last executing test programs: 20m43.065465073s ago: executing program 32 (id=141): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 20m1.829573492s ago: executing program 33 (id=254): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') writev(r0, &(0x7f0000003740)=[{&(0x7f0000001440)='deny', 0x4}], 0x1) 19m38.859392487s ago: executing program 34 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x2, &(0x7f00000000c0)=0xa) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x3, 0xc) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x60000, 0x1, 0x13, r3, 0x0) syz_open_dev$usbmon(0x0, 0x80000001, 0x82002) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xcc2041, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x15) socket$packet(0x11, 0x2, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @multicast}, 0x10) 19m27.412270589s ago: executing program 1 (id=347): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='Con', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r3, &(0x7f00000005c0)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) 19m27.072939357s ago: executing program 1 (id=349): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) r0 = socket(0x11, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x2000084c, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYRES64=r1, @ANYRES8=r3, @ANYRES16=r1, @ANYRES64=r1, @ANYBLOB="2c6469736361726459ad809e1eb82c00fb278330ab3b4884d36adf6908d11f5783dc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14fc, &(0x7f0000002a80)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 19m25.814042987s ago: executing program 1 (id=352): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000040)={0xd}) 19m25.463366055s ago: executing program 1 (id=355): openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002bc0), 0x202000, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) lstat(&(0x7f0000000680)='./bus\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000200), 0xfc, 0x587, &(0x7f0000000f00)="$eJzs3V9rW+UfAPDvSf+s+/P7rYMx9EYGu3Ayl66tfyYIzkvR4UDvZ2izMpouo0nHWgeuF+7GGxmCiAPxBXjv5dAX4KsY6GDIKHohQuSkJ1vWJk3bpUu2fD5wtufJOSfP8+Sc79PvyUlIAAPrePpPLuLliPg6iTjctG44spXH17dbe3hjJl2SqNU++TOJJHussX2S/X8wq7wUEb98GXEqt7ndyvLKfKFUKi5m9YnqwtWJyvLK6csLhbniXPHK1PT02Tenp955+62ujfW1C39/9/HdD85+dWLt25/uH7mdxLk4lK1rHsdTuNlcOV74NyuNxLkNG052obF+kvS6A+zKUBbnI5HOAYdjKIt64MX3RUTUgAGViH8YUI08oHFt36Xr4OfGg/fXL4DqYx9tHv/w+nsjMVa/NjqwljxxZZRe7453of20jZ//uHM7XWLr9yH2d6gD7MjN1Yg4Mzy8ef5Psvlv987U3zze2sY2Bu3vD/TS3TT/eb1V/pd7lP/EpvxnrGvtd47/3P2uNdZCmv+92zL/fTR1jQ9ltf/Vc76R5NLlUvFMRPw/Ik5GreOtj7Nr92rt1jXnf+mStt/IBbN+3B/e9+Q+s4VqISJGdznkJzxYrae3qTbz/1g9192Y/6avx4VttnGseOeVdus6j39v1X6MeLXl8X98WJOt709O1M+HicZZsdlft4791q79Xo//wWrEga3HP54036+t7LyNH8b+KbZbt9vzfzT5tF5uBMH1QrW6OBkxmny0+fGpx/s26o3t0/GfPLH1/Nfq/E8vvj7b5vhvHb3VdtN+OP6zOzr+Oy/c+/Dz79u1v73j/0a9dDJ7JJv/WsvOle128GlfPwAAAAAAAOgnuYg4FEku/6icy+Xz69/hPRoHcqVypXrqUnnpymzUvys7HiO5xp3uw02fh5jMPg/bqE9tqE9HxJGI+GZof72enymXZns9eAAAAAAAAAAAAAAAAAAAAOgTB9t8/z/1+1CnvX99Bj0E9lT9hw329boXQC90/Mn/p/0lOKBvdYx/4IUl/mFwiX8YXOIfBpf4h8El/mFwiX8YXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAuurC+fPpUlt7eGMmrc9eW16aL187PVuszOcXlmbyM+XFq/m5cnmuVMzPlBc6PV+pXL46ORVL1yeqxUp1orK8cnGhvHSlevHyQmGueLE48kxGBQAAAAAAAAAAAAAAAAAAAM+XyvLKfKFUKi52oZBERDeep98K70VfdGMvB7huV7sP72HHkkh237FuF0b2IGSeSWE16/jO9urJdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf0XAAD//+mmJ0c=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x1a4, 0x85c, 0x5}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r2, 0x0, 0x8000, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0xff70) 19m23.197606128s ago: executing program 1 (id=359): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat(0xffffffffffffff9c, 0x0, 0x2d41, 0xd5) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xfffffff8, 0x202, 0x0, 0x0, 0x2, 0x6}}, 0x50) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) 19m22.814277137s ago: executing program 1 (id=363): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) bind$inet(r0, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x3000)=nil) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) 19m22.075847065s ago: executing program 35 (id=363): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) bind$inet(r0, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x3000)=nil) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) 18m11.839427936s ago: executing program 8 (id=535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = getpid() ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000002c0)={0x5, "8f2e17cf901b7dead30e5d7240e550cd072dae11595503c102419717b0fb2350", 0x4, 0x20, 0xf066, 0x10001, 0x2, 0x2, 0x0, 0x10000}) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000001180), 0x80) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000ffdaef862b", 0x48}], 0x1) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000040)={'bond0\x00', @ifru_names='vcan0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x800) 18m11.016645166s ago: executing program 8 (id=539): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000000380)="c109000000000000001d1e020e", 0xd}, {&(0x7f0000001380)="45f3d8", 0x3}], 0x2}, 0x20040000) 18m10.721900014s ago: executing program 8 (id=542): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') r1 = socket$netlink(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket(0x1e, 0x805, 0x0) connect$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x10) connect$tipc(r4, &(0x7f0000000600)=@name={0x1e, 0x2, 0x2, {{0x1, 0xa}, 0x4}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000640)={[{@nodelalloc}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x33, 0x31, 0x31, 0x65, 0x63, 0x66, 0x61], 0x2d, [0x62, 0x33, 0x39, 0x30], 0x2d, [0x34, 0x38, 0x66, 0x33], 0x2d, [0x31, 0x69, 0x31, 0x32], 0x2d, [0x61, 0x36, 0x65, 0x30, 0x36, 0x39, 0x31, 0x34]}}}, {@uid_gt}, {@euid_eq}]}, 0x3, 0x480, &(0x7f0000000a40)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0xfefffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xf}, {0xd}}}, 0x24}}, 0x20000080) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000000)=0x2, 0x4) read$FUSE(r0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[], 0x50}, 0x1, 0x7}, 0x0) 18m9.377339035s ago: executing program 8 (id=543): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2084ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x18000, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0xd270, 0x0, 0x1, 0xd05, 0xd4}) 18m7.821554573s ago: executing program 8 (id=547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) 18m6.28719162s ago: executing program 8 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x43010, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 18m5.86973301s ago: executing program 36 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x43010, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 16m48.910017305s ago: executing program 6 (id=735): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r0, &(0x7f0000000240)='0\x00', 0x2) 16m48.231271291s ago: executing program 6 (id=736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) sched_setparam(r0, &(0x7f0000000000)=0x401) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@grpquota}, {@nomblk_io_submit}, {@nogrpid}, {@prjquota}, {@nolazytime}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$eJzs3c1rHGUYAPBnNp+m1UYQbL00Jy2UbtoaWwWh8SSChYKebcNmG2I22ZLdlCbkYBFBEEGLB0Evnv2oN28ievZv8CIiLVXTYsWDrMx+JJtukm7TTdI2vx9M8r4zs/PMs7Pzvu/uDLsB7FpD6Z9MxIGI+CiJ2Fefn0RET7XUHTFaW+/20mIunZKoVN74M6muc2tpMRdNj0ntqVf2R8SP70UczrTGLc0vTI0VCvnZen24PH1huDS/cGRyemwiP5GfOXFsZOT4yRdOnuhcrn//vLD3+sevPvfN6L/vPn31w5+SGI299WXNeXTKUAzVn5Oe9Cms+b7TUR4MyU7vAJuSnppdtbM8DsS+6KqWAIBHWdr/VwCAXSbR/wPALtP4HODW0mKuMe3sJxLb68YrEdFfy79xfbO2pLt+za6/eh104Fay6spIEhGDHYi/PyI+/+6tr9Iptug6JMBa3rkcEecGh1rb/2TlnoVNOtrGOkN31LV/sH1+SMc/L641/sssj39ijfFP3xrn7mYMRfTWN1fVev5nrq0K2nCqA8Hr47+Xa/e2pYk2jf+Wb1ob7KrXHk8rByNispBP27YnIuJQ9PSdnyzkj20Q49DN/26ut2yoafz315W3v0zjp/9X1shc6+5b/ZjxsfLY/eTc7MbliGe6V+7tu93S/jeOeuv498xGGz64Unztpfc/W2+1NP8038bUmv/WqnwR8WysnX9DsuH9icPp4T9a+7t2jG9//XRgvfjNxz+d0viN9wLbIT3+AxvnP5g0369Z6mz8u+e//Ppf3qH09d+bvFkt99bnXRorl2ePRfQmr7fOP76ytUa9sX6af23Di72xKv+V9i9Zo/1L3xOeazPH7ut/fL35/LdWmv/4PR3/ey9cvT3VtV789o7/SLV0qD6nnfav3R28n+cOAAAAAAAAAAAAAAAAAAAAAAAAANqViYi9kWSyy+VMJput/Yb3UzGQKRRL5cPni3Mz41H9rezB6Mk0vupyX62eNL7/dLCpfvyO+vMR8WREfNL3WLWezRUL4zudPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU7Vnn9/9Tv/ft9N4BAFumv2VOpVKpNNdv5jdcDAA8dFr7fwDgUaf/B4DdR/8PALuP/h8Adh/9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFvszOnT6VT5Z2kxl9bHL87PTRUvHhnPl6ay03O5bK44eyE7USxOFPLZXHH6btsrFIsXRmJm7tJwOV8qD5fmF85OF+dmymcnp8dOxdl8z7ZkBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3pjS/MDVWKORnH4nCBxHxAOyGQmcLvx35Zf9G61y5y8t4tI1Y/fUT4gFJeecLO9wwAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwk/g8AAP//Ez0kyA==") unshare(0x22060600) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 16m45.906560356s ago: executing program 6 (id=740): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c0100000000090400"], 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x3) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x1, 0x0, 0x2000}) r4 = syz_io_uring_setup(0x1cfd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x91}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/95) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f0000000100)='./file0\x00', 0x8fff5) 16m42.350282741s ago: executing program 6 (id=751): openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e28}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x65) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x880) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) prlimit64(r0, 0x2, &(0x7f0000000140)={0x2, 0x8}, &(0x7f0000000180)) capset(&(0x7f0000000080)={0x20080522}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) io_setup(0x8, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x17, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x1c, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1e21c, r3, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=[{0x3, 0x4, 0x3, 0x1}]}, 0x94) 16m39.403817531s ago: executing program 6 (id=754): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000280)) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) 16m36.699821005s ago: executing program 6 (id=758): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') r1 = socket$netlink(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket(0x1e, 0x805, 0x0) connect$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x10) connect$tipc(r4, &(0x7f0000000600)=@name={0x1e, 0x2, 0x2, {{0x1, 0xa}, 0x4}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000640)={[{@nodelalloc}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x33, 0x31, 0x31, 0x65, 0x63, 0x66, 0x61], 0x2d, [0x62, 0x33, 0x39, 0x30], 0x2d, [0x34, 0x38, 0x66, 0x33], 0x2d, [0x31, 0x69, 0x31, 0x32], 0x2d, [0x61, 0x36, 0x65, 0x30, 0x36, 0x39, 0x31, 0x34]}}}, {@uid_gt}, {@euid_eq}]}, 0x3, 0x480, &(0x7f0000000a40)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0xfefffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xf}, {0xd}}}, 0x24}}, 0x20000080) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000000)=0x2, 0x4) read$FUSE(r0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[], 0x50}, 0x1, 0x7}, 0x0) 16m20.859891651s ago: executing program 37 (id=758): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') r1 = socket$netlink(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket(0x1e, 0x805, 0x0) connect$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x10) connect$tipc(r4, &(0x7f0000000600)=@name={0x1e, 0x2, 0x2, {{0x1, 0xa}, 0x4}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000640)={[{@nodelalloc}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x33, 0x31, 0x31, 0x65, 0x63, 0x66, 0x61], 0x2d, [0x62, 0x33, 0x39, 0x30], 0x2d, [0x34, 0x38, 0x66, 0x33], 0x2d, [0x31, 0x69, 0x31, 0x32], 0x2d, [0x61, 0x36, 0x65, 0x30, 0x36, 0x39, 0x31, 0x34]}}}, {@uid_gt}, {@euid_eq}]}, 0x3, 0x480, &(0x7f0000000a40)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0xfefffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xf}, {0xd}}}, 0x24}}, 0x20000080) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000000)=0x2, 0x4) read$FUSE(r0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[], 0x50}, 0x1, 0x7}, 0x0) 15m9.955369264s ago: executing program 0 (id=931): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/47, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 15m9.007233177s ago: executing program 0 (id=934): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2, 0x10) socket$inet(0x2, 0x3, 0x8d) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = signalfd(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r6) inotify_init1(0x800) gettid() getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0xffffffff, 0x20102}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x155}}]}}}]}, 0x58}}, 0x4000080) 15m5.967134749s ago: executing program 0 (id=937): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0xa00003, &(0x7f00000000c0)=ANY=[], 0x1, 0x29c, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r4, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) 15m4.596134262s ago: executing program 0 (id=940): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 15m1.824023708s ago: executing program 0 (id=949): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2, 0x10) socket$inet(0x2, 0x3, 0x8d) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = signalfd(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r5) inotify_init1(0x800) gettid() getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0xffffffff, 0x20102}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x155}}]}}}]}, 0x58}}, 0x4000080) 14m59.568979091s ago: executing program 0 (id=952): openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e28}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x65) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x880) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) write$P9_ROPEN(r3, &(0x7f0000000380)={0x18, 0x71, 0x2, {{0x4, 0x4, 0x6}, 0xc3}}, 0x18) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) prlimit64(r0, 0x2, &(0x7f0000000140)={0x2, 0x8}, &(0x7f0000000180)) capset(&(0x7f0000000080)={0x20080522}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) io_setup(0x8, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x17, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x1c, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1e21c, r3, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=[{0x3, 0x4, 0x3, 0x1}]}, 0x94) 14m44.322932183s ago: executing program 38 (id=952): openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e28}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x65) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x880) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) write$P9_ROPEN(r3, &(0x7f0000000380)={0x18, 0x71, 0x2, {{0x4, 0x4, 0x6}, 0xc3}}, 0x18) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) prlimit64(r0, 0x2, &(0x7f0000000140)={0x2, 0x8}, &(0x7f0000000180)) capset(&(0x7f0000000080)={0x20080522}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) io_setup(0x8, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x17, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x1c, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1e21c, r3, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=[{0x3, 0x4, 0x3, 0x1}]}, 0x94) 9m31.580663907s ago: executing program 3 (id=1662): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) close(0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setns(0xc9, 0x0) r7 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0xa23, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/ttyGS0\x00', 0x2, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) mmap(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0xd, 0x12, r8, 0xe1c4d000) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'wlc\x00', 0x5, 0x8, 0x77}, {@multicast2, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) 9m30.247370288s ago: executing program 3 (id=1663): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0xc6fffffd) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000003740)={0x2, 0x11, 0x5, 0x1, 0x0, 0x81, 0x0}) 9m29.268907402s ago: executing program 3 (id=1665): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r4, 0xffff) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) 9m25.831417573s ago: executing program 3 (id=1668): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000680)={0x0, 0x0, 0xd, 0x0, 0x3}) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r2, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001540)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0xbb, 0x1b99, 0x0, 0x3, 0x4, 0x13, "b7f8ada941fbfa24b230324b3122fe227031c9fb2622e97099e554942542690fb0219cbefea4d3a5c75b831367cbd848f5a1b04aff3568c826ed63af1057abf6", "e5774ce57e1395c66549c09e1a753713979872f8b081a61f3a2ce683ee7b6ead66b72f1365216f05a2ea09d6cd61fc85ebf757186da4d22874517bf0100dd87b", "8cbcf6468f994f1274302174ba4d9ee37a68f48b1ba174b75fe8178e0debfa0a", [0x80000000, 0xb52]}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x7c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_USERDATA={0x65, 0x7, 0x1, 0x0, "da2e7483a9b294fce36cf5c057e45e7fe74b71b3a029bf49f3fd581e6a8faa91513fb5b1d5d9982850dbb3e4cd0c645cd01898fc539c3a1313dfc4821a0269d4346f673877cbe9e0c916428fac02528b9f91a5f752df6dbcb9a49cbd0db99cb083"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x80) 9m24.476152525s ago: executing program 3 (id=1671): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0xc, [[0x9ef8, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x1], [0x10000, 0x1, 0x0, 0xfffffffe, 0x8001], [0x20000006, 0xba6, 0x100001, 0x0, 0x0, 0x0, 0x100000, 0xffffffff]], '\x00', [{0x0, 0xdc8}, {0xfffffffd}, {0x7, 0x100}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x80000002, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xa}, {0x8000004, 0x8f96, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x65}], '\x00', 0x1002}) fanotify_init(0x1a, 0x1) r1 = socket$inet6(0xa, 0x3, 0x8) setsockopt$sock_int(r1, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 9m23.614375746s ago: executing program 3 (id=1673): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x20, 0x7, 0x8, 0xe, {{0x5, 0x4, 0x3, 0x1b, 0x14, 0x65, 0x0, 0x8, 0x0, 0x0, @empty, @multicast2}}}}) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/drivers\x00', 0x0, 0x0) 9m8.324747508s ago: executing program 39 (id=1673): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x20, 0x7, 0x8, 0xe, {{0x5, 0x4, 0x3, 0x1b, 0x14, 0x65, 0x0, 0x8, 0x0, 0x0, @empty, @multicast2}}}}) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/drivers\x00', 0x0, 0x0) 19.074457958s ago: executing program 2 (id=2927): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc, 0x9}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x3505, 0x2, 0x0, 0x6, 0xfffffffe, 0xffffff7e, 0x6}}, 0xe8) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r1, 0x6f2d, 0x400000002000) timer_create(0x7, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xcadbf000) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) 13.878795081s ago: executing program 4 (id=2934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x60bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 12.011875146s ago: executing program 4 (id=2941): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000280)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x54, 0x0, &(0x7f00000005c0)="fbd24f93362465871e2b0a86b15efbb108660f405e01d0f0c91ebd9783b0b6d77e493299fe9e31a8d0271c989c47c4a335ab9709d852d6fe8421701919108f071fbc577d862305571bef02663e11b2b3a7ca18e7"}) 11.966498527s ago: executing program 9 (id=2942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) shutdown(r1, 0x1) socket$key(0xf, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000019140), 0x8400, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETA(r4, 0x80047456, &(0x7f0000000140)={0x10, 0x0, 0x9, 0x1ff, 0x10, "b4ba1c25a953278a"}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r5, &(0x7f0000000100)='e:__group/myevent sched.sched_switch', 0x24) 11.165704695s ago: executing program 5 (id=2943): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}}, 0x400d4) 10.56279907s ago: executing program 7 (id=2944): mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.access\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)="70726f66696c6500fc", 0xfef) 10.100703901s ago: executing program 5 (id=2945): add_key$keyring(0x0, &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, r2, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x6e, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x1, @loopback, @private2, [@hopopts]}}}}}}}, 0x0) shmctl$SHM_UNLOCK(r1, 0xc) 10.100330991s ago: executing program 4 (id=2946): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) 10.054688292s ago: executing program 9 (id=2947): socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) listen(0xffffffffffffffff, 0x5) prlimit64(0xffffffffffffffff, 0xc, 0x0, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$kcm(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000)) r3 = openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc04c560f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socket$phonet(0x23, 0x2, 0x1) 8.879429329s ago: executing program 7 (id=2948): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r1, 0x4038ae7a, &(0x7f0000000200)=' \x00\x00\x00\x00\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.038132s ago: executing program 2 (id=2949): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x702, 0x30, 0x0, &(0x7f0000001ac0)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047ca70166486b459fdaae0000072", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.02278614s ago: executing program 4 (id=2950): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() modify_ldt$write(0x1, &(0x7f0000000080)={0x51a, 0x20000000, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f00000009c0)={0x5, 0x1000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x12, 0x5, &(0x7f0000000b40)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x9}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="000100001000ffff2abd7000ffdb9f2500000000", @ANYRES32=0x0, @ANYBLOB="f8a65f05218a0400d000128000000100767863616e000000000002800000010000000000", @ANYRES32=0x0, @ANYBLOB="220000007804000008000500", @ANYRES32], 0x100}, 0x1, 0x200000000000000, 0x0, 0x240400d5}, 0x2000c000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x28) unshare(0x62040200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) dup(0xffffffffffffffff) 7.98750117s ago: executing program 9 (id=2951): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x60bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 7.907884612s ago: executing program 2 (id=2952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r4, &(0x7f0000000080), &(0x7f0000001500)=@udp6=r3}, 0x20) 5.530314289s ago: executing program 4 (id=2953): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000680)={0x0, 0x0, 0xd, 0x0, 0x3}) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bind$tipc(r3, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001540)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0xbb, 0x1b99, 0x0, 0x3, 0x4, 0x13, "b7f8ada941fbfa24b230324b3122fe227031c9fb2622e97099e554942542690fb0219cbefea4d3a5c75b831367cbd848f5a1b04aff3568c826ed63af1057abf6", "e5774ce57e1395c66549c09e1a753713979872f8b081a61f3a2ce683ee7b6ead66b72f1365216f05a2ea09d6cd61fc85ebf757186da4d22874517bf0100dd87b", "8cbcf6468f994f1274302174ba4d9ee37a68f48b1ba174b75fe8178e0debfa0a", [0x80000000, 0xb52]}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x7c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_USERDATA={0x65, 0x7, 0x1, 0x0, "da2e7483a9b294fce36cf5c057e45e7fe74b71b3a029bf49f3fd581e6a8faa91513fb5b1d5d9982850dbb3e4cd0c645cd01898fc539c3a1313dfc4821a0269d4346f673877cbe9e0c916428fac02528b9f91a5f752df6dbcb9a49cbd0db99cb083"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x80) 5.47483549s ago: executing program 5 (id=2954): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d07420008", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) r6 = socket(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5400000030000504010000000000000000000000400001803c0001800900010067617465000000002c000280180002000000000000000000000000000000000000000000100005800ce4018008000300e8030000", 0x54}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/kvm/kvm_hv_stimer_cleanup/enable\x00', 0x1, 0x0) 5.433658211s ago: executing program 2 (id=2955): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e22, 0x2, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 5.419810962s ago: executing program 9 (id=2956): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x0, 0x4, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 4.292296928s ago: executing program 7 (id=2957): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000280)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x54, 0x0, &(0x7f00000005c0)="fbd24f93362465871e2b0a86b15efbb108660f405e01d0f0c91ebd9783b0b6d77e493299fe9e31a8d0271c989c47c4a335ab9709d852d6fe8421701919108f071fbc577d862305571bef02663e11b2b3a7ca18e7"}) 4.168217191s ago: executing program 5 (id=2958): epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab58baeda525e1a8deffafde25"}) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 4.078985583s ago: executing program 4 (id=2959): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc, 0x9}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x3505, 0x2, 0x0, 0x6, 0xfffffffe, 0xffffff7e, 0x6}}, 0xe8) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r1, 0x6f2d, 0x400000002000) timer_create(0x7, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xcadbf000) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) 3.975171566s ago: executing program 2 (id=2960): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff) sendfile(r1, r0, 0x0, 0xc00) close(r1) unlinkat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x0) 2.610276538s ago: executing program 7 (id=2961): mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000280), 0x2000001, &(0x7f00000003c0)) 2.582216619s ago: executing program 9 (id=2962): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f, 0x0, r2}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x42, 0x3, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.53700757s ago: executing program 5 (id=2963): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() modify_ldt$write(0x1, &(0x7f0000000080)={0x51a, 0x20000000, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f00000009c0)={0x5, 0x1000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x12, 0x5, &(0x7f0000000b40)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x9}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="000100001000ffff2abd7000ffdb9f2500000000", @ANYRES32=0x0, @ANYBLOB="f8a65f05218a0400d000128000000100767863616e000000000002800000010000000000", @ANYRES32=0x0, @ANYBLOB="220000007804000008000500", @ANYRES32], 0x100}, 0x1, 0x200000000000000, 0x0, 0x240400d5}, 0x2000c000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x28) unshare(0x62040200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) dup(0xffffffffffffffff) 2.455035822s ago: executing program 2 (id=2964): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf250500000014000380040004000400010008000200000000000c0001"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000c00)='1', 0x1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') 2.279384797s ago: executing program 7 (id=2965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r4, &(0x7f0000000080), &(0x7f0000001500)=@udp6=r3}, 0x20) 2.278770257s ago: executing program 9 (id=2966): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@init_itable_val={'init_itable', 0x3d, 0xff}}, {@resgid}]}, 0x0, 0x48f, &(0x7f00000006c0)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) write$tun(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x14b5, 0x6, 0x1, 0x80}}}}]}, 0x48}}, 0x4000) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000000)) r6 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r7 = dup(r6) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@empty, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) 1.186253092s ago: executing program 7 (id=2967): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x64, 0x3ed, 0x100, 0x70bd26, 0x25dfdbfb, "1e1f2e604cfdf28279cece4a86950c5926729d0fcb75dce25d51d53e469f364aed6081dbe32521c88c191715f78edd3f43d319060bba8d56b45462a22756ce1fe0b2605a01e8c4ce8861664fcd2b9d5d16b7", ["", "", "", "", "", "", "", ""]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @loopback}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0xb, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000019140)={0x3b, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xffff}, {0x8, 0x15, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004809}, 0x8000) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000600), 0x2) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000040)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x24000841) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\a\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000fedbdf25010000000000000008410000004c001800000002696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000300)=0x2) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d3, &(0x7f0000000100)) 0s ago: executing program 5 (id=2968): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000001, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) futex(0x0, 0x8d, 0x0, 0x0, 0x0, 0x2) r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r1 = socket(0x2b, 0x1, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x0, 0x7fff, {}, {0xffffffffffffffff}, 0x4, 0x4}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000080)=0x1) r4 = getegid() syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201ab00c4b20710200e01015a7a0102030109021b0001000000000904"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x278, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xffffff00], [0x0, 0xffffffff, 0xff0000ff, 0xff000000], 'ip6gretap0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x16, 0xf, 0x9, 0x60}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@unspec=@owner={{0x38}, {r2, r3, r4, 0x0, 0x4, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x1, 0x1}, {0xffffffffffffffff, 0x6, 0x7}, {0x0, 0x1, 0x4}, 0x1, 0xfffffffa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000902, r3, &(0x7f0000000000)) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) kernel console output (not intermixed with test programs): ms_vblank_simulate: vblank timer overrun [ 1140.651519][ T26] audit: type=1326 audit(1787191358.038:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15025 comm="syz.9.2437" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1140.675796][ C1] vkms_vblank_simulate: vblank timer overrun [ 1140.701193][T15031] lowmem_reserve[]: 0 0 0 0 0 [ 1140.714010][T15031] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1140.764978][ T26] audit: type=1326 audit(1787191358.038:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15025 comm="syz.9.2437" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1140.789112][ C1] vkms_vblank_simulate: vblank timer overrun [ 1140.843908][ T26] audit: type=1326 audit(1787191358.038:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15025 comm="syz.9.2437" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1140.854967][T15031] Node 0 [ 1140.876496][T15065] futex_wake_op: syz.5.2443 tries to shift op by 144; fix this program [ 1140.898488][T15031] DMA32: 1804*4kB (UME) 2144*8kB (UME) 2016*16kB (UME) 1142*32kB (UME) 873*64kB (UME) 302*128kB (UME) 207*256kB (UME) 90*512kB (UME) 40*1024kB (UME) 3*2048kB (UME) 156*4096kB (UM) = 972848kB [ 1141.059357][ T26] audit: type=1326 audit(1787191358.038:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15025 comm="syz.9.2437" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1141.693909][T15031] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1141.770982][T15031] Node 1 Normal: 252*4kB (UE) 63*8kB (UE) 35*16kB (UME) 60*32kB (UME) 25*64kB (UME) 7*128kB (UME) 2*256kB (UM) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3898200kB [ 1141.879804][T15031] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1141.901169][T15072] overlayfs: conflicting options: nfs_export=on,index=off [ 1141.959590][T15073] netlink: 220 bytes leftover after parsing attributes in process `syz.9.2444'. [ 1142.623698][T15031] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1142.695802][T15031] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1142.714947][T15031] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1142.725786][T15031] 152104 total pagecache pages [ 1142.730675][T15031] 0 pages in swap cache [ 1142.735228][T15031] Free swap = 124216kB [ 1142.739535][T15031] Total swap = 124996kB [ 1142.743888][T15031] 2097051 pages RAM [ 1142.748159][T15031] 0 pages HighMem/MovableOnly [ 1142.752882][T15031] 415223 pages reserved [ 1142.759240][T15031] 0 pages cma reserved [ 1147.757067][T15126] syz.4.2457: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1147.807097][T15126] CPU: 0 PID: 15126 Comm: syz.4.2457 Not tainted syzkaller #0 [ 1147.814656][T15126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1147.824749][T15126] Call Trace: [ 1147.828131][T15126] [ 1147.831073][T15126] dump_stack_lvl+0x188/0x24e [ 1147.835776][T15126] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1147.842207][T15126] ? show_regs_print_info+0x12/0x12 [ 1147.847427][T15126] ? load_image+0x410/0x410 [ 1147.851967][T15126] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1147.858425][T15126] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1147.864970][T15126] warn_alloc+0x242/0x330 [ 1147.869339][T15126] ? zone_watermark_ok_safe+0x270/0x270 [ 1147.874944][T15126] __vmalloc_node_range+0x11e/0x1380 [ 1147.880274][T15126] ? __mutex_trylock_common+0x15c/0x260 [ 1147.885854][T15126] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1147.892052][T15126] ? rcu_is_watching+0x11/0xa0 [ 1147.896860][T15126] ? trace_contention_end+0x5f/0x170 [ 1147.902176][T15126] ? __mutex_lock+0x1ab/0xae0 [ 1147.906880][T15126] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1147.912566][T15126] ? free_vm_area+0x50/0x50 [ 1147.917108][T15126] ? dvb_demux_do_ioctl+0x313/0x530 [ 1147.922346][T15126] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1147.927836][T15126] ? mutex_lock_nested+0x10/0x10 [ 1147.932801][T15126] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1147.938642][T15126] vmalloc+0x75/0x80 [ 1147.942565][T15126] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1147.948409][T15126] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1147.954087][T15126] dvb_demux_do_ioctl+0x450/0x530 [ 1147.959260][T15126] dvb_usercopy+0x191/0x2b0 [ 1147.963800][T15126] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 1147.969383][T15126] ? dvb_generic_ioctl+0xb0/0xb0 [ 1147.974372][T15126] ? dvb_demux_poll+0x210/0x210 [ 1147.979256][T15126] dvb_demux_ioctl+0x25/0x30 [ 1147.983885][T15126] __se_sys_ioctl+0xfa/0x170 [ 1147.988512][T15126] do_syscall_64+0x4c/0xa0 [ 1147.992962][T15126] ? clear_bhb_loop+0x60/0xb0 [ 1147.997691][T15126] ? clear_bhb_loop+0x60/0xb0 [ 1148.002406][T15126] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1148.008336][T15126] RIP: 0033:0x7fb627d9e0d9 [ 1148.012800][T15126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1148.032433][T15126] RSP: 002b:00007fb628c73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1148.040962][T15126] RAX: ffffffffffffffda RBX: 00007fb628025fa0 RCX: 00007fb627d9e0d9 [ 1148.048963][T15126] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 1148.056963][T15126] RBP: 00007fb627e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1148.064982][T15126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1148.072976][T15126] R13: 00007fb628026038 R14: 00007fb628025fa0 R15: 00007fffe8128bb8 [ 1148.081083][T15126] [ 1148.091072][T15135] futex_wake_op: syz.5.2458 tries to shift