last executing test programs: 2m1.347184298s ago: executing program 3 (id=1003): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61122400000000006113340000000000bf10000000000000150002000000f0ff3d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f0670200000f00000014030000e433fe1fbf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) setns(0xc9, 0x0) socket(0x8, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000280), 0x80000) socket$pppl2tp(0x18, 0x1, 0x1) socket$rds(0x15, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00') syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) socket$xdp(0x2c, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2m1.002475213s ago: executing program 3 (id=1006): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x8, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x90}}, 0x0) 2m0.717255922s ago: executing program 3 (id=1010): syz_usb_connect(0x0, 0x51, 0x0, 0x0) fsopen(&(0x7f0000000340)='cgroup2\x00', 0x1) syz_open_dev$hidraw(0x0, 0x15e, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x121602, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00000000000000f8ff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000800)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000840)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000880), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000013c0)=@bpf_ext={0x1a, 0xf, &(0x7f0000001480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001500)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2000000000000) 1m57.546212273s ago: executing program 3 (id=1022): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000001c0)={r0, r0, 0x8, 0x20, 0x0, 0x6, 0xfe, 0x16c0, 0x5df, 0x5, 0x2, 0x1, 'syz0\x00'}) shutdown(r0, 0x1) 1m55.034504007s ago: executing program 3 (id=1029): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/usbip-host\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f00000002c0)='match_busid\x00', 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x400000bce) read$msr(0xffffffffffffffff, 0x0, 0x0) setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setgroups(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019680)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000196c0)='./trace\x00', &(0x7f0000019700)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000197c0)='./trace/trace\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000019800)=0xce, 0x4) write(r1, &(0x7f0000000300)='del 1', 0x5) 1m54.505419941s ago: executing program 3 (id=1032): socket(0x10, 0x3, 0x0) socket(0x1e, 0x805, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000003580)={0x100000000000000}, &(0x7f0000003740)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000400)={'syz_tun\x00', 0x0}) r4 = syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000340)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe5, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c82900100000001e00", "00000000030000000010e809", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f00000004c0)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000500)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) getsockname$packet(0xffffffffffffffff, &(0x7f0000003540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x2, 0x0) ptrace$peeksig(0x4209, r6, &(0x7f0000000000)={0x5, 0x405}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000035c0)={'ip6_vti0\x00', &(0x7f0000003600)={'syztnl1\x00', r5, 0x0, 0xc1, 0xfe, 0x7, 0x16, @dev={0xfe, 0x80, '\x00', 0x1f}, @remote, 0x802f, 0x10, 0xffff, 0x2aa1f953}}) syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') 1m38.730819319s ago: executing program 32 (id=1032): socket(0x10, 0x3, 0x0) socket(0x1e, 0x805, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000003580)={0x100000000000000}, &(0x7f0000003740)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000400)={'syz_tun\x00', 0x0}) r4 = syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000340)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe5, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c82900100000001e00", "00000000030000000010e809", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f00000004c0)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000500)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) getsockname$packet(0xffffffffffffffff, &(0x7f0000003540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x2, 0x0) ptrace$peeksig(0x4209, r6, &(0x7f0000000000)={0x5, 0x405}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000035c0)={'ip6_vti0\x00', &(0x7f0000003600)={'syztnl1\x00', r5, 0x0, 0xc1, 0xfe, 0x7, 0x16, @dev={0xfe, 0x80, '\x00', 0x1f}, @remote, 0x802f, 0x10, 0xffff, 0x2aa1f953}}) syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') 11.35049524s ago: executing program 1 (id=1347): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x0) 8.945230593s ago: executing program 1 (id=1359): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000b40)={0x40, 0x18, 0x19, "dfdb20b7fafa4fba5398495c724c3cbf2f808f7cad7dee8dfe"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.115775057s ago: executing program 2 (id=1361): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 8.025964606s ago: executing program 0 (id=1362): r0 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, &(0x7f0000000280)="26c2", 0xfffff, 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000340)='veth1_to_hsr\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$sw_sync(0xffffff9c, &(0x7f0000000200), 0x100, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x40811, &(0x7f0000000300)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x2) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000080)) r6 = dup(r5) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f00000000c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000100)={0x0, r6}) ioctl$VHOST_NET_SET_BACKEND(r4, 0xaf02, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f00000002c0)=0xfd8) 7.677265512s ago: executing program 4 (id=1363): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2) listen(0xffffffffffffffff, 0x6) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) read$char_usb(r4, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x1c) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000440)={0x0, 0xfd, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e080007"], 0xbc}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) 7.675832312s ago: executing program 0 (id=1364): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) inotify_init() r0 = syz_open_procfs(0x0, &(0x7f0000019080)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000019180)={0x2020}, 0x2020) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000094) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_create_resource$kvm_nested_state(0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r4, 0x0}) openat$sw_sync_info(0xffffff9c, &(0x7f0000000240), 0x690000, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000200)={0x0, r5, 0xe, 0x3, 0x1}) write$cgroup_int(r2, &(0x7f0000000040)=0x8000000001cb, 0x12) r6 = syz_open_procfs(0x0, &(0x7f0000019140)='net/ip6_mr_vif\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x8) 6.524434539s ago: executing program 2 (id=1365): mount(0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6020400) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x8, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa8000aaaaaabb86dd6a00000000481100fe8000000000000000000000000000aafe8000"/51], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f0000000700)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7d6a}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, 0x0, 0x0) landlock_restrict_self(r3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x8, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)={@fallback=r4, r5, 0x2f, 0x2030, 0x4}, 0x20) symlinkat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000002740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/events/enable\x00', 0xa0542, 0x4ec598e9b76966f5) io_uring_enter(r6, 0x3100, 0x2a21, 0xcf, &(0x7f0000000200), 0x8) 6.416232149s ago: executing program 4 (id=1366): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x2, 0x0, @ioapic={0x1, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0x1, 0x5, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0xa0, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x15, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x8, 0x4, '\x00', 0xff}, {0x1, 0x5, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x18, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x8, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0x0, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x0, '\x00', 0xfc}, {0xb, 0x3, 0x5, '\x00', 0x4}, {0xf9, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x4, 0x5, 0x1, '\x00', 0x21}, {0x5, 0xec, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) 6.21059081s ago: executing program 0 (id=1367): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x0) 6.073085794s ago: executing program 2 (id=1368): ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000040)) pwrite64(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x89c) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x1, 0x10}}) syz_open_dev$vim2m(0x0, 0x8, 0x2) socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pread64(r1, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) close_range(r2, 0xffffffffffffffff, 0x0) 5.987580643s ago: executing program 0 (id=1369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create1(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, 0x0, 0x0) 5.805790591s ago: executing program 4 (id=1370): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000600)="f4cb4935e1986d712d23ff57eb1faba031d9e6923c135a2229ee167411662b295398dbda70f1c3e5421421f18d040eda55e4f2351ae530b9a32ddfb101ea8bb8c82b15c9945ad63571a4e642ce4a925e1162ed5e8b9bbd342e914a528eb4bb28ab6a462bfd18197dbfb1240d0e0969ff08b3caad6fa50459ea5dae4f52eb1b2260bf1a3dba6caf9d238ed19b40a09cc6ea49310e19bbccb765d00feef5cfa1653af75d8df71e2b76538ad48ee93a2a8dfff6843824a198c01c5e878d13aab8bdf0a50aff70e7009411e41d14bf806fa1840616109e94a368190904cef705914a07ce18f184f8b2402fa5533e247b37c46c7650991a676c75d0f629f603632bd03fb58e5aa98fae738628b4caf1ba7c25d75fc2b25c55c2975897be8d6b7155f3d1351c9acfa62267403cdffcbb75610d66c250a8eee76e005704cc128666b8aeb5578fc112e5af1b5099d9e82b4d2fc8c495060c6e822bb46130da54b210a05cd1d7764b7ecc7b9f6ca49e5c5d12ca6258395579e6cbbfb08cf3ff6f81841b4413dbcd357dcd08949a1ef97edde8d9cb5e870043732e934f6e22b635e9d4a1a81247416d24f761518cf088b22debbca8c7b654ae8cf0b4ebfc6c4a3e1d4e10e70c951c883f827de02d291539336031c3b586aaaab607ffa03445b5e6eaf7afd2b0ada6a68fa812645180be9bf0a21a8ddf9f4c3c3b383fbf2e3716d4120d5a83024976a4e6e99714b6641bd2d8df35ceb97e81ba9ee7f6d07d901c5f94559c5bdb35b0ce320de9e19154bd0581bcc2d1a725898376a72b145bf0b8f18e4de7c2d73dfae089f9f4feccf800fddf4fe0b865b406de50337c779e920e5c471ae424940dcbe7a4dcf459d86088c6745eb1d136b869b35ed8eea58d8319afc3883b1efb3314c66aaab101c5aee58c748f5f71290611e81aad87abc179d0fa6969a0a2f77451959d496404f45465847f7b32b30a00a6cd09e12c90e3d7421767e81367120ee151c7a56d749c20795947874d199bd6438b2e43dc683edc7967244e839283d0c3651766a5232f05e1f58786bd991ce2bbbf615b607734616eb36a920854853c2c435b67ae934a02c5000e3d9a5a7a87829a467faab3723ef22e7d909c2674c47ef1a29f7b08b49aa5dcdf03f62062f2454e63d57602eb9623b40a1307c9a0c0170d7c29e85abaae2edc6cc611543928d71448f66ec5f4f5ee03600a1f206df30fb06effa603a0535c0017c43fbc8356bf283d67734cf096edf437c95182075353385980402fe26d80d4252596a2e14bdc03add8ab090692c16cf32c3e15c9b8c724cecac8d8459a61fc4799316538fd80bf18c9fec534cfa917951fd8048b814b24998581993482349f29314b6ca16787c81d8656fa679b90fadd63cc61f4680cc05936d77686375b5750fe19e21a84133794aab51345e53acaca292ed0e15d50e0b7c3aded67bd149c9e273ad00bd9ebb9340f52abff9441e34e1f24a7f0960fc11dc45fd7dd8877268faf5452ac1e6f34f9a23fb04d6a818fd38fd6a7ce0898d5f6753ac883a931135724a1e668ecfc5246bce91792d18341e9c749149eb0cdbdfedf0b242a0fc8c7e396d8d99eefaead9765cf2494bcb2f055b4201bf13425f235274805a0ad9b6fb0f99bf9a891d7c9e085959c1f9a5e0e220ce76edfdc2c65fca2d67701068fa0bbd4e4a3c9d09718574b42676b53f7a9162cbdc67303e5259b0c22d626bc951d7546f10fbcf534aafd882b0e1c4d32f728655047a0b52df173ce881ca84c28048a3dd4f5670651276ee1e298f05732c4c0f0a010566b19b080f8afaa68aa6ab946fddc39d0882a59c2e35391c4aad57b85b28e4cdeed2bb25fa183eecc79ed896a9c38c07d34223e04f92c9db457f09c741341d8227084869b9ec56eb52e5f08159129f28989c8fa3057ed6f29f25d9ca65f792623953057b9f54f331a57d1917e8422c39b204b133da8937d621c3e465780bc4c9d1ce1504c136d83be399992f44cd5820d378289c8ac2a339bc462a582b7c33bb9bf9f53f3c9e04f4b4d76cbd434612196b6f0745c6a67cb6def0af0aadbf45297d8800517fe4ee2bac8530e6d55e8411c332c228c0f58136c14b0cce7c7c8f962102d8e2b3eb70d7c9d22571cbe0732927cb8daca1ed88eae6ab91b30c8529eae2f2a1ff137b9273251537a5df256d90ed62b317a7ebde37911c200d91e0168bb1cacc4df437d8814f849feadd01f2fb466b64939b59ceb8a5c74cbed37fd2d298af57b74db70b3d50fae409a8ef55c5c36a8183151b10b54f0f92a3144610a4fd96a80bdde44542d3d8ffcc3e02f85000f4e65670ca04fc85b3a1fb0a32b135aabe168d79c807106d942cef5acd3696b0c51daf38cc3baed3fc96c21caf3a38ba60c79ff0274aeddccd8b9ca239d2c28b612e50fdce07221ce8e60921e48ffd16374ef53678e91db36b7ed8683b493414586176ae722e39f6db9a9c38d71da754225614ad515f9c0088361c683c0718a3ada0e13c0dbd6a7dbab4564042de60ebfe2b57da096d9953e0a74ef146c1b6e4647816b349e257b29fb69a61bb8c9dcf3fbc73d9c55e3a00e2f3746cb2dbe5defc7aa4c0a529ad546ef7264fd17bfe5e2572918c1d14537b260fe09c12d64337ab1635c5774600a07d46e313b9f4bc775e62810e0fb1ab5bfaa3f270e7d32927a332c64106f08ff02b814af512d0e722cc2ae07eafa6dc8b6e5a5bbe863a8477ceae662033a34c8f775b7e13784f5daef93ec78b8fb79e94d48defd4abc7d2d54a03dd0ec719da03b687e18444ac1c1590dccda5f10fbc9f2600de4b5e2e4201c77b297e7e5f1ae197c0f6e43d052af2296d32ad86be11c38ffadf698107f11f7cbed0e7409b0bd23ae06188abe7930298dcdd8f31026241ea68079c525c49dff333e1fe46b04c9a02eb550e46603f4ee4c5f80b91659edcf3869bf8f5cd5fd091688d795afc1f751db16fe0fc490ce8b7ef2e90417ce37f89e0c316b30aa3b9ebd2147f0507faff0cd91c75b5fdc935d9aa39b167ea7b25d8132618814ad22f3a660a7cec4742b77bf835e2976384f3f3e126fe1988301490065e5ce81e2742875fb63a3d585c93c82d2dcb9168c333df85fc1d2b60f4476381045d693e02c8208c43d2ac34f69e3787a235f550c5797d45d1c15409edb2f372c5f48c94bd010bf75d87baed856031210b010c83c9001854e4f1858eccbf0e772bb41ad3b5f00fc895fee935921e5a42177ea3b9b251e71caef8222e77d95dc7929b6b6e72f430f9da9b96531f5b37f399ec2c5f62812ee87a5ae75473a808eb5380577a7497a05b746a29db6c6a678fbf63069d118226b605dec8f70ca7bb2a299be804fcaa99a91b2c4dabfa9e23d03105e523f691d533ac2ddc9e5beba65bda53377cd22dbdf06d73a3cfad0adc6274d1952f1a01ebae4fdfcb164835aaf054e8ce7d32816ea8a1dc17b6ecaf1bb6463fd8d67c4cc528dbd35e80d372a3a8b94091d4907e4a054b63633c11618e46a4be4215b5612ab18a43844790e13229f88a092e8868bc3386e8b1d40a09344e67e8d563c7792bec660d3e8768e3ba9cef914b910b87ae7e852894c20e340a8c8a94037872bf2ed75415b677ca769c4a26c346768efc55b42b7611fc322e614f5bd747778413d0fe9fcb9b42e2355c064ee80a6e5139fc4866e8ba02360b78ffcf8085727cadf4d308fb183b9eec6546f9307af7bc9e30f79d5679d4c937881cb2c5838b17858767285c2eaffdd5062b6c93523f03e9d5b721e2ee19385ec6fb6a20c376bbc6e3a60bfee9329c9091685b7a9ef4ffab7a6927aadbea9b55f71ad15131cb65fa608d38e3590b26668fdecd094a7c80581ee997d0eb597fe05bc02e7f3e5b1a7a2883c6b35dde51e984a45f25f92434ffd7353e668ad70f1ce9781c8ffd9e128c49e3319060f1e89a1f929b5ff6fca65ec8e22693558b2b2110d85870fa0ec4db1daa9bb099990961c50ed9e3d21630a33b62a9f05aad1601fe3e702c140bf00c4237757f8fffbf35912733d87bf488900b2e765ab920b3236667074b7bc37e799ed149ec7776b1448294b3da644b627c668ad1e220ba59f93e8cb59cfa2d4993aaefffbf74e1ae270f1ab82e34067f488f5202ceaf4dfb25d8a01788e2c4b032d24012194751c1413a1a8bb19b480e6c12581025ca45ad042050db5217a07716517047e091e892468010a6c9662e65ff938ba9869f43a95a46b0d4b22d311e558bbb07747f4735264c362365ec1088c87a85f76a72fae93e4c0975f455033620ae1714f98cd30cba0d4e60db0d302f7124fbbf59475da0f44065d2642673396b7794c5752438fdded9ca18fa459a8d0ee0590e0eecab0a97b879cd2c0987775b54c5b63e47eb9e582be6c8894aac64ac3fc91037438a08e3740900094c436db47c713ba4e212147db0460842dc775b2cf81409debe75babbd10d38b742e70a8153caa08869fb20f64355400c137929af57c65601bba7000f665af1ffa5b81a50472f2dae119183572c178811f7440eac7b4938cc1b8d6d3a4109ab112407e5f33f2b4338616932124b19814659c43eb81deec6b1b56b201a6332e62a447db3fd66bbd7d8369d28af85a35436e1211af41cbdadf59db7a5fc11a656e6dca7e76c6e7684e09d1f9b7a96a77414f944aea089c5c1e0e4283903c4ee9f9296732a9ffe6def08547db430d31d6f1ce0a6cb48451f75b0cea429599ef84957556014b582a71c5bdd4e848f4c179fb6504e874e90833c4115470877c03876c6275d28ae8f716981393c1418860f5906f5e29236a6a30491200d43255618b70251914268c793d49377c7e78fcabaf10acd738a35f40dbb0b358ffd1f24c371640803757be6cd35d6016aeca136aa336df42e48258ebd79d6cec4c4e9be336303e575bdad8dc535b042ccd1efdef4d40f5c96845c8e110d73e2cb62609f00b67b73a367d9a80dae4ba363922f351b511a30c3c6334f698a871631b2f14f9d3c370ba153fd442ec6e5575ef8d0169d57e23edb03f9c48eac5f364a13bbcb71f99bb5605b0020d1b653d9767eb9146ba805b10c72be2ba7f48e5bfdc80af1a7df8c4e0f0c47035c83f4f803ca658fb25e2577de288f3b8a018f56b67cd088b21be4c9866f2565a58cc924220105b6210383f656ce5daa3ecaa0deda30647e58738f8a3f5e19db6c1838ca2dec1cff7f030c9ceea022c1d592b13e725faff987d70a9234deef0bba4c02e6c3d82905fd4ccc006cafb534f70489600a5e50ba46a37fa161e2c496ba625be8e342852fb6763f7b3092a5b187a3f4360d88a2ed07ac26e65727d8173e99776f03b1a5c5df0cc9f4ad42bfa00e0f59f2b372f88a271af6c25b140d526d079c28a988ef18d7af337b0a4ddf368cfae272b49939e9c1ae8bfa24de432517b70dc8686c6ed55cb8535ff42878eef7937bcef990d1fbfa95fc8364f9d979f3702b1b74ad4dae45eec0bd68f318f4b14211ac9dffdc1be6a93add5f3a96f5c07aae9ee23113780cd705396826f8eb279670e15d25c5f455c3a9f720e6cccb89471f2e931b0381ed7554364587a329411ce6dce3878b1538c6586ca19432c9de21700fc301abb7994e375919837f72480b5159ff4ba8518cb37419291b2f269e784db57422d460135da96243988967ab4b92693c08989dd6b8d7d0bda", 0xfc0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 4.934654039s ago: executing program 0 (id=1371): prlimit64(0x0, 0xe, &(0x7f00000011c0)={0x8, 0x40000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001200)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000012c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001300)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x5, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb01}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x93, &(0x7f0000000240)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) 