last executing test programs: 23m13.774944239s ago: executing program 2 (id=81): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x40842, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setresuid(0xee01, 0xee00, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000000)={0x0, 0x1ff, 0x42, 0xb97}) 23m13.30729967s ago: executing program 2 (id=85): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000340)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000300)={0x13, 0x0}) io_uring_setup(0x654e, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000ecb000/0x1000)=nil) close(r0) 23m12.37897396s ago: executing program 2 (id=88): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat\x00') read(r3, &(0x7f0000000480)=""/136, 0x88) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)) socket$rds(0x15, 0x5, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socket$rds(0x15, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40480c0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x0) r5 = dup(0xffffffffffffffff) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r5, 0x3ba0, &(0x7f0000000700)={0x48, 0x9, 0x0, 0x0, 0x6}) syz_ublk_setup_queues(r5, r4, 0x0, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa8f7, 0x20, 0x2, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaca, 0x0, 0x0, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x81f70, 0x400, 0x1, 0x302, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 23m8.404912639s ago: executing program 2 (id=93): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x40842, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setresuid(0xee01, 0xee00, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000000)={0x0, 0x1ff, 0x42, 0xb97}) 23m7.431905661s ago: executing program 2 (id=96): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0xc, 0x0, 0x0, 0x0, '\x00', 0xffffffff}, 0x0, [0x40000000, 0x0, 0x54c1, 0x3, 0xfffd, 0x5, 0x100, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x3, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x5, 0x4829d, 0x0, 0x9, 0x6, 0x0, 0x1000008000, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0xfffffffffffffff7, 0x0, 0xc, 0x2, 0xfffffffffffffffc, 0x4, 0x80, 0x10000, 0x4, 0xfdfffffffffffffe, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x20040000000, 0x0, 0x8, 0x80000000, 0xffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80002, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80, 0x4, 0x0, 0xfffffffffffffffd, 0x7, 0x0, 0x0, 0x8000000000000000, 0x2, 0x0, 0x7ff, 0x0, 0x40000000000, 0x0, 0x800000000000, 0xae, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x1075, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x3, 0x7, 0x7, 0x1d, 0x6, 0xffffffff80000001, 0x2, 0x3, 0xfffffffffffffffc, 0x4, 0x1000000000000000]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) fsopen(&(0x7f0000000780)='ext3\x00', 0x1) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 23m7.268520105s ago: executing program 2 (id=98): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x100) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) recvmmsg(r3, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000940)=0xc, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) openat(r0, &(0x7f0000000080)='./file0\x00', 0x440440, 0x4e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) 22m52.145574114s ago: executing program 32 (id=98): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x100) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) recvmmsg(r3, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000940)=0xc, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) openat(r0, &(0x7f0000000080)='./file0\x00', 0x440440, 0x4e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) 20m52.665668714s ago: executing program 3 (id=300): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x40, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0xc519ea7f13a9b11e, 0x0, 0x0, '\x00', {0xd, 0x6, "2318d3", 0xf4e, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x65}], "d2588e45cd1357bc"}}}}}}}, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) close(0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0) 20m51.765322473s ago: executing program 3 (id=302): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x43dd, &(0x7f00000002c0)={0x0, 0x57b0, 0x8000, 0xfffffffd, 0x40055}, &(0x7f00000001c0), &(0x7f0000000180), &(0x7f00000000c0)) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) openat(0xffffffffffffff9c, 0x0, 0x2042, 0x19d) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6400000003010104000000000000000002000000500001802c000180140003002001000000000000000000000000000214000400fe8000000000000000000000000000bb0c00028005000100110000001400018008000100ac1e00010800020000080000"], 0x64}}, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000003a40)={0x0, 0x2000000}) 20m50.632815458s ago: executing program 3 (id=306): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r2, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'8255\x00', [0x3, 0xfffffffc, 0x5, 0x4, 0x2f, 0xfffffff7, 0x8001, 0xa22, 0xfffffff8, 0x2, 0xfffffffc, 0xc3, 0x5006, 0x1000007, 0x1, 0x10003, 0x801000, 0x7fffffff, 0x1ff, 0x3ff, 0x1001010, 0x1ff, 0x8, 0x3, 0x8001, 0x7, 0x3ff, 0x5, 0x404, 0x3, 0xfffd]}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8954) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d5f28732c5fbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="a64a6f8911da357ba323a96d75"]}]}, 0xe0}], 0x1}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) 20m47.677936714s ago: executing program 3 (id=310): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x20, 0x1c, 0x68, 0x0, 0xe, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) 20m45.647281408s ago: executing program 3 (id=311): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x22080, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = getpgrp(0x0) tkill(r2, 0x2e) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) ioprio_get$uid(0x3, 0xee01) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) 20m44.425214946s ago: executing program 3 (id=315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000001c0)=0x5) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20m28.174595664s ago: executing program 33 (id=315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000001c0)=0x5) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5m58.045943536s ago: executing program 4 (id=2769): landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0xc17d}, 0x30, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x1c48}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x8) landlock_restrict_self(r0, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x95) landlock_restrict_self(r1, 0x7) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x8000, 0x1) 5m57.903278859s ago: executing program 4 (id=2771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007b40)=ANY=[@ANYBLOB="200000002200010a"], 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) 5m56.223786926s ago: executing program 4 (id=2783): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@host, 0x8}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) 5m56.120126778s ago: executing program 4 (id=2784): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) lseek(r0, 0x10001, 0x0) 5m56.05572907s ago: executing program 4 (id=2786): r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0xf3b, 0x5d4, 0x1, 0x400011}) 5m55.708078107s ago: executing program 4 (id=2788): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000080) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, 0x0, 0x40) syz_genetlink_get_family_id$nl802154(0x0, r0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r2, 0x29, 0x4c, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, 0x0, 0x0) 5m54.469701475s ago: executing program 34 (id=2788): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000080) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, 0x0, 0x40) syz_genetlink_get_family_id$nl802154(0x0, r0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r2, 0x29, 0x4c, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, 0x0, 0x0) 26.614142485s ago: executing program 0 (id=3509): syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x4}}, 0x9) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x20000000, 0xfffffffffffffffe) 25.775944783s ago: executing program 0 (id=3513): r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8994, &(0x7f0000000000)="7c6ee5f5859d3a") socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000040)={0x5e, 0x0, 0x0, 0xb5}, 0x8) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e20, 0x4, @remote}], 0x3c) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffc}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 21.584738736s ago: executing program 0 (id=3521): socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d08023f000000070021a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x3, 'veth0_vlan\x00', {0x200}, 0x1}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000200)) 20.504141259s ago: executing program 0 (id=3528): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$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") symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000940)='./file0/../file0\x00', 0x2a0800, 0x0) 18.804102427s ago: executing program 0 (id=3534): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x2e, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r0, 0xae80, 0x0) 16.012058598s ago: executing program 0 (id=3546): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004815}, 0x24004004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20040040) 15.375088212s ago: executing program 35 (id=3546): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004815}, 0x24004004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20040040) 10.188515156s ago: executing program 5 (id=3564): syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000280)='./file0\x00', 0x800803, &(0x7f0000000000)=ANY=[], 0x1, 0x61d, &(0x7f00000002c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 9.751217686s ago: executing program 5 (id=3566): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="12000000050000000400000003"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r4, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6fc}}, 0x40) syz_emit_ethernet(0x1386, &(0x7f0000002d00)=ANY=[], 0x0) 9.325463075s ago: executing program 1 (id=3567): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 6.779787461s ago: executing program 5 (id=3568): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x2e, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r0, 0xae80, 0x0) 6.647962034s ago: executing program 1 (id=3570): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{0x90}, {0x3}}}}, 0xd) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x100, 0x0, 0x9, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000002140)=ANY=[], 0xff2e) r6 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_int(r6, 0x0, 0x15, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f00000009c0)={0xf, {"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", 0xb29}}, 0x1006) 6.537219846s ago: executing program 5 (id=3571): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) gettid() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES32=0x1], 0x50) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) fsmount(0xffffffffffffffff, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x80000) 3.971387333s ago: executing program 6 (id=3572): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3e40, 0x0) r1 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x3) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r5}, 0x40) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000075c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400800}, 0xc, &(0x7f0000007580)={&(0x7f0000007600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c0000000e0a010200000000000000000a0000000900020073797a31000000000900010073797a300000000030010000020a010400000000000000000500000508000240000000030900010073797a31000000000900010073797a3000000000620006001d69573b4df4c7b3bc4ff74896d5ee79bbb368259b6be295aabcc4e240776c54f58a0cd1188a63036927492282d07abf838f11e77cf2cf3a1aadd0aec17617a3dbfc8d2f83e9456747ba575a54c1e445a2edd9867637dbf73afae6b6fa4400000c00044000000000000000047b000600e1e538038df60c6b9da3b940748dc3513ee457b55df66cb5da193cacaf141def2ce565adb988cc14a822c5d406109149f8c4b55c4e29b5d85d353ca5a46a0441723b340a3b434ae707f32c947b340a9d88571708eaf35f985ab63d8dfdc1bc197e22c813d0e23111507904ee71e9784d82db08dead684b000800024000000001080002400000000260000000180a01030000000000000000040000000900010073797a300000000008000740000000012400038008000240000000ff0800014000000000080002400000000908000140000000000900020073797a3200000000080007400000000034000000180a010100000000000000000a0000010c000540000000000000000508000740000000000c000540000000000000000320000000050a00050000000000000000030000010000088000000240000000000000040000000140000000000000000400000140000000000000000400000240000000000000000900000140000000000000352000000240000000000000000300000140ffffffffffffffff00000140000000000000000840000000030a0103000000000000000003000000080007006e6174000900010073797a310000000008000a400000000508000540fffffffc08000540fffffffcc0350000090a0102000000000000000000000008100011800b0001007470726f787900000c000b40000000000000000608000340000000c82e000d4070f3463452c70262d318d8526a1dbbb574681844766d9f5d77e1fb7e57aaf6d452aeed4dd4ce7226056b000008000540000000405035128028000180080001006e6174001c0002800800034000000000080006400000000f0800014000000001140001800c000100636f756e7465720004000280280001800a0001006d61746368000000180002800b000100736f636b657400000800024000000003e8340180f5fe01006269747769736500d8340280cc100580100002800900020073797a3100000000041001001dbd2980b9c731859c1a6eaa112244242128040511ad60dafa26c2bdfd3f19b242a82c62923a684082ff5ce193c469b397920f0775285b255817c6926839354267f8cbd52e3a6a3e23aab71f8ef8e3e54d1a9982ca6ed2a050cf59e92e5b4d892ac597eeebc4224282bdadc4c5a7509bd03e9ac1ffbf86d65fc9712a342f9d1ee9e476bc59b050ae6a7c00bea1db8866ce12291932cf34a7834aa2d09e0f62897821385396c31e1afdf70b2ad269172c86e11f9c175fb386ab10066544c465aa909a35f754da92f259e4bd7c9a8ad84721af8760b43523bae2d16915ff782fcde1cef9a754d71c18fab68b93b910bb9cab2a293be16712dec27f73a0f54f47a5f5015d261cc92d01aa80583efc71abb0459cb0f93fc1d07a0638bb91676f35df22a7acba1a6415cc5f29343a0943c6a06d5b0c6d56b5c70218ee8fe823c311be981607fbf538991515541fdb2af706b38790fd34104720ab93910f2a4f952adf04ee7e8c5ad855504048f992f24f54fcf1d7fc832d756fc46a27aacdc374fd706fa3a988d9da2f96aac59d2f2a6df90e92a709c734383ba0af4c7cfcdfca0f25dc87cac808a10eb387688a8d34afeca5455e2e4f0d8d221613c043d0d224fd239d792753eedf611659c3e958cf627f1b1ef9b2796ec279ef6a3ae03cd34580ad99cf9dd53582a74abf4e9b6628f77535ad870d05e47e4af7fd6eacf032f96bae6bed5b5645ffc399a60f7a4166f2285b304d3101735155fdcb55d31b5f5b3ca837c64b27b34330217ddf2eb1750914ea69f8b3a6a80aaeb733ca0e3ef662ba91b628811c6294746d28c560c4a0cd72caf463ce7f73d907756da90a69644f4a2371b011b7fb42ccbdc5023c214d93ba4c0709f4903abab24f760205f6d10b0297a51d3a8ebe95b5f1c4c6093d912d2795027fab1fb035ff87ad705805695faf60075d7d37019f765f4b666c0bf5c3b05c3f76099536da425e83e151b9e98138176bdc4d19142fd0a5d3c184097823bfce61383b271275b5c1dfcbed1d876d8068ff95b60c2abe70e36c6bf881175cab4ec0c3e8cfa46a2a2a95621e39758a80ed57e5dba3c8039947ee09997e594926f1908a8a72b5f9856faaac74be05cb9cb9f6664585dc0644aee189d26ea637a35d58bf27005dd7fe13f3e6f42d2aa4d7f5b862a0087ec522a86dbf5ec74eb1fe65bbdf636284757336ec9c665514e87267cb5189ea48a1dbb2f5c6e707da0fff90c021aa5178ccbcd2f58193a3918273dcf4b3c30ef44f861178aa3d0f3a98ac6ff2b18a91448597cedf53af2c01a3ebbfac0a7aa057494b14dccd4c82fd6f1337f104928e7e224a09f05b91bca020a2b44bbd03646d8c2a83a77d7444093e7e29ef675f7b8e84f43acc7e8e477d75932f720bc01401420b5f877dfa178b807b1310095cea45665f2030e968d84b278188d68a8bf171b31db29320f052e96230c54c8535e831ea1aad0732da6ca2566cc36bb7dd7952170fdf329305432185e7bbb2a8dfb34856f6aee8c1c5a5b326e53d2df5945c820421be618e4d1d259fda847dc5688487c8bc201719af90c0ba606a531735a862480f1a4666ddcc483c43a3b4fc53fc3c9e9ea607c9e2466217b837570b495d94a9ed39b2243209ada56cdcd5a8596c18a206badc86e83371f429629774ceed26b9f3c0933f184ff9736ddf227a89ee7a5fbfb9bee636b0d1489384e703bc8ed04bdf100b2c7ddf4f5a6ca9be3f4d3d1e1fdba086ad73464f0bd624472af61d104475b801d6bc2074a40b96ae1d2b704a01cab8d0df8364763ae182708d415e8abbc5ab879df45d9bfb83c1fee01fc2cbb412a193e5d9dad4227a9ba29a9f4a180190ee6e8c3b528f6224cefba6dff0ee08d9efaa1fb18cb0a2eee65169b50a72b83a621ae142dd025f75a50016c539c6ad2fb7217fc8c3a8a68d316a586930872010aa29b09709d9e6acf0f5de8aeba1e8b7b9c6bb25e398e5f63a09fa823003804c802fd938887e067510f67e0ba63493bce020a7515dad859b253f76b0d8313b4b747a3a4e37e5705ae541fbd7526299efe05cf9952c386cda3831ab65d2905611b580a5ed11bfd0d853a69254345a8c1ed5929fd00e62c237605c824d428ca531544bc3bdaedefb7bc9d6d1bb3ba3a812540cb002bdc36063b8a129be83ba9616a6851c6180d38971d386031bbf80d5c5b6061859957d3eb0ce7e01448d4ef637ba1e0829e319524b6a0202152dce0c3c5d6cfdd3b8c8239196dabbbbe132fa67606ca5373c0d2cb5fef0ae54fb70d2d96a4b82b98e0484e74c308c0736ede45fc3d712d2b125d86cd9b7a0409a1ba1ce17dd031c3a5f46aa17a8d257dc02b1c8e94ccbff47697fa1a8e3e9adca86f92f3541f57febaf6443a2068bdb8eab56511e6f6dc477fc880a18eaa7fa37a0ed5c628d2acb0ef146dbaefc77a3399a71b436463ac5de697c0f8f3585a8a2702ffc197e62eb502877082f5eefefe9de48c6d0f9c5a97eb3ce9f0c08b6ee65e593600edb34f72ea3085e133da4bee1f49668a5942400fb31303f86322a1739e37950d48dbccc33c9660e59d64292ec0b60e5d1e384f8a9f0eae76f0ecc3f62ad2a97be67924e79eef0769394f820267143c43e33291e485dd3ba40b4052c06e2fdb23840ef09ae76eeae268c310cdeb7357d600840e0558a8845e62c504ed3eaff86f3a8b1eda6d4a0730e7456ea599cab8f3da31856ab9c8414a6be87c346e4dca07209fd58b0e95766f21198f32083c15b4a1684d3824a250944b9cbc4a23bdb0d729d37306c1d89b9747153d78258b09885132533a4f59e37d08c86634522512a7af16c1d5ec35fb61989b8b5ab22bdaf2cf3b6eb6a569e87feae6a96247c9a29e7774b2256044ff4de82b98e1fa13107da49296bdd9ffdeda00e15f6207be476c59e2a5139680b69713298fda78ff42ed0797bce8c04a1b9b4ec2b77ed7929357871b3925a6b274a44f15b0fcb08de7ee28224412c756ab94c645033c3ce8498d0ee35e7e1a8c18b5b697289e79cf8a43855a270dc38e8c13529a8f18db37ceb847961d55e933b57c4e871dd9dca22b9a5fbd19406f8200a76108984b965d808fc3b77d11ecf2d1bef627969f6404c3c0c18403965dc9e5656a1669463f25c2ca7cdd013d70632713ad0c101b1879b9ee4856fe9564589637114b2eef32426c875892f6093eaa0b5dfa3e36266f6ea3b7746f0b387dd6508990336823ca552f2f12173a29ace9a418e8a8af8427aceb999553bc21edf0e67de857df02f0cfd93950514385d247bacea17b14e90922f1abdff6409bab5789b9ff6da3a6dd68c0ead3265cbf6030cd018a4dc14563540f92e3d1a3246290b3453fbdfc1f55e68ed59167953e435d37df7f02232275a36292df5ef311812e847be8581ac6c61eccc31f522d5394346429878bc94fced994ece08710ac5487baa659127d48ac761e021384a4a83f76fb39e6e31aff5fd29163b2559bf2ef2896ecff58f7f4bf3f3857dfb21eeb0548ac4e287ad444b996fbc34e7ad259d604c199e8a1f94ecb10e8f47957216bdf6b898d7c7ff0b8a9eb4646b8ddfdbfc17ff467367662a4742965d44759fa09cde43571a32f65706fd009c0976f4f5edc0d8defa594e2c341e874156d086a8e0a79983d8325d0049dfa583a6bb38b92dfb5b4b38707bf771e1bdaa0c2a1dc2cd1a6b922457ac865d2b86b802641dcf22948b0b7f823b0091f15f2771795f7136951de9b60d89ff6226664337828257f3e222738c0ce643ae0cd1fbc857462899247c597a5783293b6190bc45acc3aedadafdfa2fc3efa90e252211bf829acb76ed93bf9bc1a0f2dc69454362457977c0edb0bc17efa2f47d7a95fa05710d3b68f07de4d7427e761c43982bda1f6bfe279916c0ee8a783af8c784f43595bd0bb9d8b710010f67bd5f0e6bb48a1929780edd002ea9614bb87063a7b19fe35ffeaa2a33eea9edd05c6a937fa27585af047d3b349af980c65a496329a869da89ccfc203112afbb5b00b4cfbd6cc6c6badced690b0a988a20502470a71a0dd61bcca3ceb13bee1cd3e1ed5b1c34f1fcdea4a0322205955bdae92baf1e77da7507b89dbdd51995097a7e7b5faaf87cac3b7d5044fcfc6e34fdb80c60b9fb484bbbe07b6e8e0c8b3e5b77d6dd268ffb2c6101de12bf1b505492f0ffc76f3defab78bab2e6ab159f0bd845df4e1f504fd9b5e1f58121e6bb7b82955144569f5adc995eac936ba8ac3a21ca4fb4a3c3eff5a2254e50383c6a58eeead70910c921fdf5a5416ddcae38aa1f7427921553fca7a0835334821ca128e4f284c0ef8cecd464ac707e909f9dda1141b69979