last executing test programs: 5m9.30450906s ago: executing program 3 (id=155): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf09000000000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 5m7.334792805s ago: executing program 3 (id=159): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {0x0}], 0x2) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10042008) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[], 0x50) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) shutdown(0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv4_newrule={0x34, 0x20, 0x10, 0x70bd27, 0x25dfdbfd, {0x2, 0x10, 0x10, 0xfa, 0xf, 0x0, 0x0, 0x6}, [@FRA_SRC={0x8, 0x2, @multicast2}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010100}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4005}, 0x4814) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) connect$l2tp6(r2, &(0x7f0000000400)={0xa, 0x0, 0xa9cb, @remote, 0x1ff}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2, 0x0, 0xa}, 0x18) ioctl(r0, 0x100, &(0x7f0000000000)="376761f404e9ef224276f35e3db50cdc9af6e2f6e770b1646b47dfbc08c0522da6927f26146f9527d19cf98e42e8b62db2d8c6d0aeaa4629f35ae22476f04331633aede264d99860524c9f4c694e17a34527c10d6aa4e937f081be99ec0867a0e5302d6cf9db29849950cbb141b80cb6425dacb40fa6e5902486ce296f1c381a25312df2ddd21c") sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=@newlink={0x40, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f24c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x4}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x40) 5m4.884093134s ago: executing program 3 (id=164): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000)=0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x78, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x30}, &(0x7f0000000140)=0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="7c36eed54e72c5aa00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r7, 0x80184132, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="aeee54f57acda6d9bb53ceed68b9d0a3e0bd49cfad73e4f3d168c41b118dfaf622735ad040bb4dc9b5dc96bcd3d2b8c1c363ca90dc8e6e002b4b"], 0x28}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={r3, @in={{0x2, 0x4e22, @local}}, 0xf, 0x7, 0x5, 0xd77d, 0x60, 0x5, 0x3}, 0x9c) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) 4m54.411187122s ago: executing program 3 (id=178): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) setrlimit(0xb, &(0x7f0000000280)={0x10, 0x5}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x1e, 0x805, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x9472) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000240)=@ng={0x4, 0x12}, 0x2, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x12, &(0x7f0000000440)=0x8, 0x4) 4m51.439859068s ago: executing program 3 (id=185): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, &(0x7f0000000340)) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x101, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x82) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) setsockopt$inet_buf(r4, 0x0, 0x26, &(0x7f00000003c0)="310e69f617fecde753a4bc7b1c987ee852db3dde9557eb8ccfd0671d2d70dae6edb46cfdbdc5f7589c5b04dac5735e375f373e073915df8bc1be1fd7008b9454d408e0ea1cb35223c805032d3ef0bef0204984bc34d5cc74f0692883b041ca1c7e6fc862c99a622faf090a9ff5db0ec26d9194887ad7b400b405d8927dc4376deb7ba0918d14facea2024d2571273a6a158e34c22c85fd69785676d9ede325ad30cbe040a7e18ac950d9c2baa9a3eff6fefc4a8abd167afa87eb0975d6256cf8f527b1d95a855dd9fec160bb1d7d9db786d1dc51c260d5641cfa5cff51ce7ea2d2", 0xe1) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x101, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, 0x0, &(0x7f00000002c0)}, 0x20) sendmsg$rds(r8, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=[@rdma_args={0x48, 0x114, 0x1, {{0x6, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/99, 0x63}], 0x1, 0x60, 0xfffffffefffffffe}}, @rdma_args={0x48, 0x114, 0x1, {{0x5, 0xa980}, {&(0x7f0000000740)=""/241, 0xf1}, &(0x7f0000000a40)=[{&(0x7f0000000880)=""/171, 0xab}, {&(0x7f0000000180)=""/20, 0x14}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/47, 0x2f}, {&(0x7f0000000940)=""/230, 0xe6}], 0x5, 0x10, 0x1}}], 0x90, 0x8004}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4m49.656261374s ago: executing program 3 (id=187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_settime(0x0, &(0x7f0000000240)) mount$fuse(0x0, 0x0, 0x0, 0x5, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)={[&(0x7f0000000180)='\x00', &(0x7f00000001c0)='){\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='GPL\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', 0x0]}, &(0x7f0000000780)={[&(0x7f0000000480)='GPL\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='GPL\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='-\x00', &(0x7f0000000640)=']\x00', &(0x7f0000000680)='GPL\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='*@([\x00', &(0x7f0000000740)='GPL\x00']}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0) prctl$PR_GET_DUMPABLE(0x26) write(0xffffffffffffffff, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) 4m33.876057148s ago: executing program 32 (id=187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_settime(0x0, &(0x7f0000000240)) mount$fuse(0x0, 0x0, 0x0, 0x5, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)={[&(0x7f0000000180)='\x00', &(0x7f00000001c0)='){\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='GPL\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', 0x0]}, &(0x7f0000000780)={[&(0x7f0000000480)='GPL\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='GPL\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='-\x00', &(0x7f0000000640)=']\x00', &(0x7f0000000680)='GPL\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='*@([\x00', &(0x7f0000000740)='GPL\x00']}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0) prctl$PR_GET_DUMPABLE(0x26) write(0xffffffffffffffff, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) 15.551329953s ago: executing program 4 (id=667): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)='\b', 0x1}], 0x1) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x52) 11.652307212s ago: executing program 2 (id=672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) epoll_create1(0x80000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14}}, 0xd4}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={r1, 0xa68, 0x1, "ae"}, 0x9) r3 = gettid() futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x10021, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 11.489650424s ago: executing program 5 (id=674): syz_emit_vhci(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x1e, 0x805, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x9472) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000240)=@ng={0x4, 0x12}, 0x2, 0x0) dup3(r4, r3, 0x0) finit_module(r4, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x12, &(0x7f0000000440)=0x8, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x5c}}, 0x800) 10.092673412s ago: executing program 2 (id=676): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x0, 0x31363553, 0x1, @discrete={0x200, 0x1}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x1800, &(0x7f0000000100)=@base={0x5, 0x7f, 0xef0, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 9.767231414s ago: executing program 5 (id=678): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x21, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ae9b714001222c01d9"], 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$nl_route(r0, 0x0, 0x40084c0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r3, 0x0, 0xf, 0x0, &(0x7f00000001c0)) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000001080000020000002b5b0914ec6cec0f7f3f2ee3c50c20353aff"]) 9.479664799s ago: executing program 0 (id=679): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) socket$inet(0x2, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x505}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x60982, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000ffdbdf253900000008000300", @ANYRES32=r5, @ANYBLOB="14005a8010000080050002005400000004000100"], 0x30}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$alg(0x26, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010000000100ffdbdf2502180000ff0000080000000008000100ac141400"], 0x24}}, 0x0) r7 = socket$inet_sctp(0x2, 0xffffffffffffffff, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000000), 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@delqdisc={0x34, 0x25, 0x800, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xbd7f984858d56822, 0x1}, {0x3, 0xf}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_INGRESS_BLOCK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) 9.188528722s ago: executing program 4 (id=680): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000005b1953e7203b3833b487e3c4bd4540e4b6e87b7891e0f159182f542be18de00d9d95e1c4a6b62a3c065fc1a7b4c144cc2508eba2540e3425abc138dbaf9f6da59d9c77cbe2a8a9666a08ed1704c6bb2e422f01d64cae3050d7bd3c10b0e80d9483a2e36568cf0c6a1b78d9ca2f8065a1d7b4b0eeeecaa3c865de68042c9ab36e8a43b97955b04e5351f99c682a939832582c0dfd64028580c33fca4ca652f4c4e116c16e0f76fd9379599b54e06a8662f81fe375751e06007efabbd87b82d35367257d1bc15f92370261aace269013bc00b86daae71e253200000000b1467c86aff0ee8ff6c53939acb3866e8247eff7c10f000200000e6bd59e5b4dbc12ce8f0a5f816382fc66bcf14bb83ce2336b93b90594b78301e696503eea3404fe7dc3a8a5f9fde10f53e458e9efbe57fb52e85ea5346ed9f42418aefc6052afd588f8ae73eaab3af38936bfdadc91cda3983de6513ef3c2e58a54ffb1921aab1df971cdc2b2ab17bc9e421b5991b6036f845313a4a5f9d8a36472d7d758d73e9be967ca3fdae7d7ba03a8d9e5962c67ca30e5b6eb3c524c22632e47f18c879f0564361ef35aba5ed3f2d1b0bc6954e7e2dc49106ce8a49b48812ad3f5f8391c14ecde831be42d15bdc797c2b9ab30a8e90d7d53784e7add8e5bd5b6797a63e48efa0eb4d1df88ea8b388e94c6a15ac4e22447dad331244a38a5a2e294905611bfeadcac35f6ccf6af94191954c6b840a3092ef94d1e0e23019fbbdcd5b47e4a565ce42d0bbd7b14f9df1139c15ee4d687fe0861a8210071ebeb63606d28dcb5404e077400bd04453c49d0e2e0bb2700000046a4e564ba31c3d62f2d0fb6b7630f66f086e36885c3634a522888f1c4049361"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r1 = socket(0x10, 0x800000000080002, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = fsopen(0x0, 0x0) fsmount(r4, 0x0, 0x8) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x18) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x20040880) sendmmsg$inet6(r2, &(0x7f0000000100)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @dev={0xfe, 0x80, '\x00', 0x15}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000240)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) unshare(0x400) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) add_key(&(0x7f0000000200)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c060826d775b31aeca7ca3792be657ecaf8e50e4f720e8a33ba4f1c24bb36620704c4629b7f54994a2947f3e08b807c60e393098c2c4c59614ffd53107bfbae3a3fdd963d8cdf44ad69ab0366e7a99f55d2df6a0e0742eecd64c7f3d5c8339b540553b8082ecac7e9dbefeb501b42be5f2b88f22273da6ef9abf3026cb0fea33b1bd13470b9b9a415b9bfa96d99f55c08c35d14da6df93d60383e", 0x9c, 0xfffffffffffffffc) 8.487576506s ago: executing program 1 (id=681): r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000201100001df2500000000", @ANYRES32=0x0, @ANYBLOB="debf0100002000000600220049f80000"], 0x28}}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r2, 0x0, 0xff40) write$ppp(r2, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x2802, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x10050) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/77, 0x4d}], 0x1}, 0x12001) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 8.000786428s ago: executing program 2 (id=682): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish-asm)\x00'}, 0x58) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x8000) mount(&(0x7f0000000580)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='xfs\x00', 0x81001f, &(0x7f0000000980)='norecovery') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d0080000", @ANYRES16=r1, @ANYBLOB="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"/2252], 0x8d0}, 0x1, 0x0, 0x0, 0x4}, 0x24000880) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f00000000c0)={0x2, 0x9, 0x8, 0x596, 0xf, "83ce0837107462d4f100000000000000001000"}) gettid() timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x204080, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) memfd_create(0x0, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000b00), 0x200300, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 7.339716674s ago: executing program 0 (id=683): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, &(0x7f0000000340)) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x101, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x82) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) setsockopt$inet_buf(r4, 0x0, 0x26, &(0x7f00000003c0)="310e69f617fecde753a4bc7b1c987ee852db3dde9557eb8ccfd0671d2d70dae6edb46cfdbdc5f7589c5b04dac5735e375f373e073915df8bc1be1fd7008b9454d408e0ea1cb35223c805032d3ef0bef0204984bc34d5cc74f0692883b041ca1c7e6fc862c99a622faf090a9ff5db0ec26d9194887ad7b400b405d8927dc4376deb7ba0918d14facea2024d2571273a6a158e34c22c85fd69785676d9ede325ad30cbe040a7e18ac950d9c2baa9a3eff6fefc4a8abd167afa87eb0975d6256cf8f527b1d95a855dd9fec160bb1d7d9db786d1dc51c260d5641cfa5cff51ce7ea2d2", 0xe1) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x101, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, 0x0, &(0x7f00000002c0)}, 0x20) sendmsg$rds(r8, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=[@rdma_args={0x48, 0x114, 0x1, {{0x6, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/99, 0x63}], 0x1, 0x60, 0xfffffffefffffffe}}, @rdma_args={0x48, 0x114, 0x1, {{0x5, 0xa980}, {&(0x7f0000000740)=""/241, 0xf1}, &(0x7f0000000a40)=[{&(0x7f0000000880)=""/171, 0xab}, {&(0x7f0000000180)=""/20, 0x14}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/47, 0x2f}, {&(0x7f0000000940)=""/230, 0xe6}], 0x5, 0x10, 0x1}}], 0x90, 0x8004}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 6.477056037s ago: executing program 4 (id=684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x5, 0x7fff, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x36, 0x2}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x3) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x2, 0x5002) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x4]}, 0x0, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070006000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 5.56997824s ago: executing program 5 (id=685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000200006800c000380060002004e24000008000200e0000002080001"], 0x84}, 0x1, 0x0, 0x0, 0x44}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) (async) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) (async) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x35, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$qrtrtun(r3, &(0x7f0000000400)="ca091cc2e088", 0x6) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0), &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x2, 0x0, 0x400000000000009f}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) connect$unix(r3, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e20}, 0xffffff66) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ptrace$setregset(0x4205, r7, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$setregset(0x4205, r7, 0x200, &(0x7f0000000140)={0x0, 0x3}) (async) syz_open_procfs(0xffffffffffffffff, 0x0) 5.282226597s ago: executing program 0 (id=686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) r0 = getpid() r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x402300, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f00000004c0)={0xc7, 0x2, 0x9, 0x3, "33407cbb724a716082806f34fe7d4428fd7f16d75b9a1e933505f9dc02d7d99fa52c04655a583cb21696f5c21e22af85b795c0c00e8d5cfb2ec6f4a4cf425da2d30453101a5b8b95bce3d6accee4d9f305d8fc6b43eae346d12973d867dc0a5741072856d4ad29772711f3905b5ecb51d6ac1fc5154a3786c82d76cdc32b0ae68045780d88707f9a71d1e1f7acf90b2e60c14342aeaeb02e7ad574c084f9bc3e035797a363e90ec4aa287e37674886"}) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0xfffffffd, 0x8}, 0x9c) socket$netlink(0x10, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x52) 5.215910677s ago: executing program 1 (id=687): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="0400000000008000080000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00', &(0x7f0000000480)=""/4096, 0x1000) 5.090552383s ago: executing program 2 (id=688): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@local, 0x2}) 4.951981957s ago: executing program 5 (id=689): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@local, 0x2}) 4.84443859s ago: executing program 2 (id=690): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000680)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000880)={"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"}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0xfffffffffffffffd], 0x0, 