last executing test programs: 21m47.788294884s ago: executing program 2 (id=390): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, 0x0, 0x80) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x8010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) mount(0x0, 0x0, &(0x7f0000000380)='tracefs\x00', 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r6 = fsopen(&(0x7f0000000480)='proc\x00', 0x1) fsopen(0x0, 0x1000000) fsmount(r6, 0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x840, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000500)={0x1f, @none, 0x18}, 0xa) ioctl$SG_IO(r0, 0x2285, 0x0) 21m46.018722036s ago: executing program 2 (id=392): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000008c0)={0x0, 0x6, 0xc, "eefac78a57fb05fee79a843c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000a10000850000001700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0xb, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) 21m42.020206773s ago: executing program 2 (id=399): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./configfs\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./configfs/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./configfs/usb_gadget/g1/functions/uvc.0/control/extensions/ext0\x00', 0x1ff) r0 = syz_open_dev$video(&(0x7f0000000500), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000540)={0xa, 0x100, 0x2, {0x2008000, 0x1000, 0x2, 0x7fff}}) r1 = openat$dir(0xffffff9c, &(0x7f0000000480)='./configfs/usb_gadget/g1/functions/uvc.0/control/extensions/ext0/bmControls\x00', 0x0, 0xc2) r2 = openat(r1, &(0x7f0000000240)='./configfs/usb_gadget/g1/functions/uvc.0/control/extensions/ext0/bmControls\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='0x01\n0', 0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./configfs/usb_gadget/g1/functions/uvc.0/control/extensions/ext0/bmControls\x00', 0x40000, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000080000000f"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0600000004000000080000000b00000000000000eccaed86c684b7384eda1420b49eedcaed9ddd867f72d5cd2ff0d644956104b2848ed181a15afb8c35491ebfa04185bb34284e6d638150b105dd12803a1bfac1c7508b33daa0e651d5644db95006914b6a7e2cea35593c1f083557246c664fc91f8b8cc668911682c31b206c6e4bceb280e20527e279bb4fcee9363b3b57b518641cd52ebc51cfc1c644dcef0dbf004812fdc4b16cd0a2100bfc850ed9fb03e92c64815f25438358f5eff7bcdb306ac1117c436f72145ffc0ec66bab29", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000000020000000000000000000000184a00", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$getownex(r0, 0x10, &(0x7f0000000580)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000380)='net/llc/socket\x00') preadv(r6, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/92, 0x84}], 0x1, 0x62, 0xfd4c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = gettid() timer_create(0x0, &(0x7f0000000980)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f00000009c0)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000a00)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) iopl(0x3) timer_settime(0x0, 0x0, &(0x7f0000000a40)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xcda87000) inotify_init() 21m41.808716779s ago: executing program 2 (id=401): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000140)={0x0, 0x0}) read$msr(r3, &(0x7f00000003c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f00000193c0)=0x7) socket$inet6(0xa, 0x3, 0x8000000003c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) 21m39.826078427s ago: executing program 2 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6, 0xffffffffffffffff}, 0x0, &(0x7f0000000700)=r5}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', r9, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r10, r9, 0x25, 0x2, @void}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000000), &(0x7f00000000c0)=r4}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r11 = syz_clone(0x4084111, 0x0, 0x1d, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r11, 0x1, &(0x7f0000000380)={0x14, 0x1, 0xfee9}) 21m36.294716172s ago: executing program 2 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000008c0)={0x0, 0x6, 0xc, "eefac78a57fb05fee79a843c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000a10000850000001700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0xb, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) 21m21.002414364s ago: executing program 32 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000008c0)={0x0, 0x6, 0xc, "eefac78a57fb05fee79a843c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000a10000850000001700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0xb, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) 13m54.286119647s ago: executing program 0 (id=931): r0 = syz_open_dev$vcsa(&(0x7f0000000800), 0x1, 0x80a01) writev(r0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000880)="c21cfb", 0x3}, {&(0x7f00000008c0)}, {0x0}], 0x4) 13m48.294346372s ago: executing program 0 (id=940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000240)=@filename='./file0\x00', r4, 0x0) r5 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 13m47.194781849s ago: executing program 0 (id=942): r0 = syz_io_uring_setup(0xf00, &(0x7f00000003c0)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000440), &(0x7f0000000500), &(0x7f0000000540)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000580)={&(0x7f0000002000)}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f000001c240), 0x88b02, 0x0) write$P9_RSTATu(r2, &(0x7f000001c280)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x230) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) 13m40.953000951s ago: executing program 0 (id=948): bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r3 = creat(&(0x7f0000000600)='./bus\x00', 0xe2) io_setup(0x5, &(0x7f0000000640)=0x0) io_submit(r4, 0x1, &(0x7f0000000680)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x0, r3, 0x0, 0x23, 0x0, 0x0, 0x0, r3}]) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000700)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x20008001) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./trace\x00', 0x1ff) mount(&(0x7f0000000840)=@filename='tracefs\x00', &(0x7f0000000880)='./trace\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./trace/trace\x00', 0x0, 0x0) read(r5, &(0x7f0000000940), 0x1000) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000440), 0x4) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r6}, 0x8) read(r7, 0x0, 0x300) r8 = socket(0x1e, 0x5, 0x0) connect$tipc(r8, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r8, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/184, 0xb8}], 0x1}, 0xffeffff8}], 0x1, 0x20b0, 0x0) sendmmsg$inet(r8, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)='3', 0x1}], 0x1}}], 0x1, 0x4044810) write(0xca, &(0x7f0000000000)="04046e000200faff04001a0001", 0xd) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x12102, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) 13m36.763384623s ago: executing program 0 (id=951): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() openat$tcp_congestion(0xffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./tracefs\x00', &(0x7f00000019c0)='tracefs\x00', 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) symlink(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001e40)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r4, &(0x7f0000001e80)='e:mygroup/myev', 0xe) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 13m34.612758105s ago: executing program 0 (id=954): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000400)={0x1, 0x0}, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000540), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r4 = creat(&(0x7f0000000600)='./bus\x00', 0xe2) io_setup(0x5, &(0x7f0000000640)=0x0) io_submit(r5, 0x1, &(0x7f0000000680)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x0, r4, 0x0, 0x23, 0x0, 0x0, 0x0, r4}]) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000700)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x20008001) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./trace\x00', 0x1ff) mount(&(0x7f0000000840)=@filename='tracefs\x00', &(0x7f0000000880)='./trace\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./trace/trace\x00', 0x0, 0x0) read(r6, &(0x7f0000000940), 0x1000) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000440)=r0, 0x4) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r7}, 0x8) read(r8, 0x0, 0x300) r9 = socket(0x1e, 0x5, 0x0) connect$tipc(r9, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r9, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/184, 0xb8}], 0x1}, 0xffeffff8}], 0x1, 0x20b0, 0x0) write(0xca, &(0x7f0000000000)="04046e000200faff04001a0001", 0xd) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x12102, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) 13m17.801464003s ago: executing program 33 (id=954): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000400)={0x1, 0x0}, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000540), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r4 = creat(&(0x7f0000000600)='./bus\x00', 0xe2) io_setup(0x5, &(0x7f0000000640)=0x0) io_submit(r5, 0x1, &(0x7f0000000680)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x0, r4, 0x0, 0x23, 0x0, 0x0, 0x0, r4}]) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000700)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x20008001) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./trace\x00', 0x1ff) mount(&(0x7f0000000840)=@filename='tracefs\x00', &(0x7f0000000880)='./trace\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./trace/trace\x00', 0x0, 0x0) read(r6, &(0x7f0000000940), 0x1000) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000440)=r0, 0x4) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r7}, 0x8) read(r8, 0x0, 0x300) r9 = socket(0x1e, 0x5, 0x0) connect$tipc(r9, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r9, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/184, 0xb8}], 0x1}, 0xffeffff8}], 0x1, 0x20b0, 0x0) write(0xca, &(0x7f0000000000)="04046e000200faff04001a0001", 0xd) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x12102, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) 2m26.139591265s ago: executing program 4 (id=1787): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x143102) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x0, 0x521, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f00000005c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000640)='c:::\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000100000140000001c0007800c00040001002000010000000c00030000"], 0x30}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 2m24.772004157s ago: executing program 4 (id=1789): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x7, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x409, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4c, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x6, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x240400c0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x18}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000540), 0x6040, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000008080)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m21.286446702s ago: executing program 4 (id=1794): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)='exfat\x00', 0x8080, &(0x7f0000000440)='discard') epoll_create1(0x80000) read$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r1 = io_uring_setup(0x2e06, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) setrlimit(0x7, &(0x7f0000000100)={0x4, 0x100}) socket$pppl2tp(0x18, 0x1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) 2m20.145134749s ago: executing program 4 (id=1795): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) 2m18.648017975s ago: executing program 4 (id=1796): bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_io_uring(0x3631, &(0x7f0000000040)={0x0, 0x30b8, 0x1, 0x2, 0x158}, &(0x7f00000020c0), &(0x7f0000000280), &(0x7f0000000140)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0x7}]}, @ptr={0xe}]}, {0x0, [0x5f, 0x2e, 0x61]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m12.369937126s ago: executing program 4 (id=1802): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x2, 0x33565348, 0x5, 0x0, [{0x4, 0x7}, {0x80000001, 0xffffffff}, {0xfffffff7, 0x5}, {0x6, 0x4}, {0x10, 0x7}, {0xe2, 0xaa6}, {0xfffffffb, 0x8}, {0xffffffff, 0x400}], 0xe9, 0x3, 0x3, 0x0, 0x6}}) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f00000003c0)="000000000000000463656c6c00000001000000440000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010203040000000405060708", 0xa8, 0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8002, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x3, 0x0, @pic={0x8, 0x7, 0x8, 0x2, 0x2, 0x7, 0xc5, 0x19, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000240)={0x7, 0xfffff60b, 0xfffffff9, 0x9, 0x2}) r5 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0x40405515, &(0x7f0000000ac0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8]}) 1m56.206238965s ago: executing program 34 (id=1802): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x2, 0x33565348, 0x5, 0x0, [{0x4, 0x7}, {0x80000001, 0xffffffff}, {0xfffffff7, 0x5}, {0x6, 0x4}, {0x10, 0x7}, {0xe2, 0xaa6}, {0xfffffffb, 0x8}, {0xffffffff, 0x400}], 0xe9, 0x3, 0x3, 0x0, 0x6}}) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f00000003c0)="000000000000000463656c6c00000001000000440000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010203040000000405060708", 0xa8, 0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8002, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x3, 0x0, @pic={0x8, 0x7, 0x8, 0x2, 0x2, 0x7, 0xc5, 0x19, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000240)={0x7, 0xfffff60b, 0xfffffff9, 0x9, 0x2}) r5 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0x40405515, &(0x7f0000000ac0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8]}) 30.267231282s ago: executing program 6 (id=1830): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x70bd25, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newnexthop={0x40, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x2, 0x1}, {0x1, 0x1}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000300)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x121301, 0x0) 22.84053064s ago: executing program 6 (id=1830): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x70bd25, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newnexthop={0x40, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x2, 0x1}, {0x1, 0x1}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000300)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x121301, 0x0) 20.576336875s ago: executing program 1 (id=1957): socket(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000340)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\x02\x00\n\x03Gh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\xdbU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8fg\xf3\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99l \x97c9G\x99\xe3\xdc$\x96cu\x97\xe7\xc7a\tm4\x19t\xbds\xae\xdf\x1c2\xf79\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4', 0x3) syz_open_procfs(0x0, &(0x7f0000000600)='task\x00') syz_open_procfs(0x0, &(0x7f0000000640)='ns\x00') socket$inet6_tcp(0xa, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000680), 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x400000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f0000000f00)='syzkaller\x00'}, 0x94) r0 = socket(0x10, 0x2, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009", @ANYRES32=r0], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 20.117311046s ago: executing program 6 (id=1830): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x70bd25, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newnexthop={0x40, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x2, 0x1}, {0x1, 0x1}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000300)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x121301, 0x0) 17.756117673s ago: executing program 1 (id=1959): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x143102) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x0, 0x521, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f00000005c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000600)='source', &(0x7f0000000640)='c:::\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x30}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 15.651553834s ago: executing program 1 (id=1961): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x7, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x409, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4c, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x404c000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15.639931223s ago: executing program 3 (id=1962): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, 0x0, &(0x7f0000000080)) 13.954609474s ago: executing program 3 (id=1964): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/bdi/1:0/strict_limit\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)="3199", 0x2) 13.550970964s ago: executing program 6 (id=1830): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x70bd25, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newnexthop={0x40, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x2, 0x1}, {0x1, 0x1}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000300)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x121301, 0x0) 11.23418752s ago: executing program 1 (id=1966): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000195c0)={0x2020}, 0x2020) 11.23405663s ago: executing program 3 (id=1967): syz_usb_connect(0x6, 0x371, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x7, 0x7ffc0001}]}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) sysfs$3(0x3) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x842, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0xa}}, 0x20) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18) unshare(0x20000) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='measu', 0x5) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) 9.442045702s ago: executing program 1 (id=1968): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000200)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000019240)={0x0, 0x0, &(0x7f0000019280)={&(0x7f00000192c0)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) 7.540078789s ago: executing program 3 (id=1970): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x4000) 7.429715471s ago: executing program 5 (id=1971): syz_ublk_setup_io_uring(0x3631, 0x0, 0x0, &(0x7f0000000280), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0x7}]}, @ptr={0xe}]}, {0x0, [0x5f, 0x2e, 0x61]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.338158757s ago: executing program 3 (id=1972): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, 0x0, &(0x7f0000000080)) 6.280014049s ago: executing program 6 (id=1830): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x70bd25, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newnexthop={0x40, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x2, 0x1}, {0x1, 0x1}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000300)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x121301, 0x0) 6.258530959s ago: executing program 5 (id=1973): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x3631, &(0x7f0000000040)={0x0, 0x30b8, 0x1, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0x7}]}, @ptr={0xe}]}, {0x0, [0x5f, 0x2e, 0x61]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xd}}}, &(0x7f0000000480)) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)='5', 0x1, 0x20000000, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}}) shutdown(0xffffffffffffffff, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f00000002c0)=0x18, 0x4) 1.358283217s ago: executing program 5 (id=1974): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000200)='silent\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x11, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x800040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x80001, 0x0) write(r2, &(0x7f0000000140)='off', 0x3) 1.357676057s ago: executing program 1 (id=1975): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x7, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x409, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4c, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x404c000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.357136607s ago: executing program 3 (id=1976): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000140)={0x1, 0x2, 0xffffffff, 0x0, 0x4eb}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x1ff) setns(0xc9, 0x0) r4 = timerfd_create(0x0, 0x80000) timerfd_settime(r4, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) setreuid(0xee01, 0xee01) close(r1) 885.212878ms ago: executing program 5 (id=1977): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}]}]}, 0x38}}, 0x0) 614.655695ms ago: executing program 5 (id=1978): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)='exfat\x00', 0x8080, &(0x7f0000000440)='discard') ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) epoll_create1(0x80000) read$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r1 = io_uring_setup(0x2e06, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) setrlimit(0x7, &(0x7f0000000100)={0x4, 0x100}) socket$pppl2tp(0x18, 0x1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) 49.431778ms ago: executing program 6 (id=1830): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x70bd25, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newnexthop={0x40, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x2, 0x1}, {0x1, 0x1}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000300)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x121301, 0x0) 0s ago: executing program 5 (id=1979): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x143102) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x0, 0x521, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f00000005c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000600)='source', &(0x7f0000000640)='c:::\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x30}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0 PID: 12520 Comm: syz.4.1564 Not tainted syzkaller #0 [ 1336.114077][T12520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1336.124293][T12520] Call Trace: [ 1336.127621][T12520] [ 1336.130594][T12520] dump_stack_lvl+0x18c/0x250 [ 1336.135348][T12520] ? show_regs_print_info+0x20/0x20 [ 1336.140604][T12520] ? load_image+0x420/0x420 [ 1336.145171][T12520] ? __might_sleep+0xe0/0xe0 [ 1336.149830][T12520] ? __lock_acquire+0x7eb0/0x7eb0 [ 1336.154911][T12520] should_fail_ex+0x394/0x4c0 [ 1336.159662][T12520] should_failslab+0x9/0x20 [ 1336.164224][T12520] slab_pre_alloc_hook+0x59/0x300 [ 1336.169300][T12520] ? snd_seq_oss_readq_new+0x51/0x250 [ 1336.174733][T12520] __kmem_cache_alloc_node+0x53/0x250 [ 1336.180179][T12520] ? snd_seq_oss_readq_new+0x51/0x250 [ 1336.185608][T12520] kmalloc_trace+0x2a/0xe0 [ 1336.190130][T12520] snd_seq_oss_readq_new+0x51/0x250 [ 1336.195393][T12520] snd_seq_oss_open+0x807/0xf10 [ 1336.200309][T12520] ? snd_seq_oss_delete_client+0x50/0x50 [ 1336.206050][T12520] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1336.212284][T12520] ? soundcore_open+0x274/0x4c0 [ 1336.217218][T12520] ? odev_open+0x5c/0xa0 [ 1336.221519][T12520] ? __lock_acquire+0x7eb0/0x7eb0 [ 1336.226599][T12520] ? snd_seq_oss_process_event+0x2a30/0x2a30 [ 1336.232646][T12520] ? async_call_lookup_ports+0x20/0x20 [ 1336.238179][T12520] ? do_raw_spin_unlock+0x121/0x230 [ 1336.243453][T12520] ? soundcore_open+0x310/0x4c0 [ 1336.248374][T12520] odev_open+0x67/0xa0 [ 1336.252507][T12520] chrdev_open+0x58c/0x600 [ 1336.256977][T12520] ? cd_forget+0x160/0x160 [ 1336.261454][T12520] ? fsnotify_perm+0x3ed/0x5e0 [ 1336.266311][T12520] do_dentry_open+0x880/0x14b0 [ 1336.271141][T12520] ? cd_forget+0x160/0x160 [ 1336.275620][T12520] path_openat+0x284f/0x3270 [ 1336.280287][T12520] ? do_sys_openat2+0xda/0x1d0 [ 1336.285110][T12520] ? __x64_sys_openat+0x139/0x160 [ 1336.290197][T12520] ? verify_lock_unused+0x140/0x140 [ 1336.295451][T12520] ? do_filp_open+0x430/0x430 [ 1336.300199][T12520] do_filp_open+0x1f2/0x430 [ 1336.304759][T12520] ? vfs_tmpfile+0x620/0x620 [ 1336.309424][T12520] ? _raw_spin_unlock+0x28/0x40 [ 1336.314335][T12520] ? alloc_fd+0x590/0x640 [ 1336.318726][T12520] do_sys_openat2+0x134/0x1d0 [ 1336.323464][T12520] ? do_sys_open+0xe0/0xe0 [ 1336.327939][T12520] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1336.333988][T12520] ? lock_chain_count+0x20/0x20 [ 1336.338901][T12520] __x64_sys_openat+0x139/0x160 [ 1336.343814][T12520] do_syscall_64+0x55/0xb0 [ 1336.348278][T12520] ? clear_bhb_loop+0x40/0x90 [ 1336.353006][T12520] ? clear_bhb_loop+0x40/0x90 [ 1336.357734][T12520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1336.363891][T12520] RIP: 0033:0x7efcc0b9f559 [ 1336.368382][T12520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1336.388058][T12520] RSP: 002b:00007efcc1aaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1336.396801][T12520] RAX: ffffffffffffffda RBX: 00007efcc0e25fa0 RCX: 00007efcc0b9f559 [ 1336.404836][T12520] RDX: 0000000000080a02 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1336.412870][T12520] RBP: 00007efcc0c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1336.420894][T12520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1336.428934][T12520] R13: 00007efcc0e26038 R14: 00007efcc0e25fa0 R15: 00007ffe896c4448 [ 1336.436984][T12520] [ 1336.905581][T12524] kvm: user requested TSC rate below hardware speed [ 1340.143589][T12542] 9pnet_fd: Insufficient options for proto=fd [ 1342.394315][T12548] FAULT_INJECTION: forcing a failure. [ 1342.394315][T12548] name failslab, interval 1, probability 0, space 0, times 0 [ 1342.409280][T12548] CPU: 0 PID: 12548 Comm: syz.4.1568 Not tainted syzkaller #0 [ 1342.416814][T12548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1342.426954][T12548] Call Trace: [ 1342.430285][T12548] [ 1342.433262][T12548] dump_stack_lvl+0x18c/0x250 [ 1342.438010][T12548] ? show_regs_print_info+0x20/0x20 [ 1342.443269][T12548] ? load_image+0x420/0x420 [ 1342.447853][T12548] ? __lock_acquire+0x7eb0/0x7eb0 [ 1342.452955][T12548] should_fail_ex+0x394/0x4c0 [ 1342.457801][T12548] should_failslab+0x9/0x20 [ 1342.462378][T12548] slab_pre_alloc_hook+0x59/0x300 [ 1342.467452][T12548] ? tty_ldisc_setup+0xbd/0x240 [ 1342.472359][T12548] ? tty_init_dev+0x275/0x4c0 [ 1342.477095][T12548] ? ptmx_open+0xdf/0x2c0 [ 1342.481489][T12548] kmem_cache_alloc_node+0x5e/0x310 [ 1342.486755][T12548] ? alloc_vmap_area+0x1b4/0x1e50 [ 1342.491861][T12548] alloc_vmap_area+0x1b4/0x1e50 [ 1342.496803][T12548] ? vm_map_ram+0xcf0/0xcf0 [ 1342.501380][T12548] ? rcu_is_watching+0x15/0xb0 [ 1342.506214][T12548] __get_vm_area_node+0x162/0x370 [ 1342.511318][T12548] __vmalloc_node_range+0x36f/0x1320 [ 1342.516675][T12548] ? n_tty_open+0x1d/0x150 [ 1342.521162][T12548] ? mark_lock+0x94/0x320 [ 1342.525558][T12548] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1342.531600][T12548] ? lock_chain_count+0x20/0x20 [ 1342.536521][T12548] ? free_vm_area+0x50/0x50 [ 1342.541086][T12548] ? lockdep_hardirqs_on+0x98/0x150 [ 1342.546346][T12548] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1342.552568][T12548] ? n_tty_open+0x1d/0x150 [ 1342.557054][T12548] vzalloc+0x79/0x90 [ 1342.561030][T12548] ? n_tty_open+0x1d/0x150 [ 1342.565501][T12548] n_tty_open+0x1d/0x150 [ 1342.569806][T12548] tty_ldisc_setup+0xbd/0x240 [ 1342.574559][T12548] tty_init_dev+0x275/0x4c0 [ 1342.579129][T12548] ptmx_open+0xdf/0x2c0 [ 1342.583344][T12548] ? pty_start+0x140/0x140 [ 1342.587819][T12548] chrdev_open+0x58c/0x600 [ 1342.592306][T12548] ? cd_forget+0x160/0x160 [ 1342.596782][T12548] ? fsnotify_perm+0x3ed/0x5e0 [ 1342.601640][T12548] do_dentry_open+0x880/0x14b0 [ 1342.606472][T12548] ? cd_forget+0x160/0x160 [ 1342.610964][T12548] path_openat+0x284f/0x3270 [ 1342.615634][T12548] ? do_sys_openat2+0xda/0x1d0 [ 1342.620460][T12548] ? __x64_sys_openat+0x139/0x160 [ 1342.625550][T12548] ? verify_lock_unused+0x140/0x140 [ 1342.630803][T12548] ? do_filp_open+0x430/0x430 [ 1342.635565][T12548] do_filp_open+0x1f2/0x430 [ 1342.640129][T12548] ? vfs_tmpfile+0x620/0x620 [ 1342.644842][T12548] ? _raw_spin_unlock+0x28/0x40 [ 1342.649761][T12548] ? alloc_fd+0x590/0x640 [ 1342.654185][T12548] do_sys_openat2+0x134/0x1d0 [ 1342.658947][T12548] ? do_sys_open+0xe0/0xe0 [ 1342.663437][T12548] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1342.669490][T12548] ? lock_chain_count+0x20/0x20 [ 1342.674413][T12548] __x64_sys_openat+0x139/0x160 [ 1342.679339][T12548] do_syscall_64+0x55/0xb0 [ 1342.683817][T12548] ? clear_bhb_loop+0x40/0x90 [ 1342.688556][T12548] ? clear_bhb_loop+0x40/0x90 [ 1342.693297][T12548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1342.699261][T12548] RIP: 0033:0x7efcc0b9f559 [ 1342.703735][T12548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1342.723411][T12548] RSP: 002b:00007efcc1a89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1342.731942][T12548] RAX: ffffffffffffffda RBX: 00007efcc0e26090 RCX: 00007efcc0b9f559 [ 1342.739996][T12548] RDX: 0000000000121301 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1342.748026][T12548] RBP: 00007efcc0c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1342.756061][T12548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1342.764100][T12548] R13: 00007efcc0e26128 R14: 00007efcc0e26090 R15: 00007ffe896c4448 [ 1342.772159][T12548] [ 1342.777680][T12548] syz.4.1568: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1342.794827][T12548] CPU: 0 PID: 12548 Comm: syz.4.1568 Not tainted syzkaller #0 [ 1342.802353][T12548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1342.812473][T12548] Call Trace: [ 1342.815798][T12548] [ 1342.818778][T12548] dump_stack_lvl+0x18c/0x250 [ 1342.823519][T12548] ? show_regs_print_info+0x20/0x20 [ 1342.828785][T12548] ? load_image+0x420/0x420 [ 1342.833368][T12548] ? __rcu_read_unlock+0x7c/0xd0 [ 1342.838364][T12548] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1342.844849][T12548] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1342.851430][T12548] warn_alloc+0x246/0x340 [ 1342.855918][T12548] ? slab_free_freelist_hook+0x130/0x1a0 [ 1342.861619][T12548] ? zone_watermark_ok_safe+0x230/0x230 [ 1342.867226][T12548] ? __get_vm_area_node+0x17b/0x370 [ 1342.872503][T12548] ? __get_vm_area_node+0x17b/0x370 [ 1342.877796][T12548] __vmalloc_node_range+0x394/0x1320 [ 1342.883167][T12548] ? mark_lock+0x94/0x320 [ 1342.887571][T12548] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1342.893634][T12548] ? lock_chain_count+0x20/0x20 [ 1342.898567][T12548] ? free_vm_area+0x50/0x50 [ 1342.903136][T12548] ? lockdep_hardirqs_on+0x98/0x150 [ 1342.908412][T12548] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1342.914669][T12548] ? n_tty_open+0x1d/0x150 [ 1342.919190][T12548] vzalloc+0x79/0x90 [ 1342.923175][T12548] ? n_tty_open+0x1d/0x150 [ 1342.927663][T12548] n_tty_open+0x1d/0x150 [ 1342.931994][T12548] tty_ldisc_setup+0xbd/0x240 [ 1342.936756][T12548] tty_init_dev+0x275/0x4c0 [ 1342.941330][T12548] ptmx_open+0xdf/0x2c0 [ 1342.945570][T12548] ? pty_start+0x140/0x140 [ 1342.950079][T12548] chrdev_open+0x58c/0x600 [ 1342.954584][T12548] ? cd_forget+0x160/0x160 [ 1342.959084][T12548] ? fsnotify_perm+0x3ed/0x5e0 [ 1342.963949][T12548] do_dentry_open+0x880/0x14b0 [ 1342.968802][T12548] ? cd_forget+0x160/0x160 [ 1342.973311][T12548] path_openat+0x284f/0x3270 [ 1342.978023][T12548] ? do_sys_openat2+0xda/0x1d0 [ 1342.982871][T12548] ? __x64_sys_openat+0x139/0x160 [ 1342.988011][T12548] ? verify_lock_unused+0x140/0x140 [ 1342.993300][T12548] ? do_filp_open+0x430/0x430 [ 1342.998088][T12548] do_filp_open+0x1f2/0x430 [ 1343.002683][T12548] ? vfs_tmpfile+0x620/0x620 [ 1343.007412][T12548] ? _raw_spin_unlock+0x28/0x40 [ 1343.012342][T12548] ? alloc_fd+0x590/0x640 [ 1343.016760][T12548] do_sys_openat2+0x134/0x1d0 [ 1343.021619][T12548] ? do_sys_open+0xe0/0xe0 [ 1343.026125][T12548] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1343.032182][T12548] ? lock_chain_count+0x20/0x20 [ 1343.037343][T12548] __x64_sys_openat+0x139/0x160 [ 1343.042365][T12548] do_syscall_64+0x55/0xb0 [ 1343.046843][T12548] ? clear_bhb_loop+0x40/0x90 [ 1343.051609][T12548] ? clear_bhb_loop+0x40/0x90 [ 1343.056363][T12548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1343.062399][T12548] RIP: 0033:0x7efcc0b9f559 [ 1343.066899][T12548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1343.086570][T12548] RSP: 002b:00007efcc1a89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1343.095048][T12548] RAX: ffffffffffffffda RBX: 00007efcc0e26090 RCX: 00007efcc0b9f559 [ 1343.103081][T12548] RDX: 0000000000121301 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1343.111114][T12548] RBP: 00007efcc0c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1343.119230][T12548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1343.127283][T12548] R13: 00007efcc0e26128 R14: 00007efcc0e26090 R15: 00007ffe896c4448 [ 1343.135349][T12548] [ 1343.141408][T12548] Mem-Info: [ 1343.145811][T12548] active_anon:54158 inactive_anon:0 isolated_anon:0 [ 1343.145811][T12548] active_file:18492 inactive_file:40550 isolated_file:0 [ 1343.145811][T12548] unevictable:768 dirty:115 writeback:0 [ 1343.145811][T12548] slab_reclaimable:11956 slab_unreclaimable:95050 [ 1343.145811][T12548] mapped:36776 shmem:49520 pagetables:644 [ 1343.145811][T12548] sec_pagetables:0 bounce:0 [ 1343.145811][T12548] kernel_misc_reclaimable:0 [ 1343.145811][T12548] free:1291159 free_pcp:6323 free_cma:0 [ 1343.194303][T12548] Node 0 active_anon:217732kB inactive_anon:0kB active_file:73968kB inactive_file:162000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147104kB dirty:460kB writeback:0kB shmem:197544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11044kB pagetables:2576kB sec_pagetables:0kB all_unreclaimable? no [ 1343.228300][T12548] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1343.260087][T12548] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1343.288297][T12548] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 1343.297300][T12548] Node 0 DMA32 free:1260920kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:219896kB inactive_anon:0kB active_file:73968kB inactive_file:160912kB unevictable:1536kB writepending:460kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:3184kB local_pcp:1392kB free_cma:0kB [ 1343.330757][T12548] lowmem_reserve[]: 