e2d7f9a38ef0349803e4386c1c505d18fc9e9674605807001721a6c411f3b9205d901600262c4839d09cce5047b2c25e040138dc78d3a602e3d19795aaeed9d413a8edb118e4a31525a355461b2383b961aa909d7b82e38a3c378cb2e0e62c4c27eecf6bf478769bd073e435af9c03a000c902551b25e9c8d52ecb344798b1e360b68104e8dbd7b9c77d0635cd59938832ba18ef2e1b49a4e472fddbef1b868071a20d7a9a4f3ef12a97da0b69363f7590caae4aeb76126ad8f4447ae5bbb7888d22dd348c40ce06f7b5937ecfd621b06c1b351e3c4acbaab294ed822a4b67c55576e4accf7f3e670b7228542d9a4aa4d5d597731670e7f41ede421bc05bca0452d1664b249a213aa88e40cf8fbb4b937f53e4340b7e6e19704562ae895fe889f31c0a949bfa6ec7eea29ae1bdd978ad55f34d22b9ffe4593ae0048baf561d76e91d2bb1eb55d4d4ac441d50050e958a74f607eb5c421792be1274b2b1aea2262ee659941ab6b77e83bdfde6fb4310d5b502779c6714aa884b8ccee4ea7e596f67c783df438530f4605f4f1b59b73fcbf136d24da8b78d12a8e351e7222875c8792f98bc8f603e4e393f4de6079f39fe5be7a9c5185725588733125887c9e137f23d062c9b30720ed90cf1fd864575b3d1d9ddbdaffacedb9235110b54adfdb0ab997c37fc4e0ae6fb0726de82f2bba5b500ee9e5eb62b5407174a6d347cba9bf3af8a78689791cdaf9a60d76d05b2695f2f6bc4f7b705c9e7e2b00a1f435f0e8375f609835bb7aa83c9344d86926fb2aaf011afd608d61dff99c10f094fefcbaafd93d076ee8201fa63c4f6107046a963be81d8216ae6747286565e069f8878616d9a96db91db1a76f77f90030ec79ec4c55ab9ed22b6ce9f2a810fdab5646e65cc029ec9b04d7b2519dd1596addd5d719fa4fbb3e98814c5f7f5fa0a338b5373dee8ea324cccb2b5fe2a6c0aa6e2d7720acd133f73ea7b86c5f22dcc34eb61ec2a529e3e8ef3f5cb6b69c1f48a6ae101f593225185f8483da44138963729d56952dec69986b49658996bde64e836306bc388aa5345f2ee59f8e316fa08722c48c27b89ee9da855ece123b4a473f14a65a1fa76ef7b0269c1f4144693258d3f8c3c63f704c6befc7e7b6180e140f3cb29b99332544e06693f714b5e98ee58c5288e9ce12e1570e28f28eeefaa53f3c4a14270a9415de2a0df3c7f8452db74987bca0aa57242a48e02b256e51a523307cc45a2a51549aa4b60d9a608f0ec97bbbbce59f6b35ceaa5713a0b3ee85362b961b3efbc9dad09885b2aa58d6cb423c77a9d50905187be3458e348fb08a0bd00497bc9442d49de8bc52ab1db1badcc10bdcc9fe8caf7f16e3883aced71dd09a16463c6bab3e9163e82995053404ef9d1a984d4d6a8827958a88cc09bf0d5031a0b3ca0877d27995d79aab40001005f0380170a91942c2ea6deeab63406cd14f28893e113f52f89ff3aaa7d85aae4886bcd95a76189db76b3f29b8c08d85f1969fa13f2d3a150328f86b62ddef19f64a6f08f815e350170654fcd5053940dc6172dfb975a6977fada95226c64eee6732cbad841d22b923b4014ec8a0445d3c8e68e025c770c8c71b3bd75297961b67cc34f2601ccf42d1594262c9b609e42accd7d2ffe8a79ea3e3249148ed71f0db7f48365aa1fae04eb1f20b6fdb25d870800034000000006080001400000000fb0210780be000100b4eae34c91d518858c0a81c69098b99387a2d54b6e6d66018f6a00643c585fafe7001eab6b704e8088bf30963f509d87cbce7b2877f9f326d3d349d94f5ca4168b34e8b123ba2d17c08af50c1bf120d4ab1ea295f2f86790c721d408c09af2c12e34e767abd91b8d1f1a9faac780b8ec88d3b5de42b1f82f9499a669fae99d6dea9e640f5c62ed5043d5744c8ff9537c49d5c380dcd042a01b983faf55581d8e3a955daf54886da3a953433ced864f86a7121844d1102bdd93c800000c0002800800034000000002041001001af325c7d149aeac446f6d09122d22f368819cc14f279ec4c28dc08e406ba47391714ad9518fa1e8b49ec6fee211945ca1ce98e565108926ee7f54c42d284daaa0829e07602f0e39e9f42637cba3f87bdb058fac215d229f3d7489c066feec1b9b24e52608c1ded20f7e64ef2299988f6b8c7b72f3c238531cb1d59f790d80323801f96ef05915e2b77b63449e9e0d46882843f956be2143b138138a5aeb45027d2eb91130aef235a193f852544053dd5ed7d0e97e527facbb3304e3a46a2b74c54f146e60e2045bd46aa07a36d83e327ddc9195ce58d5812e8d6f395593c70cc0404237bf55034a0bdd1fb3a178eb12b0ea775d3a0b3ed0676a6ba71b8e89617da8bcaa31609f7702aa09a698ee2e4312ae00ecdefe444606aee667e4a84f8f5857680fed0a00e097ee1ffbce55582e77d64512bfe091fd5fc12b38b29f87bdd6038514a8b5368af3e2ad69585354e80a3ec44ad4de5f0dc463de656a14b88653fa1246a1a5c2cdbeeb7874e087b4e9cef9ac6b227e33d8090bae1f9e64e8332084abe95605670e5c800657e433c16a158492ce8775e61f637d0cfcfe3226b01cd497b160584e8c4415746bea0ad346202999295fb136b26638d349efdb0b2158874ec9dda42552f695826088bbf55f5d7673ce9c78a28f51e185929a0b845dd413cf89fc5f1ff756374e0a2b16c1fbf428ec1b534d751ee9b6a49f6b8d01bfc78f2c2956699fd876d1655544897927c58c041e9781a374ec4e3903fa15380406938bd12e7f1add86b6043f8472e2e5ed07abf07d90b45324d4dba54b54fd6a47bba7553e9d745a18d44c320ae53e3ddb1c8ef5259e59ab9228154cca4b126fdc30069593838ba47c326df1928d082008efbc616e406a855a7f79b9e084fa455b19d2fdfbc366e877d009913132c08a01b86911f9df2c558db045347f32de61edb38cf3fe96afcf1489b5d89ff7ad01b6ac81b90e83f78b01cdd6db6ad6266e6a0650a2eb3e834630cb27f5e2886b77add4f9418c16f84204cb34fb6e08ed2e6057e56328b15a5a0bb5252431a8510d86170d26481da2d0306ac2a8f571183f29ad391cca458316b2e208f9e0be6a5f969878ab7bd5155b0b7bb50ac070fe3e77dafb65019cdc78df8cc970db3947b6e198285a290401496bf5ef59d24c7fa3252f3f6a4681dbbf3143877c1e3766ad55be19e1607d6ddbc5847b67c19447bce597c6bf55c4165b559bcfae3af98e251edd1de494d8c9925263995199e21c607871ffaa6c6e210273797b480e38b3711ca12c92de8cc1c6aaa308bb30b8f0978d86cd12c6306a1f373b1a9d88d41be8a0b2fe60d15da47433f3ef1fec587e00fcc9f2235fd050b6777942b6621ec0f468167172201f178d51deebc659cbbc8bfb59be5046f32454c30a22192e2f7302b3f3266cd90fd1bdd818b1245657596de11dc96e7e97aae7e6a5d6acb3c8b83968c3d699ce00f7e94f852cf8d4ecdfc3e6e562564fa1280cf08ddc3dc6b6cf5bb4eaa897dda42c2e59641f637b60961bc9b02125b949fc5881b9ff1b6f944773cb114b93b8bb9fc576d6e3f20a20f62e3c82e76f4a0055e4ad2bdac0f03abb0c48eab65e41f93902aa8f9fc9c373fd95b9a9ae4b64afb54f4856a31ec37cc7096823617d3b20c245d64e1fc69c0ca2fa2cc3f76a2f52e7da9af6d513a16ff6cbb31b7cf2b120dbfc474d87e5e99a44f719a64792e45c0121a6a0e482acf57986f0b82b6164c955aa36f133223b5c641c0d3a146c3686088f5d5b701cf81a55be43656ab8307248b205083ea24b0c9160b63fe6240289dfe5478df0511b0358101963d6d7f17623abb5bd804083d937223fb865c2d8514628b4777a0e813f648d98e027ee6c48e42dd725884a45b3e430b3994ed14938ff37e37f88500ccc6d1c33d7d66a435c1a2cc24362f58d88d47120052e15d93bd251a77ecfc4b075808dc7b52d6344605b616062359b30ee7833e6444fb7fb1d71188f73ff7b020b29de2de104d75065f9214538b0766a431fec38a78ea8fe16dff3895dca3efd02baf8b946a558e79d2dad5f165e96a7e82bdc6379dbd1b6c77b319817fbc2df77c062d4368bdc6aadee53843ff17e64c956f1f7ef6297cf85ccc923b139425beecd81bd39ccf2f9f84cb2326517a0d5e9b1e345107831e89a9180ed20a6c77666f53212b59fb881a6fd12d837addda9990455d90c8635a8422d9a25f773e25f43cd9f39b12b85e1efde97079f3dd4da3dcb5fe656306ee2909da738fa3eb77ab8b69724d90627e01af6d75094a3dfa8663a4f3afd455501ed4300d298f015bd45c13c34f79ffd15d02422d7d377a3b18f386673290c7d056d6c4cee3c9ffc51004a2c1e8fdc2d5c274ccb7daed77adb9926f38f4f06bd214cbd7adb44541f0bb2b6ebfe833b46649edb56c96d4fd45ef431f77aa0b5f0583d81dad83ad64ed163f574c719d81ccaf0ca26c037e1bf36dc0d790c8382ef8c20fd37aa285eb5fa2bd2be14596c9db791caa2174277d64efde9fa45b5a4fc44e1d2e7a90779b810ccb564ffc1032951c497d9cd75068f61ba5d0ed95a47831482c8a3b2bdb95ad2221ff40d046deafffeec638c581aae3fc360dada4e1e610be97e3cf377bb35ef2ffb0ec5500f60e02a43a3b0779c89c40c186dd60bfd09b1bfff3d6541e5bee3017654b210d537cc2499f9be52d973eef56800f599b9774e5cf9d99952e2f8e3151cd1479a1879c5e99a44717787e4af3531fdc66c6125655b5f2f4b06ffe44748b65acb66b949193b797fbe3e39e1a7df23d7f12d98148137f082d49931ff49de82f8ada703fa51b49ee13c0ed5073d4996dcb816d1d33a3c095999bfb2e4ca5fbb3b5b105bd255854243705a9fc9f81a180b66a2016bb3978553ffe28175d908f6a240ea0d8b99728e32fd079e20a13ba818deda92baf1cdf530f1c838e507221d32456437b23102d64ce3a43b1d23281417e3709b3d6fcbc71015c69a759d0d451e14a7401859589cb0a20a18911fa013401f3d82f8fb72aa30c4573e13efba3e2b2376c37eb0aed2d875121e8e58e7564f6138467d79f9bfbef0313538b7bc95a1b1201e9b662df40078d626bc35ae7503287808fa0a6391d23eb02f019d66cd55d6cc94413f5b33b0c3eee5a74a8298f05810bcbb375d3c4b18ae53f726681c57ce902aaee5a659c7564b3de38f8245f621b9240967be008c1edc0a26078876b46c94442efb86088607713a8e7df1534b8a62ce7c1f12ff1d87c47aaa7baf05178ea1e966098fed4fc14fb6df6a0aff7043f6db66c81b4d676cd4566f8397af6f31b7f75daabbf3b668d2876ec2149b2ab5c754c3d32f3a817541593549f5e72871500e52cf396edf538d9ce97387088ad3b8a385fa2c3f45b81bc2285dd40512012267d4bc934c78a6cae69fce4dc818856afad701785185962e6df1b178dc6453cf22467c665d4b160be075fc17976ff0d0822a85e569e777340c16ec30bd3a5437d8e9254d064249db39f30db5d4a360d4d545013f9999f1a9adc8a8c0d74a012d4888e0d056fa9ef12242ec8f6911f08808790bde7ff219394420f8ac548c903a32eaf202027204a5c0ba5c38853d20cdbaa9895bb5538d075581d7344b1eb144ace8b79892be5bc1a6228a9f86f74427b56b9df912c2e8f34e00bded02ac1747f02c1a67fd8a7541db93b919736886038b3199b4148d751ab651ce7e50f63a109aa9481572aadb140b525062014dcb73bbc1ea558d6dc1d40275f1692a4874e0443df8895e3d4c573b646406ede4ed94dc58a1b2c33e41deb0eec2eb7f0e7dbc1d2cdad8c43429d14c901ac58fc0d4ef0d921244767211b1817e824135ab1631e8dc8221950bf18fc52bb6ff71dc77d630d45ccf7eca9988ee29ad4ce0f71a235385f3d3180eac0f3705b0ff0f388348aac2829f8e472cd329d9ff81301b320f236fa600def8c940f579cf6daf7c0499343d4e84d5402233a75d20298d5c09b50ff905bd0b794272af9f046f24a32f6e00e345f4e3ab6cafb8cd8ba6f654886fd69b11f6c1680d25d6de8302e324663c5058ea1af31b667f67e31c30cddffdcb3186b7a13b1cfeafa9344221c9db58098cb9bc4832fa6f56bf860156798fefb4d9c450d7a44fbd78b36d7ff1da6d3f50460d5945f0ca12a2c7befb14761f9be4f1871395682b10c84d73035e1535d5d17ff05b14593a768207968601ee0011e242dccc8023caffad9af5058acb0964bab6e208c2664e27b4b82300bc1273ffdfaaec67a94824958028bc767664666214fb54fd4458ae3d1900e97d8d636308a58e2728dfeaa5530c4925f196f121ebb439a85410e7562cd556e2aa8ca803b4dd83598a54c61f1b5b27b513f5cdee30dffb11399e56fc22ef3b585fdbb925d077f6e0b49cee819c8ff2a55cf4b8e7dd90e8e27991e9daa25246cf8ad88f745e9927435bec8cf8c1273ac31ba16deeadb775bbe16df5c823533180688e3f7b1f05f144514e068dbb15784926874dbeb7a52076be63998d420b78715a829df1b52f7c607456cf660ced3680d86f7cfc2226168b3b2822de46c71a1bf1535450456f7bc805cebf354f81d558f8874fba73cca42c315aeee49e02238c5e30d340e9a8f8af6b67ffb2a562181c29eda10007dc374c9f2ae78903456eeaa7f684e1227f41d52dc27982808aaa1baf0d4e38531538a06b9f52fc57d48acb6727420852d491bbc9ea1cd9e6f2010de11c6920dae4b1df29081f5fa70a85d401f4ece7118464eee451ad020c59f5ec576f143c6d7b3a797f43e41a55c668f1278d0feaf601008fe2588ab21b97cb153c3954930d93d675c7312dae2c69855aeda9fe76a4bdb17a79ede6373bd3f235ef8d326ee91fe8373834f9723d73e203ef1cdcd52d8e40326d7fcba7b318e9fc743ea6042e0588667b687236e673d052b0a64f7ac754adcd2d7644208eeffc5d3cbb2ead59d228371037c82e8b0e08d6ae71173f6e4d91f503d6a9ab5c5270a27d389d129030b551f45c3111556c2114309f0c3ce4f8644be20756f85250b87148bd2b5ab3a26f9cea86fdef058820301c9d0e5f1a95f204218e6a52aaf2c990563230a6c209b6997d3038438e9e1502c9f48f68ff85d11889712db4dfcfc6fc4b665a4efc0cd862333d00eb1c0d43737abbd31de2fca263596ae837279eec5a8718aefb9f2fa954a0caaeb688717976a2e53d097091ec61ca8d50490a531e9850ba972f559fceea19cfe90827772b5211a9b303e6e0009cd327b696022f193ff8a804b9661570bac3565a6df9f9e774d403b2059d5649e3530860345d2037ecf41d95fc313c0f8e3b223f6874bf6f65ec7c374eb24b177a8616c5834303572e5dfb2fcfe48ec34f589d63ebb7d5c3cb241b2a53420c9129a7c4c23eff8becfa83ad9c0d00fa839f7304e59cc06c6baac59d0e71ca2e6a746aa9bb4c70dae018b86c57822bbfc2245e10730854cd7e28c029731a4fbab822007de3dda6a7ba3eef6af4964536d1714371fa30f94eba6ef2cf487dcd3de20625acbf8175c628f380c8f326321a9d0e02ab66400bb16a5382ca2000cf30eb733fbda394a8897e5b920b0517ee2271166ae9edf8539027208d3ca1a9b3ba8eb23cc6d2f6621c6382c225e5207f20597fdfb8410b5c6a2040cc0892fbba66a552124d087505c50e24ae2997c09873cc101481b78c9de27b2495f29439b9e3b7887c21597a3b67f55ff21fea216e9b8250ae808902f72607474b3ad15d5d25c030cf24441603a1d23809cb1f591e000100faa8b2d0de9da0d227648210c8b016b825748cbccaa866f34b68000037000100d7465a78b08f8ad0abc6cfbdb4c5fa07bbd05bc46ffc615e3c034a040cad7e328f384ac8bbebdefca7d98fa981b478996a4d800004100100fb1f3cdacc8c229cc40995f745918f270ebc251fbe9d6dfd1032d542c086b371e30986ca69a477013132bd8c48502174049cc03bfa88979dcdc8198c7386e78b9eb68c1dc2f03db2ef03a68fde3d9542c81d2283b2eac8ef68aa49c5a8597a03322a64bb451cc10491e67f3bb009eb33085185d4969e65cac1dfbb7bcbdf2d22ead887ced058662980f166b90608a523d0016e38557765178b311065ffef4ff43873cddf848629923e10eb15a73cbbd0bdb0a2aec714f24e57c8e9bcd2bb35cf59a1929f04d355219a33fb21b7249d42feb35b6ded9071b61b4ab2a60e8aba9f9055920c0d625ef373a61f8f94178cb17e10db2eb47141708ec436c23f997a2a0ad41349f5b95e362ab9ec5d859f3a8ef42a89b14576486f0c9feaaeb0b1e91153cd7e4a7ece117552deb1fd02eaf9cdc09ec2a9cbe68755a7d9edfc7bb345b8b93b6e317e6c83c7971b82887e43ce6559db9992426fb0be27b52b9910a631bc75e3ba30865e5009fb1a149c4872797bd36316d8fa02c055ad1b65dbcdbc0f02212ac29c3f7f8c5e1d5207db080880d6d5a5673a0a972b5c8c9d55e97b2ceec6a2f15bed180db97074f652513207824aae9f1820f2d28f9e98031e0fc3d0d37c69307cb3c248cb7feb3a430e52c54f6e893c581b1b252cd05d01295a14d60ebeb09935ab1c6d1a74ae4252faf1485c17fdb516c3dc31a775f7147857995f37e50a4983e8c0ce6ce9225fa3d46212c0dead1b9dc45faddfd2c2e78494c379eba2d2e791035d784e8fc9854f7939805cafe011824444868ae1d0174dad5f6126fd18c4aa6f28fd76c09f6f94d9da775b1e4762bd22aa18d6d0484adb85b49c6dca8496b6661e650b75c8bdad702a9fce3f789b0378cef35c613bd05dd423fbe35d84592d7f7c7203f2886aa7ae2cef30149fe266bc24d61d592637de7a61f0931f8d61c2292b48491b5f322c3327116eb6e3c4750ed7e0fd221abdbcfaaaac0bb475135a5e3db3d62185173ecf19ae03dbcdef05125228128d5ea6b50fed7fe73947110a2974814fadc1c4bb3062b9f9dfc01ed18b228185a5a6bfa852ea413c948bca959b4a05c4e585e2291f935530f495adf74afcb21cc4b20c1b758f98e11a7f40baa197b5ce7906be093bb960bbe9562e557e94cf2f6ad97c2b5e04f320ec05731e8fa7a379fd88f0a7e2c5eb13a50df4f35ee0696e0585d632d47255a266f35aabb2db094e008a35a76125ee2a62f50d47fbdc66d41714b26c5d2213b0220cf7e58147df69ae3fecce60be1dc8a4fb4702f86604c7abcb7667226271a7ea4f0d13e428a79eb575a9bf5cbd3055ecfb26f40598dc0671d18bcb3dda58cee49a9df5fb6d28e9f83d2e5a046d2427de178bec5561fd09833cebf30c8c28b125068f8b4492de8630df6682be176e55bddeae4c15c19fdddb4a17ad375c517f9cd11b0cea99dcf1f99cf810da5a6d8ceb33a4eb876ddaa45ce8a4f2edf067d19a251260b993c83108fef61b6d3bde076b56d85bd6c6c4862b7a30181d12c81f6c838cd971ecaf43ddac2c771da7600b1da21b37fac14e18701100474042fdd11dee91dcb32d4c53916428aa94e633335081901e0b60badb11e70ec96bda1091fd498711a4742af69e9c642ca5de7ec391338f3b2a07d1c13ac68d9a2dc1e41ae168a6b62bf6dcc4661b604f429abd90ef4c0d30befdff77e7ff502e73f82bfbda82b18c136aa351ce2f7efcf5dca998477f9d16c3efc98a25c99a037dff5181ac37450a69c765ef92eee3991ffbbc3c50086c4caf1bb038ad67bee1e4afaa8de21fa1d8775d0aba3d0d774bd548cb076260462ae4ca97fe0cb658f2ba87652101ff8e02283a44fb2a7327740c9cf4429e892b24b2e2a55690afb40508ec22184e7c6101cf57167148f036607bd60ca7df8a5518fcf27255e99d547e615fe4f596e837b681ff85349d533b20db9573f167cbe5dcd9654a10059e7f9d392dc84db3903b32b6c12f34e2cff14a83cb96f9e82b9f06a673a394cf1bc8c23098ff6bc805521ee2cd80cf492a6d705f19d48927d55c05969465e1493c4d34c2973c23834af8c00bc74bff011ca7b15362238df1e7caac687a3fbb66819bdc1e088dcca43e641e5ea35878ca1298fac19ac8f57df43a3e706d8e10bb085606fc90a3a68c5e1c517557b965ad56271a9f150497880913a77053647c8bc9d9b4252d17b0a2005641970db4903b3b115c5fdfae43398cebe3632543c83715673300344d1a492e1570b79168d536f631721d7742e0f7fdc877c26f35f1bc5f9d6dbdcc56a879fb973fb1d8e46bf1e1ad2ed8ceebcf283ad3be245ba4e11c4246281042670d17792b9e6fa297520ffcb9edd8183433a48bec12f97a475bae12e80e5d4bea027d740510f355b78141fc92e66991a41d0ee43c4cdf31e6f1e04972adb25ceaf278b8b10f33e3e8f64571e6e21bf5cb8da414690420c6a35de710e6128c64f421d778f96e209370dd58caad40bb9dcb1f00347a8e253064933e58acc6bca6b5a95e24aa66344d32f42c1b5898a0b92092f3998eda4e74cfa065fe859a13ca10de1a3995261114a532ab0ac5ce91cfc55e2f3f171a316198da59d53e8e5cb0605b7b7f9755aac915d5b71baf862fbc719e22b67bc58b67c9163df4d81521c80425ff99d640d5cd2a72ff33aa72b688d4b809bf257c0a48d6f12249d468b53ef0eccfb63dfbf96856ce5543b652c505850597429ede8115f82701c301c1dafb3182b0058dbc690fec8f4be47363e469f3ca8dd28c020265aaa11e957af4464d863a05459bbd4c646584451c6a4d43254e51bd5d958a757df4ed94c50f200fe3427e1ee0461fc550fa852cd85a69de225edc4c767f9fe2c4283ff9218dded8ba09942452525d5ca6ffadbdacc80bdf9130dc7eba2941fb9a2e7c3179501a30dddda4ddec5999a19a74d0bd0cb0d9fd375702c6e4e6fda051cf0bb446e7e4d71e9b6a9c945e75bd89d962ecf2d0002924a6de4fb6bd08c339d9d1de0d21ab16d363fdfc3e07f01c45cc766c640f772a265f8d2e12404694394ab63bd8e8d0a0cd3876b95f01bd89bed8122c33a6344764822a79ba9aa1213c308ee3bc77b687121fce34acb2556feaea2f1e33361e391cdc2980797d502b9f01a8eee95230303a126cc525113edbe7d09b82ccc453c3311daf75d904bf19f04682c68b457b8faa3366cbe9fc042c0cd003e94db3e8394317e60a0af3409a0caba99814e6b8b4c825db50528672f49a45693c8b07f76f7dd81778619e328e4298e0f72f597b68ca84a89530c95c25e39074ee185b6b0ffb6a82b946f07a6044f75ce0a31f3c3df1582f7bbf530791102f27d66187a282a33e9b9e172383a5211d18ba98b88da7dfcd0402fa1df255f52e05ec36a6c265376657978a195665ebe63274f1ff22413b057ac7c339525a396cf6c001a7799f662b68b6d179321e219832e76bc202e5a8c0fea91110446a3712e7a99342a773f8b14185af713ebd38002823f64958e63e42dbc256b9521e561201dc995b08b805f31b2beba11b87b2d8f2e557357a92b31eec65b2d4fd286fbe9bc67cde0a8015b0caa869c77d192534d1c7eb0f8de46ac6c7ec98c65c4f869cf78e0b78cb21a792b2addd5489d79f3b64ffb7804d45f6b7dd5d131fea97f4c6ddfc627d9da1b71c42052bba3eda19d0253afe386b4e517a88630065b5ca5aca23343b0cfd5f9bcda5a5fa5f35cbb95028486340605d8b3762edf174802aa5cfdac483a4981ed8bc4cbe2c3b188c83725f7f3d51d6a042dc4343f124baf1d9bca33f24cbfc59993ecc5eadc1d9a32a45203da8e57f983bd1c8fd144636bcf8848525b86cec278b8610b56719d37e4408f1f5ca3f597ad7f6ad808ca08e838aaf6c8c336e747f46cb71ee029d4e8c680c4edac469fcd5f17cad7a2da82bda60c405268c8b7cdf15de98a7ff54f63a59fda2573d32651d9fe4e5765bbf366704545205fd0a49aac093474169e8f2fc502e8be0e03ba806331358d8be1b2f71a83abe31c30b437f62a52db661d238dadd768c6942dd0d47d41de72b022fe74baa1dba73ede671ae663884935640ffc2760462381bf3c1c684761ef72c6c54d011228cb4505bb0dd35a3afc48c2303c2c285c60a1eff0c62a381527c888960fb1df86177dba860d20bc49689336b84ffe8359d465e6108edb2c8b98cb1b552e9d3521b82c44a6822d6d670df2198ec58d9113f1dde4514cbf48f890ad2596ec8ac4af5279b8da491e02e8d389ae3057969bc235e8b56afaf84c092352755f887f85ecd4f813d0963015a327ef45fc74d7392ac71e88e7025a01388a9b744be2d4c40a6359ae5a65ecee16994e89a7c6f672c78494e56f087ed9c569efbbc07490e510a243ce8f4aef94f3f4379daa3e1499b2015663e9df69e4f0be08b5ffaa899783d09474c5d22f79ec651f37f490c7f7ce4a6837bcbdc752e241d5ab390855f6d926eb0e71568593723fc4cb644f30b762143349ea0a6951301c2e376baf7899f822987bba0c47fe5877d37c76379cc43325fb046f7b24c942896eee936dfc90c6ad8535cc1a3bb576eb3ebe7800c3afb9b7fc324a8f35939c46153a1c29228b4d5c3c17664ec87414eb546eae5f23b0cc93279722de76e23727e5d55d4de350cfb482988b049ed511e40f600f922cd199c753500d54434c95847c42b1cc0d1f8b864ded4b5fbacb0c8efc38ac302353d367175f45f7d547c62f635761d071ed4b9abb7c2d537525e8a593b49486f555c2cce8e38bee62aa6c96ceca5b403a64fc1aca0e31db2d536f70a34819953a53cd07b3cad6afc06dd1522102ae64d61d181e2b0cc268b6fbc6f8e064dafe0b4ea4d72aa59ed497cb10fe2177b27ed2ec9a7e54e771e034cc2ca62951b51986e1609c406950275e2661189ac1f120e9786b6204621f55debd1277ed7eeacade32c4585cc1422451ad94e9a203fb7922ec6afecda7301de9708fd508557648517efbef4c2ced9076dd9bed63fa6e502ea9c84a5dada4438ac04ada6eae254bd14d2535aaa32756211a7ddd0f549eacc74e89c60c09d22ac1ba5a979e0b183f6d1111596aaf29faa8b35bb9b483253704d2a65d2ff19853fabe1b5fcd93aef87c34232450267725af7e593b1ae34d141ce23acad0c989cbf415d25beccb3f2279652c1a93b1109bdc65de0af4ff2afe5944c726b60e20b39de7071fdbc8d994e7ad91bd038a0531427c65a6a4a0d96bd32bf0f895b9e07e698bbf589bcba5d71894ede0e24ec6ebc5257a256c190c3eb10ab1f511163b7fa14a8b70508f62b918a7b2c3a9c12fd6a8b0fee823167740b1a759af56de17d7c7d3ed59a506533c309500ae38a7a1a97f198cbe0c7404eed249a1846af639258edf456f69da320b1451dfc34ebd18d90ccd49a9b8f21c11eca7eaba6b66bd630b9805ac9b7765525c710685f8569917ce5df07fd1aa343abaaa7d4d70c0ede27ecd9eb01852e248f7c165cdf442c00f3631e601251ad192594bf8b5ccdb2b160ab16258ab2a7569e5b6a99e2aee2ddd08999a5eae9e874c41f4eb69f7ef10db56e8e4da33a12f5e423cbbee75fbf5f5fb54066a773da94b8223385d2920dd7a672b21f96b3937cec1a5e8e9ec21a85328d6228e12e71be03c14afb7ff2419e43f24a62d7d85be46927e1275bfe7b60bed729cac82fef438c630c5ddd07c39e6d27fa9ef4cfe04828f668e8444e5a2bfa2e8d21ed167852618cb136595ba97d6659bcfb61fc18d8bd032e5e1edcb2d874bfff7d034400028008000180fffffffb08000180ffffffff08000340000000040900020073797a310000000008000180fffffffc0900020073797a310000000008000340000000033b000100b98865adf710c44bf4a66b2df8e719358f4315c30788e61bd39d73cb87f7cb5980d18ef8763212859b6dde45d535e461911d9b98eb2a2900080002400000001f080003400000000338020480dd000100c690b220f4952199545682f43691fbff65a1d2f9b2c9874078b6994c873d0ab43e2f49268756c93dbd667edc957e5bd7c6338264e801669e7be805f244e35641c3b52317dda874eadbb06bbf5a45c965d0bdfc12bdf1c003e969227f6f8194adec1d770486f940403c326537db55534cb9874f7683d8fe48e91be504715a39552e2ee0a36be03c3212d4f65a86beed1e38c250c3f7cda26c4df5b3b04bf9383e044057a04dcec81d772d2935a8084619328192ac546db6c435aca48ecfa06574ce4362529e9229c23bdbef5750c2124d74d87d2f2d28df198900000034000280080003400000000108000180fffffffb08000180fffffffb0900020073797a32000000000900020073797a3100000000ad000100bb7d132f6360359c09dd09e5b9a20d2172279eb06ef3ee7633c5bf6c64437580ab479d6a6a7e96f09a62eb815ff1ec516fa2550249785319187b7e52b9da76a3b55e6889ce25de04464f6678ab26abebb19ce40d581a20d3ea18d5292bca907e7debe2528515e83f33753dcda44890423f9ef3c174b42644466421273e52032953cb853383bc4fcdbae3329dbfc30b50b52f3b5477f4bdb2bf10a5606f7b54d18cfdd2adfe03be5bb5000000700001006c8b8937be7a26d30436903c5b0f45b01c4aa851557ed75ddd5b0e9badaeb2d7322bd7093bd256080a84ac513ab4f38940b2d786bc45322202d31bf5094a0016a2216a4faecf73eeed7234592981de31ba41894fae6d9ccccd64b3e9edaa278102298c0b0ca59673bb3877bc24000000000a010100000000000000000300000a08000240000000010800024000000003140000001100010000000000000000000300000a"], 