3.618702333s ago: executing program 0 (id=1372): r0 = fsopen(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000980)={r1, 0x1, 0x6, @multicast}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000200), 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000009c0)={0x10, 0x2c8, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x8, 0x550}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000a80)={0x2, 0x7, {r3}, {}, 0x9, 0x401}) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000240)={r2}, 0x8) write$cgroup_type(r4, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000100)={r0, 0x0, 0x200, &(0x7f00000000c0)={@align=0xffffffffffffffff, {0x9, 0x3, 0xffffff0f, 0x100000001}}, 0x4, &(0x7f0000000480), &(0x7f0000000180)=0x2010001}) timer_create(0x2, 0x0, &(0x7f0000000280)) clock_nanosleep(0x2, 0x0, &(0x7f0000000580)={0x0, 0x989680}, 0x0) socket$inet6(0xa, 0x2, 0x0) openat(r5, 0x0, 0x11f9639dc1bd0c3e, 0xe1) acct(&(0x7f00000001c0)='./file0\x00') 3.505966614s ago: executing program 1 (id=1373): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 2.509812535s ago: executing program 1 (id=1374): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002380)={0x2020, 0x0, 0x0}, 0x2020) socket$inet6(0xa, 0x4, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000002340)=ANY=[@ANYBLOB="9801000000000000", @ANYRES64=r1], 0x198) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x100001, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x279, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') 2.434711433s ago: executing program 2 (id=1375): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xffd8) 2.298335337s ago: executing program 4 (id=1376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) setrlimit(0xd, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r3, &(0x7f00000002c0)=""/10, 0x5b) 1.159842762s ago: executing program 4 (id=1377): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) clock_settime(0x0, &(0x7f0000000000)={0x6553f100, 0x3b023380}) 1.151760663s ago: executing program 2 (id=1378): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x6, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000c40)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000c80)={r2}, 0x8) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000cc0)) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="63812bbd7000fcdbdf250300000008000100000000002800078024000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) 990.572939ms ago: executing program 1 (id=1379): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x3c9}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x8c}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x1000, 0x2, 0x4}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0xfffffff9, 0x40469, 0x0, r1}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffefffe, 0x18c0, 0x1, 0x121, 0x0, r0}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x10000, 0x3, 0xffffffff, 0x0, r0}}], 0x1, &(0x7f00000003c0)={0x2e, 0x1a, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, r6, '\x00', {0x3ff9, 0x992, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r12, r7, &(0x7f0000000cc0)={0x0, 0xd13, 0x8, 0x2, 0x33c, 0x0, r5}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfacf, 0x4000, 0x2, 0x199, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x475d, 0x800, 0x2, 0x1c8, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc3dc, 0x2000, 0x0, 0x8c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf138, 0x4, 0x2, 0xba}}], 0x4, &(0x7f0000001fc0)={0x2e, 0x68, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7fff}, 0x0, 0x0, '\x00', {0x6, 0x2f1, 0x0, &(0x7f0000000fc0)=@buf_1k="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"}}, 0x0) fsopen(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r16 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x143102) writev(r16, &(0x7f00000004c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) socket(0x10, 0x3, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) syz_ublk_setup_queues(r13, r7, &(0x7f0000000180)={0x0, 0x5c9a, 0x8000, 0x1, 0x262, 0x0, r9}, &(0x7f0000000a40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1dfa, 0x80000, 0xfffff801, 0x320, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc928, 0x800, 0x1, 0x2f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2c03, 0x40000, 0x3, 0x12b, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa297, 0x800, 0x3, 0x8a}}], 0x4, &(0x7f0000003080)={0x2e, 0x0, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x5}, 0x0, r14, '\x00', {0x1, 0xf7, 0x0, &(0x7f0000002080)=@buf_1k="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"}}, &(0x7f0000003100)) 937.624624ms ago: executing program 4 (id=1380): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000000880)="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", 0x2000, &(0x7f0000002880)={&(0x7f0000002900)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x1, 0x41, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000002980)={0x29, 0x4, 0x0, {0x1, 0x89, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000029c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x7, 0x80000001}}, 0x30) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./trace\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x10, 0x1412, 0x1, 0x70bd25, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./trace/current_tracer\x00', 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x4a) write(r3, 0x0, 0x0) 865.118642ms ago: executing program 2 (id=1381): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCFLSH(0xffffffffffffffff, 0x800455cc, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010005"], 0x34}}, 0x0) bind$inet6(r3, 0x0, 0x0) syz_emit_ethernet(0x50, &(0x7f00000003c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x2, 0x3}, "ef135044a7a4"}}}}}}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 0s ago: executing program 1 (id=1382): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) kernel console output (not intermixed with test programs): ? show_regs_print_info+0x20/0x20 [ 103.968833][ T6575] ? load_image+0x420/0x420 [ 103.973369][ T6575] ? preempt_schedule+0xc0/0xd0 [ 103.978251][ T6575] ? schedule_preempt_disabled+0x20/0x20 [ 103.983913][ T6575] should_fail_ex+0x394/0x4c0 [ 103.988616][ T6575] get_futex_key+0x134/0xf40 [ 103.993232][ T6575] ? futex_setup_timer+0xc0/0xc0 [ 103.998198][ T6575] futex_wake+0x127/0x4f0 [ 104.002566][ T6575] ? futex_wake_mark+0x150/0x150 [ 104.007527][ T6575] ? __lock_acquire+0x7eb0/0x7eb0 [ 104.012571][ T6575] ? __might_fault+0xaa/0x120 [ 104.017270][ T6575] ? _copy_from_user+0xa5/0xe0 [ 104.022052][ T6575] do_futex+0x35d/0x3e0 [ 104.026225][ T6575] ? __lock_timer+0x34a/0x3f0 [ 104.030918][ T6575] ? __ia32_sys_get_robust_list+0x110/0x110 [ 104.036825][ T6575] ? do_timer_settime+0x281/0x300 [ 104.041885][ T6575] __se_sys_futex+0x3a9/0x440 [ 104.046593][ T6575] ? __x64_sys_futex+0xf0/0xf0 [ 104.051385][ T6575] ? __x64_sys_futex+0x21/0xf0 [ 104.056177][ T6575] do_syscall_64+0x55/0xb0 [ 104.060612][ T6575] ? clear_bhb_loop+0x40/0x90 [ 104.065311][ T6575] ? clear_bhb_loop+0x40/0x90 [ 104.070015][ T6575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.075944][ T6575] RIP: 0033:0x7f85f0f9fb19 [ 104.080382][ T6575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.100011][ T6575] RSP: 002b:00007f85f1f3e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 104.108449][ T6575] RAX: ffffffffffffffda RBX: 00007f85f1225fa8 RCX: 00007f85f0f9fb19 [ 104.116438][ T6575] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f85f1225fac [ 104.124424][ T6575] RBP: 00007f85f1225fa0 R08: 0000000000745ad8 R09: 0000000000000000 [ 104.132413][ T6575] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 104.140407][ T6575] R13: 00007f85f1226038 R14: 00007ffd8587b490 R15: 00007ffd8587b578 [ 104.148414][ T6575] [ 104.807082][ T6559] sched: RT throttling activated [ 104.845073][ T28] audit: type=1326 audit(1794165285.052:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6598 comm="syz.3.229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f0f9fb19 code=0x7ffc0000 [ 104.884873][ T28] audit: type=1326 audit(1794165285.052:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6598 comm="syz.3.229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f0f9fb19 code=0x7ffc0000 [ 104.925885][ T28] audit: type=1326 audit(1794165285.052:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6598 comm="syz.3.229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f0f9fb19 code=0x7ffc0000 [ 104.973497][ T28] audit: type=1326 audit(1794165285.052:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6598 comm="syz.3.229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f0f9fb19 code=0x7ffc0000 [ 105.015299][ T28] audit: type=1326 audit(1794165285.052:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6598 comm="syz.3.229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f85f0f9fb19 code=0x7ffc0000 [ 105.067506][ T28] audit: type=1326 audit(1794165285.062:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6598 comm="syz.3.229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f0f9fb19 code=0x7ffc0000 [ 105.107518][ T28] audit: type=1326 audit(1794165285.062:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6598 comm="syz.3.229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f0f9fb19 code=0x7ffc0000 [ 105.152701][ T28] audit: type=1326 audit(1794165285.062:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6598 comm="syz.3.229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f0f9fb19 code=0x7ffc0000 [ 105.200805][ T28] audit: type=1326 audit(1794165285.062:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6598 comm="syz.3.229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85f0f9fb19 code=0x7ffc0000 [ 105.248629][ T28] audit: type=1326 audit(1794165285.062:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6598 comm="syz.3.229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f0f9fb19 code=0x7ffc0000 [ 106.504459][ T6563] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.831962][ T6656] device-mapper: table: 248:0: multipath: unknown path selector type (-EINVAL) [ 106.848352][ T6656] device-mapper: ioctl: error adding target to table [ 107.844337][ T6714] netlink: 'syz.0.262': attribute type 1 has an invalid length. [ 107.860889][ T6714] netlink: 84 bytes leftover after parsing attributes in process `syz.0.262'. [ 110.238654][ T6688] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.448327][ T6744] tipc: Started in network mode [ 110.453382][ T6744] tipc: Node identity 0e525f0d7945, cluster identity 4711 [ 110.507715][ T6744] tipc: Enabled bearer , priority 0 [ 110.536868][ T6740] tipc: Disabling bearer [ 110.575753][ T6753] netlink: 'syz.0.274': attribute type 1 has an invalid length. [ 110.606014][ T6753] netlink: 84 bytes leftover after parsing attributes in process `syz.0.274'. [ 110.748067][ T6759] TC_ACT_REPEAT abuse ? [ 110.889649][ T6763] IPVS: Scheduler module ip_vs_mh not found [ 111.415478][ T6793] netlink: 'syz.2.287': attribute type 1 has an invalid length. [ 111.424661][ T6793] netlink: 84 bytes leftover after parsing attributes in process `syz.2.287'. [ 111.466370][ T6795] device-mapper: table: 248:1: multipath: unknown path selector type (-EINVAL) [ 111.475711][ T6795] device-mapper: ioctl: error adding target to table [ 111.594362][ T6801] IPVS: Scheduler module ip_vs_mh not found [ 111.701365][ T6810] TC_ACT_REPEAT abuse ? [ 112.937511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.587045][ T6825] netlink: 'syz.0.297': attribute type 1 has an invalid length. [ 113.595652][ T6825] netlink: 84 bytes leftover after parsing attributes in process `syz.0.297'. [ 113.923696][ T6767] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.184860][ T6832] device-mapper: table: 248:2: multipath: unknown path selector type (-EINVAL) [ 114.186816][ T6836] IPVS: Scheduler module ip_vs_mh not found [ 114.194490][ T6832] device-mapper: ioctl: error adding target to table [ 114.226970][ T6841] TC_ACT_REPEAT abuse ? [ 115.497521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 115.830304][ T6857] netlink: 'syz.1.306': attribute type 1 has an invalid length. [ 115.857865][ T6857] netlink: 84 bytes leftover after parsing attributes in process `syz.1.306'. [ 115.875070][ T6861] tipc: Started in network mode [ 115.883636][ T6861] tipc: Node identity 565eb1c3182e, cluster identity 4711 [ 115.911500][ T6861] tipc: Enabled bearer , priority 0 [ 115.957140][ T6860] tipc: Disabling bearer [ 116.203600][ T6873] IPVS: Scheduler module ip_vs_mh not found [ 117.274520][ T6884] TC_ACT_REPEAT abuse ? [ 118.377888][ T6894] netlink: 'syz.3.319': attribute type 1 has an invalid length. [ 118.386460][ T6894] netlink: 84 bytes leftover after parsing attributes in process `syz.3.319'. [ 118.552011][ T6897] syzkaller0: entered promiscuous mode [ 118.557654][ T6897] syzkaller0: entered allmulticast mode [ 118.946032][ T6863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.253230][ T6903] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 121.211015][ T6933] netlink: 'syz.1.328': attribute type 1 has an invalid length. [ 121.247326][ T6933] netlink: 84 bytes leftover after parsing attributes in process `syz.1.328'. [ 122.828086][ T6963] netlink: 'syz.1.344': attribute type 1 has an invalid length. [ 122.859120][ T6963] netlink: 84 bytes leftover after parsing attributes in process `syz.1.344'. [ 123.309430][ T6970] syzkaller0: entered promiscuous mode [ 123.314962][ T6970] syzkaller0: entered allmulticast mode [ 123.712373][ T6990] TC_ACT_REPEAT abuse ? [ 124.162057][ T6935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.327711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 125.431483][ T7016] Process accounting resumed [ 128.050692][ T7037] TC_ACT_REPEAT abuse ? [ 129.324119][ T7058] syzkaller0: entered promiscuous mode [ 129.348063][ T7058] syzkaller0: entered allmulticast mode [ 129.492221][ T7063] netlink: 'syz.0.360': attribute type 1 has an invalid length. [ 129.754307][ T7069] TC_ACT_REPEAT abuse ? [ 130.290961][ T7084] syzkaller0: entered promiscuous mode [ 130.296479][ T7084] syzkaller0: entered allmulticast mode [ 130.385145][ T7086] netlink: 'syz.1.370': attribute type 1 has an invalid length. [ 130.486037][ T7090] TC_ACT_REPEAT abuse ? [ 130.489369][ T7094] FAULT_INJECTION: forcing a failure. [ 130.489369][ T7094] name failslab, interval 1, probability 0, space 0, times 1 [ 130.505112][ T7094] CPU: 0 PID: 7094 Comm: syz.3.374 Not tainted syzkaller #0 [ 130.512435][ T7094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 130.522507][ T7094] Call Trace: [ 130.525803][ T7094] [ 130.528750][ T7094] dump_stack_lvl+0x18c/0x250 [ 130.533467][ T7094] ? show_regs_print_info+0x20/0x20 [ 130.538673][ T7094] ? load_image+0x420/0x420 [ 130.543189][ T7094] ? __lock_acquire+0x7eb0/0x7eb0 [ 130.548204][ T7094] ? trace_raw_output_contention_end+0xd0/0xd0 [ 130.554364][ T7094] should_fail_ex+0x394/0x4c0 [ 130.559073][ T7094] should_failslab+0x9/0x20 [ 130.563585][ T7094] slab_pre_alloc_hook+0x59/0x300 [ 130.568616][ T7094] ? pty_common_install+0xae/0x770 [ 130.573754][ T7094] __kmem_cache_alloc_node+0x53/0x260 [ 130.579157][ T7094] ? tty_init_dev+0x74/0x4c0 [ 130.583757][ T7094] ? pty_common_install+0xae/0x770 [ 130.588864][ T7094] kmalloc_trace+0x2a/0xe0 [ 130.593278][ T7094] pty_common_install+0xae/0x770 [ 130.598230][ T7094] tty_init_dev+0xd3/0x4c0 [ 130.602674][ T7094] ptmx_open+0xdf/0x2c0 [ 130.606848][ T7094] ? pty_start+0x140/0x140 [ 130.611281][ T7094] chrdev_open+0x58c/0x600 [ 130.615703][ T7094] ? cd_forget+0x160/0x160 [ 130.620124][ T7094] ? fsnotify_perm+0x3ed/0x5e0 [ 130.624886][ T7094] do_dentry_open+0x880/0x14b0 [ 130.629654][ T7094] ? cd_forget+0x160/0x160 [ 130.634074][ T7094] path_openat+0x284f/0x3270 [ 130.638673][ T7094] ? do_sys_openat2+0xda/0x1d0 [ 130.643429][ T7094] ? __x64_sys_openat+0x139/0x160 [ 130.648450][ T7094] ? verify_lock_unused+0x140/0x140 [ 130.653648][ T7094] ? do_filp_open+0x430/0x430 [ 130.658338][ T7094] do_filp_open+0x1f2/0x430 [ 130.662843][ T7094] ? vfs_tmpfile+0x620/0x620 [ 130.667455][ T7094] ? _raw_spin_unlock+0x28/0x40 [ 130.672302][ T7094] ? alloc_fd+0x590/0x640 [ 130.676635][ T7094] do_sys_openat2+0x134/0x1d0 [ 130.681312][ T7094] ? do_sys_open+0xe0/0xe0 [ 130.685726][ T7094] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 130.691707][ T7094] ? lock_chain_count+0x20/0x20 [ 130.696558][ T7094] __x64_sys_openat+0x139/0x160 [ 130.701411][ T7094] do_syscall_64+0x55/0xb0 [ 130.705858][ T7094] ? clear_bhb_loop+0x40/0x90 [ 130.710533][ T7094] ? clear_bhb_loop+0x40/0x90 [ 130.715211][ T7094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.721105][ T7094] RIP: 0033:0x7f85f0f9fb19 [ 130.725525][ T7094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.745127][ T7094] RSP: 002b:00007f85f1f3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 130.753542][ T7094] RAX: ffffffffffffffda RBX: 00007f85f1225fa0 RCX: 00007f85f0f9fb19 [ 130.761536][ T7094] RDX: 0000000000000002 RSI: 0000200000000900 RDI: ffffffffffffff9c [ 130.769502][ T7094] RBP: 00007f85f1037b70 R08: 0000000000000000 R09: 0000000000000000 [ 130.777469][ T7094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.785434][ T7094] R13: 00007f85f1226038 R14: 00007f85f1225fa0 R15: 00007ffd8587b578 [ 130.793416][ T7094] [ 131.199091][ T7110] syzkaller0: entered promiscuous mode [ 131.207652][ T7110] syzkaller0: entered allmulticast mode [ 131.262394][ T7112] netlink: 'syz.1.383': attribute type 1 has an invalid length. [ 131.534697][ T7123] TC_ACT_REPEAT abuse ? [ 132.337324][ T7135] syzkaller0: entered promiscuous mode [ 132.360679][ T7135] syzkaller0: entered allmulticast mode [ 132.489748][ T7138] syzkaller0: entered promiscuous mode [ 132.510630][ T7138] syzkaller0: entered allmulticast mode [ 132.932484][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.938993][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.056070][ T7159] TC_ACT_REPEAT abuse ? [ 134.349135][ T7164] syzkaller0: entered promiscuous mode [ 134.380792][ T7164] syzkaller0: entered allmulticast mode [ 134.854332][ T7176] syzkaller0: entered promiscuous mode [ 134.862501][ T7176] syzkaller0: entered allmulticast mode [ 135.977562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 