0 0 1 1 1 [ 1343.336286][T12548] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:1088kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1343.366641][T12548] lowmem_reserve[]: 0 0 0 0 0 [ 1343.374029][T12548] Node 1 Normal free:3885076kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22080kB local_pcp:8928kB free_cma:0kB [ 1343.662236][T12548] lowmem_reserve[]: 0 0 0 0 0 [ 1343.667051][T12548] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1343.680280][T12548] Node 0 DMA32: 58*4kB (UM) 615*8kB (UE) 151*16kB (UME) 122*32kB (UM) 256*64kB (UME) 117*128kB (UME) 9*256kB (UE) 30*512kB (UM) 41*1024kB (UM) 19*2048kB (UM) 270*4096kB (UM) = 1247312kB [ 1343.698947][T12548] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1343.710900][T12548] Node 1 Normal: 229*4kB (UM) 60*8kB (UME) 44*16kB (UME) 109*32kB (UME) 31*64kB (UME) 5*128kB (UE) 2*256kB (UE) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 945*4096kB (M) = 3885076kB [ 1343.780974][T12548] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1343.790602][T12548] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1343.799950][T12548] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1343.873393][T12548] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1343.882817][T12548] 115712 total pagecache pages [ 1343.887590][T12548] 0 pages in swap cache [ 1343.891897][T12548] Free swap = 124472kB [ 1343.896059][T12548] Total swap = 124996kB [ 1343.900235][T12548] 2097051 pages RAM [ 1343.960882][T12548] 0 pages HighMem/MovableOnly [ 1343.965636][T12548] 421118 pages reserved [ 1343.969799][T12548] 0 pages cma reserved [ 1343.974006][T12548] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1345.973315][ T12] rpcbind: server 127.0.0.1 not responding, timed out [ 1351.850560][T12581] 9pnet_fd: Insufficient options for proto=fd [ 1354.250216][T12587] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1354.395541][T12600] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16) [ 1356.332666][T11142] Bluetooth: hci1: command 0x0406 tx timeout [ 1357.541095][T12614] 9pnet_fd: Insufficient options for proto=fd [ 1361.647403][T12641] comedi comedi3: board detection failed [ 1361.670383][T12641] netlink: 'syz.5.1584': attribute type 10 has an invalid length. [ 1361.682570][T12641] bridge0: port 3(netdevsim0) entered disabled state [ 1361.689564][T12641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.696957][T12641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.011328][T12644] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16) [ 1362.019666][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.026287][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.511403][T12680] comedi comedi3: board detection failed [ 1369.536467][T12680] netlink: 'syz.4.1604': attribute type 10 has an invalid length. [ 1369.769931][T12682] 9pnet_fd: Insufficient options for proto=fd [ 1370.738613][T12680] bridge0: port 3(netdevsim0) entered disabled state [ 1370.745572][T12680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.752885][T12680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.184481][T12693] FAULT_INJECTION: forcing a failure. [ 1372.184481][T12693] name failslab, interval 1, probability 0, space 0, times 0 [ 1372.197611][T12693] CPU: 0 PID: 12693 Comm: syz.4.1608 Not tainted syzkaller #0 [ 1372.205227][T12693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1372.215338][T12693] Call Trace: [ 1372.218679][T12693] [ 1372.221657][T12693] dump_stack_lvl+0x18c/0x250 [ 1372.226399][T12693] ? show_regs_print_info+0x20/0x20 [ 1372.231652][T12693] ? load_image+0x420/0x420 [ 1372.236236][T12693] ? __lock_acquire+0x7eb0/0x7eb0 [ 1372.241329][T12693] should_fail_ex+0x394/0x4c0 [ 1372.246081][T12693] should_failslab+0x9/0x20 [ 1372.250667][T12693] slab_pre_alloc_hook+0x59/0x300 [ 1372.255756][T12693] ? tty_ldisc_setup+0xbd/0x240 [ 1372.260666][T12693] ? tty_init_dev+0x275/0x4c0 [ 1372.265428][T12693] ? ptmx_open+0xdf/0x2c0 [ 1372.269847][T12693] kmem_cache_alloc_node+0x5e/0x310 [ 1372.275126][T12693] ? alloc_vmap_area+0x1b4/0x1e50 [ 1372.280234][T12693] alloc_vmap_area+0x1b4/0x1e50 [ 1372.285261][T12693] ? vm_map_ram+0xcf0/0xcf0 [ 1372.289829][T12693] ? rcu_is_watching+0x15/0xb0 [ 1372.294678][T12693] __get_vm_area_node+0x162/0x370 [ 1372.299773][T12693] __vmalloc_node_range+0x36f/0x1320 [ 1372.305134][T12693] ? n_tty_open+0x1d/0x150 [ 1372.309665][T12693] ? lockdep_hardirqs_on+0x98/0x150 [ 1372.314940][T12693] ? free_vm_area+0x50/0x50 [ 1372.319506][T12693] ? __might_sleep+0xe0/0xe0 [ 1372.324166][T12693] ? n_tty_open+0x1d/0x150 [ 1372.328670][T12693] vzalloc+0x79/0x90 [ 1372.332628][T12693] ? n_tty_open+0x1d/0x150 [ 1372.337111][T12693] n_tty_open+0x1d/0x150 [ 1372.341421][T12693] tty_ldisc_setup+0xbd/0x240 [ 1372.346177][T12693] tty_init_dev+0x275/0x4c0 [ 1372.350856][T12693] ptmx_open+0xdf/0x2c0 [ 1372.355071][T12693] ? pty_start+0x140/0x140 [ 1372.359583][T12693] chrdev_open+0x58c/0x600 [ 1372.364071][T12693] ? cd_forget+0x160/0x160 [ 1372.368560][T12693] ? fsnotify_perm+0x3ed/0x5e0 [ 1372.373392][T12693] do_dentry_open+0x880/0x14b0 [ 1372.378226][T12693] ? cd_forget+0x160/0x160 [ 1372.382709][T12693] path_openat+0x284f/0x3270 [ 1372.387474][T12693] ? do_sys_openat2+0xda/0x1d0 [ 1372.392297][T12693] ? __x64_sys_openat+0x139/0x160 [ 1372.397393][T12693] ? verify_lock_unused+0x140/0x140 [ 1372.402692][T12693] ? do_filp_open+0x430/0x430 [ 1372.407450][T12693] do_filp_open+0x1f2/0x430 [ 1372.412018][T12693] ? vfs_tmpfile+0x620/0x620 [ 1372.416695][T12693] ? _raw_spin_unlock+0x28/0x40 [ 1372.421615][T12693] ? alloc_fd+0x590/0x640 [ 1372.426017][T12693] do_sys_openat2+0x134/0x1d0 [ 1372.430763][T12693] ? do_sys_open+0xe0/0xe0 [ 1372.435247][T12693] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1372.441292][T12693] ? lock_chain_count+0x20/0x20 [ 1372.447032][T12693] __x64_sys_openat+0x139/0x160 [ 1372.452057][T12693] do_syscall_64+0x55/0xb0 [ 1372.456566][T12693] ? clear_bhb_loop+0x40/0x90 [ 1372.461293][T12693] ? clear_bhb_loop+0x40/0x90 [ 1372.466024][T12693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1372.471994][T12693] RIP: 0033:0x7efcc0b9f559 [ 1372.476472][T12693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1372.496237][T12693] RSP: 002b:00007efcc1a89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1372.504721][T12693] RAX: ffffffffffffffda RBX: 00007efcc0e26090 RCX: 00007efcc0b9f559 [ 1372.512754][T12693] RDX: 0000000000121301 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1372.520788][T12693] RBP: 00007efcc0c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1372.528842][T12693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1372.536958][T12693] R13: 00007efcc0e26128 R14: 00007efcc0e26090 R15: 00007ffe896c4448 [ 1372.545007][T12693] [ 1372.553554][T12693] syz.4.1608: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1372.573584][T12693] CPU: 0 PID: 12693 Comm: syz.4.1608 Not tainted syzkaller #0 [ 1372.581121][T12693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1372.591243][T12693] Call Trace: [ 1372.594569][T12693] [ 1372.597544][T12693] dump_stack_lvl+0x18c/0x250 [ 1372.602314][T12693] ? show_regs_print_info+0x20/0x20 [ 1372.607565][T12693] ? load_image+0x420/0x420 [ 1372.612138][T12693] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1372.618643][T12693] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1372.625214][T12693] warn_alloc+0x246/0x340 [ 1372.629604][T12693] ? slab_free_freelist_hook+0x130/0x1a0 [ 1372.635305][T12693] ? zone_watermark_ok_safe+0x230/0x230 [ 1372.640910][T12693] ? __get_vm_area_node+0x17b/0x370 [ 1372.646186][T12693] ? __get_vm_area_node+0x17b/0x370 [ 1372.651458][T12693] __vmalloc_node_range+0x394/0x1320 [ 1372.656822][T12693] ? lockdep_hardirqs_on+0x98/0x150 [ 1372.662133][T12693] ? free_vm_area+0x50/0x50 [ 1372.666713][T12693] ? __might_sleep+0xe0/0xe0 [ 1372.671385][T12693] ? n_tty_open+0x1d/0x150 [ 1372.675869][T12693] vzalloc+0x79/0x90 [ 1372.679834][T12693] ? n_tty_open+0x1d/0x150 [ 1372.684328][T12693] n_tty_open+0x1d/0x150 [ 1372.688638][T12693] tty_ldisc_setup+0xbd/0x240 [ 1372.693377][T12693] tty_init_dev+0x275/0x4c0 [ 1372.697948][T12693] ptmx_open+0xdf/0x2c0 [ 1372.702159][T12693] ? pty_start+0x140/0x140 [ 1372.706646][T12693] chrdev_open+0x58c/0x600 [ 1372.711129][T12693] ? cd_forget+0x160/0x160 [ 1372.715609][T12693] ? fsnotify_perm+0x3ed/0x5e0 [ 1372.720437][T12693] do_dentry_open+0x880/0x14b0 [ 1372.725269][T12693] ? cd_forget+0x160/0x160 [ 1372.729774][T12693] path_openat+0x284f/0x3270 [ 1372.734464][T12693] ? do_sys_openat2+0xda/0x1d0 [ 1372.739295][T12693] ? __x64_sys_openat+0x139/0x160 [ 1372.744398][T12693] ? verify_lock_unused+0x140/0x140 [ 1372.749664][T12693] ? do_filp_open+0x430/0x430 [ 1372.754422][T12693] do_filp_open+0x1f2/0x430 [ 1372.758994][T12693] ? vfs_tmpfile+0x620/0x620 [ 1372.763718][T12693] ? _raw_spin_unlock+0x28/0x40 [ 1372.768907][T12693] ? alloc_fd+0x590/0x640 [ 1372.773316][T12693] do_sys_openat2+0x134/0x1d0 [ 1372.778067][T12693] ? do_sys_open+0xe0/0xe0 [ 1372.782553][T12693] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1372.788695][T12693] ? lock_chain_count+0x20/0x20 [ 1372.793620][T12693] __x64_sys_openat+0x139/0x160 [ 1372.798580][T12693] do_syscall_64+0x55/0xb0 [ 1372.803045][T12693] ? clear_bhb_loop+0x40/0x90 [ 1372.807773][T12693] ? clear_bhb_loop+0x40/0x90 [ 1372.812519][T12693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1372.818576][T12693] RIP: 0033:0x7efcc0b9f559 [ 1372.823053][T12693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1372.842723][T12693] RSP: 002b:00007efcc1a89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1372.851200][T12693] RAX: ffffffffffffffda RBX: 00007efcc0e26090 RCX: 00007efcc0b9f559 [ 1372.859235][T12693] RDX: 0000000000121301 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1372.867264][T12693] RBP: 00007efcc0c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1372.875320][T12693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1372.883355][T12693] R13: 00007efcc0e26128 R14: 00007efcc0e26090 R15: 00007ffe896c4448 [ 1372.891412][T12693] [ 1372.896359][T12693] Mem-Info: [ 1372.899941][T12693] active_anon:58621 inactive_anon:0 isolated_anon:0 [ 1372.899941][T12693] active_file:18492 inactive_file:40562 isolated_file:0 [ 1372.899941][T12693] unevictable:768 dirty:72 writeback:0 [ 1372.899941][T12693] slab_reclaimable:12068 slab_unreclaimable:94730 [ 1372.899941][T12693] mapped:41656 shmem:53881 pagetables:701 [ 1372.899941][T12693] sec_pagetables:0 bounce:0 [ 1372.899941][T12693] kernel_misc_reclaimable:0 [ 1372.899941][T12693] free:1287025 free_pcp:6010 free_cma:0 [ 1372.946807][T12693] Node 0 active_anon:235384kB inactive_anon:0kB active_file:73968kB inactive_file:162048kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:166624kB dirty:288kB writeback:0kB shmem:214988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10900kB pagetables:2804kB sec_pagetables:0kB all_unreclaimable? no [ 1372.982349][T12693] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1373.012979][T12693] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1373.042975][T12693] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 1373.049971][T12693] Node 0 DMA32 free:1244636kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:237548kB inactive_anon:0kB active_file:73968kB inactive_file:160960kB unevictable:1536kB writepending:288kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:1848kB local_pcp:760kB free_cma:0kB [ 1373.083915][T12693] lowmem_reserve[]: 0 0 1 1 1 [ 1373.093091][T12693] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:1088kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1373.121925][T12693] lowmem_reserve[]: 0 0 0 0 0 [ 1373.129861][T12693] Node 1 Normal free:3885076kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22080kB local_pcp:8928kB free_cma:0kB [ 1373.160879][T12693] lowmem_reserve[]: 0 0 0 0 0 [ 1373.166430][T12693] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1373.184594][T12693] Node 0 DMA32: 60*4kB (UM) 583*8kB (UE) 178*16kB (UE) 150*32kB (UE) 262*64kB (UM) 115*128kB (UME) 25*256kB (UME) 9*512kB (UM) 31*1024kB (UM) 14*2048kB (UM) 275*4096kB (UM) = 1241864kB [ 1373.214901][T12693] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1373.234073][T12693] Node 1 Normal: 229*4kB (UM) 60*8kB (UME) 44*16kB (UME) 109*32kB (UME) 31*64kB (UME) 5*128kB (UE) 2*256kB (UE) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 945*4096kB (M) = 3885076kB [ 1373.262071][T12693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1373.271925][T12693] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1373.281930][T12693] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1373.293077][T12693] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1373.306067][T12693] 114960 total pagecache pages [ 1373.313073][T12693] 0 pages in swap cache [ 1373.318069][T12693] Free swap = 124472kB [ 1373.323073][T12693] Total swap = 124996kB [ 1373.328256][T12693] 2097051 pages RAM [ 1373.333779][T12693] 0 pages HighMem/MovableOnly [ 1373.339028][T12693] 421118 pages reserved [ 1373.345066][T12693] 0 pages cma reserved [ 1373.352070][T12693] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1376.931051][T12715] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16) [ 1377.109656][T12717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1613'. [ 1377.155363][T12717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1613'. [ 1378.732625][T12721] 9pnet_fd: Insufficient options for proto=fd [ 1379.806226][T12730] comedi comedi3: board detection failed [ 1380.041248][T12732] netlink: 'syz.4.1616': attribute type 10 has an invalid length. [ 1382.828148][T12744] FAULT_INJECTION: forcing a failure. [ 1382.828148][T12744] name failslab, interval 1, probability 0, space 0, times 0 [ 1382.841433][T12744] CPU: 0 PID: 12744 Comm: syz.4.1619 Not tainted syzkaller #0 [ 1382.848993][T12744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1382.859123][T12744] Call Trace: [ 1382.862463][T12744] [ 1382.865465][T12744] dump_stack_lvl+0x18c/0x250 [ 1382.870216][T12744] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1382.876440][T12744] ? show_regs_print_info+0x20/0x20 [ 1382.881703][T12744] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1382.887956][T12744] should_fail_ex+0x394/0x4c0 [ 1382.892740][T12744] should_failslab+0x9/0x20 [ 1382.897360][T12744] slab_pre_alloc_hook+0x59/0x300 [ 1382.902541][T12744] ? tty_ldisc_setup+0xbd/0x240 [ 1382.907637][T12744] ? tty_init_dev+0x275/0x4c0 [ 1382.912384][T12744] ? ptmx_open+0xdf/0x2c0 [ 1382.916783][T12744] kmem_cache_alloc_node+0x5e/0x310 [ 1382.922057][T12744] ? alloc_vmap_area+0x1b4/0x1e50 [ 1382.927236][T12744] alloc_vmap_area+0x1b4/0x1e50 [ 1382.932178][T12744] ? vm_map_ram+0xcf0/0xcf0 [ 1382.936754][T12744] ? rcu_is_watching+0x15/0xb0 [ 1382.941677][T12744] __get_vm_area_node+0x162/0x370 [ 1382.946868][T12744] __vmalloc_node_range+0x36f/0x1320 [ 1382.952226][T12744] ? n_tty_open+0x1d/0x150 [ 1382.956731][T12744] ? lockdep_hardirqs_on+0x98/0x150 [ 1382.962025][T12744] ? free_vm_area+0x50/0x50 [ 1382.966605][T12744] ? __might_sleep+0xe0/0xe0 [ 1382.971270][T12744] ? n_tty_open+0x1d/0x150 [ 1382.975755][T12744] vzalloc+0x79/0x90 [ 1382.979744][T12744] ? n_tty_open+0x1d/0x150 [ 1382.984237][T12744] n_tty_open+0x1d/0x150 [ 1382.988566][T12744] tty_ldisc_setup+0xbd/0x240 [ 1382.993490][T12744] tty_init_dev+0x275/0x4c0 [ 1382.998078][T12744] ptmx_open+0xdf/0x2c0 [ 1383.002296][T12744] ? pty_start+0x140/0x140 [ 1383.006778][T12744] chrdev_open+0x58c/0x600 [ 1383.011258][T12744] ? cd_forget+0x160/0x160 [ 1383.015733][T12744] ? fsnotify_perm+0x3e8/0x5e0 [ 1383.020562][T12744] ? fsnotify_perm+0x3ed/0x5e0 [ 1383.025394][T12744] do_dentry_open+0x880/0x14b0 [ 1383.030233][T12744] ? cd_forget+0x160/0x160 [ 1383.034756][T12744] path_openat+0x284f/0x3270 [ 1383.039455][T12744] ? do_sys_openat2+0xda/0x1d0 [ 1383.044293][T12744] ? __x64_sys_openat+0x139/0x160 [ 1383.049381][T12744] ? verify_lock_unused+0x140/0x140 [ 1383.054668][T12744] ? do_filp_open+0x430/0x430 [ 1383.059440][T12744] do_filp_open+0x1f2/0x430 [ 1383.064034][T12744] ? vfs_tmpfile+0x620/0x620 [ 1383.068714][T12744] ? _raw_spin_unlock+0x28/0x40 [ 1383.073635][T12744] ? alloc_fd+0x590/0x640 [ 1383.078043][T12744] do_sys_openat2+0x134/0x1d0 [ 1383.082917][T12744] ? do_sys_open+0xe0/0xe0 [ 1383.087439][T12744] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1383.093502][T12744] ? lock_chain_count+0x20/0x20 [ 1383.098430][T12744] __x64_sys_openat+0x139/0x160 [ 1383.103367][T12744] do_syscall_64+0x55/0xb0 [ 1383.107856][T12744] ? clear_bhb_loop+0x40/0x90 [ 1383.112594][T12744] ? clear_bhb_loop+0x40/0x90 [ 1383.117332][T12744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1383.123304][T12744] RIP: 0033:0x7efcc0b9f559 [ 1383.127783][T12744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1383.147458][T12744] RSP: 002b:00007efcc1a89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1383.155953][T12744] RAX: ffffffffffffffda RBX: 00007efcc0e26090 RCX: 00007efcc0b9f559 [ 1383.164010][T12744] RDX: 0000000000121301 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1383.172066][T12744] RBP: 00007efcc0c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1383.180125][T12744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1383.188171][T12744] R13: 00007efcc0e26128 R14: 00007efcc0e26090 R15: 00007ffe896c4448 [ 1383.196228][T12744] [ 