0x8340}) ioctl$KVM_RUN(r5, 0xae80, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x1, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x400000}) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0xa, 0x2, {}, 0x58603}) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 4.797687486s ago: executing program 1 (id=691): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x204080, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={&(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000240), &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000100)={0x0}) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000540)={0x0}) 3.939684266s ago: executing program 4 (id=692): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4040011}, 0x400c0) recvmmsg(r1, 0x0, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmmsg$sock(r0, &(0x7f00000006c0)=[{{&(0x7f00000000c0)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)="0ae6d628cd6f112d7bf23db5a4ba4f27fd071baa874e2921cbfdef8ef2b54aa3bef81a4bb22bc8c3f83b678ba1cfef03edfef73a2f329f5631e0ae448405a46c147020eea311fc5f6632a7293f5cb4213250c28830cc26c1505cb3f3f84e1a2d3e65e7728aebf7b8991078a990ce7e1e9d7cb7083c36dccf552849fd7a3b9d6a6588c6", 0x83}, {&(0x7f00000003c0)="b7aeba077e4a1d20b0df452b09e7c2c6b0e6001356345a05d36a62801d486a9a299e94b04f5baaa1f041b13ac7a84bd277aae906e1995817bbcfb2e96b8b328885bf44037e82e92b492205c65f1cf895ad642ad5076dc590dd873b34e5d453b83097477326eed2d2b7e5f7f97bc8bedbf0cda4f0421976944df1958eba92b0ae6899ceca5988afd6366178d3578e3f05be7a194ebb062ff1437d604c37635ce1ecf356c72766e4706fd82ddc700876f9e4c4fcb62eecf4b53b79bb89a7832183ce619ca920a8838296239e03fb481cf52e8e47d821ef5bd0a181649d351704827589645145aaa2554a23940f8cc62e", 0xef}, {&(0x7f0000000280)="6e16a675dd4ef65c111aea20344120aa2c5784c5ef4ae7471137c5fc5b6af9073fce268f56a735bca5c5dd89f239f1cb63ca5b278f2f4879", 0x38}, {&(0x7f00000004c0)="0d52efa019fe94ddb65c04b1dd80fe06db137f66334f9279b883986bba3f4316c1084317ba3da1c0f3791dd86f850dfa6ae781b5c65930f335010d6ff5f1f6137699ff35fce740498c90da89c7c6728fffd0dab38334b4fb7544f64be31e409588dbc16c3744f568e8674b2180f3e97c172d4893141077442363408b5d219b98f6a6358674beac7b2fa8adaa36d182a82f9b3b694c196721ad49910f44468ce736", 0xa1}, {&(0x7f0000000580)="46ce55b4184a7305a10a742cc8b72e22aa81848dc5a9aaf79f887f47bd662ea3408653e0385fecf9091baf5a3ff2f6b71173d6a14745cd51e45a08541a52d498528ada9c09ca94b6fbb83226690d58c95f39e7f766ec0bc9680d684d0e5519fa422716bd5475aa5c86de94dd2cf84aa83a29773e6d84da234f5938064211ef4fbc5c9990f3f42103d04205babfb1bff2d1c1bbebdd1329fc1e9a8ff4bd319767b6daaf644d3bd577d175", 0xaa}], 0x5}}], 0x1, 0xc001) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r7 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x10, 0x80000) sendto(r7, &(0x7f0000000180)="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", 0xfb, 0x40000, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 3.829679115s ago: executing program 0 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$yama_ptrace_scope(0xffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) open$dir(0x0, 0x2040, 0x140) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3.806221754s ago: executing program 5 (id=694): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x40000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x1602, &(0x7f0000000400)={0x0, 0x707b, 0x40, 0x204, 0x386}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x6}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r3, &(0x7f0000001300), 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f00000001c0)={0x1, 0xe8}, 0x1) 3.555780274s ago: executing program 4 (id=695): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x21, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ae9b714001222c01d9"], 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$nl_route(r0, 0x0, 0x40084c0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r3, 0x0, 0xf, 0x0, &(0x7f00000001c0)) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000001080000020000002b5b0914ec6cec0f7f3f2ee3c50c20353aff"]) 2.736178179s ago: executing program 1 (id=696): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {0x0}], 0x2) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10042008) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[], 0x50) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) shutdown(0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv4_newrule={0x34, 0x20, 0x10, 0x70bd27, 0x25dfdbfd, {0x2, 0x10, 0x10, 0xfa, 0xf, 0x0, 0x0, 0x6}, [@FRA_SRC={0x8, 0x2, @multicast2}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010100}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4005}, 0x4814) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) connect$l2tp6(r2, &(0x7f0000000400)={0xa, 0x0, 0xa9cb, @remote, 0x1ff}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='fsi_master_acf_cmd_abs_addr\x00', r2, 0x0, 0xa}, 0x18) ioctl(r0, 0x100, &(0x7f0000000000)="376761f404e9ef224276f35e3db50cdc9af6e2f6e770b1646b47dfbc08c0522da6927f26146f9527d19cf98e42e8b62db2d8c6d0aeaa4629f35ae22476f04331633aede264d99860524c9f4c694e17a34527c10d6aa4e937f081be99ec0867a0e5302d6cf9db29849950cbb141b80cb6425dacb40fa6e5902486ce296f1c381a25312df2ddd21c") sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=@newlink={0x2c, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f24c}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x40) 2.434669609s ago: executing program 0 (id=697): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, &(0x7f0000000340)) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x101, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x82) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) setsockopt$inet_buf(r4, 0x0, 0x26, &(0x7f00000003c0)="310e69f617fecde753a4bc7b1c987ee852db3dde9557eb8ccfd0671d2d70dae6edb46cfdbdc5f7589c5b04dac5735e375f373e073915df8bc1be1fd7008b9454d408e0ea1cb35223c805032d3ef0bef0204984bc34d5cc74f0692883b041ca1c7e6fc862c99a622faf090a9ff5db0ec26d9194887ad7b400b405d8927dc4376deb7ba0918d14facea2024d2571273a6a158e34c22c85fd69785676d9ede325ad30cbe040a7e18ac950d9c2baa9a3eff6fefc4a8abd167afa87eb0975d6256cf8f527b1d95a855dd9fec160bb1d7d9db786d1dc51c260d5641cfa5cff51ce7ea2d2", 0xe1) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x101, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, 0x0, &(0x7f00000002c0)}, 0x20) sendmsg$rds(r8, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=[@rdma_args={0x48, 0x114, 0x1, {{0x6, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/99, 0x63}], 0x1, 0x60, 0xfffffffefffffffe}}, @rdma_args={0x48, 0x114, 0x1, {{0x5, 0xa980}, {&(0x7f0000000740)=""/241, 0xf1}, &(0x7f0000000a40)=[{&(0x7f0000000880)=""/171, 0xab}, {&(0x7f0000000180)=""/20, 0x14}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/47, 0x2f}, {&(0x7f0000000940)=""/230, 0xe6}], 0x5, 0x10, 0x1}}], 0x90, 0x8004}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 383.570966ms ago: executing program 1 (id=698): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xab) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0xbc, 0x8000e, 0x2, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) 382.443419ms ago: executing program 5 (id=699): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40842, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x40000000015, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socket(0x2, 0x80805, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000b00)=0x7) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000080)=0x3ff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23, @broadcast}], 0x10) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x100) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc1, 0x0, r5}) ioctl$VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000000240)) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0xc048aec8, &(0x7f0000000000)={0x40004}) 276.215503ms ago: executing program 2 (id=700): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@local, 0x2}) 225.076416ms ago: executing program 0 (id=701): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="0400000000008000080000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00', &(0x7f0000000480)=""/4096, 0x1000) 177.076989ms ago: executing program 4 (id=702): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x40000) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x1602, &(0x7f0000000400)={0x0, 0x707b, 0x40, 0x204, 0x386}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x6}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r3, &(0x7f0000001300), 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f00000001c0)={0x1, 0xe8}, 0x1) 0s ago: executing program 1 (id=703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x1, 0x0, 0x67, 0xcc7, 0x8, 0x7, 0xa, 0x4, 0x2, 0x1, 0x8, 0x1, 0x6, 0x101, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r2, 0x1, 0x9, 0x4}) kernel console output (not intermixed with test programs): daddr=fe80:: dest=20000 [ 278.615316][ T6815] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 278.798227][ T7130] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 281.205218][ T6815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.379010][ T6815] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.685500][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.693841][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.878515][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.885939][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.128821][ T7173] warn_alloc: 1 callbacks suppressed [ 284.128842][ T7173] syz.2.281: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 284.150780][ T7173] CPU: 0 UID: 0 PID: 7173 Comm: syz.2.281 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 284.150800][ T7173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.150810][ T7173] Call Trace: [ 284.150816][ T7173] [ 284.150822][ T7173] dump_stack_lvl+0x189/0x250 [ 284.150883][ T7173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.150901][ T7173] ? __pfx__printk+0x10/0x10 [ 284.150922][ T7173] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 284.150942][ T7173] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 284.150962][ T7173] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 284.150983][ T7173] warn_alloc+0x214/0x310 [ 284.151000][ T7173] ? stack_depot_save_flags+0x40/0x900 [ 284.151019][ T7173] ? __pfx_warn_alloc+0x10/0x10 [ 284.151038][ T7173] ? kasan_save_track+0x4f/0x80 [ 284.151062][ T7173] ? xskq_create+0x56/0x170 [ 284.151076][ T7173] ? xsk_init_queue+0xb0/0x110 [ 284.151090][ T7173] ? xsk_setsockopt+0x43f/0x710 [ 284.151116][ T7173] ? do_sock_setsockopt+0x179/0x1b0 [ 284.151138][ T7173] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 284.151158][ T7173] ? do_syscall_64+0xfa/0x3b0 [ 284.151174][ T7173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.151196][ T7173] __vmalloc_node_range_noprof+0x125/0x12f0 [ 284.151235][ T7173] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 284.151257][ T7173] ? __kasan_kmalloc+0x93/0xb0 [ 284.151274][ T7173] vmalloc_user_noprof+0xad/0xf0 [ 284.151290][ T7173] ? xskq_create+0xbf/0x170 [ 284.151306][ T7173] xskq_create+0xbf/0x170 [ 284.151323][ T7173] xsk_init_queue+0xb0/0x110 [ 284.151339][ T7173] xsk_setsockopt+0x43f/0x710 [ 284.151365][ T7173] ? __pfx_xsk_setsockopt+0x10/0x10 [ 284.151391][ T7173] ? __fget_files+0x2a/0x420 [ 284.151410][ T7173] ? __fget_files+0x2a/0x420 [ 284.151425][ T7173] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 284.151440][ T7173] ? __pfx_xsk_setsockopt+0x10/0x10 [ 284.151465][ T7173] do_sock_setsockopt+0x179/0x1b0 [ 284.151491][ T7173] __x64_sys_setsockopt+0x13f/0x1b0 [ 284.151517][ T7173] do_syscall_64+0xfa/0x3b0 [ 284.151534][ T7173] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.151550][ T7173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.151565][ T7173] ? clear_bhb_loop+0x60/0xb0 [ 284.151583][ T7173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.151598][ T7173] RIP: 0033:0x7f92ca38e9a9 [ 284.151612][ T7173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.151624][ T7173] RSP: 002b:00007f92cb235038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 284.151640][ T7173] RAX: ffffffffffffffda RBX: 00007f92ca5b5fa0 RCX: 00007f92ca38e9a9 [ 284.151658][ T7173] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 284.151667][ T7173] RBP: 00007f92ca410d69 R08: 0000000000000052 R09: 0000000000000000 [ 284.151676][ T7173] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.151686][ T7173] R13: 0000000000000000 R14: 00007f92ca5b5fa0 R15: 00007ffc73703a08 [ 284.151708][ T7173] [ 284.151714][ T7173] Mem-Info: [ 284.455394][ T7173] active_anon:262 inactive_anon:10040 isolated_anon:0 [ 284.455394][ T7173] active_file:5409 inactive_file:35902 isolated_file:0 [ 284.455394][ T7173] unevictable:768 dirty:151 writeback:0 [ 284.455394][ T7173] slab_reclaimable:10017 slab_unreclaimable:95784 [ 284.455394][ T7173] mapped:34101 shmem:6053 pagetables:1155 [ 284.455394][ T7173] sec_pagetables:0 bounce:0 [ 284.455394][ T7173] kernel_misc_reclaimable:0 [ 284.455394][ T7173] free:1330424 free_pcp:14674 free_cma:0 [ 284.501276][ T7173] Node 0 active_anon:1048kB inactive_anon:40160kB active_file:21432kB inactive_file:143608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136404kB dirty:604kB writeback:0kB shmem:22676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12084kB pagetables:4456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 284.535427][ T7173] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 284.567766][ T7173] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 284.596685][ T7173] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 284.603305][ T7173] Node 0 DMA32 free:1402448kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1044kB inactive_anon:40116kB active_file:19660kB inactive_file:143540kB unevictable:1536kB writepending:604kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:40800kB local_pcp:18756kB free_cma:0kB [ 284.636422][ T7173] lowmem_reserve[]: 0 0 1 1 1 [ 284.641301][ T7173] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 284.670953][ T7173] lowmem_reserve[]: 0 0 0 0 0 [ 284.675728][ T7173] Node 1 Normal free:3903880kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17888kB local_pcp:8960kB free_cma:0kB [ 284.707804][ T7173] lowmem_reserve[]: 0 0 0 0 0 [ 284.712590][ T7173] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 284.725320][ T7173] Node 0 DMA32: 43*4kB (U) 131*8kB (U) 91*16kB (UME) 202*32kB (UE) 32*64kB (UE) 85*128kB (UM) 94*256kB (UME) 55*512kB (UME) 13*1024kB (UM) 4*2048kB (UME) 319*4096kB (M) = 1402420kB [ 284.743625][ T7173] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 284.756417][ T7173] Node 1 Normal: 188*4kB (U) 49*8kB (UME) 45*16kB (UME) 90*32kB (UME) 26*64kB (UME) 5*128kB (UME) 2*256kB (M) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3903880kB [ 284.774781][ T7173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.784689][ T7173] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 284.794503][ T7173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.804189][ T7173] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 284.813806][ T7173] 47360 total pagecache pages [ 284.818504][ T7173] 0 pages in swap cache [ 284.822698][ T7173] Free swap = 124996kB [ 284.826857][ T7173] Total swap = 124996kB [ 284.831096][ T7173] 2097051 pages RAM [ 284.834907][ T7173] 0 pages HighMem/MovableOnly [ 284.839669][ T7173] 424693 pages reserved [ 284.844033][ T7173] 0 pages cma reserved [ 285.615998][ T30] audit: type=1400 audit(1753280612.385:18): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7185 comm="syz.4.284" daddr=fe88::105 [ 289.329031][ T30] audit: type=1400 audit(1753280616.195:19): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7210 comm="syz.4.289" daddr=fe88::105 [ 290.183719][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 290.854621][ T6815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.905006][ T30] audit: type=1400 audit(1753280620.555:20): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7230 comm="syz.2.294" daddr=fe80:: dest=20000 [ 294.743201][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 295.771382][ T7250] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 295.778025][ T7250] PKCS7: Only support pkcs7_signedData type [ 295.815202][ T30] audit: type=1400 audit(1753280622.635:21): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7239 comm="syz.0.295" daddr=fe80::15 dest=20000 [ 297.986032][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.003484][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.018718][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.051460][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.121216][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.295463][ T5155] Bluetooth: hci4: command tx timeout [ 300.334717][ T30] audit: type=1400 audit(1753280626.635:22): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7274 comm="syz.4.302" daddr=fe80:: dest=20000 [ 301.053968][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.304'. [ 301.737871][ T7265] chnl_net:caif_netlink_parms(): no params data found [ 302.142200][ T7310] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 302.148602][ T7310] PKCS7: Only support pkcs7_signedData type [ 302.159339][ T30] audit: type=1400 audit(1753280629.015:23): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7307 comm="syz.0.308" daddr=fe80::15 dest=20000 [ 302.360722][ T5155] Bluetooth: hci4: command tx timeout [ 304.266469][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'. [ 304.441277][ T5155] Bluetooth: hci4: command tx timeout [ 305.405761][ T7349] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.312'. [ 305.418704][ T7348] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.312'. [ 306.520809][ T5155] Bluetooth: hci4: command tx timeout [ 307.183642][ T7366] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 307.313086][ T7265] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.322352][ T7265] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.480424][ T7265] bridge_slave_0: entered allmulticast mode [ 307.618378][ T7363] [U] „ [ 307.638310][ T7265] bridge_slave_0: entered promiscuous mode [ 307.670274][ T7368] [U] „ [ 307.756396][ T7265] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.780499][ T7265] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.789181][ T7265] bridge_slave_1: entered allmulticast mode [ 307.809256][ T7265] bridge_slave_1: entered promiscuous mode [ 308.630676][ T30] audit: type=1400 audit(1753280635.495:24): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7370 comm="syz.0.320" daddr=fe80:: dest=20000 [ 309.335136][ T7265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.946056][ T7265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.153781][ T30] audit: type=1400 audit(1753280637.025:25): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7384 comm="syz.2.324" daddr=fe80::15 dest=20000 [ 310.203231][ T7390] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 310.209978][ T7390] PKCS7: Only support pkcs7_signedData type [ 311.053870][ T7400] trusted_key: encrypted_key: insufficient parameters specified [ 311.558721][ T7396] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.325'. [ 311.751737][ T7400] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 312.766882][ T7265] team0: Port device team_slave_0 added [ 312.925077][ T7265] team0: Port device team_slave_1 added [ 315.856330][ T7265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.899857][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 316.016813][ T7265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.157825][ T7265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.203065][ T13] bridge_slave_1: left allmulticast mode [ 316.208802][ T13] bridge_slave_1: left promiscuous mode [ 316.276213][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.459049][ T13] bridge_slave_0: left allmulticast mode [ 316.504877][ T7448] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 316.511648][ T7448] PKCS7: Only support pkcs7_signedData type [ 316.526189][ T30] audit: type=1400 audit(1753280643.365:26): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7443 comm="syz.2.336" daddr=fe80::15 dest=20000 [ 316.572816][ T13] bridge_slave_0: left promiscuous mode [ 316.580341][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.160835][ T7456] trusted_key: encrypted_key: insufficient parameters specified [ 318.515276][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.892177][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.916424][ T13] bond0 (unregistering): Released all slaves [ 318.938103][ T7265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.946048][ T7265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.973571][ T7265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.179429][ T7265] hsr_slave_0: entered promiscuous mode [ 319.191300][ T7265] hsr_slave_1: entered promiscuous mode [ 319.205871][ T7265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.213620][ T7265] Cannot create hsr debugfs directory [ 319.220039][ T7465] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.340'. [ 319.360804][ T13] hsr_slave_0: left promiscuous mode [ 319.412205][ T13] hsr_slave_1: left promiscuous mode [ 319.427102][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.637605][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.607204][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.613910][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.293973][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'. [ 324.875389][ T30] audit: type=1400 audit(1753280651.745:27): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7491 comm="syz.4.348" daddr=fe80::15 dest=20000 [ 324.965872][ T7498] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 324.972351][ T7498] PKCS7: Only support pkcs7_signedData type [ 328.674014][ T7524] syz.1.357: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 328.689153][ T7524] CPU: 0 UID: 0 PID: 7524 Comm: syz.1.357 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 328.689174][ T7524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 328.689183][ T7524] Call Trace: [ 328.689189][ T7524] [ 328.689195][ T7524] dump_stack_lvl+0x189/0x250 [ 328.689220][ T7524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.689237][ T7524] ? __pfx__printk+0x10/0x10 [ 328.689257][ T7524] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 328.689277][ T7524] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 328.689297][ T7524] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 328.689317][ T7524] warn_alloc+0x214/0x310 [ 328.689335][ T7524] ? stack_depot_save_flags+0x40/0x900 [ 328.689354][ T7524] ? __pfx_warn_alloc+0x10/0x10 [ 328.689373][ T7524] ? kasan_save_track+0x4f/0x80 [ 328.689397][ T7524] ? xskq_create+0x56/0x170 [ 328.689411][ T7524] ? xsk_init_queue+0xb0/0x110 [ 328.689423][ T7524] ? xsk_setsockopt+0x43f/0x710 [ 328.689445][ T7524] ? do_sock_setsockopt+0x179/0x1b0 [ 328.689468][ T7524] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 328.689488][ T7524] ? do_syscall_64+0xfa/0x3b0 [ 328.689512][ T7524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.689533][ T7524] __vmalloc_node_range_noprof+0x125/0x12f0 [ 328.689573][ T7524] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 328.689591][ T7524] ? xskq_create+0x56/0x170 [ 328.689607][ T7524] ? __kasan_kmalloc+0x93/0xb0 [ 328.689624][ T7524] vmalloc_user_noprof+0xad/0xf0 [ 328.689641][ T7524] ? xskq_create+0xbf/0x170 [ 328.689656][ T7524] xskq_create+0xbf/0x170 [ 328.689673][ T7524] xsk_init_queue+0xb0/0x110 [ 328.689689][ T7524] xsk_setsockopt+0x43f/0x710 [ 328.689721][ T7524] ? __pfx_xsk_setsockopt+0x10/0x10 [ 328.689747][ T7524] ? __fget_files+0x2a/0x420 [ 328.689766][ T7524] ? __fget_files+0x2a/0x420 [ 328.689782][ T7524] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 328.689797][ T7524] ? __pfx_xsk_setsockopt+0x10/0x10 [ 328.689821][ T7524] do_sock_setsockopt+0x179/0x1b0 [ 328.689847][ T7524] __x64_sys_setsockopt+0x13f/0x1b0 [ 328.689873][ T7524] do_syscall_64+0xfa/0x3b0 [ 328.689889][ T7524] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.689904][ T7524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.689919][ T7524] ? clear_bhb_loop+0x60/0xb0 [ 328.689937][ T7524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.689951][ T7524] RIP: 0033:0x7fefe8f8e9a9 [ 328.689965][ T7524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.689978][ T7524] RSP: 002b:00007fefe9e8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 328.689993][ T7524] RAX: ffffffffffffffda RBX: 00007fefe91b5fa0 RCX: 00007fefe8f8e9a9 [ 328.690005][ T7524] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 328.690013][ T7524] RBP: 00007fefe9010d69 R08: 0000000000000052 R09: 0000000000000000 [ 328.690022][ T7524] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.690032][ T7524] R13: 0000000000000000 R14: 00007fefe91b5fa0 R15: 00007fffef28de88 [ 328.690054][ T7524] [ 328.690059][ T7524] Mem-Info: [ 328.995631][ T7524] active_anon:264 inactive_anon:5423 isolated_anon:0 [ 328.995631][ T7524] active_file:5438 inactive_file:35891 isolated_file:0 [ 328.995631][ T7524] unevictable:768 dirty:29 writeback:0 [ 328.995631][ T7524] slab_reclaimable:10009 slab_unreclaimable:97167 [ 328.995631][ T7524] mapped:30388 shmem:1377 pagetables:1170 [ 328.995631][ T7524] sec_pagetables:0 bounce:0 [ 328.995631][ T7524] kernel_misc_reclaimable:0 [ 328.995631][ T7524] free:1334368 free_pcp:14301 free_cma:0 [ 329.041661][ T7524] Node 0 active_anon:1056kB inactive_anon:21692kB active_file:21548kB inactive_file:143564kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121552kB dirty:116kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12148kB pagetables:4516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 329.075556][ T7524] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 329.108052][ T7524] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 329.137198][ T7524] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 329.143011][ T7524] Node 0 DMA32 free:1418224kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1052kB inactive_anon:21648kB active_file:19776kB inactive_file:143496kB unevictable:1536kB writepending:116kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:39272kB local_pcp:14624kB free_cma:0kB [ 329.176128][ T7524] lowmem_reserve[]: 0 0 1 1 1 [ 329.181032][ T7524] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 329.210841][ T7524] lowmem_reserve[]: 0 0 0 0 0 [ 329.215684][ T7524] Node 1 Normal free:3903880kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17924kB local_pcp:8992kB free_cma:0kB [ 329.247034][ T7524] lowmem_reserve[]: 0 0 0 0 0 [ 329.251824][ T7524] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 329.264512][ T7524] Node 0 DMA32: 1080*4kB (UM) 1248*8kB (UME) 526*16kB (UME) 160*32kB (UME) 31*64kB (UME) 31*128kB (UME) 82*256kB (UME) 66*512kB (UME) 15*1024kB (UM) 5*2048kB (UME) 319*4096kB (M) = 1420800kB [ 329.283553][ T7524] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 329.295508][ T7524] Node 1 Normal: 188*4kB (U) 49*8kB (UME) 45*16kB (UME) 90*32kB (UME) 26*64kB (UME) 5*128kB (UME) 2*256kB (M) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3903880kB [ 329.314488][ T7524] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 329.324233][ T7524] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 329.333571][ T7524] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 329.343166][ T7524] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 329.352555][ T7524] 42702 total pagecache pages [ 329.357251][ T7524] 0 pages in swap cache [ 329.361476][ T7524] Free swap = 124996kB [ 329.365657][ T7524] Total swap = 124996kB [ 329.369830][ T7524] 2097051 pages RAM [ 329.374212][ T7524] 0 pages HighMem/MovableOnly [ 329.378910][ T7524] 424693 pages reserved [ 329.383126][ T7524] 0 pages cma reserved [ 330.896981][ T13] team0 (unregistering): Port device team_slave_1 removed [ 330.941978][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.360'. [ 330.999954][ T13] team0 (unregistering): Port device team_slave_0 removed [ 332.115507][ T30] audit: type=1400 audit(1753280658.985:28): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7545 comm="syz.1.363" daddr=fe80::15 dest=20000 [ 332.125461][ T7547] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 332.139278][ T7547] PKCS7: Only support pkcs7_signedData type [ 333.212436][ T7549] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 336.821317][ T7512] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.353'. [ 336.963887][ T7573] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 336.970256][ T7573] PKCS7: Only support pkcs7_signedData type [ 337.000898][ T30] audit: type=1400 audit(1753280663.825:29): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7571 comm="syz.1.370" daddr=fe80::15 dest=20000 [ 337.709622][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'. [ 340.106026][ T7265] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 340.854759][ T7265] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 340.892717][ T7265] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 340.959730][ T7265] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 341.316805][ T30] audit: type=1400 audit(1753280667.915:30): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7605 comm="syz.0.376" daddr=fe88::101 [ 341.694161][ T30] audit: type=1400 audit(1753280668.565:31): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7624 comm="syz.0.379" daddr=fe88::101 [ 342.752240][ T7265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.884225][ T7265] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.934495][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.941759][ T6366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.006513][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.013876][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.385730][ T7634] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.380'. [ 343.433971][ T7633] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.380'. [ 343.521653][ T7637] trusted_key: encrypted_key: insufficient parameters specified [ 344.266961][ T7637] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 344.944312][ T30] audit: type=1400 audit(1753280671.815:32): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7643 comm="syz.4.383" daddr=fe80::15 dest=20000 [ 344.966420][ T7646] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 344.972876][ T7646] PKCS7: Only support pkcs7_signedData type [ 346.975828][ T7654] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 347.937738][ T30] audit: type=1400 audit(1753280674.805:33): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7665 comm="syz.1.387" daddr=fe88::102 [ 348.615881][ T7265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.241521][ T30] audit: type=1400 audit(1753280676.115:34): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7678 comm="syz.2.390" daddr=fe88::103 [ 350.552290][ T7699] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.393'. [ 350.563895][ T7698] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.393'. [ 352.872560][ T7711] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 352.879576][ T7711] PKCS7: Only support pkcs7_signedData type [ 353.801777][ T30] audit: type=1400 audit(1753280679.725:35): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7709 comm="syz.1.394" daddr=fe80::15 dest=20000 [ 356.726795][ T30] audit: type=1400 audit(1753280683.595:36): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7737 comm="syz.1.403" daddr=fe88::102 [ 357.513132][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 357.522796][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 357.533359][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 357.546819][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 357.575189][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 357.893186][ T7265] syz-executor (7265) used greatest stack depth: 19584 bytes left [ 358.510303][ T7756] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.406'. [ 358.571974][ T7755] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.406'. [ 359.376009][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'. [ 360.058585][ T5155] Bluetooth: hci5: command tx timeout [ 361.297863][ T30] audit: type=1400 audit(1753280687.915:37): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7762 comm="syz.0.407" daddr=fe88::101 [ 362.009576][ T30] audit: type=1400 audit(1753280688.875:38): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7776 comm="syz.2.409" daddr=fe80::15 dest=20000 [ 362.040991][ T7781] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 362.047761][ T7781] PKCS7: Only support pkcs7_signedData type [ 362.139657][ T5155] Bluetooth: hci5: command tx timeout [ 362.514592][ T7784] syz.4.410: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 362.529983][ T7784] CPU: 0 UID: 0 PID: 7784 Comm: syz.4.410 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 362.530009][ T7784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.530021][ T7784] Call Trace: [ 362.530028][ T7784] [ 362.530035][ T7784] dump_stack_lvl+0x189/0x250 [ 362.530060][ T7784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.530078][ T7784] ? __pfx__printk+0x10/0x10 [ 362.530099][ T7784] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 362.530125][ T7784] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 362.530146][ T7784] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 362.530167][ T7784] warn_alloc+0x214/0x310 [ 362.530186][ T7784] ? stack_depot_save_flags+0x40/0x900 [ 362.530205][ T7784] ? __pfx_warn_alloc+0x10/0x10 [ 362.530225][ T7784] ? kasan_save_track+0x4f/0x80 [ 362.530250][ T7784] ? xskq_create+0x56/0x170 [ 362.530272][ T7784] ? xsk_init_queue+0xb0/0x110 [ 362.530285][ T7784] ? xsk_setsockopt+0x43f/0x710 [ 362.530307][ T7784] ? do_sock_setsockopt+0x179/0x1b0 [ 362.530329][ T7784] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 362.530350][ T7784] ? do_syscall_64+0xfa/0x3b0 [ 362.530365][ T7784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.530391][ T7784] __vmalloc_node_range_noprof+0x125/0x12f0 [ 362.530444][ T7784] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 362.530471][ T7784] ? __kasan_kmalloc+0x93/0xb0 [ 362.530493][ T7784] vmalloc_user_noprof+0xad/0xf0 [ 362.530510][ T7784] ? xskq_create+0xbf/0x170 [ 362.530536][ T7784] xskq_create+0xbf/0x170 [ 362.530561][ T7784] xsk_init_queue+0xb0/0x110 [ 362.530583][ T7784] xsk_setsockopt+0x43f/0x710 [ 362.530620][ T7784] ? __pfx_xsk_setsockopt+0x10/0x10 [ 362.530654][ T7784] ? __fget_files+0x2a/0x420 [ 362.530681][ T7784] ? __fget_files+0x2a/0x420 [ 362.530703][ T7784] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 362.530723][ T7784] ? __pfx_xsk_setsockopt+0x10/0x10 [ 362.530757][ T7784] do_sock_setsockopt+0x179/0x1b0 [ 362.530791][ T7784] __x64_sys_setsockopt+0x13f/0x1b0 [ 362.530818][ T7784] do_syscall_64+0xfa/0x3b0 [ 362.530835][ T7784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.530850][ T7784] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 362.530866][ T7784] ? clear_bhb_loop+0x60/0xb0 [ 362.530884][ T7784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.530898][ T7784] RIP: 0033:0x7f5d63b8e9a9 [ 362.530912][ T7784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.530924][ T7784] RSP: 002b:00007f5d64a35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 362.530940][ T7784] RAX: ffffffffffffffda RBX: 00007f5d63db5fa0 RCX: 00007f5d63b8e9a9 [ 362.530951][ T7784] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 362.530959][ T7784] RBP: 00007f5d63c10d69 R08: 0000000000000052 R09: 0000000000000000 [ 362.530969][ T7784] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.530978][ T7784] R13: 0000000000000000 R14: 00007f5d63db5fa0 R15: 00007ffc3efcf058 [ 362.530999][ T7784] [ 362.826806][ T7784] Mem-Info: [ 362.830014][ T7784] active_anon:275 inactive_anon:8533 isolated_anon:0 [ 362.830014][ T7784] active_file:5452 inactive_file:35908 isolated_file:0 [ 362.830014][ T7784] unevictable:768 dirty:87 writeback:0 [ 362.830014][ T7784] slab_reclaimable:10040 slab_unreclaimable:96464 [ 362.830014][ T7784] mapped:32286 shmem:4225 pagetables:1289 [ 362.830014][ T7784] sec_pagetables:0 bounce:0 [ 362.830014][ T7784] kernel_misc_reclaimable:0 [ 362.830014][ T7784] free:1335210 free_pcp:11326 free_cma:0 [ 362.875692][ T7784] Node 0 active_anon:1100kB inactive_anon:34132kB active_file:21604kB inactive_file:143632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129144kB dirty:348kB writeback:0kB shmem:15364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12236kB pagetables:4992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 362.910641][ T7784] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 362.942417][ T7784] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.971531][ T7784] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 362.977309][ T7784] Node 0 DMA32 free:1421592kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1096kB inactive_anon:34088kB active_file:19832kB inactive_file:143564kB unevictable:1536kB writepending:280kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:27356kB local_pcp:13500kB free_cma:0kB [ 363.010862][ T7784] lowmem_reserve[]: 0 0 1 1 1 [ 363.015635][ T7784] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 363.044710][ T7784] lowmem_reserve[]: 0 0 0 0 0 [ 363.049468][ T7784] Node 1 Normal free:3903880kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17924kB local_pcp:8992kB free_cma:0kB [ 363.081051][ T7784] lowmem_reserve[]: 0 0 0 0 0 [ 363.085844][ T7784] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 363.099678][ T7784] Node 0 DMA32: 1140*4kB (UME) 361*8kB (UME) 189*16kB (UME) 286*32kB (UME) 104*64kB (UME) 61*128kB (UME) 67*256kB (UME) 68*512kB (UME) 16*1024kB (UM) 6*2048kB (UME) 319*4096kB (M) = 1421352kB [ 363.118964][ T7784] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 363.130888][ T7784] Node 1 Normal: 188*4kB (U) 49*8kB (UME) 45*16kB (UME) 90*32kB (UME) 26*64kB (UME) 5*128kB (UME) 2*256kB (M) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3903880kB [ 363.148891][ T7784] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 363.158512][ T7784] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 363.167859][ T7784] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 363.177470][ T7784] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 363.186838][ T7784] 45581 total pagecache pages [ 363.192611][ T7784] 0 pages in swap cache [ 363.196799][ T7784] Free swap = 124996kB [ 363.201008][ T7784] Total swap = 124996kB [ 363.205255][ T7784] 2097051 pages RAM [ 363.209061][ T7784] 0 pages HighMem/MovableOnly [ 363.213882][ T7784] 424693 pages reserved [ 363.218142][ T7784] 0 pages cma reserved [ 363.824064][ T7802] 9pnet_virtio: no channels available for device 127.0.0.1 [ 364.192110][ T7798] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.211241][ T5155] Bluetooth: hci5: command tx timeout [ 364.246536][ T7746] chnl_net:caif_netlink_parms(): no params data found [ 364.472797][ T7798] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.930981][ T7798] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.349402][ T7821] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.418'. [ 365.391516][ T7819] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.418'. [ 365.435175][ T7798] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.268638][ T7746] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.290903][ T5155] Bluetooth: hci5: command tx timeout [ 366.303787][ T7746] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.314594][ T7746] bridge_slave_0: entered allmulticast mode [ 366.393342][ T7746] bridge_slave_0: entered promiscuous mode [ 366.794798][ T30] audit: type=1400 audit(1753280693.285:39): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7836 comm="syz.4.420" daddr=ff01::1 dest=20000 [ 366.875946][ T7746] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.888935][ T7746] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.896858][ T7746] bridge_slave_1: entered allmulticast mode [ 366.909196][ T7746] bridge_slave_1: entered promiscuous mode [ 366.929174][ T7798] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.979576][ T7012] bridge_slave_1: left allmulticast mode [ 367.011028][ T7012] bridge_slave_1: left promiscuous mode [ 367.017129][ T7012] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.064984][ T7012] bridge_slave_0: left allmulticast mode [ 367.084578][ T7012] bridge_slave_0: left promiscuous mode [ 367.090882][ T7012] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.498191][ T30] audit: type=1400 audit(1753280694.345:40): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7847 comm="syz.2.421" daddr=fe88::103 [ 368.471242][ T7012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.487676][ T7012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.498651][ T7012] bond0 (unregistering): Released all slaves [ 368.624978][ T7798] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.745881][ T7012] hsr_slave_0: left promiscuous mode [ 368.766687][ T7012] hsr_slave_1: left promiscuous mode [ 368.782606][ T7012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.810955][ T7012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.328285][ T7012] team0 (unregistering): Port device team_slave_1 removed [ 370.397619][ T7012] team0 (unregistering): Port device team_slave_0 removed [ 372.471475][ T7870] trusted_key: encrypted_key: insufficient parameters specified [ 372.997814][ T7798] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.039959][ T7746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.057014][ T7872] FAULT_INJECTION: forcing a failure. [ 373.057014][ T7872] name failslab, interval 1, probability 0, space 0, times 0 [ 373.078399][ T7872] CPU: 1 UID: 0 PID: 7872 Comm: syz.0.427 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 373.078421][ T7872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 373.078441][ T7872] Call Trace: [ 373.078447][ T7872] [ 373.078454][ T7872] dump_stack_lvl+0x189/0x250 [ 373.078475][ T7872] ? __pfx____ratelimit+0x10/0x10 [ 373.078492][ T7872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.078509][ T7872] ? __pfx__printk+0x10/0x10 [ 373.078530][ T7872] ? __pfx___might_resched+0x10/0x10 [ 373.078547][ T7872] ? fs_reclaim_acquire+0x7d/0x100 [ 373.078569][ T7872] should_fail_ex+0x414/0x560 [ 373.078589][ T7872] should_failslab+0xa8/0x100 [ 373.078607][ T7872] __kmalloc_cache_noprof+0x70/0x3d0 [ 373.078622][ T7872] ? device_add+0xbe/0xb50 [ 373.078647][ T7872] device_add+0xbe/0xb50 [ 373.078672][ T7872] input_register_device+0x9ca/0x10b0 [ 373.078702][ T7872] uinput_create_device+0x422/0x670 [ 373.078720][ T7872] ? __lock_acquire+0xab9/0xd20 [ 373.078739][ T7872] uinput_ioctl_handler+0x3f0/0x1570 [ 373.078759][ T7872] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 373.078785][ T7872] ? __fget_files+0x2a/0x420 [ 373.078801][ T7872] ? __fget_files+0x3a0/0x420 [ 373.078822][ T7872] ? bpf_lsm_file_ioctl+0x9/0x20 [ 373.078840][ T7872] ? __pfx_uinput_ioctl+0x10/0x10 [ 373.078857][ T7872] __se_sys_ioctl+0xf9/0x170 [ 373.078886][ T7872] do_syscall_64+0xfa/0x3b0 [ 373.078902][ T7872] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.078918][ T7872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.078933][ T7872] ? clear_bhb_loop+0x60/0xb0 [ 373.078951][ T7872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.078968][ T7872] RIP: 0033:0x7feb34f8e9a9 [ 373.078982][ T7872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.078995][ T7872] RSP: 002b:00007feb35d59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.079011][ T7872] RAX: ffffffffffffffda RBX: 00007feb351b5fa0 RCX: 00007feb34f8e9a9 [ 373.079022][ T7872] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 373.079031][ T7872] RBP: 00007feb35d59090 R08: 0000000000000000 R09: 0000000000000000 [ 373.079040][ T7872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.079049][ T7872] R13: 0000000000000000 R14: 00007feb351b5fa0 R15: 00007ffc1b9eecd8 [ 373.079072][ T7872] [ 373.343230][ T7798] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.506722][ T7746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.149105][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 374.197827][ T7880] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.429'. [ 374.399820][ T7746] team0: Port device team_slave_0 added [ 374.447063][ T7879] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.429'. [ 374.491968][ T7746] team0: Port device team_slave_1 added [ 375.946431][ T7906] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 375.952762][ T7906] PKCS7: Only support pkcs7_signedData type [ 375.986717][ T7746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.996272][ T30] audit: type=1400 audit(1753280702.815:41): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7905 comm="syz.1.433" daddr=fe80::15 dest=20000 [ 376.030673][ T7746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.314930][ T30] audit: type=1400 audit(1753280703.185:42): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7908 comm="syz.0.434" [ 376.372912][ T7912] FAULT_INJECTION: forcing a failure. [ 376.372912][ T7912] name failslab, interval 1, probability 0, space 0, times 0 [ 376.386065][ T7912] CPU: 1 UID: 0 PID: 7912 Comm: syz.1.435 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 376.386094][ T7912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 376.386107][ T7912] Call Trace: [ 376.386119][ T7912] [ 376.386130][ T7912] dump_stack_lvl+0x189/0x250 [ 376.386160][ T7912] ? __pfx____ratelimit+0x10/0x10 [ 376.386184][ T7912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.386208][ T7912] ? __pfx__printk+0x10/0x10 [ 376.386251][ T7912] should_fail_ex+0x414/0x560 [ 376.386280][ T7912] should_failslab+0xa8/0x100 [ 376.386307][ T7912] kmem_cache_alloc_noprof+0x73/0x3c0 [ 376.386328][ T7912] ? radix_tree_node_alloc+0x7e/0x3a0 [ 376.386354][ T7912] radix_tree_node_alloc+0x7e/0x3a0 [ 376.386384][ T7912] idr_get_free+0x2b3/0xa70 [ 376.386421][ T7912] idr_alloc_u32+0x159/0x2d0 [ 376.386450][ T7912] ? __pfx_idr_alloc_u32+0x10/0x10 [ 376.386477][ T7912] ? do_raw_spin_lock+0x121/0x290 [ 376.386514][ T7912] idr_alloc_cyclic+0x9b/0x1b0 [ 376.386545][ T7912] bpf_link_prime+0x6b/0x220 [ 376.386577][ T7912] bpf_raw_tp_link_attach+0x4a5/0x6b0 [ 376.386608][ T7912] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 376.386647][ T7912] ? __fget_files+0x2a/0x420 [ 376.386683][ T7912] bpf_raw_tracepoint_open+0x19b/0x1f0 [ 376.386722][ T7912] __sys_bpf+0x3cd/0x860 [ 376.386756][ T7912] ? __pfx___sys_bpf+0x10/0x10 [ 376.386803][ T7912] ? ksys_write+0x22a/0x250 [ 376.386826][ T7912] ? __pfx_ksys_write+0x10/0x10 [ 376.386844][ T7912] ? rcu_is_watching+0x15/0xb0 [ 376.386876][ T7912] __x64_sys_bpf+0x7c/0x90 [ 376.386907][ T7912] do_syscall_64+0xfa/0x3b0 [ 376.386930][ T7912] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.386952][ T7912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.386974][ T7912] ? clear_bhb_loop+0x60/0xb0 [ 376.387000][ T7912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.387022][ T7912] RIP: 0033:0x7fefe8f8e9a9 [ 376.387041][ T7912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.387067][ T7912] RSP: 002b:00007fefe9e8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 376.387090][ T7912] RAX: ffffffffffffffda RBX: 00007fefe91b5fa0 RCX: 00007fefe8f8e9a9 [ 376.387106][ T7912] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 0000000000000011 [ 376.387120][ T7912] RBP: 00007fefe9e8d090 R08: 0000000000000000 R09: 0000000000000000 [ 376.387133][ T7912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.387146][ T7912] R13: 0000000000000000 R14: 00007fefe91b5fa0 R15: 00007fffef28de88 [ 376.387180][ T7912] [ 376.881377][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 377.098159][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 377.224859][ T24] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 377.325572][ T7746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.327484][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.378780][ T7746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.398603][ T7746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.422080][ T24] usb 1-1: config 0 descriptor?? [ 377.470745][ T7746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.642439][ T24] gspca_main: sunplus-2.14.0 probing 041e:400b [ 378.374157][ T24] gspca_sunplus: reg_w_riv err -110 [ 378.379519][ T24] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 378.745051][ T24] usb 1-1: USB disconnect, device number 2 [ 378.787530][ T7746] hsr_slave_0: entered promiscuous mode [ 378.798902][ T7746] hsr_slave_1: entered promiscuous mode [ 378.809956][ T7746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.821815][ T7928] input: syz1 as /devices/virtual/input/input7 [ 378.826653][ T7746] Cannot create hsr debugfs directory [ 380.406120][ T7937] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.442'. [ 380.417236][ T7941] XFS (nullb0): Invalid superblock magic number [ 382.203636][ T30] audit: type=1400 audit(1753804997.041:43): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=7957 comm="syz.2.447" daddr=fe88::103 [ 383.986006][ T7984] FAULT_INJECTION: forcing a failure. [ 383.986006][ T7984] name failslab, interval 1, probability 0, space 0, times 0 [ 384.007596][ T7984] CPU: 0 UID: 0 PID: 7984 Comm: syz.0.451 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 384.007626][ T7984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.007640][ T7984] Call Trace: [ 384.007649][ T7984] [ 384.007657][ T7984] dump_stack_lvl+0x189/0x250 [ 384.007688][ T7984] ? __pfx____ratelimit+0x10/0x10 [ 384.007711][ T7984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.007736][ T7984] ? __pfx__printk+0x10/0x10 [ 384.007767][ T7984] ? __pfx___might_resched+0x10/0x10 [ 384.007791][ T7984] ? fs_reclaim_acquire+0x7d/0x100 [ 384.007821][ T7984] should_fail_ex+0x414/0x560 [ 384.007849][ T7984] should_failslab+0xa8/0x100 [ 384.007875][ T7984] __kmalloc_noprof+0xcb/0x4f0 [ 384.007895][ T7984] ? tomoyo_encode+0x28b/0x550 [ 384.007928][ T7984] tomoyo_encode+0x28b/0x550 [ 384.007963][ T7984] tomoyo_realpath_from_path+0x58d/0x5d0 [ 384.007994][ T7984] ? tomoyo_domain+0xda/0x130 [ 384.008029][ T7984] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 384.008052][ T7984] tomoyo_path_number_perm+0x1e8/0x5a0 [ 384.008078][ T7984] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 384.008121][ T7984] ? __lock_acquire+0xab9/0xd20 [ 384.008163][ T7984] ? __fget_files+0x2a/0x420 [ 384.008191][ T7984] ? __fget_files+0x2a/0x420 [ 384.008213][ T7984] ? __fget_files+0x3a0/0x420 [ 384.008235][ T7984] ? __fget_files+0x2a/0x420 [ 384.008264][ T7984] security_file_ioctl+0xcb/0x2d0 [ 384.008290][ T7984] __se_sys_ioctl+0x47/0x170 [ 384.008324][ T7984] do_syscall_64+0xfa/0x3b0 [ 384.008347][ T7984] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.008369][ T7984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.008390][ T7984] ? clear_bhb_loop+0x60/0xb0 [ 