0x385c}, 0x1, 0x0, 0x0, 0x40010}, 0x45) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0xd, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c080}, 0x20004080) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) r9 = creat(&(0x7f0000000440)='./file0\x00', 0x0) write$FUSE_BMAP(r9, &(0x7f00000024c0)={0x18, 0xffffffffffffffda, 0x0, {0xec5}}, 0x18) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x81003022}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="84000000", @ANYBLOB="00082bbd7000fddbdf2501000000700001", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="1400020070696d7265670000000000000000000008000100", @ANYRES32, @ANYBLOB="14000200776c616e31000000000000000000000014727370616e30000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800ef012bbd7000000002000a200000fc00000500000000140005000000000000000000000000000000000108000400", @ANYRES32=r10, @ANYBLOB], 0x38}, 0x1, 0x11}, 0x0) 3.882096495s ago: executing program 5 (id=3573): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x38fa, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000380)={{&(0x7f0000f4c000/0x1000)=nil, 0x1000}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000b70800002b0000007b8af8ff00000000bfa200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r2, 0x0, 0xff2e) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0) 3.21514438s ago: executing program 6 (id=3574): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x106, 0x5}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 2.138434603s ago: executing program 6 (id=3575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4000000) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f00000002c0)="2a00a0df167e6d22", 0xffdf}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f000001010e0000001c000000000000000000000008"], 0x40}, 0xee00) 1.713452173s ago: executing program 6 (id=3576): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="12000000050000000400000003"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r4, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6fc}}, 0x40) syz_emit_ethernet(0x1386, &(0x7f0000002d00)=ANY=[], 0x0) 1.532379517s ago: executing program 6 (id=3577): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 1.463778628s ago: executing program 1 (id=3578): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x2e, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.212033044s ago: executing program 1 (id=3579): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x8, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x81}, {{@in=@empty, 0x4d6, 0x6c}, 0xa, @in=@multicast1, 0x3501, 0x5, 0x0, 0x0, 0x0, 0x9}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4001) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff0000000000000000100000000000000005000000000000000000000000200000000000000000000000000000000000000100020200000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff2000ffffff84000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1.099672706s ago: executing program 1 (id=3580): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000480)=@in6={0xa, 0x4e20, 0x3, @local, 0x8}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000004c0)="8fe23c5e29c584fa97809b63ea878c8dcf862266d547422ff9588d3c58c0abefa857f905ca41aad99e389a756c72d084b33c4899b617a9ae1848f9aeee0b9b635fa537a5eafaccede07773086736706d632e9ac175ddfc2bfa9cea407753f72b3e6db5b83d88f5a11fc9b3cadcf012d5920484030eaaced3c25a097f690e466a8e9ca85c8a41ce6ee2a5a9950bcc2cda347d13a3f884100184cee53952dd9d99f7cd5da660853a96dec02ccc", 0xac}, {&(0x7f0000000580)="bf0376b7fd5c623d69d7f5bebf013d59999f01738cc6c9b90bcb316e698cabcf0c818716ce8f6c0dd9a425499641bba62f9630d168eb67660650c2b4a4e2167634d790a5c4d5b0eab859299fc419c1253ea582ff7b81d0cfee94fc2e245ca893bf2a64d19f7ad3079dbb2736c6f2673f5aa189462406dfa7f1619fb90e379bc46dc1ceea0ba87120245e16424cc6237699252294c57ad4cbb35d22cfb121b22e9adf4b259853a9ac9e62cfca1d452dbc176233ac2aac058ebd58313cf73f3c5850621a59caa8b13c24436f0b301bfad8b28f9dfa9dcb01c6c2dd02225b9469abaaafa0fa0270fa16a0305a9dd52d394d1950e56d581bc2785cf29d52a116", 0xfe}, {&(0x7f0000000680)="2bfa69b62ec67d48aebf95563ebcb2cb348102022b3474be21d3", 0x1a}, {&(0x7f00000006c0)="4f6f6d4992b120a4f60d3ff553810cd26cacdbfb75efbae35585b130f1be460be62a79bbd118073c4eecb77b8f46974641067fde912caeb49ec16ce743d2e3d9527a321b19c945c6b7f0eb90050480bca9874d649b85ea2081ea2bea0272d345e6676f88a48431915598d57e73258e0f143b30af76ca58f2f3920c700de74652843aa86565a652becf4110d63e75ea1d4d412c3ac6b951a9d2fd433ac909f46ddcffe74a9589fca22ee5af4a67e49a75815074beb9dc7d00a0ad14fa285411477a1a0fbc8cf12ef6f8c950e2558bf5cf5eda8d1438c2d4469a9d7bb3115a4a5546bd15473315a69941beddd7", 0xec}], 0x4, &(0x7f0000000800)=[@init={0x18, 0x84, 0x0, {0x5, 0x4, 0x1, 0xf}}], 0x18}, 0x800) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x61d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80, 0x142) getdents64(r7, &(0x7f0000000580)=""/174, 0xff56) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1, 0x3, 0xdddd1000, 0x1000, &(0x7f0000fea000/0x1000)=nil}) ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, &(0x7f00000000c0)={0x1}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x3, 0x5, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x700, 0x7, 0xa0ee, 0x2}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) 172.525947ms ago: executing program 1 (id=3581): r0 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x61c7c039d0921a4e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) 63.969059ms ago: executing program 6 (id=3582): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x106, 0x5}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 0s ago: executing program 5 (id=3583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4000000) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f00000002c0)="2a00a0df167e6d22", 0xffdf}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f000001010e0000001c000000000000000000000008"], 0x40}, 0xee00) kernel console output (not intermixed with test programs): ave_0 removed [ 1248.827740][T16166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1248.927282][T16166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1250.873307][T16166] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1250.980231][T16166] bond0 (unregistering): Released all slaves [ 1251.201639][T16669] bridge12: entered promiscuous mode [ 1251.227774][T16669] bridge12: entered allmulticast mode [ 1251.255150][T16669] team0: Port device bridge12 added [ 1251.337994][T16732] loop5: detected capacity change from 0 to 512 [ 1251.467646][T16732] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1251.787703][T16732] EXT4-fs (loop5): 1 truncate cleaned up [ 1252.468957][T16732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1252.739471][T16060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1255.867553][T16166] IPVS: stop unused estimator thread 0... [ 1256.224068][T16779] bridge13: entered promiscuous mode [ 1256.229633][T16779] bridge13: entered allmulticast mode [ 1256.244197][T16779] team0: Port device bridge13 added [ 1257.762161][T16791] loop5: detected capacity change from 0 to 512 [ 1257.798726][T16791] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1257.854435][T16791] EXT4-fs (loop5): 1 truncate cleaned up [ 1258.077660][T16791] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1258.137018][T16799] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1259.289094][T16060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1260.379381][T16812] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1262.181578][T16822] loop5: detected capacity change from 0 to 512 [ 1262.863924][T16822] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2983: iget: bad i_size value: 38620345925642 [ 1263.108692][T16833] loop6: detected capacity change from 0 to 256 [ 1263.125160][T16822] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2983: couldn't read orphan inode 15 (err -117) [ 1263.190476][T16822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1263.236795][T16833] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1263.377607][T16822] EXT4-fs (loop5): shut down requested (1) [ 1263.490731][T16060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.493658][ T27] audit: type=1800 audit(1784092968.289:2283): pid=16833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2986" name="file1" dev="loop6" ino=1048613 res=0 errno=0 [ 1264.715183][T16844] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1265.850598][T16873] syz.5.2995: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 1266.139612][T16873] CPU: 0 PID: 16873 Comm: syz.5.2995 Not tainted syzkaller #0 [ 1266.147144][T16873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1266.157224][T16873] Call Trace: [ 1266.160518][T16873] [ 1266.163456][T16873] dump_stack_lvl+0x18c/0x250 [ 1266.168169][T16873] ? show_regs_print_info+0x20/0x20 [ 1266.173395][T16873] ? load_image+0x420/0x420 [ 1266.177927][T16873] ? __rcu_read_unlock+0x7c/0xd0 [ 1266.182884][T16873] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1266.189321][T16873] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1266.195864][T16873] warn_alloc+0x246/0x340 [ 1266.200226][T16873] ? stack_trace_save+0xaa/0x100 [ 1266.205177][T16873] ? zone_watermark_ok_safe+0x230/0x230 [ 1266.210778][T16873] ? kasan_set_track+0x5f/0x70 [ 1266.215572][T16873] ? kasan_set_track+0x4e/0x70 [ 1266.220357][T16873] ? __kasan_kmalloc+0x8f/0xa0 [ 1266.225139][T16873] ? xsk_init_queue+0xad/0x100 [ 1266.229925][T16873] ? xsk_setsockopt+0x413/0x750 [ 1266.234802][T16873] ? do_sock_setsockopt+0x175/0x1a0 [ 1266.240025][T16873] ? __x64_sys_setsockopt+0x182/0x200 [ 1266.245428][T16873] __vmalloc_node_range+0x129/0x1320 [ 1266.250770][T16873] ? free_vm_area+0x50/0x50 [ 1266.255309][T16873] vmalloc_user+0x74/0x80 [ 1266.259668][T16873] ? xskq_create+0xbf/0x170 [ 1266.264200][T16873] xskq_create+0xbf/0x170 [ 1266.268571][T16873] xsk_init_queue+0xad/0x100 [ 1266.273190][T16873] xsk_setsockopt+0x413/0x750 [ 1266.277905][T16873] ? xsk_poll+0x670/0x670 [ 1266.282258][T16873] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1266.287919][T16873] ? lockdep_hardirqs_on+0x98/0x150 [ 1266.293150][T16873] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1266.298732][T16873] ? security_socket_setsockopt+0x7e/0xa0 [ 1266.304497][T16873] ? xsk_poll+0x670/0x670 [ 1266.308886][T16873] do_sock_setsockopt+0x175/0x1a0 [ 1266.313960][T16873] __x64_sys_setsockopt+0x182/0x200 [ 1266.319207][T16873] do_syscall_64+0x55/0xb0 [ 1266.323660][T16873] ? clear_bhb_loop+0x40/0x90 [ 1266.328364][T16873] ? clear_bhb_loop+0x40/0x90 [ 1266.333066][T16873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1266.338994][T16873] RIP: 0033:0x7fde8519de59 [ 1266.343434][T16873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1266.363078][T16873] RSP: 002b:00007fde8600a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1266.371531][T16873] RAX: ffffffffffffffda RBX: 00007fde85426090 RCX: 00007fde8519de59 [ 1266.379542][T16873] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1266.387556][T16873] RBP: 00007fde85233e6f R08: 0000000000000004 R09: 0000000000000000 [ 1266.395583][T16873] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1266.403593][T16873] R13: 00007fde85426128 R14: 00007fde85426090 R15: 00007ffd963c66e8 [ 1266.411619][T16873] [ 1266.539433][T16873] Mem-Info: [ 1266.547363][T16873] active_anon:55007 inactive_anon:0 isolated_anon:0 [ 1266.547363][T16873] active_file:18509 inactive_file:40432 isolated_file:0 [ 1266.547363][T16873] unevictable:768 dirty:81 writeback:0 [ 1266.547363][T16873] slab_reclaimable:11545 slab_unreclaimable:110035 [ 1266.547363][T16873] mapped:26713 shmem:49693 pagetables:668 [ 1266.547363][T16873] sec_pagetables:0 bounce:0 [ 1266.547363][T16873] kernel_misc_reclaimable:0 [ 1266.547363][T16873] free:1277620 free_pcp:8583 free_cma:0 [ 1266.624510][T16873] Node 0 active_anon:209528kB inactive_anon:0kB active_file:73992kB inactive_file:161528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106832kB dirty:324kB writeback:0kB shmem:186736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12452kB pagetables:2672kB sec_pagetables:0kB all_unreclaimable? no [ 1266.712118][T16873] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1266.754648][T16874] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1266.785028][T16873] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1266.882150][T16873] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1266.901599][T16873] Node 0 DMA32 free:1221204kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:187888kB inactive_anon:0kB active_file:73992kB inactive_file:160700kB unevictable:1536kB writepending:324kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:23384kB local_pcp:2548kB free_cma:0kB [ 1267.004465][T16873] lowmem_reserve[]: 0 0 0 0 0 [ 1267.024442][T16873] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1267.094968][T16873] lowmem_reserve[]: 0 0 0 0 0 [ 1267.118014][T16873] Node 1 Normal free:3898036kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19296kB local_pcp:10784kB free_cma:0kB [ 1267.388747][T16894] bridge14: entered promiscuous mode [ 1267.394209][T16894] bridge14: entered allmulticast mode [ 1267.407789][T16894] team0: Port device bridge14 added [ 1267.682231][T16873] lowmem_reserve[]: 0 0 0 0 0 [ 1269.419446][T16873] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1269.432500][T16873] Node 0 DMA32: 908*4kB (UME) 378*8kB (UME) 247*16kB (UME) 423*32kB (UME) 181*64kB (UME) 104*128kB (UME) 98*256kB (UME) 105*512kB (UM) 56*1024kB (UM) 19*2048kB (UM) 246*4096kB (UM) = 1231760kB [ 1269.462896][T16873] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1269.674901][T16873] Node 1 Normal: 179*4kB (UE) 41*8kB (UE) 30*16kB (UME) 62*32kB (UME) 24*64kB (UME) 8*128kB (UME) 3*256kB (UME) 0*512kB 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3898036kB [ 1269.780808][T16901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2999'. [ 1269.802446][T16873] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1269.936900][T16873] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1270.102042][T16873] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1270.351187][T16873] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1270.394392][T16873] 102751 total pagecache pages [ 1270.411875][T16873] 0 pages in swap cache [ 1270.437517][T16873] Free swap = 124656kB [ 1270.614770][T16873] Total swap = 124996kB [ 1270.629514][T16873] 2097051 pages RAM [ 1270.644426][T16873] 0 pages HighMem/MovableOnly [ 1270.666305][T16914] loop1: detected capacity change from 0 to 512 [ 1270.694237][T16873] 416953 pages reserved [ 1270.703249][T16873] 0 pages cma reserved [ 1271.013438][T16914] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1271.170218][T16914] EXT4-fs (loop1): 1 truncate cleaned up [ 1271.195044][T16914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1273.596640][T16944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3010'. [ 1274.191228][T16945] bridge1: entered promiscuous mode [ 1274.250369][T16945] bridge1: entered allmulticast mode [ 1274.279726][T16945] team0: Port device bridge1 added [ 1274.495267][T13771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.340526][T16960] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1280.562377][T16989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3020'. [ 1281.322330][T16993] bridge2: entered promiscuous mode [ 1281.327886][T16993] bridge2: entered allmulticast mode [ 1281.347652][T16993] team0: Port device bridge2 added [ 1281.397679][T16992] loop6: detected capacity change from 0 to 512 [ 1281.939423][T16992] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1283.958554][T16992] EXT4-fs (loop6): 1 truncate cleaned up [ 1283.961360][T17006] warn_alloc: 1 callbacks suppressed [ 1283.961376][T17006] syz.0.3025: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1283.993731][T17006] CPU: 0 PID: 17006 Comm: syz.0.3025 Not tainted syzkaller #0 [ 1284.001219][T17006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1284.011301][T17006] Call Trace: [ 1284.013662][T16992] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1284.014583][T17006] [ 1284.014594][T17006] dump_stack_lvl+0x18c/0x250 [ 1284.014630][T17006] ? show_regs_print_info+0x20/0x20 [ 1284.014657][T17006] ? load_image+0x420/0x420 [ 1284.014686][T17006] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1284.014711][T17006] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1284.014736][T17006] warn_alloc+0x246/0x340 [ 1284.014765][T17006] ? stack_trace_save+0xaa/0x100 [ 1284.014792][T17006] ? zone_watermark_ok_safe+0x230/0x230 [ 1284.014830][T17006] ? kasan_set_track+0x5f/0x70 [ 1284.014849][T17006] ? kasan_set_track+0x4e/0x70 [ 1284.014866][T17006] ? __kasan_kmalloc+0x8f/0xa0 [ 1284.014885][T17006] ? xsk_init_queue+0xad/0x100 [ 1284.014908][T17006] ? xsk_setsockopt+0x413/0x750 [ 1284.095767][T17006] ? do_sock_setsockopt+0x175/0x1a0 [ 1284.100982][T17006] ? __x64_sys_setsockopt+0x182/0x200 [ 1284.106360][T17006] __vmalloc_node_range+0x129/0x1320 [ 1284.111760][T17006] ? free_vm_area+0x50/0x50 [ 1284.116286][T17006] vmalloc_user+0x74/0x80 [ 1284.120623][T17006] ? xskq_create+0xbf/0x170 [ 1284.125136][T17006] xskq_create+0xbf/0x170 [ 1284.129468][T17006] xsk_init_queue+0xad/0x100 [ 1284.134059][T17006] xsk_setsockopt+0x413/0x750 [ 1284.138740][T17006] ? xsk_poll+0x670/0x670 [ 1284.143068][T17006] ? __fget_files+0x28/0x460 [ 1284.147660][T17006] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1284.153205][T17006] ? security_socket_setsockopt+0x7e/0xa0 [ 1284.158932][T17006] ? xsk_poll+0x670/0x670 [ 1284.163259][T17006] do_sock_setsockopt+0x175/0x1a0 [ 1284.168287][T17006] ? __fdget+0x180/0x210 [ 1284.172536][T17006] __x64_sys_setsockopt+0x182/0x200 [ 1284.177741][T17006] do_syscall_64+0x55/0xb0 [ 1284.182160][T17006] ? clear_bhb_loop+0x40/0x90 [ 1284.186834][T17006] ? clear_bhb_loop+0x40/0x90 [ 1284.191505][T17006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1284.197398][T17006] RIP: 0033:0x7ff9a6d9de59 [ 1284.201812][T17006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1284.221464][T17006] RSP: 002b:00007ff9a7ca8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1284.229882][T17006] RAX: ffffffffffffffda RBX: 00007ff9a7025fa0 RCX: 00007ff9a6d9de59 [ 1284.237862][T17006] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1284.245832][T17006] RBP: 00007ff9a6e33e6f R08: 0000000000000004 R09: 0000000000000000 [ 1284.253799][T17006] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1284.261763][T17006] R13: 00007ff9a7026038 R14: 00007ff9a7025fa0 R15: 00007ffd04ad4628 [ 1284.269744][T17006] [ 1284.290582][T17006] Mem-Info: [ 1284.294174][T17006] active_anon:68518 inactive_anon:0 isolated_anon:0 [ 1284.294174][T17006] active_file:18509 inactive_file:40445 isolated_file:0 [ 1284.294174][T17006] unevictable:768 dirty:105 writeback:0 [ 1284.294174][T17006] slab_reclaimable:11589 slab_unreclaimable:110789 [ 1284.294174][T17006] mapped:24608 shmem:63307 