op by 144; fix this program [ 1148.626467][T15126] Mem-Info: [ 1148.629674][T15126] active_anon:96504 inactive_anon:0 isolated_anon:0 [ 1148.629674][T15126] active_file:20307 inactive_file:40814 isolated_file:0 [ 1148.629674][T15126] unevictable:7936 dirty:50 writeback:0 [ 1148.629674][T15126] slab_reclaimable:22180 slab_unreclaimable:98409 [ 1148.629674][T15126] mapped:36353 shmem:96622 pagetables:1204 [ 1148.629674][T15126] sec_pagetables:0 bounce:0 [ 1148.629674][T15126] kernel_misc_reclaimable:0 [ 1148.629674][T15126] free:1214466 free_pcp:12426 free_cma:0 [ 1148.733309][T15126] Node 0 active_anon:386016kB inactive_anon:0kB active_file:81228kB inactive_file:163056kB unevictable:30208kB isolated(anon):0kB isolated(file):0kB mapped:145412kB dirty:200kB writeback:0kB shmem:384952kB shmem_thp: 380928kB shmem_pmdmapped: 20480kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12116kB pagetables:4816kB sec_pagetables:0kB all_unreclaimable? no [ 1148.800783][T15126] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1149.755508][T15126] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1149.791084][T15126] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1149.825168][T15126] Node 0 DMA32 free:928236kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:400740kB inactive_anon:0kB active_file:81228kB inactive_file:163056kB unevictable:30208kB writepending:220kB present:3129332kB managed:2592908kB mlocked:0kB bounce:0kB free_pcp:29220kB local_pcp:7948kB free_cma:0kB [ 1150.024935][T15126] lowmem_reserve[]: 0 0 1 1 1 [ 1150.029753][T15126] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1150.090921][T15126] lowmem_reserve[]: 0 0 0 0 0 [ 1150.101043][T15126] Node 1 Normal free:3898200kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:21032kB local_pcp:13968kB free_cma:0kB [ 1150.178562][T15126] lowmem_reserve[]: 0 0 0 0 0 [ 1150.191087][T15126] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1150.244885][T15126] Node 0 DMA32: 1035*4kB (UME) 2369*8kB (UME) 2004*16kB (UME) 1134*32kB (UME) 847*64kB (UME) 302*128kB (UME) 207*256kB (UME) 90*512kB (UME) 40*1024kB (UME) 5*2048kB (UME) 150*4096kB (UM) = 948980kB [ 1150.290980][T15126] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1150.319459][T15126] Node 1 Normal: 252*4kB (UE) 63*8kB (UE) 35*16kB (UME) 60*32kB (UME) 25*64kB (UME) 7*128kB (UME) 2*256kB (UM) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3898200kB [ 1150.357241][T15126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1150.376984][T15126] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1150.398467][T15126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1150.445161][T15126] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1151.264056][T15126] 159276 total pagecache pages [ 1151.279233][T15126] 0 pages in swap cache [ 1151.283427][T15126] Free swap = 124216kB [ 1151.288039][T15126] Total swap = 124996kB [ 1151.292222][T15126] 2097051 pages RAM [ 1151.296632][T15126] 0 pages HighMem/MovableOnly [ 1151.325463][T15126] 415223 pages reserved [ 1151.342892][T15126] 0 pages cma reserved [ 1152.696230][T15189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2467'. [ 1155.004178][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2474'. [ 1155.954407][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 1155.954474][ T26] audit: type=1326 audit(1787191376.648:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15225 comm="syz.9.2480" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1155.985378][ T26] audit: type=1326 audit(1787191376.648:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15225 comm="syz.9.2480" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1156.980878][ T26] audit: type=1326 audit(1787191376.648:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15225 comm="syz.9.2480" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcedf35e90e code=0x7ffc0000 [ 1157.004820][ C0] vkms_vblank_simulate: vblank timer overrun [ 1157.110950][ T26] audit: type=1326 audit(1787191376.648:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15225 comm="syz.9.2480" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1157.137533][ T26] audit: type=1326 audit(1787191376.648:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15225 comm="syz.9.2480" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1157.420557][ T26] audit: type=1326 audit(1787191376.648:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15225 comm="syz.9.2480" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1157.448337][ T26] audit: type=1326 audit(1787191376.648:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15225 comm="syz.9.2480" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1157.516879][ T4316] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1157.591346][ T26] audit: type=1326 audit(1787191376.648:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15225 comm="syz.9.2480" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1158.035217][ T4316] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.087467][ T4316] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1158.127294][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.135261][ T26] audit: type=1326 audit(1787191376.648:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15225 comm="syz.9.2480" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1158.135350][ T26] audit: type=1326 audit(1787191376.648:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15225 comm="syz.9.2480" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1158.183743][ C0] vkms_vblank_simulate: vblank timer overrun [ 1158.272908][ T4316] usb 3-1: Product: syz [ 1158.283040][ T4316] usb 3-1: Manufacturer: syz [ 1158.293155][ T4316] usb 3-1: SerialNumber: syz [ 1158.306842][ T4316] usb 3-1: config 0 descriptor?? [ 1158.325763][ T4316] pegasus_notetaker 3-1:0.0: Invalid number of endpoints [ 1158.340472][ T4316] pegasus_notetaker: probe of 3-1:0.0 failed with error -22 [ 1158.541312][ T4316] usb 3-1: USB disconnect, device number 9 [ 1161.885376][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 1161.885415][ T26] audit: type=1326 audit(1787191382.578:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15293 comm="syz.9.2495" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1161.915857][ C1] vkms_vblank_simulate: vblank timer overrun [ 1162.877724][T15301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2493'. [ 1164.715120][ T26] audit: type=1326 audit(1787191382.588:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15293 comm="syz.9.2495" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1164.739373][ T26] audit: type=1326 audit(1787191382.588:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15293 comm="syz.9.2495" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcedf35e90e code=0x7ffc0000 [ 1164.763878][ T26] audit: type=1326 audit(1787191382.588:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15293 comm="syz.9.2495" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1164.788128][ T26] audit: type=1326 audit(1787191382.588:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15293 comm="syz.9.2495" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1164.812321][ T26] audit: type=1326 audit(1787191382.588:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15293 comm="syz.9.2495" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1164.839526][ T26] audit: type=1326 audit(1787191382.588:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15293 comm="syz.9.2495" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1164.905008][ T26] audit: type=1326 audit(1787191382.588:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15293 comm="syz.9.2495" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1165.072711][ T26] audit: type=1326 audit(1787191382.588:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15293 comm="syz.9.2495" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1165.200144][ T26] audit: type=1326 audit(1787191382.608:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15293 comm="syz.9.2495" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1167.993639][T15357] overlayfs: conflicting options: nfs_export=on,index=off [ 1168.006646][T15357] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2509'. [ 1168.972507][T15363] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2511'. [ 1173.555135][T15418] overlayfs: conflicting options: nfs_export=on,index=off [ 1173.610563][T15419] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2525'. [ 1174.459883][T15426] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2527'. [ 1177.988120][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.994473][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.679452][T15451] futex_wake_op: syz.9.2532 tries to shift op by 144; fix this program [ 1181.785181][T15442] block2mtd: error: cannot open device /dev/loop [ 1182.589750][T15495] overlayfs: conflicting options: nfs_export=on,index=off [ 1182.600623][T15495] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2539'. [ 1184.607537][T15500] syz.5.2541: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 1185.154121][T15516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2543'. [ 1186.619290][T15500] CPU: 1 PID: 15500 Comm: syz.5.2541 Not tainted syzkaller #0 [ 1186.626840][T15500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1186.636948][T15500] Call Trace: [ 1186.640266][T15500] [ 1186.643240][T15500] dump_stack_lvl+0x188/0x24e [ 1186.647995][T15500] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1186.654461][T15500] ? show_regs_print_info+0x12/0x12 [ 1186.659732][T15500] ? load_image+0x410/0x410 [ 1186.664297][T15500] ? __rcu_read_unlock+0x78/0xd0 [ 1186.669282][T15500] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1186.675750][T15500] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1186.682272][T15500] warn_alloc+0x242/0x330 [ 1186.686632][T15500] ? zone_watermark_ok_safe+0x270/0x270 [ 1186.692220][T15500] ? lock_chain_count+0x20/0x20 [ 1186.697091][T15500] ? preempt_schedule+0xbc/0xd0 [ 1186.701965][T15500] __vmalloc_node_range+0x11e/0x1380 [ 1186.707273][T15500] ? schedule_preempt_disabled+0x20/0x20 [ 1186.712932][T15500] ? preempt_schedule_thunk+0x16/0x18 [ 1186.718345][T15500] ? __mutex_lock+0x1bf/0xae0 [ 1186.723050][T15500] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1186.728715][T15500] ? free_vm_area+0x50/0x50 [ 1186.733258][T15500] ? dvb_demux_do_ioctl+0x313/0x530 [ 1186.738497][T15500] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1186.743986][T15500] ? mutex_lock_nested+0x10/0x10 [ 1186.748960][T15500] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1186.754806][T15500] vmalloc+0x75/0x80 [ 1186.758746][T15500] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1186.764589][T15500] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1186.770264][T15500] dvb_demux_do_ioctl+0x450/0x530 [ 1186.775331][T15500] dvb_usercopy+0x191/0x2b0 [ 1186.779869][T15500] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 1186.785457][T15500] ? dvb_generic_ioctl+0xb0/0xb0 [ 1186.790443][T15500] ? dvb_demux_poll+0x210/0x210 [ 1186.795331][T15500] dvb_demux_ioctl+0x25/0x30 [ 1186.799954][T15500] __se_sys_ioctl+0xfa/0x170 [ 1186.804582][T15500] do_syscall_64+0x4c/0xa0 [ 1186.809030][T15500] ? clear_bhb_loop+0x60/0xb0 [ 1186.813735][T15500] ? clear_bhb_loop+0x60/0xb0 [ 1186.818441][T15500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1186.824363][T15500] RIP: 0033:0x7fa3da19e0d9 [ 1186.828805][T15500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1186.848538][T15500] RSP: 002b:00007fa3daff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1186.856978][T15500] RAX: ffffffffffffffda RBX: 00007fa3da425fa0 RCX: 00007fa3da19e0d9 [ 1186.864978][T15500] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000004 [ 1186.872979][T15500] RBP: 00007fa3da235024 R08: 0000000000000000 R09: 0000000000000000 [ 1186.880977][T15500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1186.888971][T15500] R13: 00007fa3da426038 R14: 00007fa3da425fa0 R15: 00007ffce1ef17a8 [ 1186.896982][T15500] [ 1186.966491][T15500] Mem-Info: [ 1186.969655][T15500] active_anon:124574 inactive_anon:0 isolated_anon:0 [ 1186.969655][T15500] active_file:20307 inactive_file:40828 isolated_file:0 [ 1186.969655][T15500] unevictable:7936 dirty:73 writeback:0 [ 1186.969655][T15500] slab_reclaimable:22116 slab_unreclaimable:99666 [ 1186.969655][T15500] mapped:33465 shmem:124125 pagetables:1181 [ 1186.969655][T15500] sec_pagetables:0 bounce:0 [ 1186.969655][T15500] kernel_misc_reclaimable:0 [ 1186.969655][T15500] free:1184553 free_pcp:12702 free_cma:0 [ 1187.616515][T15500] Node 0 active_anon:494096kB inactive_anon:0kB active_file:81228kB inactive_file:163112kB unevictable:30208kB isolated(anon):0kB isolated(file):0kB mapped:133860kB dirty:292kB writeback:0kB shmem:490564kB shmem_thp: 417792kB shmem_pmdmapped: 10240kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12300kB pagetables:4724kB sec_pagetables:0kB all_unreclaimable? no [ 1187.844500][T15500] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1188.800928][T15500] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1188.873262][T15500] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1188.902920][T15500] Node 0 DMA32 free:832452kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:480332kB inactive_anon:0kB active_file:81228kB inactive_file:163112kB unevictable:30208kB writepending:320kB present:3129332kB managed:2592908kB mlocked:0kB bounce:0kB free_pcp:40884kB local_pcp:20792kB free_cma:0kB [ 1188.999538][T15500] lowmem_reserve[]: 0 0 1 1 1 [ 1189.012203][T15500] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1189.114907][T15500] lowmem_reserve[]: 0 0 0 0 0 [ 1189.123917][T15500] Node 1 Normal free:3898200kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:21032kB local_pcp:7064kB free_cma:0kB [ 1189.263350][T15500] lowmem_reserve[]: 0 0 0 0 0 [ 1189.274942][T15500] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1189.344639][T15500] Node 0 DMA32: 2182*4kB (UME) 1165*8kB (UME) 389*16kB (UME) 301*32kB (UME) 814*64kB (UME) 308*128kB (UME) 207*256kB (UME) 90*512kB (UME) 40*1024kB (UME) 4*2048kB (UME) 141*4096kB (UM) = 851184kB [ 1189.452130][T15500] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1189.472753][T15500] Node 1 Normal: 252*4kB (UE) 63*8kB (UE) 35*16kB (UME) 60*32kB (UME) 25*64kB (UME) 7*128kB (UME) 2*256kB (UM) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3898200kB [ 1189.498772][T15500] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1189.536223][T15500] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1189.567658][T15500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1189.602485][T15500] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1189.613077][T15500] 179445 total pagecache pages [ 1189.618431][T15500] 0 pages in swap cache [ 1189.622865][T15500] Free swap = 124216kB [ 1189.627557][T15500] Total swap = 124996kB [ 1189.631936][T15500] 2097051 pages RAM [ 1189.641105][T15500] 0 pages HighMem/MovableOnly [ 1189.658138][T15500] 415223 pages reserved [ 1189.666967][T15500] 0 pages cma reserved [ 1194.498558][T15584] overlayfs: conflicting options: nfs_export=on,index=off [ 1194.554953][T15585] netlink: 220 bytes leftover after parsing attributes in process `syz.9.2557'. [ 1195.639270][T15590] syz.7.2559: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz7,mems_allowed=0-1 [ 1195.680879][T15590] CPU: 0 PID: 15590 Comm: syz.7.2559 Not tainted syzkaller #0 [ 1195.688420][T15590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1195.698543][T15590] Call Trace: [ 1195.701866][T15590] [ 1195.704830][T15590] dump_stack_lvl+0x188/0x24e [ 1195.709563][T15590] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1195.716035][T15590] ? show_regs_print_info+0x12/0x12 [ 1195.721296][T15590] ? load_image+0x410/0x410 [ 1195.725854][T15590] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1195.732321][T15590] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1195.738872][T15590] warn_alloc+0x242/0x330 [ 1195.743262][T15590] ? zone_watermark_ok_safe+0x270/0x270 [ 1195.748890][T15590] __vmalloc_node_range+0x11e/0x1380 [ 1195.754228][T15590] ? __mutex_trylock_common+0x15c/0x260 [ 1195.759826][T15590] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1195.766038][T15590] ? rcu_is_watching+0x11/0xa0 [ 1195.770893][T15590] ? trace_contention_end+0x5f/0x170 [ 1195.776242][T15590] ? __mutex_lock+0x1ab/0xae0 [ 1195.780972][T15590] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1195.786660][T15590] ? free_vm_area+0x50/0x50 [ 1195.791248][T15590] ? dvb_demux_do_ioctl+0x313/0x530 [ 1195.796507][T15590] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1195.802015][T15590] ? mutex_lock_nested+0x10/0x10 [ 1195.807000][T15590] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1195.812865][T15590] vmalloc+0x75/0x80 [ 1195.816806][T15590] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1195.822671][T15590] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1195.828376][T15590] dvb_demux_do_ioctl+0x450/0x530 [ 1195.833464][T15590] dvb_usercopy+0x191/0x2b0 [ 1195.838019][T15590] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 1195.843623][T15590] ? dvb_generic_ioctl+0xb0/0xb0 [ 1195.848644][T15590] ? dvb_demux_poll+0x210/0x210 [ 1195.853564][T15590] dvb_demux_ioctl+0x25/0x30 [ 1195.858215][T15590] __se_sys_ioctl+0xfa/0x170 [ 1195.862861][T15590] do_syscall_64+0x4c/0xa0 [ 1195.867349][T15590] ? clear_bhb_loop+0x60/0xb0 [ 1195.872091][T15590] ? clear_bhb_loop+0x60/0xb0 [ 1195.876823][T15590] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1195.882766][T15590] RIP: 0033:0x7f4afc99e0d9 [ 1195.887221][T15590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1195.906882][T15590] RSP: 002b:00007f4afd78f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1195.915346][T15590] RAX: ffffffffffffffda RBX: 00007f4afcc25fa0 RCX: 00007f4afc99e0d9 [ 1195.923364][T15590] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000004 [ 1195.931401][T15590] RBP: 00007f4afca35024 R08: 0000000000000000 R09: 0000000000000000 [ 1195.939418][T15590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1195.947438][T15590] R13: 