384.008423][ T7984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.008443][ T7984] RIP: 0033:0x7feb34f8e9a9 [ 384.008462][ T7984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.008481][ T7984] RSP: 002b:00007feb35d59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.008503][ T7984] RAX: ffffffffffffffda RBX: 00007feb351b5fa0 RCX: 00007feb34f8e9a9 [ 384.008522][ T7984] RDX: 00002000000000c0 RSI: 000000004018aebd RDI: 0000000000000004 [ 384.008536][ T7984] RBP: 00007feb35d59090 R08: 0000000000000000 R09: 0000000000000000 [ 384.008549][ T7984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.008562][ T7984] R13: 0000000000000000 R14: 00007feb351b5fa0 R15: 00007ffc1b9eecd8 [ 384.008595][ T7984] [ 384.009755][ T7984] ERROR: Out of memory at tomoyo_realpath_from_path. [ 384.149274][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.303376][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.400216][ T7746] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 384.452675][ T7746] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 384.500356][ T7746] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 384.594548][ T7746] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 385.777755][ T7746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.793492][ T8014] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.455'. [ 386.727520][ T7746] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.825263][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.832563][ T5978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.905895][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.913385][ T5978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.088259][ T8020] syz.0.456: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 387.103298][ T8020] CPU: 1 UID: 0 PID: 8020 Comm: syz.0.456 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 387.103327][ T8020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 387.103346][ T8020] Call Trace: [ 387.103355][ T8020] [ 387.103365][ T8020] dump_stack_lvl+0x189/0x250 [ 387.103399][ T8020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.103424][ T8020] ? __pfx__printk+0x10/0x10 [ 387.103453][ T8020] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 387.103481][ T8020] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 387.103509][ T8020] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 387.103540][ T8020] warn_alloc+0x214/0x310 [ 387.103564][ T8020] ? stack_depot_save_flags+0x40/0x900 [ 387.103592][ T8020] ? __pfx_warn_alloc+0x10/0x10 [ 387.103619][ T8020] ? kasan_save_track+0x4f/0x80 [ 387.103652][ T8020] ? xskq_create+0x56/0x170 [ 387.103673][ T8020] ? xsk_init_queue+0xb0/0x110 [ 387.103690][ T8020] ? xsk_setsockopt+0x43f/0x710 [ 387.103721][ T8020] ? do_sock_setsockopt+0x179/0x1b0 [ 387.103750][ T8020] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 387.103779][ T8020] ? do_syscall_64+0xfa/0x3b0 [ 387.103801][ T8020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.103831][ T8020] __vmalloc_node_range_noprof+0x125/0x12f0 [ 387.103887][ T8020] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 387.103918][ T8020] ? __kasan_kmalloc+0x93/0xb0 [ 387.103943][ T8020] vmalloc_user_noprof+0xad/0xf0 [ 387.103967][ T8020] ? xskq_create+0xbf/0x170 [ 387.103989][ T8020] xskq_create+0xbf/0x170 [ 387.104027][ T8020] xsk_init_queue+0xb0/0x110 [ 387.104051][ T8020] xsk_setsockopt+0x43f/0x710 [ 387.104087][ T8020] ? __pfx_xsk_setsockopt+0x10/0x10 [ 387.104125][ T8020] ? __fget_files+0x2a/0x420 [ 387.104153][ T8020] ? __fget_files+0x2a/0x420 [ 387.104177][ T8020] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 387.104197][ T8020] ? __pfx_xsk_setsockopt+0x10/0x10 [ 387.104231][ T8020] do_sock_setsockopt+0x179/0x1b0 [ 387.104268][ T8020] __x64_sys_setsockopt+0x13f/0x1b0 [ 387.104306][ T8020] do_syscall_64+0xfa/0x3b0 [ 387.104329][ T8020] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.104351][ T8020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.104372][ T8020] ? clear_bhb_loop+0x60/0xb0 [ 387.104399][ T8020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.104419][ T8020] RIP: 0033:0x7feb34f8e9a9 [ 387.104439][ T8020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.104458][ T8020] RSP: 002b:00007feb35d59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 387.104480][ T8020] RAX: ffffffffffffffda RBX: 00007feb351b5fa0 RCX: 00007feb34f8e9a9 [ 387.104497][ T8020] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 387.104510][ T8020] RBP: 00007feb35010d69 R08: 0000000000000052 R09: 0000000000000000 [ 387.104524][ T8020] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.104538][ T8020] R13: 0000000000000000 R14: 00007feb351b5fa0 R15: 00007ffc1b9eecd8 [ 387.104572][ T8020] [ 387.104617][ T8020] Mem-Info: [ 387.413139][ T8020] active_anon:4723 inactive_anon:8589 isolated_anon:0 [ 387.413139][ T8020] active_file:5494 inactive_file:35944 isolated_file:0 [ 387.413139][ T8020] unevictable:768 dirty:131 writeback:0 [ 387.413139][ T8020] slab_reclaimable:10212 slab_unreclaimable:95884 [ 387.413139][ T8020] mapped:32498 shmem:8688 pagetables:1215 [ 387.413139][ T8020] sec_pagetables:0 bounce:0 [ 387.413139][ T8020] kernel_misc_reclaimable:0 [ 387.413139][ T8020] free:1331310 free_pcp:11197 free_cma:0 [ 387.460517][ T8020] Node 0 active_anon:18892kB inactive_anon:34356kB active_file:21772kB inactive_file:143776kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129992kB dirty:520kB writeback:0kB shmem:33216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12220kB pagetables:4696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 387.494943][ T8020] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 387.526639][ T8020] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 387.556729][ T8020] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 387.562610][ T8020] Node 0 DMA32 free:1405760kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18888kB inactive_anon:34312kB active_file:20000kB inactive_file:143708kB unevictable:1536kB writepending:516kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:27108kB local_pcp:10708kB free_cma:0kB [ 387.596096][ T8020] lowmem_reserve[]: 0 0 1 1 1 [ 387.600942][ T8020] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:4kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 387.630204][ T8020] lowmem_reserve[]: 0 0 0 0 0 [ 387.635998][ T8020] Node 1 Normal free:3904112kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17664kB local_pcp:8672kB free_cma:0kB [ 387.667960][ T8020] lowmem_reserve[]: 0 0 0 0 0 [ 387.672907][ T8020] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 387.685714][ T8020] Node 0 DMA32: 260*4kB (UME) 190*8kB (UME) 79*16kB (U) 248*32kB (UM) 36*64kB (UE) 44*128kB (UE) 62*256kB (UME) 68*512kB (UME) 16*1024kB (UM) 6*2048kB (UME) 319*4096kB (M) = 1405680kB [ 387.704328][ T8020] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 387.716359][ T8020] Node 1 Normal: 190*4kB (U) 49*8kB (UME) 45*16kB (UME) 96*32kB (UME) 27*64kB (UME) 5*128kB (UME) 2*256kB (M) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3904144kB [ 387.734551][ T8020] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 387.745384][ T8020] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 387.755500][ T8020] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 387.765146][ T8020] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 387.774920][ T8020] 50122 total pagecache pages [ 387.779667][ T8020] 0 pages in swap cache [ 387.783860][ T8020] Free swap = 124996kB [ 387.788111][ T8020] Total swap = 124996kB [ 387.792318][ T8020] 2097051 pages RAM [ 387.796316][ T8020] 0 pages HighMem/MovableOnly [ 387.801078][ T8020] 424693 pages reserved [ 387.805463][ T8020] 0 pages cma reserved [ 388.025051][ T30] audit: type=1400 audit(1753805002.714:44): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8022 comm="syz.4.457" daddr=fe88::105 [ 390.879316][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 391.862405][ T5923] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 392.066289][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 392.095510][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.137600][ T5923] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 392.165984][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.183392][ T7746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.483080][ T5923] usb 1-1: config 0 descriptor?? [ 392.492789][ T8065] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.465'. [ 392.702871][ T8064] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.465'. [ 393.068658][ T5923] magicmouse 0003:05AC:0265.0002: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.0-1/input0 [ 394.955948][ T5909] usb 1-1: USB disconnect, device number 3 [ 395.452762][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'. [ 396.827261][ T30] audit: type=1400 audit(1753805011.373:45): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8105 comm="syz.1.472" daddr=fe80::15 dest=20000 [ 396.842962][ T8110] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 396.853171][ T8110] PKCS7: Only support pkcs7_signedData type [ 397.559017][ T7746] veth0_vlan: entered promiscuous mode [ 398.098890][ T7746] veth1_vlan: entered promiscuous mode [ 398.269278][ T8125] XFS (nullb0): Invalid superblock magic number [ 398.293560][ T7746] veth0_macvtap: entered promiscuous mode [ 398.898248][ T7746] veth1_macvtap: entered promiscuous mode [ 399.599752][ T8141] syz.4.478 uses obsolete (PF_INET,SOCK_PACKET) [ 399.888352][ T7746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.946533][ T7746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.013263][ T7746] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.075701][ T7746] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.100938][ T7746] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.136978][ T7746] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.029101][ T8156] warn_alloc: 1 callbacks suppressed [ 401.029829][ T8156] syz.1.482: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 401.053248][ T8156] CPU: 1 UID: 0 PID: 8156 Comm: syz.1.482 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 401.053280][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.053296][ T8156] Call Trace: [ 401.053305][ T8156] [ 401.053315][ T8156] dump_stack_lvl+0x189/0x250 [ 401.053346][ T8156] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 401.053382][ T8156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.053408][ T8156] ? __pfx__printk+0x10/0x10 [ 401.053436][ T8156] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 401.053464][ T8156] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 401.053501][ T8156] warn_alloc+0x214/0x310 [ 401.053526][ T8156] ? stack_depot_save_flags+0x40/0x900 [ 401.053550][ T8156] ? preempt_schedule_notrace+0xf1/0x110 [ 401.053576][ T8156] ? __pfx_warn_alloc+0x10/0x10 [ 401.053604][ T8156] ? kasan_save_track+0x4f/0x80 [ 401.053639][ T8156] ? xskq_create+0x56/0x170 [ 401.053658][ T8156] ? xsk_init_queue+0xb0/0x110 [ 401.053676][ T8156] ? xsk_setsockopt+0x43f/0x710 [ 401.053708][ T8156] ? do_sock_setsockopt+0x179/0x1b0 [ 401.053738][ T8156] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 401.053768][ T8156] ? do_syscall_64+0xfa/0x3b0 [ 401.053791][ T8156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.053823][ T8156] __vmalloc_node_range_noprof+0x125/0x12f0 [ 401.053891][ T8156] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 401.053924][ T8156] ? __kasan_kmalloc+0x93/0xb0 [ 401.053949][ T8156] vmalloc_user_noprof+0xad/0xf0 [ 401.053974][ T8156] ? xskq_create+0xbf/0x170 [ 401.053997][ T8156] xskq_create+0xbf/0x170 [ 401.054024][ T8156] xsk_init_queue+0xb0/0x110 [ 401.054048][ T8156] xsk_setsockopt+0x43f/0x710 [ 401.054086][ T8156] ? __pfx_xsk_setsockopt+0x10/0x10 [ 401.054126][ T8156] ? __fget_files+0x2a/0x420 [ 401.054154][ T8156] ? __fget_files+0x2a/0x420 [ 401.054178][ T8156] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 401.054199][ T8156] ? __pfx_xsk_setsockopt+0x10/0x10 [ 401.054237][ T8156] do_sock_setsockopt+0x179/0x1b0 [ 401.054274][ T8156] __x64_sys_setsockopt+0x13f/0x1b0 [ 401.054314][ T8156] do_syscall_64+0xfa/0x3b0 [ 401.054340][ T8156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.054361][ T8156] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 401.054382][ T8156] ? clear_bhb_loop+0x60/0xb0 [ 401.054410][ T8156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.054431][ T8156] RIP: 0033:0x7fefe8f8e9a9 [ 401.054451][ T8156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.054471][ T8156] RSP: 002b:00007fefe9e4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 401.054495][ T8156] RAX: ffffffffffffffda RBX: 00007fefe91b6160 RCX: 00007fefe8f8e9a9 [ 401.054511][ T8156] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 401.054524][ T8156] RBP: 00007fefe9010d69 R08: 0000000000000052 R09: 0000000000000000 [ 401.054538][ T8156] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.054552][ T8156] R13: 0000000000000000 R14: 00007fefe91b6160 R15: 00007fffef28de88 [ 401.054587][ T8156] [ 401.054876][ T8156] Mem-Info: [ 401.290089][ T30] audit: type=1400 audit(1754329303.409:46): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8149 comm="syz.1.482" daddr=::ffff:172.20.20.57 dest=20001 [ 401.292013][ T5923] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 401.367995][ T8156] active_anon:272 inactive_anon:11651 isolated_anon:0 [ 401.367995][ T8156] active_file:5518 inactive_file:35964 isolated_file:0 [ 401.367995][ T8156] unevictable:768 dirty:154 writeback:0 [ 401.367995][ T8156] slab_reclaimable:10209 slab_unreclaimable:97388 [ 401.367995][ T8156] mapped:35534 shmem:7113 pagetables:1319 [ 401.367995][ T8156] sec_pagetables:0 bounce:0 [ 401.367995][ T8156] kernel_misc_reclaimable:0 [ 401.367995][ T8156] free:1330592 free_pcp:11391 free_cma:0 [ 401.440440][ T8156] Node 0 active_anon:1088kB inactive_anon:46604kB active_file:21868kB inactive_file:143856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142136kB dirty:616kB writeback:0kB shmem:26916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12528kB pagetables:5112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 401.474902][ T8156] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 401.507818][ T8156] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 401.536951][ T8156] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 401.542784][ T8156] Node 0 DMA32 free:1402600kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1084kB inactive_anon:46560kB active_file:20096kB inactive_file:143788kB unevictable:1536kB writepending:612kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:28144kB local_pcp:8992kB free_cma:0kB [ 401.575575][ T8156] lowmem_reserve[]: 0 0 1 1 1 [ 401.580312][ T8156] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:4kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 401.610748][ T8156] lowmem_reserve[]: 0 0 0 0 0 [ 401.615576][ T8156] Node 1 Normal free:3904400kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17408kB local_pcp:8416kB free_cma:0kB [ 401.646815][ T8156] lowmem_reserve[]: 0 0 0 0 0 [ 401.651587][ T8156] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 401.664355][ T8156] Node 0 DMA32: 0*4kB 45*8kB (UM) 80*16kB (UE) 168*32kB (UME) 38*64kB (UME) 46*128kB (UME) 79*256kB (UME) 58*512kB (UM) 16*1024kB (UM) 7*2048kB (UME) 319*4096kB (M) = 1402600kB [ 401.682148][ T8156] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 401.694113][ T8156] Node 1 Normal: 190*4kB (U) 49*8kB (UME) 45*16kB (UME) 102*32kB (UME) 28*64kB (UME) 5*128kB (UME) 2*256kB (M) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3904400kB [ 401.713464][ T8156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.723087][ T8156] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 401.732459][ T8156] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.742092][ T8156] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 401.752512][ T8156] 48591 total pagecache pages [ 401.757310][ T8156] 0 pages in swap cache [ 401.761569][ T8156] Free swap = 124996kB [ 401.765737][ T8156] Total swap = 124996kB [ 401.770211][ T8156] 2097051 pages RAM [ 401.774036][ T8156] 0 pages HighMem/MovableOnly [ 401.778801][ T8156] 424693 pages reserved [ 401.783001][ T8156] 0 pages cma reserved [ 402.457539][ T5923] usb 1-1: Using ep0 maxpacket: 8 [ 402.465301][ T5923] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 402.467412][ T8158] lo speed is unknown, defaulting to 1000 [ 402.480413][ T8158] lo speed is unknown, defaulting to 1000 [ 402.488441][ T8158] lo speed is unknown, defaulting to 1000 [ 402.499612][ T8158] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 402.513769][ T8158] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 402.540953][ T8158] lo speed is unknown, defaulting to 1000 [ 402.548290][ T8158] lo speed is unknown, defaulting to 1000 [ 402.556416][ T8158] lo speed is unknown, defaulting to 1000 [ 402.564320][ T8158] lo speed is unknown, defaulting to 1000 [ 402.571612][ T8158] lo speed is unknown, defaulting