pagetables:687 [ 1284.294174][T17006] sec_pagetables:0 bounce:0 [ 1284.294174][T17006] kernel_misc_reclaimable:0 [ 1284.294174][T17006] free:1261532 free_pcp:10235 free_cma:0 [ 1284.357227][T17006] Node 0 active_anon:274472kB inactive_anon:0kB active_file:73992kB inactive_file:161580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98388kB dirty:420kB writeback:0kB shmem:251692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12680kB pagetables:2748kB sec_pagetables:0kB all_unreclaimable? no [ 1284.583930][T17006] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1284.894180][T17006] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1284.944129][T17006] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1284.961568][T17006] Node 0 DMA32 free:1130504kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:270732kB inactive_anon:0kB active_file:73992kB inactive_file:160752kB unevictable:1536kB writepending:420kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:25524kB local_pcp:12324kB free_cma:0kB [ 1285.012407][T15807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1285.028210][T17006] lowmem_reserve[]: 0 0 0 0 0 [ 1285.066360][T17006] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1285.146911][T17006] lowmem_reserve[]: 0 0 0 0 0 [ 1285.151695][T17006] Node 1 Normal free:3898036kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19296kB local_pcp:10784kB free_cma:0kB [ 1285.237806][T17006] lowmem_reserve[]: 0 0 0 0 0 [ 1285.305000][T17016] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1285.305114][T17006] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1285.414718][T17006] Node 0 DMA32: 676*4kB (UME) 332*8kB (UME) 106*16kB (UME) 60*32kB (UME) 156*64kB (UME) 35*128kB (UME) 19*256kB (UME) 47*512kB (UM) 52*1024kB (UM) 19*2048kB (UM) 246*4096kB (UM) = 1152144kB [ 1285.438307][T17006] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1285.524763][T17006] Node 1 Normal: 179*4kB (UE) 41*8kB (UE) 30*16kB (UME) 62*32kB (UME) 24*64kB (UME) 8*128kB (UME) 3*256kB (UME) 0*512kB 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3898036kB [ 1285.670328][T17006] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1285.711115][T17006] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1286.384707][T17006] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1287.894134][T17006] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1287.974251][T17006] 111033 total pagecache pages [ 1288.034438][T17006] 0 pages in swap cache [ 1288.051068][T17006] Free swap = 124656kB [ 1288.064353][T17006] Total swap = 124996kB [ 1288.068694][T17006] 2097051 pages RAM [ 1288.074384][T17006] 0 pages HighMem/MovableOnly [ 1288.084642][T17006] 416953 pages reserved [ 1288.089367][T17006] 0 pages cma reserved [ 1290.114539][T17048] bridge14: entered promiscuous mode [ 1290.119961][T17048] bridge14: entered allmulticast mode [ 1290.134846][T17048] team0: Port device bridge14 added [ 1290.848710][T17056] loop6: detected capacity change from 0 to 512 [ 1290.855442][T14861] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1290.868573][T17056] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1290.905263][T17056] EXT4-fs (loop6): 1 truncate cleaned up [ 1290.925969][T17056] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1291.026618][T17060] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3039'. [ 1291.085829][T14861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1291.107380][T14861] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1291.144726][T14861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.228994][T14861] usb 1-1: config 0 descriptor?? [ 1291.985699][T14861] usbhid 1-1:0.0: can't add hid device: -71 [ 1291.991748][T14861] usbhid: probe of 1-1:0.0 failed with error -71 [ 1292.042795][T14861] usb 1-1: USB disconnect, device number 26 [ 1292.241712][T15807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1292.644449][T14861] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1292.839404][T14861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.851912][T14861] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1292.864464][T10786] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1292.898637][T14861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.052652][T14861] usb 1-1: config 0 descriptor?? [ 1293.678694][T10786] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.690278][T10786] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1293.699531][T10786] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.710120][T10786] usb 7-1: config 0 descriptor?? [ 1293.961328][T10786] usbhid 7-1:0.0: can't add hid device: -71 [ 1293.988181][T10786] usbhid: probe of 7-1:0.0 failed with error -71 [ 1294.027587][T10786] usb 7-1: USB disconnect, device number 3 [ 1294.054014][T14861] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 1294.066562][T14861] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 1294.275887][T17079] loop1: detected capacity change from 0 to 32768 [ 1294.311979][T17079] JBD2: Ignoring recovery information on journal [ 1294.374634][T17079] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1294.427125][T14861] usb 1-1: USB disconnect, device number 27 [ 1294.433125][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1294.589488][T13771] ocfs2: Unmounting device (7,1) on (node local) [ 1294.611120][T10786] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1294.892812][T17089] bridge15: entered promiscuous mode [ 1294.898390][T17089] bridge15: entered allmulticast mode [ 1294.915703][T17089] team0: Port device bridge15 added [ 1296.597444][T10786] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1296.605500][T10786] usb 7-1: can't read configurations, error -71 [ 1297.251269][T17098] loop0: detected capacity change from 0 to 512 [ 1297.273848][T17098] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1297.674828][T17098] EXT4-fs (loop0): 1 truncate cleaned up [ 1297.758049][T17098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1300.168189][T14320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.272953][T17116] loop0: detected capacity change from 0 to 128 [ 1300.415130][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.421462][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.428232][T17116] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1300.507815][T17116] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1300.561717][T17122] bridge16: entered promiscuous mode [ 1300.567397][T17122] bridge16: entered allmulticast mode [ 1300.575886][T17122] team0: Port device bridge16 added [ 1300.641906][T17116] ext4 filesystem being mounted at /174/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1301.420499][T17131] loop5: detected capacity change from 0 to 128 [ 1304.041916][T17142] loop6: detected capacity change from 0 to 32768 [ 1304.219837][T17142] JBD2: Ignoring recovery information on journal [ 1305.069138][T17142] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1305.176674][T17157] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1305.220365][ T27] audit: type=1800 audit(1784093010.019:2284): pid=17142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3063" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 1305.291306][T17157] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1305.341615][T17157] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 1305.350826][T17157] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1305.366690][T14320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1305.376425][T17157] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 1305.386933][T17157] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1305.398879][T17157] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 1305.410733][T17157] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 1305.419799][T17157] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 1305.429219][T17157] kvm: requested 124038 ns i8254 timer period limited to 200000 ns [ 1305.443279][T17145] loop1: detected capacity change from 0 to 32768 [ 1305.848970][T17145] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1305.989973][T17145] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1307.336154][T17145] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 1307.356669][T10786] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1307.363843][T10786] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1307.437098][T17166] bridge15: entered promiscuous mode [ 1307.442416][T17166] bridge15: entered allmulticast mode [ 1307.467723][T17166] team0: Port device bridge15 added [ 1307.477889][T10786] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 114ms [ 1307.606776][T10786] gfs2: fsid=syz:syz.0: jid=0: Done [ 1307.678238][T17145] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1308.175648][T17145] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 1308.332960][T15807] ocfs2: Unmounting device (7,6) on (node local) [ 1308.416835][T17069] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1308.541255][T17176] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1308.641630][T17069] usb 1-1: config index 0 descriptor too short (expected 8251, got 59) [ 1308.664891][T17069] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.706835][T17069] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1308.769179][T17069] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1308.823700][T17069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1308.986013][T17069] usb 1-1: SerialNumber: syz [ 1309.352839][T17069] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1309.768882][T17173] loop5: detected capacity change from 0 to 40427 [ 1309.792951][T17173] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1309.813608][T17173] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1310.004841][T15513] usb 1-1: USB disconnect, device number 28 [ 1310.052077][T17173] F2FS-fs (loop5): invalid crc value [ 1310.379117][T17173] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1310.588590][T17173] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1310.598407][T17173] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1311.863748][ T27] audit: type=1326 audit(1784093016.669:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17202 comm="syz.0.3077" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9a6d9de59 code=0x0 [ 1311.957051][T17208] bridge4: entered promiscuous mode [ 1311.962666][T17208] bridge4: entered allmulticast mode [ 1311.991531][T17208] team0: Port device bridge4 added [ 1315.060453][T17239] loop1: detected capacity change from 0 to 128 [ 1316.372148][T13773] Bluetooth: hci3: unexpected event for opcode 0x7605 [ 1316.409072][T17239] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 1316.451453][T15940] udevd[15940]: incorrect ext4 checksum on /dev/loop1 [ 1317.853673][T17255] bridge5: entered promiscuous mode [ 1317.859150][T17255] bridge5: entered allmulticast mode [ 1317.881362][T17255] team0: Port device bridge5 added [ 1319.667651][T17258] syz.0.3090: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1319.909667][T17258] CPU: 0 PID: 17258 Comm: syz.0.3090 Not tainted syzkaller #0 [ 1319.917198][T17258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1319.927281][T17258] Call Trace: [ 1319.930588][T17258] [ 1319.933530][T17258] dump_stack_lvl+0x18c/0x250 [ 1319.938249][T17258] ? show_regs_print_info+0x20/0x20 [ 1319.943482][T17258] ? load_image+0x420/0x420 [ 1319.948013][T17258] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1319.954461][T17258] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1319.960995][T17258] warn_alloc+0x246/0x340 [ 1319.965355][T17258] ? stack_trace_save+0xaa/0x100 [ 1319.970316][T17258] ? zone_watermark_ok_safe+0x230/0x230 [ 1319.975867][T17258] ? kasan_set_track+0x5f/0x70 [ 1319.980622][T17258] ? kasan_set_track+0x4e/0x70 [ 1319.985372][T17258] ? __kasan_kmalloc+0x8f/0xa0 [ 1319.990128][T17258] ? xsk_init_queue+0xad/0x100 [ 1319.994891][T17258] ? xsk_setsockopt+0x413/0x750 [ 1319.999771][T17258] ? do_sock_setsockopt+0x175/0x1a0 [ 1320.004998][T17258] ? __x64_sys_setsockopt+0x182/0x200 [ 1320.010406][T17258] __vmalloc_node_range+0x129/0x1320 [ 1320.015752][T17258] ? free_vm_area+0x50/0x50 [ 1320.020310][T17258] vmalloc_user+0x74/0x80 [ 1320.024674][T17258] ? xskq_create+0xbf/0x170 [ 1320.029201][T17258] xskq_create+0xbf/0x170 [ 1320.033559][T17258] xsk_init_queue+0xad/0x100 [ 1320.038185][T17258] xsk_setsockopt+0x413/0x750 [ 1320.042895][T17258] ? xsk_poll+0x670/0x670 [ 1320.047254][T17258] ? __fget_files+0x28/0x460 [ 1320.051882][T17258] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1320.057455][T17258] ? security_socket_setsockopt+0x7e/0xa0 [ 1320.063202][T17258] ? xsk_poll+0x670/0x670 [ 1320.067561][T17258] do_sock_setsockopt+0x175/0x1a0 [ 1320.072619][T17258] ? __fdget+0x180/0x210 [ 1320.076896][T17258] __x64_sys_setsockopt+0x182/0x200 [ 1320.082130][T17258] do_syscall_64+0x55/0xb0 [ 1320.086573][T17258] ? clear_bhb_loop+0x40/0x90 [ 1320.091270][T17258] ? clear_bhb_loop+0x40/0x90 [ 1320.095954][T17258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1320.101853][T17258] RIP: 0033:0x7ff9a6d9de59 [ 1320.106269][T17258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1320.125886][T17258] RSP: 002b:00007ff9a7ca8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1320.134311][T17258] RAX: ffffffffffffffda RBX: 00007ff9a7025fa0 RCX: 00007ff9a6d9de59 [ 1320.142290][T17258] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1320.150257][T17258] RBP: 00007ff9a6e33e6f R08: 0000000000000004 R09: 0000000000000000 [ 1320.158234][T17258] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1320.166203][T17258] R13: 00007ff9a7026038 R14: 00007ff9a7025fa0 R15: 00007ffd04ad4628 [ 1320.174188][T17258] [ 1320.186003][T17258] Mem-Info: [ 1320.189164][T17258] active_anon:62080 inactive_anon:0 isolated_anon:0 [ 1320.189164][T17258] active_file:18509 inactive_file:40452 isolated_file:0 [ 1320.189164][T17258] unevictable:768 dirty:85 writeback:0 [ 1320.189164][T17258] slab_reclaimable:11596 slab_unreclaimable:111302 [ 1320.189164][T17258] mapped:24793 shmem:56736 pagetables:717 [ 1320.189164][T17258] sec_pagetables:0 bounce:0 [ 1320.189164][T17258] kernel_misc_reclaimable:0 [ 1320.189164][T17258] free:1262640 free_pcp:14546 free_cma:0 [ 1320.250556][T17258] Node 0 active_anon:247492kB inactive_anon:0kB active_file:73992kB inactive_file:161616kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99056kB dirty:360kB writeback:0kB shmem:224464kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12508kB pagetables:2784kB sec_pagetables:0kB all_unreclaimable? no [ 1320.518529][T17272] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1320.544771][T17258] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1320.584764][T17258] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1320.716250][T17258] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1320.992539][T17258] Node 0 DMA32 free:1142300kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:249492kB inactive_anon:0kB active_file:73992kB inactive_file:160788kB unevictable:1536kB writepending:360kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:32500kB local_pcp:21056kB free_cma:0kB [ 1321.358286][T17258] lowmem_reserve[]: 0 0 0 0 0 [ 1321.363576][T17258] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1321.701694][T17258] lowmem_reserve[]: 0 0 0 0 0 [ 1321.764453][T17258] Node 1 Normal free:3898036kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19296kB local_pcp:10784kB free_cma:0kB [ 1321.924773][T17258] lowmem_reserve[]: 0 0 0 0 0 [ 1321.989195][T17258] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1322.905042][T17258] Node 0 DMA32: 615*4kB (UME) 523*8kB (UE) 352*16kB (UME) 422*32kB (UME) 178*64kB (UME) 94*128kB (UME) 60*256kB (UME) 45*512kB (UM) 48*1024kB (UM) 18*2048kB (UM) 247*4096kB (UM) = 1185332kB [ 1323.022542][T17258] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1323.080856][T17295] bridge17: entered promiscuous mode [ 1323.086497][T17295] bridge17: entered allmulticast mode [ 1323.102218][T17295] team0: Port device bridge17 added [ 1323.320517][T17258] Node 1 Normal: 179*4kB (UE) 41*8kB (UE) 30*16kB (UME) 62*32kB (UME) 24*64kB (UME) 8*128kB (UME) 3*256kB (UME) 0*512kB 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3898036kB [ 1324.912246][T17258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1324.933492][T17258] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1325.067546][T17258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1325.096044][T17258] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1325.105829][T17258] 110148 total pagecache pages [ 1325.105961][T17298] netlink: 'syz.5.3099': attribute type 4 has an invalid length. [ 1325.110630][T17258] 0 pages in swap cache [ 1325.110641][T17258] Free swap = 124656kB [ 1325.110649][T17258] Total swap = 124996kB [ 1325.110660][T17258] 2097051 pages RAM [ 1325.110667][T17258] 0 pages HighMem/MovableOnly [ 1325.144677][T17258] 416953 pages reserved [ 1325.148904][T17258] 0 pages cma reserved [ 1325.233487][ T5087] Bluetooth: hci2: unexpected event for opcode 0x7605 [ 1326.907546][T17311] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1329.953299][T17331] syz.6.3111: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 1329.975178][T17331] CPU: 1 PID: 17331 Comm: syz.6.3111 Not tainted syzkaller #0 [ 1329.982701][T17331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1329.992792][T17331] Call Trace: [ 1329.996103][T17331] [ 1329.999057][T17331] dump_stack_lvl+0x18c/0x250 [ 1330.003777][T17331] ? show_regs_print_info+0x20/0x20 [ 1330.009012][T17331] ? load_image+0x420/0x420 [ 1330.013548][T17331] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1330.019989][T17331] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1330.026529][T17331] warn_alloc+0x246/0x340 [ 1330.030897][T17331] ? stack_trace_save+0xaa/0x100 [ 1330.035954][T17331] ? zone_watermark_ok_safe+0x230/0x230 [ 1330.041549][T17331] ? kasan_set_track+0x5f/0x70 [ 1330.046333][T17331] ? kasan_set_track+0x4e/0x70 [ 1330.051091][T17331] ? __kasan_kmalloc+0x8f/0xa0 [ 1330.055854][T17331] ? xsk_init_queue+0xad/0x100 [ 1330.060649][T17331] ? xsk_setsockopt+0x413/0x750 [ 1330.065492][T17331] ? do_sock_setsockopt+0x175/0x1a0 [ 1330.070682][T17331] ? __x64_sys_setsockopt+0x182/0x200 [ 1330.076074][T17331] __vmalloc_node_range+0x129/0x1320 [ 1330.081365][T17331] ? free_vm_area+0x50/0x50 [ 1330.085886][T17331] vmalloc_user+0x74/0x80 [ 1330.090244][T17331] ? xskq_create+0xbf/0x170 [ 1330.094779][T17331] xskq_create+0xbf/0x170 [ 1330.099146][T17331] xsk_init_queue+0xad/0x100 [ 1330.103790][T17331] xsk_setsockopt+0x413/0x750 [ 1330.108519][T17331] ? xsk_poll+0x670/0x670 [ 1330.112884][T17331] ? __fget_files+0x28/0x460 [ 1330.117511][T17331] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1330.123087][T17331] ? security_socket_setsockopt+0x7e/0xa0 [ 1330.128845][T17331] ? xsk_poll+0x670/0x670 [ 1330.133210][T17331] do_sock_setsockopt+0x175/0x1a0 [ 1330.138268][T17331] ? __fdget+0x180/0x210 [ 1330.142556][T17331] __x64_sys_setsockopt+0x182/0x200 [ 1330.147797][T17331] do_syscall_64+0x55/0xb0 [ 1330.152250][T17331] ? clear_bhb_loop+0x40/0x90 [ 1330.156949][T17331] ? clear_bhb_loop+0x40/0x90 [ 1330.161656][T17331] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1330.167601][T17331] RIP: 0033:0x7fb56e59de59 [ 1330.172005][T17331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1330.191613][T17331] RSP: 002b:00007fb56f44a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1330.200059][T17331] RAX: ffffffffffffffda RBX: 00007fb56e825fa0 RCX: 00007fb56e59de59 [ 1330.208052][T17331] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1330.216041][T17331] RBP: 00007fb56e633e6f R08: 0000000000000004 R09: 0000000000000000 [ 1330.224036][T17331] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1330.232063][T17331] R13: 00007fb56e826038 R14: 00007fb56e825fa0 R15: 00007ffcfad78dc8 [ 1330.240038][T17331] [ 