00007f4afcc26038 R14: 00007f4afcc25fa0 R15: 00007fff96d35558 [ 1195.955477][T15590] [ 1195.965904][T15590] Mem-Info: [ 1196.845119][T15590] active_anon:114349 inactive_anon:0 isolated_anon:0 [ 1196.845119][T15590] active_file:20307 inactive_file:40832 isolated_file:0 [ 1196.845119][T15590] unevictable:7936 dirty:11 writeback:24 [ 1196.845119][T15590] slab_reclaimable:22104 slab_unreclaimable:99099 [ 1196.845119][T15590] mapped:29591 shmem:114395 pagetables:1195 [ 1196.845119][T15590] sec_pagetables:0 bounce:0 [ 1196.845119][T15590] kernel_misc_reclaimable:0 [ 1196.845119][T15590] free:1199551 free_pcp:8460 free_cma:0 [ 1196.892058][T15590] Node 0 active_anon:456696kB inactive_anon:0kB active_file:81228kB inactive_file:163128kB unevictable:30208kB isolated(anon):0kB isolated(file):0kB mapped:118364kB dirty:44kB writeback:96kB shmem:455344kB shmem_thp: 409600kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12144kB pagetables:4780kB sec_pagetables:0kB all_unreclaimable? no [ 1196.930289][T15590] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1196.998338][T15590] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1197.071198][T15590] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1197.078978][T15590] Node 0 DMA32 free:880324kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:448736kB inactive_anon:0kB active_file:81228kB inactive_file:163128kB unevictable:30208kB writepending:140kB present:3129332kB managed:2592908kB mlocked:0kB bounce:0kB free_pcp:25476kB local_pcp:16064kB free_cma:0kB [ 1197.135100][T15590] lowmem_reserve[]: 0 0 1 1 1 [ 1197.150330][T15590] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1197.182426][T15590] lowmem_reserve[]: 0 0 0 0 0 [ 1197.188150][T15590] Node 1 Normal free:3898200kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:21036kB local_pcp:7064kB free_cma:0kB [ 1197.219605][T15590] lowmem_reserve[]: 0 0 0 0 0 [ 1197.226640][T15590] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1197.239779][T15590] Node 0 DMA32: 1127*4kB (ME) 675*8kB (UME) 239*16kB (UME) 884*32kB (UME) 817*64kB (UME) 309*128kB (UME) 207*256kB (UME) 90*512kB (UME) 40*1024kB (UME) 2*2048kB (UE) 147*4096kB (UM) = 880100kB [ 1197.289236][T15590] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1197.315133][T15590] Node 1 Normal: 252*4kB (UE) 63*8kB (UE) 35*16kB (UME) 60*32kB (UME) 25*64kB (UME) 7*128kB (UME) 2*256kB (UM) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3898200kB [ 1197.333825][T15590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1197.343784][T15590] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1197.353556][T15590] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1197.363465][T15590] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1197.379559][T15590] 169266 total pagecache pages [ 1197.396166][T15590] 0 pages in swap cache [ 1197.402149][T15590] Free swap = 124216kB [ 1197.414988][T15590] Total swap = 124996kB [ 1197.421847][T15590] 2097051 pages RAM [ 1197.434877][T15590] 0 pages HighMem/MovableOnly [ 1197.445025][T15590] 415223 pages reserved [ 1197.449624][T15590] 0 pages cma reserved [ 1198.677731][T15624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2558'. [ 1199.385069][T15598] block2mtd: error: cannot open device /dev/loop [ 1202.742400][T15659] ip_tables: iptables: counters copy to user failed while replacing table [ 1206.554161][T15702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2583'. [ 1210.171143][T15718] 9pnet_fd: Insufficient options for proto=fd [ 1211.340420][T15732] overlayfs: conflicting options: nfs_export=on,index=off [ 1211.351301][T15732] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2570'. [ 1212.236409][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 1212.236474][ T26] audit: type=1326 audit(1787191432.938:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15734 comm="syz.2.2594" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1212.333470][ T26] audit: type=1326 audit(1787191432.938:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15734 comm="syz.2.2594" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1212.378024][ T26] audit: type=1326 audit(1787191432.938:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15734 comm="syz.2.2594" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdf4cf5e90e code=0x7ffc0000 [ 1212.506594][ T26] audit: type=1326 audit(1787191432.938:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15734 comm="syz.2.2594" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1213.007400][ T26] audit: type=1326 audit(1787191432.938:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15734 comm="syz.2.2594" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1213.869089][T15745] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1214.420477][ T26] audit: type=1326 audit(1787191432.938:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15734 comm="syz.2.2594" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1214.454926][ T26] audit: type=1326 audit(1787191432.938:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15734 comm="syz.2.2594" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1214.524909][ T26] audit: type=1326 audit(1787191432.938:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15734 comm="syz.2.2594" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1214.633355][ T26] audit: type=1326 audit(1787191432.938:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15734 comm="syz.2.2594" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1214.655228][T15754] syz.5.2596: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 1214.865670][T15754] CPU: 1 PID: 15754 Comm: syz.5.2596 Not tainted syzkaller #0 [ 1214.873287][T15754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1214.883417][T15754] Call Trace: [ 1214.886725][T15754] [ 1214.889689][T15754] dump_stack_lvl+0x188/0x24e [ 1214.894395][T15754] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1214.900831][T15754] ? show_regs_print_info+0x12/0x12 [ 1214.906064][T15754] ? load_image+0x410/0x410 [ 1214.910651][T15754] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1214.917197][T15754] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1214.923716][T15754] warn_alloc+0x242/0x330 [ 1214.928069][T15754] ? zone_watermark_ok_safe+0x270/0x270 [ 1214.933649][T15754] __vmalloc_node_range+0x11e/0x1380 [ 1214.938971][T15754] ? __mutex_trylock_common+0x15c/0x260 [ 1214.944551][T15754] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1214.950725][T15754] ? rcu_is_watching+0x11/0xa0 [ 1214.955509][T15754] ? trace_contention_end+0x5f/0x170 [ 1214.960825][T15754] ? __mutex_lock+0x1ab/0xae0 [ 1214.965554][T15754] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1214.971216][T15754] ? free_vm_area+0x50/0x50 [ 1214.975752][T15754] ? dvb_demux_do_ioctl+0x313/0x530 [ 1214.980982][T15754] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1214.986474][T15754] ? mutex_lock_nested+0x10/0x10 [ 1214.991454][T15754] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1214.997351][T15754] vmalloc+0x75/0x80 [ 1215.001288][T15754] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1215.007140][T15754] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1215.012886][T15754] dvb_demux_do_ioctl+0x450/0x530 [ 1215.017937][T15754] dvb_usercopy+0x191/0x2b0 [ 1215.022464][T15754] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 1215.028040][T15754] ? dvb_generic_ioctl+0xb0/0xb0 [ 1215.033028][T15754] ? dvb_demux_poll+0x210/0x210 [ 1215.037906][T15754] dvb_demux_ioctl+0x25/0x30 [ 1215.042518][T15754] __se_sys_ioctl+0xfa/0x170 [ 1215.047133][T15754] do_syscall_64+0x4c/0xa0 [ 1215.051586][T15754] ? clear_bhb_loop+0x60/0xb0 [ 1215.056322][T15754] ? clear_bhb_loop+0x60/0xb0 [ 1215.061058][T15754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1215.067001][T15754] RIP: 0033:0x7fa3da19e0d9 [ 1215.071440][T15754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1215.091062][T15754] RSP: 002b:00007fa3dafd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1215.099493][T15754] RAX: ffffffffffffffda RBX: 00007fa3da426090 RCX: 00007fa3da19e0d9 [ 1215.107564][T15754] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000004 [ 1215.115556][T15754] RBP: 00007fa3da235024 R08: 0000000000000000 R09: 0000000000000000 [ 1215.123572][T15754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1215.131550][T15754] R13: 00007fa3da426128 R14: 00007fa3da426090 R15: 00007ffce1ef17a8 [ 1215.139548][T15754] [ 1215.169915][T15754] Mem-Info: [ 1215.173191][T15754] active_anon:127727 inactive_anon:0 isolated_anon:0 [ 1215.173191][T15754] active_file:20307 inactive_file:40838 isolated_file:0 [ 1215.173191][T15754] unevictable:7936 dirty:76 writeback:0 [ 1215.173191][T15754] slab_reclaimable:22070 slab_unreclaimable:99033 [ 1215.173191][T15754] mapped:30063 shmem:127961 pagetables:1115 [ 1215.173191][T15754] sec_pagetables:0 bounce:0 [ 1215.173191][T15754] kernel_misc_reclaimable:0 [ 1215.173191][T15754] free:1186062 free_pcp:10488 free_cma:0 [ 1215.219288][T15754] Node 0 active_anon:510908kB inactive_anon:0kB active_file:81228kB inactive_file:163152kB unevictable:30208kB isolated(anon):0kB isolated(file):0kB mapped:120252kB dirty:304kB writeback:0kB shmem:510308kB shmem_thp: 432128kB shmem_pmdmapped: 2048kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12040kB pagetables:4460kB sec_pagetables:0kB all_unreclaimable? no [ 1215.253924][T15754] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1215.284927][T15754] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1215.312517][T15754] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1215.319011][T15754] Node 0 DMA32 free:830688kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:510908kB inactive_anon:0kB active_file:81228kB inactive_file:163152kB unevictable:30208kB writepending:304kB present:3129332kB managed:2592908kB mlocked:0kB bounce:0kB free_pcp:20916kB local_pcp:3232kB free_cma:0kB [ 1215.350659][T15754] lowmem_reserve[]: 0 0 1 1 1 [ 1215.355908][T15754] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1215.383140][T15754] lowmem_reserve[]: 0 0 0 0 0 [ 1215.388654][T15754] Node 1 Normal free:3898200kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:21036kB local_pcp:7064kB free_cma:0kB [ 1215.497749][T15754] lowmem_reserve[]: 0 0 0 0 0 [ 1215.503051][T15754] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1215.516943][T15754] Node 0 DMA32: 1104*4kB (UME) 650*8kB (UME) 165*16kB (UME) 490*32kB (UME) 568*64kB (UME) 312*128kB (UME) 208*256kB (UME) 89*512kB (UME) 41*1024kB (UME) 2*2048kB (UE) 142*4096kB (UM) = 830752kB [ 1215.537940][T15754] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1215.550560][T15754] Node 1 Normal: 252*4kB (UE) 63*8kB (UE) 35*16kB (UME) 60*32kB (UME) 25*64kB (UME) 7*128kB (UME) 2*256kB (UM) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3898200kB [ 1215.570018][T15754] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1215.579753][T15754] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1215.589241][T15754] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1215.598999][T15754] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1215.608480][T15754] 189101 total pagecache pages [ 1215.613368][T15754] 0 pages in swap cache [ 1215.617720][T15754] Free swap = 124216kB [ 1215.621987][T15754] Total swap = 124996kB [ 1215.626317][T15754] 2097051 pages RAM [ 1215.630244][T15754] 0 pages HighMem/MovableOnly [ 1215.635126][T15754] 415223 pages reserved [ 1215.639391][T15754] 0 pages cma reserved [ 1215.881818][ T26] audit: type=1326 audit(1787191432.948:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15734 comm="syz.2.2594" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1218.378376][T15786] 9pnet_fd: Insufficient options for proto=fd [ 1218.937092][T15788] overlayfs: conflicting options: nfs_export=on,index=off [ 1218.947982][T15788] netlink: 220 bytes leftover after parsing attributes in process `syz.7.2604'. [ 1221.049615][T15813] futex_wake_op: syz.2.2609 tries to shift op by 144; fix this program [ 1225.434425][T15812] block2mtd: error: cannot open device /dev/loop0 [ 1226.603590][T15840] overlayfs: conflicting options: nfs_export=on,index=off [ 1226.720365][T15839] netlink: 220 bytes leftover after parsing attributes in process `syz.9.2615'. [ 1227.388179][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 1227.388202][ T26] audit: type=1326 audit(1787191447.538:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.2.2616" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1227.990129][ T26] audit: type=1326 audit(1787191447.538:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.2.2616" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1228.020900][ T26] audit: type=1326 audit(1787191447.538:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.2.2616" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdf4cf5e90e code=0x7ffc0000 [ 1228.112072][T15846] 9pnet_fd: Insufficient options for proto=fd [ 1228.171665][ T26] audit: type=1326 audit(1787191447.538:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.2.2616" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1228.483743][ T26] audit: type=1326 audit(1787191447.538:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.2.2616" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1229.830714][T15857] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1229.873731][ T26] audit: type=1326 audit(1787191447.538:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.2.2616" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1229.994271][ T26] audit: type=1326 audit(1787191447.538:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.2.2616" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1230.019165][ T26] audit: type=1326 audit(1787191447.538:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.2.2616" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1231.353383][ T26] audit: type=1326 audit(1787191447.538:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.2.2616" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1231.377945][ T26] audit: type=1326 audit(1787191447.538:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.2.2616" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1231.691292][T15872] warn_alloc: 1 callbacks suppressed [ 1231.691304][T15872] syz.2.2625: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1231.944314][T15872] CPU: 1 PID: 15872 Comm: syz.2.2625 Not tainted syzkaller #0 [ 1231.951854][T15872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1231.961922][T15872] Call Trace: [ 1231.965215][T15872] [ 1231.968243][T15872] dump_stack_lvl+0x188/0x24e [ 1231.972939][T15872] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1231.979371][T15872] ? show_regs_print_info+0x12/0x12 [ 1231.984584][T15872] ? load_image+0x410/0x410 [ 1231.989104][T15872] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1231.995535][T15872] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1232.002050][T15872] warn_alloc+0x242/0x330 [ 1232.006402][T15872] ? zone_watermark_ok_safe+0x270/0x270 [ 1232.012003][T15872] __vmalloc_node_range+0x11e/0x1380 [ 1232.017329][T15872] ? __mutex_trylock_common+0x15c/0x260 [ 1232.022895][T15872] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1232.029106][T15872] ? rcu_is_watching+0x11/0xa0 [ 1232.033914][T15872] ? trace_contention_end+0x5f/0x170 [ 1232.039224][T15872] ? __mutex_lock+0x1ab/0xae0 [ 1232.043918][T15872] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1232.049577][T15872] ? free_vm_area+0x50/0x50 [ 1232.054119][T15872] ? dvb_demux_do_ioctl+0x313/0x530 [ 1232.059362][T15872] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1232.065029][T15872] ? mutex_lock_nested+0x10/0x10 [ 1232.070009][T15872] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1232.075864][T15872] vmalloc+0x75/0x80 [ 1232.079799][T15872] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1232.085633][T15872] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1232.091298][T15872] dvb_demux_do_ioctl+0x450/0x530 [ 1232.096349][T15872] dvb_usercopy+0x191/0x2b0 [ 1232.100877][T15872] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 1232.106484][T15872] ? dvb_generic_ioctl+0xb0/0xb0 [ 1232.111512][T15872] ? dvb_demux_poll+0x210/0x210 [ 1232.116403][T15872] dvb_demux_ioctl+0x25/0x30 [ 1232.121035][T15872] __se_sys_ioctl+0xfa/0x170 [ 1232.125690][T15872] do_syscall_64+0x4c/0xa0 [ 1232.130187][T15872] ? clear_bhb_loop+0x60/0xb0 [ 1232.134898][T15872] ? clear_bhb_loop+0x60/0xb0 [ 1232.139619][T15872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1232.145632][T15872] RIP: 0033:0x7fdf4cf9e0d9 [ 1232.150075][T15872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1232.169701][T15872] RSP: 002b:00007fdf4de03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1232.178133][T15872] RAX: ffffffffffffffda RBX: 00007fdf4d225fa0 RCX: 00007fdf4cf9e0d9 [ 1232.186124][T15872] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000004 [ 1232.194127][T15872] RBP: 00007fdf4d035024 R08: 0000000000000000 R09: 0000000000000000 [ 1232.202132][T15872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1232.210122][T15872] R13: 00007fdf4d226038 R14: 00007fdf4d225fa0 R15: 00007ffe3b8bd538 [ 1232.218147][T15872] [ 1232.455086][T15872] Mem-Info: [ 1232.458388][T15872] active_anon:131041 inactive_anon:0 isolated_anon:0 [ 1232.458388][T15872] active_file:20307 inactive_file:40844 isolated_file:0 [ 1232.458388][T15872] unevictable:7936 dirty:51 writeback:0 [ 1232.458388][T15872] slab_reclaimable:22042 slab_unreclaimable:98798 [ 1232.458388][T15872] mapped:32442 shmem:131140 pagetables:1165 [ 1232.458388][T15872] sec_pagetables:0 bounce:0 [ 1232.458388][T15872] kernel_misc_reclaimable:0 [ 1232.458388][T15872] free:1181699 free_pcp:11595 free_cma:0 [ 1232.504037][ C0] vkms_vblank_simulate: vblank timer overrun [ 1233.151350][T15885] ip_tables: iptables: counters copy to user failed while replacing table [ 1233.773210][T15872] Node 0 active_anon:490684kB inactive_anon:0kB active_file:81228kB inactive_file:163176kB unevictable:30208kB isolated(anon):0kB isolated(file):0kB mapped:118344kB dirty:236kB