1383.205962][T12744] syz.4.1619: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1383.224088][T12744] CPU: 0 PID: 12744 Comm: syz.4.1619 Not tainted syzkaller #0 [ 1383.231622][T12744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1383.241737][T12744] Call Trace: [ 1383.245065][T12744] [ 1383.248044][T12744] dump_stack_lvl+0x18c/0x250 [ 1383.252788][T12744] ? show_regs_print_info+0x20/0x20 [ 1383.258046][T12744] ? load_image+0x420/0x420 [ 1383.262617][T12744] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1383.269135][T12744] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1383.275715][T12744] warn_alloc+0x246/0x340 [ 1383.280117][T12744] ? zone_watermark_ok_safe+0x230/0x230 [ 1383.285756][T12744] ? lockdep_hardirqs_on+0x98/0x150 [ 1383.291116][T12744] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1383.297435][T12744] __vmalloc_node_range+0x394/0x1320 [ 1383.302811][T12744] ? lockdep_hardirqs_on+0x98/0x150 [ 1383.308095][T12744] ? free_vm_area+0x50/0x50 [ 1383.312673][T12744] ? __might_sleep+0xe0/0xe0 [ 1383.317330][T12744] ? n_tty_open+0x1d/0x150 [ 1383.321817][T12744] vzalloc+0x79/0x90 [ 1383.325790][T12744] ? n_tty_open+0x1d/0x150 [ 1383.330275][T12744] n_tty_open+0x1d/0x150 [ 1383.334583][T12744] tty_ldisc_setup+0xbd/0x240 [ 1383.339325][T12744] tty_init_dev+0x275/0x4c0 [ 1383.343897][T12744] ptmx_open+0xdf/0x2c0 [ 1383.348118][T12744] ? pty_start+0x140/0x140 [ 1383.352604][T12744] chrdev_open+0x58c/0x600 [ 1383.357087][T12744] ? cd_forget+0x160/0x160 [ 1383.361562][T12744] ? fsnotify_perm+0x3e8/0x5e0 [ 1383.366437][T12744] ? fsnotify_perm+0x3ed/0x5e0 [ 1383.371276][T12744] do_dentry_open+0x880/0x14b0 [ 1383.376117][T12744] ? cd_forget+0x160/0x160 [ 1383.380598][T12744] path_openat+0x284f/0x3270 [ 1383.385278][T12744] ? do_sys_openat2+0xda/0x1d0 [ 1383.390102][T12744] ? __x64_sys_openat+0x139/0x160 [ 1383.395197][T12744] ? verify_lock_unused+0x140/0x140 [ 1383.400493][T12744] ? do_filp_open+0x430/0x430 [ 1383.405251][T12744] do_filp_open+0x1f2/0x430 [ 1383.409832][T12744] ? vfs_tmpfile+0x620/0x620 [ 1383.414507][T12744] ? _raw_spin_unlock+0x28/0x40 [ 1383.419420][T12744] ? alloc_fd+0x590/0x640 [ 1383.423855][T12744] do_sys_openat2+0x134/0x1d0 [ 1383.428602][T12744] ? do_sys_open+0xe0/0xe0 [ 1383.433096][T12744] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1383.439148][T12744] ? lock_chain_count+0x20/0x20 [ 1383.444089][T12744] __x64_sys_openat+0x139/0x160 [ 1383.449125][T12744] do_syscall_64+0x55/0xb0 [ 1383.453603][T12744] ? clear_bhb_loop+0x40/0x90 [ 1383.458334][T12744] ? clear_bhb_loop+0x40/0x90 [ 1383.463078][T12744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1383.469058][T12744] RIP: 0033:0x7efcc0b9f559 [ 1383.473561][T12744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1383.493328][T12744] RSP: 002b:00007efcc1a89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1383.501930][T12744] RAX: ffffffffffffffda RBX: 00007efcc0e26090 RCX: 00007efcc0b9f559 [ 1383.509975][T12744] RDX: 0000000000121301 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1383.518003][T12744] RBP: 00007efcc0c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1383.526034][T12744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1383.534061][T12744] R13: 00007efcc0e26128 R14: 00007efcc0e26090 R15: 00007ffe896c4448 [ 1383.542113][T12744] [ 1383.547147][T12744] Mem-Info: [ 1383.550751][T12744] active_anon:56831 inactive_anon:0 isolated_anon:0 [ 1383.550751][T12744] active_file:18492 inactive_file:40566 isolated_file:0 [ 1383.550751][T12744] unevictable:768 dirty:91 writeback:0 [ 1383.550751][T12744] slab_reclaimable:11938 slab_unreclaimable:94553 [ 1383.550751][T12744] mapped:36767 shmem:52121 pagetables:640 [ 1383.550751][T12744] sec_pagetables:0 bounce:0 [ 1383.550751][T12744] kernel_misc_reclaimable:0 [ 1383.550751][T12744] free:1288898 free_pcp:6132 free_cma:0 [ 1383.598442][T12744] Node 0 active_anon:228424kB inactive_anon:0kB active_file:73968kB inactive_file:162064kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147068kB dirty:364kB writeback:0kB shmem:208048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10988kB pagetables:2560kB sec_pagetables:0kB all_unreclaimable? no [ 1383.634291][T12744] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1383.665287][T12744] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1383.693438][T12744] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 1383.700442][T12744] Node 0 DMA32 free:1251876kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:230488kB inactive_anon:0kB active_file:73968kB inactive_file:160976kB unevictable:1536kB writepending:364kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:2480kB local_pcp:1272kB free_cma:0kB [ 1383.735997][T12744] lowmem_reserve[]: 0 0 1 1 1 [ 1383.744088][T12744] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:1088kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1383.773421][T12744] lowmem_reserve[]: 0 0 0 0 0 [ 1383.779760][T12744] Node 1 Normal free:3885076kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22080kB local_pcp:8928kB free_cma:0kB [ 1383.809890][T12744] lowmem_reserve[]: 0 0 0 0 0 [ 1383.815486][T12744] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1383.835932][T12744] Node 0 DMA32: 0*4kB 508*8kB (UME) 169*16kB (UME) 199*32kB (UME) 262*64kB (U) 115*128kB (UME) 9*256kB (UE) 22*512kB (UM) 35*1024kB (UM) 14*2048kB (UM) 275*4096kB (UM) = 1249104kB [ 1383.865919][T12744] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1383.884336][T12744] Node 1 Normal: 229*4kB (UM) 60*8kB (UME) 44*16kB (UME) 109*32kB (UME) 31*64kB (UME) 5*128kB (UE) 2*256kB (UE) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 945*4096kB (M) = 3885076kB [ 1383.912129][T12744] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1383.922911][T12744] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1383.932461][T12744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1383.942725][T12744] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1383.952883][T12744] 113229 total pagecache pages [ 1383.958882][T12744] 0 pages in swap cache [ 1383.965470][T12744] Free swap = 124472kB [ 1383.975889][T12744] Total swap = 124996kB [ 1383.980742][T12744] 2097051 pages RAM [ 1383.986879][T12744] 0 pages HighMem/MovableOnly [ 1383.994883][T12744] 421118 pages reserved [ 1384.000737][T12744] 0 pages cma reserved [ 1384.006897][T12744] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1386.453861][ T5962] rpcbind: server 127.0.0.1 not responding, timed out [ 1391.878969][T12785] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16) [ 1397.021202][T12809] 9pnet_fd: Insufficient options for proto=fd [ 1397.667108][T12813] FAULT_INJECTION: forcing a failure. [ 1397.667108][T12813] name failslab, interval 1, probability 0, space 0, times 0 [ 1397.785895][T12813] CPU: 0 PID: 12813 Comm: syz.4.1633 Not tainted syzkaller #0 [ 1397.793464][T12813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1397.803680][T12813] Call Trace: [ 1397.807041][T12813] [ 1397.810030][T12813] dump_stack_lvl+0x18c/0x250 [ 1397.814801][T12813] ? show_regs_print_info+0x20/0x20 [ 1397.820073][T12813] ? load_image+0x420/0x420 [ 1397.824717][T12813] ? __lock_acquire+0x7eb0/0x7eb0 [ 1397.829817][T12813] should_fail_ex+0x394/0x4c0 [ 1397.834601][T12813] should_failslab+0x9/0x20 [ 1397.839172][T12813] slab_pre_alloc_hook+0x59/0x300 [ 1397.844241][T12813] ? tty_ldisc_setup+0xbd/0x240 [ 1397.849111][T12813] ? tty_init_dev+0x275/0x4c0 [ 1397.853817][T12813] ? ptmx_open+0xdf/0x2c0 [ 1397.858175][T12813] kmem_cache_alloc_node+0x5e/0x310 [ 1397.863424][T12813] ? alloc_vmap_area+0x1b4/0x1e50 [ 1397.868503][T12813] alloc_vmap_area+0x1b4/0x1e50 [ 1397.873435][T12813] ? vm_map_ram+0xcf0/0xcf0 [ 1397.877988][T12813] ? rcu_is_watching+0x15/0xb0 [ 1397.882813][T12813] __get_vm_area_node+0x162/0x370 [ 1397.887933][T12813] __vmalloc_node_range+0x36f/0x1320 [ 1397.893267][T12813] ? n_tty_open+0x1d/0x150 [ 1397.897746][T12813] ? lockdep_hardirqs_on+0x98/0x150 [ 1397.903004][T12813] ? free_vm_area+0x50/0x50 [ 1397.907545][T12813] ? __might_sleep+0xe0/0xe0 [ 1397.912182][T12813] ? n_tty_open+0x1d/0x150 [ 1397.916662][T12813] vzalloc+0x79/0x90 [ 1397.920592][T12813] ? n_tty_open+0x1d/0x150 [ 1397.925044][T12813] n_tty_open+0x1d/0x150 [ 1397.929325][T12813] tty_ldisc_setup+0xbd/0x240 [ 1397.934041][T12813] tty_init_dev+0x275/0x4c0 [ 1397.938586][T12813] ptmx_open+0xdf/0x2c0 [ 1397.942796][T12813] ? pty_start+0x140/0x140 [ 1397.947384][T12813] chrdev_open+0x58c/0x600 [ 1397.951871][T12813] ? cd_forget+0x160/0x160 [ 1397.956329][T12813] ? fsnotify_perm+0x3ed/0x5e0 [ 1397.961138][T12813] do_dentry_open+0x880/0x14b0 [ 1397.965950][T12813] ? cd_forget+0x160/0x160 [ 1397.970413][T12813] path_openat+0x284f/0x3270 [ 1397.975058][T12813] ? do_sys_openat2+0xda/0x1d0 [ 1397.979859][T12813] ? __x64_sys_openat+0x139/0x160 [ 1397.984929][T12813] ? verify_lock_unused+0x140/0x140 [ 1397.990173][T12813] ? do_filp_open+0x430/0x430 [ 1397.994900][T12813] do_filp_open+0x1f2/0x430 [ 1397.999442][T12813] ? vfs_tmpfile+0x620/0x620 [ 1398.004091][T12813] ? _raw_spin_unlock+0x28/0x40 [ 1398.009011][T12813] ? alloc_fd+0x590/0x640 [ 1398.013443][T12813] do_sys_openat2+0x134/0x1d0 [ 1398.018203][T12813] ? do_sys_open+0xe0/0xe0 [ 1398.022681][T12813] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1398.028717][T12813] ? lock_chain_count+0x20/0x20 [ 1398.033713][T12813] __x64_sys_openat+0x139/0x160 [ 1398.038716][T12813] do_syscall_64+0x55/0xb0 [ 1398.043232][T12813] ? clear_bhb_loop+0x40/0x90 [ 1398.047966][T12813] ? clear_bhb_loop+0x40/0x90 [ 1398.052685][T12813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1398.058624][T12813] RIP: 0033:0x7efcc0b9f559 [ 1398.063080][T12813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1398.082737][T12813] RSP: 002b:00007efcc1a89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1398.091193][T12813] RAX: ffffffffffffffda RBX: 00007efcc0e26090 RCX: 00007efcc0b9f559 [ 1398.099199][T12813] RDX: 0000000000121301 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1398.107307][T12813] RBP: 00007efcc0c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1398.115325][T12813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1398.123328][T12813] R13: 00007efcc0e26128 R14: 00007efcc0e26090 R15: 00007ffe896c4448 [ 1398.131359][T12813] [ 1398.201132][T12813] syz.4.1633: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1398.248331][T12813] CPU: 0 PID: 12813 Comm: syz.4.1633 Not tainted syzkaller #0 [ 1398.255875][T12813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1398.266085][T12813] Call Trace: [ 1398.269411][T12813] [ 1398.272388][T12813] dump_stack_lvl+0x18c/0x250 [ 1398.277135][T12813] ? show_regs_print_info+0x20/0x20 [ 1398.282403][T12813] ? load_image+0x420/0x420 [ 1398.286948][T12813] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1398.293403][T12813] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1398.299938][T12813] warn_alloc+0x246/0x340 [ 1398.304292][T12813] ? slab_free_freelist_hook+0x130/0x1a0 [ 1398.309947][T12813] ? zone_watermark_ok_safe+0x230/0x230 [ 1398.315510][T12813] ? __get_vm_area_node+0x17b/0x370 [ 1398.320767][T12813] ? __get_vm_area_node+0x17b/0x370 [ 1398.326022][T12813] __vmalloc_node_range+0x394/0x1320 [ 1398.331346][T12813] ? lockdep_hardirqs_on+0x98/0x150 [ 1398.336625][T12813] ? free_vm_area+0x50/0x50 [ 1398.341160][T12813] ? __might_sleep+0xe0/0xe0 [ 1398.345778][T12813] ? n_tty_open+0x1d/0x150 [ 1398.350233][T12813] vzalloc+0x79/0x90 [ 1398.354185][T12813] ? n_tty_open+0x1d/0x150 [ 1398.358632][T12813] n_tty_open+0x1d/0x150 [ 1398.362901][T12813] tty_ldisc_setup+0xbd/0x240 [ 1398.367621][T12813] tty_init_dev+0x275/0x4c0 [ 1398.372167][T12813] ptmx_open+0xdf/0x2c0 [ 1398.376353][T12813] ? pty_start+0x140/0x140 [ 1398.380862][T12813] chrdev_open+0x58c/0x600 [ 1398.385321][T12813] ? cd_forget+0x160/0x160 [ 1398.389803][T12813] ? fsnotify_perm+0x3ed/0x5e0 [ 1398.394595][T12813] do_dentry_open+0x880/0x14b0 [ 1398.399404][T12813] ? cd_forget+0x160/0x160 [ 1398.403859][T12813] path_openat+0x284f/0x3270 [ 1398.408516][T12813] ? do_sys_openat2+0xda/0x1d0 [ 1398.413301][T12813] ? __x64_sys_openat+0x139/0x160 [ 1398.418351][T12813] ? verify_lock_unused+0x140/0x140 [ 1398.423623][T12813] ? do_filp_open+0x430/0x430 [ 1398.428340][T12813] do_filp_open+0x1f2/0x430 [ 1398.432895][T12813] ? vfs_tmpfile+0x620/0x620 [ 1398.437520][T12813] ? _raw_spin_unlock+0x28/0x40 [ 1398.442420][T12813] ? alloc_fd+0x590/0x640 [ 1398.446809][T12813] do_sys_openat2+0x134/0x1d0 [ 1398.451518][T12813] ? do_sys_open+0xe0/0xe0 [ 1398.455958][T12813] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1398.462000][T12813] ? lock_chain_count+0x20/0x20 [ 1398.466883][T12813] __x64_sys_openat+0x139/0x160 [ 1398.471761][T12813] do_syscall_64+0x55/0xb0 [ 1398.476194][T12813] ? clear_bhb_loop+0x40/0x90 [ 1398.480899][T12813] ? clear_bhb_loop+0x40/0x90 [ 1398.485613][T12813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1398.491552][T12813] RIP: 0033:0x7efcc0b9f559 [ 1398.495987][T12813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1398.515610][T12813] RSP: 002b:00007efcc1a89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1398.524072][T12813] RAX: ffffffffffffffda RBX: 00007efcc0e26090 RCX: 00007efcc0b9f559 [ 1398.532069][T12813] RDX: 0000000000121301 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1398.540072][T12813] RBP: 00007efcc0c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1398.548061][T12813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1398.556062][T12813] R13: 00007efcc0e26128 R14: 00007efcc0e26090 R15: 00007ffe896c4448 [ 1398.564087][T12813] [ 1398.616367][T12813] Mem-Info: [ 1398.703073][T12813] active_anon:40615 inactive_anon:0 isolated_anon:0 [ 1398.703073][T12813] active_file:18492 inactive_file:40572 isolated_file:0 [ 1398.703073][T12813] unevictable:768 dirty:36 writeback:0 [ 1398.703073][T12813] slab_reclaimable:11778 slab_unreclaimable:95254 [ 1398.703073][T12813] mapped:39689 shmem:35933 pagetables:700 [ 1398.703073][T12813] sec_pagetables:0 bounce:0 [ 1398.703073][T12813] kernel_misc_reclaimable:0 [ 1398.703073][T12813] free:1300653 free_pcp:8921 free_cma:0 [ 1398.779789][T12813] Node 0 active_anon:163560kB inactive_anon:0kB active_file:73968kB inactive_file:162088kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158756kB dirty:144kB writeback:0kB shmem:143196kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10940kB pagetables:2800kB sec_pagetables:0kB all_unreclaimable? no [ 1398.817426][T12813] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1398.950829][T12813] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1399.011137][T12813] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 1399.033897][T12813] Node 0 DMA32 free:1302172kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:155244kB inactive_anon:0kB active_file:73968kB inactive_file:161000kB unevictable:1536kB writepending:144kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:26596kB local_pcp:15092kB free_cma:0kB [ 1400.381284][T12813] lowmem_reserve[]: 0 0 1 1 1 [ 1400.386539][T12813] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:1088kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1400.418214][T11102] rpcbind: server 127.0.0.1 not responding, timed out [ 1400.441377][T12813] lowmem_reserve[]: 0 0 0 0 0 [ 1400.469122][T12813] Node 1 Normal free:3885076kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22080kB local_pcp:8928kB free_cma:0kB [ 1400.509255][T12813] lowmem_reserve[]: 0 0 0 0 0 [ 1400.533965][T12813] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1400.587453][T12813] Node 0 DMA32: 2*4kB (UM) 421*8kB (UE) 203*16kB (UME) 60*32kB [ 1400.615261][T12827] tc action pedit 'at' offset 9 out of bounds [ 1400.650809][T12813] (UE) 265*64kB (UE) 115*128kB (UME) 10*256kB (UME) 15*512kB (UM) 28*1024kB (UM) 14*2048kB (UM) 274*4096kB (UM) = 1230112kB [ 1400.753090][T12813] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1400.826917][T12813] Node 1 Normal: 229*4kB (UM) 60*8kB (UME) 44*16kB (UME) 109*32kB (UME) 31*64kB (UME) 5*128kB (UE) 2*256kB (UE) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 945*4096kB (M) = 3885076kB [ 1400.954005][T12813] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1400.966968][T12813] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1400.988997][T12813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1401.030844][T12813] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1401.046598][T12813] 103607 total pagecache pages [ 1401.060808][T12813] 0 pages in swap cache [ 1401.086522][T12813] Free swap = 124472kB [ 1401.100814][T12813] Total swap = 124996kB [ 1401.105198][T12813] 2097051 pages RAM [ 1401.120795][T12813] 0 pages HighMem/MovableOnly [ 1401.127985][T12813] 421118 pages reserved [ 1401.135982][T12813] 0 pages cma reserved [ 1401.146184][T12813] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1408.202204][T12860] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16) [ 1408.632380][ T5892] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1410.333566][ T5892] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1410.426316][ T5892] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1410.482184][ T5892] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1410.526768][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.603516][ T5892] usb 6-1: probing VID:PID(0424:012C) [ 