137.837253][ T7200] syzkaller0: entered promiscuous mode [ 137.855357][ T7200] syzkaller0: entered allmulticast mode [ 142.924240][ T7282] tap0: tun_chr_ioctl cmd 1074025675 [ 142.945868][ T7282] tap0: persist disabled [ 142.959569][ T7282] tap0: tun_chr_ioctl cmd 1074025672 [ 142.985273][ T7282] tap0: ignored: set checksum disabled [ 145.088067][ T7304] syzkaller0: entered promiscuous mode [ 145.095202][ T7304] syzkaller0: entered allmulticast mode [ 146.849399][ T7331] syzkaller0: entered promiscuous mode [ 146.857903][ T7331] syzkaller0: entered allmulticast mode [ 147.472684][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 147.472699][ T28] audit: type=1800 audit(1794165327.682:124): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.487" name="p_chmask" dev="configfs" ino=12487 res=0 errno=0 [ 147.538091][ T7360] syzkaller0: entered promiscuous mode [ 147.557497][ T7360] syzkaller0: entered allmulticast mode [ 147.816324][ T7371] syzkaller0: entered promiscuous mode [ 147.825442][ T7371] syzkaller0: entered allmulticast mode [ 148.012901][ T7379] pi3usb30532 0-0005: Error reading config register -5 [ 148.037633][ T7379] pi3usb30532: probe of 0-0005 failed with error -5 [ 148.044910][ T7379] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05 [ 148.200155][ T7384] netlink: 36 bytes leftover after parsing attributes in process `syz.1.497'. [ 148.361300][ T7390] kernel read not supported for file /!selinuxw (pid: 7390 comm: syz.2.501) [ 148.513499][ T7394] syzkaller0: entered promiscuous mode [ 148.528217][ T7394] syzkaller0: entered allmulticast mode [ 148.975717][ T7416] syz.2.512 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 149.878590][ T7427] syzkaller0: entered promiscuous mode [ 149.884121][ T7427] syzkaller0: entered allmulticast mode [ 150.134138][ T7440] netlink: set zone limit has 8 unknown bytes [ 151.006749][ T7454] syzkaller0: entered promiscuous mode [ 151.012427][ T7454] syzkaller0: entered allmulticast mode [ 152.191549][ T7483] Bluetooth: MGMT ver 1.22 [ 153.028386][ T7490] tipc: Enabled bearer , priority 0 [ 153.042292][ T7489] tipc: Disabling bearer [ 153.110996][ T7491] syzkaller0: entered promiscuous mode [ 153.116519][ T7491] syzkaller0: entered allmulticast mode [ 155.163903][ T28] audit: type=1800 audit(1794165335.152:125): pid=7519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.549" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 155.377846][ T7525] tipc: Started in network mode [ 155.421795][ T7525] tipc: Node identity a20c63e9afff, cluster identity 4711 [ 155.485553][ T7525] tipc: Enabled bearer , priority 0 [ 155.537180][ T7524] tipc: Disabling bearer [ 155.627617][ T7530] syzkaller0: entered promiscuous mode [ 155.641752][ T7530] syzkaller0: entered allmulticast mode [ 158.547540][ T7563] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 158.732715][ T7573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'. [ 158.766162][ T7577] tipc: Enabled bearer , priority 0 [ 158.777282][ T7574] tipc: Disabling bearer [ 158.927952][ T7579] syzkaller0: entered promiscuous mode [ 158.933476][ T7579] syzkaller0: entered allmulticast mode [ 160.239514][ T7606] netlink: 84 bytes leftover after parsing attributes in process `syz.2.572'. [ 161.167649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 161.564146][ T7613] tipc: Enabled bearer , priority 0 [ 161.603445][ T7612] tipc: Disabling bearer [ 161.854304][ T7621] syzkaller0: entered promiscuous mode [ 161.877530][ T7621] syzkaller0: entered allmulticast mode [ 163.656414][ T7652] netlink: 84 bytes leftover after parsing attributes in process `syz.2.588'. [ 163.787032][ T7656] syzkaller0: entered promiscuous mode [ 163.807603][ T7656] syzkaller0: entered allmulticast mode [ 164.212103][ T28] audit: type=1800 audit(1794165344.222:126): pid=7667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.595" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 166.266330][ T7687] netlink: 84 bytes leftover after parsing attributes in process `syz.3.601'. [ 167.409638][ T7699] syzkaller0: entered promiscuous mode [ 167.425318][ T7699] syzkaller0: entered allmulticast mode [ 169.480147][ T7716] netlink: 84 bytes leftover after parsing attributes in process `syz.2.612'. [ 169.677079][ T28] audit: type=1800 audit(1794165349.882:127): pid=7721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.613" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 171.239551][ T7740] syzkaller0: entered promiscuous mode [ 171.245101][ T7740] syzkaller0: entered allmulticast mode [ 171.416211][ T7750] netlink: 84 bytes leftover after parsing attributes in process `syz.0.623'. [ 171.553783][ T7757] vlan3: entered promiscuous mode [ 171.662374][ T7763] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(5) [ 171.743682][ T7768] syzkaller0: entered promiscuous mode [ 171.749562][ T7768] syzkaller0: entered allmulticast mode [ 171.891727][ T7775] FAULT_INJECTION: forcing a failure. [ 171.891727][ T7775] name fail_futex, interval 1, probability 0, space 0, times 0 [ 171.916094][ T7775] CPU: 1 PID: 7775 Comm: syz.1.634 Not tainted syzkaller #0 [ 171.923439][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 171.933512][ T7775] Call Trace: [ 171.936807][ T7775] [ 171.939758][ T7775] dump_stack_lvl+0x18c/0x250 [ 171.944471][ T7775] ? show_regs_print_info+0x20/0x20 [ 171.949696][ T7775] ? load_image+0x420/0x420 [ 171.954227][ T7775] ? kasan_set_track+0x5f/0x70 [ 171.959009][ T7775] ? kasan_set_track+0x4e/0x70 [ 171.963803][ T7775] should_fail_ex+0x394/0x4c0 [ 171.968504][ T7775] get_futex_key+0x134/0xf40 [ 171.973103][ T7775] ? futex_setup_timer+0xc0/0xc0 [ 171.978046][ T7775] futex_wake+0x127/0x4f0 [ 171.982372][ T7775] ? futex_wake_mark+0x150/0x150 [ 171.987305][ T7775] ? kasan_quarantine_put+0xd8/0x220 [ 171.992603][ T7775] do_futex+0x35d/0x3e0 [ 171.996759][ T7775] ? __ia32_sys_get_robust_list+0x110/0x110 [ 172.002650][ T7775] __se_sys_futex+0x3a9/0x440 [ 172.007325][ T7775] ? __x64_sys_futex+0xf0/0xf0 [ 172.012084][ T7775] ? __x64_sys_futex+0x21/0xf0 [ 172.016844][ T7775] do_syscall_64+0x55/0xb0 [ 172.021256][ T7775] ? clear_bhb_loop+0x40/0x90 [ 172.025933][ T7775] ? clear_bhb_loop+0x40/0x90 [ 172.030609][ T7775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.036500][ T7775] RIP: 0033:0x7f3d29d9fb19 [ 172.040907][ T7775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.060508][ T7775] RSP: 002b:00007f3d2abc20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 172.068917][ T7775] RAX: ffffffffffffffda RBX: 00007f3d2a025fa8 RCX: 00007f3d29d9fb19 [ 172.076883][ T7775] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3d2a025fac [ 172.084847][ T7775] RBP: 00007f3d2a025fa0 R08: 0000000000745ad8 R09: 0000000000000000 [ 172.092811][ T7775] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 172.100774][ T7775] R13: 00007f3d2a026038 R14: 00007ffd36826c80 R15: 00007ffd36826d68 [ 172.108749][ T7775] [ 172.194132][ T7780] netlink: 84 bytes leftover after parsing attributes in process `syz.3.635'. [ 172.215239][ T7782] vlan4: entered promiscuous mode [ 172.495748][ T7794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.641'. [ 172.743818][ T7802] Bluetooth: MGMT ver 1.22 [ 174.968131][ T7827] netlink: 84 bytes leftover after parsing attributes in process `syz.2.652'. [ 176.425744][ T7838] syzkaller0: entered promiscuous mode [ 176.440563][ T7838] syzkaller0: entered allmulticast mode [ 178.624321][ T7864] overlayfs: failed to resolve './file0': -2 [ 178.957930][ T7861] netlink: 84 bytes leftover after parsing attributes in process `syz.3.664'. [ 179.700147][ T7869] syz.0.666[7869]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 180.830386][ T7880] syzkaller0: entered promiscuous mode [ 180.835912][ T7880] syzkaller0: entered allmulticast mode [ 181.284314][ T7900] netlink: 84 bytes leftover after parsing attributes in process `syz.0.675'. [ 181.577838][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 181.813803][ T27] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 181.835166][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.884787][ T27] usb 4-1: config 0 descriptor?? [ 183.024233][ T27] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 183.028962][ T7903] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 183.047622][ T27] [drm] Initialized udl on minor 2 [ 183.107765][ T27] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 183.120974][ T27] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 183.131024][ T5879] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 183.258655][ T27] usb 4-1: USB disconnect, device number 2 [ 183.269441][ T5879] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 184.672051][ T7938] netlink: 84 bytes leftover after parsing attributes in process `syz.2.687'. [ 185.350701][ T7959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.692'. [ 186.154109][ T7975] netlink: 84 bytes leftover after parsing attributes in process `syz.1.698'. [ 186.198092][ T5867] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 187.977767][ T5867] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 187.986864][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.028698][ T5867] usb 1-1: config 0 descriptor?? [ 188.189634][ T7988] ip6erspan0: entered allmulticast mode [ 188.540114][ T5867] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 188.607466][ T5867] [drm] Initialized udl on minor 2 [ 188.790205][ T7967] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 188.886636][ T5867] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 188.940642][ T5867] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 188.986848][ T5879] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 189.021233][ T5867] usb 1-1: USB disconnect, device number 2 [ 189.053875][ T5879] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 189.357719][ T8008] netlink: 84 bytes leftover after parsing attributes in process `syz.1.709'. [ 190.418383][ T8021] lo: entered allmulticast mode [ 190.462462][ T8020] lo: left allmulticast mode [ 192.824022][ T8046] netlink: 32 bytes leftover after parsing attributes in process `syz.3.720'. [ 192.839664][ T8044] netlink: 'syz.0.719': attribute type 1 has an invalid length. [ 193.121492][ T8056] syzkaller0: entered promiscuous mode [ 193.127020][ T8056] syzkaller0: entered allmulticast mode [ 193.187516][ T5879] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 193.216200][ T8062] tipc: Enabling of bearer rejected, failed to enable media [ 193.408606][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 193.493823][ T5879] usb 4-1: config 2 has an invalid interface number: 101 but max is 0 [ 193.614358][ T5879] usb 4-1: config 2 has no interface number 0 [ 193.704150][ T5879] usb 4-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=53.2a [ 193.770685][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 193.800242][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.879023][ T5879] usb 4-1: Product: syz [ 193.922678][ T5879] usb 4-1: Manufacturer: syz [ 193.979705][ T5879] usb 4-1: SerialNumber: syz [ 194.037739][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 194.129078][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 194.141824][ T27] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 104, changing to 7 [ 194.160158][ T27] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 57835, setting to 1024 [ 194.177589][ T27] usb 2-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 194.186678][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.194826][ T27] usb 2-1: Product: syz [ 194.199169][ T27] usb 2-1: Manufacturer: syz [ 194.203491][ T8078] netlink: 'syz.2.730': attribute type 1 has an invalid length. [ 194.203786][ T27] usb 2-1: SerialNumber: syz [ 194.227349][ T5879] ipw 4-1:2.101: IPWireless converter converter detected [ 194.263669][ T5879] usb 4-1: USB disconnect, device number 3 [ 194.284067][ T5879] ipw 4-1:2.101: device disconnected [ 194.376021][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.387604][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.446752][ T27] usb 2-1: BAAD HEADSET c_chmask mismatch [ 194.486459][ T27] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 194.515646][ T27] usb 2-1: USB disconnect, device number 2 [ 194.558894][ T7928] udevd[7928]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.944272][ T8090] syzkaller0: entered promiscuous mode [ 194.953845][ T8090] syzkaller0: entered allmulticast mode [ 196.453273][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 196.460981][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 196.469320][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 196.475352][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 196.777692][ T8104] process 'syz.1.741' launched './file0' with NULL argv: empty string added [ 197.059740][ T8111] tipc: Enabling of bearer rejected, failed to enable media [ 197.704889][ T5795] Bluetooth: hci2: unknown advertising packet type: 0x67 [ 197.704969][ T5795] Bluetooth: hci2: Dropping invalid advertising data [ 197.873654][ T8132] syzkaller0: entered promiscuous mode [ 197.891411][ T8132] syzkaller0: entered allmulticast mode [ 198.359992][ T8138] tipc: Enabling of bearer rejected, failed to enable media [ 200.234753][ T8161] syzkaller0: entered promiscuous mode [ 200.254833][ T8161] syzkaller0: entered allmulticast mode [ 200.557014][ T28] audit: type=1326 audit(1794165380.762:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8166 comm="syz.3.759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f85f0f9fb19 code=0x0 [ 200.792895][ T8173] tipc: Enabling of bearer rejected, failed to enable media [ 202.127939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 203.407693][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 203.589554][ T8196] syzkaller0: entered promiscuous mode [ 203.605350][ T8196] syzkaller0: entered allmulticast mode [ 204.007484][ T5867] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 204.209616][ T5867] usb 4-1: config 0 has no interfaces? [ 204.215166][ T5867] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 204.237475][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.261142][ T5867] usb 4-1: config 0 descriptor?? [ 204.315544][ T8208] tipc: Enabling of bearer rejected, failed to enable media [ 204.870233][ T5867] usb 4-1: USB disconnect, device number 4 [ 205.331775][ T28] audit: type=1800 audit(1794165385.442:129): pid=8224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.778" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 206.489075][ T8230] syzkaller0: entered promiscuous mode [ 206.494596][ T8230] syzkaller0: entered allmulticast mode [ 209.236624][ T8263] syzkaller0: entered promiscuous mode [ 209.242194][ T8263] syzkaller0: entered allmulticast mode [ 209.581705][ T9] IPVS: starting estimator thread 0... [ 209.588039][ T8272] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 209.868620][ T8275] IPVS: using max 17 ests per chain, 40800 per kthread [ 210.454843][ T8288] netlink: 'syz.3.800': attribute type 21 has an invalid length. [ 210.642857][ T8288] netlink: 128 bytes leftover after parsing attributes in process `syz.3.800'. [ 210.839902][ T8288] netlink: 'syz.3.800': attribute type 4 has an invalid length. [ 210.992997][ T8288] netlink: 'syz.3.800': attribute type 3 has an invalid length. [ 211.083079][ T8288] netlink: 3 bytes leftover after parsing attributes in process `syz.3.800'. [ 211.165551][ T8295] file system registered [ 211.190110][ T8295] unloading [ 219.291054][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.831'. [ 220.047891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 220.457444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 222.675939][ T8401] ip_tables: iptables: counters copy to user failed while replacing table [ 227.889032][ T8436] netlink: 'syz.2.848': attribute type 19 has an invalid length. [ 228.107459][ T28] audit: type=1326 audit(1794165408.312:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8439 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8711b9fb19 code=0x7ffc0000 [ 228.167644][ T28] audit: type=1326 audit(1794165408.312:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8439 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8711b9fb19 code=0x7ffc0000 [ 228.241280][ T28] audit: type=1326 audit(1794165408.322:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8439 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f8711b9fb19 code=0x7ffc0000 [ 228.340135][ T28] audit: type=1326 audit(1794165408.322:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8439 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8711b9fb19 code=0x7ffc0000 [ 228.418748][ T28] audit: type=1326 audit(1794165408.322:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8439 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8711b9fb19 code=0x7ffc0000 [ 233.820266][ T8485] jffs2: notice: (8485) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 235.733035][ T8514] netlink: 48 bytes leftover after parsing attributes in process `syz.0.869'. [ 235.814058][ T2131] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 236.060068][ T2131] usb 4-1: Using ep0 maxpacket: 16 [ 236.238256][ T2131] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 236.366169][ T2131] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 236.382705][ T2131] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.392062][ T2131] usb 4-1: Product: syz [ 236.396386][ T2131] usb 4-1: Manufacturer: syz [ 236.406428][ T2131] usb 4-1: SerialNumber: syz [ 236.416425][ T2131] usb 4-1: config 0 descriptor?? [ 239.813290][ T5867] usb 4-1: USB disconnect, device number 5 [ 240.922270][ T8545] vlan2: entered promiscuous mode [ 243.497526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 245.813153][ T8590] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 246.984929][ T8598] jffs2: notice: (8598) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 248.236622][ T8606] syzkaller0: entered promiscuous mode [ 248.261865][ T8606] syzkaller0: entered allmulticast mode [ 250.527471][ T5867] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 250.727462][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 250.745634][ T5867] usb 1-1: config 4 has an invalid interface number: 8 but max is 0 [ 250.771721][ T5867] usb 1-1: config 4 has no interface number 0 [ 