writeback:0kB shmem:489860kB shmem_thp: 438272kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12160kB pagetables:4628kB sec_pagetables:0kB all_unreclaimable? no [ 1233.806873][ C0] vkms_vblank_simulate: vblank timer overrun [ 1233.897234][T15892] overlayfs: conflicting options: nfs_export=on,index=off [ 1233.955725][T15893] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2629'. [ 1234.938206][T15872] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1234.968678][ C0] vkms_vblank_simulate: vblank timer overrun [ 1234.975228][T15872] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1235.004851][T15872] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1235.023999][T15872] Node 0 DMA32 free:855748kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:485648kB inactive_anon:0kB active_file:81228kB inactive_file:163184kB unevictable:30208kB writepending:220kB present:3129332kB managed:2592908kB mlocked:0kB bounce:0kB free_pcp:20740kB local_pcp:7496kB free_cma:0kB [ 1235.135149][T15872] lowmem_reserve[]: 0 0 1 1 1 [ 1235.140047][T15872] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1235.167307][T15872] lowmem_reserve[]: 0 0 0 0 0 [ 1235.264955][T15872] Node 1 Normal free:3898200kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:21128kB local_pcp:7088kB free_cma:0kB [ 1235.298156][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 1235.298170][ T26] audit: type=1326 audit(1787191456.028:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.4.2630" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb627d9e0d9 code=0x7ffc0000 [ 1235.340180][T15872] lowmem_reserve[]: 0 0 0 0 0 [ 1235.349437][T15872] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1235.366687][T15872] Node 0 DMA32: 2899*4kB (UME) 1339*8kB (UME) 478*16kB (UME) 596*32kB (UME) 753*64kB (UME) 314*128kB (UME) 208*256kB (UME) 89*512kB (UME) 41*1024kB (UME) 2*2048kB (UE) 137*4096kB (UM) = 843460kB [ 1235.399320][T15872] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1235.413425][T15872] Node 1 Normal: 252*4kB (UE) 63*8kB (UE) 35*16kB (UME) 60*32kB (UME) 25*64kB (UME) 7*128kB (UME) 2*256kB (UM) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3898200kB [ 1235.439129][ T26] audit: type=1326 audit(1787191456.028:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.4.2630" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb627d9e0d9 code=0x7ffc0000 [ 1235.463273][ C0] vkms_vblank_simulate: vblank timer overrun [ 1235.470514][ T26] audit: type=1326 audit(1787191456.028:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.4.2630" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb627d5e90e code=0x7ffc0000 [ 1235.494501][ C0] vkms_vblank_simulate: vblank timer overrun [ 1235.500984][T15872] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1235.510951][T15872] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1235.520975][ T26] audit: type=1326 audit(1787191456.028:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.4.2630" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb627d9e0d9 code=0x7ffc0000 [ 1235.545127][ C0] vkms_vblank_simulate: vblank timer overrun [ 1235.561944][ T26] audit: type=1326 audit(1787191456.028:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.4.2630" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb627d9e0d9 code=0x7ffc0000 [ 1235.592232][ T26] audit: type=1326 audit(1787191456.068:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.4.2630" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb627d9e0d9 code=0x7ffc0000 [ 1235.623608][ T26] audit: type=1326 audit(1787191456.068:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.4.2630" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb627d9e0d9 code=0x7ffc0000 [ 1235.647772][ C0] vkms_vblank_simulate: vblank timer overrun [ 1235.658130][ T26] audit: type=1326 audit(1787191456.068:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.4.2630" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb627d9e0d9 code=0x7ffc0000 [ 1235.682249][ C0] vkms_vblank_simulate: vblank timer overrun [ 1235.709759][ T26] audit: type=1326 audit(1787191456.068:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.4.2630" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb627d9e0d9 code=0x7ffc0000 [ 1235.744177][ C0] vkms_vblank_simulate: vblank timer overrun [ 1235.762545][T15872] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1235.763025][ T26] audit: type=1326 audit(1787191456.068:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.4.2630" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb627d9e0d9 code=0x7ffc0000 [ 1235.796515][ C0] vkms_vblank_simulate: vblank timer overrun [ 1235.818401][T15872] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1235.841242][T15872] 178333 total pagecache pages [ 1235.847344][T15872] 0 pages in swap cache [ 1235.859445][T15872] Free swap = 124216kB [ 1235.864027][T15872] Total swap = 124996kB [ 1235.872650][T15872] 2097051 pages RAM [ 1235.877955][T15872] 0 pages HighMem/MovableOnly [ 1235.882751][T15872] 415223 pages reserved [ 1235.889923][T15872] 0 pages cma reserved [ 1236.840930][T15907] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1237.386070][T15917] 9pnet_fd: Insufficient options for proto=fd [ 1238.675530][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.684089][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.954660][T15936] ip_tables: iptables: counters copy to user failed while replacing table [ 1239.313689][T15938] overlayfs: conflicting options: nfs_export=on,index=off [ 1239.325726][T15938] netlink: 220 bytes leftover after parsing attributes in process `syz.9.2640'. [ 1241.206718][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 1241.206920][ T26] audit: type=1326 audit(1787191461.938:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15951 comm="syz.9.2646" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1241.278447][T15956] 9pnet_fd: Insufficient options for proto=fd [ 1241.295256][ T26] audit: type=1326 audit(1787191461.938:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15951 comm="syz.9.2646" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1241.431696][ T26] audit: type=1326 audit(1787191461.938:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15951 comm="syz.9.2646" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcedf35e90e code=0x7ffc0000 [ 1241.546384][ T26] audit: type=1326 audit(1787191461.938:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15951 comm="syz.9.2646" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1241.604920][ T26] audit: type=1326 audit(1787191461.938:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15951 comm="syz.9.2646" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1241.629051][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.635682][ T26] audit: type=1326 audit(1787191461.978:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15951 comm="syz.9.2646" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1241.659730][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.707742][ T26] audit: type=1326 audit(1787191461.978:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15951 comm="syz.9.2646" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1241.731891][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.778278][ T26] audit: type=1326 audit(1787191461.978:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15951 comm="syz.9.2646" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1241.828926][ T26] audit: type=1326 audit(1787191461.978:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15951 comm="syz.9.2646" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1241.879947][ T26] audit: type=1326 audit(1787191461.978:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15951 comm="syz.9.2646" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1243.344449][T15983] overlayfs: conflicting options: nfs_export=on,index=off [ 1243.363239][T15983] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2653'. [ 1243.842509][T15982] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2645'. [ 1246.730603][T16003] warn_alloc: 1 callbacks suppressed [ 1246.730616][T16003] syz.2.2657: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1246.810168][T16003] CPU: 0 PID: 16003 Comm: syz.2.2657 Not tainted syzkaller #0 [ 1246.817712][T16003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1246.827787][T16003] Call Trace: [ 1246.831075][T16003] [ 1246.834017][T16003] dump_stack_lvl+0x188/0x24e [ 1246.838716][T16003] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1246.845148][T16003] ? show_regs_print_info+0x12/0x12 [ 1246.850368][T16003] ? load_image+0x410/0x410 [ 1246.854906][T16003] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1246.861339][T16003] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1246.867870][T16003] warn_alloc+0x242/0x330 [ 1246.872282][T16003] ? zone_watermark_ok_safe+0x270/0x270 [ 1246.877877][T16003] __vmalloc_node_range+0x11e/0x1380 [ 1246.883197][T16003] ? __mutex_trylock_common+0x15c/0x260 [ 1246.888784][T16003] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1246.894972][T16003] ? rcu_is_watching+0x11/0xa0 [ 1246.899827][T16003] ? trace_contention_end+0x5f/0x170 [ 1246.905166][T16003] ? __mutex_lock+0x1ab/0xae0 [ 1246.909927][T16003] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1246.915602][T16003] ? free_vm_area+0x50/0x50 [ 1246.920248][T16003] ? dvb_demux_do_ioctl+0x313/0x530 [ 1246.925489][T16003] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1246.930986][T16003] ? mutex_lock_nested+0x10/0x10 [ 1246.935955][T16003] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1246.941801][T16003] vmalloc+0x75/0x80 [ 1246.945738][T16003] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1246.951578][T16003] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1246.957258][T16003] dvb_demux_do_ioctl+0x450/0x530 [ 1246.962325][T16003] dvb_usercopy+0x191/0x2b0 [ 1246.966868][T16003] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 1246.972477][T16003] ? dvb_generic_ioctl+0xb0/0xb0 [ 1246.977466][T16003] ? dvb_demux_poll+0x210/0x210 [ 1246.982354][T16003] dvb_demux_ioctl+0x25/0x30 [ 1246.986991][T16003] __se_sys_ioctl+0xfa/0x170 [ 1246.991616][T16003] do_syscall_64+0x4c/0xa0 [ 1246.996092][T16003] ? clear_bhb_loop+0x60/0xb0 [ 1247.000802][T16003] ? clear_bhb_loop+0x60/0xb0 [ 1247.005516][T16003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1247.011436][T16003] RIP: 0033:0x7fdf4cf9e0d9 [ 1247.015876][T16003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.035510][T16003] RSP: 002b:00007fdf4de03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1247.043955][T16003] RAX: ffffffffffffffda RBX: 00007fdf4d225fa0 RCX: 00007fdf4cf9e0d9 [ 1247.051958][T16003] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000004 [ 1247.059957][T16003] RBP: 00007fdf4d035024 R08: 0000000000000000 R09: 0000000000000000 [ 1247.067954][T16003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1247.075948][T16003] R13: 00007fdf4d226038 R14: 00007fdf4d225fa0 R15: 00007ffe3b8bd538 [ 1247.083969][T16003] [ 1247.667328][T16003] Mem-Info: [ 1247.670598][T16003] active_anon:113320 inactive_anon:0 isolated_anon:0 [ 1247.670598][T16003] active_file:20307 inactive_file:40850 isolated_file:0 [ 1247.670598][T16003] unevictable:7936 dirty:125 writeback:0 [ 1247.670598][T16003] slab_reclaimable:21996 slab_unreclaimable:98137 [ 1247.670598][T16003] mapped:31122 shmem:113519 pagetables:1190 [ 1247.670598][T16003] sec_pagetables:0 bounce:0 [ 1247.670598][T16003] kernel_misc_reclaimable:0 [ 1247.670598][T16003] free:1202836 free_pcp:8444 free_cma:0 [ 1247.716277][ C1] vkms_vblank_simulate: vblank timer overrun [ 1247.773720][T16003] Node 0 active_anon:453280kB inactive_anon:0kB active_file:81228kB inactive_file:163200kB unevictable:30208kB isolated(anon):0kB isolated(file):0kB mapped:124488kB dirty:500kB writeback:0kB shmem:452540kB shmem_thp: 448512kB shmem_pmdmapped: 2048kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12056kB pagetables:4660kB sec_pagetables:0kB all_unreclaimable? no [ 1247.807398][ C1] vkms_vblank_simulate: vblank timer overrun [ 1247.884933][T16003] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1248.039708][T16003] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1248.216585][T16003] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1248.593036][T16003] Node 0 DMA32 free:869112kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:479968kB inactive_anon:0kB active_file:81228kB inactive_file:163200kB unevictable:30208kB writepending:516kB present:3129332kB managed:2592908kB mlocked:0kB bounce:0kB free_pcp:16392kB local_pcp:5260kB free_cma:0kB [ 1248.815125][T16003] lowmem_reserve[]: 0 0 1 1 1 [ 1249.186523][T16003] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1249.213436][ C1] vkms_vblank_simulate: vblank timer overrun [ 1249.346983][T16003] lowmem_reserve[]: 0 0 0 0 0 [ 1249.351771][T16003] Node 1 Normal free:3898200kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:21328kB local_pcp:14060kB free_cma:0kB [ 1249.408641][T16048] overlayfs: conflicting options: nfs_export=on,index=off [ 1249.419155][T16048] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2667'. [ 1250.272490][T16003] lowmem_reserve[]: 0 0 0 0 0 [ 1250.320479][T16003] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1250.342218][T16058] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2668'. [ 1250.396568][T16003] Node 0 DMA32: 1958*4kB (UME) 2409*8kB (UME) 2096*16kB (UME) 1216*32kB (UME) 780*64kB (UME) 312*128kB (UME) 209*256kB (UME) 89*512kB (UME) 41*1024kB (UME) 3*2048kB (UME) 135*4096kB (UM) = 889568kB [ 1250.480277][T16003] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1250.514965][T16003] Node 1 Normal: 252*4kB (UE) 63*8kB (UE) 35*16kB (UME) 60*32kB (UME) 25*64kB (UME) 7*128kB (UME) 2*256kB (UM) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3898200kB [ 1251.320883][T16003] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1251.405046][T16003] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1251.414398][T16003] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1251.476152][T16003] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1251.525207][T16003] 180531 total pagecache pages [ 1251.530048][T16003] 0 pages in swap cache [ 1251.534200][T16003] Free swap = 124216kB [ 1251.582908][T16003] Total swap = 124996kB [ 1251.605876][T16003] 2097051 pages RAM [ 1251.609734][T16003] 0 pages HighMem/MovableOnly [ 1251.614414][T16003] 415223 pages reserved [ 1251.626952][T16078] 9pnet_fd: Insufficient options for proto=fd [ 1251.657765][T16003] 0 pages cma reserved [ 1254.822562][T16092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2676'. [ 1256.698425][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 1256.698443][ T26] audit: type=1326 audit(1787191477.428:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.9.2682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1256.736565][T16117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2683'. [ 1256.856329][T16121] overlayfs: conflicting options: nfs_export=on,index=off [ 1256.915884][T16122] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2681'. [ 1258.100770][ T26] audit: type=1326 audit(1787191477.428:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.9.2682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1258.159700][T16131] futex_wake_op: syz.9.2684 tries to shift op by 144; fix this program [ 1258.776561][ T26] audit: type=1326 audit(1787191477.428:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.9.2682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcedf35e90e code=0x7ffc0000 [ 1258.996594][T16141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2687'. [ 1259.747685][T16143] 9pnet_fd: Insufficient options for proto=fd [ 1259.774864][ T26] audit: type=1326 audit(1787191477.428:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.9.2682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1259.919085][ T26] audit: type=1326 audit(1787191477.428:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.9.2682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1260.094390][ T26] audit: type=1326 audit(1787191477.458:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.9.2682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1261.030320][ T26] audit: type=1326 audit(1787191477.458:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.9.2682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1261.203921][ T26] audit: type=1326 audit(1787191477.458:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.9.2682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1261.236144][ T26] audit: type=1326 audit(1787191477.458:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.9.2682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1261.265888][ T26] audit: type=1326 audit(1787191477.458:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.9.2682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1263.215687][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2695'. [ 1264.937832][T16184] overlayfs: conflicting options: nfs_export=on,index=off [ 1265.072359][T16184] netlink: 220 bytes leftover after parsing attributes in process `syz.7.2698'. [ 1266.552530][T16213] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2702'. [ 1268.509680][T16211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2699'. [ 1268.822316][T16222] ip_tables: iptables: counters copy to user failed while replacing table [ 1270.357642][T16245] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1270.914471][T16257] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2714'. [ 1270.924922][T16257] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2714'. [ 1270.987903][T16257] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1270.997851][T16257] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1271.006666][T16257] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1271.015468][T16257] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1271.120562][T16257] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2714'. [ 1271.150838][T16257] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2714'. [ 1271.459807][T16274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2717'. [ 1271.502439][T16271] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2718'. [ 1273.658010][T16280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1273.672807][T16280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1273.687131][T16280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1273.824310][T16280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1273.837376][T16280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1273.847528][T16280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1275.944954][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 1276.364385][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 1276.364402][ T26] audit: type=1326 audit(1787191497.098:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16304 comm="syz.2.2725" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1277.192391][ T26] audit: type=1326 audit(1787191497.098:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16304 comm="syz.2.2725" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1277.217175][ T26] audit: type=1326 audit(1787191497.098:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16304 comm="syz.2.2725" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdf4cf5e90e code=0x7ffc0000 [ 1277.241705][ T26] audit: type=1326 audit(1787191497.098:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16304 comm="syz.2.2725" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1277.274857][ T26] audit: type=1326 audit(1787191497.098:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16304 comm="syz.2.2725" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1277.300068][ T26] audit: type=1326 audit(1787191497.138:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16304 comm="syz.2.2725" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1277.344882][ T26] audit: type=1326 audit(1787191497.138:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16304 comm="syz.2.2725" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1277.445029][ T26] audit: type=1326 audit(1787191497.138:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16304 comm="syz.2.2725" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1277.562445][ T26] audit: type=1326 audit(1787191497.138:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16304 comm="syz.2.2725" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1277.606812][T16279] chnl_net:caif_netlink_parms(): no params data found [ 1277.630545][ T26] audit: type=1326 audit(1787191497.138:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16304 comm="syz.2.2725" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1277.832977][ T8192] tipc: Left network mode [ 1278.026561][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 1278.649811][ T4381] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1278.773725][T16279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.805300][T16279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.814415][T16347] futex_wake_op: syz.9.2733 tries to shift op by 144; fix this program [ 1278.836627][ T4381] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.858431][T16279] device bridge_slave_0 entered promiscuous mode [ 1278.867733][ T4381] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1279.578801][ T4381] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.587040][ T4381] usb 8-1: Product: syz [ 1279.591260][ T4381] usb 8-1: Manufacturer: syz [ 1279.595995][ T4381] usb 8-1: SerialNumber: syz [ 1279.603640][ T4381] usb 8-1: config 0 descriptor?? [ 1279.623495][ T4381] pegasus_notetaker 8-1:0.0: Invalid number of endpoints [ 1279.631149][ T4381] pegasus_notetaker: probe of 8-1:0.0 failed with error -22 [ 1279.708806][T16279] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.722179][T16279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.798772][T16279] device bridge_slave_1 entered promiscuous mode [ 1279.859636][ T130] usb 8-1: USB disconnect, device number 8 [ 1280.105079][T16280] Bluetooth: hci2: command 0x040f tx timeout [ 1280.720433][T16279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1280.803887][T16279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1281.684715][T16279] team0: Port device team_slave_0 added [ 1281.828285][T16279] team0: Port device team_slave_1 added [ 1281.923175][T16279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1281.930448][T16279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1282.183354][T16379] rt1719: probe of 0-0049 failed with error -5 [ 1282.204911][T16280] Bluetooth: hci2: command 0x0419 tx timeout [ 1282.369248][T16279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1282.503271][T16379] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 1282.734655][T16279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1282.781457][T16279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1282.854530][T16279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1283.357436][T16394] futex_wake_op: syz.2.2746 tries to shift op by 144; fix this program [ 1284.136081][T16393] Set syz1 is full, maxelem 65536 reached [ 1285.114727][T16279] device hsr_slave_0 entered promiscuous mode [ 1285.165156][T16279] device hsr_slave_1 entered promiscuous mode [ 1285.178466][T16279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1285.226208][ T3600] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1285.261782][T16279] Cannot create hsr debugfs directory [ 1285.464480][ T3600] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.558144][ T3600] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1285.672996][ T3600] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.764234][ T3600] usb 6-1: Product: syz [ 1285.824447][ T3600] usb 6-1: Manufacturer: syz [ 1285.888273][ T3600] usb 6-1: SerialNumber: syz [ 1286.010756][ T3600] usb 6-1: config 0 descriptor?? [ 1286.037617][ T3600] pegasus_notetaker 6-1:0.0: Invalid number of endpoints [ 1286.052778][ T3600] pegasus_notetaker: probe of 6-1:0.0 failed with error -22 [ 1286.312024][ T4316] usb 6-1: USB disconnect, device number 9 [ 1286.728077][ T8192] device hsr_slave_0 left promiscuous mode [ 1286.885922][ T8192] device hsr_slave_1 left promiscuous mode [ 1286.912966][ T8192] device bridge_slave_1 left promiscuous mode [ 1286.937053][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.956367][ T8192] device bridge_slave_0 left promiscuous mode [ 1286.975615][ T8192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.198771][T16455] cgroup: Unknown subsys name 'rlimit' [ 1292.362778][T16474] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1292.387884][T16474] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1292.525991][ T4320] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 1292.730922][ T4320] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.773165][ T4320] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1292.822073][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.863419][ T4320] usb 3-1: Product: syz [ 1292.881231][ T4320] usb 3-1: Manufacturer: syz [ 1292.926058][ T4320] usb 3-1: SerialNumber: syz [ 1293.003772][ T4320] usb 3-1: config 0 descriptor?? [ 1293.072371][ T4320] pegasus_notetaker 3-1:0.0: Invalid number of endpoints [ 1293.104239][ T4320] pegasus_notetaker: probe of 3-1:0.0 failed with error -22 [ 1293.341154][ T4320] usb 3-1: USB disconnect, device number 10 [ 1294.423524][T16486] futex_wake_op: syz.9.2770 tries to shift op by 144; fix this program [ 1294.450311][T16487] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1294.986611][T16469] udevd[16469]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1295.230938][ T8192] team0 (unregistering): Port device team_slave_1 removed [ 1296.270766][ T8192] team0 (unregistering): Port device team_slave_0 removed [ 1296.401197][ T8192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1296.481594][ T8192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1296.769149][T16504] Bluetooth: MGMT ver 1.22 [ 1296.773701][T16504] Bluetooth: hci1: too big key_count value 55536 [ 1297.113254][ T8192] bond0 (unregistering): Released all slaves [ 1299.864837][T16194] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 1300.046705][T16194] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.083665][T16194] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1300.095179][T16545] futex_wake_op: syz.5.2786 tries to shift op by 144; fix this program [ 1300.116662][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.123038][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.129322][T16194] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.137550][T16194] usb 8-1: Product: syz [ 1300.141758][T16194] usb 8-1: Manufacturer: syz [ 1300.155950][T16194] usb 8-1: SerialNumber: syz [ 1300.210568][T16194] usb 8-1: config 0 descriptor?? [ 1300.250626][T16194] pegasus_notetaker 8-1:0.0: Invalid number of endpoints [ 1300.352097][T16194] pegasus_notetaker: probe of 8-1:0.0 failed with error -22 [ 1300.591810][T16194] usb 8-1: USB disconnect, device number 9 [ 1300.947985][T16279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1301.083407][T16557] cgroup: Unknown subsys name 'rlimit' [ 1301.867927][T16279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1301.914179][T16279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1302.807009][T16279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1302.904338][T16279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1302.926984][T16279] 8021q: adding VLAN 0 to HW filter on device team0 [ 1302.934082][ T6572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1302.950176][ T6572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1303.699391][ T4902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1303.708882][ T4902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1303.721444][ T4902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.728659][ T4902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1303.742080][ T4902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1303.767003][ T4902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1303.776242][ T4902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1303.788327][ T4902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.795521][ T4902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1303.875519][ T4902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1303.915714][ T4902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1303.934593][ T4902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1303.972755][ T4902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1304.000967][ T4902] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1304.040141][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1304.052063][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 1304.052080][ T26] audit: type=1326 audit(1787191524.788:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16580 comm="syz.2.2796" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1304.060209][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1304.731624][ T26] audit: type=1326 audit(1787191524.788:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16580 comm="syz.2.2796" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1304.813297][ T26] audit: type=1326 audit(1787191524.968:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16580 comm="syz.2.2796" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1305.194569][ T26] audit: type=1326 audit(1787191524.968:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16580 comm="syz.2.2796" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1305.285371][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1305.537413][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1305.546553][ T26] audit: type=1326 audit(1787191524.968:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16580 comm="syz.2.2796" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1305.589970][T16279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1305.603924][ T26] audit: type=1326 audit(1787191524.968:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16580 comm="syz.2.2796" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1305.630311][T16279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1305.640928][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1305.653963][ T26] audit: type=1326 audit(1787191524.968:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16580 comm="syz.2.2796" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1305.659710][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1305.708530][ T26] audit: type=1326 audit(1787191524.968:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16580 comm="syz.2.2796" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1305.742442][ T26] audit: type=1326 audit(1787191524.968:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16580 comm="syz.2.2796" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdf4cf9e0d9 code=0x7ffc0000 [ 1306.795511][ T4316] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1307.047655][ T4316] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.106085][ T4316] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1307.139373][ T4316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.175376][ T4316] usb 6-1: Product: syz [ 1307.194308][ T4316] usb 6-1: Manufacturer: syz [ 1307.238204][ T4316] usb 6-1: SerialNumber: syz [ 1307.275939][T14927] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1307.388139][ T4316] usb 6-1: config 0 descriptor?? [ 1307.488247][T14927] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.524926][T14927] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1307.535835][T14927] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1307.585011][T14927] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.599430][T14927] usb 10-1: config 0 descriptor?? [ 1307.608429][ T8192] Bluetooth: hci5: Frame reassembly failed (-84) [ 1307.630858][ T4316] pegasus_notetaker 6-1:0.0: Invalid number of endpoints [ 1307.666494][ T4316] pegasus_notetaker: probe of 6-1:0.0 failed with error -22 [ 1307.702905][ T4316] usb 6-1: USB disconnect, device number 10 [ 1307.934253][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1307.947919][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1307.963958][T16279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1308.015555][T14927] playstation 0003:054C:0DF2.0018: unknown main item tag 0x0 [ 1308.029479][T14927] playstation 0003:054C:0DF2.0018: unknown main item tag 0x0 [ 1308.044552][T14927] playstation 0003:054C:0DF2.0018: unknown main item tag 0x0 [ 1308.060459][T14927] playstation 0003:054C:0DF2.0018: unknown main item tag 0x0 [ 1308.085260][T14927] playstation 0003:054C:0DF2.0018: unknown main item tag 0x0 [ 1308.099177][T14927] playstation 0003:054C:0DF2.0018: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.9-1/input0 [ 1308.212194][T16609] playstation 0003:054C:0DF2.0018: pid 16609 passed too short report [ 1308.236509][T14927] playstation 0003:054C:0DF2.0018: Failed to retrieve feature with reportID 9: -71 [ 1308.252590][T14927] playstation 0003:054C:0DF2.0018: Failed to retrieve DualSense pairing info: -71 [ 1308.275425][T14927] playstation 0003:054C:0DF2.0018: Failed to get MAC address from DualSense [ 1308.284191][T14927] playstation 0003:054C:0DF2.0018: Failed to create dualsense. [ 1308.326247][T14927] playstation: probe of 0003:054C:0DF2.0018 failed with error -71 [ 1308.368542][T14927] usb 10-1: USB disconnect, device number 6 [ 1308.544567][T16636] fido_id[16636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1309.346594][T16654] Illegal XDP return value 1483735084 on prog (id 147) dev syz_tun, expect packet loss! [ 1309.623894][ T26] audit: type=1800 audit(1787191530.348:737): pid=16658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2811" name="size" dev="configfs" ino=73547 res=0 errno=0 [ 1309.644506][ T4287] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1309.645236][T16280] Bluetooth: hci5: command 0x1003 tx timeout [ 1309.729212][ T26] audit: type=1800 audit(1787191530.348:738): pid=16658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2811" name="zoned" dev="configfs" ino=73548 res=0 errno=0 [ 1309.759868][ T26] audit: type=1800 audit(1787191530.348:739): pid=16658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2811" name="power" dev="configfs" ino=73549 res=0 errno=0 [ 1310.617781][T11782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1310.648308][T11782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1310.706621][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1310.724540][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1311.059598][T16279] device veth0_vlan entered promiscuous mode [ 1311.285829][ T4320] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 1311.384025][T16279] device veth1_vlan entered promiscuous mode [ 1311.486216][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1311.515709][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1311.537850][ T4320] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.557212][ T4320] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1311.590682][ T4320] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.595132][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1311.608093][ T4320] usb 8-1: Product: syz [ 1311.612368][ T4320] usb 8-1: Manufacturer: syz [ 1311.629227][ T4320] usb 8-1: SerialNumber: syz [ 1311.641071][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1311.664024][ T4320] usb 8-1: config 0 descriptor?? [ 1311.681371][ T4320] pegasus_notetaker 8-1:0.0: Invalid number of endpoints [ 1311.722672][ T4320] pegasus_notetaker: probe of 8-1:0.0 failed with error -22 [ 1311.751451][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1311.771613][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1311.789531][T16279] device veth0_macvtap entered promiscuous mode [ 1311.818806][T16279] device veth1_macvtap entered promiscuous mode [ 1311.878770][ T4320] usb 8-1: USB disconnect, device number 10 [ 1311.884911][T16279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1311.904368][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1311.932984][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1311.961799][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1311.991351][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1312.027008][T16279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1312.046516][T11782] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1312.076155][T11782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1312.083660][ T26] audit: type=1800 audit(1787191532.808:740): pid=16687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2821" name="size" dev="configfs" ino=73644 res=0 errno=0 [ 1312.110041][T16279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.140940][T16279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.153946][ T26] audit: type=1800 audit(1787191532.858:741): pid=16687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2821" name="zoned" dev="configfs" ino=73648 res=0 errno=0 [ 1312.185019][T16279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.193831][T16279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.228922][ T26] audit: type=1800 audit(1787191532.858:742): pid=16687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2821" name="power" dev="configfs" ino=73649 res=0 errno=0 [ 1313.896966][ T4615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.931325][ T4615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.974026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1314.023275][ T4615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.036315][ T4615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.063853][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1314.201178][T16710] futex_wake_op: syz.9.2826 tries to shift op by 144; fix this program [ 1315.568693][ T26] audit: type=1800 audit(1787191536.288:743): pid=16727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2832" name="size" dev="configfs" ino=74396 res=0 errno=0 [ 1315.828020][ T26] audit: type=1800 audit(1787191536.428:744): pid=16727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2832" name="zoned" dev="configfs" ino=74401 res=0 errno=0 [ 1315.848248][ C0] vkms_vblank_simulate: vblank timer overrun [ 1316.229468][ T26] audit: type=1800 audit(1787191536.488:745): pid=16727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2832" name="power" dev="configfs" ino=74402 res=0 errno=0 [ 1316.698307][ T4316] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1317.576830][ T4316] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.632616][ T4316] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1317.698831][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.732718][ T4316] usb 5-1: Product: syz [ 1317.751358][ T4316] usb 5-1: Manufacturer: syz [ 1319.110961][ T4316] usb 5-1: SerialNumber: syz [ 1319.139996][ T4316] usb 5-1: config 0 descriptor?? [ 1319.161040][ T4316] usb 5-1: can't set config #0, error -71 [ 1319.259334][ T4316] usb 5-1: USB disconnect, device number 23 [ 1320.517645][ T26] audit: type=1800 audit(1787191541.248:746): pid=16775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2844" name="size" dev="configfs" ino=74780 res=0 errno=0 [ 1320.655316][ T26] audit: type=1800 audit(1787191541.278:747): pid=16775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2844" name="zoned" dev="configfs" ino=74781 res=0 errno=0 [ 1321.134185][ T26] audit: type=1800 audit(1787191541.288:748): pid=16775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2844" name="power" dev="configfs" ino=74782 res=0 errno=0 [ 1322.679313][T16807] overlayfs: conflicting options: nfs_export=on,index=off [ 1322.697436][T16807] netlink: 220 bytes leftover after parsing attributes in process `syz.9.2851'. [ 1322.815060][ T130] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1323.032570][ T130] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.131265][ T130] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1323.478154][ T130] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.537746][ T130] usb 6-1: Product: syz [ 1323.542041][ T130] usb 6-1: Manufacturer: syz [ 1323.588739][ T130] usb 6-1: SerialNumber: syz [ 1323.610960][ T130] usb 6-1: config 0 descriptor?? [ 1323.635414][ T130] pegasus_notetaker 6-1:0.0: Invalid number of endpoints [ 1323.654288][ T130] pegasus_notetaker: probe of 6-1:0.0 failed with error -22 [ 1323.714986][ T3600] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1325.201485][T16194] usb 6-1: USB disconnect, device number 11 [ 1325.655240][ T3600] usb 5-1: Using ep0 maxpacket: 32 [ 1327.147842][ T3600] usb 5-1: device descriptor read/all, error -71 [ 1327.361080][ T26] audit: type=1800 audit(1787191548.088:749): pid=16850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2859" name="size" dev="configfs" ino=74694 res=0 errno=0 [ 1327.422106][ T26] audit: type=1800 audit(1787191548.108:750): pid=16850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2859" name="zoned" dev="configfs" ino=74696 res=0 errno=0 [ 1327.496485][ T26] audit: type=1800 audit(1787191548.118:751): pid=16850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2859" name="power" dev="configfs" ino=74697 res=0 errno=0 [ 1331.845970][ T7059] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1332.111047][ T7059] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.142717][ T7059] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1332.174909][ T7059] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.190522][T16917] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2877'. [ 1332.221936][ T7059] usb 5-1: Product: syz [ 1332.231072][ T7059] usb 5-1: Manufacturer: syz [ 1332.253259][ T7059] usb 5-1: SerialNumber: syz [ 1332.283068][ T7059] usb 5-1: config 0 descriptor?? [ 1332.312160][ T7059] pegasus_notetaker 5-1:0.0: Invalid number of endpoints [ 1332.339777][ T7059] pegasus_notetaker: probe of 5-1:0.0 failed with error -22 [ 1332.510565][ T7059] usb 5-1: USB disconnect, device number 26 [ 1334.266930][ T26] audit: type=1326 audit(1787191554.988:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.9.2886" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1334.824018][ T26] audit: type=1326 audit(1787191554.988:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.9.2886" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1334.848714][ T26] audit: type=1326 audit(1787191554.988:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.9.2886" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcedf35e90e code=0x7ffc0000 [ 1334.873508][ T26] audit: type=1326 audit(1787191554.988:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.9.2886" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1334.901009][ T26] audit: type=1326 audit(1787191554.988:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.9.2886" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1335.296788][ T26] audit: type=1326 audit(1787191554.988:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.9.2886" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1335.322185][ T26] audit: type=1326 audit(1787191554.988:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.9.2886" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1335.348102][ T26] audit: type=1326 audit(1787191554.988:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.9.2886" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1335.372687][ T26] audit: type=1326 audit(1787191554.988:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.9.2886" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1335.397332][ T26] audit: type=1326 audit(1787191554.988:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.9.2886" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e0d9 code=0x7ffc0000 [ 1337.274858][ T4810] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1337.690192][T16988] bond0: invalid ARP target specified [ 1337.710756][T16984] jffs2: notice: (16984) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1337.775906][ T4810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.817441][ T4810] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1337.869954][ T4810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.896251][ T4810] usb 3-1: Product: syz [ 1338.654790][ T4810] usb 3-1: Manufacturer: syz [ 1338.659526][ T4810] usb 3-1: SerialNumber: syz [ 1338.691277][ T4810] usb 3-1: config 0 descriptor?? [ 1338.722001][ T4810] pegasus_notetaker 3-1:0.0: Invalid number of endpoints [ 1338.837528][ T4810] pegasus_notetaker: probe of 3-1:0.0 failed with error -22 [ 1338.981423][T16805] usb 3-1: USB disconnect, device number 11 [ 1344.453665][T17027] syz.7.2906: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz7,mems_allowed=0-1 [ 1344.605933][T17027] CPU: 1 PID: 17027 Comm: syz.7.2906 Not tainted syzkaller #0 [ 1344.613482][T17027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1344.623581][T17027] Call Trace: [ 1344.626895][T17027] [ 1344.629847][T17027] dump_stack_lvl+0x188/0x24e [ 1344.634567][T17027] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1344.641015][T17027] ? show_regs_print_info+0x12/0x12 [ 1344.646252][T17027] ? load_image+0x410/0x410 [ 1344.650818][T17027] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1344.657272][T17027] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1344.663827][T17027] warn_alloc+0x242/0x330 [ 1344.668225][T17027] ? zone_watermark_ok_safe+0x270/0x270 [ 1344.673827][T17027] __vmalloc_node_range+0x11e/0x1380 [ 1344.679190][T17027] ? __mutex_trylock_common+0x15c/0x260 [ 1344.684780][T17027] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1344.691002][T17027] ? rcu_is_watching+0x11/0xa0 [ 1344.695808][T17027] ? trace_contention_end+0x5f/0x170 [ 1344.701122][T17027] ? __mutex_lock+0x1ab/0xae0 [ 1344.705827][T17027] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1344.711487][T17027] ? free_vm_area+0x50/0x50 [ 1344.716018][T17027] ? dvb_demux_do_ioctl+0x313/0x530 [ 1344.721249][T17027] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1344.726734][T17027] ? mutex_lock_nested+0x10/0x10 [ 1344.731698][T17027] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1344.737553][T17027] vmalloc+0x75/0x80 [ 1344.741478][T17027] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1344.747407][T17027] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1344.753077][T17027] dvb_demux_do_ioctl+0x450/0x530 [ 1344.758142][T17027] dvb_usercopy+0x191/0x2b0 [ 1344.762688][T17027] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 1344.768273][T17027] ? dvb_generic_ioctl+0xb0/0xb0 [ 1344.773262][T17027] ? dvb_demux_poll+0x210/0x210 [ 1344.778168][T17027] dvb_demux_ioctl+0x25/0x30 [ 1344.782797][T17027] __se_sys_ioctl+0xfa/0x170 [ 1344.787419][T17027] do_syscall_64+0x4c/0xa0 [ 1344.791867][T17027] ? clear_bhb_loop+0x60/0xb0 [ 1344.796578][T17027] ? clear_bhb_loop+0x60/0xb0 [ 1344.801291][T17027] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1344.807220][T17027] RIP: 0033:0x7f4afc99e0d9 [ 1344.811663][T17027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1344.831398][T17027] RSP: 002b:00007f4afd78f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1344.839852][T17027] RAX: ffffffffffffffda RBX: 00007f4afcc25fa0 RCX: 00007f4afc99e0d9 [ 1344.847856][T17027] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000004 [ 1344.855851][T17027] RBP: 00007f4afca35024 R08: 0000000000000000 R09: 0000000000000000 [ 1344.863880][T17027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1344.871880][T17027] R13: 00007f4afcc26038 R14: 00007f4afcc25fa0 R15: 00007fff96d35558 [ 1344.879915][T17027] [ 1344.906439][T17027] Mem-Info: [ 1344.909784][T17027] active_anon:99273 inactive_anon:0 isolated_anon:0 [ 1344.909784][T17027] active_file:20307 inactive_file:40890 isolated_file:0 [ 1344.909784][T17027] unevictable:4864 dirty:173 writeback:0 [ 1344.909784][T17027] slab_reclaimable:22003 slab_unreclaimable:99618 [ 1344.909784][T17027] mapped:32594 shmem:96638 pagetables:1075 [ 1344.909784][T17027] sec_pagetables:0 bounce:0 [ 1344.909784][T17027] kernel_misc_reclaimable:0 [ 1344.909784][T17027] free:1219097 free_pcp:6823 free_cma:0 [ 1344.966095][T17027] Node 0 active_anon:399128kB inactive_anon:0kB active_file:81228kB inactive_file:163360kB unevictable:17920kB isolated(anon):0kB isolated(file):0kB mapped:132424kB dirty:692kB writeback:0kB shmem:387064kB shmem_thp: 382976kB shmem_pmdmapped: 12288kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11800kB pagetables:4300kB sec_pagetables:0kB all_unreclaimable? no [ 1345.219176][T17027] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1346.033658][T17027] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1346.167333][T17027] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1346.227840][T17050] xt_connbytes: Forcing CT accounting to be enabled [ 1346.234660][T17050] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1346.920529][T17027] Node 0 DMA32 free:950540kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:398532kB inactive_anon:0kB active_file:81228kB inactive_file:163360kB unevictable:17920kB writepending:740kB present:3129332kB managed:2592908kB mlocked:0kB bounce:0kB free_pcp:18824kB local_pcp:1800kB free_cma:0kB [ 1346.952145][T17027] lowmem_reserve[]: 0 0 1 1 1 [ 1346.959248][T17027] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1346.986519][T17027] lowmem_reserve[]: 0 0 0 0 0 [ 1346.991421][T17027] Node 1 Normal free:3898200kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:21636kB local_pcp:7436kB free_cma:0kB [ 1347.054881][T17027] lowmem_reserve[]: 0 0 0 0 0 [ 1347.059667][T17027] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1347.127024][T17027] Node 0 DMA32: 2497*4kB (UME) 2369*8kB (UME) 1855*16kB (UME) 1159*32kB (UME) 791*64kB (UME) 273*128kB (UME) 224*256kB (UME) 93*512kB (UME) 41*1024kB (UME) 10*2048kB (UME) 150*4096kB (UM) = 963100kB [ 1347.182816][T17027] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1347.221843][T17027] Node 1 Normal: 252*4kB (UE) 63*8kB (UE) 35*16kB (UME) 60*32kB (UME) 25*64kB (UME) 7*128kB (UME) 2*256kB (UM) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3898200kB [ 1347.267354][T17027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1347.294493][T17027] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1347.315165][T17027] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1347.330369][T17027] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1347.340972][T17027] 158854 total pagecache pages [ 1347.347375][T17027] 0 pages in swap cache [ 1347.365138][T17027] Free swap = 124216kB [ 1347.376949][T17027] Total swap = 124996kB [ 1347.385077][T17027] 2097051 pages RAM [ 1347.396274][T17027] 0 pages HighMem/MovableOnly [ 1347.425060][T17027] 415223 pages reserved [ 1347.431189][T17027] 0 pages cma reserved [ 1347.534848][T16194] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1347.739301][T16194] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.827328][T16194] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1347.960535][T16194] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.065264][T16194] usb 6-1: Product: syz [ 1348.134247][T16194] usb 6-1: Manufacturer: syz [ 1348.351850][T16194] usb 6-1: SerialNumber: syz [ 1350.703734][T16194] usb 6-1: config 0 descriptor?? [ 1350.964029][T16194] usb 6-1: can't set config #0, error -71 [ 1350.971163][T16194] usb 6-1: USB disconnect, device number 12 [ 1352.852947][T17116] 9pnet_virtio: no channels available for device syz [ 1352.963543][T17118] netlink: 'syz.7.2929': attribute type 1 has an invalid length. [ 1353.369212][T17118] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1355.155071][T17112] syz.2.2927: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1355.314997][T17112] CPU: 0 PID: 17112 Comm: syz.2.2927 Not tainted syzkaller #0 [ 1355.322544][T17112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1355.332643][T17112] Call Trace: [ 1355.335965][T17112] [ 1355.338939][T17112] dump_stack_lvl+0x188/0x24e [ 1355.343680][T17112] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1355.350146][T17112] ? show_regs_print_info+0x12/0x12 [ 1355.355497][T17112] ? load_image+0x410/0x410 [ 1355.360064][T17112] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1355.366549][T17112] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1355.373097][T17112] warn_alloc+0x242/0x330 [ 1355.377473][T17112] ? zone_watermark_ok_safe+0x270/0x270 [ 1355.383072][T17112] __vmalloc_node_range+0x11e/0x1380 [ 1355.388377][T17112] ? __mutex_trylock_common+0x15c/0x260 [ 1355.393945][T17112] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1355.400141][T17112] ? rcu_is_watching+0x11/0xa0 [ 1355.404933][T17112] ? trace_contention_end+0x5f/0x170 [ 1355.410236][T17112] ? __mutex_lock+0x1ab/0xae0 [ 1355.414933][T17112] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1355.420662][T17112] ? free_vm_area+0x50/0x50 [ 1355.425189][T17112] ? dvb_demux_do_ioctl+0x313/0x530 [ 1355.430427][T17112] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1355.435929][T17112] ? mutex_lock_nested+0x10/0x10 [ 1355.440887][T17112] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1355.446754][T17112] vmalloc+0x75/0x80 [ 1355.450669][T17112] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1355.456497][T17112] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1355.462179][T17112] dvb_demux_do_ioctl+0x450/0x530 [ 1355.467231][T17112] dvb_usercopy+0x191/0x2b0 [ 1355.471753][T17112] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 1355.477317][T17112] ? dvb_generic_ioctl+0xb0/0xb0 [ 1355.482289][T17112] ? dvb_demux_poll+0x210/0x210 [ 1355.487161][T17112] dvb_demux_ioctl+0x25/0x30 [ 1355.491771][T17112] __se_sys_ioctl+0xfa/0x170 [ 1355.496390][T17112] do_syscall_64+0x4c/0xa0 [ 1355.500824][T17112] ? clear_bhb_loop+0x60/0xb0 [ 1355.505517][T17112] ? clear_bhb_loop+0x60/0xb0 [ 1355.510229][T17112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1355.516164][T17112] RIP: 0033:0x7fdf4cf9e0d9 [ 1355.520607][T17112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.540263][T17112] RSP: 002b:00007fdf4de03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1355.548742][T17112] RAX: ffffffffffffffda RBX: 00007fdf4d225fa0 RCX: 00007fdf4cf9e0d9 [ 1355.556770][T17112] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000004 [ 1355.564796][T17112] RBP: 00007fdf4d035024 R08: 0000000000000000 R09: 0000000000000000 [ 1355.572800][T17112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1355.580802][T17112] R13: 00007fdf4d226038 R14: 00007fdf4d225fa0 R15: 00007ffe3b8bd538 [ 1355.588798][T17112] [ 1355.591850][ C0] vkms_vblank_simulate: vblank timer overrun [ 1355.614205][T17112] Mem-Info: [ 1355.832340][T17136] xt_CONNSECMARK: invalid mode: 0 [ 1357.131186][T17112] active_anon:100986 inactive_anon:0 isolated_anon:0 [ 1357.131186][T17112] active_file:20307 inactive_file:40894 isolated_file:0 [ 1357.131186][T17112] unevictable:4864 dirty:113 writeback:0 [ 1357.131186][T17112] slab_reclaimable:21974 slab_unreclaimable:100371 [ 1357.131186][T17112] mapped:32456 shmem:98547 pagetables:1000 [ 1357.131186][T17112] sec_pagetables:0 bounce:0 [ 1357.131186][T17112] kernel_misc_reclaimable:0 [ 1357.131186][T17112] free:1211414 free_pcp:12513 free_cma:0 [ 1358.896911][T17112] Node 0 active_anon:384328kB inactive_anon:0kB active_file:81228kB inactive_file:163376kB unevictable:17920kB isolated(anon):0kB isolated(file):0kB mapped:118484kB dirty:560kB writeback:0kB shmem:372724kB shmem_thp: 368640kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11756kB pagetables:4172kB sec_pagetables:0kB all_unreclaimable? no [ 1358.976260][T17112] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1359.747723][T17112] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1359.814163][T17176] binder: 17174:17176 ioctl 4018620d 0 returned -22 [ 1360.362004][T17112] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1360.395172][T17112] Node 0 DMA32 free:959752kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:384084kB inactive_anon:0kB active_file:81228kB inactive_file:163376kB unevictable:17920kB writepending:572kB present:3129332kB managed:2592908kB mlocked:0kB bounce:0kB free_pcp:22324kB local_pcp:1560kB free_cma:0kB [ 1360.759181][T17112] lowmem_reserve[]: 0 0 1 1 1 [ 1360.792660][T17112] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1360.819503][ C0] vkms_vblank_simulate: vblank timer overrun [ 1360.826370][T17112] lowmem_reserve[]: 0 0 0 0 0 [ 1360.831147][T17112] Node 1 Normal free:3898200kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:21636kB local_pcp:14200kB free_cma:0kB [ 1360.860754][ C0] vkms_vblank_simulate: vblank timer overrun [ 1360.867774][T17112] lowmem_reserve[]: 0 0 0 0 0 [ 1360.872521][T17112] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1360.905188][T17112] Node 0 DMA32: 1094*4kB (UME) 2378*8kB (UME) 1850*16kB (UME) 1087*32kB (UME) 777*64kB (UME) 272*128kB (UME) 221*256kB (UME) 93*512kB (UME) 41*1024kB (UME) 13*2048kB (UME) 150*4096kB (UM) = 959528kB [ 1360.953607][T17112] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1360.981071][T17112] Node 1 Normal: 252*4kB (UE) 63*8kB (UE) 35*16kB (UME) 60*32kB (UME) 25*64kB (UME) 7*128kB (UME) 2*256kB (UM) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3898200kB [ 1361.550328][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.556763][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.974851][T17112] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1361.989870][T17112] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1361.999773][T17112] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1362.018081][T17112] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1362.027695][T17112] 154763 total pagecache pages [ 1362.032484][T17112] 0 pages in swap cache [ 1362.045686][T17112] Free swap = 124216kB [ 1362.049913][T17112] Total swap = 124996kB [ 1362.889185][T17112] 2097051 pages RAM [ 1362.893059][T17112] 0 pages HighMem/MovableOnly [ 1362.898341][T17112] 415223 pages reserved [ 1362.905067][T17112] 0 pages cma reserved [ 1365.554448][T17226] futex_wake_op: syz.5.2954 tries to shift op by 144; fix this program [ 1366.848335][T17244] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2956'. [ 1366.861211][T17246] binder: 17243:17246 ioctl 4018620d 0 returned -22 [ 1367.976977][T17253] syz.4.2959: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1368.047432][T17258] jffs2: notice: (17258) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1368.073210][T17253] CPU: 1 PID: 17253 Comm: syz.4.2959 Not tainted syzkaller #0 [ 1368.080834][T17253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1368.090929][T17253] Call Trace: [ 1368.094234][T17253] [ 1368.097188][T17253] dump_stack_lvl+0x188/0x24e [ 1368.101914][T17253] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1368.108383][T17253] ? show_regs_print_info+0x12/0x12 [ 1368.113637][T17253] ? load_image+0x410/0x410 [ 1368.118176][T17253] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1368.124634][T17253] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1368.131178][T17253] warn_alloc+0x242/0x330 [ 1368.135561][T17253] ? zone_watermark_ok_safe+0x270/0x270 [ 1368.141155][T17253] __vmalloc_node_range+0x11e/0x1380 [ 1368.146477][T17253] ? __mutex_trylock_common+0x15c/0x260 [ 1368.152060][T17253] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1368.158278][T17253] ? rcu_is_watching+0x11/0xa0 [ 1368.163079][T17253] ? trace_contention_end+0x5f/0x170 [ 1368.168406][T17253] ? __mutex_lock+0x1ab/0xae0 [ 1368.173108][T17253] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1368.178770][T17253] ? free_vm_area+0x50/0x50 [ 1368.183300][T17253] ? dvb_demux_do_ioctl+0x313/0x530 [ 1368.188533][T17253] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1368.194020][T17253] ? mutex_lock_nested+0x10/0x10 [ 1368.198980][T17253] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1368.204820][T17253] vmalloc+0x75/0x80 [ 1368.208740][T17253] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1368.214576][T17253] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1368.220250][T17253] dvb_demux_do_ioctl+0x450/0x530 [ 1368.225320][T17253] dvb_usercopy+0x191/0x2b0 [ 1368.229855][T17253] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 1368.235438][T17253] ? dvb_generic_ioctl+0xb0/0xb0 [ 1368.240427][T17253] ? dvb_demux_poll+0x210/0x210 [ 1368.245309][T17253] dvb_demux_ioctl+0x25/0x30 [ 1368.249935][T17253] __se_sys_ioctl+0xfa/0x170 [ 1368.254573][T17253] do_syscall_64+0x4c/0xa0 [ 1368.259024][T17253] ? clear_bhb_loop+0x60/0xb0 [ 1368.263728][T17253] ? clear_bhb_loop+0x60/0xb0 [ 1368.268435][T17253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1368.274356][T17253] RIP: 0033:0x7f4f7f39e0d9 [ 1368.278797][T17253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.298435][T17253] RSP: 002b:00007f4f8034f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1368.306897][T17253] RAX: ffffffffffffffda RBX: 00007f4f7f625fa0 RCX: 00007f4f7f39e0d9 [ 1368.314897][T17253] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000004 [ 1368.322889][T17253] RBP: 00007f4f7f435024 R08: 0000000000000000 R09: 0000000000000000 [ 1368.330884][T17253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1368.338877][T17253] R13: 00007f4f7f626038 R14: 00007f4f7f625fa0 R15: 00007ffc7d9ecc48 [ 1368.346887][T17253] [ 1368.349952][ C1] vkms_vblank_simulate: vblank timer overrun [ 1368.414919][T17253] Mem-Info: [ 1368.569791][T17253] active_anon:100629 inactive_anon:0 isolated_anon:0 [ 1368.569791][T17253] active_file:20307 inactive_file:40898 isolated_file:0 [ 1368.569791][T17253] unevictable:4864 dirty:165 writeback:0 [ 1368.569791][T17253] slab_reclaimable:21966 slab_unreclaimable:98523 [ 1368.569791][T17253] mapped:32546 shmem:98173 pagetables:1025 [ 1368.569791][T17253] sec_pagetables:0 bounce:0 [ 1368.569791][T17253] kernel_misc_reclaimable:0 [ 1368.569791][T17253] free:1217889 free_pcp:7854 free_cma:0 [ 1368.615500][ C1] vkms_vblank_simulate: vblank timer overrun [ 1371.054311][T17253] Node 0 active_anon:479648kB inactive_anon:0kB active_file:81228kB inactive_file:163392kB unevictable:17920kB isolated(anon):0kB isolated(file):0kB mapped:131984kB dirty:776kB writeback:0kB shmem:468336kB shmem_thp: 387072kB shmem_pmdmapped: 12288kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11724kB pagetables:3988kB sec_pagetables:0kB all_unreclaimable? no [ 1371.088324][ C1] vkms_vblank_simulate: vblank timer overrun [ 1371.127775][T17281] [ 1371.130266][T17281] ====================================================== [ 1371.137350][T17281] WARNING: possible circular locking dependency detected [ 1371.144511][T17281] syzkaller #0 Not tainted [ 1371.148994][T17281] ------------------------------------------------------ [ 1371.156050][T17281] syz.2.2964/17281 is trying to acquire lock: [ 1371.162159][T17281] ffff88801797c150 (&sb->s_type->i_mutex_key#26){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430 [ 1371.173739][T17281] [ 1371.173739][T17281] but task is already holding lock: [ 1371.181105][T17281] ffff888057c23920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 1371.190224][T17281] [ 1371.190224][T17281] which lock already depends on the new lock. [ 1371.190224][T17281] [ 1371.200628][T17281] [ 1371.200628][T17281] the existing dependency chain (in reverse order) is: [ 1371.209662][T17281] [ 1371.209662][T17281] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 1371.217319][T17281] __mutex_lock+0x12d/0xae0 [ 1371.222365][T17281] tcm_set_name+0x26/0x90 [ 1371.227225][T17281] function_make+0x195/0x350 [ 1371.232407][T17281] configfs_mkdir+0x511/0x9e0 [ 1371.237613][T17281] vfs_mkdir+0x386/0x570 [ 1371.242393][T17281] do_mkdirat+0x1d8/0x440 [ 1371.247248][T17281] __x64_sys_mkdir+0x6a/0x80 [ 1371.252359][T17281] do_syscall_64+0x4c/0xa0 [ 1371.257310][T17281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1371.263732][T17281] [ 1371.263732][T17281] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 1371.271987][T17281] __mutex_lock+0x12d/0xae0 [ 1371.277014][T17281] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 1371.283762][T17281] configfs_symlink+0x5a4/0x13c0 [ 1371.289268][T17281] vfs_symlink+0x245/0x3d0 [ 1371.294206][T17281] do_symlinkat+0x1b6/0x400 [ 1371.299244][T17281] __x64_sys_symlink+0x7a/0x90 [ 1371.304533][T17281] do_syscall_64+0x4c/0xa0 [ 1371.309480][T17281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1371.315904][T17281] [ 1371.315904][T17281] -> #0 (&sb->s_type->i_mutex_key#26){++++}-{3:3}: [ 1371.324597][T17281] __lock_acquire+0x2d18/0x7c40 [ 1371.329992][T17281] lock_acquire+0x1bb/0x4a0 [ 1371.335027][T17281] down_write+0x36/0x60 [ 1371.339704][T17281] configfs_depend_item_unlocked+0x14f/0x430 [ 1371.346212][T17281] usbg_make_tpg+0x1f3/0x580 [ 1371.351327][T17281] target_fabric_make_tpg+0xa0/0x6d0 [ 1371.357215][T17281] configfs_mkdir+0x511/0x9e0 [ 1371.362435][T17281] vfs_mkdir+0x386/0x570 [ 1371.367216][T17281] do_mkdirat+0x1d8/0x440 [ 1371.372078][T17281] __x64_sys_mkdir+0x6a/0x80 [ 1371.377198][T17281] do_syscall_64+0x4c/0xa0 [ 1371.382151][T17281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1371.388581][T17281] [ 1371.388581][T17281] other info that might help us debug this: [ 1371.388581][T17281] [ 1371.398824][T17281] Chain exists of: [ 1371.398824][T17281] &sb->s_type->i_mutex_key#26 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 1371.398824][T17281] [ 1371.413542][T17281] Possible unsafe locking scenario: [ 1371.413542][T17281] [ 1371.420997][T17281] CPU0 CPU1 [ 1371.426378][T17281] ---- ---- [ 1371.431743][T17281] lock(&opts->dep_lock); [ 1371.436165][T17281] lock(gadget_subsys.su_mutex); [ 1371.443728][T17281] lock(&opts->dep_lock); [ 1371.450684][T17281] lock(&sb->s_type->i_mutex_key#26); [ 1371.456161][T17281] [ 1371.456161][T17281] *** DEADLOCK *** [ 1371.456161][T17281] [ 1371.464304][T17281] 5 locks held by syz.2.2964/17281: [ 1371.469499][T17281] #0: ffff888019b92460 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1371.478766][T17281] #1: ffff888052dfb3f0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 1371.489582][T17281] #2: ffffffff8d4e9850 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 1371.499342][T17281] #3: ffffffff8d808e28 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf4/0x580 [ 1371.509015][T17281] #4: ffff888057c23920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 1371.518525][T17281] [ 1371.518525][T17281] stack backtrace: [ 1371.524424][T17281] CPU: 1 PID: 17281 Comm: syz.2.2964 Not tainted syzkaller #0 [ 1371.531887][T17281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1371.542046][T17281] Call Trace: [ 1371.545329][T17281] [ 1371.548281][T17281] dump_stack_lvl+0x188/0x24e [ 1371.552984][T17281] ? load_image+0x410/0x410 [ 1371.557503][T17281] ? show_regs_print_info+0x12/0x12 [ 1371.562733][T17281] ? print_circular_bug+0x12b/0x1a0 [ 1371.567959][T17281] check_noncircular+0x296/0x330 [ 1371.572916][T17281] ? look_up_lock_class+0x75/0x140 [ 1371.578032][T17281] ? add_chain_block+0x9b0/0x9b0 [ 1371.582995][T17281] ? lockdep_lock+0xf1/0x1f0 [ 1371.587603][T17281] ? _find_first_zero_bit+0xd2/0x100 [ 1371.592972][T17281] __lock_acquire+0x2d18/0x7c40 [ 1371.597848][T17281] ? __kernel_text_address+0x9/0x30 [ 1371.603119][T17281] ? verify_lock_unused+0x140/0x140 [ 1371.608346][T17281] ? __mutex_trylock_common+0x15c/0x260 [ 1371.613920][T17281] lock_acquire+0x1bb/0x4a0 [ 1371.618449][T17281] ? configfs_depend_item_unlocked+0x14f/0x430 [ 1371.624636][T17281] ? __might_sleep+0xd0/0xd0 [ 1371.629252][T17281] ? read_lock_is_recursive+0x10/0x10 [ 1371.634640][T17281] ? __mutex_trylock_common+0x15c/0x260 [ 1371.640198][T17281] ? usbg_make_tpg+0x144/0x580 [ 1371.644979][T17281] ? mutex_lock_nested+0x10/0x10 [ 1371.649931][T17281] down_write+0x36/0x60 [ 1371.654106][T17281] ? configfs_depend_item_unlocked+0x14f/0x430 [ 1371.660272][T17281] configfs_depend_item_unlocked+0x14f/0x430 [ 1371.666280][T17281] usbg_make_tpg+0x1f3/0x580 [ 1371.670903][T17281] ? configfs_mkdir+0x4b5/0x9e0 [ 1371.675776][T17281] ? usbg_drop_tport+0x20/0x20 [ 1371.680552][T17281] ? vscnprintf+0x80/0x80 [ 1371.684956][T17281] ? __kmem_cache_alloc_node+0x19d/0x270 [ 1371.690677][T17281] target_fabric_make_tpg+0xa0/0x6d0 [ 1371.695979][T17281] ? target_fabric_release_wwn+0xa0/0xa0 [ 1371.701636][T17281] configfs_mkdir+0x511/0x9e0 [ 1371.706502][T17281] vfs_mkdir+0x386/0x570 [ 1371.710794][T17281] do_mkdirat+0x1d8/0x440 [ 1371.715164][T17281] ? vfs_mkdir+0x570/0x570 [ 1371.719600][T17281] ? getname_flags+0x206/0x500 [ 1371.724384][T17281] __x64_sys_mkdir+0x6a/0x80 [ 1371.728987][T17281] do_syscall_64+0x4c/0xa0 [ 1371.733515][T17281] ? clear_bhb_loop+0x60/0xb0 [ 1371.738217][T17281] ? clear_bhb_loop+0x60/0xb0 [ 1371.742920][T17281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1371.748861][T17281] RIP: 0033:0x7fdf4cf9e0d9 [ 1371.753301][T17281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1371.772924][T17281] RSP: 002b:00007fdf4de03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1371.781356][T17281] RAX: ffffffffffffffda RBX: 00007fdf4d225fa0 RCX: 00007fdf4cf9e0d9 [ 1371.789340][T17281] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 1371.797326][T17281] RBP: 00007fdf4d035024 R08: 0000000000000000 R09: 0000000000000000 [ 1371.805323][T17281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1371.813836][T17281] R13: 00007fdf4d226038 R14: 00007fdf4d225fa0 R15: 00007ffe3b8bd538 [ 1371.821835][T17281] [ 1371.824942][ C1] vkms_vblank_simulate: vblank timer overrun [ 1371.848294][T17253] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1371.933968][T17253] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1371.961701][T17253] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1371.968545][T17253] Node 0 DMA32 free:871668kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:464160kB inactive_anon:0kB active_file:81228kB inactive_file:163392kB unevictable:17920kB writepending:792kB present:3129332kB managed:2592908kB mlocked:0kB bounce:0kB free_pcp:37324kB local_pcp:17692kB free_cma:0kB [ 1372.016908][T17253] lowmem_reserve[]: 0 0 1 1 1 [ 1372.030659][T17253] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1372.119480][T17253] lowmem_reserve[]: 0 0 0 0 0 [ 1372.129799][T17253] Node 1 Normal free:3898200kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:21636kB local_pcp:14200kB free_cma:0kB [ 1372.180114][T17253] lowmem_reserve[]: 0 0 0 0 0 [ 1372.185558][T17253] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1372.198662][T17253] Node 0 DMA32: 1838*4kB (UME) 1411*8kB (UME) 204*16kB (UME) 459*32kB (UME) 795*64kB (UME) 279*128kB (UME) 221*256kB (UME) 93*512kB (UME) 41*1024kB (UME) 8*2048kB (UME) 150*4096kB (UM) = 900144kB [ 1372.221057][T17253] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1372.235724][ T130] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1372.243666][T17253] Node 1 Normal: 252*4kB (UE) 63*8kB (UE) 35*16kB (UME) 60*32kB (UME) 25*64kB (UME) 7*128kB (UME) 2*256kB (UM) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3898200kB [ 1372.261849][T17253] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1372.272268][T17253] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1372.282008][T17253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1372.291888][T17253] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1372.303796][T17253] 170223 total pagecache pages [ 1372.308866][T17253] 0 pages in swap cache [ 1372.313170][T17253] Free swap = 124216kB [ 1372.317706][T17253] Total swap = 124996kB [ 1372.322494][T17253] 2097051 pages RAM [ 1372.331237][T17253] 0 pages HighMem/MovableOnly [ 1372.336706][T17253] 415223 pages reserved [ 1372.341363][T17253] 0 pages cma reserved [ 1372.466651][ T130] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.486772][ T130] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1372.506319][ T130] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.523203][ T130] usb 6-1: Product: syz [ 1372.533396][ T130] usb 6-1: Manufacturer: syz [ 1372.543756][ T130] usb 6-1: SerialNumber: syz [ 1372.562350][ T130] usb 6-1: config 0 descriptor?? [ 1372.580893][ T130] pegasus_notetaker 6-1:0.0: Invalid number of endpoints [ 1372.596090][ T130] pegasus_notetaker: probe of 6-1:0.0 failed with error -22 [ 1372.779212][ T130] usb 6-1: USB disconnect, device number 13