to 1000 [ 402.738233][ T5923] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 402.822246][ T8167] netlink: 132 bytes leftover after parsing attributes in process `syz.1.484'. [ 402.868423][ T8167] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 402.875229][ T8167] PKCS7: Only support pkcs7_signedData type [ 402.881643][ T30] audit: type=1400 audit(1754329305.288:47): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8164 comm="syz.1.484" daddr=fe80::15 dest=20000 [ 403.270965][ T5923] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 403.357215][ T5923] usb 1-1: Product: syz [ 403.370899][ T5923] usb 1-1: Manufacturer: syz [ 403.376414][ T5923] usb 1-1: SerialNumber: syz [ 403.596641][ T5923] usb 1-1: can't set config #1, error -71 [ 403.687805][ T8174] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 403.694242][ T8174] PKCS7: Only support pkcs7_signedData type [ 403.704644][ T30] audit: type=1400 audit(1754329306.078:48): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8172 comm="syz.4.486" daddr=fe80::15 dest=20000 [ 403.812183][ T5923] usb 1-1: USB disconnect, device number 4 [ 403.932537][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.066927][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.480652][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.193381][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.060414][ T8192] input: syz1 as /devices/virtual/input/input8 [ 408.456394][ T8226] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 408.457960][ T30] audit: type=1400 audit(1754853598.704:49): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8222 comm="syz.0.496" daddr=fe80::15 dest=20000 [ 408.478341][ T8226] PKCS7: Only support pkcs7_signedData type [ 409.166217][ T8229] [U] „ [ 411.410657][ T30] audit: type=1400 audit(1754853601.608:50): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8246 comm="syz.5.502" daddr=fe80::15 dest=20000 [ 411.430707][ T8252] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 411.437523][ T8252] PKCS7: Only support pkcs7_signedData type [ 413.425743][ T8121] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 413.612458][ T8121] usb 1-1: Using ep0 maxpacket: 8 [ 413.652033][ T8121] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 413.691654][ T8121] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 413.725579][ T8121] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 413.754145][ T8121] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 414.792203][ T8121] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.813245][ T8121] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 414.822384][ T8121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.972324][ T8282] loop6: detected capacity change from 0 to 7 [ 415.015764][ T8282] loop6: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 415.070299][ T8282] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 415.090888][ T8121] usb 1-1: usb_control_msg returned -32 [ 415.096569][ T8121] usbtmc 1-1:16.0: can't read capabilities [ 415.137127][ T8284] [U] „ [ 415.155851][ T8282] loop6: p2 start 2602905181 is beyond EOD, truncated [ 415.174805][ T8282] loop6: p3 start 1745589262 is beyond EOD, truncated [ 415.201084][ T8282] loop6: p4 start 325178268 is beyond EOD, truncated [ 415.207952][ T8282] loop6: p5 start 2326339850 is beyond EOD, truncated [ 415.229161][ T8282] loop6: p6 start 2562259694 is beyond EOD, truncated [ 416.206915][ T7054] udevd[7054]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 416.724765][ T5923] usb 1-1: USB disconnect, device number 5 [ 417.009628][ T8316] syz.4.518: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 417.025830][ T8316] CPU: 1 UID: 0 PID: 8316 Comm: syz.4.518 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 417.025863][ T8316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 417.025878][ T8316] Call Trace: [ 417.025887][ T8316] [ 417.025897][ T8316] dump_stack_lvl+0x189/0x250 [ 417.025929][ T8316] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 417.025965][ T8316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.025999][ T8316] ? __pfx__printk+0x10/0x10 [ 417.026028][ T8316] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 417.026057][ T8316] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 417.026094][ T8316] warn_alloc+0x214/0x310 [ 417.026120][ T8316] ? stack_depot_save_flags+0x40/0x900 [ 417.026149][ T8316] ? __pfx_warn_alloc+0x10/0x10 [ 417.026177][ T8316] ? kasan_save_track+0x4f/0x80 [ 417.026213][ T8316] ? xskq_create+0x56/0x170 [ 417.026233][ T8316] ? xsk_init_queue+0xb0/0x110 [ 417.026251][ T8316] ? xsk_setsockopt+0x43f/0x710 [ 417.026283][ T8316] ? do_sock_setsockopt+0x179/0x1b0 [ 417.026313][ T8316] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 417.026344][ T8316] ? do_syscall_64+0xfa/0x3b0 [ 417.026367][ T8316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.026399][ T8316] __vmalloc_node_range_noprof+0x125/0x12f0 [ 417.026459][ T8316] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 417.026493][ T8316] ? __kasan_kmalloc+0x93/0xb0 [ 417.026518][ T8316] vmalloc_user_noprof+0xad/0xf0 [ 417.026543][ T8316] ? xskq_create+0xbf/0x170 [ 417.026566][ T8316] xskq_create+0xbf/0x170 [ 417.026591][ T8316] xsk_init_queue+0xb0/0x110 [ 417.026616][ T8316] xsk_setsockopt+0x43f/0x710 [ 417.026654][ T8316] ? __pfx_xsk_setsockopt+0x10/0x10 [ 417.026692][ T8316] ? __fget_files+0x2a/0x420 [ 417.026721][ T8316] ? __fget_files+0x2a/0x420 [ 417.026745][ T8316] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 417.026766][ T8316] ? __pfx_xsk_setsockopt+0x10/0x10 [ 417.026803][ T8316] do_sock_setsockopt+0x179/0x1b0 [ 417.026841][ T8316] __x64_sys_setsockopt+0x13f/0x1b0 [ 417.026881][ T8316] do_syscall_64+0xfa/0x3b0 [ 417.026903][ T8316] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.026926][ T8316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.026948][ T8316] ? clear_bhb_loop+0x60/0xb0 [ 417.026986][ T8316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.027008][ T8316] RIP: 0033:0x7f5d63b8e9a9 [ 417.027029][ T8316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.027049][ T8316] RSP: 002b:00007f5d649f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 417.027073][ T8316] RAX: ffffffffffffffda RBX: 00007f5d63db6160 RCX: 00007f5d63b8e9a9 [ 417.027090][ T8316] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 417.027104][ T8316] RBP: 00007f5d63c10d69 R08: 0000000000000052 R09: 0000000000000000 [ 417.027118][ T8316] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.027132][ T8316] R13: 0000000000000000 R14: 00007f5d63db6160 R15: 00007ffc3efcf058 [ 417.027167][ T8316] [ 417.027210][ T8316] Mem-Info: [ 417.333513][ T8316] active_anon:295 inactive_anon:11875 isolated_anon:0 [ 417.333513][ T8316] active_file:5524 inactive_file:36049 isolated_file:0 [ 417.333513][ T8316] unevictable:768 dirty:121 writeback:8 [ 417.333513][ T8316] slab_reclaimable:10227 slab_unreclaimable:98397 [ 417.333513][ T8316] mapped:35614 shmem:7134 pagetables:1347 [ 417.333513][ T8316] sec_pagetables:0 bounce:0 [ 417.333513][ T8316] kernel_misc_reclaimable:0 [ 417.333513][ T8316] free:1330301 free_pcp:10171 free_cma:0 [ 417.354587][ T30] audit: type=1400 audit(1754853607.099:51): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8309 comm="syz.4.518" daddr=::ffff:172.20.20.57 dest=20001 [ 417.380390][ T8316] Node 0 active_anon:1180kB inactive_anon:47500kB active_file:21892kB inactive_file:144196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142456kB dirty:480kB writeback:32kB shmem:27000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12612kB pagetables:5224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 417.433873][ T8316] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 417.465540][ T8316] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 417.496387][ T8316] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 417.502276][ T8316] Node 0 DMA32 free:1400924kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1088kB inactive_anon:47548kB active_file:20128kB inactive_file:144128kB unevictable:1536kB writepending:428kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:24204kB local_pcp:10476kB free_cma:0kB [ 417.534911][ T8316] lowmem_reserve[]: 0 0 1 1 1 [ 417.541110][ T8316] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:4kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 417.570427][ T8316] lowmem_reserve[]: 0 0 0 0 0 [ 417.575159][ T8316] Node 1 Normal free:3904912kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16896kB local_pcp:8160kB free_cma:0kB [ 417.606688][ T8316] lowmem_reserve[]: 0 0 0 0 0 [ 417.611518][ T8316] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 417.624386][ T8316] Node 0 DMA32: 81*4kB (UM) 63*8kB (U) 120*16kB (UME) 179*32kB (UME) 113*64kB (UME) 72*128kB (UME) 77*256kB (UME) 47*512kB (UM) 15*1024kB (UM) 5*2048kB (UME) 319*4096kB (M) = 1400924kB [ 417.644571][ T8316] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 417.656646][ T8316] Node 1 Normal: 190*4kB (U) 49*8kB (UME) 45*16kB (UME) 112*32kB (UME) 29*64kB (UME) 6*128kB (UME) 2*256kB (M) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3904912kB [ 417.674796][ T8316] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 417.684417][ T8316] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 417.693954][ T8316] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 417.703770][ T8316] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 417.713099][ T8316] 48685 total pagecache pages [ 417.717807][ T8316] 0 pages in swap cache [ 417.721962][ T8316] Free swap = 124996kB [ 417.726167][ T8316] Total swap = 124996kB [ 417.730345][ T8316] 2097051 pages RAM [ 417.734218][ T8316] 0 pages HighMem/MovableOnly [ 417.738900][ T8316] 424693 pages reserved [ 417.743109][ T8316] 0 pages cma reserved [ 418.579824][ T30] audit: type=1400 audit(1754853608.645:52): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5500 comm="dhcpcd" daddr=ff02::2 [ 419.542660][ T8333] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 419.549000][ T8333] PKCS7: Only support pkcs7_signedData type [ 419.555477][ T30] audit: type=1400 audit(1754853609.601:53): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8330 comm="syz.5.523" daddr=fe80::15 dest=20000 [ 419.611539][ T8338] netlink: 48 bytes leftover after parsing attributes in process `syz.4.521'. [ 419.823482][ T30] audit: type=1400 audit(1754853609.788:54): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8325 comm="syz.2.522" daddr=fe80:: dest=20000 [ 420.143188][ T30] audit: type=1400 audit(1754853609.818:55): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5500 comm="dhcpcd" daddr=ff02::2 [ 420.178874][ T8345] [U] „ [ 420.589211][ T30] audit: type=1400 audit(1754853610.617:56): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5500 comm="dhcpcd" daddr=ff02::2 [ 420.674485][ T30] audit: type=1400 audit(1754853610.617:57): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5500 comm="dhcpcd" daddr=ff02::2 [ 420.796029][ T5155] Bluetooth: hci5: command tx timeout [ 422.650300][ T30] audit: type=1400 audit(1754853612.662:58): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5500 comm="dhcpcd" daddr=ff02::2 [ 424.462311][ T30] audit: type=1400 audit(1754853614.452:59): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5500 comm="dhcpcd" daddr=ff02::2 [ 424.568643][ T8378] process 'syz.4.533' launched './file1' with NULL argv: empty string added [ 426.038952][ T8383] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 426.045540][ T8383] PKCS7: Only support pkcs7_signedData type [ 426.084256][ T30] audit: type=1400 audit(1754853616.016:60): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8376 comm="syz.5.534" daddr=fe80::15 dest=20000 [ 426.506685][ T8391] XFS (nullb0): Invalid superblock magic number [ 427.638312][ T30] audit: type=1400 audit(1754853617.592:61): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8415 comm="syz.0.540" daddr=fe80:: dest=20000 [ 430.030766][ T30] audit: type=1400 audit(1754853619.973:62): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5500 comm="dhcpcd" daddr=ff02::2 [ 430.107654][ T30] audit: type=1400 audit(1754853619.973:63): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5500 comm="dhcpcd" daddr=ff02::2 [ 430.230563][ T30] audit: type=1400 audit(1754853620.132:64): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5500 comm="dhcpcd" daddr=ff02::2 [ 430.313813][ T30] audit: type=1400 audit(1754853620.162:65): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5500 comm="dhcpcd" daddr=ff02::2 [ 430.492575][ T8454] trusted_key: encrypted_key: insufficient parameters specified [ 433.080937][ T30] audit: type=1400 audit(1754853623.003:66): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8467 comm="syz.4.549" daddr=fe80::15 dest=20000 [ 433.103176][ T8468] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 433.110002][ T8468] PKCS7: Only support pkcs7_signedData type [ 434.280279][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.554'. [ 434.331968][ T8480] XFS (nullb0): Invalid superblock magic number [ 435.478257][ T8507] trusted_key: encrypted_key: insufficient parameters specified [ 436.150690][ T8503] macsec1: entered allmulticast mode [ 436.342187][ T8503] vlan0: entered allmulticast mode [ 436.489985][ T8503] veth0_vlan: entered allmulticast mode [ 438.531997][ T8503] vlan0: left allmulticast mode [ 438.545605][ T8503] veth0_vlan: left allmulticast mode [ 440.986683][ T30] audit: type=1400 audit(1754853630.814:67): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5500 comm="dhcpcd" daddr=ff02::2 [ 441.463493][ T30] audit: type=1400 audit(1754853630.814:68): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5500 comm="dhcpcd" daddr=ff02::2 [ 441.493282][ T30] audit: type=1400 audit(1754853630.814:69): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5500 comm="dhcpcd" daddr=ff02::2 [ 441.515833][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.568'. [ 441.553389][ T30] audit: type=1400 audit(1754853630.894:70): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5500 comm="dhcpcd" daddr=ff02::2 [ 441.585186][ T8551] [U] „ [ 441.668150][ T8554] XFS (nullb0): Invalid superblock magic number [ 441.809341][ T8565] FAULT_INJECTION: forcing a failure. [ 441.809341][ T8565] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 441.853860][ T8565] CPU: 1 UID: 0 PID: 8565 Comm: syz.1.571 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 441.853892][ T8565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 441.853910][ T8565] Call Trace: [ 441.853923][ T8565] [ 441.853933][ T8565] dump_stack_lvl+0x189/0x250 [ 441.853963][ T8565] ? __pfx____ratelimit+0x10/0x10 [ 441.853999][ T8565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.854024][ T8565] ? __pfx__printk+0x10/0x10 [ 441.854054][ T8565] ? fs_reclaim_acquire+0x7d/0x100 [ 441.854089][ T8565] should_fail_ex+0x414/0x560 [ 441.854118][ T8565] prepare_alloc_pages+0x213/0x610 [ 441.854153][ T8565] __alloc_frozen_pages_noprof+0x123/0x370 [ 441.854185][ T8565] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 441.854211][ T8565] ? do_kimage_alloc_init+0x4e/0x2a0 [ 441.854254][ T8565] ? policy_nodemask+0x27c/0x720 [ 441.854282][ T8565] alloc_pages_mpol+0x232/0x4a0 [ 441.854311][ T8565] alloc_pages_noprof+0xa9/0x190 [ 441.854337][ T8565] kimage_alloc_pages+0xbd/0x3b0 [ 441.854363][ T8565] kimage_alloc_control_pages+0x4d0/0xba0 [ 441.854412][ T8565] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 441.854458][ T8565] do_kexec_load+0x484/0x820 [ 441.854484][ T8565] ? __pfx_do_kexec_load+0x10/0x10 [ 441.854511][ T8565] ? _copy_from_user+0x94/0xb0 [ 441.854545][ T8565] __se_sys_kexec_load+0x134/0x160 [ 441.854571][ T8565] do_syscall_64+0xfa/0x3b0 [ 441.854595][ T8565] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.854617][ T8565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.854638][ T8565] ? clear_bhb_loop+0x60/0xb0 [ 441.854664][ T8565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.854685][ T8565] RIP: 0033:0x7fefe8f8e9a9 [ 441.854704][ T8565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.854727][ T8565] RSP: 002b:00007fefe9e8d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 441.854749][ T8565] RAX: ffffffffffffffda RBX: 00007fefe91b5fa0 RCX: 00007fefe8f8e9a9 [ 441.854766][ T8565] RDX: 0000200000000180 RSI: 0000000000000001 RDI: 0000000000000000 [ 441.854779][ T8565] RBP: 00007fefe9e8d090 R08: 0000000000000000 R09: 0000000000000000 [ 441.854792][ T8565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.854805][ T8565] R13: 0000000000000000 R14: 00007fefe91b5fa0 R15: 00007fffef28de88 [ 441.854837][ T8565] [ 441.854969][ T8565] kexec: Could not allocate control_code_buffer [ 446.253002][ T8613] netlink: 'syz.4.582': attribute type 3 has an invalid length. [ 446.343629][ T8613] netlink: 666 bytes leftover after parsing attributes in process `syz.4.582'. [ 446.762909][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.771939][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.803255][ T8615] [U] „ [ 