250.790986][ T5867] usb 1-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 250.819765][ T5867] usb 1-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 250.850093][ T5867] usb 1-1: config 4 interface 8 has no altsetting 0 [ 250.874111][ T5867] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 250.891573][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.914920][ T5867] usb 1-1: Product: syz [ 250.928143][ T5867] usb 1-1: Manufacturer: syz [ 250.940195][ T5867] usb 1-1: SerialNumber: syz [ 251.950526][ T5867] opticon 1-1:4.8: opticon converter detected [ 252.035644][ T5867] usb 1-1: opticon converter now attached to ttyUSB0 [ 252.057831][ T5867] usb 1-1: USB disconnect, device number 3 [ 252.071407][ T5867] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 252.081473][ T5867] opticon 1-1:4.8: device disconnected [ 252.291057][ T8654] syzkaller0: entered promiscuous mode [ 252.296725][ T8654] syzkaller0: entered allmulticast mode [ 256.371927][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.387523][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.461188][ T8708] netlink: 64 bytes leftover after parsing attributes in process `syz.0.934'. [ 258.590219][ T8726] syzkaller0: entered promiscuous mode [ 258.607563][ T8726] syzkaller0: entered allmulticast mode [ 261.417524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 262.362286][ T8755] syzkaller0: entered promiscuous mode [ 262.381557][ T8755] syzkaller0: entered allmulticast mode [ 263.594966][ T8781] input: syz1 as /devices/virtual/input/input8 [ 265.591037][ T8794] syzkaller0: entered promiscuous mode [ 265.592836][ T8799] FAULT_INJECTION: forcing a failure. [ 265.592836][ T8799] name failslab, interval 1, probability 0, space 0, times 0 [ 265.596553][ T8794] syzkaller0: entered allmulticast mode [ 265.645336][ T8799] CPU: 1 PID: 8799 Comm: syz.3.966 Not tainted syzkaller #0 [ 265.652689][ T8799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 265.662768][ T8799] Call Trace: [ 265.666068][ T8799] [ 265.669023][ T8799] dump_stack_lvl+0x18c/0x250 [ 265.673738][ T8799] ? show_regs_print_info+0x20/0x20 [ 265.678972][ T8799] ? load_image+0x420/0x420 [ 265.683513][ T8799] ? __might_sleep+0xe0/0xe0 [ 265.688135][ T8799] ? __lock_acquire+0x7eb0/0x7eb0 [ 265.693190][ T8799] should_fail_ex+0x394/0x4c0 [ 265.697899][ T8799] should_failslab+0x9/0x20 [ 265.702424][ T8799] slab_pre_alloc_hook+0x59/0x300 [ 265.707472][ T8799] ? snd_mixer_oss_put_volume1_sw+0x148/0x3b0 [ 265.713567][ T8799] __kmem_cache_alloc_node+0x53/0x260 [ 265.718967][ T8799] ? snd_mixer_oss_put_volume1_sw+0x148/0x3b0 [ 265.725074][ T8799] kmalloc_trace+0x2a/0xe0 [ 265.729527][ T8799] snd_mixer_oss_put_volume1_sw+0x148/0x3b0 [ 265.735456][ T8799] snd_mixer_oss_put_recsrc1_sw+0x65/0x90 [ 265.741209][ T8799] ? snd_mixer_oss_get_recsrc1_sw+0x140/0x140 [ 265.747302][ T8799] snd_mixer_oss_set_recsrc+0x256/0x3e0 [ 265.752878][ T8799] ? snd_mixer_oss_notify_handler+0xff0/0xff0 [ 265.758952][ T8799] ? __might_fault+0xc6/0x120 [ 265.763624][ T8799] ? __might_fault+0xaa/0x120 [ 265.768296][ T8799] snd_mixer_oss_ioctl1+0xeca/0x18b0 [ 265.773582][ T8799] ? snd_mixer_oss_ioctl_card+0x170/0x170 [ 265.779309][ T8799] ? __fget_files+0x28/0x460 [ 265.783909][ T8799] ? snd_mixer_oss_set_recsrc+0x3e0/0x3e0 [ 265.789625][ T8799] snd_mixer_oss_ioctl+0x48/0x50 [ 265.794589][ T8799] __se_sys_ioctl+0xfd/0x170 [ 265.799188][ T8799] do_syscall_64+0x55/0xb0 [ 265.803601][ T8799] ? clear_bhb_loop+0x40/0x90 [ 265.808274][ T8799] ? clear_bhb_loop+0x40/0x90 [ 265.812950][ T8799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.818842][ T8799] RIP: 0033:0x7f85f0f9fb19 [ 265.823253][ T8799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.842854][ T8799] RSP: 002b:00007f85f1f3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.851264][ T8799] RAX: ffffffffffffffda RBX: 00007f85f1225fa0 RCX: 00007f85f0f9fb19 [ 265.859230][ T8799] RDX: 0000200000000a00 RSI: 00000000c0044dff RDI: 0000000000000004 [ 265.867221][ T8799] RBP: 00007f85f1037b70 R08: 0000000000000000 R09: 0000000000000000 [ 265.875186][ T8799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.883147][ T8799] R13: 00007f85f1226038 R14: 00007f85f1225fa0 R15: 00007ffd8587b578 [ 265.891123][ T8799] [ 266.247646][ T5895] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 267.588303][ T5867] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 267.667873][ T5895] usb 2-1: unable to get BOS descriptor or descriptor too short [ 267.701474][ T5895] usb 2-1: not running at top speed; connect to a high speed hub [ 267.732523][ T5895] usb 2-1: config 129 has an invalid interface number: 8 but max is 1 [ 267.741202][ T5895] usb 2-1: config 129 has an invalid interface number: 3 but max is 1 [ 267.767077][ T5895] usb 2-1: config 129 has no interface number 0 [ 267.779204][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.787411][ T5895] usb 2-1: config 129 has no interface number 1 [ 267.795571][ T5895] usb 2-1: config 129 interface 8 has no altsetting 0 [ 267.807490][ T5867] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 267.829690][ T5895] usb 2-1: New USB device found, idVendor=1199, idProduct=9053, bcdDevice=bf.1c [ 267.830981][ T5867] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.847415][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.855989][ T5895] usb 2-1: Product: syz [ 267.879377][ T5895] usb 2-1: Manufacturer: syz [ 267.887462][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.898647][ T5895] usb 2-1: SerialNumber: syz [ 267.922195][ T5867] usb 1-1: config 0 descriptor?? [ 268.395634][ T5867] usb 1-1: string descriptor 0 read error: -71 [ 268.422780][ T5867] usb 1-1: USB disconnect, device number 4 [ 269.693190][ T8824] syz.2.977 (8824) used greatest stack depth: 20368 bytes left [ 271.381650][ T8828] syz.2.977 (8828) used greatest stack depth: 18856 bytes left [ 271.423610][ T5895] usb 2-1: Could not set interface, error -71 [ 271.457659][ T5895] usb 2-1: USB disconnect, device number 3 [ 271.745192][ T8837] syzkaller0: entered promiscuous mode [ 271.824237][ T8837] syzkaller0: entered allmulticast mode [ 278.218518][ T8885] syzkaller0: entered promiscuous mode [ 278.243204][ T8885] syzkaller0: entered allmulticast mode [ 278.280734][ T49] nvme nvme0: rdma_resolve_route failed (-110). [ 278.339389][ T8868] nvme nvme0: rdma connection establishment failed (-19) [ 279.757458][ T8894] netlink: 'syz.2.999': attribute type 10 has an invalid length. [ 279.796332][ T8894] syz_tun: entered promiscuous mode [ 279.863253][ T8894] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 281.118082][ T8912] syzkaller0: entered promiscuous mode [ 281.133809][ T8912] syzkaller0: entered allmulticast mode [ 283.177757][ T5795] Bluetooth: hci3: command 0x0406 tx timeout [ 283.594446][ T8946] syzkaller0: entered promiscuous mode [ 283.621763][ T8946] syzkaller0: entered allmulticast mode [ 285.717076][ T8982] nbd: nbd1 already in use [ 287.157737][ T8985] syzkaller0: entered promiscuous mode [ 287.177071][ T8985] syzkaller0: entered allmulticast mode [ 287.415565][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 288.071833][ T9004] FAULT_INJECTION: forcing a failure. [ 288.071833][ T9004] name failslab, interval 1, probability 0, space 0, times 0 [ 288.137859][ T9004] CPU: 1 PID: 9004 Comm: syz.1.1035 Not tainted syzkaller #0 [ 288.145303][ T9004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 288.155380][ T9004] Call Trace: [ 288.158673][ T9004] [ 288.161620][ T9004] dump_stack_lvl+0x18c/0x250 [ 288.166328][ T9004] ? show_regs_print_info+0x20/0x20 [ 288.171552][ T9004] ? load_image+0x420/0x420 [ 288.176079][ T9004] ? __might_sleep+0xe0/0xe0 [ 288.180691][ T9004] ? __lock_acquire+0x7eb0/0x7eb0 [ 288.185740][ T9004] should_fail_ex+0x394/0x4c0 [ 288.190444][ T9004] should_failslab+0x9/0x20 [ 288.194962][ T9004] slab_pre_alloc_hook+0x59/0x300 [ 288.200003][ T9004] ? tomoyo_encode+0x2ad/0x570 [ 288.204788][ T9004] ? tomoyo_encode+0x2ad/0x570 [ 288.209570][ T9004] __kmem_cache_alloc_node+0x53/0x260 [ 288.214955][ T9004] ? tomoyo_realpath_from_path+0x5c0/0x5c0 [ 288.220800][ T9004] ? tomoyo_encode+0x2ad/0x570 [ 288.225599][ T9004] __kmalloc+0xa7/0x240 [ 288.229790][ T9004] tomoyo_encode+0x2ad/0x570 [ 288.234414][ T9004] tomoyo_realpath_from_path+0x57c/0x5c0 [ 288.240087][ T9004] tomoyo_mount_permission+0x3e7/0x9d0 [ 288.245568][ T9004] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 288.251227][ T9004] ? ____kasan_slab_free+0x126/0x1f0 [ 288.256540][ T9004] ? tomoyo_get_name+0x570/0x570 [ 288.261498][ T9004] ? do_syscall_64+0x55/0xb0 [ 288.266149][ T9004] ? kasan_quarantine_put+0xd8/0x220 [ 288.271469][ T9004] ? lockdep_hardirqs_on+0x98/0x150 [ 288.276691][ T9004] security_sb_mount+0x87/0xc0 [ 288.281482][ T9004] path_mount+0xbc/0xfa0 [ 288.285745][ T9004] ? kmem_cache_free+0xf8/0x290 [ 288.290623][ T9004] __se_sys_mount+0x2e7/0x3d0 [ 288.295323][ T9004] ? __x64_sys_mount+0xc0/0xc0 [ 288.300109][ T9004] ? lockdep_hardirqs_on+0x98/0x150 [ 288.305325][ T9004] ? __x64_sys_mount+0x20/0xc0 [ 288.310125][ T9004] do_syscall_64+0x55/0xb0 [ 288.314565][ T9004] ? clear_bhb_loop+0x40/0x90 [ 288.319264][ T9004] ? clear_bhb_loop+0x40/0x90 [ 288.323968][ T9004] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.329887][ T9004] RIP: 0033:0x7f3d29d9fb19 [ 288.334319][ T9004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.353946][ T9004] RSP: 002b:00007f3d2abc2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 288.362387][ T9004] RAX: ffffffffffffffda RBX: 00007f3d2a025fa0 RCX: 00007f3d29d9fb19 [ 288.370379][ T9004] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000000 [ 288.378371][ T9004] RBP: 00007f3d29e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 288.386364][ T9004] R10: 00000000002484f0 R11: 0000000000000246 R12: 0000000000000000 [ 288.394363][ T9004] R13: 00007f3d2a026038 R14: 00007f3d2a025fa0 R15: 00007ffd36826d68 [ 288.402376][ T9004] [ 288.452147][ T9004] ERROR: Out of memory at tomoyo_realpath_from_path. [ 288.778986][ T28] audit: type=1800 audit(1794165468.982:135): pid=9013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1038" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 289.938640][ T9024] syzkaller0: entered promiscuous mode [ 289.944175][ T9024] syzkaller0: entered allmulticast mode [ 290.648162][ T5795] Bluetooth: hci3: command 0x0406 tx timeout [ 292.562286][ T9063] syzkaller0: entered promiscuous mode [ 292.590669][ T9063] syzkaller0: entered allmulticast mode [ 293.168923][ T5795] Bluetooth: hci3: command 0x0406 tx timeout [ 293.681692][ T28] audit: type=1800 audit(1794165473.882:136): pid=9079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1059" name="file0" dev="overlay" ino=1415 res=0 errno=0 [ 293.726153][ T9081] FAULT_INJECTION: forcing a failure. [ 293.726153][ T9081] name failslab, interval 1, probability 0, space 0, times 0 [ 293.755402][ T9081] CPU: 0 PID: 9081 Comm: syz.1.1060 Not tainted syzkaller #0 [ 293.762831][ T9081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 293.772907][ T9081] Call Trace: [ 293.776209][ T9081] [ 293.779157][ T9081] dump_stack_lvl+0x18c/0x250 [ 293.783867][ T9081] ? show_regs_print_info+0x20/0x20 [ 293.789088][ T9081] ? load_image+0x420/0x420 [ 293.793622][ T9081] ? __might_sleep+0xe0/0xe0 [ 293.798244][ T9081] ? __lock_acquire+0x7eb0/0x7eb0 [ 293.803298][ T9081] should_fail_ex+0x394/0x4c0 [ 293.808007][ T9081] should_failslab+0x9/0x20 [ 293.812525][ T9081] slab_pre_alloc_hook+0x59/0x300 [ 293.817572][ T9081] ? __request_module+0x2ed/0x600 [ 293.822623][ T9081] ? __request_module+0x2ed/0x600 [ 293.827669][ T9081] __kmem_cache_alloc_node+0x53/0x260 [ 293.833074][ T9081] ? __request_module+0x2ed/0x600 [ 293.838122][ T9081] __kmalloc_node_track_caller+0xa4/0x230 [ 293.843882][ T9081] kstrdup+0x3b/0x80 [ 293.847820][ T9081] __request_module+0x2ed/0x600 [ 293.852701][ T9081] ? module_enforce_rwx_sections+0x150/0x150 [ 293.858715][ T9081] ? nvmf_dev_write+0x1bba/0x2b50 [ 293.863752][ T9081] ? __kmem_cache_free+0xba/0x1f0 [ 293.868779][ T9081] nvmf_dev_write+0x1d6b/0x2b50 [ 293.873622][ T9081] ? asan.module_dtor+0x20/0x20 [ 293.878494][ T9081] ? nvmf_host_put+0x190/0x190 [ 293.883253][ T9081] ? aa_file_perm+0x11b/0xee0 [ 293.887939][ T9081] ? try_to_wake_up+0x6f5/0x10e0 [ 293.892888][ T9081] ? common_file_perm+0x198/0x1f0 [ 293.897909][ T9081] ? fsnotify_perm+0x5d/0x5e0 [ 293.902587][ T9081] ? security_file_permission+0x79/0xa0 [ 293.908129][ T9081] ? nvmf_host_put+0x190/0x190 [ 293.912889][ T9081] vfs_write+0x299/0x9a0 [ 293.917143][ T9081] ? file_end_write+0x250/0x250 [ 293.921994][ T9081] ? __fget_files+0x28/0x460 [ 293.926583][ T9081] ? __fget_files+0x3fc/0x460 [ 293.931266][ T9081] ? __fdget_pos+0x1d8/0x330 [ 293.935851][ T9081] ? ksys_write+0x74/0x260 [ 293.940267][ T9081] ksys_write+0x151/0x260 [ 293.944597][ T9081] ? __ia32_sys_read+0x90/0x90 [ 293.949369][ T9081] ? lockdep_hardirqs_on+0x98/0x150 [ 293.954562][ T9081] do_syscall_64+0x55/0xb0 [ 293.958976][ T9081] ? clear_bhb_loop+0x40/0x90 [ 293.963650][ T9081] ? clear_bhb_loop+0x40/0x90 [ 293.968332][ T9081] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.974225][ T9081] RIP: 0033:0x7f3d29d9fb19 [ 293.978642][ T9081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.998251][ T9081] RSP: 002b:00007f3d2abc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 294.006665][ T9081] RAX: ffffffffffffffda RBX: 00007f3d2a025fa0 RCX: 00007f3d29d9fb19 [ 294.014632][ T9081] RDX: 0000000000000015 RSI: 0000200000000240 RDI: 0000000000000005 [ 294.022598][ T9081] RBP: 00007f3d29e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 294.030563][ T9081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.038526][ T9081] R13: 00007f3d2a026038 R14: 00007f3d2a025fa0 R15: 00007ffd36826d68 [ 294.046526][ T9081] [ 294.056084][ T9081] nvme_fabrics: missing parameter 'nqn=%s' [ 295.696241][ T9096] syzkaller0: entered promiscuous mode [ 295.710094][ T9096] syzkaller0: entered allmulticast mode [ 295.808515][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 297.790801][ T2131] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 298.037870][ T2131] usb 1-1: Using ep0 maxpacket: 32 [ 298.044937][ T2131] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 298.071349][ T2131] usb 1-1: config 0 interface 0 has no altsetting 0 [ 298.087535][ T2131] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 298.103994][ T2131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.433648][ T2131] usb 1-1: config 0 descriptor?? [ 300.297025][ T2131] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 300.340676][ T2131] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 300.377525][ T2131] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 300.397675][ T2131] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 300.405128][ T2131] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 300.478285][ T2131] corsair-psu 0003:1B1C:1C09.0001: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 300.634159][ T9184] syzkaller0: entered promiscuous mode [ 300.662112][ T9184] syzkaller0: entered allmulticast mode [ 300.847598][ T2131] corsair-psu 0003:1B1C:1C09.0001: unable to initialize device (-110) [ 300.870734][ T2131] corsair-psu: probe of 0003:1B1C:1C09.0001 failed with error -110 [ 300.904982][ T2131] usb 1-1: USB disconnect, device number 5 [ 302.572490][ T9213] kAFS: unable to lookup cell '.' [ 303.363885][ T5795] Bluetooth: hci3: command 0x0406 tx timeout [ 303.771855][ T9226] FAULT_INJECTION: forcing a failure. [ 303.771855][ T9226] name failslab, interval 1, probability 0, space 0, times 0 [ 303.827487][ T9226] CPU: 1 PID: 9226 Comm: syz.1.1088 Not tainted syzkaller #0 [ 303.834920][ T9226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 303.845009][ T9226] Call Trace: [ 303.848300][ T9226] [ 303.851226][ T9226] dump_stack_lvl+0x18c/0x250 [ 303.855908][ T9226] ? show_regs_print_info+0x20/0x20 [ 303.861115][ T9226] ? load_image+0x420/0x420 [ 303.865615][ T9226] ? __might_sleep+0xe0/0xe0 [ 303.870205][ T9226] ? __lock_acquire+0x7eb0/0x7eb0 [ 303.875250][ T9226] should_fail_ex+0x394/0x4c0 [ 303.879942][ T9226] should_failslab+0x9/0x20 [ 303.884449][ T9226] slab_pre_alloc_hook+0x59/0x300 [ 303.889477][ T9226] ? tcf_block_get_ext+0xe92/0x13d0 [ 303.894680][ T9226] ? multiq_init+0x144/0x2b0 [ 303.899276][ T9226] ? multiq_init+0x144/0x2b0 [ 303.903862][ T9226] __kmem_cache_alloc_node+0x53/0x260 [ 303.909231][ T9226] ? qdisc_alloc+0x95/0xa80 [ 303.913740][ T9226] ? multiq_init+0x144/0x2b0 [ 303.918329][ T9226] __kmalloc+0xa7/0x240 [ 303.922496][ T9226] multiq_init+0x144/0x2b0 [ 303.926907][ T9226] ? multiq_peek+0x300/0x300 [ 303.931493][ T9226] qdisc_create+0x90f/0x1060 [ 303.936089][ T9226] ? qdisc_notify+0x370/0x370 [ 303.940767][ T9226] ? lockdep_rtnl_is_held+0x26/0x30 [ 303.945959][ T9226] ? qdisc_lookup+0x361/0x6c0 [ 303.950632][ T9226] tc_modify_qdisc+0xb47/0x1de0 [ 303.955492][ T9226] ? qdisc_offload_query_caps+0x150/0x150 [ 303.961227][ T9226] ? qdisc_offload_query_caps+0x150/0x150 [ 303.966942][ T9226] rtnetlink_rcv_msg+0x843/0xf90 [ 303.971878][ T9226] ? rtnetlink_rcv_msg+0x220/0xf90 [ 303.976987][ T9226] ? rtnetlink_bind+0x80/0x80 [ 303.981659][ T9226] ? kasan_quarantine_put+0xd8/0x220 [ 303.986948][ T9226] ? lockdep_hardirqs_on+0x98/0x150 [ 303.992144][ T9226] ? slab_free_freelist_hook+0x154/0x240 [ 303.997776][ T9226] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 304.003753][ T9226] ? lock_chain_count+0x20/0x20 [ 304.008601][ T9226] ? __local_bh_enable_ip+0x13a/0x1c0 [ 304.013970][ T9226] ? lockdep_hardirqs_on+0x98/0x150 [ 304.019166][ T9226] ? __local_bh_enable_ip+0x13a/0x1c0 [ 304.024537][ T9226] ? _local_bh_enable+0xa0/0xa0 [ 304.029388][ T9226] ? __dev_queue_xmit+0x1481/0x3a30 [ 304.034587][ T9226] ? __dev_queue_xmit+0x6d1/0x3a30 [ 304.039700][ T9226] ? ref_tracker_free+0x686/0x830 [ 304.044738][ T9226] netlink_rcv_skb+0x235/0x4c0 [ 304.049499][ T9226] ? rtnetlink_bind+0x80/0x80 [ 304.054177][ T9226] ? netlink_ack+0x1160/0x1160 [ 304.058944][ T9226] ? __lock_acquire+0x7eb0/0x7eb0 [ 304.063968][ T9226] ? netlink_deliver_tap+0x2e/0x1b0 [ 304.069161][ T9226] netlink_unicast+0x856/0x9e0 [ 304.073938][ T9226] netlink_sendmsg+0x8d0/0xbf0 [ 304.078705][ T9226] ? netlink_getsockopt+0x590/0x590 [ 304.083901][ T9226] ? apparmor_socket_sendmsg+0x8e/0x330 [ 304.089446][ T9226] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 