1410.652317][ T5892] usb 6-1: vub300 testing BULK IN EndPoint(0) 81 [ 1410.680829][ T5892] usb 6-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1410.710820][ T5892] usb 6-1: vub300 testing BULK IN EndPoint(2) 83 [ 1410.722245][ T5892] usb 6-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1410.748630][ T5892] usb 6-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1411.075533][ T5892] vub300: probe of 6-1:1.0 failed with error -71 [ 1411.196717][ T5892] usb 6-1: USB disconnect, device number 7 [ 1418.370183][T12898] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16) [ 1420.272166][T12920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1668'. [ 1423.351833][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.359026][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.461780][T12944] bonding: .s¸;p>Da*øÉ’- is being created... [ 1433.930916][T12979] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16) [ 1441.170812][ T27] audit: type=1326 audit(1792546825.006:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.1.1694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171c99f559 code=0x7ffc0000 [ 1441.254059][T13011] loop4: detected capacity change from 0 to 7 [ 1441.263838][ T27] audit: type=1326 audit(1792546825.006:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.1.1694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171c99f559 code=0x7ffc0000 [ 1441.299960][ T27] audit: type=1326 audit(1792546825.016:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.1.1694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171c99f559 code=0x7ffc0000 [ 1441.328724][T13011] Dev loop4: unable to read RDB block 7 [ 1441.352790][T13000] udevd[13000]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 1441.390906][ T27] audit: type=1326 audit(1792546825.036:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.1.1694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171c99f559 code=0x7ffc0000 [ 1441.422657][T13011] loop4: unable to read partition table [ 1441.440175][T13011] loop4: partition table beyond EOD, truncated [ 1441.453317][ T27] audit: type=1326 audit(1792546825.036:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.1.1694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f171c99f559 code=0x7ffc0000 [ 1441.491591][T13011] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1441.527085][ T27] audit: type=1326 audit(1792546825.036:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.1.1694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171c99f559 code=0x7ffc0000 [ 1441.610847][ T27] audit: type=1326 audit(1792546825.036:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.1.1694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171c99f559 code=0x7ffc0000 [ 1441.662434][ T27] audit: type=1326 audit(1792546825.036:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.1.1694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171c99f559 code=0x7ffc0000 [ 1441.728832][ T27] audit: type=1326 audit(1792546825.046:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.1.1694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f171c99f559 code=0x7ffc0000 [ 1441.831020][ T27] audit: type=1326 audit(1792546825.046:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.1.1694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171c99f559 code=0x7ffc0000 [ 1441.953823][T13000] udevd[13000]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 1441.977427][T13000] udevd[13000]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 1443.941206][T11535] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1444.712982][T13035] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16) [ 1446.343292][T11535] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1446.365450][T11535] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1446.398051][T11535] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1446.427601][T11535] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.514127][T11535] usb 6-1: probing VID:PID(0424:012C) [ 1446.534728][T11535] usb 6-1: vub300 testing BULK IN EndPoint(0) 81 [ 1446.557516][T11535] usb 6-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1446.570776][T11535] usb 6-1: vub300 testing BULK IN EndPoint(2) 83 [ 1446.590788][T11535] usb 6-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1446.597330][T11535] usb 6-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1446.707904][T11535] vub300: probe of 6-1:1.0 failed with error -71 [ 1446.741280][T11535] usb 6-1: USB disconnect, device number 8 [ 1448.951585][T11535] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1449.015998][T13050] comedi comedi3: board detection failed [ 1449.151023][T11535] usb 2-1: Using ep0 maxpacket: 8 [ 1449.229234][T13051] netlink: 'syz.3.1705': attribute type 10 has an invalid length. [ 1449.901729][T11535] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1449.910081][T11535] usb 2-1: config 179 has no interface number 0 [ 1449.930778][T11535] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1449.950764][T11535] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1449.976964][T11535] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1449.989430][T11535] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1450.001104][T11535] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1450.014675][T11535] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1450.023984][T11535] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.043930][T13048] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1452.310988][ T5892] usb 2-1: USB disconnect, device number 31 [ 1452.311098][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1452.325397][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1456.029149][T13070] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16) [ 1456.761422][T11535] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1457.606846][ T5782] Bluetooth: hci4: unexpected event for opcode 0x0c7a [ 1457.722591][T11535] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1457.742901][T11535] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1457.783742][T11535] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1457.810947][T11535] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.842709][T11535] usb 4-1: probing VID:PID(0424:012C) [ 1457.867281][T11535] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 1457.891749][T11535] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1457.908597][T11535] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 1457.916858][T11535] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1457.926451][T11535] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1458.046349][T11535] vub300: probe of 4-1:1.0 failed with error -32 [ 1458.071307][T11535] usb 4-1: USB disconnect, device number 19 [ 1458.264192][T13083] 9pnet_fd: Insufficient options for proto=fd [ 1458.598840][T13093] comedi comedi3: board detection failed [ 1459.193652][T13093] netlink: 'syz.4.1715': attribute type 10 has an invalid length. [ 1460.949472][ T27] kauditd_printk_skb: 82 callbacks suppressed [ 1460.949489][ T27] audit: type=1326 audit(1792546844.796:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13102 comm="syz.4.1718" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc0b9f559 code=0x7ffc0000 [ 1461.000787][ T27] audit: type=1326 audit(1792546844.806:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13102 comm="syz.4.1718" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc0b9f559 code=0x7ffc0000 [ 1461.034928][ T27] audit: type=1326 audit(1792546844.836:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13102 comm="syz.4.1718" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7efcc0b9f559 code=0x7ffc0000 [ 1461.110222][ T27] audit: type=1326 audit(1792546844.836:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13102 comm="syz.4.1718" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc0b9f559 code=0x7ffc0000 [ 1461.156127][ T27] audit: type=1326 audit(1792546844.836:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13102 comm="syz.4.1718" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcc0b9f559 code=0x7ffc0000 [ 1462.885943][ T27] audit: type=1326 audit(1792546844.836:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13102 comm="syz.4.1718" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc0b9f559 code=0x7ffc0000 [ 1462.961539][ T27] audit: type=1326 audit(1792546844.836:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13102 comm="syz.4.1718" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc0b9f559 code=0x7ffc0000 [ 1463.230842][ T8171] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1463.460780][ T8171] usb 6-1: Using ep0 maxpacket: 16 [ 1463.489579][ T8171] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1463.520903][ T8171] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1463.530866][ T8171] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 1463.560498][ T8171] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.579460][ T8171] usb 6-1: Product: syz [ 1463.594051][ T8171] usb 6-1: Manufacturer: syz [ 1463.601935][ T8171] usb 6-1: SerialNumber: syz [ 1463.619129][ T8171] usb 6-1: config 0 descriptor?? [ 1463.865797][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1463.899844][ T8171] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input8 [ 1463.985497][ T8171] imon:send_packet: packet tx failed (-71) [ 1464.020978][ T8171] imon 6-1:0.0: panel buttons/knobs setup failed [ 1464.195592][ T8171] rc_core: IR keymap rc-imon-pad not found [ 1464.208400][ T8171] Registered IR keymap rc-empty [ 1464.221396][ T8171] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1465.880826][ T8171] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1465.913894][ T8171] imon:send_packet: packet tx failed (-71) [ 1465.932206][ T8171] imon 6-1:0.0: remote input dev register failed [ 1465.948463][ T8171] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 1466.051614][ T8171] imon 6-1:0.0: unable to initialize intf0, err 0 [ 1466.058153][ T8171] imon:imon_probe: failed to initialize context! [ 1466.070820][ T8171] imon 6-1:0.0: unable to register, err -19 [ 1466.094223][ T8171] usb 6-1: USB disconnect, device number 9 [ 1467.818003][T13124] FAULT_INJECTION: forcing a failure. [ 1467.818003][T13124] name failslab, interval 1, probability 0, space 0, times 0 [ 1467.853109][T13124] CPU: 1 PID: 13124 Comm: syz.5.1724 Not tainted syzkaller #0 [ 1467.860682][T13124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1467.870896][T13124] Call Trace: [ 1467.874241][T13124] [ 1467.877235][T13124] dump_stack_lvl+0x18c/0x250 [ 1467.881980][T13124] ? show_regs_print_info+0x20/0x20 [ 1467.887261][T13124] ? load_image+0x420/0x420 [ 1467.891980][T13124] ? __lock_acquire+0x7eb0/0x7eb0 [ 1467.897068][T13124] should_fail_ex+0x394/0x4c0 [ 1467.901800][T13124] should_failslab+0x9/0x20 [ 1467.906337][T13124] slab_pre_alloc_hook+0x59/0x300 [ 1467.911398][T13124] ? tty_ldisc_setup+0xbd/0x240 [ 1467.916304][T13124] ? tty_init_dev+0x275/0x4c0 [ 1467.921036][T13124] ? ptmx_open+0xdf/0x2c0 [ 1467.925394][T13124] kmem_cache_alloc_node+0x5e/0x310 [ 1467.930638][T13124] ? alloc_vmap_area+0x1b4/0x1e50 [ 1467.935750][T13124] alloc_vmap_area+0x1b4/0x1e50 [ 1467.940650][T13124] ? vm_map_ram+0xcf0/0xcf0 [ 1467.945249][T13124] ? rcu_is_watching+0x15/0xb0 [ 1467.950091][T13124] __get_vm_area_node+0x162/0x370 [ 1467.955276][T13124] __vmalloc_node_range+0x36f/0x1320 [ 1467.960622][T13124] ? n_tty_open+0x1d/0x150 [ 1467.965107][T13124] ? lockdep_hardirqs_on+0x98/0x150 [ 1467.970379][T13124] ? free_vm_area+0x50/0x50 [ 1467.974959][T13124] ? __might_sleep+0xe0/0xe0 [ 1467.979625][T13124] ? n_tty_open+0x1d/0x150 [ 1467.984106][T13124] vzalloc+0x79/0x90 [ 1467.988041][T13124] ? n_tty_open+0x1d/0x150 [ 1467.992491][T13124] n_tty_open+0x1d/0x150 [ 1467.996782][T13124] tty_ldisc_setup+0xbd/0x240 [ 1468.001507][T13124] tty_init_dev+0x275/0x4c0 [ 1468.006056][T13124] ptmx_open+0xdf/0x2c0 [ 1468.010271][T13124] ? pty_start+0x140/0x140 [ 1468.014756][T13124] chrdev_open+0x58c/0x600 [ 1468.019263][T13124] ? cd_forget+0x160/0x160 [ 1468.023747][T13124] ? fsnotify_perm+0x3ed/0x5e0 [ 1468.028587][T13124] do_dentry_open+0x880/0x14b0 [ 1468.033385][T13124] ? cd_forget+0x160/0x160 [ 1468.037836][T13124] path_openat+0x284f/0x3270 [ 1468.042484][T13124] ? do_sys_openat2+0xda/0x1d0 [ 1468.047398][T13124] ? __x64_sys_openat+0x139/0x160 [ 1468.052491][T13124] ? verify_lock_unused+0x140/0x140 [ 1468.057731][T13124] ? do_filp_open+0x430/0x430 [ 1468.062457][T13124] do_filp_open+0x1f2/0x430 [ 1468.066997][T13124] ? vfs_tmpfile+0x620/0x620 [ 1468.071630][T13124] ? _raw_spin_unlock+0x28/0x40 [ 1468.076518][T13124] ? alloc_fd+0x590/0x640 [ 1468.080936][T13124] do_sys_openat2+0x134/0x1d0 [ 1468.085695][T13124] ? do_sys_open+0xe0/0xe0 [ 1468.090146][T13124] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1468.096173][T13124] ? lock_chain_count+0x20/0x20 [ 1468.101316][T13124] __x64_sys_openat+0x139/0x160 [ 1468.106228][T13124] do_syscall_64+0x55/0xb0 [ 1468.110680][T13124] ? clear_bhb_loop+0x40/0x90 [ 1468.115416][T13124] ? clear_bhb_loop+0x40/0x90 [ 1468.120138][T13124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1468.126075][T13124] RIP: 0033:0x7f4db839f559 [ 1468.130537][T13124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1468.150186][T13124] RSP: 002b:00007f4db91ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1468.158626][T13124] RAX: ffffffffffffffda RBX: 00007f4db8625fa0 RCX: 00007f4db839f559 [ 1468.166625][T13124] RDX: 0000000000121301 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1468.174717][T13124] RBP: 00007f4db8436b20 R08: 0000000000000000 R09: 0000000000000000 [ 1468.182749][T13124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1468.190766][T13124] R13: 00007f4db8626038 R14: 00007f4db8625fa0 R15: 00007fff20c0e208 [ 1468.198879][T13124] [ 1468.205526][T13124] syz.5.1724: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 1468.227908][T13124] CPU: 1 PID: 13124 Comm: syz.5.1724 Not tainted syzkaller #0 [ 1468.235523][T13124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1468.245643][T13124] Call Trace: [ 1468.248970][T13124] [ 1468.251959][T13124] dump_stack_lvl+0x18c/0x250 [ 1468.256704][T13124] ? show_regs_print_info+0x20/0x20 [ 1468.261981][T13124] ? load_image+0x420/0x420 [ 1468.266561][T13124] ? __rcu_read_unlock+0x7c/0xd0 [ 1468.271557][T13124] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1468.278042][T13124] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1468.284708][T13124] warn_alloc+0x246/0x340 [ 1468.289107][T13124] ? slab_free_freelist_hook+0x130/0x1a0 [ 1468.294813][T13124] ? zone_watermark_ok_safe+0x230/0x230 [ 1468.300425][T13124] ? __get_vm_area_node+0x17b/0x370 [ 1468.305809][T13124] ? __get_vm_area_node+0x17b/0x370 [ 1468.311102][T13124] __vmalloc_node_range+0x394/0x1320 [ 1468.316478][T13124] ? lockdep_hardirqs_on+0x98/0x150 [ 1468.321947][T13124] ? free_vm_area+0x50/0x50 [ 1468.326534][T13124] ? __might_sleep+0xe0/0xe0 [ 1468.331208][T13124] ? n_tty_open+0x1d/0x150 [ 1468.335703][T13124] vzalloc+0x79/0x90 [ 1468.339682][T13124] ? n_tty_open+0x1d/0x150 [ 1468.344179][T13124] n_tty_open+0x1d/0x150 [ 1468.348496][T13124] tty_ldisc_setup+0xbd/0x240 [ 1468.353798][T13124] tty_init_dev+0x275/0x4c0 [ 1468.358389][T13124] ptmx_open+0xdf/0x2c0 [ 1468.362628][T13124] ? pty_start+0x140/0x140 [ 1468.367224][T13124] chrdev_open+0x58c/0x600 [ 1468.371734][T13124] ? cd_forget+0x160/0x160 [ 1468.376237][T13124] ? fsnotify_perm+0x3ed/0x5e0 [ 1468.381179][T13124] do_dentry_open+0x880/0x14b0 [ 1468.386014][T13124] ? cd_forget+0x160/0x160 [ 1468.390496][T13124] path_openat+0x284f/0x3270 [ 1468.395212][T13124] ? do_sys_openat2+0xda/0x1d0 [ 1468.400041][T13124] ? __x64_sys_openat+0x139/0x160 [ 1468.405143][T13124] ? verify_lock_unused+0x140/0x140 [ 1468.410411][T13124] ? do_filp_open+0x430/0x430 [ 1468.415184][T13124] do_filp_open+0x1f2/0x430 [ 1468.419768][T13124] ? vfs_tmpfile+0x620/0x620 [ 1468.424457][T13124] ? _raw_spin_unlock+0x28/0x40 [ 1468.429377][T13124] ? alloc_fd+0x590/0x640 [ 1468.433792][T13124] do_sys_openat2+0x134/0x1d0 [ 1468.438547][T13124] ? do_sys_open+0xe0/0xe0 [ 1468.443038][T13124] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1468.449174][T13124] ? lock_chain_count+0x20/0x20 [ 1468.454094][T13124] __x64_sys_openat+0x139/0x160 [ 1468.459024][T13124] do_syscall_64+0x55/0xb0 [ 1468.463510][T13124] ? clear_bhb_loop+0x40/0x90 [ 1468.468244][T13124] ? clear_bhb_loop+0x40/0x90 [ 1468.473014][T13124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1468.478991][T13124] RIP: 0033:0x7f4db839f559 [ 1468.483464][T13124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1468.503139][T13124] RSP: 002b:00007f4db91ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1468.511636][T13124] RAX: ffffffffffffffda RBX: 00007f4db8625fa0 RCX: 00007f4db839f559 [ 1468.519670][T13124] RDX: 0000000000121301 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1468.527710][T13124] RBP: 00007f4db8436b20 R08: 0000000000000000 R09: 0000000000000000 [ 1468.535757][T13124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1468.543820][T13124] R13: 00007f4db8626038 R14: 00007f4db8625fa0 R15: 00007fff20c0e208 [ 1468.551898][T13124] [ 1468.557455][T13124] Mem-Info: [ 1468.561944][T13124] active_anon:47962 inactive_anon:0 isolated_anon:0 [ 1468.561944][T13124] active_file:18492 