1330.327126][T17331] Mem-Info: [ 1330.357352][T17331] active_anon:72131 inactive_anon:0 isolated_anon:0 [ 1330.357352][T17331] active_file:18509 inactive_file:40456 isolated_file:0 [ 1330.357352][T17331] unevictable:768 dirty:62 writeback:0 [ 1330.357352][T17331] slab_reclaimable:11634 slab_unreclaimable:110456 [ 1330.357352][T17331] mapped:36133 shmem:66767 pagetables:727 [ 1330.357352][T17331] sec_pagetables:0 bounce:0 [ 1330.357352][T17331] kernel_misc_reclaimable:0 [ 1330.357352][T17331] free:1254130 free_pcp:13601 free_cma:0 [ 1330.369152][T17340] bridge3: entered promiscuous mode [ 1330.430292][T17331] Node 0 active_anon:288424kB inactive_anon:0kB active_file:73992kB inactive_file:161624kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144488kB dirty:248kB writeback:0kB shmem:265332kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12720kB pagetables:2908kB sec_pagetables:0kB all_unreclaimable? no [ 1330.466087][T17340] bridge3: entered allmulticast mode [ 1330.482643][T17340] team0: Port device bridge3 added [ 1330.737583][T17331] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1330.869033][T17331] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1331.095818][T17331] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1331.122327][T17331] Node 0 DMA32 free:1138252kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:268180kB inactive_anon:0kB active_file:73992kB inactive_file:160796kB unevictable:1536kB writepending:248kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:20848kB local_pcp:20348kB free_cma:0kB [ 1331.191601][T17331] lowmem_reserve[]: 0 0 0 0 0 [ 1331.197244][T17331] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1331.394409][T17331] lowmem_reserve[]: 0 0 0 0 0 [ 1331.552480][T17331] Node 1 Normal free:3898036kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19296kB local_pcp:10784kB free_cma:0kB [ 1331.794910][T17331] lowmem_reserve[]: 0 0 0 0 0 [ 1331.814602][T17331] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1331.864881][T17331] Node 0 DMA32: 622*4kB (UE) 537*8kB (UE) 127*16kB (UME) 246*32kB (UME) 197*64kB (UME) 74*128kB (UME) 60*256kB (UME) 33*512kB (UM) 30*1024kB (UM) 16*2048kB (UM) 247*4096kB (UM) = 1146224kB [ 1332.117589][T17331] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1332.339308][T17331] Node 1 Normal: 179*4kB (UE) 41*8kB (UE) 30*16kB (UME) 62*32kB (UME) 24*64kB (UME) 8*128kB (UME) 3*256kB (UME) 0*512kB 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3898036kB [ 1332.542409][T17331] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1332.615066][T17331] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1332.624888][T17331] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1332.634881][T17331] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1332.646100][T17331] 117817 total pagecache pages [ 1332.646985][T17350] sch_fq: defrate 11 ignored. [ 1332.651123][T17331] 0 pages in swap cache [ 1332.660900][T17331] Free swap = 124656kB [ 1332.666331][T17331] Total swap = 124996kB [ 1332.670590][T17331] 2097051 pages RAM [ 1332.674961][T17331] 0 pages HighMem/MovableOnly [ 1332.679734][T17331] 416953 pages reserved [ 1332.684071][T17331] 0 pages cma reserved [ 1333.042921][T17354] loop6: detected capacity change from 0 to 256 [ 1333.430453][T17358] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1335.520417][T17381] bridge18: entered promiscuous mode [ 1335.525945][T17381] bridge18: entered allmulticast mode [ 1335.538002][T17381] team0: Port device bridge18 added [ 1340.664190][T17410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3130'. [ 1341.898622][T17416] bridge16: entered promiscuous mode [ 1341.904328][T17416] bridge16: entered allmulticast mode [ 1341.918239][T17416] team0: Port device bridge16 added [ 1343.393103][T17419] loop6: detected capacity change from 0 to 512 [ 1343.402291][T17421] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1343.416139][T17419] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1343.557490][T17419] EXT4-fs (loop6): 1 truncate cleaned up [ 1343.563922][T17419] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1345.091155][T15807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1345.541923][T17451] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3141'. [ 1346.660474][T17458] bridge4: entered promiscuous mode [ 1346.665924][T17458] bridge4: entered allmulticast mode [ 1346.679495][T17458] team0: Port device bridge4 added [ 1347.589691][T17468] loop5: detected capacity change from 0 to 512 [ 1347.603137][T17468] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1347.663892][T17468] EXT4-fs (loop5): 1 truncate cleaned up [ 1347.687311][T17468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1349.578570][T16060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1350.648415][T17491] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1351.527238][T17496] bridge5: entered promiscuous mode [ 1351.532532][T17496] bridge5: entered allmulticast mode [ 1351.546258][T17496] team0: Port device bridge5 added [ 1354.453409][T17518] loop6: detected capacity change from 0 to 512 [ 1354.492592][T17518] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1354.656021][T17518] EXT4-fs (loop6): 1 truncate cleaned up [ 1354.665354][T17518] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1354.968337][T17533] bridge19: entered promiscuous mode [ 1354.973758][T17533] bridge19: entered allmulticast mode [ 1355.004233][T17533] team0: Port device bridge19 added [ 1355.610398][T15807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1355.903088][ T5087] Bluetooth: hci3: unexpected event for opcode 0x042c [ 1356.969099][T17549] loop5: detected capacity change from 0 to 4096 [ 1357.265220][T17549] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 1358.115987][T17549] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1358.188964][T17549] ntfs3: loop5: Failed to load $Extend (-22). [ 1358.221262][T17549] ntfs3: loop5: Failed to initialize $Extend. [ 1358.630397][T17569] bridge6: entered promiscuous mode [ 1358.635882][T17569] bridge6: entered allmulticast mode [ 1358.648565][T17569] team0: Port device bridge6 added [ 1359.033026][ T5087] block nbd0: Receive control failed (result -32) [ 1359.137154][T17565] block nbd0: shutting down sockets [ 1359.562033][T17572] loop6: detected capacity change from 0 to 512 [ 1359.563724][T17573] loop5: detected capacity change from 0 to 256 [ 1359.599759][T17572] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1359.632010][T17573] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1359.669017][T17572] EXT4-fs (loop6): 1 truncate cleaned up [ 1359.685660][T17572] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1360.280795][T17580] syz.5.3180: attempt to access beyond end of device [ 1360.280795][T17580] loop5: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 1360.414318][ T27] audit: type=1800 audit(1784093065.209:2286): pid=17580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3180" name="file1" dev="loop5" ino=1048615 res=0 errno=0 [ 1360.563681][T15807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1361.459018][T17592] warn_alloc: 1 callbacks suppressed [ 1361.459033][T17592] syz.1.3186: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1361.568762][T17592] CPU: 0 PID: 17592 Comm: syz.1.3186 Not tainted syzkaller #0 [ 1361.576288][T17592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1361.586370][T17592] Call Trace: [ 1361.589668][T17592] [ 1361.592620][T17592] dump_stack_lvl+0x18c/0x250 [ 1361.597337][T17592] ? show_regs_print_info+0x20/0x20 [ 1361.602568][T17592] ? load_image+0x420/0x420 [ 1361.607105][T17592] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1361.613551][T17592] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1361.620082][T17592] warn_alloc+0x246/0x340 [ 1361.624447][T17592] ? stack_trace_save+0xaa/0x100 [ 1361.629409][T17592] ? zone_watermark_ok_safe+0x230/0x230 [ 1361.634992][T17592] ? kasan_set_track+0x5f/0x70 [ 1361.639774][T17592] ? kasan_set_track+0x4e/0x70 [ 1361.644559][T17592] ? __kasan_kmalloc+0x8f/0xa0 [ 1361.649343][T17592] ? xsk_init_queue+0xad/0x100 [ 1361.654145][T17592] ? xsk_setsockopt+0x413/0x750 [ 1361.659016][T17592] ? do_sock_setsockopt+0x175/0x1a0 [ 1361.664241][T17592] ? __x64_sys_setsockopt+0x182/0x200 [ 1361.669632][T17592] __vmalloc_node_range+0x129/0x1320 [ 1361.674972][T17592] ? free_vm_area+0x50/0x50 [ 1361.679509][T17592] vmalloc_user+0x74/0x80 [ 1361.683860][T17592] ? xskq_create+0xbf/0x170 [ 1361.688400][T17592] xskq_create+0xbf/0x170 [ 1361.692756][T17592] xsk_init_queue+0xad/0x100 [ 1361.697374][T17592] xsk_setsockopt+0x413/0x750 [ 1361.702080][T17592] ? xsk_poll+0x670/0x670 [ 1361.706443][T17592] ? __fget_files+0x28/0x460 [ 1361.711059][T17592] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1361.716629][T17592] ? security_socket_setsockopt+0x7e/0xa0 [ 1361.722377][T17592] ? xsk_poll+0x670/0x670 [ 1361.726736][T17592] do_sock_setsockopt+0x175/0x1a0 [ 1361.731791][T17592] ? __fdget+0x180/0x210 [ 1361.736063][T17592] __x64_sys_setsockopt+0x182/0x200 [ 1361.741305][T17592] do_syscall_64+0x55/0xb0 [ 1361.745756][T17592] ? clear_bhb_loop+0x40/0x90 [ 1361.750449][T17592] ? clear_bhb_loop+0x40/0x90 [ 1361.755148][T17592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1361.761071][T17592] RIP: 0033:0x7fc6ca99de59 [ 1361.765514][T17592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1361.785156][T17592] RSP: 002b:00007fc6cb8bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1361.793619][T17592] RAX: ffffffffffffffda RBX: 00007fc6cac25fa0 RCX: 00007fc6ca99de59 [ 1361.801595][T17592] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1361.809562][T17592] RBP: 00007fc6caa33e6f R08: 0000000000000004 R09: 0000000000000000 [ 1361.817533][T17592] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1361.825501][T17592] R13: 00007fc6cac26038 R14: 00007fc6cac25fa0 R15: 00007ffec94a1d78 [ 1361.833485][T17592] [ 1361.837642][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.843977][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.856416][T17592] Mem-Info: [ 1361.859572][T17592] active_anon:49302 inactive_anon:0 isolated_anon:0 [ 1361.859572][T17592] active_file:18509 inactive_file:40481 isolated_file:0 [ 1361.859572][T17592] unevictable:768 dirty:42 writeback:0 [ 1361.859572][T17592] slab_reclaimable:11720 slab_unreclaimable:110966 [ 1361.859572][T17592] mapped:27651 shmem:43917 pagetables:717 [ 1361.859572][T17592] sec_pagetables:0 bounce:0 [ 1361.859572][T17592] kernel_misc_reclaimable:0 [ 1361.859572][T17592] free:1279737 free_pcp:9776 free_cma:0 [ 1362.146062][T17592] Node 0 active_anon:197208kB inactive_anon:0kB active_file:73992kB inactive_file:161672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110596kB dirty:164kB writeback:0kB shmem:174184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12700kB pagetables:2900kB sec_pagetables:0kB all_unreclaimable? no [ 1362.185316][T17592] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1362.222463][T17603] bridge6: entered promiscuous mode [ 1362.236385][T17603] bridge6: entered allmulticast mode [ 1362.275106][T17592] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1362.320322][T17603] team0: Port device bridge6 added [ 1362.609678][T17592] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1362.616224][T17592] Node 0 DMA32 free:1205292kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:185568kB inactive_anon:0kB active_file:73992kB inactive_file:160844kB unevictable:1536kB writepending:164kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:31328kB local_pcp:14868kB free_cma:0kB [ 1362.647134][T17592] lowmem_reserve[]: 0 0 0 0 0 [ 1362.652850][T17592] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1362.680122][T17592] lowmem_reserve[]: 0 0 0 0 0 [ 1362.685282][T17592] Node 1 Normal free:3898292kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19072kB local_pcp:8288kB free_cma:0kB [ 1362.715105][T17592] lowmem_reserve[]: 0 0 0 0 0 [ 1362.719830][T17592] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1362.732544][T17592] Node 0 DMA32: 119*4kB (UM) 500*8kB (U) 117*16kB (UM) 381*32kB (UME) 286*64kB (UME) 198*128kB (UME) 135*256kB (UME) 79*512kB (UM) 41*1024kB (UM) 9*2048kB (UM) 246*4096kB (UM) = 1205228kB [ 1362.752432][T17592] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1362.774395][T17592] Node 1 Normal: 179*4kB (UE) 41*8kB (UE) 30*16kB (UME) 70*32kB (UME) 24*64kB (UME) 8*128kB (UME) 3*256kB (UME) 0*512kB 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3898292kB [ 1362.816602][T17592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1362.874486][T17592] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1362.884139][T17592] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1362.907294][T17594] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1362.977712][T17592] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1363.040544][T17616] loop0: detected capacity change from 0 to 512 [ 1363.051265][T17592] 100906 total pagecache pages [ 1363.056455][T17592] 0 pages in swap cache [ 1363.069790][T17592] Free swap = 124656kB [ 1363.073982][T17592] Total swap = 124996kB [ 1363.091175][T17592] 2097051 pages RAM [ 1363.095292][T17616] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1363.105400][T17592] 0 pages HighMem/MovableOnly [ 1363.110104][T17592] 416953 pages reserved [ 1363.114676][T17592] 0 pages cma reserved [ 1363.167087][T17616] EXT4-fs (loop0): 1 truncate cleaned up [ 1363.225291][T14861] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1363.246434][T17616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1363.458309][T14861] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1363.481109][T14861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.513578][T14861] usb 6-1: config 0 descriptor?? [ 1363.617180][T14861] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1363.993156][T14320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1365.430707][T17640] bridge17: entered promiscuous mode [ 1365.436472][T17640] bridge17: entered allmulticast mode [ 1365.451578][T17640] team0: Port device bridge17 added [ 1365.991592][T14861] usb 6-1: USB disconnect, device number 20 [ 1367.403650][T17650] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1367.519634][T17665] loop0: detected capacity change from 0 to 512 [ 1367.560064][T17665] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1367.633117][T17665] EXT4-fs (loop0): 1 truncate cleaned up [ 1367.690101][T17665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1368.482586][T14320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1368.564984][T17683] bridge20: entered promiscuous mode [ 1368.570440][T17683] bridge20: entered allmulticast mode [ 1368.593990][T17683] team0: Port device bridge20 added [ 1370.051631][T17691] loop1: detected capacity change from 0 to 128 [ 1370.901517][T17686] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1371.927498][T17700] warn_alloc: 1 callbacks suppressed [ 1371.927514][T17700] syz.1.3214: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1371.992294][T17700] CPU: 0 PID: 17700 Comm: syz.1.3214 Not tainted syzkaller #0 [ 1371.999812][T17700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1372.009871][T17700] Call Trace: [ 1372.013140][T17700] [ 1372.016063][T17700] dump_stack_lvl+0x18c/0x250 [ 1372.020748][T17700] ? show_regs_print_info+0x20/0x20 [ 1372.025946][T17700] ? load_image+0x420/0x420 [ 1372.030465][T17700] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1372.036891][T17700] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1372.043401][T17700] warn_alloc+0x246/0x340 [ 1372.047732][T17700] ? stack_trace_save+0xaa/0x100 [ 1372.052661][T17700] ? zone_watermark_ok_safe+0x230/0x230 [ 1372.058294][T17700] ? kasan_set_track+0x5f/0x70 [ 1372.063053][T17700] ? kasan_set_track+0x4e/0x70 [ 1372.067807][T17700] ? __kasan_kmalloc+0x8f/0xa0 [ 1372.072568][T17700] ? xsk_init_queue+0xad/0x100 [ 1372.077327][T17700] ? xsk_setsockopt+0x413/0x750 [ 1372.082274][T17700] ? do_sock_setsockopt+0x175/0x1a0 [ 1372.087481][T17700] ? __x64_sys_setsockopt+0x182/0x200 [ 1372.092899][T17700] __vmalloc_node_range+0x129/0x1320 [ 1372.098227][T17700] ? free_vm_area+0x50/0x50 [ 1372.102730][T17700] vmalloc_user+0x74/0x80 [ 1372.107063][T17700] ? xskq_create+0xbf/0x170 [ 1372.111604][T17700] xskq_create+0xbf/0x170 [ 1372.115929][T17700] xsk_init_queue+0xad/0x100 [ 1372.120512][T17700] xsk_setsockopt+0x413/0x750 [ 1372.125201][T17700] ? xsk_poll+0x670/0x670 [ 1372.129533][T17700] ? __fget_files+0x28/0x460 [ 1372.134572][T17700] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1372.140111][T17700] ? security_socket_setsockopt+0x7e/0xa0 [ 1372.145825][T17700] ? xsk_poll+0x670/0x670 [ 1372.150164][T17700] do_sock_setsockopt+0x175/0x1a0 [ 1372.155186][T17700] ? __fdget+0x180/0x210 [ 1372.159427][T17700] __x64_sys_setsockopt+0x182/0x200 [ 1372.164622][T17700] do_syscall_64+0x55/0xb0 [ 1372.169030][T17700] ? clear_bhb_loop+0x40/0x90 [ 1372.173703][T17700] ? clear_bhb_loop+0x40/0x90 [ 1372.178378][T17700] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1372.184276][T17700] RIP: 0033:0x7fc6ca99de59 [ 1372.188701][T17700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1372.208306][T17700] RSP: 002b:00007fc6cb8bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1372.216713][T17700] RAX: ffffffffffffffda RBX: 00007fc6cac25fa0 RCX: 00007fc6ca99de59 [ 1372.224678][T17700] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1372.232637][T17700] RBP: 00007fc6caa33e6f R08: 0000000000000004 R09: 0000000000000000 [ 1372.240603][T17700] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1372.248569][T17700] R13: 00007fc6cac26038 R14: 00007fc6cac25fa0 R15: 00007ffec94a1d78 [ 1372.256544][T17700] [ 1372.482459][T17700] Mem-Info: [ 1372.498622][T17700] active_anon:56333 inactive_anon:0 isolated_anon:0 [ 1372.498622][T17700] active_file:18509 inactive_file:40472 isolated_file:0 [ 1372.498622][T17700] unevictable:768 dirty:44 writeback:0 [ 1372.498622][T17700] slab_reclaimable:11712 slab_unreclaimable:110961 [ 1372.498622][T17700] mapped:28353 shmem:50918 pagetables:765 [ 1372.498622][T17700] sec_pagetables:0 bounce:0 [ 1372.498622][T17700] kernel_misc_reclaimable:0 [ 1372.498622][T17700] free:1277303 free_pcp:6643 free_cma:0 [ 1372.656174][T17700] Node 0 active_anon:224532kB inactive_anon:0kB active_file:73992kB inactive_file:161688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114968kB dirty:176kB writeback:0kB shmem:201236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12772kB pagetables:2960kB sec_pagetables:0kB all_unreclaimable? no [ 1372.739046][T17700] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1372.886397][T17700] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1372.889789][T17720] loop6: detected capacity change from 0 to 128 [ 1373.063501][T17720] FAT-fs (loop6): bogus number of FAT structure [ 1373.072004][T17720] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1373.088973][T17720] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1373.288986][T17709] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1373.349896][T15940] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1373.370804][T17700] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1373.377570][T17700] Node 0 DMA32 free:1192868kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:219032kB inactive_anon:0kB active_file:73992kB inactive_file:160860kB unevictable:1536kB writepending:176kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:16332kB local_pcp:15244kB free_cma:0kB [ 1373.437738][T17700] lowmem_reserve[]: 0 0 0 0 0 [ 1373.448503][T17700] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1373.478681][ T5087] Bluetooth: hci3: unexpected event for opcode 0x042c [ 1373.649452][T17700] lowmem_reserve[]: 0 0 0 0 0 [ 1373.655384][T17700] Node 1 Normal free:3898292kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19072kB local_pcp:10784kB free_cma:0kB [ 1373.706009][T17700] lowmem_reserve[]: 0 0 0 0 0 [ 1373.738205][T17700] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1373.755929][T17700] Node 0 DMA32: 776*4kB (UM) 585*8kB (UM) 143*16kB (U) 116*32kB (UME) 76*64kB (UME) 182*128kB (UME) 144*256kB (UME) 87*512kB (UM) 41*1024kB (UM) 9*2048kB (UM) 246*4096kB (UM) = 1191384kB [ 1373.793023][T17700] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1374.015187][T17700] Node 1 Normal: 179*4kB (UE) 41*8kB (UE) 30*16kB (UME) 70*32kB (UME) 24*64kB (UME) 8*128kB (UME) 3*256kB (UME) 0*512kB 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3898292kB [ 1374.062111][T17732] bridge7: entered promiscuous mode [ 1374.067655][T17732] bridge7: entered allmulticast mode [ 1374.080336][T17732] team0: Port device bridge7 added [ 1374.270840][T17700] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1374.554994][T17700] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1374.744843][T17700] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1374.754766][T17700] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1374.764872][T17700] 111056 total pagecache pages [ 1374.769666][T17700] 0 pages in swap cache [ 1374.773829][T17700] Free swap = 124656kB [ 1374.778723][T17700] Total swap = 124996kB [ 1374.782900][T17700] 2097051 pages RAM [ 1374.787494][T17700] 0 pages HighMem/MovableOnly [ 1374.792280][T17700] 416953 pages reserved [ 1374.796875][T17700] 0 pages cma reserved [ 1376.178738][T17747] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1379.727788][T17768] bridge18: entered promiscuous mode [ 1379.733222][T17768] bridge18: entered allmulticast mode [ 1379.746135][T17768] team0: Port device bridge18 added [ 1380.762933][T17770] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1380.790325][T17776] loop0: detected capacity change from 0 to 512 [ 1380.873055][T17776] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1381.136102][T17776] EXT4-fs (loop0): 1 truncate cleaned up [ 1381.186120][T17776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1382.359109][T14320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1382.413768][T17796] loop5: detected capacity change from 0 to 64 [ 1382.498513][T17794] syz_tun: entered allmulticast mode [ 1382.595225][T17796] Bad inode number on dev loop5: 5 is out of range [ 1383.133138][T17810] warn_alloc: 1 callbacks suppressed [ 1383.133150][T17810] syz.5.3241: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 1383.189196][T17812] bridge21: entered promiscuous mode [ 1383.194691][T17812] bridge21: entered allmulticast mode [ 1383.207516][T17812] team0: Port device bridge21 added [ 1383.750769][T17810] CPU: 1 PID: 17810 Comm: syz.5.3241 Not tainted syzkaller #0 [ 1383.758302][T17810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1383.768376][T17810] Call Trace: [ 1383.771663][T17810] [ 1383.774600][T17810] dump_stack_lvl+0x18c/0x250 [ 1383.779279][T17810] ? show_regs_print_info+0x20/0x20 [ 1383.784477][T17810] ? load_image+0x420/0x420 [ 1383.789005][T17810] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1383.795446][T17810] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1383.801987][T17810] warn_alloc+0x246/0x340 [ 1383.806353][T17810] ? stack_trace_save+0xaa/0x100 [ 1383.811323][T17810] ? zone_watermark_ok_safe+0x230/0x230 [ 1383.816927][T17810] ? kasan_set_track+0x5f/0x70 [ 1383.821723][T17810] ? kasan_set_track+0x4e/0x70 [ 1383.826516][T17810] ? __kasan_kmalloc+0x8f/0xa0 [ 1383.831315][T17810] ? xsk_init_queue+0xad/0x100 [ 1383.836106][T17810] ? xsk_setsockopt+0x413/0x750 [ 1383.840963][T17810] ? do_sock_setsockopt+0x175/0x1a0 [ 1383.846169][T17810] ? __x64_sys_setsockopt+0x182/0x200 [ 1383.851553][T17810] __vmalloc_node_range+0x129/0x1320 [ 1383.856874][T17810] ? free_vm_area+0x50/0x50 [ 1383.861399][T17810] vmalloc_user+0x74/0x80 [ 1383.865735][T17810] ? xskq_create+0xbf/0x170 [ 1383.870240][T17810] xskq_create+0xbf/0x170 [ 1383.874663][T17810] xsk_init_queue+0xad/0x100 [ 1383.879259][T17810] xsk_setsockopt+0x413/0x750 [ 1383.883940][T17810] ? xsk_poll+0x670/0x670 [ 1383.888271][T17810] ? __fget_files+0x28/0x460 [ 1383.892866][T17810] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1383.898410][T17810] ? security_socket_setsockopt+0x7e/0xa0 [ 1383.904135][T17810] ? xsk_poll+0x670/0x670 [ 1383.908481][T17810] do_sock_setsockopt+0x175/0x1a0 [ 1383.913516][T17810] ? __fdget+0x180/0x210 [ 1383.917761][T17810] __x64_sys_setsockopt+0x182/0x200 [ 1383.922967][T17810] do_syscall_64+0x55/0xb0 [ 1383.927396][T17810] ? clear_bhb_loop+0x40/0x90 [ 1383.932066][T17810] ? clear_bhb_loop+0x40/0x90 [ 1383.936738][T17810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1383.942633][T17810] RIP: 0033:0x7fde8519de59 [ 1383.947050][T17810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1383.966653][T17810] RSP: 002b:00007fde8600a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1383.975076][T17810] RAX: ffffffffffffffda RBX: 00007fde85426090 RCX: 00007fde8519de59 [ 1383.983045][T17810] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1383.991018][T17810] RBP: 00007fde85233e6f R08: 0000000000000004 R09: 0000000000000000 [ 1383.998989][T17810] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1384.006961][T17810] R13: 00007fde85426128 R14: 00007fde85426090 R15: 00007ffd963c66e8 [ 1384.014945][T17810] [ 1384.085515][T17810] Mem-Info: [ 1384.088689][T17810] active_anon:53709 inactive_anon:0 isolated_anon:0 [ 1384.088689][T17810] active_file:18509 inactive_file:40476 isolated_file:0 [ 1384.088689][T17810] unevictable:768 dirty:66 writeback:0 [ 1384.088689][T17810] slab_reclaimable:11682 slab_unreclaimable:110607 [ 1384.088689][T17810] mapped:24790 shmem:48382 pagetables:699 [ 1384.088689][T17810] sec_pagetables:0 bounce:0 [ 1384.088689][T17810] kernel_misc_reclaimable:0 [ 1384.088689][T17810] free:1275694 free_pcp:11215 free_cma:0 [ 1384.154600][T17810] Node 0 active_anon:213536kB inactive_anon:0kB active_file:73992kB inactive_file:161704kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99116kB dirty:264kB writeback:0kB shmem:190792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12568kB pagetables:2796kB sec_pagetables:0kB all_unreclaimable? no [ 1384.277078][ T5087] Bluetooth: hci2: unexpected event for opcode 0x042c [ 1384.294856][T17810] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1384.345734][T17821] loop1: detected capacity change from 0 to 512 [ 1384.366174][T17821] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1384.400838][T17810] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1384.519643][T17810] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1384.540721][T17821] EXT4-fs (loop1): 1 truncate cleaned up [ 1384.547320][T17810] Node 0 DMA32 free:1200772kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:187696kB inactive_anon:0kB active_file:73992kB inactive_file:160876kB unevictable:1536kB writepending:264kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:40472kB local_pcp:20128kB free_cma:0kB [ 1384.547897][T17821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1384.726845][T17810] lowmem_reserve[]: 0 0 0 0 0 [ 1384.780711][T17810] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1384.890218][T17806] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1384.890714][T17810] lowmem_reserve[]: 0 0 0 0 0 [ 1384.913233][T17810] Node 1 Normal free:3898292kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19072kB local_pcp:10784kB free_cma:0kB [ 1384.952831][T17810] lowmem_reserve[]: 0 0 0 0 0 [ 1384.957708][T17810] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1384.972630][T17810] Node 0 DMA32: 1611*4kB (UME) 1133*8kB (UME) 746*16kB (UME) 637*32kB (UME) 257*64kB (UME) 155*128kB (UME) 117*256kB (UME) 56*512kB (UM) 31*1024kB (UM) 9*2048kB (UM) 246*4096kB (UM) = 1200532kB [ 1385.013725][T13771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1385.023617][T17810] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1385.036391][T17810] Node 1 Normal: 179*4kB (UE) 41*8kB (UE) 30*16kB (UME) 70*32kB (UME) 24*64kB (UME) 8*128kB (UME) 3*256kB (UME) 0*512kB 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3898292kB [ 1385.066078][T17810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1385.150866][T17810] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1385.186262][T17833] syz_tun: entered allmulticast mode [ 1385.203322][T17810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1385.224339][T17810] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1385.247924][T17810] 102111 total pagecache pages [ 1385.252721][T17810] 0 pages in swap cache [ 1385.262416][T17810] Free swap = 124656kB [ 1385.272531][T17810] Total swap = 124996kB [ 1385.282644][T17810] 2097051 pages RAM [ 1385.289765][T17810] 0 pages HighMem/MovableOnly [ 1385.303886][T17810] 416953 pages reserved [ 1385.313134][T17810] 0 pages cma reserved [ 1385.990244][T17848] bridge22: entered promiscuous mode [ 1385.996019][T17848] bridge22: entered allmulticast mode [ 1386.017832][T17848] team0: Port device bridge22 added [ 1387.327145][T17857] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3255'. [ 1387.356525][T17840] loop6: detected capacity change from 0 to 32768 [ 1387.443441][T17840] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1387.510498][T17840] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1387.648511][T17840] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 3ms [ 1387.683366][ T5815] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1387.694625][ T5815] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1387.768057][ T5815] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 73ms [ 1387.776849][ T5815] gfs2: fsid=syz:syz.0: jid=0: Done [ 1387.782510][T17840] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1388.526825][T17871] syz_tun: entered allmulticast mode [ 1392.019454][T17893] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1393.231164][T17900] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3268'. [ 1393.547912][T17901] bridge8: entered promiscuous mode [ 1393.553280][T17901] bridge8: entered allmulticast mode [ 1393.567738][T17901] team0: Port device bridge8 added [ 1395.184527][ T5087] Bluetooth: hci3: unexpected event for opcode 0x042c [ 1396.374808][T17918] loop1: detected capacity change from 0 to 1024 [ 1396.410245][T17918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1397.315061][ T27] audit: type=1800 audit(1784093102.119:2287): pid=17918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3273" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 1397.479543][T17934] loop5: detected capacity change from 0 to 512 [ 1397.738123][T17938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3278'. [ 1397.893586][T17934] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1397.930578][T17939] bridge9: entered promiscuous mode [ 1397.936019][T17939] bridge9: entered allmulticast mode [ 1397.948642][T17939] team0: Port device bridge9 added [ 1398.180400][T13771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1398.211693][T17934] EXT4-fs (loop5): 1 truncate cleaned up [ 1398.304847][T17934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1398.766613][T16060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1400.457609][T17965] loop0: detected capacity change from 0 to 4096 [ 1400.469817][T17965] EXT4-fs: inline encryption not supported [ 1400.484516][T17965] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1400.501425][T17965] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 1400.549146][T17965] System zones: 0-5 [ 1400.576567][T17965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1400.872240][T17969] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3289'. [ 1401.275449][T17973] bridge10: entered promiscuous mode [ 1401.280881][T17973] bridge10: entered allmulticast mode [ 1401.294307][T17973] team0: Port device bridge10 added [ 1402.507935][T17978] loop1: detected capacity change from 0 to 512 [ 1402.532391][T17978] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1402.587648][T17978] EXT4-fs (loop1): 1 truncate cleaned up [ 1402.616186][T17978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1402.781680][T13771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1404.547785][T14320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1406.289261][T16158] Bluetooth: hci4: Frame reassembly failed (-84) [ 1406.557601][T18013] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1407.944414][ T5087] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1410.630118][T18056] loop6: detected capacity change from 0 to 16 [ 1411.151670][T18059] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1411.900266][T18056] erofs: (device loop6): mounted with root inode @ nid 36. [ 1412.708514][T18068] bridge11: entered promiscuous mode [ 1412.713912][T18068] bridge11: entered allmulticast mode [ 1412.728274][T18068] team0: Port device bridge11 added [ 1415.579103][T18098] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1417.902903][T18130] bridge7: entered promiscuous mode [ 1417.908420][T18130] bridge7: entered allmulticast mode [ 1417.921619][T18130] team0: Port device bridge7 added [ 1419.331563][T18139] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1420.184412][T10786] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1420.427085][T10786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.447386][T10786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1420.479530][T10786] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1420.513976][T10786] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1420.561569][T10786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.655919][T10786] usb 2-1: config 0 descriptor?? [ 1420.918019][T10786] ath6kl: Failed to submit usb control message: -71 [ 1420.928035][T10786] ath6kl: unable to send the bmi data to the device: -71 [ 1420.935582][T10786] ath6kl: Unable to send get target info: -71 [ 1420.945522][T10786] ath6kl: Failed to init ath6kl core: -71 [ 1420.957006][T10786] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 1421.013453][T10786] usb 2-1: USB disconnect, device number 24 [ 1421.258072][T18162] bridge19: entered promiscuous mode [ 1421.263505][T18162] bridge19: entered allmulticast mode [ 1421.282171][T18162] team0: Port device bridge19 added [ 1423.588914][T18175] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1424.282781][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.289273][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.136204][T18195] bridge23: entered promiscuous mode [ 1425.141663][T18195] bridge23: entered allmulticast mode [ 1425.156166][T18195] team0: Port device bridge23 added [ 1426.234115][T18203] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3353'. [ 1426.319388][T18186] loop5: detected capacity change from 0 to 32768 [ 1426.688760][T18206] loop1: detected capacity change from 0 to 256 [ 1426.709169][T18206] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1426.757865][T18206] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1426.786066][T18206] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1426.793744][T18206] UDF-fs: Scanning with blocksize 512 failed [ 1426.861746][T18206] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1426.896825][T18206] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1428.223929][T18222] bridge20: entered promiscuous mode [ 1428.229535][T18222] bridge20: entered allmulticast mode [ 1428.254759][T18222] team0: Port device bridge20 added [ 1429.620624][T18229] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1430.474547][T18234] loop0: detected capacity change from 0 to 1024 [ 1430.496724][T18234] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=1 [ 1430.506261][T18234] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 1430.521216][T18234] EXT4-fs (loop0): mount failed [ 1431.138246][T18238] loop0: detected capacity change from 0 to 4096 [ 1431.351889][T18241] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1432.922070][T18248] loop6: detected capacity change from 0 to 512 [ 1432.993226][T18248] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1433.041851][T18248] EXT4-fs (loop6): 1 truncate cleaned up [ 1433.048965][T18248] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1434.080212][T18269] bridge21: entered promiscuous mode [ 1434.085858][T18269] bridge21: entered allmulticast mode [ 1434.099218][T18269] team0: Port device bridge21 added [ 1436.291200][T18284] loop5: detected capacity change from 0 to 256 [ 1436.752022][T15807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1436.942731][T18282] loop0: detected capacity change from 0 to 32768 [ 1437.485860][T18299] bridge12: entered promiscuous mode [ 1437.491290][T18299] bridge12: entered allmulticast mode [ 1437.512846][T18299] team0: Port device bridge12 added [ 1438.409000][T18286] loop5: detected capacity change from 0 to 40427 [ 1438.488073][T18286] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 1438.551587][T18286] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1438.608143][T18286] F2FS-fs (loop5): build fault injection attr: rate: 64, type: 0x7ffff [ 1438.626349][T18286] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x5 [ 1438.695447][T18286] F2FS-fs (loop5): invalid crc value [ 1438.745372][T18286] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1439.645823][T18286] F2FS-fs (loop5): Start checkpoint disabled! [ 1439.703069][T18306] loop6: detected capacity change from 0 to 32768 [ 1439.805976][T18306] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.3388 (18306) [ 1439.984569][T18306] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1440.003536][T18306] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 1440.056585][T18306] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1440.104517][T18306] BTRFS info (device loop6): use zstd compression, level 3 [ 1440.111800][T18306] BTRFS info (device loop6): using free space tree [ 1440.304191][T18306] BTRFS info (device loop6): enabling ssd optimizations [ 1440.311474][T18306] BTRFS info (device loop6): auto enabling async discard [ 1440.626659][ T27] audit: type=1800 audit(1784093145.439:2288): pid=18306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3388" name="bus" dev="loop6" ino=263 res=0 errno=0 [ 1440.716273][ T27] audit: type=1800 audit(1784093145.479:2289): pid=18337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3388" name="bus" dev="loop6" ino=263 res=0 errno=0 [ 1441.256395][T18336] loop0: detected capacity change from 0 to 32768 [ 1441.269358][T15807] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1442.205740][T18353] bridge13: entered promiscuous mode [ 1442.211298][T18353] bridge13: entered allmulticast mode [ 1442.224882][T18353] team0: Port device bridge13 added [ 1442.845754][ T5087] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1442.851164][T13773] Bluetooth: hci4: command 0x1003 tx timeout [ 1443.434391][T10786] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1445.562075][T10786] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 1445.584351][T10786] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.595078][T10786] usb 6-1: config 0 has no interface number 0 [ 1445.601561][T10786] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1445.634399][T10786] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1445.647274][T10786] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1445.675897][T10786] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1445.689578][T10786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.182606][T18376] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1446.888116][T10786] usb 6-1: Product: syz [ 1446.892329][T10786] usb 6-1: Manufacturer: syz [ 1446.897029][T10786] usb 6-1: SerialNumber: syz [ 1446.906769][T10786] usb 6-1: config 0 descriptor?? [ 1447.020397][T10786] usb 6-1: can't set config #0, error -71 [ 1447.029068][T10786] usb 6-1: USB disconnect, device number 21 [ 1447.308662][T18381] loop0: detected capacity change from 0 