304.094727][ T9226] ? security_socket_sendmsg+0x80/0xa0 [ 304.100182][ T9226] ? netlink_getsockopt+0x590/0x590 [ 304.105374][ T9226] ____sys_sendmsg+0x61b/0x980 [ 304.110138][ T9226] ? __asan_memset+0x22/0x40 [ 304.114725][ T9226] ? __sys_sendmsg_sock+0x30/0x30 [ 304.119744][ T9226] ? __import_iovec+0x5f2/0x850 [ 304.124603][ T9226] ? import_iovec+0x73/0xa0 [ 304.129110][ T9226] ___sys_sendmsg+0x2a6/0x360 [ 304.133785][ T9226] ? __sys_sendmsg+0x2b0/0x2b0 [ 304.138555][ T9226] ? put_user_ifreq+0x85/0xb0 [ 304.143243][ T9226] __se_sys_sendmsg+0x1d0/0x2c0 [ 304.148088][ T9226] ? __x64_sys_sendmsg+0x80/0x80 [ 304.153061][ T9226] ? lockdep_hardirqs_on+0x98/0x150 [ 304.158258][ T9226] do_syscall_64+0x55/0xb0 [ 304.162667][ T9226] ? clear_bhb_loop+0x40/0x90 [ 304.167341][ T9226] ? clear_bhb_loop+0x40/0x90 [ 304.172019][ T9226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.177907][ T9226] RIP: 0033:0x7f3d29d9fb19 [ 304.182317][ T9226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.201915][ T9226] RSP: 002b:00007f3d2abc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.210323][ T9226] RAX: ffffffffffffffda RBX: 00007f3d2a025fa0 RCX: 00007f3d29d9fb19 [ 304.218304][ T9226] RDX: 000000000004c840 RSI: 0000200000000080 RDI: 0000000000000004 [ 304.226285][ T9226] RBP: 00007f3d29e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 304.234259][ T9226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.242226][ T9226] R13: 00007f3d2a026038 R14: 00007f3d2a025fa0 R15: 00007ffd36826d68 [ 304.250210][ T9226] [ 306.647179][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.658902][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.667149][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.679259][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.697677][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 306.714540][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.931251][ T9172] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.858584][ T5796] Bluetooth: hci1: command tx timeout [ 309.065426][ T9238] rxe_eth0 speed is unknown, defaulting to 1000 [ 309.223376][ T9172] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.384262][ T9249] syz.0.1095 (9249) used greatest stack depth: 16648 bytes left [ 309.402353][ T9172] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.441790][ T9253] syzkaller0: entered promiscuous mode [ 309.453955][ T9253] syzkaller0: entered allmulticast mode [ 309.553731][ T9172] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.928225][ T5796] Bluetooth: hci1: command tx timeout [ 312.882964][ T9172] tipc: Left network mode [ 313.017677][ T5796] Bluetooth: hci1: command tx timeout [ 314.522761][ T9238] chnl_net:caif_netlink_parms(): no params data found [ 315.087595][ T5796] Bluetooth: hci1: command tx timeout [ 317.002716][ T9305] FAULT_INJECTION: forcing a failure. [ 317.002716][ T9305] name failslab, interval 1, probability 0, space 0, times 0 [ 317.047991][ T9305] CPU: 0 PID: 9305 Comm: syz.1.1107 Not tainted syzkaller #0 [ 317.055428][ T9305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 317.065507][ T9305] Call Trace: [ 317.068813][ T9305] [ 317.071764][ T9305] dump_stack_lvl+0x18c/0x250 [ 317.076480][ T9305] ? show_regs_print_info+0x20/0x20 [ 317.081708][ T9305] ? load_image+0x420/0x420 [ 317.086237][ T9305] ? __lock_acquire+0x7eb0/0x7eb0 [ 317.091309][ T9305] should_fail_ex+0x394/0x4c0 [ 317.096023][ T9305] should_failslab+0x9/0x20 [ 317.100552][ T9305] slab_pre_alloc_hook+0x59/0x300 [ 317.105603][ T9305] ? apply_wqattrs_prepare+0x127/0xd00 [ 317.111084][ T9305] __kmem_cache_alloc_node+0x53/0x260 [ 317.116458][ T9305] ? apply_wqattrs_prepare+0x127/0xd00 [ 317.121916][ T9305] kmalloc_trace+0x2a/0xe0 [ 317.126341][ T9305] apply_wqattrs_prepare+0x127/0xd00 [ 317.131631][ T9305] ? apply_workqueue_attrs+0x36/0x180 [ 317.137019][ T9305] apply_workqueue_attrs+0xdb/0x180 [ 317.142224][ T9305] alloc_workqueue+0xc9a/0x1380 [ 317.147099][ T9305] ? ida_alloc_range+0x7d0/0x860 [ 317.152070][ T9305] ? kobject_set_name_vargs+0xca/0x110 [ 317.157549][ T9305] ? dev_set_name+0xe3/0x140 [ 317.162151][ T9305] ? apply_workqueue_attrs+0x180/0x180 [ 317.167624][ T9305] hci_register_dev+0x282/0x8b0 [ 317.172486][ T9305] hci_uart_tty_ioctl+0x81d/0xa20 [ 317.177521][ T9305] ? hci_uart_tty_write+0x10/0x10 [ 317.182544][ T9305] tty_ioctl+0x9b5/0xdc0 [ 317.186784][ T9305] ? tty_get_icount+0xb0/0xb0 [ 317.191458][ T9305] __se_sys_ioctl+0xfd/0x170 [ 317.196049][ T9305] do_syscall_64+0x55/0xb0 [ 317.200462][ T9305] ? clear_bhb_loop+0x40/0x90 [ 317.205145][ T9305] ? clear_bhb_loop+0x40/0x90 [ 317.209847][ T9305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.215756][ T9305] RIP: 0033:0x7f3d29d9fb19 [ 317.220201][ T9305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.239815][ T9305] RSP: 002b:00007f3d2abc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.248232][ T9305] RAX: ffffffffffffffda RBX: 00007f3d2a025fa0 RCX: 00007f3d29d9fb19 [ 317.256194][ T9305] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003 [ 317.264175][ T9305] RBP: 00007f3d29e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 317.272152][ T9305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.280124][ T9305] R13: 00007f3d2a026038 R14: 00007f3d2a025fa0 R15: 00007ffd36826d68 [ 317.288108][ T9305] [ 317.318268][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.324665][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.428804][ T9305] Bluetooth: Can't register HCI device [ 317.530157][ T9238] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.556886][ T9238] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.985760][ T9238] bridge_slave_0: entered allmulticast mode [ 318.308928][ T9238] bridge_slave_0: entered promiscuous mode [ 318.465227][ T9238] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.487560][ T9238] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.494811][ T9238] bridge_slave_1: entered allmulticast mode [ 318.528970][ T9238] bridge_slave_1: entered promiscuous mode [ 318.686101][ T9238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.914405][ T9238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.054540][ T9238] team0: Port device team_slave_0 added [ 319.144462][ T9238] team0: Port device team_slave_1 added [ 319.278599][ T9238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.316015][ T9238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.398737][ T9238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.445548][ T9238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.469178][ T9238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.782960][ T9238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.184662][ T9172] hsr_slave_0: left promiscuous mode [ 320.309022][ T9172] hsr_slave_1: left promiscuous mode [ 320.477946][ T9172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.485484][ T9172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.566953][ T9363] FAULT_INJECTION: forcing a failure. [ 320.566953][ T9363] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 320.581358][ T9172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.591242][ T9172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.606425][ T9363] CPU: 0 PID: 9363 Comm: syz.2.1120 Not tainted syzkaller #0 [ 320.613887][ T9363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 320.623960][ T9363] Call Trace: [ 320.627256][ T9363] [ 320.630200][ T9363] dump_stack_lvl+0x18c/0x250 [ 320.634903][ T9363] ? show_regs_print_info+0x20/0x20 [ 320.640122][ T9363] ? load_image+0x420/0x420 [ 320.644640][ T9363] ? __might_fault+0xaa/0x120 [ 320.649333][ T9363] ? __lock_acquire+0x7eb0/0x7eb0 [ 320.654375][ T9363] ? __virt_addr_valid+0x10c/0x380 [ 320.659508][ T9363] should_fail_ex+0x394/0x4c0 [ 320.664211][ T9363] _copy_to_user+0x2f/0xa0 [ 320.668644][ T9363] video_usercopy+0xe38/0x1360 [ 320.673437][ T9363] ? video_ioctl2+0x30/0x30 [ 320.677974][ T9363] ? v4l_printk_ioctl+0x160/0x160 [ 320.683041][ T9363] v4l2_ioctl+0x18a/0x1e0 [ 320.687388][ T9363] ? v4l2_poll+0x2b0/0x2b0 [ 320.691814][ T9363] __se_sys_ioctl+0xfd/0x170 [ 320.696428][ T9363] do_syscall_64+0x55/0xb0 [ 320.700868][ T9363] ? clear_bhb_loop+0x40/0x90 [ 320.705560][ T9363] ? clear_bhb_loop+0x40/0x90 [ 320.710257][ T9363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.716175][ T9363] RIP: 0033:0x7f8711b9fb19 [ 320.720602][ T9363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.740225][ T9363] RSP: 002b:00007f871298d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.748656][ T9363] RAX: ffffffffffffffda RBX: 00007f8711e25fa0 RCX: 00007f8711b9fb19 [ 320.756635][ T9363] RDX: 0000200000000040 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 320.764614][ T9363] RBP: 00007f8711c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 320.772614][ T9363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.780594][ T9363] R13: 00007f8711e26038 R14: 00007f8711e25fa0 R15: 00007ffe48fc8958 [ 320.788592][ T9363] [ 320.791652][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.813384][ T9172] bridge_slave_1: left allmulticast mode [ 320.836267][ T9172] bridge_slave_1: left promiscuous mode [ 320.843922][ T9172] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.881155][ T9172] bridge_slave_0: left allmulticast mode [ 320.897529][ T9172] bridge_slave_0: left promiscuous mode [ 320.916257][ T9172] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.014624][ T9172] veth1_macvtap: left promiscuous mode [ 321.032155][ T9172] veth0_macvtap: left promiscuous mode [ 321.039308][ T9172] veth1_vlan: left promiscuous mode [ 321.045186][ T9172] veth0_vlan: left promiscuous mode [ 321.465866][ T9371] FAULT_INJECTION: forcing a failure. [ 321.465866][ T9371] name failslab, interval 1, probability 0, space 0, times 0 [ 321.465927][ T9371] CPU: 0 PID: 9371 Comm: syz.2.1122 Not tainted syzkaller #0 [ 321.465947][ T9371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 321.465958][ T9371] Call Trace: [ 321.465966][ T9371] [ 321.465974][ T9371] dump_stack_lvl+0x18c/0x250 [ 321.466007][ T9371] ? show_regs_print_info+0x20/0x20 [ 321.466032][ T9371] ? load_image+0x420/0x420 [ 321.466056][ T9371] ? __might_sleep+0xe0/0xe0 [ 321.466081][ T9371] ? __lock_acquire+0x7eb0/0x7eb0 [ 321.466110][ T9371] should_fail_ex+0x394/0x4c0 [ 321.466138][ T9371] should_failslab+0x9/0x20 [ 321.466155][ T9371] slab_pre_alloc_hook+0x59/0x300 [ 321.466177][ T9371] ? vc_allocate+0x1a0/0x6e0 [ 321.466198][ T9371] __kmem_cache_alloc_node+0x53/0x260 [ 321.466221][ T9371] ? vc_allocate+0x1a0/0x6e0 [ 321.466241][ T9371] kmalloc_trace+0x2a/0xe0 [ 321.466269][ T9371] vc_allocate+0x1a0/0x6e0 [ 321.466290][ T9371] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 321.466319][ T9371] ? _raw_spin_unlock+0x40/0x40 [ 321.466339][ T9371] ? trace_contention_end+0x39/0xe0 [ 321.466359][ T9371] ? vc_cons_allocated+0x70/0x70 [ 321.466391][ T9371] con_install+0xa0/0x720 [ 321.466413][ T9371] ? mutex_lock_nested+0x20/0x20 [ 321.466435][ T9371] ? show_tty_active+0x30/0x30 [ 321.466468][ T9371] tty_init_dev+0xd3/0x4c0 [ 321.466494][ T9371] tty_open+0x7e2/0xd90 [ 321.466523][ T9371] ? __lock_acquire+0x7eb0/0x7eb0 [ 321.466549][ T9371] ? tty_compat_ioctl+0x8b0/0x8b0 [ 321.466575][ T9371] ? do_raw_spin_unlock+0x121/0x230 [ 321.466605][ T9371] chrdev_open+0x58c/0x600 [ 321.466631][ T9371] ? cd_forget+0x160/0x160 [ 321.466658][ T9371] ? fsnotify_perm+0x3ed/0x5e0 [ 321.466685][ T9371] do_dentry_open+0x880/0x14b0 [ 321.466713][ T9371] ? cd_forget+0x160/0x160 [ 321.466742][ T9371] path_openat+0x284f/0x3270 [ 321.466786][ T9371] ? do_sys_openat2+0xda/0x1d0 [ 321.466808][ T9371] ? __x64_sys_openat+0x139/0x160 [ 321.466834][ T9371] ? verify_lock_unused+0x140/0x140 [ 321.466856][ T9371] ? do_filp_open+0x430/0x430 [ 321.466898][ T9371] do_filp_open+0x1f2/0x430 [ 321.466925][ T9371] ? vfs_tmpfile+0x620/0x620 [ 321.466972][ T9371] ? _raw_spin_unlock+0x28/0x40 [ 321.466991][ T9371] ? alloc_fd+0x590/0x640 [ 321.467026][ T9371] do_sys_openat2+0x134/0x1d0 [ 321.467053][ T9371] ? do_sys_open+0xe0/0xe0 [ 321.467078][ T9371] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 321.467104][ T9371] ? lock_chain_count+0x20/0x20 [ 321.467132][ T9371] __x64_sys_openat+0x139/0x160 [ 321.467162][ T9371] do_syscall_64+0x55/0xb0 [ 321.467184][ T9371] ? clear_bhb_loop+0x40/0x90 [ 321.467208][ T9371] ? clear_bhb_loop+0x40/0x90 [ 321.467235][ T9371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.467258][ T9371] RIP: 0033:0x7f8711b6034e [ 321.467276][ T9371] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 321.467291][ T9371] RSP: 002b:00007f871298cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 321.467320][ T9371] RAX: ffffffffffffffda RBX: 00007f871298d6c0 RCX: 00007f8711b6034e [ 321.467335][ T9371] RDX: 0000000000000002 RSI: 00007f871298cc00 RDI: ffffffffffffff9c [ 321.467348][ T9371] RBP: 00007f8711c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 321.467360][ T9371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.467374][ T9371] R13: 00007f8711e26038 R14: 00007f8711e25fa0 R15: 00007ffe48fc8958 [ 321.467402][ T9371] [ 322.350324][ T5867] IPVS: starting estimator thread 0... [ 322.450858][ T9382] IPVS: using max 20 ests per chain, 48000 per kthread [ 322.553888][ T9172] team0 (unregistering): Port device team_slave_1 removed [ 322.601962][ T9172] team0 (unregistering): Port device team_slave_0 removed [ 322.646729][ T9172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.657936][ T9172] bond_slave_1 (unregistering): left promiscuous mode [ 322.695913][ T9172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.705246][ T9172] bond_slave_0 (unregistering): left promiscuous mode [ 322.986682][ T9172] bond0 (unregistering): Released all slaves [ 323.059406][ T9386] IPVS: Error connecting to the multicast addr [ 323.169594][ T9238] hsr_slave_0: entered promiscuous mode [ 323.188283][ T9238] hsr_slave_1: entered promiscuous mode [ 323.199441][ T9238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.207039][ T9238] Cannot create hsr debugfs directory [ 323.802704][ T9238] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 323.842864][ T9238] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 323.882362][ T9238] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 323.898893][ T9238] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 324.655886][ T9238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.708992][ T9238] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.740562][ T9165] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.747797][ T9165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.804891][ T9165] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.812145][ T9165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.859351][ T9238] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 324.874302][ T9238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.284911][ T9238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.807080][ T9238] veth0_vlan: entered promiscuous mode [ 325.840163][ T9238] veth1_vlan: entered promiscuous mode [ 325.906469][ T9238] veth0_macvtap: entered promiscuous mode [ 325.931095][ T9238] veth1_macvtap: entered promiscuous mode [ 325.964766][ T9238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.997507][ T9238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.013509][ T9238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.025787][ T9238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.133329][ T9238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.253812][ T9465] bond0: (slave gretap0): Opening slave failed [ 326.678834][ T9238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.717299][ T9238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.764432][ T9238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.830023][ T9238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.918084][ T9238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.032736][ T9238] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.061976][ T9238] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.073225][ T9238] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.084526][ T9238] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.673916][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.731787][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.538764][ T2907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.568385][ T2907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.503555][ T9548] netlink: 'syz.4.1159': attribute type 3 has an invalid length. [ 332.547591][ T9548] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1159'. [ 332.660142][ T2907] Bluetooth: hci4: Frame reassembly failed (-84) [ 332.702416][ T3501] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 332.877560][ T5872] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 333.809938][ T5872] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 333.852032][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.003146][ T9572] lo speed is unknown, defaulting to 1000 [ 334.010137][ T9572] lo speed is unknown, defaulting to 1000 [ 334.025723][ T9572] lo speed is unknown, defaulting to 1000 [ 334.064620][ T9572] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 334.138400][ T9572] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 335.069333][ T5795] Bluetooth: hci4: command 0x1003 tx timeout [ 335.076044][ T5796] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 335.085142][ T5872] usb 3-1: config 0 descriptor?? [ 335.088129][ T9572] lo speed is unknown, defaulting to 1000 [ 335.097687][ T9572] lo speed is unknown, defaulting to 1000 [ 335.104751][ T9572] lo speed is unknown, defaulting to 1000 [ 335.111911][ T9572] lo speed is unknown, defaulting to 1000 [ 335.569397][ T5872] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 335.576957][ T5872] [drm] Initialized udl on minor 2 [ 335.636160][ T9586] Trying to write to read-only block-device nullb0 [ 335.748738][ T5872] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 335.785590][ T5872] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 335.793307][ T9591] kvm: emulating exchange as write [ 335.809085][ T5895] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 335.827537][ T5872] usb 3-1: USB disconnect, device number 2 [ 335.856820][ T5895] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 335.866157][ T28] audit: type=1800 audit(1794165516.082:137): pid=9594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1170" name="file0" dev="overlay" ino=62 res=0 errno=0 [ 335.886816][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.949296][ T9617] tipc: Started in network mode [ 338.954234][ T9617] tipc: Node identity 7f000001, cluster identity 4711 [ 338.961633][ T9617] tipc: Enabling of bearer rejected, failed to enable media [ 342.689157][ T9647] siw: device registration error -23 [ 345.437623][ T28] audit: type=1326 audit(1794165525.632:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.4.1188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479ab9fb19 code=0x7ffc0000 [ 345.531124][ T28] audit: type=1326 audit(1794165525.632:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.4.1188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479ab9fb19 code=0x7ffc0000 [ 345.585698][ T28] audit: type=1326 audit(1794165525.682:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.4.1188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f479ab9fb19 code=0x7ffc0000 [ 345.767222][ T5895] asus 0005:0B05:8502.0002: item fetching failed at offset 8/9 [ 345.806702][ T5895] asus 0005:0B05:8502.0002: Asus hid parse failed: -22 [ 345.912688][ T5895] asus: probe of 0005:0B05:8502.0002 failed with error -22 [ 346.238016][ T28] audit: type=1326 audit(1794165525.682:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.4.1188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479ab9fb19 code=0x7ffc0000 [ 346.282291][ T9693] FAULT_INJECTION: forcing a failure. [ 346.282291][ T9693] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 346.342338][ T9693] CPU: 0 PID: 9693 Comm: syz.2.1189 Not tainted syzkaller #0 [ 346.349779][ T9693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 346.354226][ T28] audit: type=1326 audit(1794165525.682:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.4.1188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479ab9fb19 code=0x7ffc0000 [ 346.359836][ T9693] Call Trace: [ 346.359846][ T9693] [ 346.359854][ T9693] dump_stack_lvl+0x18c/0x250 [ 346.359886][ T9693] ? show_regs_print_info+0x20/0x20 [ 346.359908][ T9693] ? load_image+0x420/0x420 [ 346.359929][ T9693] ? __lock_acquire+0x7eb0/0x7eb0 [ 346.359956][ T9693] should_fail_ex+0x394/0x4c0 [ 346.359981][ T9693] prepare_alloc_pages+0x1e1/0x5b0 [ 346.360007][ T9693] __alloc_pages+0x134/0x460 [ 346.360028][ T9693] ? zone_statistics+0x170/0x170 [ 346.360051][ T9693] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 346.360076][ T9693] ? alloc_pages+0x4e1/0x740 [ 346.360096][ T9693] ? __fget_files+0x28/0x460 [ 346.360125][ T9693] __get_free_pages+0xc/0x30 [ 346.360142][ T9693] __pollwait+0x11d/0x3e0 [ 346.360169][ T9693] ? poll_initwait+0x160/0x160 [ 346.360192][ T9693] pipe_poll+0x16d/0x4a0 [ 346.396759][ T28] audit: type=1326 audit(1794165525.692:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.4.1188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f479ab9fb19 code=0x7ffc0000 [ 346.400328][ T9693] ? do_sys_poll+0x802/0x1270 [ 346.400358][ T9693] ? pipe_write+0x1b80/0x1b80 [ 346.400375][ T9693] do_sys_poll+0x8db/0x1270 [ 346.400414][ T9693] ? poll_select_finish+0x650/0x650 [ 346.404966][ T28] audit: type=1326 audit(1794165525.692:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.4.1188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479ab9fb19 code=0x7ffc0000 [ 346.409897][ T9693] ? poll_initwait+0x160/0x160 [ 346.409926][ T9693] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 346.409955][ T9693] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 346.409982][ T9693] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 346.410008][ T9693] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 346.410036][ T9693] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 346.410065][ T9693] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 346.410093][ T9693] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 346.410123][ T9693] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 346.410153][ T9693] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 346.410215][ T9693] ? set_user_sigmask+0xce/0x1c0 [ 346.410235][ T9693] ? sigprocmask+0x190/0x190 [ 346.410264][ T9693] __se_sys_ppoll+0x20a/0x2b0 [ 346.410290][ T9693] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 346.410315][ T9693] ? __x64_sys_ppoll+0xc0/0xc0 [ 346.410347][ T9693] ? lockdep_hardirqs_on+0x98/0x150 [ 346.410364][ T9693] ? __x64_sys_ppoll+0x20/0xc0 [ 346.410391][ T9693] do_syscall_64+0x55/0xb0 [ 346.410412][ T9693] ? clear_bhb_loop+0x40/0x90 [ 346.415324][ T28] audit: type=1326 audit(1794165525.692:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.4.1188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f479ab9fb19 code=0x7ffc0000 [ 346.420157][ T9693] ? clear_bhb_loop+0x40/0x90 [ 346.420185][ T9693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.420208][ T9693] RIP: 0033:0x7f8711b9fb19 [ 346.420225][ T9693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.420239][ T9693] RSP: 002b:00007f871298d028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 346.420258][ T9693] RAX: ffffffffffffffda RBX: 00007f8711e25fa0 RCX: 00007f8711b9fb19 [ 346.420271][ T9693] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 0000200000000380 [ 346.424893][ T28] audit: type=1326 audit(1794165525.692:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.4.1188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479ab9fb19 code=0x7ffc0000 [ 346.429742][ T9693] RBP: 00007f8711c37b70 R08: 0000000000000030 R09: 0000000000000000 [ 346.429755][ T9693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.429766][ T9693] R13: 00007f8711e26038 R14: 00007f8711e25fa0 R15: 00007ffe48fc8958 [ 346.429792][ T9693] [ 348.067714][ T5867] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 348.550338][ T5867] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 348.681528][ T5867] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 348.775949][ T5867] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 348.827537][ T5867] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 348.882791][ T5867] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 348.921881][ T5867] usb 1-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 348.941428][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.488336][ T9726] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1196'. [ 350.310646][ T9708] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 350.358874][ T9708] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 350.366163][ T9708] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 350.429451][ T5867] mos7720 1-1:1.0: Moschip 2 port adapter converter detected [ 351.941901][ T9735] block device autoloading is deprecated and will be removed. [ 352.078441][ T5867] usb 1-1: mos7720: usb_control_msg() failed: -71 [ 352.137484][ T5867] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 352.192585][ T5867] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 352.311269][ T5867] usb 1-1: USB disconnect, device number 6 [ 352.317172][ C1] usb 1-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 352.367334][ T5867] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 352.405911][ T5867] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 353.669476][ T5867] mos7720 1-1:1.0: device disconnected [ 355.173439][ T9773] FAULT_INJECTION: forcing a failure. [ 355.173439][ T9773] name failslab, interval 1, probability 0, space 0, times 0 [ 355.203830][ T9773] CPU: 1 PID: 9773 Comm: syz.0.1205 Not tainted syzkaller #0 [ 355.211261][ T9773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 355.221370][ T9773] Call Trace: [ 355.224734][ T9773] [ 355.227743][ T9773] dump_stack_lvl+0x18c/0x250 [ 355.232607][ T9773] ? show_regs_print_info+0x20/0x20 [ 355.237881][ T9773] ? load_image+0x420/0x420 [ 355.242437][ T9773] ? __lock_acquire+0x7eb0/0x7eb0 [ 355.247533][ T9773] should_fail_ex+0x394/0x4c0 [ 355.252275][ T9773] should_failslab+0x9/0x20 [ 355.256821][ T9773] slab_pre_alloc_hook+0x59/0x300 [ 355.261885][ T9773] ? bpf_prog_load+0x10fa/0x1610 [ 355.266833][ T9773] ? __sys_bpf+0x5ba/0x890 [ 355.271243][ T9773] ? __x64_sys_bpf+0x7c/0x90 [ 355.275831][ T9773] kmem_cache_alloc_node+0x5e/0x320 [ 355.281025][ T9773] ? alloc_vmap_area+0x1b4/0x1e50 [ 355.286057][ T9773] alloc_vmap_area+0x1b4/0x1e50 [ 355.290922][ T9773] ? vm_map_ram+0xcf0/0xcf0 [ 355.295425][ T9773] ? rcu_is_watching+0x15/0xb0 [ 355.300188][ T9773] __get_vm_area_node+0x162/0x370 [ 355.305214][ T9773] __vmalloc_node_range+0x36f/0x1320 [ 355.310499][ T9773] ? bpf_check+0x281/0xfe50 [ 355.314998][ T9773] ? __mod_lruvec_page_state+0xa5/0x410 [ 355.320549][ T9773] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 355.326529][ T9773] ? __mod_lruvec_page_state+0xa5/0x410 [ 355.332078][ T9773] ? free_vm_area+0x50/0x50 [ 355.336577][ T9773] ? kvmalloc_node+0x70/0x180 [ 355.341249][ T9773] ? rcu_is_watching+0x15/0xb0 [ 355.346009][ T9773] ? kvmalloc_node+0x70/0x180 [ 355.350681][ T9773] ? trace_kmalloc+0x1f/0xa0 [ 355.355263][ T9773] ? __kmalloc_node+0x154/0x240 [ 355.360116][ T9773] ? bpf_check+0x281/0xfe50 [ 355.364618][ T9773] vzalloc+0x79/0x90 [ 355.368511][ T9773] ? bpf_check+0x281/0xfe50 [ 355.373017][ T9773] bpf_check+0x281/0xfe50 [ 355.377361][ T9773] ? mark_lock+0x94/0x320 [ 355.381696][ T9773] ? __lock_acquire+0x135d/0x7eb0 [ 355.386718][ T9773] ? bpf_get_btf_vmlinux+0x70/0x70 [ 355.391824][ T9773] ? mark_lock+0x94/0x320 [ 355.396146][ T9773] ? mark_lock+0x94/0x320 [ 355.400469][ T9773] ? __lock_acquire+0x1431/0x7eb0 [ 355.405488][ T9773] ? mark_lock+0x94/0x320 [ 355.409815][ T9773] ? __lock_acquire+0x135d/0x7eb0 [ 355.414837][ T9773] ? mark_lock+0x94/0x320 [ 355.419162][ T9773] ? __lock_acquire+0x1431/0x7eb0 [ 355.424199][ T9773] ? verify_lock_unused+0x140/0x140 [ 355.429398][ T9773] ? verify_lock_unused+0x140/0x140 [ 355.434590][ T9773] ? verify_lock_unused+0x140/0x140 [ 355.439788][ T9773] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0 [ 355.445601][ T9773] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 355.451573][ T9773] ? __lock_acquire+0x7eb0/0x7eb0 [ 355.456590][ T9773] ? lock_chain_count+0x20/0x20 [ 355.461439][ T9773] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 355.467701][ T9773] ? lockdep_hardirqs_on+0x98/0x150 [ 355.472960][ T9773] ? ktime_get_with_offset+0x103/0x330 [ 355.478415][ T9773] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 355.484653][ T9773] ? ktime_get_real_ts64+0x440/0x440 [ 355.489935][ T9773] ? do_raw_spin_unlock+0x121/0x230 [ 355.495140][ T9773] ? __asan_memset+0x22/0x40 [ 355.499729][ T9773] ? bpf_obj_name_cpy+0x194/0x1e0 [ 355.504753][ T9773] bpf_prog_load+0x10fa/0x1610 [ 355.509525][ T9773] ? map_freeze+0x420/0x420 [ 355.514033][ T9773] ? __might_fault+0xaa/0x120 [ 355.518706][ T9773] ? __might_fault+0xc6/0x120 [ 355.523375][ T9773] ? __might_fault+0xaa/0x120 [ 355.528046][ T9773] ? bpf_lsm_bpf+0x9/0x10 [ 355.532371][ T9773] ? security_bpf+0x7e/0xa0 [ 355.536905][ T9773] __sys_bpf+0x5ba/0x890 [ 355.541141][ T9773] ? bpf_link_show_fdinfo+0x560/0x560 [ 355.546503][ T9773] ? fd_install+0x60/0x4e0 [ 355.550934][ T9773] ? lock_chain_count+0x20/0x20 [ 355.555785][ T9773] __x64_sys_bpf+0x7c/0x90 [ 355.560195][ T9773] do_syscall_64+0x55/0xb0 [ 355.564633][ T9773] ? clear_bhb_loop+0x40/0x90 [ 355.569403][ T9773] ? clear_bhb_loop+0x40/0x90 [ 355.574075][ T9773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.579961][ T9773] RIP: 0033:0x7f3c5eb9fb19 [ 355.584416][ T9773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.604078][ T9773] RSP: 002b:00007f3c5faa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 355.612490][ T9773] RAX: ffffffffffffffda RBX: 00007f3c5ee25fa0 RCX: 00007f3c5eb9fb19 [ 355.620452][ T9773] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 355.628425][ T9773] RBP: 00007f3c5ec37b70 R08: 0000000000000000 R09: 0000000000000000 [ 355.636396][ T9773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.644357][ T9773] R13: 00007f3c5ee26038 R14: 00007f3c5ee25fa0 R15: 00007ffd10cd7528 [ 355.652333][ T9773] [ 355.687720][ T9773] syz.0.1205: vmalloc error: size 216, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 355.742817][ T9773] CPU: 1 PID: 9773 Comm: syz.0.1205 Not tainted syzkaller #0 [ 355.750251][ T9773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 355.760325][ T9773] Call Trace: [ 355.763615][ T9773] [ 355.766563][ T9773] dump_stack_lvl+0x18c/0x250 [ 355.771273][ T9773] ? show_regs_print_info+0x20/0x20 [ 355.776483][ T9773] ? load_image+0x420/0x420 [ 355.780996][ T9773] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 355.787450][ T9773] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 355.793953][ T9773] warn_alloc+0x246/0x340 [ 355.798285][ T9773] ? slab_free_freelist_hook+0x154/0x240 [ 355.803922][ T9773] ? zone_watermark_ok_safe+0x230/0x230 [ 355.809465][ T9773] ? __get_vm_area_node+0x17b/0x370 [ 355.814699][ T9773] ? __get_vm_area_node+0x17b/0x370 [ 355.819902][ T9773] __vmalloc_node_range+0x394/0x1320 [ 355.825185][ T9773] ? __mod_lruvec_page_state+0xa5/0x410 [ 355.830734][ T9773] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 355.836731][ T9773] ? __mod_lruvec_page_state+0xa5/0x410 [ 355.842317][ T9773] ? free_vm_area+0x50/0x50 [ 355.846826][ T9773] ? kvmalloc_node+0x70/0x180 [ 355.851506][ T9773] ? rcu_is_watching+0x15/0xb0 [ 355.856274][ T9773] ? kvmalloc_node+0x70/0x180 [ 355.860951][ T9773] ? trace_kmalloc+0x1f/0xa0 [ 355.865540][ T9773] ? __kmalloc_node+0x154/0x240 [ 355.870388][ T9773] ? bpf_check+0x281/0xfe50 [ 355.874884][ T9773] vzalloc+0x79/0x90 [ 355.878776][ T9773] ? bpf_check+0x281/0xfe50 [ 355.883292][ T9773] bpf_check+0x281/0xfe50 [ 355.887634][ T9773] ? mark_lock+0x94/0x320 [ 355.891956][ T9773] ? __lock_acquire+0x135d/0x7eb0 [ 355.896978][ T9773] ? bpf_get_btf_vmlinux+0x70/0x70 [ 355.902082][ T9773] ? mark_lock+0x94/0x320 [ 355.906407][ T9773] ? mark_lock+0x94/0x320 [ 355.910730][ T9773] ? __lock_acquire+0x1431/0x7eb0 [ 355.915747][ T9773] ? mark_lock+0x94/0x320 [ 355.920069][ T9773] ? __lock_acquire+0x135d/0x7eb0 [ 355.925092][ T9773] ? mark_lock+0x94/0x320 [ 355.929430][ T9773] ? __lock_acquire+0x1431/0x7eb0 [ 355.934466][ T9773] ? verify_lock_unused+0x140/0x140 [ 355.939663][ T9773] ? verify_lock_unused+0x140/0x140 [ 355.944853][ T9773] ? verify_lock_unused+0x140/0x140 [ 355.950047][ T9773] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0 [ 355.955866][ T9773] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 355.961838][ T9773] ? __lock_acquire+0x7eb0/0x7eb0 [ 355.966852][ T9773] ? lock_chain_count+0x20/0x20 [ 355.971696][ T9773] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 355.977933][ T9773] ? lockdep_hardirqs_on+0x98/0x150 [ 355.983121][ T9773] ? ktime_get_with_offset+0x103/0x330 [ 355.988583][ T9773] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 355.994815][ T9773] ? ktime_get_real_ts64+0x440/0x440 [ 356.000092][ T9773] ? do_raw_spin_unlock+0x121/0x230 [ 356.005293][ T9773] ? __asan_memset+0x22/0x40 [ 356.009879][ T9773] ? bpf_obj_name_cpy+0x194/0x1e0 [ 356.014894][ T9773] bpf_prog_load+0x10fa/0x1610 [ 356.019675][ T9773] ? map_freeze+0x420/0x420 [ 356.024186][ T9773] ? __might_fault+0xaa/0x120 [ 356.028852][ T9773] ? __might_fault+0xc6/0x120 [ 356.033516][ T9773] ? __might_fault+0xaa/0x120 [ 356.038203][ T9773] ? bpf_lsm_bpf+0x9/0x10 [ 356.042529][ T9773] ? security_bpf+0x7e/0xa0 [ 356.047021][ T9773] __sys_bpf+0x5ba/0x890 [ 356.051288][ T9773] ? bpf_link_show_fdinfo+0x560/0x560 [ 356.056666][ T9773] ? fd_install+0x60/0x4e0 [ 356.061102][ T9773] ? lock_chain_count+0x20/0x20 [ 356.065993][ T9773] __x64_sys_bpf+0x7c/0x90 [ 356.070411][ T9773] do_syscall_64+0x55/0xb0 [ 356.074827][ T9773] ? clear_bhb_loop+0x40/0x90 [ 356.079503][ T9773] ? clear_bhb_loop+0x40/0x90 [ 356.084186][ T9773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.090076][ T9773] RIP: 0033:0x7f3c5eb9fb19 [ 356.094484][ T9773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.114084][ T9773] RSP: 002b:00007f3c5faa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 356.122511][ T9773] RAX: ffffffffffffffda RBX: 00007f3c5ee25fa0 RCX: 00007f3c5eb9fb19 [ 356.130475][ T9773] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 356.138444][ T9773] RBP: 00007f3c5ec37b70 R08: 0000000000000000 R09: 0000000000000000 [ 356.146419][ T9773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.154382][ T9773] R13: 00007f3c5ee26038 R14: 00007f3c5ee25fa0 R15: 00007ffd10cd7528 [ 356.162360][ T9773] [ 356.316721][ T9780] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 356.345191][ T9780] CIFS: Attempting to mount //127.0.0.1/share [ 356.428354][ T9773] Mem-Info: [ 356.468666][ T9773] active_anon:6279 inactive_anon:0 isolated_anon:6 [ 356.468666][ T9773] active_file:21438 inactive_file:40370 isolated_file:0 [ 356.468666][ T9773] unevictable:2810 dirty:162 writeback:0 [ 356.468666][ T9773] slab_reclaimable:11004 slab_unreclaimable:95158 [ 356.468666][ T9773] mapped:24478 shmem:1379 pagetables:645 [ 356.468666][ T9773] sec_pagetables:0 bounce:0 [ 356.468666][ T9773] kernel_misc_reclaimable:0 [ 356.468666][ T9773] free:1336279 free_pcp:7129 free_cma:0 [ 356.775281][ T9773] Node 0 active_anon:25116kB inactive_anon:0kB active_file:85752kB inactive_file:161276kB unevictable:9704kB isolated(anon):24kB isolated(file):0kB mapped:106212kB dirty:648kB writeback:0kB shmem:3980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11992kB pagetables:2580kB sec_pagetables:0kB all_unreclaimable? no [ 356.808211][ T9773] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 356.842718][ T9780] CIFS: VFS: cifs_mount failed w/return code = -512 [ 356.874494][ T9773] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.910637][ T9773] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 356.916555][ T9773] Node 0 DMA32 free:1427236kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:29176kB inactive_anon:0kB active_file:85752kB inactive_file:160452kB unevictable:5704kB writepending:648kB present:3129332kB managed:2567744kB mlocked:4168kB bounce:0kB free_pcp:11372kB local_pcp:5716kB free_cma:0kB [ 356.948861][ T9773] lowmem_reserve[]: 0 0 0 0 0 [ 356.953700][ T9773] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.999523][ T9773] lowmem_reserve[]: 0 0 0 0 0 [ 