inactive_file:40598 isolated_file:0 [ 1468.561944][T13124] unevictable:768 dirty:39 writeback:0 [ 1468.561944][T13124] slab_reclaimable:11623 slab_unreclaimable:94902 [ 1468.561944][T13124] mapped:29921 shmem:43070 pagetables:683 [ 1468.561944][T13124] sec_pagetables:0 bounce:0 [ 1468.561944][T13124] kernel_misc_reclaimable:0 [ 1468.561944][T13124] free:1293668 free_pcp:9449 free_cma:0 [ 1468.609881][T13124] Node 0 active_anon:192148kB inactive_anon:0kB active_file:73968kB inactive_file:162192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120784kB dirty:156kB writeback:0kB shmem:170944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11120kB pagetables:2732kB sec_pagetables:0kB all_unreclaimable? no [ 1468.639727][T13141] comedi comedi3: board detection failed [ 1468.650448][T13124] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1468.682079][T13124] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1468.714383][T13124] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 1468.736082][T13124] Node 0 DMA32 free:1273728kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:189312kB inactive_anon:0kB active_file:73968kB inactive_file:161104kB unevictable:1536kB writepending:156kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:18328kB local_pcp:16444kB free_cma:0kB [ 1468.770610][T13124] lowmem_reserve[]: 0 0 1 1 1 [ 1468.781356][T13124] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:1088kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1468.815176][T13124] lowmem_reserve[]: 0 0 0 0 0 [ 1468.832261][T13124] Node 1 Normal free:3885076kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22080kB local_pcp:13152kB free_cma:0kB [ 1468.866796][T13124] lowmem_reserve[]: 0 0 0 0 0 [ 1468.882241][T13124] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1468.940896][T13124] Node 0 DMA32: 51*4kB (UME) 1013*8kB (UME) 660*16kB (UME) 353*32kB (UME) 265*64kB (UME) 118*128kB (UME) 11*256kB (UME) 61*512kB (UM) 46*1024kB (UM) 13*2048kB (UM) 275*4096kB (UM) = 1296404kB [ 1468.999141][T13124] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1469.040004][T13124] Node 1 Normal: 229*4kB (UM) 60*8kB (UME) 44*16kB (UME) 109*32kB (UME) 31*64kB (UME) 5*128kB (UE) 2*256kB (UE) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 945*4096kB (M) = 3885076kB [ 1469.088943][T13124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1469.100006][T13124] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1469.112407][T13124] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1469.123503][T13124] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1469.134562][T13124] 99835 total pagecache pages [ 1469.141143][T13124] 0 pages in swap cache [ 1469.145562][T13124] Free swap = 124472kB [ 1469.151031][T13124] Total swap = 124996kB [ 1469.156486][T13124] 2097051 pages RAM [ 1469.161991][T13124] 0 pages HighMem/MovableOnly [ 1469.167472][T13124] 421118 pages reserved [ 1469.173039][T13124] 0 pages cma reserved [ 1469.178521][T13124] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1471.364431][T13139] netlink: 'syz.1.1727': attribute type 10 has an invalid length. [ 1481.398853][T13191] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1484.925651][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.941081][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1496.866081][T13285] FAULT_INJECTION: forcing a failure. [ 1496.866081][T13285] name failslab, interval 1, probability 0, space 0, times 0 [ 1496.878804][T13285] CPU: 0 PID: 13285 Comm: syz.4.1764 Not tainted syzkaller #0 [ 1496.886288][T13285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1496.896374][T13285] Call Trace: [ 1496.899684][T13285] [ 1496.902631][T13285] dump_stack_lvl+0x18c/0x250 [ 1496.907327][T13285] ? show_regs_print_info+0x20/0x20 [ 1496.912538][T13285] ? load_image+0x420/0x420 [ 1496.917096][T13285] ? __lock_acquire+0x7eb0/0x7eb0 [ 1496.922181][T13285] should_fail_ex+0x394/0x4c0 [ 1496.926890][T13285] should_failslab+0x9/0x20 [ 1496.931437][T13285] slab_pre_alloc_hook+0x59/0x300 [ 1496.936500][T13285] ? tty_ldisc_setup+0xbd/0x240 [ 1496.941396][T13285] ? tty_init_dev+0x275/0x4c0 [ 1496.946092][T13285] ? ptmx_open+0xdf/0x2c0 [ 1496.950450][T13285] kmem_cache_alloc_node+0x5e/0x310 [ 1496.955705][T13285] ? alloc_vmap_area+0x1b4/0x1e50 [ 1496.960803][T13285] alloc_vmap_area+0x1b4/0x1e50 [ 1496.965726][T13285] ? vm_map_ram+0xcf0/0xcf0 [ 1496.970272][T13285] ? rcu_is_watching+0x15/0xb0 [ 1496.975068][T13285] __get_vm_area_node+0x162/0x370 [ 1496.980127][T13285] __vmalloc_node_range+0x36f/0x1320 [ 1496.985467][T13285] ? n_tty_open+0x1d/0x150 [ 1496.989916][T13285] ? lockdep_hardirqs_on+0x98/0x150 [ 1496.995161][T13285] ? free_vm_area+0x50/0x50 [ 1496.999712][T13285] ? __might_sleep+0xe0/0xe0 [ 1497.004330][T13285] ? n_tty_open+0x1d/0x150 [ 1497.008784][T13285] vzalloc+0x79/0x90 [ 1497.012723][T13285] ? n_tty_open+0x1d/0x150 [ 1497.017193][T13285] n_tty_open+0x1d/0x150 [ 1497.021472][T13285] tty_ldisc_setup+0xbd/0x240 [ 1497.026210][T13285] tty_init_dev+0x275/0x4c0 [ 1497.030781][T13285] ptmx_open+0xdf/0x2c0 [ 1497.035000][T13285] ? pty_start+0x140/0x140 [ 1497.039499][T13285] chrdev_open+0x58c/0x600 [ 1497.043987][T13285] ? cd_forget+0x160/0x160 [ 1497.048461][T13285] ? fsnotify_perm+0x3ed/0x5e0 [ 1497.053364][T13285] do_dentry_open+0x880/0x14b0 [ 1497.058389][T13285] ? cd_forget+0x160/0x160 [ 1497.062902][T13285] path_openat+0x284f/0x3270 [ 1497.067589][T13285] ? do_sys_openat2+0xda/0x1d0 [ 1497.072571][T13285] ? __x64_sys_openat+0x139/0x160 [ 1497.077639][T13285] ? verify_lock_unused+0x140/0x140 [ 1497.082932][T13285] ? do_filp_open+0x430/0x430 [ 1497.087653][T13285] do_filp_open+0x1f2/0x430 [ 1497.092193][T13285] ? vfs_tmpfile+0x620/0x620 [ 1497.096836][T13285] ? _raw_spin_unlock+0x28/0x40 [ 1497.101715][T13285] ? alloc_fd+0x590/0x640 [ 1497.106104][T13285] do_sys_openat2+0x134/0x1d0 [ 1497.110836][T13285] ? do_sys_open+0xe0/0xe0 [ 1497.115282][T13285] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1497.121289][T13285] ? lock_chain_count+0x20/0x20 [ 1497.126170][T13285] __x64_sys_openat+0x139/0x160 [ 1497.131080][T13285] do_syscall_64+0x55/0xb0 [ 1497.135516][T13285] ? clear_bhb_loop+0x40/0x90 [ 1497.140237][T13285] ? clear_bhb_loop+0x40/0x90 [ 1497.144944][T13285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1497.150868][T13285] RIP: 0033:0x7efcc0b9f559 [ 1497.155318][T13285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1497.174950][T13285] RSP: 002b:00007efcc1aaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1497.183411][T13285] RAX: ffffffffffffffda RBX: 00007efcc0e25fa0 RCX: 00007efcc0b9f559 [ 1497.191509][T13285] RDX: 0000000000121301 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1497.199610][T13285] RBP: 00007efcc0c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1497.207605][T13285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1497.215607][T13285] R13: 00007efcc0e26038 R14: 00007efcc0e25fa0 R15: 00007ffe896c4448 [ 1497.223647][T13285] [ 1497.227346][T13285] syz.4.1764: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1497.242526][T13285] CPU: 0 PID: 13285 Comm: syz.4.1764 Not tainted syzkaller #0 [ 1497.250106][T13285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1497.260194][T13285] Call Trace: [ 1497.263593][T13285] [ 1497.266553][T13285] dump_stack_lvl+0x18c/0x250 [ 1497.271294][T13285] ? show_regs_print_info+0x20/0x20 [ 1497.276568][T13285] ? load_image+0x420/0x420 [ 1497.281137][T13285] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1497.287595][T13285] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1497.294160][T13285] warn_alloc+0x246/0x340 [ 1497.298522][T13285] ? slab_free_freelist_hook+0x130/0x1a0 [ 1497.304189][T13285] ? zone_watermark_ok_safe+0x230/0x230 [ 1497.309782][T13285] ? __get_vm_area_node+0x17b/0x370 [ 1497.315068][T13285] ? __get_vm_area_node+0x17b/0x370 [ 1497.320317][T13285] __vmalloc_node_range+0x394/0x1320 [ 1497.325649][T13285] ? lockdep_hardirqs_on+0x98/0x150 [ 1497.330915][T13285] ? free_vm_area+0x50/0x50 [ 1497.335503][T13285] ? __might_sleep+0xe0/0xe0 [ 1497.340190][T13285] ? n_tty_open+0x1d/0x150 [ 1497.344640][T13285] vzalloc+0x79/0x90 [ 1497.348567][T13285] ? n_tty_open+0x1d/0x150 [ 1497.353039][T13285] n_tty_open+0x1d/0x150 [ 1497.357321][T13285] tty_ldisc_setup+0xbd/0x240 [ 1497.362061][T13285] tty_init_dev+0x275/0x4c0 [ 1497.366624][T13285] ptmx_open+0xdf/0x2c0 [ 1497.370820][T13285] ? pty_start+0x140/0x140 [ 1497.375289][T13285] chrdev_open+0x58c/0x600 [ 1497.379734][T13285] ? cd_forget+0x160/0x160 [ 1497.384180][T13285] ? fsnotify_perm+0x3ed/0x5e0 [ 1497.388980][T13285] do_dentry_open+0x880/0x14b0 [ 1497.393778][T13285] ? cd_forget+0x160/0x160 [ 1497.398281][T13285] path_openat+0x284f/0x3270 [ 1497.402944][T13285] ? do_sys_openat2+0xda/0x1d0 [ 1497.407757][T13285] ? __x64_sys_openat+0x139/0x160 [ 1497.412862][T13285] ? verify_lock_unused+0x140/0x140 [ 1497.418091][T13285] ? do_filp_open+0x430/0x430 [ 1497.422828][T13285] do_filp_open+0x1f2/0x430 [ 1497.427362][T13285] ? vfs_tmpfile+0x620/0x620 [ 1497.431993][T13285] ? _raw_spin_unlock+0x28/0x40 [ 1497.436865][T13285] ? alloc_fd+0x590/0x640 [ 1497.441229][T13285] do_sys_openat2+0x134/0x1d0 [ 1497.445932][T13285] ? do_sys_open+0xe0/0xe0 [ 1497.450370][T13285] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1497.456373][T13285] ? lock_chain_count+0x20/0x20 [ 1497.461306][T13285] __x64_sys_openat+0x139/0x160 [ 1497.466217][T13285] do_syscall_64+0x55/0xb0 [ 1497.470671][T13285] ? clear_bhb_loop+0x40/0x90 [ 1497.475475][T13285] ? clear_bhb_loop+0x40/0x90 [ 1497.480176][T13285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1497.486156][T13285] RIP: 0033:0x7efcc0b9f559 [ 1497.490608][T13285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1497.510258][T13285] RSP: 002b:00007efcc1aaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1497.518697][T13285] RAX: ffffffffffffffda RBX: 00007efcc0e25fa0 RCX: 00007efcc0b9f559 [ 1497.526706][T13285] RDX: 0000000000121301 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1497.534698][T13285] RBP: 00007efcc0c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1497.542741][T13285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1497.550774][T13285] R13: 00007efcc0e26038 R14: 00007efcc0e25fa0 R15: 00007ffe896c4448 [ 1497.558791][T13285] [ 1497.562735][T13285] Mem-Info: [ 1497.565877][T13285] active_anon:83453 inactive_anon:0 isolated_anon:0 [ 1497.565877][T13285] active_file:18492 inactive_file:40608 isolated_file:0 [ 1497.565877][T13285] unevictable:768 dirty:63 writeback:0 [ 1497.565877][T13285] slab_reclaimable:11652 slab_unreclaimable:96027 [ 1497.565877][T13285] mapped:44699 shmem:78652 pagetables:740 [ 1497.565877][T13285] sec_pagetables:0 bounce:0 [ 1497.565877][T13285] kernel_misc_reclaimable:0 [ 1497.565877][T13285] free:1255506 free_pcp:12471 free_cma:0 [ 1497.611909][T13285] Node 0 active_anon:333812kB inactive_anon:0kB active_file:73968kB inactive_file:162232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:178796kB dirty:252kB writeback:0kB shmem:313072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11080kB pagetables:2960kB sec_pagetables:0kB all_unreclaimable? no [ 1497.644491][T13285] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1497.674732][T13285] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1497.702288][T13285] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 1497.708335][T13285] Node 0 DMA32 free:1121584kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:333776kB inactive_anon:0kB active_file:73968kB inactive_file:161144kB unevictable:1536kB writepending:252kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:27836kB local_pcp:6700kB free_cma:0kB [ 1497.738984][T13285] lowmem_reserve[]: 0 0 1 1 1 [ 1497.743770][T13285] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:1088kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1497.771000][T13285] lowmem_reserve[]: 0 0 0 0 0 [ 1497.775740][T13285] Node 1 Normal free:3885076kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22080kB local_pcp:8928kB free_cma:0kB [ 1497.805519][T13285] lowmem_reserve[]: 0 0 0 0 0 [ 1497.810300][T13285] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1497.822992][T13285] Node 0 DMA32: 1206*4kB (UM) 339*8kB (UM) 94*16kB (UME) 163*32kB (ME) 428*64kB (UME) 229*128kB (UME) 52*256kB (UME) 34*512kB (UM) 14*1024kB (UM) 11*2048kB (UM) 240*4096kB (UM) = 1121584kB [ 1497.841899][T13285] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1497.853832][T13285] Node 1 Normal: 229*4kB (UM) 60*8kB (UME) 44*16kB (UME) 109*32kB (UME) 31*64kB (UME) 5*128kB (UE) 2*256kB (UE) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 945*4096kB (M) = 3885076kB [ 1497.871467][T13285] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1497.881104][T13285] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1497.890835][T13285] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1497.900423][T13285] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1497.909911][T13285] 137752 total pagecache pages [ 1497.914737][T13285] 0 pages in swap cache [ 1497.918917][T13285] Free swap = 124472kB [ 1497.923182][T13285] Total swap = 124996kB [ 1497.927373][T13285] 2097051 pages RAM [ 1497.931253][T13285] 0 pages HighMem/MovableOnly [ 1497.935954][T13285] 421118 pages reserved [ 1497.940119][T13285] 0 pages cma reserved [ 1497.944225][T13285] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1502.539340][T13316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1772'. [ 1502.646383][T13316] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1503.724664][T13316] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1503.760868][T13316] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1505.553153][T13318] 9pnet_fd: Insufficient options for proto=fd [ 1508.330858][ T9734] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1508.863810][ T9734] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1508.893627][ T9734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.932783][ T9734] usb 5-1: config 0 descriptor?? [ 1509.027809][ T9734] cp210x 5-1:0.0: cp210x converter detected [ 1511.003245][ T9734] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1511.051082][ T9734] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 1511.110825][ T9734] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 1511.134435][ T9734] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1511.221675][ T9734] usb 5-1: USB disconnect, device number 13 [ 1511.333427][ T9734] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1511.379982][ T9734] cp210x 5-1:0.0: device disconnected [ 1515.400333][T13369] comedi comedi3: board detection failed [ 1515.530736][T13370] netlink: 'syz.4.1786': attribute type 10 has an invalid length. [ 1521.560762][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1521.572163][T13405] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 1521.583246][T13405] syz.4.1794: attempt to access beyond end of device [ 1521.583246][T13405] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1521.596186][T13405] exFAT-fs (nbd4): unable to read boot sector [ 1521.602686][T13405] exFAT-fs (nbd4): failed to read boot sector [ 1521.608826][T13405] exFAT-fs (nbd4): failed to recognize exfat type [ 1522.553599][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1523.921511][ T9] usb 2-1: config 2 has an invalid interface number: 69 but max is 0 [ 1523.929689][ T9] usb 2-1: config 2 has no interface number 0 [ 1523.936830][ T9] usb 2-1: config 2 interface 69 has no altsetting 0 [ 1523.973740][ T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=73.9f [ 1523.997567][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.025399][ T9] usb 2-1: Product: syz [ 1524.029661][ T9] usb 2-1: Manufacturer: syz [ 1524.055106][ T9] usb 2-1: SerialNumber: syz [ 1526.195525][ T9] snd_usb_podhd 2-1:2.69: Line 6 POD HD300 found [ 1526.210912][ T9] snd_usb_podhd 2-1:2.69: set_interface failed [ 1526.217421][ T9] snd_usb_podhd 2-1:2.69: Line 6 POD HD300 now disconnected [ 1526.263228][ T9] snd_usb_podhd: probe of 2-1:2.69 failed with error -71 [ 1527.994603][ T9] usb 2-1: USB disconnect, device number 32 [ 1528.010804][ T5782] Bluetooth: hci0: unexpected event for opcode 0x0c7a [ 1530.389696][T13433] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1802'. [ 1534.301442][ T5856] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1534.503523][ T5856] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1534.515761][ T5856] usb 6-1: config 2 has an invalid interface number: 69 but max is 0 [ 1534.538866][ T5856] usb 6-1: config 2 has no interface number 0 [ 1534.548875][ T5856] usb 6-1: config 2 interface 69 has no altsetting 0 [ 1534.579983][ T5856] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=73.9f [ 1534.598150][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.619913][ T5856] usb 6-1: Product: syz [ 1534.624534][ T5856] usb 6-1: Manufacturer: syz [ 1534.629207][ T5856] usb 6-1: SerialNumber: syz [ 1535.083748][ T5856] snd_usb_podhd 6-1:2.69: Line 6 POD HD300 found [ 1535.139612][ T5856] snd_usb_podhd 6-1:2.69: set_interface failed [ 1535.161103][ T5856] snd_usb_podhd 6-1:2.69: Line 6 POD HD300 now disconnected [ 1535.168683][ T5856] snd_usb_podhd: probe of 6-1:2.69 failed with error -71 [ 1535.194894][ T5856] usb 6-1: USB disconnect, device number 10 [ 