449.237243][ T8660] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 449.245590][ T8660] PKCS7: Only support pkcs7_signedData type [ 449.251630][ T30] audit: type=1400 audit(1755377926.944:71): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8651 comm="syz.1.589" daddr=fe80::15 dest=20000 [ 450.336510][ T30] audit: type=1400 audit(1755377928.030:72): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8665 comm="syz.1.595" daddr=fe80::15 dest=20000 [ 450.374477][ T8670] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 450.381175][ T8670] PKCS7: Only support pkcs7_signedData type [ 453.108373][ T30] audit: type=1400 audit(1755377930.727:73): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8677 comm="syz.2.596" dest=20002 [ 453.933019][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 454.040838][ T8685] [U] „ [ 454.095105][ T10] usb 2-1: device descriptor read/64, error -71 [ 455.141742][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 455.226086][ T8698] binder: 8694:8698 unknown command 0 [ 455.317431][ T8698] binder: 8694:8698 ioctl c0306201 200000000100 returned -22 [ 455.335164][ T10] usb 2-1: device descriptor read/64, error -71 [ 455.731632][ T30] audit: type=1400 audit(1755377933.324:74): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8701 comm="syz.0.603" daddr=fe88::101 [ 456.700079][ T10] usb usb2-port1: attempt power cycle [ 458.095034][ T8707] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 458.114300][ T8121] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 458.273558][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'. [ 458.300389][ T8121] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 458.363436][ T8121] usb 5-1: can't read configurations, error -61 [ 459.432676][ T8741] Cannot find map_set index 0 as target [ 460.186569][ T8751] mmap: syz.5.611 (8751) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 460.595111][ T8752] [U] „ [ 460.634040][ T8756] input: syz1 as /devices/virtual/input/input9 [ 460.761976][ T8756] netlink: 'syz.1.615': attribute type 1 has an invalid length. [ 460.814334][ T8757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.042385][ T8756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 461.145496][ T30] audit: type=1400 audit(1755902226.616:75): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5500 comm="dhcpcd" daddr=ff02::2 [ 461.301499][ T8757] bond1: (slave gretap1): making interface the new active one [ 461.341810][ T30] audit: type=1400 audit(1755902226.616:76): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5500 comm="dhcpcd" daddr=ff02::2 [ 461.432010][ T8757] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 461.661748][ T8757] syz.1.615 (8757) used greatest stack depth: 19048 bytes left [ 462.839088][ T8773] netlink: 132 bytes leftover after parsing attributes in process `syz.0.618'. [ 462.854209][ T8773] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 462.860762][ T8773] PKCS7: Only support pkcs7_signedData type [ 462.876105][ T30] audit: type=1400 audit(1755902228.297:77): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8769 comm="syz.0.618" daddr=fe80::15 dest=20000 [ 463.451836][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 464.408438][ T8788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.623'. [ 464.597748][ T30] audit: type=1400 audit(1755902229.993:78): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8781 comm="syz.1.623" daddr=fe88::102 dest=20000 [ 466.428839][ T8803] [U] „ [ 466.766192][ T8809] syz.4.628: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 466.781289][ T8809] CPU: 1 UID: 0 PID: 8809 Comm: syz.4.628 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 466.781320][ T8809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 466.781335][ T8809] Call Trace: [ 466.781344][ T8809] [ 466.781354][ T8809] dump_stack_lvl+0x189/0x250 [ 466.781385][ T8809] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 466.781422][ T8809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.781448][ T8809] ? __pfx__printk+0x10/0x10 [ 466.781477][ T8809] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 466.781504][ T8809] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 466.781542][ T8809] warn_alloc+0x214/0x310 [ 466.781567][ T8809] ? irqentry_exit+0x74/0x90 [ 466.781589][ T8809] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.781614][ T8809] ? __pfx_warn_alloc+0x10/0x10 [ 466.781647][ T8809] ? __vmalloc_node_range_noprof+0x51/0x12f0 [ 466.781671][ T8809] ? __vmalloc_node_range_noprof+0xdc/0x12f0 [ 466.781698][ T8809] ? kasan_check_range+0x9f/0x2c0 [ 466.781730][ T8809] __vmalloc_node_range_noprof+0x125/0x12f0 [ 466.781789][ T8809] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 466.781822][ T8809] ? __kasan_kmalloc+0x93/0xb0 [ 466.781846][ T8809] vmalloc_user_noprof+0xad/0xf0 [ 466.781871][ T8809] ? xskq_create+0xbf/0x170 [ 466.781894][ T8809] xskq_create+0xbf/0x170 [ 466.781920][ T8809] xsk_init_queue+0xb0/0x110 [ 466.781944][ T8809] xsk_setsockopt+0x43f/0x710 [ 466.781983][ T8809] ? __pfx_xsk_setsockopt+0x10/0x10 [ 466.782023][ T8809] ? __fget_files+0x2a/0x420 [ 466.782051][ T8809] ? __fget_files+0x2a/0x420 [ 466.782075][ T8809] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 466.782097][ T8809] ? __pfx_xsk_setsockopt+0x10/0x10 [ 466.782135][ T8809] do_sock_setsockopt+0x179/0x1b0 [ 466.782183][ T8809] __x64_sys_setsockopt+0x13f/0x1b0 [ 466.782222][ T8809] do_syscall_64+0xfa/0x3b0 [ 466.782249][ T8809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.782271][ T8809] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 466.782294][ T8809] ? clear_bhb_loop+0x60/0xb0 [ 466.782321][ T8809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.782342][ T8809] RIP: 0033:0x7f5d63b8e9a9 [ 466.782362][ T8809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.782383][ T8809] RSP: 002b:00007f5d649f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 466.782407][ T8809] RAX: ffffffffffffffda RBX: 00007f5d63db6160 RCX: 00007f5d63b8e9a9 [ 466.782424][ T8809] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 466.782437][ T8809] RBP: 00007f5d63c10d69 R08: 0000000000000052 R09: 0000000000000000 [ 466.782451][ T8809] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.782465][ T8809] R13: 0000000000000000 R14: 00007f5d63db6160 R15: 00007ffc3efcf058 [ 466.782500][ T8809] [ 466.782573][ T8809] Mem-Info: [ 467.070430][ T8809] active_anon:295 inactive_anon:11834 isolated_anon:0 [ 467.070430][ T8809] active_file:5883 inactive_file:45892 isolated_file:0 [ 467.070430][ T8809] unevictable:768 dirty:216 writeback:0 [ 467.070430][ T8809] slab_reclaimable:10302 slab_unreclaimable:98070 [ 467.070430][ T8809] mapped:37219 shmem:7092 pagetables:1317 [ 467.070430][ T8809] sec_pagetables:0 bounce:0 [ 467.070430][ T8809] kernel_misc_reclaimable:0 [ 467.070430][ T8809] free:1307256 free_pcp:18710 free_cma:0 [ 467.117972][ T8809] Node 0 active_anon:1180kB inactive_anon:47328kB active_file:23328kB inactive_file:183568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148808kB dirty:860kB writeback:0kB shmem:26832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12512kB pagetables:5104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 467.152680][ T8809] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 467.184736][ T8809] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 467.213917][ T8809] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 467.219753][ T8809] Node 0 DMA32 free:1308180kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1176kB inactive_anon:47284kB active_file:21556kB inactive_file:183500kB unevictable:1536kB writepending:856kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:58380kB local_pcp:10836kB free_cma:0kB [ 467.254035][ T8809] lowmem_reserve[]: 0 0 1 1 1 [ 467.259130][ T8809] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:4kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 467.288407][ T8809] lowmem_reserve[]: 0 0 0 0 0 [ 467.293305][ T8809] Node 1 Normal free:3905424kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16416kB local_pcp:7648kB free_cma:0kB [ 467.324741][ T8809] lowmem_reserve[]: 0 0 0 0 0 [ 467.331066][ T8809] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 467.343971][ T8809] Node 0 DMA32: 182*4kB (U) 56*8kB (UM) 29*16kB (UE) 447*32kB (UME) 249*64kB (UM) 9*128kB (UME) 7*256kB (UM) 35*512kB (UME) 12*1024kB (UME) 3*2048kB (UM) 302*4096kB (M) = 1308168kB [ 467.362165][ T8809] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 467.374073][ T8809] Node 1 Normal: 190*4kB (U) 49*8kB (UME) 45*16kB (UME) 120*32kB (UME) 29*64kB (UME) 8*128kB (UME) 2*256kB (M) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3905424kB [ 467.392197][ T8809] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 467.401826][ T8809] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 467.411212][ T8809] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 467.420796][ T8809] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 467.431753][ T8809] 58863 total pagecache pages [ 467.436469][ T8809] 0 pages in swap cache [ 467.440656][ T8809] Free swap = 124996kB [ 467.444906][ T8809] Total swap = 124996kB [ 467.449071][ T8809] 2097051 pages RAM [ 467.453007][ T8809] 0 pages HighMem/MovableOnly [ 467.457868][ T8809] 424693 pages reserved [ 467.462059][ T8809] 0 pages cma reserved [ 467.470692][ T30] audit: type=1400 audit(1755902232.115:79): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8805 comm="syz.4.628" daddr=::ffff:172.20.20.57 dest=20001 [ 467.854982][ T8816] XFS (nullb0): Invalid superblock magic number [ 468.359801][ T5838] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 468.665497][ T5838] usb 1-1: Using ep0 maxpacket: 32 [ 468.689624][ T5838] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 468.713023][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.734796][ T5838] usb 1-1: config 0 descriptor?? [ 468.785766][ T5838] as10x_usb: device has been detected [ 468.860581][ T5838] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 469.038658][ T5838] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 470.056414][ T5838] as10x_usb: error during firmware upload part1 [ 470.208794][ T5838] Registered device nBox DVB-T Dongle [ 470.396084][ T5838] usb 1-1: USB disconnect, device number 6 [ 470.477273][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.634'. [ 470.585982][ T5838] Unregistered device nBox DVB-T Dongle [ 470.603762][ T5838] as10x_usb: device has been disconnected [ 472.694139][ T8856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.273943][ T8856] bond0: (slave rose0): Enslaving as an active interface with an up link [ 475.313177][ T8918] [U] „ [ 475.449596][ T30] audit: type=1400 audit(1755902240.664:80): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8922 comm="syz.0.643" daddr=fe88::101 [ 476.247242][ T30] audit: type=1400 audit(1755902241.445:81): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8935 comm="syz.2.647" dest=20002 [ 476.855103][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 477.047104][ T24] usb 1-1: device descriptor read/64, error -71 [ 477.289888][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 477.462760][ T24] usb 1-1: device descriptor read/64, error -71 [ 477.573282][ T24] usb usb1-port1: attempt power cycle [ 477.947089][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 478.002022][ T24] usb 1-1: device descriptor read/8, error -71 [ 478.017689][ T8121] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 478.043226][ T8953] warn_alloc: 1 callbacks suppressed [ 478.043248][ T8953] syz.4.650: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 478.078232][ T8953] CPU: 0 UID: 0 PID: 8953 Comm: syz.4.650 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 478.078264][ T8953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 478.078279][ T8953] Call Trace: [ 478.078287][ T8953] [ 478.078299][ T8953] dump_stack_lvl+0x189/0x250 [ 478.078333][ T8953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.078359][ T8953] ? __pfx__printk+0x10/0x10 [ 478.078388][ T8953] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 478.078417][ T8953] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 478.078447][ T8953] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 478.078478][ T8953] warn_alloc+0x214/0x310 [ 478.078503][ T8953] ? stack_depot_save_flags+0x40/0x900 [ 478.078532][ T8953] ? __pfx_warn_alloc+0x10/0x10 [ 478.078559][ T8953] ? kasan_save_track+0x4f/0x80 [ 478.078593][ T8953] ? xskq_create+0x56/0x170 [ 478.078613][ T8953] ? xsk_init_queue+0xb0/0x110 [ 478.078631][ T8953] ? xsk_setsockopt+0x43f/0x710 [ 478.078663][ T8953] ? do_sock_setsockopt+0x179/0x1b0 [ 478.078692][ T8953] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 478.078722][ T8953] ? do_syscall_64+0xfa/0x3b0 [ 478.078743][ T8953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.078772][ T8953] __vmalloc_node_range_noprof+0x125/0x12f0 [ 478.078827][ T8953] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 478.078853][ T8953] ? xskq_create+0x56/0x170 [ 478.078875][ T8953] ? __kasan_kmalloc+0x93/0xb0 [ 478.078899][ T8953] vmalloc_user_noprof+0xad/0xf0 [ 478.078923][ T8953] ? xskq_create+0xbf/0x170 [ 478.078944][ T8953] xskq_create+0xbf/0x170 [ 478.078968][ T8953] xsk_init_queue+0xb0/0x110 [ 478.078991][ T8953] xsk_setsockopt+0x43f/0x710 [ 478.079029][ T8953] ? __pfx_xsk_setsockopt+0x10/0x10 [ 478.079078][ T8953] ? __fget_files+0x2a/0x420 [ 478.079106][ T8953] ? __fget_files+0x2a/0x420 [ 478.079130][ T8953] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 478.079151][ T8953] ? __pfx_xsk_setsockopt+0x10/0x10 [ 478.079187][ T8953] do_sock_setsockopt+0x179/0x1b0 [ 478.079225][ T8953] __x64_sys_setsockopt+0x13f/0x1b0 [ 478.079263][ T8953] do_syscall_64+0xfa/0x3b0 [ 478.079286][ T8953] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.079308][ T8953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.079329][ T8953] ? clear_bhb_loop+0x60/0xb0 [ 478.079356][ T8953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.079377][ T8953] RIP: 0033:0x7f5d63b8e9a9 [ 478.079398][ T8953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.079417][ T8953] RSP: 002b:00007f5d64a35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 478.079439][ T8953] RAX: ffffffffffffffda RBX: 00007f5d63db5fa0 RCX: 00007f5d63b8e9a9 [ 478.079455][ T8953] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 478.079468][ T8953] RBP: 00007f5d63c10d69 R08: 0000000000000052 R09: 0000000000000000 [ 478.079482][ T8953] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.079495][ T8953] R13: 0000000000000000 R14: 00007f5d63db5fa0 R15: 00007ffc3efcf058 [ 478.079529][ T8953] [ 478.079569][ T8953] Mem-Info: [ 478.230311][ T8121] usb 6-1: Using ep0 maxpacket: 32 [ 478.243190][ T8953] active_anon:273 inactive_anon:11914 isolated_anon:0 [ 478.243190][ T8953] active_file:8462 inactive_file:43342 isolated_file:0 [ 478.243190][ T8953] unevictable:770 dirty:137 writeback:0 [ 478.243190][ T8953] slab_reclaimable:10317 slab_unreclaimable:98449 [ 478.243190][ T8953] mapped:36245 shmem:7090 pagetables:1361 [ 478.243190][ T8953] sec_pagetables:0 bounce:0 [ 478.243190][ T8953] kernel_misc_reclaimable:0 [ 478.243190][ T8953] free:1313196 free_pcp:12874 free_cma:0 [ 478.512771][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 478.545751][ T24] usb 1-1: device descriptor read/8, error -71 [ 478.567127][ T8953] Node 0 active_anon:1096kB inactive_anon:47736kB active_file:33644kB inactive_file:173368kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:145108kB dirty:544kB writeback:0kB shmem:26824kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12716kB pagetables:5460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 478.619941][ T8121] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 478.637862][ T8121] usb 6-1: config 0 has no interface number 0 [ 478.643242][ T8953] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 478.705392][ T24] usb usb1-port1: unable to enumerate USB device [ 478.712255][ T8121] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 478.732838][ T8121] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.764881][ T8953] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 478.774362][ T8121] usb 6-1: Product: syz [ 478.845612][ T8121] usb 6-1: Manufacturer: syz [ 478.857531][ T8121] usb 6-1: SerialNumber: syz [ 478.880318][ T8953] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 478.889283][ T8121] usb 6-1: config 0 descriptor?? [ 478.896126][ T8953] Node 0 DMA32 free:1331332kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12492kB inactive_anon:36076kB active_file:31872kB inactive_file:173300kB unevictable:1544kB writepending:544kB present:3129332kB managed:2561004kB mlocked:8kB bounce:0kB free_pcp:35432kB local_pcp:14276kB free_cma:0kB [ 478.908834][ T8121] smsc95xx v2.0.0 [ 479.103150][ T8970] XFS (nullb0): Invalid superblock magic number [ 479.128029][ T8953] lowmem_reserve[]: 0 0 1 1 1 [ 479.286939][ T8953] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 479.613530][ T8953] lowmem_reserve[]: 