357.017573][ T9773] Node 1 Normal free:3902512kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16932kB local_pcp:7908kB free_cma:0kB [ 357.092517][ T9773] lowmem_reserve[]: 0 0 0 0 0 [ 357.097492][ T9773] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 357.150512][ T9773] Node 0 DMA32: 1516*4kB (UME) 557*8kB (UME) 840*16kB (UME) 634*32kB (UME) 382*64kB (UME) 374*128kB (UME) 123*256kB (UME) 77*512kB (UME) 40*1024kB (UM) 23*2048kB (UME) 281*4096kB (UM) = 1426520kB [ 357.249026][ T9804] ======================================================= [ 357.249026][ T9804] WARNING: The mand mount option has been deprecated and [ 357.249026][ T9804] and is ignored by this kernel. Remove the mand [ 357.249026][ T9804] option from the mount to silence this warning. [ 357.249026][ T9804] ======================================================= [ 357.442072][ T9773] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 357.576902][ T9773] Node 1 Normal: 200*4kB (UE) 42*8kB (UME) 38*16kB (UME) 93*32kB (UME) 19*64kB (UE) 8*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (U) 1*2048kB (E) 950*4096kB (M) = 3902512kB [ 357.755330][ T9773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 357.888151][ T9773] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 357.949300][ T9773] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 357.963666][ T9773] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 357.973181][ T9773] 63188 total pagecache pages [ 357.978025][ T9773] 0 pages in swap cache [ 357.982807][ T9773] Free swap = 124504kB [ 357.986977][ T9773] Total swap = 124996kB [ 357.991478][ T9773] 2097051 pages RAM [ 357.995841][ T9773] 0 pages HighMem/MovableOnly [ 358.000677][ T9773] 421729 pages reserved [ 358.004926][ T9773] 0 pages cma reserved [ 361.374999][ T28] audit: type=1326 audit(1794165541.582:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.4.1223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479ab9fb19 code=0x7ffc0000 [ 361.443629][ T28] audit: type=1326 audit(1794165541.612:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.4.1223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479ab9fb19 code=0x7ffc0000 [ 361.492140][ T28] audit: type=1326 audit(1794165541.612:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.4.1223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479ab9fb19 code=0x7ffc0000 [ 361.567993][ T28] audit: type=1326 audit(1794165541.622:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.4.1223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479ab9fb19 code=0x7ffc0000 [ 361.673882][ T28] audit: type=1326 audit(1794165541.622:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.4.1223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f479ab9fb19 code=0x7ffc0000 [ 361.698820][ T28] audit: type=1326 audit(1794165541.622:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.4.1223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479ab9fb19 code=0x7ffc0000 [ 361.722973][ T28] audit: type=1326 audit(1794165541.622:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.4.1223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479ab9fb19 code=0x7ffc0000 [ 361.841387][ T28] audit: type=1326 audit(1794165541.622:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.4.1223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479ab9fb19 code=0x7ffc0000 [ 361.937020][ T28] audit: type=1326 audit(1794165541.622:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.4.1223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479ab9fb19 code=0x7ffc0000 [ 362.108281][ T28] audit: type=1326 audit(1794165541.622:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.4.1223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f479ab9fb19 code=0x7ffc0000 [ 362.255017][ T9865] 9pnet_virtio: no channels available for device 127.0.0.1 [ 362.560521][ T9866] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 362.611828][ T9866] overlayfs: failed to set xattr on upper [ 362.637673][ T9866] overlayfs: ...falling back to redirect_dir=nofollow. [ 362.676274][ T9866] overlayfs: ...falling back to index=off. [ 362.682764][ T9866] overlayfs: ...falling back to uuid=null. [ 366.305289][ T9913] FAULT_INJECTION: forcing a failure. [ 366.305289][ T9913] name failslab, interval 1, probability 0, space 0, times 0 [ 366.341235][ T9913] CPU: 0 PID: 9913 Comm: syz.4.1237 Not tainted syzkaller #0 [ 366.348665][ T9913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 366.358739][ T9913] Call Trace: [ 366.362040][ T9913] [ 366.364993][ T9913] dump_stack_lvl+0x18c/0x250 [ 366.369712][ T9913] ? show_regs_print_info+0x20/0x20 [ 366.374996][ T9913] ? load_image+0x420/0x420 [ 366.379526][ T9913] ? __lock_acquire+0x7eb0/0x7eb0 [ 366.384561][ T9913] should_fail_ex+0x394/0x4c0 [ 366.389242][ T9913] should_failslab+0x9/0x20 [ 366.393745][ T9913] slab_pre_alloc_hook+0x59/0x300 [ 366.398771][ T9913] ? __se_sys_ioctl+0xfd/0x170 [ 366.403533][ T9913] ? do_syscall_64+0x55/0xb0 [ 366.408121][ T9913] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.414188][ T9913] kmem_cache_alloc_node+0x5e/0x320 [ 366.419381][ T9913] ? alloc_vmap_area+0x1b4/0x1e50 [ 366.424424][ T9913] alloc_vmap_area+0x1b4/0x1e50 [ 366.429297][ T9913] ? vm_map_ram+0xcf0/0xcf0 [ 366.433819][ T9913] ? rcu_is_watching+0x15/0xb0 [ 366.438596][ T9913] __get_vm_area_node+0x162/0x370 [ 366.443629][ T9913] __vmalloc_node_range+0x36f/0x1320 [ 366.448934][ T9913] ? kvm_dev_ioctl+0x208/0x1810 [ 366.453901][ T9913] ? snprintf+0xe9/0x140 [ 366.458162][ T9913] ? free_vm_area+0x50/0x50 [ 366.462672][ T9913] ? vscnprintf+0x80/0x80 [ 366.467002][ T9913] ? alloc_fd+0x590/0x640 [ 366.471336][ T9913] ? kvm_dev_ioctl+0x208/0x1810 [ 366.476183][ T9913] __vmalloc+0x7a/0x90 [ 366.480258][ T9913] ? kvm_dev_ioctl+0x208/0x1810 [ 366.485117][ T9913] kvm_dev_ioctl+0x208/0x1810 [ 366.489794][ T9913] ? __fget_files+0x28/0x460 [ 366.494384][ T9913] ? kvm_resume+0x1e0/0x1e0 [ 366.498886][ T9913] ? bpf_lsm_file_ioctl+0x9/0x10 [ 366.503822][ T9913] ? security_file_ioctl+0x80/0xa0 [ 366.508931][ T9913] ? kvm_resume+0x1e0/0x1e0 [ 366.513435][ T9913] __se_sys_ioctl+0xfd/0x170 [ 366.518027][ T9913] do_syscall_64+0x55/0xb0 [ 366.522442][ T9913] ? clear_bhb_loop+0x40/0x90 [ 366.527117][ T9913] ? clear_bhb_loop+0x40/0x90 [ 366.531792][ T9913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.537683][ T9913] RIP: 0033:0x7f479ab9fb19 [ 366.542093][ T9913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.561799][ T9913] RSP: 002b:00007f479bb04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.570217][ T9913] RAX: ffffffffffffffda RBX: 00007f479ae25fa0 RCX: 00007f479ab9fb19 [ 366.578202][ T9913] RDX: 0000000000000700 RSI: 000000000000ae01 RDI: 0000000000000005 [ 366.586172][ T9913] RBP: 00007f479ac37b70 R08: 0000000000000000 R09: 0000000000000000 [ 366.594140][ T9913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.602108][ T9913] R13: 00007f479ae26038 R14: 00007f479ae25fa0 R15: 00007ffd462ea5f8 [ 366.610124][ T9913] [ 366.624806][ T9913] syz.4.1237: vmalloc error: size 41464, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 367.797512][ T5867] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 367.828392][ T9913] CPU: 0 PID: 9913 Comm: syz.4.1237 Not tainted syzkaller #0 [ 367.835819][ T9913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 367.845898][ T9913] Call Trace: [ 367.849199][ T9913] [ 367.852151][ T9913] dump_stack_lvl+0x18c/0x250 [ 367.856863][ T9913] ? show_regs_print_info+0x20/0x20 [ 367.862090][ T9913] ? load_image+0x420/0x420 [ 367.866630][ T9913] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 367.873069][ T9913] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 367.879597][ T9913] warn_alloc+0x246/0x340 [ 367.883986][ T9913] ? slab_free_freelist_hook+0x154/0x240 [ 367.890081][ T9913] ? zone_watermark_ok_safe+0x230/0x230 [ 367.895676][ T9913] ? __get_vm_area_node+0x17b/0x370 [ 367.900907][ T9913] ? __get_vm_area_node+0x17b/0x370 [ 367.906141][ T9913] __vmalloc_node_range+0x394/0x1320 [ 367.911478][ T9913] ? snprintf+0xe9/0x140 [ 367.915745][ T9913] ? free_vm_area+0x50/0x50 [ 367.920275][ T9913] ? vscnprintf+0x80/0x80 [ 367.924639][ T9913] ? alloc_fd+0x590/0x640 [ 367.929012][ T9913] ? kvm_dev_ioctl+0x208/0x1810 [ 367.933885][ T9913] __vmalloc+0x7a/0x90 [ 367.937983][ T9913] ? kvm_dev_ioctl+0x208/0x1810 [ 367.942856][ T9913] kvm_dev_ioctl+0x208/0x1810 [ 367.947557][ T9913] ? __fget_files+0x28/0x460 [ 367.952172][ T9913] ? kvm_resume+0x1e0/0x1e0 [ 367.956702][ T9913] ? bpf_lsm_file_ioctl+0x9/0x10 [ 367.961661][ T9913] ? security_file_ioctl+0x80/0xa0 [ 367.966794][ T9913] ? kvm_resume+0x1e0/0x1e0 [ 367.971316][ T9913] __se_sys_ioctl+0xfd/0x170 [ 367.975934][ T9913] do_syscall_64+0x55/0xb0 [ 367.980459][ T9913] ? clear_bhb_loop+0x40/0x90 [ 367.985156][ T9913] ? clear_bhb_loop+0x40/0x90 [ 367.989856][ T9913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.995769][ T9913] RIP: 0033:0x7f479ab9fb19 [ 368.000205][ T9913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.019844][ T9913] RSP: 002b:00007f479bb04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.028300][ T9913] RAX: ffffffffffffffda RBX: 00007f479ae25fa0 RCX: 00007f479ab9fb19 [ 368.028955][ T5867] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 368.036273][ T9913] RDX: 0000000000000700 RSI: 000000000000ae01 RDI: 0000000000000005 [ 368.052847][ T9913] RBP: 00007f479ac37b70 R08: 0000000000000000 R09: 0000000000000000 [ 368.060843][ T9913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.068837][ T9913] R13: 00007f479ae26038 R14: 00007f479ae25fa0 R15: 00007ffd462ea5f8 [ 368.072845][ T5867] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 368.076854][ T9913] [ 368.144845][ T9913] Mem-Info: [ 368.148431][ T9913] active_anon:34856 inactive_anon:0 isolated_anon:0 [ 368.148431][ T9913] active_file:21438 inactive_file:40374 isolated_file:0 [ 368.148431][ T9913] unevictable:768 dirty:149 writeback:0 [ 368.148431][ T9913] slab_reclaimable:11213 slab_unreclaimable:95060 [ 368.148431][ T9913] mapped:24365 shmem:29974 pagetables:632 [ 368.148431][ T9913] sec_pagetables:0 bounce:0 [ 368.148431][ T9913] kernel_misc_reclaimable:0 [ 368.148431][ T9913] free:1302276 free_pcp:14466 free_cma:0 [ 368.195686][ T5867] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 368.242446][ T5867] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 368.252600][ T9913] Node 0 active_anon:128424kB inactive_anon:0kB active_file:85752kB inactive_file:161292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97460kB dirty:596kB writeback:0kB shmem:107560kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11768kB pagetables:2528kB sec_pagetables:0kB all_unreclaimable? no [ 368.307833][ T5867] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 368.350590][ T5867] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 368.373379][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 368.386076][ T5867] usb 2-1: Product: syz [ 368.391558][ T5867] usb 2-1: Manufacturer: syz [ 368.427631][ T9913] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 368.484624][ T5867] cdc_wdm 2-1:1.0: skipping garbage [ 368.494868][ T5867] cdc_wdm 2-1:1.0: skipping garbage [ 368.523824][ T5867] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 368.537542][ T9913] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 368.543551][ T5867] cdc_wdm 2-1:1.0: Unknown control protocol [ 368.627898][ T9913] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 368.634280][ T9913] Node 0 DMA32 free:1357768kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:94384kB inactive_anon:0kB active_file:85752kB inactive_file:160468kB unevictable:1536kB writepending:596kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:20260kB local_pcp:8696kB free_cma:0kB [ 368.702514][ T9913] lowmem_reserve[]: 0 0 0 0 0 [ 368.707314][ T9913] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 368.818341][ T9913] lowmem_reserve[]: 0 0 0 0 0 [ 368.823145][ T9913] Node 1 Normal free:3902512kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16932kB local_pcp:7908kB free_cma:0kB [ 368.916465][ T9913] lowmem_reserve[]: 0 0 0 0 0 [ 368.983492][ T9913] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 369.058850][ T9913] Node 0 DMA32: 1519*4kB (UME) 890*8kB (UME) 627*16kB (UME) 655*32kB (UME) 305*64kB (UME) 365*128kB (UME) 74*256kB (UME) 7*512kB (UME) 40*1024kB (UM) 23*2048kB (UME) 282*4096kB (UM) = 1376092kB [ 369.097303][ C1] cdc_wdm 2-1:1.0: Unexpected error -71 [ 369.104099][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 369.107935][ T9913] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 369.110942][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 369.122885][ T9913] Node 1 Normal: 200*4kB (UE) 42*8kB (UME) 38*16kB (UME) 93*32kB (UME) 19*64kB (UE) 8*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (U) 1*2048kB (E) 950*4096kB (M) = 3902512kB [ 369.130258][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 369.152856][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 369.166764][ T9913] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 369.167930][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 369.177787][ T9913] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 369.182917][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 369.192580][ T9913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 369.200158][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 369.214460][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 369.221374][ T9913] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 369.221603][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 369.237307][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 369.243659][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 369.250286][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 369.256545][ T9913] 75552 total pagecache pages [ 369.257016][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 369.267840][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 369.274161][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 369.276876][ T9913] 0 pages in swap cache [ 369.280765][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 369.280980][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 369.297726][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 369.304044][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 369.304399][ T9913] Free swap = 124504kB [ 369.310637][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 369.469580][ T9913] Total swap = 124996kB [ 369.507506][ T9913] 2097051 pages RAM [ 369.537667][ T9913] 0 pages HighMem/MovableOnly [ 369.579633][ T9913] 421729 pages reserved [ 369.617081][ T9913] 0 pages cma reserved [ 370.144755][ T27] usb 2-1: USB disconnect, device number 4 [ 370.150663][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 371.023632][ T9949] Process accounting resumed [ 373.029237][ T9989] FAULT_INJECTION: forcing a failure. [ 373.029237][ T9989] name fail_futex, interval 1, probability 0, space 0, times 0 [ 373.045190][ T9989] CPU: 1 PID: 9989 Comm: syz.2.1252 Not tainted syzkaller #0 [ 373.052608][ T9989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 373.062686][ T9989] Call Trace: [ 373.065982][ T9989] [ 373.068933][ T9989] dump_stack_lvl+0x18c/0x250 [ 373.073645][ T9989] ? show_regs_print_info+0x20/0x20 [ 373.078875][ T9989] ? load_image+0x420/0x420 [ 373.083424][ T9989] should_fail_ex+0x394/0x4c0 [ 373.088134][ T9989] get_futex_key+0x134/0xf40 [ 373.092931][ T9989] ? futex_setup_timer+0xc0/0xc0 [ 373.097889][ T9989] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 373.103244][ T5872] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 373.103874][ T9989] ? __lock_acquire+0x7eb0/0x7eb0 [ 373.116423][ T9989] ? lock_chain_count+0x20/0x20 [ 373.121309][ T9989] futex_wait_setup+0xbc/0x270 [ 373.126111][ T9989] ? futex_wait_multiple+0x970/0x970 [ 373.131429][ T9989] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 373.137454][ T9989] ? _raw_spin_unlock+0x40/0x40 [ 373.142340][ T9989] futex_wait+0x1cf/0x640 [ 373.146717][ T9989] ? futex_wait_setup+0x270/0x270 [ 373.151797][ T9989] do_futex+0x2ff/0x3e0 [ 373.155986][ T9989] ? __ia32_sys_get_robust_list+0x110/0x110 [ 373.161914][ T9989] __se_sys_futex+0x3a9/0x440 [ 373.166623][ T9989] ? __x64_sys_futex+0xf0/0xf0 [ 373.171423][ T9989] ? __x64_sys_futex+0x21/0xf0 [ 373.176215][ T9989] do_syscall_64+0x55/0xb0 [ 373.180659][ T9989] ? clear_bhb_loop+0x40/0x90 [ 373.185363][ T9989] ? clear_bhb_loop+0x40/0x90 [ 373.190077][ T9989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.195998][ T9989] RIP: 0033:0x7f8711b9fb19 [ 373.200435][ T9989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.220069][ T9989] RSP: 002b:00007f871298d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 373.228517][ T9989] RAX: ffffffffffffffda RBX: 00007f8711e25fa8 RCX: 00007f8711b9fb19 [ 373.236517][ T9989] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8711e25fa8 [ 373.244509][ T9989] RBP: 00007f8711e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 373.252500][ T9989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.260486][ T9989] R13: 00007f8711e26038 R14: 00007ffe48fc8870 R15: 00007ffe48fc8958 [ 373.268496][ T9989] [ 373.500904][ T5872] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.518236][ T5872] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 373.538942][ T5872] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.124502][ T5872] usb 1-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 374.142601][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.636295][ T5872] rtsx_usb: probe of 1-1:1.0 failed with error -8 [ 375.760432][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 375.784268][ T57] usb 1-1: USB disconnect, device number 7 [ 376.009264][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.024547][ T27] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 376.042303][ T27] usb 3-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 376.074842][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.330222][ T27] usb 3-1: dvb_usb_v2: usb_bulk_msg() write length=12, actual=0 [ 376.366451][ T27] dvb_usb_af9035: probe of 3-1:1.0 failed with error -5 [ 376.379250][ T27] usb 3-1: USB disconnect, device number 3 [ 378.890835][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.897172][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.457834][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 379.638463][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 379.651419][ T27] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 379.671913][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 379.685351][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 379.700849][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 379.711252][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.726966][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 379.744797][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.973320][ T27] usb 5-1: GET_CAPABILITIES returned 0 [ 379.984338][ T27] usbtmc 5-1:16.0: can't read capabilities [ 380.155441][T10103] bonding: b is being created... [ 380.209298][ T27] usb 5-1: USB disconnect, device number 2 [ 380.485805][T10120] block device autoloading is deprecated and will be removed. [ 380.853113][T10134] input: syz1 as /devices/virtual/input/input12 [ 386.098793][T10216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1317'. [ 386.633411][ C0] Unknown status report in ack skb [ 386.952118][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 386.952132][ T28] audit: type=1326 audit(1794165567.162:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.0.1333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5eb9fb19 code=0x7ffc0000 [ 386.996512][ T28] audit: type=1326 audit(1794165567.162:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.0.1333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5eb9fb19 code=0x7ffc0000 [ 387.026147][ T28] audit: type=1326 audit(1794165567.202:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.0.1333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5eb9fb19 code=0x7ffc0000 [ 387.081818][ T28] audit: type=1326 audit(1794165567.202:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.0.1333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5eb9fb19 code=0x7ffc0000 [ 387.117574][ T28] audit: type=1326 audit(1794165567.202:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.0.1333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3c5eb9fb19 code=0x7ffc0000 [ 387.171557][ T28] audit: type=1326 audit(1794165567.202:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.0.1333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5eb9fb19 code=0x7ffc0000 [ 387.201107][ T28] audit: type=1326 audit(1794165567.202:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.0.1333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5eb9fb19 code=0x7ffc0000 [ 387.448035][ T28] audit: type=1326 audit(1794165567.222:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.0.1333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5eb9fb19 code=0x7ffc0000 [ 388.079078][ T28] audit: type=1326 audit(1794165567.222:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.0.1333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5eb9fb19 code=0x7ffc0000 [ 388.124090][ T28] audit: type=1326 audit(1794165567.222:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.0.1333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f3c5eb9fb19 code=0x7ffc0000 [ 388.317610][ T2131] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 389.242337][ T2131] usb 1-1: Using ep0 maxpacket: 32 [ 389.257344][ T2131] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 389.270076][ T2131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.288728][ T2131] usb 1-1: config 0 descriptor?? [ 389.316441][ T2131] as10x_usb: device has been detected [ 389.334140][ T2131] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 389.416077][ T2131] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 389.521301][ T2131] as10x_usb: error during firmware upload part1 [ 390.672272][ T2131] Registered device nBox DVB-T Dongle [ 390.675186][ T2131] usb 1-1: USB disconnect, device number 8 [ 390.710550][ T2131] Unregistered device nBox DVB-T Dongle [ 390.712413][ T2131] as10x_usb: device has been disconnected [ 394.164615][T10339] FAULT_INJECTION: forcing a failure. [ 394.164615][T10339] name failslab, interval 1, probability 0, space 0, times 0 [ 394.201621][T10339] CPU: 1 PID: 10339 Comm: syz.4.1360 Not tainted syzkaller #0 [ 394.209143][T10339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 394.219222][T10339] Call Trace: [ 394.222519][T10339] [ 394.225462][T10339] dump_stack_lvl+0x18c/0x250 [ 394.230169][T10339] ? show_regs_print_info+0x20/0x20 [ 394.235395][T10339] ? load_image+0x420/0x420 [ 394.239929][T10339] ? __might_sleep+0xe0/0xe0 [ 394.244576][T10339] ? __lock_acquire+0x7eb0/0x7eb0 [ 394.249630][T10339] should_fail_ex+0x394/0x4c0 [ 394.254342][T10339] should_failslab+0x9/0x20 [ 394.258862][T10339] slab_pre_alloc_hook+0x59/0x300 [ 394.263900][T10339] ? d_instantiate+0x6f/0x90 [ 394.266783][ T5895] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 394.268491][T10339] kmem_cache_alloc+0x5a/0x2d0 [ 394.268513][T10339] ? alloc_empty_file+0x9e/0x1d0 [ 394.285686][T10339] alloc_empty_file+0x9e/0x1d0 [ 394.290481][T10339] alloc_file+0x5b/0x600 [ 394.294756][T10339] alloc_file_pseudo+0x184/0x210 [ 394.299717][T10339] ? fput+0x1a0/0x1a0 [ 394.303716][T10339] ? anon_inode_make_secure_inode+0xfb/0x160 [ 394.309718][T10339] ? do_compat_epoll_pwait+0x230/0x230 [ 394.315206][T10339] ? __might_fault+0xaa/0x120 [ 394.319903][T10339] __anon_inode_getfile+0x129/0x200 [ 394.325121][T10339] io_uring_create+0xbec/0x1330 [ 394.329998][T10339] __se_sys_io_uring_setup+0x29f/0x2b0 [ 394.335510][T10339] ? __x64_sys_io_uring_setup+0x60/0x60 [ 394.341096][T10339] ? lockdep_hardirqs_on+0x98/0x150 [ 394.346310][T10339] do_syscall_64+0x55/0xb0 [ 394.350769][T10339] ? clear_bhb_loop+0x40/0x90 [ 394.355463][T10339] ? clear_bhb_loop+0x40/0x90 [ 394.360155][T10339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.366066][T10339] RIP: 0033:0x7f479ab9fb19 [ 394.370492][T10339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.390111][T10339] RSP: 002b:00007f479bb03fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 394.398545][T10339] RAX: ffffffffffffffda RBX: 0000200000000680 RCX: 00007f479ab9fb19 [ 394.406528][T10339] RDX: 0000200000000740 RSI: 0000200000000680 RDI: 0000000000000d00 [ 394.414510][T10339] RBP: 00007f479ac37b70 R08: 0000000000000000 R09: 0000000000000000 [ 394.422494][T10339] R10: 0000200000000780 R11: 0000000000000206 R12: 0000200000000740 [ 394.430475][T10339] R13: 0000200000000780 R14: 0000200000000700 R15: 00007ffd462ea5f8 [ 394.438476][T10339] [ 394.557593][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 394.564996][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.583099][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.605735][ T5895] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 394.626631][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.665705][ T5895] usb 2-1: config 0 descriptor?? [ 394.740388][T10352] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1363'. [ 395.721581][T10353] block device autoloading is deprecated and will be removed. [ 396.153006][ T5895] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 396.176355][ T5895] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 396.419062][ T5895] ft260 0003:0403:6030.0003: chip code: 0000 0000 [ 397.166371][ T57] usb 2-1: USB disconnect, device number 5 [ 397.327534][ T2131] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 398.677506][ T2131] usb 3-1: Using ep0 maxpacket: 32 [ 398.684704][ T2131] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 398.704273][ T2131] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 398.737833][ T2131] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 398.746891][ T2131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 398.815204][ T2131] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 398.837316][ T2131] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 398.866415][ T2131] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 398.875697][ T2131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.886182][ T2131] usb 3-1: config 0 descriptor?? [ 399.733088][ T2131] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 399.783658][ T2131] usb 3-1: USB disconnect, device number 4 [ 399.811894][ T2131] usblp0: removed [ 401.255883][T10399] block nbd0: not configured, cannot reconfigure [ 402.217944][ C0] ------------[ cut here ]------------ [ 402.223478][ C0] WARNING: CPU: 0 PID: 9167 at net/mac80211/tx.c:5135 __ieee80211_beacon_get+0x1141/0x1520 [ 402.233665][ C0] Modules linked in: [ 402.237616][ C0] CPU: 0 PID: 9167 Comm: kworker/u4:18 Not tainted syzkaller #0 [ 402.245268][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 402.255387][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 402.262251][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 402.268620][ C0] Code: f7 4c 89 ef e8 90 08 b1 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 5b aa 72 f7 0f 0b e9 61 f8 ff ff e8 4f aa 72 f7 <0f> 0b e9 85 fb ff ff e8 43 aa 72 f7 48 c7 c7 a0 f3 66 8f 4c 89 e6 [ 402.288283][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 402.294384][ C0] RAX: ffffffff8a153451 RBX: dffffc0000000000 RCX: ffff8880237abc00 [ 402.302402][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 402.310412][ C0] RBP: 0000000000000000 R08: ffff8880237abc00 R09: 0000000000000003 [ 402.318439][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805a2aa420 [ 402.326434][ C0] R13: ffff888031687024 R14: ffff88805a2aa910 R15: ffff888031687000 [ 402.334463][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 402.343452][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 402.350086][ C0] CR2: 0000001b2d619ff8 CR3: 0000000030bba000 CR4: 00000000003506f0 [ 402.358112][ C0] Call Trace: [ 402.361407][ C0] [ 402.364267][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 402.369878][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 402.375371][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 402.382201][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 402.387812][ C0] __iterate_interfaces+0x225/0x4c0 [ 402.393127][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 402.399426][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 402.406654][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 402.412954][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 402.420036][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 402.425259][ C0] ? hw_scan_work+0xf10/0xf10 [ 402.429990][ C0] __hrtimer_run_queues+0x525/0xc10 [ 402.435234][ C0] ? hrtimer_interrupt+0x980/0x980 [ 402.440399][ C0] ? read_tsc+0x9/0x20 [ 402.444524][ C0] hrtimer_run_softirq+0x177/0x290 [ 402.449693][ C0] handle_softirqs+0x27d/0x820 [ 402.454478][ C0] ? read_tsc+0x9/0x20 [ 402.458594][ C0] ? ktime_get+0x24b/0x280 [ 402.463034][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 402.467849][ C0] ? do_softirq+0x1a0/0x1a0 [ 402.472378][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 402.477633][ C0] __irq_exit_rcu+0xd3/0x190 [ 402.482245][ C0] ? irq_exit_rcu+0x20/0x20 [ 402.486781][ C0] irq_exit_rcu+0x9/0x20 [ 402.491076][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 402.496745][ C0] [ 402.499724][ C0] [ 402.502672][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 402.508704][ C0] RIP: 0010:crng_make_state+0x41b/0x700 [ 402.514306][ C0] Code: 8c 8e e8 68 9c f0 05 e9 45 fe ff ff e8 7e e7 d6 fc e8 59 eb e6 05 4d 85 ff 74 8c e8 6f e7 d6 fc fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 04 26 00 00 00 00 43 c7 44 26 08 00 00 00 00 65 48 8b 04 25 [ 402.533970][ C0] RSP: 0018:ffffc900038778c0 EFLAGS: 00000293 [ 402.540089][ C0] RAX: ffffffff84b0f731 RBX: 0000000000000000 RCX: ffff8880237abc00 [ 402.548103][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 402.556092][ C0] RBP: ffffc900038779b0 R08: ffffffff922235f7 R09: 1ffffffff24446be [ 402.564108][ C0] R10: dffffc0000000000 R11: fffffbfff24446bf R12: dffffc0000000000 [ 402.572126][ C0] R13: ffff8880b8c39050 R14: 1ffff9200070ef20 R15: 0000000000000200 [ 402.580154][ C0] ? crng_make_state+0x411/0x700 [ 402.585134][ C0] ? crng_make_state+0x142/0x700 [ 402.590131][ C0] ? urandom_read_iter+0x140/0x140 [ 402.595545][ C0] _get_random_bytes+0x100/0x250 [ 402.600533][ C0] ? get_random_bytes+0x20/0x20 [ 402.605408][ C0] ? __kmalloc_node_track_caller+0xe2/0x230 [ 402.611390][ C0] ? __alloc_skb+0x1b2/0x2c0 [ 402.616054][ C0] ? skb_put+0x112/0x210 [ 402.620354][ C0] nsim_dev_trap_report_work+0x2e9/0xa90 [ 402.626021][ C0] ? process_scheduled_works+0x975/0x1600 [ 402.631794][ C0] process_scheduled_works+0xa60/0x1600 [ 402.637428][ C0] ? worker_attach_to_pool+0x370/0x370 [ 402.642919][ C0] ? assign_work+0x3cc/0x5d0 [ 402.647562][ C0] worker_thread+0xa5e/0xfe0 [ 402.652207][ C0] kthread+0x2fa/0x390 [ 402.656292][ C0] ? pr_cont_work+0x550/0x550 [ 402.661022][ C0] ? kthread_blkcg+0xd0/0xd0 [ 402.665632][ C0] ret_from_fork+0x48/0x80 [ 402.670105][ C0] ? kthread_blkcg+0xd0/0xd0 [ 402.674732][ C0] ret_from_fork_asm+0x11/0x20 [ 402.679564][ C0] [ 402.682597][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 402.689881][ C0] CPU: 0 PID: 9167 Comm: kworker/u4:18 Not tainted syzkaller #0 [ 402.697520][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 402.707589][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 402.714371][ C0] Call Trace: [ 402.717660][ C0] [ 402.720510][ C0] dump_stack_lvl+0x18c/0x250 [ 402.725208][ C0] ? show_regs_print_info+0x20/0x20 [ 402.730428][ C0] ? load_image+0x420/0x420 [ 402.734962][ C0] panic+0x2ca/0x720 [ 402.738880][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 402.743402][ C0] ? ret_from_fork_asm+0x11/0x20 [ 402.748363][ C0] __warn+0x2e0/0x470 [ 402.752357][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 402.758087][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 402.763816][ C0] report_bug+0x2be/0x4f0 [ 402.768253][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 402.773991][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 402.779721][ C0] ? __ieee80211_beacon_get+0x1143/0x1520 [ 402.785450][ C0] handle_bug+0xcf/0x120 [ 402.789711][ C0] exc_invalid_op+0x1a/0x50 [ 402.794233][ C0] asm_exc_invalid_op+0x1a/0x20 [ 402.799101][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 402.805442][ C0] Code: f7 4c 89 ef e8 90 08 b1 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 5b aa 72 f7 0f 0b e9 61 f8 ff ff e8 4f aa 72 f7 <0f> 0b e9 85 fb ff ff e8 43 aa 72 f7 48 c7 c7 a0 f3 66 8f 4c 89 e6 [ 402.825061][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 402.831143][ C0] RAX: ffffffff8a153451 RBX: dffffc0000000000 RCX: ffff8880237abc00 [ 402.839131][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 402.847114][ C0] RBP: 0000000000000000 R08: ffff8880237abc00 R09: 0000000000000003 [ 402.855099][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805a2aa420 [ 402.863078][ C0] R13: ffff888031687024 R14: ffff88805a2aa910 R15: ffff888031687000 [ 402.871076][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 402.876821][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 402.882555][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 402.888125][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 402.893599][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 402.900385][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 402.905960][ C0] __iterate_interfaces+0x225/0x4c0 [ 402.911176][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 402.917433][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 402.924647][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 402.930903][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 402.937950][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 402.943166][ C0] ? hw_scan_work+0xf10/0xf10 [ 402.947858][ C0] __hrtimer_run_queues+0x525/0xc10 [ 402.953089][ C0] ? hrtimer_interrupt+0x980/0x980 [ 402.958213][ C0] ? read_tsc+0x9/0x20 [ 402.962319][ C0] hrtimer_run_softirq+0x177/0x290 [ 402.967468][ C0] handle_softirqs+0x27d/0x820 [ 402.972254][ C0] ? read_tsc+0x9/0x20 [ 402.976337][ C0] ? ktime_get+0x24b/0x280 [ 402.980781][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 402.985569][ C0] ? do_softirq+0x1a0/0x1a0 [ 402.990092][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 402.995315][ C0] __irq_exit_rcu+0xd3/0x190 [ 402.999925][ C0] ? irq_exit_rcu+0x20/0x20 [ 403.004454][ C0] irq_exit_rcu+0x9/0x20 [ 403.008713][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 403.014376][ C0] [ 403.017312][ C0] [ 403.020248][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 403.026266][ C0] RIP: 0010:crng_make_state+0x41b/0x700 [ 403.031855][ C0] Code: 8c 8e e8 68 9c f0 05 e9 45 fe ff ff e8 7e e7 d6 fc e8 59 eb e6 05 4d 85 ff 74 8c e8 6f e7 d6 fc fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 04 26 00 00 00 00 43 c7 44 26 08 00 00 00 00 65 48 8b 04 25 [ 403.051483][ C0] RSP: 0018:ffffc900038778c0 EFLAGS: 00000293 [ 403.057572][ C0] RAX: ffffffff84b0f731 RBX: 0000000000000000 RCX: ffff8880237abc00 [ 403.065554][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 403.073533][ C0] RBP: ffffc900038779b0 R08: ffffffff922235f7 R09: 1ffffffff24446be [ 403.081520][ C0] R10: dffffc0000000000 R11: fffffbfff24446bf R12: dffffc0000000000 [ 403.089506][ C0] R13: ffff8880b8c39050 R14: 1ffff9200070ef20 R15: 0000000000000200 [ 403.097501][ C0] ? crng_make_state+0x411/0x700 [ 403.102472][ C0] ? crng_make_state+0x142/0x700 [ 403.107422][ C0] ? urandom_read_iter+0x140/0x140 [ 403.112560][ C0] _get_random_bytes+0x100/0x250 [ 403.117529][ C0] ? get_random_bytes+0x20/0x20 [ 403.122400][ C0] ? __kmalloc_node_track_caller+0xe2/0x230 [ 403.128336][ C0] ? __alloc_skb+0x1b2/0x2c0 [ 403.132937][ C0] ? skb_put+0x112/0x210 [ 403.137199][ C0] nsim_dev_trap_report_work+0x2e9/0xa90 [ 403.142861][ C0] ? process_scheduled_works+0x975/0x1600 [ 403.148608][ C0] process_scheduled_works+0xa60/0x1600 [ 403.154202][ C0] ? worker_attach_to_pool+0x370/0x370 [ 403.159701][ C0] ? assign_work+0x3cc/0x5d0 [ 403.164315][ C0] worker_thread+0xa5e/0xfe0 [ 403.168950][ C0] kthread+0x2fa/0x390 [ 403.173031][ C0] ? pr_cont_work+0x550/0x550 [ 403.177733][ C0] ? kthread_blkcg+0xd0/0xd0 [ 403.182335][ C0] ret_from_fork+0x48/0x80 [ 403.186764][ C0] ? kthread_blkcg+0xd0/0xd0 [ 403.191455][ C0] ret_from_fork_asm+0x11/0x20 [ 403.196252][ C0] [ 403.199520][ C0] Kernel Offset: disabled [ 403.203873][ C0] Rebooting in 86400 seconds..