1538.101990][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1538.474933][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1538.534580][ T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1538.575388][ T9] usb 6-1: config 179 has no interface number 0 [ 1538.605650][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1538.630841][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1538.660806][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1538.689372][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1538.728845][ T9] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1538.780838][ T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1538.800359][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.816073][T13495] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1538.825724][T13500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1817'. [ 1538.848873][T13500] FAULT_INJECTION: forcing a failure. [ 1538.848873][T13500] name failslab, interval 1, probability 0, space 0, times 0 [ 1538.897368][T13500] CPU: 0 PID: 13500 Comm: syz.1.1817 Not tainted syzkaller #0 [ 1538.904934][T13500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1538.915086][T13500] Call Trace: [ 1538.918419][T13500] [ 1538.921402][T13500] dump_stack_lvl+0x18c/0x250 [ 1538.926169][T13500] ? show_regs_print_info+0x20/0x20 [ 1538.931439][T13500] ? load_image+0x420/0x420 [ 1538.936014][T13500] ? verify_lock_unused+0x140/0x140 [ 1538.941380][T13500] should_fail_ex+0x394/0x4c0 [ 1538.946181][T13500] should_failslab+0x9/0x20 [ 1538.950763][T13500] slab_pre_alloc_hook+0x59/0x300 [ 1538.955849][T13500] kmem_cache_alloc+0x5a/0x2c0 [ 1538.960679][T13500] ? skb_clone+0x1eb/0x370 [ 1538.965180][T13500] skb_clone+0x1eb/0x370 [ 1538.969500][T13500] __netlink_deliver_tap+0x411/0x7f0 [ 1538.974903][T13500] ? netlink_deliver_tap+0x2e/0x1b0 [ 1538.980166][T13500] netlink_deliver_tap+0x19c/0x1b0 [ 1538.985349][T13500] netlink_sendskb+0x68/0x130 [ 1538.990122][T13500] netlink_ack+0xcd5/0x1160 [ 1538.994717][T13500] ? netlink_dump+0xec0/0xec0 [ 1538.999460][T13500] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1539.005511][T13500] netlink_rcv_skb+0x2b3/0x4c0 [ 1539.010425][T13500] ? nfnetlink_unbind+0x160/0x160 [ 1539.015523][T13500] ? netlink_ack+0x1160/0x1160 [ 1539.020381][T13500] ? apparmor_capable+0x137/0x1a0 [ 1539.025470][T13500] ? bpf_lsm_capable+0x9/0x10 [ 1539.030198][T13500] ? security_capable+0x89/0xb0 [ 1539.035122][T13500] nfnetlink_rcv+0x2c9/0x2490 [ 1539.039867][T13500] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1539.045300][T13500] ? lockdep_hardirqs_on+0x98/0x150 [ 1539.050563][T13500] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1539.056026][T13500] ? _local_bh_enable+0xa0/0xa0 [ 1539.060945][T13500] ? __dev_queue_xmit+0x272/0x37e0 [ 1539.066214][T13500] ? __dev_queue_xmit+0x1329/0x37e0 [ 1539.071475][T13500] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1539.077091][T13500] ? __dev_queue_xmit+0x272/0x37e0 [ 1539.082286][T13500] ? ref_tracker_free+0x686/0x830 [ 1539.087376][T13500] ? refcount_inc+0x70/0x70 [ 1539.091938][T13500] ? __asan_memcpy+0x40/0x70 [ 1539.096598][T13500] ? __skb_clone+0x5c/0x6c0 [ 1539.101185][T13500] ? __skb_clone+0x446/0x6c0 [ 1539.105863][T13500] ? netlink_deliver_tap+0x2e/0x1b0 [ 1539.111137][T13500] ? __lock_acquire+0x7eb0/0x7eb0 [ 1539.116237][T13500] ? netlink_deliver_tap+0x2e/0x1b0 [ 1539.121769][T13500] netlink_unicast+0x7b1/0x930 [ 1539.126620][T13500] netlink_sendmsg+0x8d0/0xbf0 [ 1539.131470][T13500] ? netlink_getsockopt+0x590/0x590 [ 1539.136744][T13500] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1539.142390][T13500] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1539.147742][T13500] ? security_socket_sendmsg+0x80/0xa0 [ 1539.153255][T13500] ? netlink_getsockopt+0x590/0x590 [ 1539.158613][T13500] ____sys_sendmsg+0x61b/0x980 [ 1539.163458][T13500] ? __asan_memset+0x22/0x40 [ 1539.168122][T13500] ? __sys_sendmsg_sock+0x30/0x30 [ 1539.173212][T13500] ? __import_iovec+0x5f2/0x850 [ 1539.178145][T13500] ? import_iovec+0x73/0xa0 [ 1539.182731][T13500] ___sys_sendmsg+0x2a6/0x360 [ 1539.187499][T13500] ? __sys_sendmsg+0x2b0/0x2b0 [ 1539.192381][T13500] __se_sys_sendmsg+0x1d0/0x2c0 [ 1539.197304][T13500] ? __x64_sys_sendmsg+0x80/0x80 [ 1539.202319][T13500] ? lockdep_hardirqs_on+0x98/0x150 [ 1539.207576][T13500] do_syscall_64+0x55/0xb0 [ 1539.212047][T13500] ? clear_bhb_loop+0x40/0x90 [ 1539.216782][T13500] ? clear_bhb_loop+0x40/0x90 [ 1539.221528][T13500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1539.227493][T13500] RIP: 0033:0x7f171c99f559 [ 1539.231960][T13500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1539.251634][T13500] RSP: 002b:00007f171d77e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1539.260122][T13500] RAX: ffffffffffffffda RBX: 00007f171cc25fa0 RCX: 00007f171c99f559 [ 1539.268153][T13500] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 1539.276181][T13500] RBP: 00007f171ca36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1539.284212][T13500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1539.292337][T13500] R13: 00007f171cc26038 R14: 00007f171cc25fa0 R15: 00007ffe16c1c8f8 [ 1539.300384][T13500] [ 1539.401477][ T9] usb 6-1: USB disconnect, device number 11 [ 1539.401524][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1539.415814][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1541.434959][T13521] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1821'. [ 1542.743996][ T27] audit: type=1326 audit(1792546925.276:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.5.1821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db839f559 code=0x7ffc0000 [ 1542.780992][ T27] audit: type=1326 audit(1792546925.286:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.5.1821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db839f559 code=0x7ffc0000 [ 1542.805507][ T27] audit: type=1326 audit(1792546925.286:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.5.1821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db839f559 code=0x7ffc0000 [ 1542.835614][ T27] audit: type=1326 audit(1792546925.286:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.5.1821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db839f559 code=0x7ffc0000 [ 1542.864909][ T27] audit: type=1326 audit(1792546925.286:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.5.1821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4db839f559 code=0x7ffc0000 [ 1542.894417][ T27] audit: type=1326 audit(1792546925.286:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.5.1821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db839f559 code=0x7ffc0000 [ 1542.932091][ T27] audit: type=1326 audit(1792546925.286:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.5.1821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db839f559 code=0x7ffc0000 [ 1542.962936][ T27] audit: type=1326 audit(1792546925.286:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.5.1821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db839f559 code=0x7ffc0000 [ 1542.988539][ T27] audit: type=1326 audit(1792546925.286:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.5.1821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db839f559 code=0x7ffc0000 [ 1543.019788][ T27] audit: type=1326 audit(1792546925.286:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.5.1821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f4db839f559 code=0x7ffc0000 [ 1543.219573][T13525] synth uevent: /bus/acpi: unknown uevent action string [ 1543.440852][ T9734] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1544.343570][ T9734] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1544.353811][ T9734] usb 4-1: config 2 has an invalid interface number: 69 but max is 0 [ 1544.374923][ T9734] usb 4-1: config 2 has no interface number 0 [ 1544.401567][ T9734] usb 4-1: config 2 interface 69 has no altsetting 0 [ 1544.446593][ T9734] usb 4-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=73.9f [ 1544.468527][ T9734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.503415][T13538] exFAT-fs (nbd5): mounting with "discard" option, but the device does not support discard [ 1544.513760][T13538] syz.5.1826: attempt to access beyond end of device [ 1544.513760][T13538] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1544.526662][T13538] exFAT-fs (nbd5): unable to read boot sector [ 1544.532795][T13538] exFAT-fs (nbd5): failed to read boot sector [ 1544.538875][T13538] exFAT-fs (nbd5): failed to recognize exfat type [ 1544.547906][ T9734] usb 4-1: Product: syz [ 1544.572611][ T9734] usb 4-1: Manufacturer: syz [ 1544.585495][ T9734] usb 4-1: SerialNumber: syz [ 1546.250860][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.257239][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.302940][ T9734] snd_usb_podhd 4-1:2.69: Line 6 POD HD300 found [ 1546.320046][ T9734] snd_usb_podhd 4-1:2.69: set_interface failed [ 1546.351241][ T9734] snd_usb_podhd 4-1:2.69: Line 6 POD HD300 now disconnected [ 1546.358838][ T9734] snd_usb_podhd: probe of 4-1:2.69 failed with error -71 [ 1546.425716][ T9734] usb 4-1: USB disconnect, device number 20 [ 1546.661424][T13551] : Can't lookup blockdev [ 1548.653473][T13564] exFAT-fs (nbd5): mounting with "discard" option, but the device does not support discard [ 1548.663927][T13564] syz.5.1836: attempt to access beyond end of device [ 1548.663927][T13564] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1548.677506][T13564] exFAT-fs (nbd5): unable to read boot sector [ 1548.683679][T13564] exFAT-fs (nbd5): failed to read boot sector [ 1548.689756][T13564] exFAT-fs (nbd5): failed to recognize exfat type [ 1550.794767][ T9] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1550.833523][T13566] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1551.398437][T13578] jffs2: notice: (13578) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1553.558109][T13598] exFAT-fs (nbd5): mounting with "discard" option, but the device does not support discard [ 1553.568594][T13598] syz.5.1845: attempt to access beyond end of device [ 1553.568594][T13598] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1553.581484][T13598] exFAT-fs (nbd5): unable to read boot sector [ 1553.587575][T13598] exFAT-fs (nbd5): failed to read boot sector [ 1553.594611][T13598] exFAT-fs (nbd5): failed to recognize exfat type [ 1553.601587][ T5892] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1553.760880][ T9734] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1553.790994][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 1553.807113][ T5892] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1553.818742][ T5892] usb 2-1: config 179 has no interface number 0 [ 1553.830288][ T5892] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1553.847859][ T5892] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1553.870104][ T5892] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1553.886828][ T5892] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1553.900957][ T5892] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1553.914833][ T5892] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1553.924474][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.944171][T13593] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1553.974980][ T9734] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1554.005838][ T9734] usb 4-1: config 2 has an invalid interface number: 69 but max is 0 [ 1554.025748][ T9734] usb 4-1: config 2 has no interface number 0 [ 1554.032944][ T9734] usb 4-1: config 2 interface 69 has no altsetting 0 [ 1554.049628][ T9734] usb 4-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=73.9f [ 1554.062536][ T9734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.072234][ T9734] usb 4-1: Product: syz [ 1554.076566][ T9734] usb 4-1: Manufacturer: syz [ 1554.084123][ T9734] usb 4-1: SerialNumber: syz [ 1556.469252][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1556.477661][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1556.501089][ T9717] usb 2-1: USB disconnect, device number 33 [ 1556.669788][ T9734] snd_usb_podhd 4-1:2.69: Line 6 POD HD300 found [ 1556.693206][ T9734] snd_usb_podhd 4-1:2.69: set_interface failed [ 1556.720321][ T9734] snd_usb_podhd 4-1:2.69: Line 6 POD HD300 now disconnected [ 1556.728901][ T9734] snd_usb_podhd: probe of 4-1:2.69 failed with error -71 [ 1556.751240][ T9734] usb 4-1: USB disconnect, device number 21 [ 1559.468800][ T7881] libceph: connect (1)[c::]:6789 error -101 [ 1559.478275][ T7881] libceph: mon0 (1)[c::]:6789 connect error [ 1561.221289][ T7881] libceph: connect (1)[c::]:6789 error -101 [ 1561.227448][ T7881] libceph: mon0 (1)[c::]:6789 connect error [ 1561.244727][T13626] ceph: No mds server is up or the cluster is laggy [ 1561.828115][ T7881] libceph: connect (1)[c::]:6789 error -101 [ 1561.873065][ T7881] libceph: mon0 (1)[c::]:6789 connect error [ 1562.210932][ T9734] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1562.530301][ T9734] usb 6-1: Using ep0 maxpacket: 8 [ 1562.542709][ T9734] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1562.561034][ T9734] usb 6-1: config 179 has no interface number 0 [ 1562.570799][ T9734] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1562.582694][ T9734] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1562.594533][ T9734] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1562.607983][ T9734] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1562.645149][T13649] ucma_write: process 1647 (syz.3.1861) changed security contexts after opening file descriptor, this is not allowed. [ 1562.672440][ T9734] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1562.698668][ T9734] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1563.044700][ T9734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.387300][T13638] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1563.709676][T11535] usb 6-1: USB disconnect, device number 12 [ 1563.709892][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1563.724010][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1564.380861][ T7881] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 1564.574758][ T7881] usb 2-1: not running at top speed; connect to a high speed hub [ 1564.641754][ T7881] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.463793][ T7881] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1566.494391][ T7881] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 1566.529623][ T7881] usb 2-1: Product: syz [ 1566.565688][ T7881] usb 2-1: Manufacturer: syz [ 1566.608247][ T7881] usb 2-1: Found UVC 1.00 device syz (225a:e1d4) [ 1567.362892][ T7881] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1567.451762][T13670] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1567.511490][ T7881] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 1567.615471][ T7881] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 1567.684001][ T7881] usb 2-1: USB disconnect, device number 34 [ 1571.096537][T13687] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1865'. [ 1571.106922][T13687] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1865'. [ 1572.181223][T13690] 9pnet_fd: Insufficient options for proto=fd [ 1573.614290][T13700] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1874'. [ 1573.894913][ T7881] libceph: connect (1)[c::]:6789 error -101 [ 1573.987446][ T7881] libceph: mon0 (1)[c::]:6789 connect error [ 1574.401761][ T7881] libceph: connect (1)[c::]:6789 error -101 [ 1574.466321][ T7881] libceph: mon0 (1)[c::]:6789 connect error [ 1574.663075][T13704] ceph: No mds server is up or the cluster is laggy [ 1574.842826][T13711] exFAT-fs (nbd3): mounting with "discard" option, but the device does not support discard [ 1574.853422][T13711] syz.3.1877: attempt to access beyond end of device [ 1574.853422][T13711] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1574.866293][T13711] exFAT-fs (nbd3): unable to read boot sector [ 1574.872434][T13711] exFAT-fs (nbd3): failed to read boot sector [ 1574.878529][T13711] exFAT-fs (nbd3): failed to recognize exfat type [ 1578.131368][T13723] 9pnet_fd: Insufficient options for proto=fd [ 1578.772345][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 1581.159914][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 1581.224017][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 1581.552562][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 1581.645451][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 1581.822598][T13749] ceph: No mds server is up or the cluster is laggy [ 1582.132805][T13760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1889'. [ 1582.391003][ T27] kauditd_printk_skb: 62 callbacks suppressed [ 1582.391045][ T27] audit: type=1326 audit(1792546965.976:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13754 comm="syz.3.1889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3959f559 code=0x7ffc0000 [ 1584.628892][ T27] audit: type=1326 audit(1792546965.976:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13754 comm="syz.3.1889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3959f559 code=0x7ffc0000 [ 1584.653294][ T27] audit: type=1326 audit(1792546965.976:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13754 comm="syz.3.1889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3959f559 code=0x7ffc0000 [ 1584.803396][ T27] audit: type=1326 audit(1792546965.976:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13754 