to 32768 [ 1447.318633][T18381] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.3403 (18381) [ 1447.346317][T18381] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1447.356538][T18381] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1447.365180][T18381] BTRFS info (device loop0): use zlib compression, level 3 [ 1447.372469][T18381] BTRFS info (device loop0): turning on sync discard [ 1447.379177][T18381] BTRFS info (device loop0): using free space tree [ 1447.544855][T18381] BTRFS info (device loop0): enabling ssd optimizations [ 1447.996435][ T27] audit: type=1800 audit(1784093152.779:2290): pid=18406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3403" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 1448.917101][T14320] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1449.433928][T18418] bridge22: entered promiscuous mode [ 1449.505352][T18418] bridge22: entered allmulticast mode [ 1449.552579][T18418] team0: Port device bridge22 added [ 1450.781365][T18429] bridge23: entered allmulticast mode [ 1451.605146][T18435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3414'. [ 1451.829354][T18436] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3414'. [ 1451.886207][T18436] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3414'. [ 1453.263365][T18447] loop0: detected capacity change from 0 to 512 [ 1453.280243][T18447] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1453.332161][T18447] EXT4-fs (loop0): 1 truncate cleaned up [ 1453.345601][T18447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1453.573028][T18452] bridge14: entered promiscuous mode [ 1453.578799][T18452] bridge14: entered allmulticast mode [ 1453.603819][T18452] team0: Port device bridge14 added [ 1454.415013][T18459] loop5: detected capacity change from 0 to 64 [ 1455.029611][T18467] loop5: detected capacity change from 0 to 256 [ 1455.088119][T18467] FAT-fs (loop5): Unrecognized mount option "codepa×=864" or missing value [ 1455.293296][T14320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1455.304578][T18357] Bluetooth: hci3: command 0x0419 tx timeout [ 1457.008138][T18463] loop6: detected capacity change from 0 to 32768 [ 1457.245394][T18463] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1457.423216][T18463] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1457.493759][T18463] XFS (loop6): Starting recovery (logdev: internal) [ 1457.650914][T18493] bridge24: entered promiscuous mode [ 1457.656448][T18493] bridge24: entered allmulticast mode [ 1457.683565][T18493] team0: Port device bridge24 added [ 1457.796874][T18463] XFS (loop6): Ending recovery (logdev: internal) [ 1458.552204][T15807] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1459.154330][ T172] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1459.354313][ T172] usb 1-1: Using ep0 maxpacket: 32 [ 1459.386029][ T172] usb 1-1: config 0 has an invalid interface number: 61 but max is 1 [ 1459.394161][ T172] usb 1-1: config 0 has an invalid interface number: 98 but max is 1 [ 1459.464258][ T172] usb 1-1: config 0 has no interface number 0 [ 1459.470431][ T172] usb 1-1: config 0 has no interface number 1 [ 1459.516124][ T172] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1459.534264][ T172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.542296][ T172] usb 1-1: Product: syz [ 1459.584353][ T172] usb 1-1: Manufacturer: syz [ 1459.604299][ T172] usb 1-1: SerialNumber: syz [ 1459.625207][ T172] usb 1-1: config 0 descriptor?? [ 1459.745119][ T172] viperboard 1-1:0.61: version 0.00 found at bus 001 address 029 [ 1459.839862][ T172] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 1459.871235][ T172] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 1459.985807][ T172] viperboard 1-1:0.98: version 0.00 found at bus 001 address 029 [ 1460.036588][ T172] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 1460.061308][T18496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.075550][ T172] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5 [ 1460.137954][T18496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.428392][T18496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.480957][T18498] loop6: detected capacity change from 0 to 32768 [ 1460.507771][T18496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.525708][T18498] (syz.6.3430,18498,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1460.583862][T18498] (syz.6.3430,18498,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1460.614712][T18498] Sensor A: ================= START STATUS ================= [ 1460.629232][T18498] Sensor A: Test Pattern: 75% Colorbar [ 1460.658518][T18498] Sensor A: Show Information: All [ 1460.673851][T18498] Sensor A: Vertical Flip: false [ 1460.704895][T18498] Sensor A: Horizontal Flip: false [ 1460.710116][T18498] Sensor A: Brightness: 128 [ 1460.745073][T18498] Sensor A: Contrast: 128 [ 1460.774736][T18498] Sensor A: Hue: 0 [ 1460.778669][T18498] Sensor A: Saturation: 128 [ 1460.783212][T18498] Sensor A: ================== END STATUS ================== [ 1460.823299][T18496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.844784][T18496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.922203][T16770] usb 1-1: USB disconnect, device number 29 [ 1461.815887][T18523] binder: 18522:18523 ioctl c0306201 200000000080 returned -14 [ 1461.905439][T18523] binder: 18522:18523 ioctl c0306201 2000000003c0 returned -14 [ 1462.372193][T18527] bridge24: entered promiscuous mode [ 1462.377787][T18527] bridge24: entered allmulticast mode [ 1462.384487][T18527] team0: Port device bridge24 added [ 1462.897991][T18535] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1463.611924][T18532] syz.0.3438: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1463.636323][T18532] CPU: 1 PID: 18532 Comm: syz.0.3438 Not tainted syzkaller #0 [ 1463.643839][T18532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1463.653908][T18532] Call Trace: [ 1463.657179][T18532] [ 1463.660100][T18532] dump_stack_lvl+0x18c/0x250 [ 1463.664778][T18532] ? show_regs_print_info+0x20/0x20 [ 1463.670056][T18532] ? load_image+0x420/0x420 [ 1463.674552][T18532] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1463.680953][T18532] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1463.687441][T18532] warn_alloc+0x246/0x340 [ 1463.691759][T18532] ? stack_trace_save+0xaa/0x100 [ 1463.696737][T18532] ? zone_watermark_ok_safe+0x230/0x230 [ 1463.702333][T18532] ? kasan_set_track+0x5f/0x70 [ 1463.707123][T18532] ? kasan_set_track+0x4e/0x70 [ 1463.711916][T18532] ? __kasan_kmalloc+0x8f/0xa0 [ 1463.716712][T18532] ? xsk_init_queue+0xad/0x100 [ 1463.721503][T18532] ? xsk_setsockopt+0x413/0x750 [ 1463.726380][T18532] ? do_sock_setsockopt+0x175/0x1a0 [ 1463.731588][T18532] ? __x64_sys_setsockopt+0x182/0x200 [ 1463.736969][T18532] __vmalloc_node_range+0x129/0x1320 [ 1463.742335][T18532] ? free_vm_area+0x50/0x50 [ 1463.746856][T18532] vmalloc_user+0x74/0x80 [ 1463.751227][T18532] ? xskq_create+0xbf/0x170 [ 1463.755734][T18532] xskq_create+0xbf/0x170 [ 1463.760066][T18532] xsk_init_queue+0xad/0x100 [ 1463.764660][T18532] xsk_setsockopt+0x413/0x750 [ 1463.769340][T18532] ? xsk_poll+0x670/0x670 [ 1463.773670][T18532] ? __fget_files+0x28/0x460 [ 1463.778268][T18532] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1463.783812][T18532] ? security_socket_setsockopt+0x7e/0xa0 [ 1463.789544][T18532] ? xsk_poll+0x670/0x670 [ 1463.793878][T18532] do_sock_setsockopt+0x175/0x1a0 [ 1463.798911][T18532] ? __fdget+0x180/0x210 [ 1463.803154][T18532] __x64_sys_setsockopt+0x182/0x200 [ 1463.808358][T18532] do_syscall_64+0x55/0xb0 [ 1463.812775][T18532] ? clear_bhb_loop+0x40/0x90 [ 1463.817446][T18532] ? clear_bhb_loop+0x40/0x90 [ 1463.822123][T18532] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1463.828027][T18532] RIP: 0033:0x7ff9a6d9de59 [ 1463.832439][T18532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.852058][T18532] RSP: 002b:00007ff9a7c87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1463.860487][T18532] RAX: ffffffffffffffda RBX: 00007ff9a7026090 RCX: 00007ff9a6d9de59 [ 1463.868471][T18532] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1463.876471][T18532] RBP: 00007ff9a6e33e6f R08: 0000000000000004 R09: 0000000000000000 [ 1463.884448][T18532] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1463.892416][T18532] R13: 00007ff9a7026128 R14: 00007ff9a7026090 R15: 00007ffd04ad4628 [ 1463.900400][T18532] [ 1463.903551][ C1] vkms_vblank_simulate: vblank timer overrun [ 1463.944337][T18532] Mem-Info: [ 1463.947502][T18532] active_anon:71336 inactive_anon:0 isolated_anon:0 [ 1463.947502][T18532] active_file:18509 inactive_file:40510 isolated_file:0 [ 1463.947502][T18532] unevictable:768 dirty:90 writeback:0 [ 1463.947502][T18532] slab_reclaimable:11777 slab_unreclaimable:112110 [ 1463.947502][T18532] mapped:27784 shmem:65868 pagetables:716 [ 1463.947502][T18532] sec_pagetables:0 bounce:0 [ 1463.947502][T18532] kernel_misc_reclaimable:0 [ 1463.947502][T18532] free:1260919 free_pcp:6264 free_cma:0 [ 1463.992822][ C1] vkms_vblank_simulate: vblank timer overrun [ 1464.040255][T18532] Node 0 active_anon:281644kB inactive_anon:0kB active_file:73992kB inactive_file:161840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111092kB dirty:360kB writeback:0kB shmem:258336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12652kB pagetables:2864kB sec_pagetables:0kB all_unreclaimable? no [ 1464.081721][T18532] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1464.122976][T18532] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1464.156581][T18532] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1464.164795][T18532] Node 0 DMA32 free:1130020kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:278504kB inactive_anon:0kB active_file:73992kB inactive_file:161012kB unevictable:1536kB writepending:360kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:12832kB local_pcp:3876kB free_cma:0kB [ 1464.200368][T18532] lowmem_reserve[]: 0 0 0 0 0 [ 1464.205515][T18532] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1464.285567][T18532] lowmem_reserve[]: 0 0 0 0 0 [ 1464.290351][T18532] Node 1 Normal free:3898292kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19072kB local_pcp:10784kB free_cma:0kB [ 1464.413448][T18532] lowmem_reserve[]: 0 0 0 0 0 [ 1464.424523][T18532] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1464.474561][T18532] Node 0 DMA32: 63*4kB (UE) 498*8kB (UE) 127*16kB (UE) 86*32kB (UE) 34*64kB (UE) 19*128kB (UE) 43*256kB (UME) 32*512kB (UM) 44*1024kB (UM) 15*2048kB (UM) 247*4096kB (UM) = 1128508kB [ 1464.535567][T18532] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1464.544502][T18539] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1464.564596][T18532] Node 1 Normal: 179*4kB (UE) 41*8kB (UE) 30*16kB (UME) 70*32kB (UME) 24*64kB (UME) 8*128kB (UME) 3*256kB (UME) 0*512kB 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3898292kB [ 1464.634249][T18532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1464.654347][T18532] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1464.672876][T18532] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1464.702847][T18532] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1464.723062][T18532] 117804 total pagecache pages [ 1464.730340][T18532] 0 pages in swap cache [ 1464.744271][T18532] Free swap = 124644kB [ 1464.748536][T18532] Total swap = 124996kB [ 1464.752700][T18532] 2097051 pages RAM [ 1464.764864][T18532] 0 pages HighMem/MovableOnly [ 1464.774524][T18532] 416953 pages reserved [ 1464.778703][T18532] 0 pages cma reserved [ 1465.416449][ T5815] kernel write not supported for file /input/mice (pid: 5815 comm: kworker/1:5) [ 1467.308558][T18572] bridge25: entered promiscuous mode [ 1467.313916][T18572] bridge25: entered allmulticast mode [ 1467.321347][T18572] team0: Port device bridge25 added [ 1467.464696][T18563] loop6: detected capacity change from 0 to 32768 [ 1468.102461][T18574] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1468.666809][T18593] loop6: detected capacity change from 0 to 256 [ 1470.541193][T18603] bridge25: entered promiscuous mode [ 1470.547452][T18603] bridge25: entered allmulticast mode [ 1470.571038][T18603] team0: Port device bridge25 added [ 1471.352636][T18612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3462'. [ 1471.361707][T18612] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3462'. [ 1472.072067][T18628] loop5: detected capacity change from 0 to 8 [ 1472.790983][T18628] unable to read fragment index table [ 1474.334885][T18357] Bluetooth: hci3: unexpected event for opcode 0x042c [ 1475.190834][T18646] gretap1: entered promiscuous mode [ 1475.223244][T18648] loop5: detected capacity change from 0 to 1024 [ 1475.246175][T18646] batman_adv: batadv0: Adding interface: gretap1 [ 1475.252574][T18646] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 1475.292712][T18648] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1475.430886][T18646] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1475.475859][T18648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1476.504510][T18655] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1476.934667][T16060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1477.196273][T18669] loop0: detected capacity change from 0 to 64 [ 1477.382132][T18669] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 1478.614438][T18357] Bluetooth: hci2: unexpected event for opcode 0x042c [ 1479.728287][T18699] loop0: detected capacity change from 0 to 8 [ 1483.684627][T18357] Bluetooth: hci2: unexpected event for opcode 0x042c [ 1484.670834][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.677379][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.182180][T18747] loop5: detected capacity change from 0 to 128 [ 1491.210287][T18747] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 1491.254839][T18741] udevd[18741]: incorrect ext4 checksum on /dev/loop5 [ 1491.255039][T18749] fuse: Bad value for 'fd' [ 1494.360299][T18774] loop6: detected capacity change from 0 to 32768 [ 1494.680458][T18780] tipc: Started in network mode [ 1494.712934][T18780] tipc: Node identity b6f6b7881ebe, cluster identity 4711 [ 1494.757034][T18780] tipc: Enabled bearer , priority 0 [ 1494.955265][T18783] syzkaller0: entered promiscuous mode [ 1494.980310][T18783] syzkaller0: entered allmulticast mode [ 1495.035013][T18783] tipc: Resetting bearer [ 1495.113140][T18779] tipc: Resetting bearer [ 1495.125749][T18792] warn_alloc: 1 callbacks suppressed [ 1495.125764][T18792] syz.1.3514: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1495.149734][T18792] CPU: 1 PID: 18792 Comm: syz.1.3514 Not tainted syzkaller #0 [ 1495.157232][T18792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1495.167315][T18792] Call Trace: [ 1495.170622][T18792] [ 1495.173567][T18792] dump_stack_lvl+0x18c/0x250 [ 1495.178280][T18792] ? show_regs_print_info+0x20/0x20 [ 1495.183511][T18792] ? load_image+0x420/0x420 [ 1495.188048][T18792] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1495.194495][T18792] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1495.201029][T18792] warn_alloc+0x246/0x340 [ 1495.205393][T18792] ? stack_trace_save+0xaa/0x100 [ 1495.210369][T18792] ? zone_watermark_ok_safe+0x230/0x230 [ 1495.215938][T18792] ? kasan_set_track+0x5f/0x70 [ 1495.220697][T18792] ? kasan_set_track+0x4e/0x70 [ 1495.225458][T18792] ? __kasan_kmalloc+0x8f/0xa0 [ 1495.230222][T18792] ? xsk_init_queue+0xad/0x100 [ 1495.234996][T18792] ? xsk_setsockopt+0x413/0x750 [ 1495.239843][T18792] ? do_sock_setsockopt+0x175/0x1a0 [ 1495.245041][T18792] ? __x64_sys_setsockopt+0x182/0x200 [ 1495.250419][T18792] __vmalloc_node_range+0x129/0x1320 [ 1495.255727][T18792] ? free_vm_area+0x50/0x50 [ 1495.260244][T18792] vmalloc_user+0x74/0x80 [ 1495.264579][T18792] ? xskq_create+0xbf/0x170 [ 1495.269081][T18792] xskq_create+0xbf/0x170 [ 1495.273411][T18792] xsk_init_queue+0xad/0x100 [ 1495.278006][T18792] xsk_setsockopt+0x413/0x750 [ 1495.282682][T18792] ? xsk_poll+0x670/0x670 [ 1495.287029][T18792] ? __fget_files+0x28/0x460 [ 1495.291636][T18792] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1495.297188][T18792] ? security_socket_setsockopt+0x7e/0xa0 [ 1495.302914][T18792] ? xsk_poll+0x670/0x670 [ 1495.307262][T18792] do_sock_setsockopt+0x175/0x1a0 [ 1495.312300][T18792] ? __fdget+0x180/0x210 [ 1495.316552][T18792] __x64_sys_setsockopt+0x182/0x200 [ 1495.321762][T18792] do_syscall_64+0x55/0xb0 [ 1495.326187][T18792] ? clear_bhb_loop+0x40/0x90 [ 1495.330862][T18792] ? clear_bhb_loop+0x40/0x90 [ 1495.335542][T18792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1495.341445][T18792] RIP: 0033:0x7fc6ca99de59 [ 1495.345861][T18792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1495.365476][T18792] RSP: 002b:00007fc6cb8bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1495.373895][T18792] RAX: ffffffffffffffda RBX: 00007fc6cac25fa0 RCX: 00007fc6ca99de59 [ 1495.381867][T18792] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1495.389838][T18792] RBP: 00007fc6caa33e6f R08: 0000000000000004 R09: 0000000000000000 [ 1495.397801][T18792] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1495.405765][T18792] R13: 00007fc6cac26038 R14: 00007fc6cac25fa0 R15: 00007ffec94a1d78 [ 1495.413780][T18792] [ 1495.445475][T18792] Mem-Info: [ 1495.458786][T18792] active_anon:47982 inactive_anon:0 isolated_anon:0 [ 1495.458786][T18792] active_file:18509 inactive_file:40520 isolated_file:0 [ 1495.458786][T18792] unevictable:768 dirty:154 writeback:0 [ 1495.458786][T18792] slab_reclaimable:11770 slab_unreclaimable:114677 [ 1495.458786][T18792] mapped:26085 shmem:42730 pagetables:686 [ 1495.458786][T18792] sec_pagetables:0 bounce:0 [ 1495.458786][T18792] kernel_misc_reclaimable:0 [ 1495.458786][T18792] free:1280476 free_pcp:7091 free_cma:0 [ 1495.591085][T18792] Node 0 active_anon:193928kB inactive_anon:0kB active_file:73992kB inactive_file:161880kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106196kB dirty:616kB writeback:0kB shmem:171184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12668kB pagetables:2744kB sec_pagetables:0kB all_unreclaimable? no [ 1495.736354][T18792] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1495.893343][T18792] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1496.111511][T18792] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1496.117608][T18792] Node 0 DMA32 free:1204740kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:196780kB inactive_anon:0kB active_file:73992kB inactive_file:161052kB unevictable:1536kB writepending:616kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:6752kB local_pcp:6208kB free_cma:0kB [ 1496.148637][T18792] lowmem_reserve[]: 0 0 0 0 0 [ 1496.153555][T18792] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1496.181739][T18792] lowmem_reserve[]: 0 0 0 0 0 [ 1496.192207][T18792] Node 1 Normal free:3898292kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19072kB local_pcp:10784kB free_cma:0kB [ 1496.222400][T18792] lowmem_reserve[]: 0 0 0 0 0 [ 1496.227292][T18792] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1496.240235][T18792] Node 0 DMA32: 771*4kB (UME) 1069*8kB (UME) 511*16kB (UME) 245*32kB (UME) 90*64kB (UME) 83*128kB (UME) 114*256kB (UME) 76*512kB (UM) 49*1024kB (UM) 15*2048kB (UM) 247*4096kB (UM) = 1204740kB [ 1496.281384][T18792] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1496.300215][T18792] Node 1 Normal: 179*4kB (UE) 41*8kB (UE) 30*16kB (UME) 70*32kB (UME) 24*64kB (UME) 8*128kB (UME) 3*256kB (UME) 0*512kB 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3898292kB [ 1496.354347][T18792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1496.364004][T18792] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1496.386577][T18792] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1496.408330][T18792] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1496.429169][T18792] 102951 total pagecache pages [ 1496.433973][T18792] 0 pages in swap cache [ 1496.438664][T18792] Free swap = 124644kB [ 1496.442836][T18792] Total swap = 124996kB [ 1496.457823][T18792] 2097051 pages RAM [ 1496.461663][T18792] 0 pages HighMem/MovableOnly [ 1496.477267][T18792] 416953 pages reserved [ 1496.481494][T18792] 0 pages cma reserved [ 1498.927906][T18779] tipc: Disabling bearer [ 1498.940144][ T5812] tipc: Node number set to 2823337864 [ 1499.446237][T18832] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3521'. [ 1499.711264][T18825] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1500.138173][T18839] loop0: detected capacity change from 0 to 512 [ 1500.162861][T18839] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1500.209689][T18839] EXT4-fs (loop0): 1 truncate cleaned up [ 1500.225483][T18839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1500.306775][T18846] loop5: detected capacity change from 0 to 512 [ 1500.330737][T18846] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1500.396199][T18839] loop0: detected capacity change from 512 to 0 [ 1500.430235][T18846] EXT4-fs (loop5): 1 truncate cleaned up [ 1500.437073][T18849] syz.0.3528: attempt to access beyond end of device [ 1500.437073][T18849] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 1500.466878][T18846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1500.484583][T18849] syz.0.3528: attempt to access beyond end of device [ 1500.484583][T18849] loop0: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 1500.498354][T18849] syz.0.3528: attempt to access beyond end of device [ 1500.498354][T18849] loop0: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 1500.512151][T18849] syz.0.3528: attempt to access beyond end of device [ 1500.512151][T18849] loop0: rw=12288, sector=18, nr_sectors = 2 limit=0 [ 1500.531049][T18849] EXT4-fs error (device loop0): ext4_get_inode_loc:4634: inode #18: block 9: comm syz.0.3528: unable to read itable block [ 1500.541718][ C0] I/O error, dev loop0, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1500.546389][T18849] syz.0.3528: attempt to access beyond end of device [ 1500.546389][T18849] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 1500.581575][T18849] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1500.678297][T18849] EXT4-fs (loop0): I/O error while writing superblock [ 1500.709460][T18849] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: IO failure [ 1500.749707][T18849] syz.0.3528: attempt to access beyond end of device [ 1500.749707][T18849] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 1500.811091][T18849] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1500.866080][T18849] EXT4-fs (loop0): I/O error while writing superblock [ 1500.884312][T18849] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #18: comm syz.0.3528: mark_inode_dirty error [ 1501.379904][T18849] syz.0.3528: attempt to access beyond end of device [ 1501.379904][T18849] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 1501.445295][T18849] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1501.453604][T18849] EXT4-fs (loop0): I/O error while writing superblock [ 1501.517564][T18849] syz.0.3528: attempt to access beyond end of device [ 1501.517564][T18849] loop0: rw=12288, sector=70, nr_sectors = 2 limit=0 [ 1501.660397][T16060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1501.771930][T14320] syz-executor: attempt to access beyond end of device [ 1501.771930][T14320] loop0: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 1501.834721][T14320] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 1501.896802][T14320] syz-executor: attempt to access beyond end of device [ 1501.896802][T14320] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 1501.940643][T14320] EXT4-fs error (device loop0): ext4_get_inode_loc:4634: inode #2: block 5: comm syz-executor: unable to read itable block [ 1501.984575][T14320] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1502.003070][T14320] EXT4-fs (loop0): I/O error while writing superblock [ 1502.016267][T14320] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: IO failure [ 1502.044598][T14320] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1502.063219][T14320] EXT4-fs (loop0): I/O error while writing superblock [ 1502.073369][T14320] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #2: comm syz-executor: mark_inode_dirty error [ 1502.095407][T14320] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1502.125049][T14320] EXT4-fs (loop0): I/O error while writing superblock [ 1502.216714][T16131] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4619: inode #18: block 9: comm kworker/u4:1: unable to read itable block [ 1502.271899][T16131] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1502.304982][T16131] EXT4-fs (loop0): I/O error while writing superblock [ 1502.311950][T16131] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4619: inode #2: block 5: comm kworker/u4:1: unable to read itable block [ 1502.354598][T16131] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1502.374777][T16131] EXT4-fs (loop0): I/O error while writing superblock [ 1502.436708][T14320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1502.463471][T14320] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1502.800765][T16131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.054614][T16131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.344944][T16131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.665142][T18884] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1503.992417][T16131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.191650][T18868] loop5: detected capacity change from 0 to 40427 [ 1504.255429][T18868] F2FS-fs (loop5): invalid crc value [ 1504.297602][T18868] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1504.566756][T18868] F2FS-fs (loop5): Start checkpoint disabled! [ 1504.661639][T18868] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1505.024372][T18904] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1506.780978][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1507.013303][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1507.041784][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1507.058414][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1507.079163][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1507.088811][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1508.409028][T16131] batman_adv: batadv0: Removing interface: gretap1 [ 1509.160066][T18967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3559'. [ 1509.224405][ T5087] Bluetooth: hci1: command tx timeout [ 1510.384482][T16131] hsr_slave_0: left promiscuous mode [ 1510.443319][T16131] hsr_slave_1: left promiscuous mode [ 1510.481118][T16131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1510.493438][T16131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1510.511220][T16131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1510.519819][T16131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1510.532419][T16131] bridge_slave_1: left allmulticast mode [ 1510.541283][T18989] loop5: detected capacity change from 0 to 736 [ 1510.548268][T16131] bridge_slave_1: left promiscuous mode [ 1510.566563][T16131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.592202][T16131] bridge_slave_0: left allmulticast mode [ 1510.611479][T16131] bridge_slave_0: left promiscuous mode [ 1510.633211][T16131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.720465][T16131] veth1_macvtap: left promiscuous mode [ 1510.740059][T16131] veth0_macvtap: left promiscuous mode [ 1510.767068][T16131] veth1_vlan: left promiscuous mode [ 1510.767183][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3565'. [ 1510.787813][T16131] veth0_vlan: left promiscuous mode [ 1510.819464][T18992] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3565'. [ 1511.116289][T16131] team0 (unregistering): Port device bridge25 removed [ 1511.182994][T16131] team0 (unregistering): Port device bridge24 removed [ 1511.304362][ T5087] Bluetooth: hci1: command tx timeout [ 1511.313705][T16131] team0 (unregistering): Port device bridge22 removed [ 1511.388544][T16131] team0 (unregistering): Port device bridge21 removed [ 1511.445501][T16131] team0 (unregistering): Port device bridge20 removed [ 1511.501208][T16131] team0 (unregistering): Port device bridge19 removed [ 1511.566004][T16131] team0 (unregistering): Port device bridge18 removed [ 1511.611772][T16131] team0 (unregistering): Port device bridge17 removed [ 1511.655976][T16131] team0 (unregistering): Port device bridge16 removed [ 1511.698594][T16131] team0 (unregistering): Port device bridge15 removed [ 1511.749702][T16131] team0 (unregistering): Port device bridge14 removed [ 1511.806338][T16131] team0 (unregistering): Port device bridge13 removed [ 1511.866900][T16131] team0 (unregistering): Port device bridge12 removed [ 1511.932079][T16131] team0 (unregistering): Port device bridge11 removed [ 1511.968280][T16131] team0 (unregistering): Port device bridge10 removed [ 1512.050018][T16131] team0 (unregistering): Port device bridge9 removed [ 1512.109286][T16131] team0 (unregistering): Port device bridge8 removed [ 1512.168261][T16131] team0 (unregistering): Port device bridge7 removed [ 1512.249210][T16131] team0 (unregistering): Port device bridge6 removed [ 1512.289070][T16131] team0 (unregistering): Port device bridge5 removed [ 1512.349571][T16131] team0 (unregistering): Port device bridge4 removed [ 1512.389954][T16131] team0 (unregistering): Port device bridge3 removed [ 1512.440116][T16131] team0 (unregistering): Port device bridge2 removed [ 1512.478617][T16131] team0 (unregistering): Port device bridge1 removed [ 1513.091079][T16131] team0 (unregistering): Port device team_slave_1 removed [ 1513.143833][T16131] team0 (unregistering): Port device team_slave_0 removed [ 1513.197725][T16131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1513.255916][T16131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1513.393605][ T5087] Bluetooth: hci1: command tx timeout [ 1513.643915][T16131] bond0 (unregistering): Released all slaves [ 1513.882354][T18935] chnl_net:caif_netlink_parms(): no params data found [ 1514.018973][T19009] loop6: detected capacity change from 0 to 1024 [ 1514.162176][T19009] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1514.204911][T19009] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1514.521925][T19029] EXT4-fs error (device loop6): ext4_free_blocks:6694: comm syz.6.3569: Freeing blocks not in datazone - block = 0, count = 16 [ 1515.466783][ T5087] Bluetooth: hci1: command tx timeout [ 1516.664403][T19018] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1516.715269][T18935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.722432][T18935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.761489][T18935] bridge_slave_0: entered allmulticast mode [ 1516.771308][T18935] bridge_slave_0: entered promiscuous mode [ 1516.782996][T18935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.793510][T18935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.802153][T16160] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1516.815570][T18935] bridge_slave_1: entered allmulticast mode [ 1516.822873][T18935] bridge_slave_1: entered promiscuous mode [ 1516.829290][T16160] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1516.829290][T16160] [ 1516.864362][T16160] EXT4-fs (loop6): Total free blocks count 0 [ 1516.888021][T16160] EXT4-fs (loop6): Free/Dirty block details [ 1516.906563][T16160] EXT4-fs (loop6): free_blocks=16 [ 1516.923737][T16160] EXT4-fs (loop6): dirty_blocks=16 [ 1516.949308][T16160] EXT4-fs (loop6): Block reservation details [ 1516.970100][T18935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1516.979859][T16160] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 1516.999995][T15807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1517.023788][T18935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1517.040495][T16131] IPVS: stop unused estimator thread 0... [ 1517.082736][T18935] team0: Port device team_slave_0 added [ 1517.107347][T18935] team0: Port device team_slave_1 added [ 1517.147058][T18935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1517.154135][T18935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1517.164872][ T5812] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1517.224696][T18935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1517.271348][T18935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1517.289155][T18935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1517.379171][T18935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1517.455680][ T5812] usb 6-1: device descriptor read/64, error -71 [ 1517.543327][T18935] hsr_slave_0: entered promiscuous mode [ 1517.698003][T18935] hsr_slave_1: entered promiscuous mode [ 1517.785277][ T5812] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1517.826110][T18935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1517.915938][T18935] Cannot create hsr debugfs directory [ 1518.005587][ T5812] usb 6-1: device descriptor read/64, error -71 [ 1518.227164][ T5812] usb usb6-port1: attempt power cycle [ 1518.731127][T18935] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1518.744423][ T5812] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1518.787593][T18935] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1518.801519][ T5812] usb 6-1: device descriptor read/8, error -71 [ 1518.836160][T18935] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1518.867852][T18935] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1519.012109][T18935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.062993][T18935] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.085915][ T5812] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1519.136186][T10840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.143365][T10840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.172513][ T5812] usb 6-1: device descriptor read/8, error -71 [ 1519.213253][T10840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.220450][T10840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.308250][ T5812] usb usb6-port1: unable to enumerate USB device [ 1520.324946][T19073] overlayfs: failed to clone lowerpath [ 1520.541371][T18935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.228840][ T3517] ------------[ cut here ]------------ [ 1521.235308][ T3517] WARNING: CPU: 1 PID: 3517 at net/wireless/scan.c:1144 cfg80211_scan_done+0x2dc/0x480 [ 1521.245179][ T3517] Modules linked in: [ 1521.249094][ T3517] CPU: 1 PID: 3517 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 1521.256829][ T3517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1521.268094][ T3517] Workqueue: events_unbound cfg80211_wiphy_work [ 1521.274588][ T3517] RIP: 0010:cfg80211_scan_done+0x2dc/0x480 [ 1521.280426][ T3517] Code: 00 00 00 48 3b 44 24 60 75 68 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 40 23 a6 f7 0f 0b e9 ed fd ff ff e8 34 23 a6 f7 <0f> 0b e9 cd fe ff ff e8 28 23 a6 f7 0f 0b e9 28 fe ff ff 44 89 f9 [ 1521.300256][ T3517] RSP: 0018:ffffc9000d1779a0 EFLAGS: 00010293 [ 1521.306697][ T3517] RAX: ffffffff89e0c23c RBX: ffff8880676e0000 RCX: ffff88802e6f3c00 [ 1521.314892][ T3517] RDX: 0000000000000000 RSI: ffffffff8b1cfa00 RDI: ffffffff8b1cf9c0 [ 1521.322893][ T3517] RBP: ffffc9000d177a48 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65 [ 1521.331034][ T3517] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: dffffc0000000000 [ 1521.339122][ T3517] R13: 1ffff1100cedc00d R14: ffff8880676e0068 R15: ffff88802f0c01b8 [ 1521.347160][ T3517] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1521.356185][ T3517] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1521.362791][ T3517] CR2: 000055555927f9f8 CR3: 0000000061f93000 CR4: 00000000003506e0 [ 1521.371787][ T3517] Call Trace: [ 1521.375297][ T3517] [ 1521.378247][ T3517] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1521.383921][ T3517] ? __cfg80211_scan_done+0x40/0x40 [ 1521.389489][ T3517] __ieee80211_scan_completed+0x4d2/0x9c0 [ 1521.395458][ T3517] ieee80211_scan_work+0x2b7/0x1b30 [ 1521.400701][ T3517] ? _raw_spin_unlock_irq+0x23/0x50 [ 1521.405965][ T3517] cfg80211_wiphy_work+0x228/0x260 [ 1521.411101][ T3517] ? process_scheduled_works+0x975/0x1600 [ 1521.416921][ T3517] process_scheduled_works+0xa60/0x1600 [ 1521.422524][ T3517] ? worker_attach_to_pool+0x370/0x370 [ 1521.428082][ T3517] ? assign_work+0x3cc/0x5d0 [ 1521.432701][ T3517] worker_thread+0xa5e/0xfe0 [ 1521.437434][ T3517] kthread+0x2fa/0x390 [ 1521.441526][ T3517] ? pr_cont_work+0x550/0x550 [ 1521.446281][ T3517] ? kthread_blkcg+0xd0/0xd0 [ 1521.450900][ T3517] ret_from_fork+0x48/0x80 [ 1521.455450][ T3517] ? kthread_blkcg+0xd0/0xd0 [ 1521.460064][ T3517] ret_from_fork_asm+0x11/0x20 [ 1521.465944][ T3517] [ 1521.468991][ T3517] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1521.476277][ T3517] CPU: 1 PID: 3517 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 1521.483925][ T3517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1521.493988][ T3517] Workqueue: events_unbound cfg80211_wiphy_work [ 1521.500250][ T3517] Call Trace: [ 1521.503537][ T3517] [ 1521.506477][ T3517] dump_stack_lvl+0x18c/0x250 [ 1521.511186][ T3517] ? show_regs_print_info+0x20/0x20 [ 1521.516407][ T3517] ? load_image+0x420/0x420 [ 1521.520940][ T3517] panic+0x2ca/0x720 [ 1521.524860][ T3517] ? bpf_jit_dump+0xd0/0xd0 [ 1521.529387][ T3517] ? ret_from_fork_asm+0x11/0x20 [ 1521.534344][ T3517] __warn+0x2e0/0x470 [ 1521.538338][ T3517] ? cfg80211_scan_done+0x2dc/0x480 [ 1521.543556][ T3517] ? cfg80211_scan_done+0x2dc/0x480 [ 1521.548768][ T3517] report_bug+0x2be/0x4f0 [ 1521.553110][ T3517] ? cfg80211_scan_done+0x2dc/0x480 [ 1521.558411][ T3517] ? cfg80211_scan_done+0x2dc/0x480 [ 1521.563626][ T3517] ? cfg80211_scan_done+0x2de/0x480 [ 1521.568840][ T3517] handle_bug+0xcf/0x120 [ 1521.573094][ T3517] exc_invalid_op+0x1a/0x50 [ 1521.577614][ T3517] asm_exc_invalid_op+0x1a/0x20 [ 1521.582483][ T3517] RIP: 0010:cfg80211_scan_done+0x2dc/0x480 [ 1521.588310][ T3517] Code: 00 00 00 48 3b 44 24 60 75 68 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 40 23 a6 f7 0f 0b e9 ed fd ff ff e8 34 23 a6 f7 <0f> 0b e9 cd fe ff ff e8 28 23 a6 f7 0f 0b e9 28 fe ff ff 44 89 f9 [ 1521.607933][ T3517] RSP: 0018:ffffc9000d1779a0 EFLAGS: 00010293 [ 1521.614021][ T3517] RAX: ffffffff89e0c23c RBX: ffff8880676e0000 RCX: ffff88802e6f3c00 [ 1521.622000][ T3517] RDX: 0000000000000000 RSI: ffffffff8b1cfa00 RDI: ffffffff8b1cf9c0 [ 1521.629978][ T3517] RBP: ffffc9000d177a48 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65 [ 1521.637965][ T3517] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: dffffc0000000000 [ 1521.645951][ T3517] R13: 1ffff1100cedc00d R14: ffff8880676e0068 R15: ffff88802f0c01b8 [ 1521.653945][ T3517] ? cfg80211_scan_done+0x2dc/0x480 [ 1521.659179][ T3517] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1521.664835][ T3517] ? __cfg80211_scan_done+0x40/0x40 [ 1521.670055][ T3517] __ieee80211_scan_completed+0x4d2/0x9c0 [ 1521.675804][ T3517] ieee80211_scan_work+0x2b7/0x1b30 [ 1521.681023][ T3517] ? _raw_spin_unlock_irq+0x23/0x50 [ 1521.686246][ T3517] cfg80211_wiphy_work+0x228/0x260 [ 1521.691375][ T3517] ? process_scheduled_works+0x975/0x1600 [ 1521.697110][ T3517] process_scheduled_works+0xa60/0x1600 [ 1521.702696][ T3517] ? worker_attach_to_pool+0x370/0x370 [ 1521.708173][ T3517] ? assign_work+0x3cc/0x5d0 [ 1521.712788][ T3517] worker_thread+0xa5e/0xfe0 [ 1521.717420][ T3517] kthread+0x2fa/0x390 [ 1521.721501][ T3517] ? pr_cont_work+0x550/0x550 [ 1521.726192][ T3517] ? kthread_blkcg+0xd0/0xd0 [ 1521.730793][ T3517] ret_from_fork+0x48/0x80 [ 1521.735221][ T3517] ? kthread_blkcg+0xd0/0xd0 [ 1521.739821][ T3517] ret_from_fork_asm+0x11/0x20 [ 1521.744610][ T3517] [ 1521.747884][ T3517] Kernel Offset: disabled [ 1521.752321][ T3517] Rebooting in 86400 seconds..