0 0 0 0 0 [ 479.619654][ T8953] Node 1 Normal free:3906192kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15712kB local_pcp:7424kB free_cma:0kB [ 479.694450][ T8953] lowmem_reserve[]: 0 0 0 0 0 [ 479.699285][ T8953] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 479.902009][ T8953] Node 0 DMA32: 399*4kB (UM) 133*8kB (UM) 356*16kB (UME) 416*32kB (UME) 341*64kB (UM) 30*128kB (UME) 16*256kB (UM) 43*512kB (UME) 13*1024kB (UME) 6*2048kB (UM) 302*4096kB (M) = 1336036kB [ 479.971096][ T8953] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 480.052553][ T8953] Node 1 Normal: 190*4kB (U) 49*8kB (UME) 45*16kB (UME) 138*32kB (UME) 32*64kB (UME) 8*128kB (UME) 2*256kB (M) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3906192kB [ 480.071810][ T5155] Bluetooth: hci5: unexpected event for opcode 0x0c5a [ 480.088736][ T8953] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 480.110826][ T8953] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 480.125509][ T8953] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 480.147394][ T8953] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 480.164277][ T8953] 56965 total pagecache pages [ 480.182745][ T8953] 0 pages in swap cache [ 480.187032][ T8953] Free swap = 124996kB [ 480.239492][ T8953] Total swap = 124996kB [ 480.249618][ T8953] 2097051 pages RAM [ 480.269713][ T5923] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 480.298228][ T8953] 0 pages HighMem/MovableOnly [ 480.311412][ T8953] 424693 pages reserved [ 480.315277][ T30] audit: type=1400 audit(1755902245.443:82): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=8995 comm="syz.1.655" daddr=fe88::102 [ 480.315943][ T8953] 0 pages cma reserved [ 480.431180][ T5923] usb 1-1: Using ep0 maxpacket: 8 [ 480.442133][ T5923] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 480.476267][ T5923] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 480.536170][ T5923] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 480.582446][ T5851] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 480.607969][ T5923] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 480.648495][ T5923] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 480.742310][ T30] audit: type=1400 audit(1755902245.899:83): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=9000 comm="syz.1.656" daddr=fe80::15 dest=20000 [ 480.765930][ T9002] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 480.773621][ T9002] PKCS7: Only support pkcs7_signedData type [ 480.787331][ T5923] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 480.805838][ T5851] usb 3-1: Using ep0 maxpacket: 8 [ 480.891852][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.896890][ T5851] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 480.973770][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.067218][ T5851] usb 3-1: Product: syz [ 481.072875][ T5851] usb 3-1: Manufacturer: syz [ 481.089799][ T8121] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 481.137577][ T5851] usb 3-1: SerialNumber: syz [ 481.248585][ T8121] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 481.364142][ T5851] usb 3-1: config 0 descriptor?? [ 481.416934][ T8121] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 481.437363][ T5851] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 481.488874][ T8121] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 481.536390][ T8121] usb 6-1: USB disconnect, device number 2 [ 481.597965][ T5923] usb 1-1: GET_CAPABILITIES returned 0 [ 481.617204][ T5923] usbtmc 1-1:16.0: can't read capabilities [ 481.813243][ T5923] usb 1-1: USB disconnect, device number 11 [ 482.792765][ T5851] gspca_sonixj: reg_w1 err -110 [ 482.907809][ T5851] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 484.743716][ T9039] XFS (nullb0): Invalid superblock magic number [ 484.826285][ T8121] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 485.422722][ T30] audit: type=1400 audit(1755902250.533:84): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5500 comm="dhcpcd" daddr=ff02::2 [ 485.441917][ T8121] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.452765][ T8121] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 485.464772][ T8121] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 485.480596][ T8121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.490939][ T8121] usb 1-1: Product: syz [ 485.495368][ T8121] usb 1-1: Manufacturer: syz [ 485.501377][ T8121] usb 1-1: SerialNumber: syz [ 485.533445][ T8121] usb 1-1: config 0 descriptor?? [ 486.742059][ T5909] usb 1-1: USB disconnect, device number 12 [ 488.232227][ T9061] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 488.238927][ T9061] PKCS7: Only support pkcs7_signedData type [ 488.482652][ T30] audit: type=1400 audit(1755902253.335:85): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=9059 comm="syz.0.668" daddr=fe80::15 dest=20000 [ 489.438840][ T30] audit: type=1400 audit(1755902254.538:86): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=5500 comm="dhcpcd" daddr=ff02::2 [ 489.892509][ T9056] syz.4.667: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 489.955214][ T9056] CPU: 0 UID: 0 PID: 9056 Comm: syz.4.667 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 489.955246][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 489.955261][ T9056] Call Trace: [ 489.955271][ T9056] [ 489.955282][ T9056] dump_stack_lvl+0x189/0x250 [ 489.955324][ T9056] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 489.955360][ T9056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.955387][ T9056] ? __pfx__printk+0x10/0x10 [ 489.955416][ T9056] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 489.955445][ T9056] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 489.955482][ T9056] warn_alloc+0x214/0x310 [ 489.955507][ T9056] ? stack_depot_save_flags+0x334/0x900 [ 489.955536][ T9056] ? __pfx_warn_alloc+0x10/0x10 [ 489.955565][ T9056] ? kasan_save_track+0x4f/0x80 [ 489.955601][ T9056] ? xskq_create+0x56/0x170 [ 489.955622][ T9056] ? xsk_init_queue+0xb0/0x110 [ 489.955641][ T9056] ? xsk_setsockopt+0x43f/0x710 [ 489.955673][ T9056] ? do_sock_setsockopt+0x179/0x1b0 [ 489.955703][ T9056] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 489.955735][ T9056] ? do_syscall_64+0xfa/0x3b0 [ 489.955758][ T9056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.955790][ T9056] __vmalloc_node_range_noprof+0x125/0x12f0 [ 489.955855][ T9056] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 489.955889][ T9056] ? __kasan_kmalloc+0x93/0xb0 [ 489.955915][ T9056] vmalloc_user_noprof+0xad/0xf0 [ 489.955941][ T9056] ? xskq_create+0xbf/0x170 [ 489.955964][ T9056] xskq_create+0xbf/0x170 [ 489.955991][ T9056] xsk_init_queue+0xb0/0x110 [ 489.956016][ T9056] xsk_setsockopt+0x43f/0x710 [ 489.956058][ T9056] ? __pfx_xsk_setsockopt+0x10/0x10 [ 489.956098][ T9056] ? __fget_files+0x2a/0x420 [ 489.956126][ T9056] ? __fget_files+0x2a/0x420 [ 489.956150][ T9056] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 489.956172][ T9056] ? __pfx_xsk_setsockopt+0x10/0x10 [ 489.956209][ T9056] do_sock_setsockopt+0x179/0x1b0 [ 489.956247][ T9056] __x64_sys_setsockopt+0x13f/0x1b0 [ 489.956287][ T9056] do_syscall_64+0xfa/0x3b0 [ 489.956320][ T9056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.956341][ T9056] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 489.956362][ T9056] ? clear_bhb_loop+0x60/0xb0 [ 489.956390][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.956412][ T9056] RIP: 0033:0x7f5d63b8e9a9 [ 489.956433][ T9056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.956452][ T9056] RSP: 002b:00007f5d64a35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 489.956476][ T9056] RAX: ffffffffffffffda RBX: 00007f5d63db5fa0 RCX: 00007f5d63b8e9a9 [ 489.956493][ T9056] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 489.956506][ T9056] RBP: 00007f5d63c10d69 R08: 0000000000000052 R09: 0000000000000000 [ 489.956521][ T9056] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.956535][ T9056] R13: 0000000000000000 R14: 00007f5d63db5fa0 R15: 00007ffc3efcf058 [ 489.956569][ T9056] [ 490.299581][ T9056] Mem-Info: [ 490.302855][ T9056] active_anon:296 inactive_anon:10294 isolated_anon:0 [ 490.302855][ T9056] active_file:8466 inactive_file:43353 isolated_file:0 [ 490.302855][ T9056] unevictable:768 dirty:89 writeback:0 [ 490.302855][ T9056] slab_reclaimable:10309 slab_unreclaimable:98234 [ 490.302855][ T9056] mapped:35298 shmem:5581 pagetables:1383 [ 490.302855][ T9056] sec_pagetables:0 bounce:0 [ 490.302855][ T9056] kernel_misc_reclaimable:0 [ 490.302855][ T9056] free:1315015 free_pcp:12348 free_cma:0 [ 490.349658][ T9056] Node 0 active_anon:1184kB inactive_anon:41176kB active_file:33660kB inactive_file:173412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141192kB dirty:352kB writeback:0kB shmem:20788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12628kB pagetables:5368kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 490.384611][ T9056] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 490.417342][ T9056] Node 0 DMA free:15344kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 490.447192][ T9056] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 490.453481][ T9056] Node 0 DMA32 free:1338516kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1180kB inactive_anon:41132kB active_file:31888kB inactive_file:173344kB unevictable:1536kB writepending:352kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:33664kB local_pcp:22332kB free_cma:0kB [ 490.486947][ T9056] lowmem_reserve[]: 0 0 1 1 1 [ 490.492379][ T9056] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 490.522557][ T9056] lowmem_reserve[]: 0 0 0 0 0 [ 490.527632][ T9056] Node 1 Normal free:3906192kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15712kB local_pcp:8288kB free_cma:0kB [ 490.560663][ T9056] lowmem_reserve[]: 0 0 0 0 0 [ 490.566083][ T9056] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 490.607828][ T9056] Node 0 DMA32: 251*4kB (UM) 231*8kB (UM) 583*16kB (UME) 252*32kB (UME) 352*64kB (UM) 29*128kB (UME) 17*256kB (UM) 43*512kB (UME) 14*1024kB (UME) 5*2048kB (UM) 303*4096kB (M) = 1338516kB [ 490.693453][ T5851] usb 3-1: USB disconnect, device number 3 [ 490.699372][ T9056] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 490.826956][ T9056] Node 1 Normal: 190*4kB (U) 49*8kB (UME) 45*16kB (UME) 138*32kB (UME) 32*64kB (UME) 8*128kB (UME) 2*256kB (M) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3906192kB [ 490.971787][ T9056] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 491.034230][ T9056] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 491.054885][ T9056] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 491.065774][ T9056] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 491.080707][ T9056] 56049 total pagecache pages [ 491.187572][ T9087] Invalid ELF header magic: != ELF [ 491.212964][ T9056] 0 pages in swap cache [ 491.226428][ T9056] Free swap = 124996kB [ 491.397445][ T9056] Total swap = 124996kB [ 492.059840][ T9056] 2097051 pages RAM [ 492.227396][ T9056] 0 pages HighMem/MovableOnly [ 492.233031][ T9056] 424693 pages reserved [ 492.237344][ T9056] 0 pages cma reserved [ 493.257961][ T30] audit: type=1400 audit(1755902258.340:87): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=9094 comm="syz.1.677" daddr=fe80:: dest=20000 [ 493.999209][ T3584] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 494.536041][ T9109] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 494.542555][ T9109] PKCS7: Only support pkcs7_signedData type [ 494.569859][ T30] audit: type=1400 audit(1755902259.595:88): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=9107 comm="syz.4.680" daddr=fe80::15 dest=20000 [ 495.006820][ T3584] usb 6-1: no configurations [ 495.018476][ T3584] usb 6-1: can't read configurations, error -22 [ 495.179092][ T3584] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 495.947565][ T9114] XFS (nullb0): Invalid superblock magic number [ 496.793604][ T3584] usb 6-1: device descriptor read/all, error -71 [ 496.800340][ T3584] usb usb6-port1: attempt power cycle [ 498.381115][ T30] audit: type=1400 audit(1755902262.754:89): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=9142 comm="syz.0.686" daddr=::ffff:172.20.20.57 dest=20001 [ 498.960937][ T30] audit: type=1400 audit(1755902264.019:90): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=9156 comm="syz.1.691" daddr=fe80:: dest=20000 [ 499.448916][ T5851] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 499.866648][ T5851] usb 5-1: no configurations [ 500.153021][ T5851] usb 5-1: can't read configurations, error -22 [ 500.226033][ T9172] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 500.427485][ T5851] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 500.943712][ T9178] trusted_key: encrypted_key: insufficient parameters specified [ 501.075895][ T5851] usb 5-1: no configurations [ 501.087085][ T5851] usb 5-1: can't read configurations, error -22 [ 501.117274][ T5851] usb usb5-port1: attempt power cycle [ 501.771391][ T5851] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 501.888800][ T5851] usb 5-1: no configurations [ 501.956884][ T5851] usb 5-1: can't read configurations, error -22 [ 502.455579][ T9196] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 503.485233][ T51] non-paged memory [ 503.489910][ T51] list_del corruption, ffff88802620c780->next is LIST_POISON1 (dead000000000100) [ 503.500045][ T51] ------------[ cut here ]------------ [ 503.505672][ T51] kernel BUG at lib/list_debug.c:58! [ 503.539613][ T51] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 503.545936][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 503.556461][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 503.566783][ T51] Workqueue: hci5 hci_conn_timeout [ 503.571929][ T51] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 503.579069][ T51] Code: 40 bd e1 8b 48 89 de e8 40 20 68 fc 90 0f 0b 4c 89 e7 e8 d5 03 40 fd 48 c7 c7 a0 bd e1 8b 48 89 de 4c 89 e2 e8 23 20 68 fc 90 <0f> 0b 4c 89 e7 e8 b8 03 40 fd 48 c7 c7 00 be e1 8b 48 89 de 4c 89 [ 503.598708][ T51] RSP: 0018:ffffc90000bb7980 EFLAGS: 00010246 [ 503.604895][ T51] RAX: 000000000000004e RBX: ffff88802620c780 RCX: a516f635d75ba300 [ 503.612990][ T51] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 503.621031][ T51] RBP: ffffffff8a7589d0 R08: 0000000000000003 R09: 0000000000000004 [ 503.629245][ T51] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: dead000000000100 [ 503.637241][ T51] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 503.645318][ T51] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 503.654310][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.661152][ T51] CR2: 0000200000008000 CR3: 0000000028230000 CR4: 00000000003526f0 [ 503.669489][ T51] Call Trace: [ 503.672784][ T51] [ 503.675767][ T51] hci_cmd_sync_dequeue_once+0x24a/0x370 [ 503.681448][ T51] hci_cancel_connect_sync+0xc8/0x120 [ 503.686939][ T51] hci_abort_conn+0x191/0x330 [ 503.691641][ T51] ? process_scheduled_works+0x9ef/0x17b0 [ 503.697379][ T51] process_scheduled_works+0xade/0x17b0 [ 503.702947][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 503.709126][ T51] worker_thread+0x8a0/0xda0 [ 503.713845][ T51] kthread+0x711/0x8a0 [ 503.717935][ T51] ? __pfx_worker_thread+0x10/0x10 [ 503.723074][ T51] ? __pfx_kthread+0x10/0x10 [ 503.727853][ T51] ? _raw_spin_unlock_irq+0x23/0x50 [ 503.733131][ T51] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.738352][ T51] ? __pfx_kthread+0x10/0x10 [ 503.742978][ T51] ret_from_fork+0x3fc/0x770 [ 503.747592][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 503.752720][ T51] ? __switch_to_asm+0x39/0x70 [ 503.757507][ T51] ? __switch_to_asm+0x33/0x70 [ 503.762326][ T51] ? __pfx_kthread+0x10/0x10 [ 503.766952][ T51] ret_from_fork_asm+0x1a/0x30 [ 503.771765][ T51] [ 503.774804][ T51] Modules linked in: [ 503.780708][ T51] ---[ end trace 0000000000000000 ]--- [ 504.537151][ T51] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 504.544517][ T51] Code: 40 bd e1 8b 48 89 de e8 40 20 68 fc 90 0f 0b 4c 89 e7 e8 d5 03 40 fd 48 c7 c7 a0 bd e1 8b 48 89 de 4c 89 e2 e8 23 20 68 fc 90 <0f> 0b 4c 89 e7 e8 b8 03 40 fd 48 c7 c7 00 be e1 8b 48 89 de 4c 89 [ 504.564478][ T51] RSP: 0018:ffffc90000bb7980 EFLAGS: 00010246 [ 504.570980][ T51] RAX: 000000000000004e RBX: ffff88802620c780 RCX: a516f635d75ba300 [ 504.579207][ T51] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 504.587324][ T51] RBP: ffffffff8a7589d0 R08: 0000000000000003 R09: 0000000000000004 [ 504.596198][ T51] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: dead000000000100 [ 504.604338][ T51] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 504.612512][ T51] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 504.621769][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 504.628529][ T51] CR2: 0000564f7c27fd51 CR3: 0000000078cc6000 CR4: 00000000003526f0 [ 504.636633][ T51] Kernel panic - not syncing: Fatal exception [ 504.643156][ T51] Kernel Offset: disabled [ 504.647510][ T51] Rebooting in 86400 seconds..