comm="syz.3.1889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3959f559 code=0x7ffc0000 [ 1584.894816][ T27] audit: type=1326 audit(1792546965.976:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13754 comm="syz.3.1889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7c3959f559 code=0x7ffc0000 [ 1584.957021][ T27] audit: type=1326 audit(1792546965.976:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13754 comm="syz.3.1889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3959f559 code=0x7ffc0000 [ 1584.999805][ T27] audit: type=1326 audit(1792546965.976:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13754 comm="syz.3.1889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3959f559 code=0x7ffc0000 [ 1585.030724][ T27] audit: type=1326 audit(1792546965.976:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13754 comm="syz.3.1889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3959f559 code=0x7ffc0000 [ 1585.056412][ T27] audit: type=1326 audit(1792546965.976:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13754 comm="syz.3.1889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3959f559 code=0x7ffc0000 [ 1585.087090][ T27] audit: type=1326 audit(1792546965.976:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13754 comm="syz.3.1889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f7c3959f559 code=0x7ffc0000 [ 1589.343976][ T7438] syz-executor (7438) used greatest stack depth: 20200 bytes left [ 1589.379555][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.461212][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.541765][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.609633][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 1591.660773][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 1591.671754][ T12] bridge0: port 3(netdevsim0) entered disabled state [ 1592.371411][T13808] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1592.454615][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.028884][T13828] binder: 13827:13828 ioctl 4018620d 0 returned -22 [ 1601.491292][ T12] hsr_slave_0: left promiscuous mode [ 1601.526228][ T12] hsr_slave_1: left promiscuous mode [ 1601.569885][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1601.591839][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1601.634124][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1601.653178][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1601.842164][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1601.866976][ T12] bridge_slave_1: left allmulticast mode [ 1601.939420][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1601.964467][ T12] bridge_slave_1: left promiscuous mode [ 1602.055357][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.253314][ T12] bridge_slave_0: left allmulticast mode [ 1602.332645][ T9717] libceph: connect (1)[c::]:6789 error -101 [ 1602.363313][ T12] bridge_slave_0: left promiscuous mode [ 1602.406149][ T9717] libceph: mon0 (1)[c::]:6789 connect error [ 1602.455457][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.481892][T13881] ceph: No mds server is up or the cluster is laggy [ 1602.869785][ T12] veth1_macvtap: left promiscuous mode [ 1602.948851][ T12] veth0_macvtap: left promiscuous mode [ 1603.022934][ T12] veth1_vlan: left promiscuous mode [ 1603.096366][ T12] veth0_vlan: left promiscuous mode [ 1605.157091][T13896] syz.1.1915 (13896): drop_caches: 2 [ 1606.825388][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1606.878058][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1606.934382][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1606.988531][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1607.406605][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1607.416252][ T12] bond0 (unregistering): Released all slaves [ 1607.519814][T13911] tun0: tun_chr_ioctl cmd 1074025675 [ 1607.540821][T13911] tun0: persist enabled [ 1607.566972][T13914] tun0: tun_chr_ioctl cmd 1074025675 [ 1607.590154][T13914] tun0: persist disabled [ 1607.658133][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.664984][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.891121][T13716] Bluetooth: hci1: command 0x0406 tx timeout [ 1607.926982][T13931] comedi comedi3: board detection failed [ 1609.131177][T13938] netlink: 'syz.3.1918': attribute type 10 has an invalid length. [ 1609.567372][ T12] IPVS: stop unused estimator thread 0... [ 1615.471199][T13977] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1618.570697][T13716] Bluetooth: hci1: command 0x0406 tx timeout [ 1621.862731][T14032] CacheFiles: Failed to register: -95 [ 1622.140766][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1622.321429][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1622.336245][ T9] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 1622.368887][ T9] usb 4-1: config 0 has no interface number 0 [ 1622.378446][ T9] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1622.402556][ T9] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 1622.414430][ T9] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1622.440404][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1622.461960][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.488073][ T9] usb 4-1: Product: syz [ 1622.513478][ T9] usb 4-1: Manufacturer: syz [ 1622.530072][ T9] usb 4-1: SerialNumber: syz [ 1622.549647][ T9] usb 4-1: config 0 descriptor?? [ 1622.597485][T14032] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1622.628286][ T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input10 [ 1622.896171][ T23] usb 4-1: USB disconnect, device number 22 [ 1623.688081][T14066] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1934'. [ 1627.785156][ T7881] libceph: connect (1)[c::]:6789 error -101 [ 1627.864816][ T7881] libceph: mon0 (1)[c::]:6789 connect error [ 1628.192471][ T7881] libceph: connect (1)[c::]:6789 error -101 [ 1628.222417][ T7881] libceph: mon0 (1)[c::]:6789 connect error [ 1628.471045][T14096] ceph: No mds server is up or the cluster is laggy [ 1634.334224][ T9] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1634.554534][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 1634.588599][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1634.614348][ T9] usb 6-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1634.641870][ T9] usb 6-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 1634.664156][ T9] usb 6-1: Product: syz [ 1634.668393][ T9] usb 6-1: Manufacturer: syz [ 1634.699843][ T9] usb 6-1: Found UVC 1.00 device syz (225a:e1d4) [ 1634.901087][ T9] usb 6-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1634.934268][ T9] uvcvideo 6-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 1634.953163][ T9] uvcvideo 6-1:1.1: Failed to initialize the device (-71). [ 1635.006944][ T9] usb 6-1: USB disconnect, device number 13 [ 1637.001269][T14159] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1639.772254][ T9717] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1640.003354][ T9717] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1640.039740][ T9717] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1640.068422][ T9717] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 1640.091417][ T9717] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1640.127108][ T9717] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1640.165348][ T9717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.216364][ T9717] usb 4-1: probing VID:PID(0424:012C) [ 1640.239324][ T9717] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 1640.256536][ T9717] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1640.276792][ T9717] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 1640.289433][ T9717] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 1640.325338][ T9717] vub300: probe of 4-1:1.0 failed with error -22 [ 1642.076857][ T27] kauditd_printk_skb: 67 callbacks suppressed [ 1642.076875][ T27] audit: type=1326 audit(1792547025.926:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14226 comm="syz.5.1956" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4db839f559 code=0x0 [ 1642.340918][ T23] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1642.532515][ T23] usb 2-1: not running at top speed; connect to a high speed hub [ 1642.537166][ T8] usb 4-1: USB disconnect, device number 23 [ 1642.559472][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1642.606259][ T23] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1642.628123][ T23] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 1642.638350][ T23] usb 2-1: Product: syz [ 1642.644892][ T23] usb 2-1: Manufacturer: syz [ 1642.672368][ T23] usb 2-1: Found UVC 1.00 device syz (225a:e1d4) [ 1642.895383][ T23] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1642.921709][ T23] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 1642.943009][ T23] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 1642.996185][ T23] usb 2-1: USB disconnect, device number 35 [ 1646.797577][T14305] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1653.127211][ T27] audit: type=1326 audit(1792547036.976:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.3.1967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3959f559 code=0x7ffc0000 [ 1653.322623][ T27] audit: type=1326 audit(1792547036.976:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.3.1967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3959f559 code=0x7ffc0000 [ 1653.626469][ T27] audit: type=1326 audit(1792547037.016:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.3.1967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3959f559 code=0x7ffc0000 [ 1653.953405][ T27] audit: type=1326 audit(1792547037.016:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.3.1967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3959f559 code=0x7ffc0000 [ 1654.255945][ T27] audit: type=1326 audit(1792547037.016:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.3.1967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7c3959f559 code=0x7ffc0000 [ 1654.395745][ T27] audit: type=1326 audit(1792547037.016:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.3.1967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3959f559 code=0x7ffc0000 [ 1654.420465][ T27] audit: type=1326 audit(1792547037.016:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.3.1967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3959f559 code=0x7ffc0000 [ 1654.445129][ T27] audit: type=1326 audit(1792547037.016:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.3.1967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3959f559 code=0x7ffc0000 [ 1654.470805][ T27] audit: type=1326 audit(1792547037.016:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.3.1967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f7c3959f559 code=0x7ffc0000 [ 1654.495417][ T27] audit: type=1326 audit(1792547037.016:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.3.1967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3959f559 code=0x7ffc0000 [ 1654.640798][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1654.658918][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1655.012801][T14338] ceph: No mds server is up or the cluster is laggy [ 1661.479123][ T8] smpboot: CPU 1 is now offline [ 1662.114280][T14376] exFAT-fs (nbd5): mounting with "discard" option, but the device does not support discard [ 1662.299466][T14376] syz.5.1978: attempt to access beyond end of device [ 1662.299466][T14376] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1662.385091][T14376] exFAT-fs (nbd5): unable to read boot sector [ 1662.413042][T14376] exFAT-fs (nbd5): failed to read boot sector [ 1662.440363][T14376] exFAT-fs (nbd5): failed to recognize exfat type [ 1664.908284][ T8171] libceph: connect (1)[c::]:6789 error -101 [ 1664.932119][ T8171] libceph: mon0 (1)[c::]:6789 connect error [ 1665.042607][T14384] ceph: No mds server is up or the cluster is laggy SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=6 req=1830 state=3 status=67 (errno 9: Bad file descriptor) [ 1666.414963][ T5962] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.624154][ T5962] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.745625][ T5962] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.822428][ T5962] netdevsim netdevsim5 netdevsim0 (unregistering): left allmulticast mode [ 1666.838017][ T5962] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 1666.850379][ T5962] bridge0: port 3(netdevsim0) entered disabled state [ 1666.862798][ T5962] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.833872][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1667.840216][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.705652][ T5962] hsr_slave_0: left promiscuous mode [ 1668.718294][ T5962] hsr_slave_1: left promiscuous mode [ 1668.741675][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1668.749141][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1668.798376][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1668.823876][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1668.842383][ T5962] bridge_slave_1: left allmulticast mode [ 1668.848069][ T5962] bridge_slave_1: left promiscuous mode [ 1668.873070][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.886721][ T5962] bridge_slave_0: left allmulticast mode [ 1668.905149][ T5962] bridge_slave_0: left promiscuous mode [ 1668.918598][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1668.974222][ T5962] veth1_macvtap: left promiscuous mode [ 1668.979788][ T5962] veth0_macvtap: left promiscuous mode [ 1669.000849][ T5962] veth1_vlan: left promiscuous mode [ 1669.006212][ T5962] veth0_vlan: left promiscuous mode [ 1669.828338][ T5962] team0 (unregistering): Port device team_slave_1 removed [ 1669.886452][ T5962] team0 (unregistering): Port device team_slave_0 removed [ 1669.946267][ T5962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1670.009241][ T5962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1670.448403][ T5962] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1670.459955][ T5962] bond0 (unregistering): Released all slaves [ 1670.796091][ T5962] IPVS: stop unused estimator thread 0... [ 1670.948005][ T5962] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.032699][ T5962] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.123413][ T5962] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.210241][ T5962] team0: Port device netdevsim0 removed [ 1671.233267][ T5962] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.515576][ T5962] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.604214][ T5962] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.696218][ T5962] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.788364][ T5962] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 1671.811215][ T5962] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 1671.821382][ T5962] bridge0: port 3(netdevsim0) entered disabled state [ 1671.854483][ T5962] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.812298][ T5962] hsr_slave_0: left promiscuous mode [ 1673.831307][ T5962] hsr_slave_1: left promiscuous mode [ 1673.842847][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1673.850273][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1673.882814][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1673.890288][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1673.922726][ T5962] bridge_slave_1: left allmulticast mode [ 1673.928438][ T5962] bridge_slave_1: left promiscuous mode [ 1673.942544][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.951543][ T5962] bridge_slave_0: left allmulticast mode [ 1673.957226][ T5962] bridge_slave_0: left promiscuous mode [ 1673.981580][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.010514][ T5962] hsr_slave_0: left promiscuous mode [ 1674.024960][ T5962] hsr_slave_1: left promiscuous mode [ 1674.042675][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1674.050143][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1674.068445][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1674.076667][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1674.087167][ T5962] bridge_slave_1: left allmulticast mode [ 1674.093326][ T5962] bridge_slave_1: left promiscuous mode [ 1674.099095][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1674.109695][ T5962] bridge_slave_0: left allmulticast mode [ 1674.117824][ T5962] bridge_slave_0: left promiscuous mode [ 1674.126475][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.167188][ T5962] veth1_macvtap: left promiscuous mode [ 1674.172838][ T5962] veth0_macvtap: left promiscuous mode [ 1674.178452][ T5962] veth1_vlan: left promiscuous mode [ 1674.185683][ T5962] veth0_vlan: left promiscuous mode [ 1674.198445][ T5962] veth1_macvtap: left promiscuous mode [ 1674.206705][ T5962] veth0_macvtap: left promiscuous mode [ 1674.212962][ T5962] veth1_vlan: left promiscuous mode [ 1674.218275][ T5962] veth0_vlan: left promiscuous mode [ 1674.457124][ T5962] .s¸;p>Da*øÉ’- (unregistering): Released all slaves [ 1675.058608][ T5962] team0 (unregistering): Port device team_slave_1 removed [ 1675.113861][ T5962] team0 (unregistering): Port device team_slave_0 removed [ 1675.164882][ T5962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1675.217592][ T5962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface