 callbacks suppressed [ 895.397880][ T30] audit: type=1400 audit(1793533599.638:535): avc: denied { write } for pid=14538 comm="syz.5.1904" name="auth.unix.ip" dev="proc" ino=4026533968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 895.687507][T14555] kAFS: unparsable volume name [ 897.030221][T14563] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1911'. [ 897.061239][T14564] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 897.143616][T14564] can0: slcan on ttyS3. [ 897.334261][T14564] can0 (unregistered): slcan off ttyS3. [ 898.303834][ C1] net_ratelimit: 67 callbacks suppressed [ 902.662157][ T30] audit: type=1400 audit(1793533606.908:536): avc: denied { write } for pid=14572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 902.823920][ T30] audit: type=1400 audit(1793533607.008:537): avc: denied { write } for pid=14613 comm="syz.3.1919" name="auth.unix.ip" dev="proc" ino=4026533108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 903.142227][ T30] audit: type=1400 audit(1793533607.388:538): avc: denied { write } for pid=14622 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 903.663982][ C1] net_ratelimit: 94 callbacks suppressed [ 903.888024][T14624] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 903.888208][T14627] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 903.888387][T14628] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 904.136529][T14624] can0: slcan on ttyS3. [ 904.236548][T14631] can0 (unregistered): slcan off ttyS3. [ 904.572443][T14642] can0: slcan on ttyS3. [ 904.572604][T14642] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 905.333965][T13415] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 905.566810][T13415] usb 1-1: Using ep0 maxpacket: 8 [ 905.577481][T13415] usb 1-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 905.593108][T13415] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 905.593134][T13415] usb 1-1: config 179 has no interface number 0 [ 905.593162][T13415] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 905.593185][T13415] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 905.593200][T13415] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 905.593212][T13415] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 905.593254][T13415] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.694641][T14645] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 905.842433][ T30] audit: type=1400 audit(1793533610.088:539): avc: denied { write } for pid=14630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 906.081177][ T30] audit: type=1400 audit(1793533610.328:540): avc: denied { write } for pid=14659 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 906.317953][T14666] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 906.525546][T14666] can0 (unregistered): slcan off ttyS3. [ 907.767435][ T30] audit: type=1400 audit(1793533612.018:541): avc: denied { write } for pid=14667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 908.028387][ T30] audit: type=1400 audit(1793533612.278:542): avc: denied { write } for pid=14689 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 908.484482][T14698] can0: slcan on ttyS3. [ 908.485026][T14698] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 908.863829][ C1] net_ratelimit: 78 callbacks suppressed [ 909.064950][T14698] can0 (unregistered): slcan off ttyS3. [ 909.210885][ T5761] usb 1-1: USB disconnect, device number 33 [ 910.446764][ T30] audit: type=1400 audit(1793533614.648:543): avc: denied { write } for pid=14691 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 911.078748][ T30] audit: type=1400 audit(1793533615.318:544): avc: denied { write } for pid=14724 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 912.228205][ T30] audit: type=1400 audit(1793533616.478:545): avc: denied { write } for pid=14727 comm="syz.3.1932" name="auth.unix.ip" dev="proc" ino=4026533108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 912.414498][T14733] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 912.427135][T14733] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 913.278617][T14738] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 913.280242][T14738] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 913.704989][T14747] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1938'. [ 913.983880][ C0] net_ratelimit: 82 callbacks suppressed [ 914.769111][T14761] kAFS: unparsable volume name [ 915.884493][T14769] kAFS: unparsable volume name [ 916.566587][T14774] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1945'. [ 916.628722][T14776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1947'. [ 917.044861][T14789] size and base must be multiples of 4 kiB [ 917.044899][T14789] CPU: 1 UID: 0 PID: 14789 Comm: syz.3.1948 Tainted: G L syzkaller #0 PREEMPT(full) [ 917.044927][T14789] Tainted: [L]=SOFTLOCKUP [ 917.044935][T14789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 917.044946][T14789] Call Trace: [ 917.044953][T14789] [ 917.044962][T14789] dump_stack_lvl+0x100/0x190 [ 917.045000][T14789] mtrr_del.cold+0x72/0x85 [ 917.045020][T14789] mtrr_ioctl+0xbc8/0xcf0 [ 917.045045][T14789] ? __pfx_mtrr_ioctl+0x10/0x10 [ 917.045068][T14789] ? lockdep_hardirqs_on+0x7d/0x110 [ 917.045087][T14789] ? irqentry_exit+0x170/0xab0 [ 917.045116][T14789] ? proc_reg_unlocked_ioctl+0x142/0x320 [ 917.045148][T14789] ? __pfx_mtrr_ioctl+0x10/0x10 [ 917.045172][T14789] proc_reg_unlocked_ioctl+0x229/0x320 [ 917.045200][T14789] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 917.045232][T14789] __x64_sys_ioctl+0x18e/0x210 [ 917.045264][T14789] do_syscall_64+0x123/0x790 [ 917.045287][T14789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.045309][T14789] RIP: 0033:0x7f8023b9f559 [ 917.045326][T14789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.045344][T14789] RSP: 002b:00007f8021db4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 917.045365][T14789] RAX: ffffffffffffffda RBX: 00007f8023e26180 RCX: 00007f8023b9f559 [ 917.045377][T14789] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000006 [ 917.045389][T14789] RBP: 00007f8023c36b50 R08: 0000000000000000 R09: 0000000000000000 [ 917.045401][T14789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.045412][T14789] R13: 00007f8023e26218 R14: 00007f8023e26180 R15: 00007ffc3a4d1438 [ 917.045439][T14789] [ 917.056480][T14789] input: syz1 as /devices/virtual/input/input73 [ 917.467921][T14788] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1949'. [ 918.742223][T14800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1950'. [ 918.937644][T14804] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1952'. [ 919.408373][T14816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1954'. [ 919.503896][ C1] net_ratelimit: 99 callbacks suppressed [ 920.217518][T14825] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1957'. [ 922.553002][T14849] size and base must be multiples of 4 kiB [ 922.553050][T14849] CPU: 0 UID: 0 PID: 14849 Comm: syz.7.1962 Tainted: G L syzkaller #0 PREEMPT(full) [ 922.553079][T14849] Tainted: [L]=SOFTLOCKUP [ 922.553086][T14849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 922.553098][T14849] Call Trace: [ 922.553105][T14849] [ 922.553113][T14849] dump_stack_lvl+0x100/0x190 [ 922.553151][T14849] mtrr_del.cold+0x72/0x85 [ 922.553171][T14849] mtrr_ioctl+0xbc8/0xcf0 [ 922.553197][T14849] ? __pfx_mtrr_ioctl+0x10/0x10 [ 922.553219][T14849] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 922.553253][T14849] ? __sanitizer_cov_trace_pc+0x6b/0x70 [ 922.553285][T14849] ? __pfx_mtrr_ioctl+0x10/0x10 [ 922.553309][T14849] proc_reg_unlocked_ioctl+0x229/0x320 [ 922.553339][T14849] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 922.553371][T14849] __x64_sys_ioctl+0x18e/0x210 [ 922.553403][T14849] do_syscall_64+0x123/0x790 [ 922.553425][T14849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.553445][T14849] RIP: 0033:0x7f458599f559 [ 922.553462][T14849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.553486][T14849] RSP: 002b:00007f45867c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 922.553506][T14849] RAX: ffffffffffffffda RBX: 00007f4585c26180 RCX: 00007f458599f559 [ 922.553523][T14849] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000005 [ 922.553537][T14849] RBP: 00007f4585a36b50 R08: 0000000000000000 R09: 0000000000000000 [ 922.553550][T14849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 922.553563][T14849] R13: 00007f4585c26218 R14: 00007f4585c26180 R15: 00007ffc77c36a88 [ 922.553590][T14849] [ 922.565335][T14849] input: syz1 as /devices/virtual/input/input74 [ 923.571333][T14857] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1965'. [ 923.870109][T14861] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 924.029580][T14861] can0: slcan on ttyS3. [ 924.458507][T14861] can0 (unregistered): slcan off ttyS3. [ 924.863837][ C0] net_ratelimit: 83 callbacks suppressed [ 926.145639][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.145682][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.529003][ T30] audit: type=1400 audit(1793533630.778:546): avc: denied { write } for pid=14868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 926.568116][T14889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1969'. [ 927.003094][T14873] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 927.275627][T14901] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1973'. [ 927.407208][ T30] audit: type=1400 audit(1793533631.658:547): avc: denied { write } for pid=14899 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 929.222948][ T30] audit: type=1400 audit(1793533633.468:548): avc: denied { read } for pid=14916 comm="syz.6.1977" path="socket:[43537]" dev="sockfs" ino=43537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 929.340164][ T30] audit: type=1400 audit(1793533633.588:549): avc: denied { connect } for pid=14916 comm="syz.6.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 929.974529][T14919] net_ratelimit: 83 callbacks suppressed [ 930.417370][ T30] audit: type=1400 audit(1793533634.668:550): avc: denied { write } for pid=14914 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 930.695992][T14943] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1980'. [ 931.446829][ T30] audit: type=1400 audit(1793533635.698:551): avc: denied { write } for pid=14945 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 934.531172][T14975] size and base must be multiples of 4 kiB [ 934.531213][T14975] CPU: 1 UID: 0 PID: 14975 Comm: syz.6.1987 Tainted: G L syzkaller #0 PREEMPT(full) [ 934.531241][T14975] Tainted: [L]=SOFTLOCKUP [ 934.531249][T14975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 934.531261][T14975] Call Trace: [ 934.531268][T14975] [ 934.531276][T14975] dump_stack_lvl+0x100/0x190 [ 934.531319][T14975] mtrr_del.cold+0x72/0x85 [ 934.531339][T14975] mtrr_ioctl+0xbc8/0xcf0 [ 934.531366][T14975] ? __pfx_mtrr_ioctl+0x10/0x10 [ 934.531392][T14975] ? irqentry_exit+0x202/0xab0 [ 934.531412][T14975] ? lockdep_hardirqs_on+0x7d/0x110 [ 934.531431][T14975] ? irqentry_exit+0x202/0xab0 [ 934.531458][T14975] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 934.531492][T14975] ? __pfx_mtrr_ioctl+0x10/0x10 [ 934.531516][T14975] proc_reg_unlocked_ioctl+0x229/0x320 [ 934.531545][T14975] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 934.531578][T14975] __x64_sys_ioctl+0x18e/0x210 [ 934.531611][T14975] do_syscall_64+0x123/0x790 [ 934.531633][T14975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.531653][T14975] RIP: 0033:0x7fe2d359f559 [ 934.531669][T14975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.531689][T14975] RSP: 002b:00007fe2d44bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 934.531709][T14975] RAX: ffffffffffffffda RBX: 00007fe2d3826180 RCX: 00007fe2d359f559 [ 934.531722][T14975] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000005 [ 934.531734][T14975] RBP: 00007fe2d3636b50 R08: 0000000000000000 R09: 0000000000000000 [ 934.531745][T14975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 934.531756][T14975] R13: 00007fe2d3826218 R14: 00007fe2d3826180 R15: 00007ffd420aeac8 [ 934.531784][T14975] [ 934.547332][T14975] input: syz1 as /devices/virtual/input/input75 [ 934.858882][ T30] audit: type=1400 audit(1793533639.108:552): avc: denied { read } for pid=14959 comm="syz.5.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 935.263865][ C0] net_ratelimit: 86 callbacks suppressed [ 935.749617][T14993] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1991'. [ 935.817196][T14994] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 935.846227][T14994] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 935.864853][T14997] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1992'. [ 940.383826][ C1] net_ratelimit: 85 callbacks suppressed [ 940.674984][T15037] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 940.709763][T15037] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 942.499562][T15041] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2002'. [ 942.939056][T15047] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 943.067549][T15047] can0: slcan on ttyS3. [ 943.082135][T15048] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 943.297562][T15050] can0 (unregistered): slcan off ttyS3. [ 944.008244][ T30] audit: type=1400 audit(1793533648.258:553): avc: denied { write } for pid=15055 comm="syz.5.2004" name="auth.unix.ip" dev="proc" ino=4026533968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 944.427038][T15060] size and base must be multiples of 4 kiB [ 944.427054][T15060] CPU: 0 UID: 0 PID: 15060 Comm: syz.5.2004 Tainted: G L syzkaller #0 PREEMPT(full) [ 944.427072][T15060] Tainted: [L]=SOFTLOCKUP [ 944.427077][T15060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 944.427084][T15060] Call Trace: [ 944.427088][T15060] [ 944.427093][T15060] dump_stack_lvl+0x100/0x190 [ 944.427115][T15060] mtrr_del.cold+0x72/0x85 [ 944.427126][T15060] mtrr_ioctl+0xbc8/0xcf0 [ 944.427142][T15060] ? __pfx_mtrr_ioctl+0x10/0x10 [ 944.427155][T15060] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 944.427180][T15060] ? __fget_files+0x34/0x3d0 [ 944.427199][T15060] ? __pfx_mtrr_ioctl+0x10/0x10 [ 944.427215][T15060] proc_reg_unlocked_ioctl+0x229/0x320 [ 944.427233][T15060] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 944.427253][T15060] __x64_sys_ioctl+0x18e/0x210 [ 944.427271][T15060] do_syscall_64+0x123/0x790 [ 944.427283][T15060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.427294][T15060] RIP: 0033:0x7f047619f559 [ 944.427304][T15060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.427314][T15060] RSP: 002b:00007f0477067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 944.427326][T15060] RAX: ffffffffffffffda RBX: 00007f0476426180 RCX: 00007f047619f559 [ 944.427332][T15060] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000007 [ 944.427339][T15060] RBP: 00007f0476236b50 R08: 0000000000000000 R09: 0000000000000000 [ 944.427345][T15060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 944.427351][T15060] R13: 00007f0476426218 R14: 00007f0476426180 R15: 00007ffef8df1648 [ 944.427366][T15060] [ 944.637980][T15060] input: syz1 as /devices/virtual/input/input76 [ 945.583838][ C1] net_ratelimit: 91 callbacks suppressed [ 945.896108][T15067] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2007'. [ 947.004680][T15075] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 947.029154][T15075] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 947.137603][T15080] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 947.145676][T15080] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 950.367105][T15102] kAFS: unparsable volume name [ 950.632555][ T5760] net_ratelimit: 60 callbacks suppressed [ 950.739816][T15099] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 950.786062][T15099] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 952.284675][T15115] kAFS: unparsable volume name [ 954.016961][T15128] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 954.033118][T15128] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 956.223914][ C0] net_ratelimit: 88 callbacks suppressed [ 961.256720][T15164] net_ratelimit: 89 callbacks suppressed [ 961.320061][T15176] kAFS: unparsable volume name [ 963.076657][T15186] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 963.095034][T15186] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 963.777790][T15191] kAFS: unparsable volume name [ 964.263308][ T30] audit: type=1400 audit(1793533668.508:554): avc: denied { write } for pid=15189 comm="syz.5.2034" name="auth.unix.ip" dev="proc" ino=4026533968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 964.463594][T15194] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2035'. [ 965.787707][T15214] size and base must be multiples of 4 kiB [ 965.787749][T15214] CPU: 0 UID: 0 PID: 15214 Comm: syz.5.2034 Tainted: G L syzkaller #0 PREEMPT(full) [ 965.787778][T15214] Tainted: [L]=SOFTLOCKUP [ 965.787785][T15214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 965.787797][T15214] Call Trace: [ 965.787804][T15214] [ 965.787812][T15214] dump_stack_lvl+0x100/0x190 [ 965.787850][T15214] mtrr_del.cold+0x72/0x85 [ 965.787870][T15214] mtrr_ioctl+0xbc8/0xcf0 [ 965.787895][T15214] ? __pfx_mtrr_ioctl+0x10/0x10 [ 965.787917][T15214] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 965.787966][T15214] ? __pfx_mtrr_ioctl+0x10/0x10 [ 965.787990][T15214] proc_reg_unlocked_ioctl+0x229/0x320 [ 965.788019][T15214] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 965.788051][T15214] __x64_sys_ioctl+0x18e/0x210 [ 965.788087][T15214] do_syscall_64+0x123/0x790 [ 965.788110][T15214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.788130][T15214] RIP: 0033:0x7f047619f559 [ 965.788146][T15214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.788165][T15214] RSP: 002b:00007f0477067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 965.788184][T15214] RAX: ffffffffffffffda RBX: 00007f0476426180 RCX: 00007f047619f559 [ 965.788197][T15214] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000007 [ 965.788210][T15214] RBP: 00007f0476236b50 R08: 0000000000000000 R09: 0000000000000000 [ 965.788221][T15214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 965.788233][T15214] R13: 00007f0476426218 R14: 00007f0476426180 R15: 00007ffef8df1648 [ 965.788259][T15214] [ 966.017942][T15214] input: syz1 as /devices/virtual/input/input77 [ 966.303815][ C1] net_ratelimit: 85 callbacks suppressed [ 966.687618][ T30] audit: type=1400 audit(1793533670.938:555): avc: denied { write } for pid=15219 comm="syz.7.2041" name="auth.unix.ip" dev="proc" ino=4026533275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 967.240455][T15228] size and base must be multiples of 4 kiB [ 967.240492][T15228] CPU: 1 UID: 0 PID: 15228 Comm: syz.3.2040 Tainted: G L syzkaller #0 PREEMPT(full) [ 967.240521][T15228] Tainted: [L]=SOFTLOCKUP [ 967.240529][T15228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 967.240540][T15228] Call Trace: [ 967.240547][T15228] [ 967.240556][T15228] dump_stack_lvl+0x100/0x190 [ 967.240593][T15228] mtrr_del.cold+0x72/0x85 [ 967.240614][T15228] mtrr_ioctl+0xbc8/0xcf0 [ 967.240639][T15228] ? __pfx_mtrr_ioctl+0x10/0x10 [ 967.240665][T15228] ? irqentry_exit+0x202/0xab0 [ 967.240684][T15228] ? lockdep_hardirqs_on+0x7d/0x110 [ 967.240703][T15228] ? irqentry_exit+0x202/0xab0 [ 967.240731][T15228] ? __pfx_mtrr_ioctl+0x10/0x10 [ 967.240755][T15228] proc_reg_unlocked_ioctl+0x229/0x320 [ 967.240787][T15228] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 967.240818][T15228] __x64_sys_ioctl+0x18e/0x210 [ 967.240851][T15228] do_syscall_64+0x123/0x790 [ 967.240873][T15228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.240893][T15228] RIP: 0033:0x7f8023b9f559 [ 967.240909][T15228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.240928][T15228] RSP: 002b:00007f8021db4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 967.240949][T15228] RAX: ffffffffffffffda RBX: 00007f8023e26180 RCX: 00007f8023b9f559 [ 967.240962][T15228] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000005 [ 967.240974][T15228] RBP: 00007f8023c36b50 R08: 0000000000000000 R09: 0000000000000000 [ 967.240992][T15228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.241004][T15228] R13: 00007f8023e26218 R14: 00007f8023e26180 R15: 00007ffc3a4d1438 [ 967.241030][T15228] [ 967.252150][T15228] input: syz1 as /devices/virtual/input/input78 [ 968.302638][T15234] size and base must be multiples of 4 kiB [ 968.302679][T15234] CPU: 1 UID: 0 PID: 15234 Comm: syz.3.2042 Tainted: G L syzkaller #0 PREEMPT(full) [ 968.302707][T15234] Tainted: [L]=SOFTLOCKUP [ 968.302714][T15234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 968.302726][T15234] Call Trace: [ 968.302733][T15234] [ 968.302741][T15234] dump_stack_lvl+0x100/0x190 [ 968.302778][T15234] mtrr_del.cold+0x72/0x85 [ 968.302799][T15234] mtrr_ioctl+0xbc8/0xcf0 [ 968.302825][T15234] ? __pfx_mtrr_ioctl+0x10/0x10 [ 968.302848][T15234] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 968.302884][T15234] ? __fget_files+0x34/0x3d0 [ 968.302921][T15234] ? __pfx_mtrr_ioctl+0x10/0x10 [ 968.302945][T15234] proc_reg_unlocked_ioctl+0x229/0x320 [ 968.302977][T15234] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 968.303015][T15234] __x64_sys_ioctl+0x18e/0x210 [ 968.303047][T15234] do_syscall_64+0x123/0x790 [ 968.303069][T15234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.303088][T15234] RIP: 0033:0x7f8023b9f559 [ 968.303106][T15234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.303125][T15234] RSP: 002b:00007f8021db4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 968.303146][T15234] RAX: ffffffffffffffda RBX: 00007f8023e26180 RCX: 00007f8023b9f559 [ 968.303159][T15234] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000005 [ 968.303170][T15234] RBP: 00007f8023c36b50 R08: 0000000000000000 R09: 0000000000000000 [ 968.303182][T15234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 968.303193][T15234] R13: 00007f8023e26218 R14: 00007f8023e26180 R15: 00007ffc3a4d1438 [ 968.303220][T15234] [ 968.314292][T15234] input: syz1 as /devices/virtual/input/input79 [ 968.865494][T15237] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 969.066295][T15237] can0: slcan on ttyS3. [ 969.184306][T15238] can0 (unregistered): slcan off ttyS3. [ 970.878493][T15250] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2044'. [ 971.583865][ C1] net_ratelimit: 90 callbacks suppressed [ 973.329062][T15269] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2050'. [ 974.629820][T15282] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 974.647521][T15282] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 975.114482][T15284] kAFS: unparsable volume name [ 975.142316][ T30] audit: type=1400 audit(1793533679.388:556): avc: denied { write } for pid=15283 comm="syz.5.2046" name="auth.unix.ip" dev="proc" ino=4026533968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 976.768760][T15286] net_ratelimit: 84 callbacks suppressed [ 976.768781][T15286] ip_tables: iptables: counters copy to user failed while replacing table [ 977.371599][T15310] kAFS: unparsable volume name [ 980.592416][T15336] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2062'. [ 981.239698][T15342] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2065'. [ 981.823873][ C0] net_ratelimit: 51 callbacks suppressed [ 982.440576][T15357] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 982.478892][T15357] can0: slcan on ttyS3. [ 982.985071][T15357] can0 (unregistered): slcan off ttyS3. [ 983.444205][T15370] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 986.510241][T15391] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 986.527850][T15391] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 987.151735][T15395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2077'. [ 987.263831][ C1] net_ratelimit: 84 callbacks suppressed [ 987.536230][T15404] kAFS: unparsable volume name [ 987.664556][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.664615][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 990.181633][T15427] kAFS: unparsable volume name [ 991.174758][T15433] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 991.216178][T15433] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 992.392345][T15441] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 992.409191][T15441] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 992.473800][ C1] net_ratelimit: 101 callbacks suppressed [ 994.150687][T15449] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 994.188799][T15449] can0: slcan on ttyS3. [ 994.659683][ T30] audit: type=1400 audit(1793533698.908:557): avc: denied { write } for pid=15451 comm="syz.6.2092" name="auth.unix.ip" dev="proc" ino=4026534146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 994.805303][T15449] can0 (unregistered): slcan off ttyS3. [ 994.965469][ T30] audit: type=1400 audit(1793533699.218:558): avc: denied { write } for pid=15454 comm="syz.0.2091" name="auth.unix.ip" dev="proc" ino=4026533584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 996.606272][T15474] size and base must be multiples of 4 kiB [ 996.606295][T15474] CPU: 1 UID: 0 PID: 15474 Comm: syz.6.2092 Tainted: G L syzkaller #0 PREEMPT(full) [ 996.606324][T15474] Tainted: [L]=SOFTLOCKUP [ 996.606331][T15474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 996.606343][T15474] Call Trace: [ 996.606351][T15474] [ 996.606359][T15474] dump_stack_lvl+0x100/0x190 [ 996.606395][T15474] mtrr_del.cold+0x72/0x85 [ 996.606415][T15474] mtrr_ioctl+0xbc8/0xcf0 [ 996.606440][T15474] ? __pfx_mtrr_ioctl+0x10/0x10 [ 996.606461][T15474] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 996.606495][T15474] ? __fget_files+0x34/0x3d0 [ 996.606530][T15474] ? __pfx_mtrr_ioctl+0x10/0x10 [ 996.606554][T15474] proc_reg_unlocked_ioctl+0x229/0x320 [ 996.606583][T15474] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 996.606614][T15474] __x64_sys_ioctl+0x18e/0x210 [ 996.606646][T15474] do_syscall_64+0x123/0x790 [ 996.606668][T15474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.606688][T15474] RIP: 0033:0x7fe2d359f559 [ 996.606704][T15474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.606722][T15474] RSP: 002b:00007fe2d44bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 996.606742][T15474] RAX: ffffffffffffffda RBX: 00007fe2d3826180 RCX: 00007fe2d359f559 [ 996.606755][T15474] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000007 [ 996.606787][T15474] RBP: 00007fe2d3636b50 R08: 0000000000000000 R09: 0000000000000000 [ 996.606800][T15474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.606812][T15474] R13: 00007fe2d3826218 R14: 00007fe2d3826180 R15: 00007ffd420aeac8 [ 996.606841][T15474] [ 997.743807][ C0] net_ratelimit: 78 callbacks suppressed [ 998.006903][T15474] input: syz1 as /devices/virtual/input/input80 [ 998.596284][T15485] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 999.490012][ T30] audit: type=1400 audit(1793533703.738:559): avc: denied { write } for pid=15488 comm="syz.5.2099" name="auth.unix.ip" dev="proc" ino=4026533968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 1001.806610][ T30] audit: type=1400 audit(1793533706.058:560): avc: denied { write } for pid=15505 comm="syz.0.2102" name="auth.unix.ip" dev="proc" ino=4026533584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 1003.275867][T15517] size and base must be multiples of 4 kiB [ 1003.275884][T15517] CPU: 1 UID: 0 PID: 15517 Comm: syz.5.2099 Tainted: G L syzkaller #0 PREEMPT(full) [ 1003.275912][T15517] Tainted: [L]=SOFTLOCKUP [ 1003.275919][T15517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1003.275930][T15517] Call Trace: [ 1003.275937][T15517] [ 1003.275945][T15517] dump_stack_lvl+0x100/0x190 [ 1003.275977][T15517] mtrr_del.cold+0x72/0x85 [ 1003.275996][T15517] mtrr_ioctl+0xbc8/0xcf0 [ 1003.276021][T15517] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1003.276040][T15517] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1003.276070][T15517] ? __fget_files+0x34/0x3d0 [ 1003.276101][T15517] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1003.276124][T15517] proc_reg_unlocked_ioctl+0x229/0x320 [ 1003.276152][T15517] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1003.276187][T15517] __x64_sys_ioctl+0x18e/0x210 [ 1003.276216][T15517] do_syscall_64+0x123/0x790 [ 1003.276238][T15517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.276257][T15517] RIP: 0033:0x7f047619f559 [ 1003.276273][T15517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1003.276291][T15517] RSP: 002b:00007f0477067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1003.276310][T15517] RAX: ffffffffffffffda RBX: 00007f0476426180 RCX: 00007f047619f559 [ 1003.276321][T15517] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000007 [ 1003.276333][T15517] RBP: 00007f0476236b50 R08: 0000000000000000 R09: 0000000000000000 [ 1003.276343][T15517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1003.276354][T15517] R13: 00007f0476426218 R14: 00007f0476426180 R15: 00007ffef8df1648 [ 1003.276379][T15517] [ 1003.423835][ C1] net_ratelimit: 91 callbacks suppressed [ 1005.237912][T15536] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1005.255705][T15536] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1005.987416][T15540] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1006.037710][T15540] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1006.554345][T15548] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1006.556112][T15548] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1007.922637][T15552] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2113'. [ 1008.308412][T15563] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1008.473807][ C1] net_ratelimit: 80 callbacks suppressed [ 1009.255114][T15563] can0: slcan on ttyS3. [ 1009.414027][T15567] can0 (unregistered): slcan off ttyS3. [ 1009.659873][T15574] kAFS: unparsable volume name [ 1011.571470][T15591] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1011.604134][T15591] can0: slcan on ttyS3. [ 1012.134734][T15591] can0 (unregistered): slcan off ttyS3. [ 1013.212849][T15607] kAFS: unparsable volume name [ 1013.460854][T15614] size and base must be multiples of 4 kiB [ 1013.460902][T15614] CPU: 0 UID: 0 PID: 15614 Comm: syz.6.2127 Tainted: G L syzkaller #0 PREEMPT(full) [ 1013.460930][T15614] Tainted: [L]=SOFTLOCKUP [ 1013.460938][T15614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1013.460949][T15614] Call Trace: [ 1013.460957][T15614] [ 1013.460965][T15614] dump_stack_lvl+0x100/0x190 [ 1013.461000][T15614] mtrr_del.cold+0x72/0x85 [ 1013.461020][T15614] mtrr_ioctl+0xbc8/0xcf0 [ 1013.461044][T15614] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1013.461067][T15614] ? lockdep_hardirqs_on+0x7d/0x110 [ 1013.461086][T15614] ? irqentry_exit+0x170/0xab0 [ 1013.461111][T15614] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1013.461141][T15614] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1013.461164][T15614] proc_reg_unlocked_ioctl+0x229/0x320 [ 1013.461196][T15614] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1013.461235][T15614] __x64_sys_ioctl+0x18e/0x210 [ 1013.461267][T15614] do_syscall_64+0x123/0x790 [ 1013.461289][T15614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.461309][T15614] RIP: 0033:0x7fe2d359f559 [ 1013.461325][T15614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1013.461344][T15614] RSP: 002b:00007fe2d44bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1013.461366][T15614] RAX: ffffffffffffffda RBX: 00007fe2d3826180 RCX: 00007fe2d359f559 [ 1013.461379][T15614] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000006 [ 1013.461391][T15614] RBP: 00007fe2d3636b50 R08: 0000000000000000 R09: 0000000000000000 [ 1013.461403][T15614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1013.461415][T15614] R13: 00007fe2d3826218 R14: 00007fe2d3826180 R15: 00007ffd420aeac8 [ 1013.461442][T15614] [ 1013.472851][T15614] input: syz1 as /devices/virtual/input/input82 [ 1013.673824][ C0] net_ratelimit: 86 callbacks suppressed [ 1014.402362][T15619] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1014.440331][T15619] can0: slcan on ttyS3. [ 1014.944682][T15619] can0 (unregistered): slcan off ttyS3. [ 1015.867792][T15630] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1015.873586][T15630] can0: slcan on ttyS3. [ 1016.385850][T15630] can0 (unregistered): slcan off ttyS3. [ 1016.684758][T15639] kAFS: unparsable volume name [ 1017.225950][T15645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2134'. [ 1018.278227][T15654] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1018.854523][ T5749] net_ratelimit: 95 callbacks suppressed [ 1018.915782][T15654] can0: slcan on ttyS3. [ 1019.207865][T15654] can0 (unregistered): slcan off ttyS3. [ 1019.411081][T15661] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2138'. [ 1019.935940][T15674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2140'. [ 1021.028917][T15690] kAFS: unparsable volume name [ 1021.045359][T15687] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2146'. [ 1021.127712][T15691] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1021.163485][T15691] can0: slcan on ttyS3. [ 1021.674348][T15691] can0 (unregistered): slcan off ttyS3. [ 1022.269087][T15705] kAFS: unparsable volume name [ 1024.063812][ C1] net_ratelimit: 116 callbacks suppressed [ 1024.153877][T15719] kAFS: unparsable volume name [ 1026.013670][T15735] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1026.017427][T15735] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1026.685207][T15739] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2157'. [ 1026.769985][T15744] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1026.771595][T15744] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1027.037463][T15747] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2160'. [ 1027.230769][T15752] kAFS: unparsable volume name [ 1028.201047][T15761] input: syz1 as /devices/virtual/input/input83 [ 1029.104023][ C1] net_ratelimit: 78 callbacks suppressed [ 1029.443405][T15771] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2164'. [ 1030.214285][T15777] kAFS: unparsable volume name [ 1030.608469][T15781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2168'. [ 1030.614403][T15781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2168'. [ 1032.148923][T15799] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2171'. [ 1032.377400][T15807] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1033.106450][T15812] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2174'. [ 1033.140084][T15812] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2174'. [ 1033.414048][T15819] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1033.415776][T15819] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1033.940535][T15821] kAFS: unparsable volume name [ 1034.233890][ C1] net_ratelimit: 80 callbacks suppressed [ 1034.521794][T15828] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2179'. [ 1034.657431][T15832] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1036.077512][T15846] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2183'. [ 1037.830519][T15865] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1039.193434][T15870] kAFS: unparsable volume name [ 1039.353787][ C1] net_ratelimit: 83 callbacks suppressed [ 1040.615515][T15881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2191'. [ 1040.680330][T15882] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1040.718082][T15882] can0: slcan on ttyS3. [ 1041.274192][T15882] can0 (unregistered): slcan off ttyS3. [ 1041.521829][ T30] audit: type=1400 audit(1793533745.768:561): avc: denied { write } for pid=15888 comm="syz.6.2193" name="auth.unix.ip" dev="proc" ino=4026534146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 1041.741490][T15892] size and base must be multiples of 4 kiB [ 1041.741542][T15892] CPU: 1 UID: 0 PID: 15892 Comm: syz.6.2193 Tainted: G L syzkaller #0 PREEMPT(full) [ 1041.741571][T15892] Tainted: [L]=SOFTLOCKUP [ 1041.741579][T15892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1041.741590][T15892] Call Trace: [ 1041.741597][T15892] [ 1041.741605][T15892] dump_stack_lvl+0x100/0x190 [ 1041.741642][T15892] mtrr_del.cold+0x72/0x85 [ 1041.741662][T15892] mtrr_ioctl+0xbc8/0xcf0 [ 1041.741688][T15892] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1041.741710][T15892] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1041.741745][T15892] ? __fget_files+0x34/0x3d0 [ 1041.741780][T15892] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1041.741806][T15892] proc_reg_unlocked_ioctl+0x229/0x320 [ 1041.741836][T15892] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1041.741867][T15892] __x64_sys_ioctl+0x18e/0x210 [ 1041.741901][T15892] do_syscall_64+0x123/0x790 [ 1041.741924][T15892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.741943][T15892] RIP: 0033:0x7fe2d359f559 [ 1041.741959][T15892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.741978][T15892] RSP: 002b:00007fe2d44bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1041.741998][T15892] RAX: ffffffffffffffda RBX: 00007fe2d3826180 RCX: 00007fe2d359f559 [ 1041.742010][T15892] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000007 [ 1041.742022][T15892] RBP: 00007fe2d3636b50 R08: 0000000000000000 R09: 0000000000000000 [ 1041.742040][T15892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1041.742051][T15892] R13: 00007fe2d3826218 R14: 00007fe2d3826180 R15: 00007ffd420aeac8 [ 1041.742078][T15892] [ 1041.752118][T15892] input: syz1 as /devices/virtual/input/input84 [ 1042.468472][T15894] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2192'. [ 1042.472134][T15894] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2192'. [ 1043.018582][T15907] kAFS: unparsable volume name [ 1044.676597][ T7880] net_ratelimit: 65 callbacks suppressed [ 1044.849644][ T30] audit: type=1400 audit(1793533749.098:562): avc: denied { write } for pid=15909 comm="syz.7.2196" name="auth.unix.ip" dev="proc" ino=4026533275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 1045.166263][ T30] audit: type=1400 audit(1793533749.418:563): avc: denied { write } for pid=15912 comm="syz.3.2198" name="auth.unix.ip" dev="proc" ino=4026533108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 1046.097154][T15918] size and base must be multiples of 4 kiB [ 1046.097169][T15918] CPU: 1 UID: 0 PID: 15918 Comm: syz.3.2198 Tainted: G L syzkaller #0 PREEMPT(full) [ 1046.097185][T15918] Tainted: [L]=SOFTLOCKUP [ 1046.097189][T15918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1046.097196][T15918] Call Trace: [ 1046.097201][T15918] [ 1046.097210][T15918] dump_stack_lvl+0x100/0x190 [ 1046.097234][T15918] mtrr_del.cold+0x72/0x85 [ 1046.097247][T15918] mtrr_ioctl+0xbc8/0xcf0 [ 1046.097264][T15918] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1046.097277][T15918] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1046.097296][T15918] ? __fget_files+0x34/0x3d0 [ 1046.097318][T15918] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1046.097331][T15918] proc_reg_unlocked_ioctl+0x229/0x320 [ 1046.097348][T15918] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1046.097371][T15918] __x64_sys_ioctl+0x18e/0x210 [ 1046.097389][T15918] do_syscall_64+0x123/0x790 [ 1046.097403][T15918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.097418][T15918] RIP: 0033:0x7f8023b9f559 [ 1046.097429][T15918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.097440][T15918] RSP: 002b:00007f8021db4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1046.097455][T15918] RAX: ffffffffffffffda RBX: 00007f8023e26180 RCX: 00007f8023b9f559 [ 1046.097462][T15918] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000007 [ 1046.097469][T15918] RBP: 00007f8023c36b50 R08: 0000000000000000 R09: 0000000000000000 [ 1046.097475][T15918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.097481][T15918] R13: 00007f8023e26218 R14: 00007f8023e26180 R15: 00007ffc3a4d1438 [ 1046.097496][T15918] [ 1046.307377][T15918] input: syz1 as /devices/virtual/input/input85 [ 1046.657068][T15927] kAFS: unparsable volume name [ 1047.375399][T15924] input: syz1 as /devices/virtual/input/input86 [ 1049.025922][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1049.025951][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1049.853604][ T8067] net_ratelimit: 63 callbacks suppressed [ 1050.159250][ T30] audit: type=1400 audit(1793533754.408:564): avc: denied { write } for pid=15946 comm="syz.5.2205" name="auth.unix.ip" dev="proc" ino=4026533968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 1050.491169][T15952] size and base must be multiples of 4 kiB [ 1050.491188][T15952] CPU: 1 UID: 0 PID: 15952 Comm: syz.5.2205 Tainted: G L syzkaller #0 PREEMPT(full) [ 1050.491215][T15952] Tainted: [L]=SOFTLOCKUP [ 1050.491223][T15952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1050.491234][T15952] Call Trace: [ 1050.491242][T15952] [ 1050.491251][T15952] dump_stack_lvl+0x100/0x190 [ 1050.491288][T15952] mtrr_del.cold+0x72/0x85 [ 1050.491310][T15952] mtrr_ioctl+0xbc8/0xcf0 [ 1050.491338][T15952] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1050.491360][T15952] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1050.491398][T15952] ? __fget_files+0x34/0x3d0 [ 1050.491433][T15952] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1050.491456][T15952] proc_reg_unlocked_ioctl+0x229/0x320 [ 1050.491493][T15952] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1050.491524][T15952] __x64_sys_ioctl+0x18e/0x210 [ 1050.491556][T15952] do_syscall_64+0x123/0x790 [ 1050.491581][T15952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.491602][T15952] RIP: 0033:0x7f047619f559 [ 1050.491620][T15952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.491639][T15952] RSP: 002b:00007f0477046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1050.491659][T15952] RAX: ffffffffffffffda RBX: 00007f0476426270 RCX: 00007f047619f559 [ 1050.491671][T15952] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000007 [ 1050.491683][T15952] RBP: 00007f0476236b50 R08: 0000000000000000 R09: 0000000000000000 [ 1050.491694][T15952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1050.491705][T15952] R13: 00007f0476426308 R14: 00007f0476426270 R15: 00007ffef8df1648 [ 1050.491731][T15952] [ 1050.496410][T15952] input: syz1 as /devices/virtual/input/input87 [ 1051.809534][T15957] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1051.826233][T15957] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1052.536589][T15961] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1052.576055][T15961] can0: slcan on ttyS3. [ 1053.084291][T15961] can0 (unregistered): slcan off ttyS3. [ 1053.299515][ T30] audit: type=1400 audit(1793533757.548:565): avc: denied { write } for pid=15963 comm="syz.0.2209" name="auth.unix.ip" dev="proc" ino=4026533584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 1053.548365][T15966] size and base must be multiples of 4 kiB [ 1053.548416][T15966] CPU: 0 UID: 0 PID: 15966 Comm: syz.0.2209 Tainted: G L syzkaller #0 PREEMPT(full) [ 1053.548446][T15966] Tainted: [L]=SOFTLOCKUP [ 1053.548454][T15966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1053.548466][T15966] Call Trace: [ 1053.548473][T15966] [ 1053.548482][T15966] dump_stack_lvl+0x100/0x190 [ 1053.548518][T15966] mtrr_del.cold+0x72/0x85 [ 1053.548538][T15966] mtrr_ioctl+0xbc8/0xcf0 [ 1053.548563][T15966] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1053.548586][T15966] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1053.548620][T15966] ? __fget_files+0x34/0x3d0 [ 1053.548656][T15966] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1053.548680][T15966] proc_reg_unlocked_ioctl+0x229/0x320 [ 1053.548710][T15966] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1053.548742][T15966] __x64_sys_ioctl+0x18e/0x210 [ 1053.548774][T15966] do_syscall_64+0x123/0x790 [ 1053.548796][T15966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.548816][T15966] RIP: 0033:0x7fb90479f559 [ 1053.548832][T15966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.548857][T15966] RSP: 002b:00007fb905671028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1053.548876][T15966] RAX: ffffffffffffffda RBX: 00007fb904a26180 RCX: 00007fb90479f559 [ 1053.548889][T15966] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000007 [ 1053.548900][T15966] RBP: 00007fb904836b50 R08: 0000000000000000 R09: 0000000000000000 [ 1053.548912][T15966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1053.548923][T15966] R13: 00007fb904a26218 R14: 00007fb904a26180 R15: 00007ffd88367118 [ 1053.548950][T15966] [ 1053.563497][T15966] input: syz1 as /devices/virtual/input/input88 [ 1054.942292][ T7786] net_ratelimit: 71 callbacks suppressed [ 1055.455074][T15980] size and base must be multiples of 4 kiB [ 1055.455108][T15980] CPU: 0 UID: 0 PID: 15980 Comm: syz.5.2212 Tainted: G L syzkaller #0 PREEMPT(full) [ 1055.455136][T15980] Tainted: [L]=SOFTLOCKUP [ 1055.455143][T15980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1055.455154][T15980] Call Trace: [ 1055.455162][T15980] [ 1055.455170][T15980] dump_stack_lvl+0x100/0x190 [ 1055.455207][T15980] mtrr_del.cold+0x72/0x85 [ 1055.455227][T15980] mtrr_ioctl+0xbc8/0xcf0 [ 1055.455253][T15980] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1055.455275][T15980] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1055.455326][T15980] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1055.455349][T15980] proc_reg_unlocked_ioctl+0x229/0x320 [ 1055.455378][T15980] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1055.455409][T15980] __x64_sys_ioctl+0x18e/0x210 [ 1055.455441][T15980] do_syscall_64+0x123/0x790 [ 1055.455463][T15980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.455483][T15980] RIP: 0033:0x7f047619f559 [ 1055.455499][T15980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.455517][T15980] RSP: 002b:00007f0477067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1055.455537][T15980] RAX: ffffffffffffffda RBX: 00007f0476426180 RCX: 00007f047619f559 [ 1055.455550][T15980] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000005 [ 1055.455562][T15980] RBP: 00007f0476236b50 R08: 0000000000000000 R09: 0000000000000000 [ 1055.455574][T15980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.455585][T15980] R13: 00007f0476426218 R14: 00007f0476426180 R15: 00007ffef8df1648 [ 1055.455611][T15980] [ 1056.064154][T15981] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2214'. [ 1056.553953][T15986] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1056.840601][T15988] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1056.869512][T15988] can0: slcan on ttyS3. [ 1057.484120][T15988] can0 (unregistered): slcan off ttyS3. [ 1057.710478][ T30] audit: type=1400 audit(1793533761.958:566): avc: denied { write } for pid=15991 comm="syz.5.2216" name="auth.unix.ip" dev="proc" ino=4026533968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 1057.836231][T15997] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1057.854000][T15997] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1058.459302][T15994] size and base must be multiples of 4 kiB [ 1058.459325][T15994] CPU: 0 UID: 0 PID: 15994 Comm: syz.5.2216 Tainted: G L syzkaller #0 PREEMPT(full) [ 1058.459351][T15994] Tainted: [L]=SOFTLOCKUP [ 1058.459358][T15994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1058.459369][T15994] Call Trace: [ 1058.459376][T15994] [ 1058.459385][T15994] dump_stack_lvl+0x100/0x190 [ 1058.459421][T15994] mtrr_del.cold+0x72/0x85 [ 1058.459442][T15994] mtrr_ioctl+0xbc8/0xcf0 [ 1058.459467][T15994] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1058.459489][T15994] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1058.459525][T15994] ? __fget_files+0x34/0x3d0 [ 1058.459563][T15994] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1058.459586][T15994] proc_reg_unlocked_ioctl+0x229/0x320 [ 1058.459614][T15994] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1058.459648][T15994] __x64_sys_ioctl+0x18e/0x210 [ 1058.459680][T15994] do_syscall_64+0x123/0x790 [ 1058.459702][T15994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.459721][T15994] RIP: 0033:0x7f047619f559 [ 1058.459738][T15994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.459755][T15994] RSP: 002b:00007f04770a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1058.459776][T15994] RAX: ffffffffffffffda RBX: 00007f0476425fa0 RCX: 00007f047619f559 [ 1058.459789][T15994] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000005 [ 1058.459800][T15994] RBP: 00007f0476236b50 R08: 0000000000000000 R09: 0000000000000000 [ 1058.459811][T15994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1058.459821][T15994] R13: 00007f0476426038 R14: 00007f0476425fa0 R15: 00007ffef8df1648 [ 1058.459849][T15994] [ 1058.464153][T15994] input: syz1 as /devices/virtual/input/input90 [ 1058.901301][T16004] size and base must be multiples of 4 kiB [ 1058.901348][T16004] CPU: 1 UID: 0 PID: 16004 Comm: syz.7.2217 Tainted: G L syzkaller #0 PREEMPT(full) [ 1058.901375][T16004] Tainted: [L]=SOFTLOCKUP [ 1058.901383][T16004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1058.901395][T16004] Call Trace: [ 1058.901402][T16004] [ 1058.901410][T16004] dump_stack_lvl+0x100/0x190 [ 1058.901446][T16004] mtrr_del.cold+0x72/0x85 [ 1058.901466][T16004] mtrr_ioctl+0xbc8/0xcf0 [ 1058.901491][T16004] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1058.901513][T16004] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1058.901547][T16004] ? __fget_files+0x34/0x3d0 [ 1058.901582][T16004] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1058.901605][T16004] proc_reg_unlocked_ioctl+0x229/0x320 [ 1058.901634][T16004] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1058.901667][T16004] __x64_sys_ioctl+0x18e/0x210 [ 1058.901700][T16004] do_syscall_64+0x123/0x790 [ 1058.901722][T16004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.901742][T16004] RIP: 0033:0x7f458599f559 [ 1058.901758][T16004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.901778][T16004] RSP: 002b:00007f45867c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1058.901798][T16004] RAX: ffffffffffffffda RBX: 00007f4585c26180 RCX: 00007f458599f559 [ 1058.901812][T16004] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000005 [ 1058.901823][T16004] RBP: 00007f4585a36b50 R08: 0000000000000000 R09: 0000000000000000 [ 1058.901834][T16004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1058.901845][T16004] R13: 00007f4585c26218 R14: 00007f4585c26180 R15: 00007ffc77c36a88 [ 1058.901872][T16004] [ 1059.693672][T16011] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2223'. [ 1059.752234][ T30] audit: type=1400 audit(1793533763.988:567): avc: denied { write } for pid=16009 comm="syz.3.2220" name="auth.unix.ip" dev="proc" ino=4026533108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 1059.972260][T16019] input: syz1 as /devices/virtual/input/input92 [ 1060.462606][ T7789] net_ratelimit: 70 callbacks suppressed [ 1062.250637][T16035] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2227'. [ 1062.272793][ T30] audit: type=1400 audit(1793533766.388:568): avc: denied { write } for pid=16032 comm="syz.5.2226" name="auth.unix.ip" dev="proc" ino=4026533968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 1062.275485][T16035] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2227'. [ 1062.351432][T16037] size and base must be multiples of 4 kiB [ 1062.351468][T16037] CPU: 0 UID: 0 PID: 16037 Comm: syz.5.2226 Tainted: G L syzkaller #0 PREEMPT(full) [ 1062.351496][T16037] Tainted: [L]=SOFTLOCKUP [ 1062.351503][T16037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1062.351514][T16037] Call Trace: [ 1062.351521][T16037] [ 1062.351529][T16037] dump_stack_lvl+0x100/0x190 [ 1062.351566][T16037] mtrr_del.cold+0x72/0x85 [ 1062.351587][T16037] mtrr_ioctl+0xbc8/0xcf0 [ 1062.351612][T16037] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1062.351633][T16037] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1062.351685][T16037] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1062.351708][T16037] proc_reg_unlocked_ioctl+0x229/0x320 [ 1062.351737][T16037] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1062.351770][T16037] __x64_sys_ioctl+0x18e/0x210 [ 1062.351804][T16037] do_syscall_64+0x123/0x790 [ 1062.351827][T16037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.351846][T16037] RIP: 0033:0x7f047619f559 [ 1062.351863][T16037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1062.351881][T16037] RSP: 002b:00007f0477067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1062.351900][T16037] RAX: ffffffffffffffda RBX: 00007f0476426180 RCX: 00007f047619f559 [ 1062.351913][T16037] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000007 [ 1062.351924][T16037] RBP: 00007f0476236b50 R08: 0000000000000000 R09: 0000000000000000 [ 1062.351936][T16037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1062.351947][T16037] R13: 00007f0476426218 R14: 00007f0476426180 R15: 00007ffef8df1648 [ 1062.351976][T16037] [ 1062.362922][T16037] input: syz1 as /devices/virtual/input/input93 [ 1063.571205][T16046] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1063.589643][T16046] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1065.663808][ C0] net_ratelimit: 89 callbacks suppressed [ 1067.649588][T16078] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2237'. [ 1067.730568][T16080] kAFS: unparsable volume name [ 1068.455706][T16086] kAFS: unparsable volume name [ 1068.903988][T16089] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2240'. [ 1068.908779][T16089] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2240'. [ 1069.068019][T16092] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2242'. [ 1069.129322][ T30] audit: type=1400 audit(1793533773.378:569): avc: denied { write } for pid=16093 comm="syz.5.2239" name="auth.unix.ip" dev="proc" ino=4026533968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 1069.251895][T16099] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2241'. [ 1069.385299][T16102] input: syz1 as /devices/virtual/input/input94 [ 1070.277212][T16109] kAFS: unparsable volume name [ 1070.863916][ C1] net_ratelimit: 82 callbacks suppressed [ 1072.073777][T16120] kAFS: unparsable volume name [ 1072.470554][T16126] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2248'. [ 1075.800866][T16160] kAFS: unparsable volume name [ 1075.917625][ T7786] net_ratelimit: 75 callbacks suppressed [ 1076.429118][T16167] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1076.446824][T16167] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1078.144635][T16180] kAFS: unparsable volume name [ 1078.953679][T16184] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1078.972167][T16184] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1080.862729][T16198] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1081.423808][ C1] net_ratelimit: 85 callbacks suppressed [ 1082.388889][ T30] audit: type=1400 audit(1793533786.638:570): avc: denied { write } for pid=16204 comm="syz.7.2267" name="auth.unix.ip" dev="proc" ino=4026533275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 1082.571413][T16213] input: syz1 as /devices/virtual/input/input95 [ 1082.795526][T16218] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1082.816588][T16218] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1083.730111][T16226] kAFS: unparsable volume name [ 1084.926903][T16235] kAFS: unparsable volume name [ 1086.623864][ C1] net_ratelimit: 81 callbacks suppressed [ 1087.683907][T16263] kAFS: unparsable volume name [ 1088.382595][T16270] kAFS: unparsable volume name [ 1090.082313][ T30] audit: type=1400 audit(1793533794.328:571): avc: denied { write } for pid=16278 comm="syz.0.2284" name="auth.unix.ip" dev="proc" ino=4026533584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 1090.847734][T16285] input: syz1 as /devices/virtual/input/input97 [ 1091.863326][ T5757] net_ratelimit: 69 callbacks suppressed [ 1092.836354][ T30] audit: type=1400 audit(1793533797.088:572): avc: denied { write } for pid=16309 comm="syz.3.2290" name="auth.unix.ip" dev="proc" ino=4026533108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 1093.096667][T16313] MTRR 1 not used [ 1093.105686][T16313] input: syz1 as /devices/virtual/input/input98 [ 1094.011272][T16323] kAFS: unparsable volume name [ 1094.543081][T16325] kAFS: No cell specified [ 1095.687348][T16339] kAFS: No cell specified [ 1096.423204][T16344] kAFS: unparsable volume name [ 1097.183771][ C1] net_ratelimit: 90 callbacks suppressed [ 1097.996350][T16352] kAFS: unparsable volume name [ 1098.817165][T16355] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1098.834875][T16355] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1099.508368][ T30] audit: type=1400 audit(1793533803.758:573): avc: denied { write } for pid=16363 comm="syz.5.2301" name="auth.unix.ip" dev="proc" ino=4026533968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 1099.744332][T16366] size and base must be multiples of 4 kiB [ 1099.744382][T16366] CPU: 1 UID: 0 PID: 16366 Comm: syz.5.2301 Tainted: G L syzkaller #0 PREEMPT(full) [ 1099.744410][T16366] Tainted: [L]=SOFTLOCKUP [ 1099.744417][T16366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1099.744429][T16366] Call Trace: [ 1099.744436][T16366] [ 1099.744443][T16366] dump_stack_lvl+0x100/0x190 [ 1099.744479][T16366] mtrr_del.cold+0x72/0x85 [ 1099.744499][T16366] mtrr_ioctl+0xbc8/0xcf0 [ 1099.744528][T16366] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1099.744549][T16366] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1099.744584][T16366] ? __fget_files+0x34/0x3d0 [ 1099.744620][T16366] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1099.744643][T16366] proc_reg_unlocked_ioctl+0x229/0x320 [ 1099.744672][T16366] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1099.744703][T16366] __x64_sys_ioctl+0x18e/0x210 [ 1099.744735][T16366] do_syscall_64+0x123/0x790 [ 1099.744756][T16366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.744776][T16366] RIP: 0033:0x7f047619f559 [ 1099.744792][T16366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.744811][T16366] RSP: 002b:00007f0477067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1099.744829][T16366] RAX: ffffffffffffffda RBX: 00007f0476426180 RCX: 00007f047619f559 [ 1099.744842][T16366] RDX: 0000200000000300 RSI: 00000000400c4d04 RDI: 0000000000000007 [ 1099.744854][T16366] RBP: 00007f0476236b50 R08: 0000000000000000 R09: 0000000000000000 [ 1099.744866][T16366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1099.744877][T16366] R13: 00007f0476426218 R14: 00007f0476426180 R15: 00007ffef8df1648 [ 1099.744904][T16366] [ 1099.755845][T16366] input: syz1 as /devices/virtual/input/input99 [ 1100.532172][T16369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2303'. [ 1100.731255][ T30] audit: type=1400 audit(1793533804.978:574): avc: denied { write } for pid=16370 comm="syz.6.2302" name="auth.unix.ip" dev="proc" ino=4026534146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 1100.977045][T16376] input: syz1 as /devices/virtual/input/input100 [ 1101.790123][T16380] MTRR 1 not used [ 1102.321453][ T7884] net_ratelimit: 94 callbacks suppressed [ 1102.428497][ T30] audit: type=1400 audit(1793533806.678:575): avc: denied { write } for pid=16381 comm="syz.6.2305" name="auth.unix.ip" dev="proc" ino=4026534146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 1102.714561][T16386] input: syz1 as /devices/virtual/input/input102 [ 1103.457079][T16393] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1103.475392][T16393] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1104.358147][ T30] audit: type=1400 audit(1793533808.498:576): avc: denied { write } for pid=16395 comm="syz.3.2308" name="auth.unix.ip" dev="proc" ino=4026533108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 1104.467238][T16401] MTRR 1 not used [ 1104.475906][T16401] input: syz1 as /devices/virtual/input/input103 [ 1105.226950][T16404] kAFS: unparsable volume name [ 1105.955459][T16414] kAFS: unparsable volume name [ 1107.433905][ C0] net_ratelimit: 56 callbacks suppressed [ 1107.724009][T16428] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2317'. [ 1107.875599][T16436] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2318'. [ 1107.952306][ T30] audit: type=1400 audit(1793533812.198:577): avc: denied { write } for pid=16438 comm="syz.6.2320" name="auth.unix.ip" dev="proc" ino=4026534146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 1108.201964][T16444] input: syz1 as /devices/virtual/input/input105 [ 1108.920902][T16448] kAFS: unparsable volume name [ 1109.431701][T16451] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2321'. [ 1109.568523][T16457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2323'. [ 1110.546181][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.546206][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.915155][T16469] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2325'. [ 1111.753024][T16477] kAFS: unparsable volume name [ 1112.684039][T16485] kAFS: unparsable volume name [ 1113.263768][ C1] net_ratelimit: 84 callbacks suppressed [ 1113.694239][T16493] kAFS: unparsable volume name [ 1115.625086][T16504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2333'. [ 1115.811302][T16509] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2337'. [ 1115.895135][T16514] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2335'. [ 1116.293484][T16523] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1116.295306][T16523] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1116.296753][T16523] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2340'. [ 1117.536283][T16527] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2339'. [ 1118.439697][T16535] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2345'. [ 1118.451157][ T8064] net_ratelimit: 76 callbacks suppressed [ 1118.777352][T16540] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1118.794385][T16540] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1119.236749][T16541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2344'. [ 1119.594441][T16550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2347'. [ 1120.614080][T16562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2350'. [ 1120.972192][T16568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2352'. [ 1123.503767][ C1] net_ratelimit: 106 callbacks suppressed [ 1123.947077][T16592] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2357'. [ 1123.963403][T16590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2356'. [ 1124.362316][T16598] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2358'. [ 1124.609548][ T30] audit: type=1400 audit(1793533828.818:578): avc: denied { setopt } for pid=16599 comm="syz.0.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1124.750903][T16602] ceph: No mds server is up or the cluster is laggy [ 1124.924281][ T5733] libceph: connect (1)[c::]:6789 error -101 [ 1124.948990][ T5733] libceph: mon0 (1)[c::]:6789 connect error [ 1125.262940][ T5733] libceph: connect (1)[c::]:6789 error -101 [ 1125.265379][ T5733] libceph: mon0 (1)[c::]:6789 connect error [ 1128.012293][T16629] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1128.032507][T16629] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1128.524300][ T7786] net_ratelimit: 141 callbacks suppressed [ 1130.779850][T16650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2369'. [ 1131.921450][T16659] ceph: No mds server is up or the cluster is laggy [ 1131.952180][ T2310] libceph: connect (1)[c::]:6789 error -101 [ 1131.974606][ T2310] libceph: mon0 (1)[c::]:6789 connect error [ 1132.255759][T13415] libceph: connect (1)[c::]:6789 error -101 [ 1132.256742][T13415] libceph: mon0 (1)[c::]:6789 connect error [ 1132.787294][T13415] libceph: connect (1)[c::]:6789 error -101 [ 1132.792305][T13415] libceph: mon0 (1)[c::]:6789 connect error [ 1133.663781][ C1] net_ratelimit: 220 callbacks suppressed [ 1133.837805][T16671] xt_hashlimit: max too large, truncated to 1048576 [ 1133.837924][T16671] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1134.891167][T16673] ceph: No mds server is up or the cluster is laggy [ 1134.904016][ T5733] libceph: connect (1)[c::]:6789 error -101 [ 1134.904137][ T5733] libceph: mon0 (1)[c::]:6789 connect error [ 1135.205709][T11784] libceph: connect (1)[c::]:6789 error -101 [ 1135.205830][T11784] libceph: mon0 (1)[c::]:6789 connect error [ 1135.724148][ T5733] libceph: connect (1)[c::]:6789 error -101 [ 1135.724262][ T5733] libceph: mon0 (1)[c::]:6789 connect error [ 1135.977007][T16679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2375'. [ 1136.172849][T16684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2379'. [ 1136.245216][ T5753] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1136.458794][ T5753] usb 4-1: New USB device found: idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1136.533236][ T5753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.775656][ T5753] usb 4-1: config 0 descriptor?? [ 1136.897753][ T5753] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1137.865185][T16703] xt_hashlimit: max too large, truncated to 1048576 [ 1137.865254][T16703] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1137.920349][T16702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2382'. [ 1138.090074][ T30] audit: type=1400 audit(1793533842.338:579): avc: denied { create } for pid=16678 comm="syz.3.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1138.393681][T16708] xt_hashlimit: max too large, truncated to 1048576 [ 1138.401078][T16708] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1139.263781][ C0] net_ratelimit: 154 callbacks suppressed [ 1140.808633][ T5753] gspca_stv06xx: I2C: Read error writing address: -71 [ 1140.811630][ T5753] usb 4-1: USB disconnect, device number 43 [ 1141.015852][T16713] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2383'. [ 1141.068197][T16718] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2385'. [ 1142.797483][T16742] xt_hashlimit: max too large, truncated to 1048576 [ 1142.797511][T16742] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1143.096497][ T5761] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1143.099935][T16747] xt_hashlimit: max too large, truncated to 1048576 [ 1143.099980][T16747] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1144.444189][ T5761] usb 4-1: New USB device found: idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1144.494624][ T5761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.647429][ T5761] usb 4-1: config 0 descriptor?? [ 1144.783756][ C1] net_ratelimit: 85 callbacks suppressed [ 1145.236462][ T5761] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1145.663229][ T5761] usb 4-1: USB disconnect, device number 44 [ 1145.754684][T16749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2393'. [ 1145.755227][T16749] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2393'. [ 1147.454807][T16763] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2398'. [ 1147.703067][T16766] xt_hashlimit: max too large, truncated to 1048576 [ 1147.703117][T16766] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1149.049192][T16777] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2402'. [ 1149.282595][T16778] xt_hashlimit: max too large, truncated to 1048576 [ 1149.282622][T16778] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1149.777299][T16785] xt_hashlimit: max too large, truncated to 1048576 [ 1149.777373][T16785] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1150.143751][ C0] net_ratelimit: 81 callbacks suppressed [ 1152.224863][ T5761] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1152.414476][ T5761] usb 8-1: New USB device found: idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1152.460168][ T5761] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.556387][T16797] xt_hashlimit: max too large, truncated to 1048576 [ 1152.556428][T16797] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1152.653025][T16800] xt_hashlimit: max too large, truncated to 1048576 [ 1152.653074][T16800] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1152.912533][ T5761] usb 8-1: config 0 descriptor?? [ 1154.458963][ T5761] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1155.102498][ T5761] usb 8-1: USB disconnect, device number 20 [ 1155.263775][ C0] net_ratelimit: 53 callbacks suppressed [ 1155.430002][T16802] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2406'. [ 1155.572976][T16805] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2407'. [ 1156.329340][ T5761] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1156.797587][ T5761] usb 8-1: New USB device found: idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1156.820154][ T5761] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.821726][ T5761] usb 8-1: config 0 descriptor?? [ 1156.846788][T16819] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2413'. [ 1156.866434][ T5761] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1157.209072][T16824] xt_hashlimit: max too large, truncated to 1048576 [ 1157.209132][T16824] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1158.995803][T16829] xt_hashlimit: max too large, truncated to 1048576 [ 1158.995813][T16829] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1159.231412][T16832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2412'. [ 1160.163029][ T5761] gspca_stv06xx: I2C: Read error writing address: -71 [ 1160.178246][ T5761] usb 8-1: USB disconnect, device number 21 [ 1160.303782][ C1] net_ratelimit: 80 callbacks suppressed [ 1160.475938][T16837] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1160.477494][T16837] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1160.997355][ T30] audit: type=1400 audit(1793533864.728:580): avc: denied { mounton } for pid=16836 comm="syz.6.2415" path="/373/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1161.225591][T16842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2420'. [ 1161.409439][T16846] xt_hashlimit: max too large, truncated to 1048576 [ 1161.409485][T16846] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1161.841842][T16850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2419'. [ 1162.252031][T16851] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1162.253369][T16851] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1164.724879][T16861] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1165.401534][ T5753] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1165.440976][T16863] xt_hashlimit: max too large, truncated to 1048576 [ 1165.441017][T16863] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1165.503775][ C0] net_ratelimit: 64 callbacks suppressed [ 1165.573891][ T5753] usb 1-1: Using ep0 maxpacket: 8 [ 1165.575465][ T5753] usb 1-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1165.577775][ T5753] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1165.577804][ T5753] usb 1-1: config 179 has no interface number 0 [ 1165.577952][ T5753] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1165.577983][ T5753] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1165.578031][ T5753] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1165.578059][ T5753] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1165.578159][ T5753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.808703][T16861] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1166.214073][ T5753] usb 1-1: USB disconnect, device number 34 [ 1167.991890][T16876] xt_hashlimit: max too large, truncated to 1048576 [ 1167.991921][T16876] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1168.170302][T16877] xt_hashlimit: max too large, truncated to 1048576 [ 1168.170318][T16877] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1170.070387][T16880] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1170.072037][T16880] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1170.607115][ T5751] net_ratelimit: 60 callbacks suppressed [ 1170.862051][T16886] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1172.258717][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1172.258755][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1173.252473][ T2310] libceph: connect (1)[c::]:6789 error -101 [ 1173.252586][ T2310] libceph: mon0 (1)[c::]:6789 connect error [ 1173.268317][ T2310] libceph: connect (1)[c::]:6789 error -101 [ 1173.268430][ T2310] libceph: mon0 (1)[c::]:6789 connect error [ 1173.308058][T16896] ceph: No mds server is up or the cluster is laggy [ 1173.801253][T16905] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2434'. [ 1174.189911][T16911] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1174.250883][T16911] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1175.046970][T16915] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1175.295855][T13415] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1175.567567][T16919] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1175.606788][T16919] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1175.661981][T16920] syz.5.2421 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1175.662371][T16920] CPU: 1 UID: 0 PID: 16920 Comm: syz.5.2421 Tainted: G L syzkaller #0 PREEMPT(full) [ 1175.662398][T16920] Tainted: [L]=SOFTLOCKUP [ 1175.662406][T16920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1175.662417][T16920] Call Trace: [ 1175.662424][T16920] [ 1175.662433][T16920] dump_stack_lvl+0x100/0x190 [ 1175.662468][T16920] dump_header+0xfb/0x606 [ 1175.662492][T16920] oom_kill_process.cold+0xd/0x380 [ 1175.662516][T16920] out_of_memory+0x343/0x14c0 [ 1175.662548][T16920] ? __pfx_out_of_memory+0x10/0x10 [ 1175.662582][T16920] mem_cgroup_out_of_memory+0xc6/0x130 [ 1175.662610][T16920] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1175.662636][T16920] ? find_held_lock+0x2b/0x80 [ 1175.662662][T16920] ? do_raw_spin_unlock+0x145/0x1e0 [ 1175.662681][T16920] ? _raw_spin_unlock+0x28/0x50 [ 1175.662710][T16920] try_charge_memcg+0x779/0xf30 [ 1175.662741][T16920] ? __pfx_try_charge_memcg+0x10/0x10 [ 1175.662762][T16920] ? find_held_lock+0x2b/0x80 [ 1175.662781][T16920] ? rcu_read_unlock+0x17/0x60 [ 1175.662803][T16920] ? rcu_read_unlock+0x17/0x60 [ 1175.662826][T16920] ? find_held_lock+0x2b/0x80 [ 1175.662845][T16920] ? rcu_read_unlock+0x17/0x60 [ 1175.662874][T16920] charge_memcg+0x1ae/0x210 [ 1175.662898][T16920] __mem_cgroup_charge+0x2b/0x1e0 [ 1175.662926][T16920] shmem_alloc_and_add_folio+0x451/0xd40 [ 1175.662962][T16920] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1175.662994][T16920] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 1175.663020][T16920] shmem_get_folio_gfp+0x758/0x1af0 [ 1175.663047][T16920] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1175.663067][T16920] ? irqentry_exit+0x202/0xab0 [ 1175.663084][T16920] ? lockdep_hardirqs_on+0x7d/0x110 [ 1175.663103][T16920] ? irqentry_exit+0x202/0xab0 [ 1175.663126][T16920] shmem_write_begin+0x1a4/0x420 [ 1175.663148][T16920] ? __pfx_shmem_write_begin+0x10/0x10 [ 1175.663169][T16920] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1175.663195][T16920] generic_perform_write+0x292/0xa40 [ 1175.663220][T16920] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1175.663248][T16920] ? __pfx_generic_perform_write+0x10/0x10 [ 1175.663277][T16920] ? file_update_time_flags+0x38c/0x520 [ 1175.663307][T16920] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1175.663334][T16920] shmem_file_write_iter+0x10e/0x140 [ 1175.663358][T16920] __kernel_write_iter+0x2ac/0x930 [ 1175.663378][T16920] ? __pfx___kernel_write_iter+0x10/0x10 [ 1175.663397][T16920] ? __up_read+0x333/0x980 [ 1175.663417][T16920] ? dump_user_range+0x7e0/0xe90 [ 1175.663444][T16920] dump_user_range+0xa0d/0xe90 [ 1175.663472][T16920] ? __pfx_dump_user_range+0x10/0x10 [ 1175.663499][T16920] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 1175.663525][T16920] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 1175.663551][T16920] ? __pfx_writenote+0x10/0x10 [ 1175.663579][T16920] elf_core_dump+0x2d97/0x3d60 [ 1175.663617][T16920] ? __pfx_elf_core_dump+0x10/0x10 [ 1175.663637][T16920] ? kasan_save_stack+0x3f/0x50 [ 1175.663654][T16920] ? kasan_save_stack+0x30/0x50 [ 1175.663669][T16920] ? kasan_save_track+0x14/0x30 [ 1175.663685][T16920] ? __kasan_kmalloc+0xaa/0xb0 [ 1175.663699][T16920] ? coredump_write+0x37b/0x1c20 [ 1175.663713][T16920] ? do_coredump.constprop.0+0x9bb/0x25e0 [ 1175.663729][T16920] ? vfs_coredump+0x9b0/0x1180 [ 1175.663748][T16920] ? asm_exc_page_fault+0x26/0x30 [ 1175.663770][T16920] ? 0xffffffffff600000 [ 1175.663820][T16920] ? lock_acquire+0x1d1/0x380 [ 1175.663842][T16920] ? do_coredump.constprop.0+0x9bb/0x25e0 [ 1175.663872][T16920] ? coredump_write+0xd88/0x1c20 [ 1175.663891][T16920] coredump_write+0xd88/0x1c20 [ 1175.663921][T16920] ? __pfx_coredump_write+0x10/0x10 [ 1175.663951][T16920] ? __pfx_make_vfsuid+0x10/0x10 [ 1175.663977][T16920] do_coredump.constprop.0+0x9bb/0x25e0 [ 1175.664002][T16920] ? __pfx_do_coredump.constprop.0+0x10/0x10 [ 1175.664053][T16920] ? __lock_acquire+0x5c0/0x1f40 [ 1175.664079][T16920] ? trace_kmalloc+0xeb/0x110 [ 1175.664097][T16920] ? __kasan_kmalloc+0xaa/0xb0 [ 1175.664116][T16920] ? __kmalloc_noprof+0x350/0x840 [ 1175.664145][T16920] ? lock_acquire+0x1d1/0x380 [ 1175.664170][T16920] ? do_raw_spin_lock+0x128/0x260 [ 1175.664187][T16920] ? find_held_lock+0x2b/0x80 [ 1175.664205][T16920] ? vfs_coredump+0x6f8/0x1180 [ 1175.664226][T16920] ? rcu_is_watching+0x13/0xc0 [ 1175.664252][T16920] vfs_coredump+0x9b0/0x1180 [ 1175.664276][T16920] ? __pfx_vfs_coredump+0x10/0x10 [ 1175.664335][T16920] ? rcu_is_watching+0x13/0xc0 [ 1175.664359][T16920] get_signal+0x1fba/0x22e0 [ 1175.664394][T16920] ? __pfx_get_signal+0x10/0x10 [ 1175.664425][T16920] arch_do_signal_or_restart+0x91/0x7e0 [ 1175.664446][T16920] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1175.664483][T16920] irqentry_exit+0x542/0xab0 [ 1175.664506][T16920] asm_exc_page_fault+0x26/0x30 [ 1175.664523][T16920] RIP: 0033:0x7f047619f561 [ 1175.664539][T16920] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1175.664557][T16920] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1175.664574][T16920] RAX: 0000000000000000 RBX: 00007f0476426090 RCX: 00007f047619f559 [ 1175.664586][T16920] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1175.664598][T16920] RBP: 00007f0476236b50 R08: 0000000000000000 R09: 0000000000000000 [ 1175.664609][T16920] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1175.664620][T16920] R13: 00007f0476426128 R14: 00007f0476426090 R15: 00007ffef8df1648 [ 1175.664647][T16920] [ 1175.665097][T16920] memory: usage 307200kB, limit 307200kB, failcnt 30157 [ 1175.665130][T16920] memory+swap: usage 432008kB, limit 9007199254740988kB, failcnt 0 [ 1175.665161][T16920] kmem: usage 3740kB, limit 9007199254740988kB, failcnt 0 [ 1175.665190][T16920] Memory cgroup stats for /syz5: [ 1175.665864][T16920] cache 310411264 [ 1175.665892][T16920] rss 331776 [ 1175.665919][T16920] rss_huge 0 [ 1175.665945][T16920] shmem 310411264 [ 1175.665971][T16920] mapped_file 221368320 [ 1175.665997][T16920] dirty 0 [ 1175.666024][T16920] writeback 0 [ 1175.666051][T16920] workingset_refault_anon 1244 [ 1175.666078][T16920] workingset_refault_file 0 [ 1175.666104][T16920] swap 127803392 [ 1175.666110][T16920] swapcached 0 [ 1175.666115][T16920] pgpgin 1626573 [ 1175.666120][T16920] pgpgout 1557351 [ 1175.666125][T16920] pgfault 827074 [ 1175.666131][T16920] pgmajfault 4 [ 1175.666136][T16920] inactive_anon 47255552 [ 1175.666142][T16920] active_anon 263483392 [ 1175.666168][T16920] inactive_file 0 [ 1175.666192][T16920] active_file 0 [ 1175.666198][T16920] unevictable 0 [ 1175.666205][T16920] hierarchical_memory_limit 314572800 [ 1175.666212][T16920] hierarchical_memsw_limit 9223372036854771712 [ 1175.666236][T16920] total_cache 310411264 [ 1175.666241][T16920] total_rss 331776 [ 1175.666246][T16920] total_rss_huge 0 [ 1175.666250][T16920] total_shmem 310411264 [ 1175.666255][T16920] total_mapped_file 221368320 [ 1175.666260][T16920] total_dirty 0 [ 1175.666264][T16920] total_writeback 0 [ 1175.666270][T16920] total_workingset_refault_anon 1244 [ 1175.666276][T16920] total_workingset_refault_file 0 [ 1175.666282][T16920] total_swap 127803392 [ 1175.666287][T16920] total_swapcached 0 [ 1175.666292][T16920] total_pgpgin 1626573 [ 1175.666297][T16920] total_pgpgout 1557351 [ 1175.666303][T16920] total_pgfault 827074 [ 1175.666308][T16920] total_pgmajfault 4 [ 1175.666313][T16920] total_inactive_anon 47255552 [ 1175.666318][T16920] total_active_anon 263483392 [ 1175.666323][T16920] total_inactive_file 0 [ 1175.666333][T16920] total_active_file 0 [ 1175.666339][T16920] total_unevictable 0 [ 1175.666344][T16920] anon_cost 0 [ 1175.666348][T16920] file_cost 0 [ 1175.666354][T16920] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2291,pid=16321,uid=0 [ 1175.667313][T16920] Memory cgroup out of memory: Killed process 16321 (syz.5.2291) total-vm:202636kB, anon-rss:1268kB, file-rss:20548kB, shmem-rss:129364kB, UID:0 pgtables:372kB oom_score_adj:1000 [ 1175.833737][ C1] net_ratelimit: 116 callbacks suppressed [ 1180.863759][ C0] net_ratelimit: 4 callbacks suppressed [ 1187.903747][ C0] net_ratelimit: 1 callbacks suppressed [ 1280.323661][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1281.129854][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16520/1:b..l.. [ 1281.138967][ C0] rcu: (detected by 0, t=10583 jiffies, g=96625, q=376 ncpus=2) [ 1281.146675][ C0] task:syz.5.2336 state:R running task stack:18328 pid:16520 tgid:16520 ppid:7652 task_flags:0xc00640 flags:0x00080001 [ 1281.160146][ C0] Call Trace: [ 1281.163417][ C0] [ 1281.166341][ C0] __schedule+0x125e/0x6990 [ 1281.170849][ C0] ? post_alloc_hook+0xed/0x120 [ 1281.175710][ C0] ? __pfx___schedule+0x10/0x10 [ 1281.180570][ C0] ? mark_held_locks+0x40/0x70 [ 1281.185350][ C0] preempt_schedule_irq+0x4e/0x90 [ 1281.190378][ C0] irqentry_exit+0x33f/0xab0 [ 1281.194974][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1281.200946][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 1281.206142][ C0] Code: 05 0f 01 d1 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 1e 69 81 10 0f 82 c9 02 00 00 8b 35 fe 98 81 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ad 00 d1 13 0f 85 09 03 00 00 48 83 c4 [ 1281.225741][ C0] RSP: 0018:ffffc9000348e800 EFLAGS: 00000206 [ 1281.231798][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 1281.239759][ C0] RDX: 0000000000000000 RSI: ffffffff8e601048 RDI: ffffffff8c835380 [ 1281.247717][ C0] RBP: ffffffff8ffeb2a0 R08: 00000000cff97dba R09: 0000000000000007 [ 1281.255678][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 1281.263639][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1281.271614][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1281.276557][ C0] filemap_get_entry+0xe1/0x450 [ 1281.281406][ C0] ? filemap_get_entry+0xd0/0x450 [ 1281.286429][ C0] ? __pfx_filemap_get_entry+0x10/0x10 [ 1281.291893][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1281.297254][ C0] ? xas_move_index+0xae/0x110 [ 1281.302018][ C0] shmem_get_folio_gfp+0x24d/0x1af0 [ 1281.307218][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1281.312846][ C0] ? filemap_map_pages+0x1155/0x2020 [ 1281.318136][ C0] shmem_fault+0x1fb/0xa30 [ 1281.322548][ C0] ? __pfx_shmem_fault+0x10/0x10 [ 1281.327477][ C0] ? __pte_offset_map+0x9a/0x470 [ 1281.332413][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 1281.337873][ C0] ? find_held_lock+0x2b/0x80 [ 1281.342547][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 1281.348001][ C0] __do_fault+0x10b/0x440 [ 1281.352390][ C0] do_fault+0xb3f/0x1890 [ 1281.356638][ C0] ? __pfx_do_fault+0x10/0x10 [ 1281.361314][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 1281.366074][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 1281.370838][ C0] __handle_mm_fault+0x150b/0x2f60 [ 1281.375949][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1281.381403][ C0] ? pte_offset_map_lock+0x174/0x320 [ 1281.386686][ C0] ? find_held_lock+0x2b/0x80 [ 1281.391386][ C0] ? find_held_lock+0x2b/0x80 [ 1281.396053][ C0] ? follow_page_pte+0x536/0x1050 [ 1281.401184][ C0] handle_mm_fault+0x363/0xa20 [ 1281.405963][ C0] __get_user_pages+0x8a9/0x2c20 [ 1281.410914][ C0] ? lock_acquire+0x1d1/0x380 [ 1281.415587][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 1281.420958][ C0] ? __pfx___might_resched+0x10/0x10 [ 1281.426243][ C0] get_dump_page+0x27e/0x3d0 [ 1281.430837][ C0] ? __pfx_get_dump_page+0x10/0x10 [ 1281.435943][ C0] ? dump_user_range+0x7e0/0xe90 [ 1281.440882][ C0] dump_user_range+0x19c/0xe90 [ 1281.445645][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 1281.450929][ C0] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 1281.457076][ C0] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 1281.463658][ C0] ? __pfx_writenote+0x10/0x10 [ 1281.468425][ C0] elf_core_dump+0x2d97/0x3d60 [ 1281.473234][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 1281.478342][ C0] ? kasan_save_stack+0x3f/0x50 [ 1281.483181][ C0] ? kasan_save_stack+0x30/0x50 [ 1281.488018][ C0] ? kasan_save_track+0x14/0x30 [ 1281.492855][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1281.497608][ C0] ? coredump_write+0x37b/0x1c20 [ 1281.502535][ C0] ? do_coredump.constprop.0+0x9bb/0x25e0 [ 1281.508246][ C0] ? vfs_coredump+0x9b0/0x1180 [ 1281.513004][ C0] ? asm_exc_page_fault+0x26/0x30 [ 1281.518021][ C0] ? 0xffffffffff600000 [ 1281.522201][ C0] ? lock_acquire+0x1d1/0x380 [ 1281.526875][ C0] ? do_coredump.constprop.0+0x9bb/0x25e0 [ 1281.532597][ C0] ? coredump_write+0xd88/0x1c20 [ 1281.537541][ C0] coredump_write+0xd88/0x1c20 [ 1281.542312][ C0] ? __pfx_coredump_write+0x10/0x10 [ 1281.547518][ C0] ? __pfx_make_vfsuid+0x10/0x10 [ 1281.552458][ C0] do_coredump.constprop.0+0x9bb/0x25e0 [ 1281.558013][ C0] ? __pfx_do_coredump.constprop.0+0x10/0x10 [ 1281.564184][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1281.569119][ C0] ? trace_kmalloc+0xeb/0x110 [ 1281.573787][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1281.578551][ C0] ? __kmalloc_noprof+0x350/0x840 [ 1281.583575][ C0] ? lock_acquire+0x1d1/0x380 [ 1281.588247][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1281.593265][ C0] ? find_held_lock+0x2b/0x80 [ 1281.597937][ C0] ? vfs_coredump+0x6f8/0x1180 [ 1281.602693][ C0] ? rcu_is_watching+0x13/0xc0 [ 1281.607454][ C0] vfs_coredump+0x9b0/0x1180 [ 1281.612042][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 1281.617113][ C0] ? rcu_is_watching+0x13/0xc0 [ 1281.621887][ C0] get_signal+0x1fba/0x22e0 [ 1281.626419][ C0] ? __pfx_get_signal+0x10/0x10 [ 1281.631267][ C0] ? __pfx_force_sig_fault+0x10/0x10 [ 1281.636556][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 1281.642107][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1281.648270][ C0] irqentry_exit+0x542/0xab0 [ 1281.652864][ C0] asm_exc_page_fault+0x26/0x30 [ 1281.657705][ C0] RIP: 0033:0x0 [ 1281.661153][ C0] RSP: 002b:0000200000000288 EFLAGS: 00010217 [ 1281.667210][ C0] RAX: 0000000000000000 RBX: 00007f0476425fa0 RCX: 00007f047619f559 [ 1281.675170][ C0] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000020000 [ 1281.683128][ C0] RBP: 00007f0476236b50 R08: 0000000000000000 R09: 0000000000000000 [ 1281.691090][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1281.699051][ C0] R13: 00007f0476426038 R14: 00007f0476425fa0 R15: 00007ffef8df1648 [ 1281.707030][ C0] [ 1281.710040][ C0] rcu: rcu_preempt kthread starved for 10638 jiffies! g96625 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 1281.721047][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1281.731002][ C0] rcu: RCU grace-period kthread stack dump: [ 1281.736876][ C0] task:rcu_preempt state:R running task stack:28760 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1281.750368][ C0] Call Trace: [ 1281.753649][ C0] [ 1281.756577][ C0] __schedule+0x125e/0x6990 [ 1281.761092][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1281.766039][ C0] ? __pfx___schedule+0x10/0x10 [ 1281.770886][ C0] ? find_held_lock+0x2b/0x80 [ 1281.775650][ C0] ? schedule+0x225/0x2c0 [ 1281.779985][ C0] schedule+0xdd/0x2c0 [ 1281.784056][ C0] schedule_timeout+0x127/0x280 [ 1281.788905][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1281.794292][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1281.799590][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1281.805394][ C0] ? prepare_to_swait_event+0xdf/0x4f0 [ 1281.810852][ C0] rcu_gp_fqs_loop+0x1a9/0x930 [ 1281.815625][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1281.820918][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1281.825855][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1281.831049][ C0] ? rcu_is_watching+0x13/0xc0 [ 1281.835804][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1281.841612][ C0] rcu_gp_kthread+0x179/0x260 [ 1281.846287][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1281.851491][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1281.857312][ C0] ? __kthread_parkme+0x18f/0x230 [ 1281.862343][ C0] ? kthread+0x13a/0x450 [ 1281.866574][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1281.871781][ C0] kthread+0x373/0x450 [ 1281.875840][ C0] ? __pfx_kthread+0x10/0x10 [ 1281.880440][ C0] ret_from_fork+0x730/0xd60 [ 1281.885029][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1281.890139][ C0] ? __switch_to+0x800/0x10e0 [ 1281.894806][ C0] ? __pfx_kthread+0x10/0x10 [ 1281.899410][ C0] ret_from_fork_asm+0x1a/0x30 [ 1281.904203][ C0] [ 1281.907222][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1281.913542][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1281.924032][ C0] Tainted: [L]=SOFTLOCKUP [ 1281.928432][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1281.938485][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1281.944195][ C0] Code: f7 a1 02 e9 43 61 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 1d 1e 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1281.963794][ C0] RSP: 0000:ffffffff8fc07cf0 EFLAGS: 00000242 [ 1281.969845][ C0] RAX: 0000000003fceddf RBX: ffffffff8fc91540 RCX: ffffffff8beda325 [ 1281.977807][ C0] RDX: 0000000000000001 RSI: ffffffff8e62803d RDI: ffffffff8c835380 [ 1281.985757][ C0] RBP: fffffbfff1f922a8 R08: 0000000000000001 R09: ffffed1017006825 [ 1281.993719][ C0] R10: ffff8880b803412b R11: 0000000000000001 R12: 0000000000000000 [ 1282.001678][ C0] R13: 0000000000000000 R14: 1ffffffff1f80fa2 R15: dffffc0000000000 [ 1282.009649][ C0] FS: 0000000000000000(0000) GS:ffff88812247d000(0000) knlGS:0000000000000000 [ 1282.018587][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1282.025245][ C0] CR2: 0000001b329ffff8 CR3: 0000000076fc3000 CR4: 00000000003526f0 [ 1282.033232][ C0] Call Trace: [ 1282.036516][ C0] [ 1282.039437][ C0] default_idle+0x9/0x10 [ 1282.043675][ C0] default_idle_call+0x6c/0xb0 [ 1282.048436][ C0] do_idle+0x3ae/0x5b0 [ 1282.052497][ C0] ? __pfx_do_idle+0x10/0x10 [ 1282.057086][ C0] cpu_startup_entry+0x4f/0x60 [ 1282.061842][ C0] rest_init+0x2d3/0x2e0 [ 1282.066081][ C0] ? __pfx_rest_init+0x10/0x10 [ 1282.070844][ C0] ? __pfx_acpi_read_bit_register+0x10/0x10 [ 1282.076819][ C0] ? lock_acquire+0x1d1/0x380 [ 1282.081520][ C0] ? __pfx_kernel_init+0x10/0x10 [ 1282.086470][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 1282.091766][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 1282.097059][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 1282.102509][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1282.108049][ C0] start_kernel+0x48e/0x490 [ 1282.112545][ C0] x86_64_start_reservations+0x24/0x30 [ 1282.118085][ C0] x86_64_start_kernel+0x12b/0x130 [ 1282.123206][ C0] common_startup_64+0x13e/0x158 [ 1282.128165][ C0] [ 1283.903844][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1283.903886][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1283.907081][ T5748] net_ratelimit: 14 callbacks suppressed [ 1283.974422][ T33] oom_reaper: reaped process 16321 (syz.5.2291), now anon-rss:0kB, file-rss:20480kB, shmem-rss:125500kB [ 1284.076803][T13415] usb 8-1: Using ep0 maxpacket: 8 SYZFAIL: failed to send rpc fd=3 want=134720 sent=0 n=-1 (errno 32: Broken pipe) [ 1284.696955][T16929] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1284.698365][T16929] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1287.578197][ T6662] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.897887][T13415] usb 8-1: device descriptor read/all, error -71 [ 1288.049697][ T5615] tipc: Resetting bearer [ 1288.106631][ T5615] tipc: Disabling bearer [ 1288.439290][ T6662] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.671545][ T6662] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.879765][ T6662] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.161140][ T6662] bridge_slave_1: left allmulticast mode [ 1289.161150][ T6662] bridge_slave_1: left promiscuous mode [ 1289.161257][ T6662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.186351][ T6662] bridge_slave_0: left allmulticast mode [ 1289.186362][ T6662] bridge_slave_0: left promiscuous mode [ 1289.186486][ T6662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.503954][ C1] net_ratelimit: 273 callbacks suppressed [ 1289.632022][ T6662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1289.657661][ T6662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1289.672687][ T6662] bond0 (unregistering): Released all slaves [ 1290.510892][ T30] audit: type=1400 audit(1793533994.758:581): avc: denied { write } for pid=16936 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1290.913111][ T30] audit: type=1400 audit(1793533995.158:582): avc: denied { write } for pid=16947 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1