last executing test programs: 6m45.324213391s ago: executing program 2 (id=399): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000440)="29000000150005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0", 0x27) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000340)={0xe939, r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r7}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000004, 0x4008011, r0, 0x100000000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r7, &(0x7f0000004180)={0x2020}, 0x2020) r8 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r8) r9 = socket$rxrpc(0x21, 0x2, 0x2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040), 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="747261fe176e733d66642c7266646e25342301eca802aebdb8fbc55ca56cb4eba8aa2217c32ab59fbb6729cab042003767a6a9dcea21fb5366cade7ae11565af4c8be10482e823dc5ee5e841d5f91e4db688039dbb4165616e71dc9693fb6c76c8132620ee7a15f1fa9f2af1c1e6d39189a7e0d4d03d8ccd1d8fcef7124c410d58aca4", @ANYRESHEX=r8, @ANYRES8=r5, @ANYRESHEX=r9, @ANYBLOB="2c8e7102236c9239755988b9bee6cb2f9bb46507cede58404b1a000000000000e5096f788f8cea02abaa630000000000008d82b343bcb43277b3516ec86cf1"]) 6m42.941299508s ago: executing program 2 (id=403): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f2c50c9eb720e93d3e5b4", 0x4f}, {&(0x7f00000006c0)="080c0434", 0x4}], 0x2, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_open_dev$video(&(0x7f0000000300), 0x8, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m40.663375633s ago: executing program 2 (id=410): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x6, 0x0, &(0x7f0000000500)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet(0x2, 0x5, 0xfffffffd) listen(r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f00000014c0)=""/223, 0xdf}], 0x1, 0x9, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) dup(r8) r9 = socket(0x8000000010, 0x2, 0x0) write(r9, &(0x7f0000000540)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a0cbc000c00f0ff7f0000b402000033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435eeab29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de96e6d930d292f48e687d301f86275fab1ab529973d3716f66fc1c95818abca61060143d93d4911b5c266c274adfaf2d15721b0835a31b64ae7851d353331b86585ed46b92425fc2f184d22e08c809245d79c4267bee9b8c9f019b0c9b555438a32928c4523c3c348ad334e485d8689424992843797ad137805ef350f769b847b6ff70a29f582873dfbf8b540d950a084c1c096ef010741b1dc3f6fe13a799590b950b55900972ace9287e692a45be4", 0x1ab) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000004) readlinkat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)=""/209, 0xd1) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d616373656300001400028005000c0000000000050007000000", @ANYRES32=r11], 0x4c}, 0x1, 0x0, 0x0, 0x4040804}, 0x10) 6m39.169739481s ago: executing program 2 (id=412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) 6m39.061789532s ago: executing program 2 (id=415): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x4, 0xfe, 0x100, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, @empty, 0x8000, 0x0, 0x2}}) 6m36.645777089s ago: executing program 2 (id=418): ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_open_procfs(0x0, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 6m36.112082385s ago: executing program 32 (id=418): ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_open_procfs(0x0, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 3m2.781731458s ago: executing program 0 (id=1175): sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040804}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, 0x0, &(0x7f0000000100)) 3m0.662118292s ago: executing program 0 (id=1181): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000005c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2m56.691124417s ago: executing program 0 (id=1195): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYRES8=0x0, @ANYBLOB="43aba9911ba3d9bd9c2d341ba78391f3fd42251c28fa8791c674ecf2c666503c694dd8b576471ff008053eda3e0545d1e2a99f341297507e1038477a4f7c13ac0c9e96f1a9e280287791afe9e4417c02760fdfffb67798fa8fbf85698869e38d191ec5d1f9c0f116fbaead79cc672ecf6156a63c06dcbedae392d46e9fbf094f6d63ea0d8def073e77b2c537b4a4b94ad004aecc87a0327f6851869732e29e3719ba52c6495fce628d5f3e", @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYBLOB], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ptrace(0x10, 0x0) creat(0x0, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) sendfile(r4, r4, &(0x7f0000001000)=0x10000000000000, 0xffff) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, 0x0, 0x800002, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143041, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x4) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) 2m53.878935499s ago: executing program 0 (id=1202): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000080)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000b80)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r5, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200), 0xfffffebb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, 0x0) sendfile(r1, r0, 0x0, 0x7ffff088) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000002c0), &(0x7f0000000300)=0x14) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) 2m52.563777063s ago: executing program 0 (id=1206): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) listen(0xffffffffffffffff, 0x6) connect$l2tp(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2m51.853673162s ago: executing program 0 (id=1208): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r0, 0x0, 0x0, 0x1000, 0x3f2f0fde) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = add_key(0x0, &(0x7f0000003340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x3, @multicast2}}}, 0x108) ftruncate(0xffffffffffffffff, 0x4) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x20000023896) close_range(r1, 0xffffffffffffffff, 0x0) 2m36.552622304s ago: executing program 33 (id=1208): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r0, 0x0, 0x0, 0x1000, 0x3f2f0fde) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = add_key(0x0, &(0x7f0000003340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x3, @multicast2}}}, 0x108) ftruncate(0xffffffffffffffff, 0x4) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x20000023896) close_range(r1, 0xffffffffffffffff, 0x0) 2m22.068666877s ago: executing program 6 (id=1251): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x2, @vbi={0xfffffffe, 0x3, 0x6, 0x41415270, [0x6e, 0x8], [0x7, 0xa5a], 0x108}}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x8, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x1c}}}}], 0x20}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @loopback, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8003}}, 0x48) 2m21.273313626s ago: executing program 6 (id=1297): openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000002c0)='\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m21.066050378s ago: executing program 6 (id=1298): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket(0x200000100000011, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 2m20.601599474s ago: executing program 6 (id=1300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket(0x2, 0x80805, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000140)={0x1d, r3, 0x3, {0x1, 0xff, 0x4}}, 0x18) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0x2, {0x0, 0x0, 0x3}, 0x1}, 0x18) close(0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000180)={0x1d, r7, 0x0, {0x2, 0xf0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="81b60ff1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) socket(0x8, 0x800, 0x200006) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) r8 = creat(&(0x7f0000000280)='./file1\x00', 0x2f) sendmsg$kcm(r8, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000440)="68db9ca854c1993b95ae59a19abdcf6ddc7622fb33c01affd449f39cb1cff1270f34bdbcdb35eb63f3c7d637a6d509f74d171f491eeefffedfb34d8bf84b2bbf0f325a1bafc3812f99594115a0c261e668a49825c3413f23ab40c32f8b824fa18cc983caf17b671c363ff89adada1403f66548a1fed8870f459b396f6b420ac7076e83bea8863c6a618b30c98b603d0474219f6de3c9ceed0116d9fea1133c55405251296c97dcc895d8986c8b422ec7561af98f271e65fa259293c13f6b8c83b5909df6f56804d1eb8835befdfdc8170ec82edb", 0xd4}, {&(0x7f0000000780)="b6e42360c21254cfecf9e9742e054ade4194bf85e48624d304835c6d7a5d3f24c184e3afbdc64cac9a5737ab0146e9f16da5e22212973784b31f375a5db63f2d3ae4e9c298b4ade9ee055a603d689aa038e9e5e696cf4eaaa71de0b792b34760757d2794d0d2c68e65537ad33a9994b4c68bd16ae63f4bde107f8695fdd16fb36f6e19dd2a3896f434209d6837c453593d9079a7527f6c7d1e188c6fad821eebd760a7f3f6caea5ff152d430dc81be4c9a383c3de06953870f3476e70ce97d68dc571c883294b990da09104d47f4de48b7ccc2e3dc8a19249a", 0xd9}], 0x2, &(0x7f00000009c0)=ANY=[@ANYBLOB="e0000000000000001100000006000000fc857a089fb3689d7dc7b6ea6b14d291bcb4fee9d853a7b75edf1c150e2b6caeec935add514d3e98b9cee5b206a310aba4faafcf8718921f60ebb7858f4bdc2cb8d8a6b0a12ef14fd94ceaeb774d1a1dc1f008813645d0baf93ab01bedefbf0bfc07ce0832fb3a4d9f12f774799cd063f6895288db324650dbc2303ae93f30f5e91f9e7335268af2c51ae3495b4b75d41f47eb1c2fe9be6bab491ec7bb77e80803d1aa42989bf8df522e868315582170938d53d6484be36d81df9f36de9acc00"/218], 0xe0}, 0x40044) syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) 2m10.450121058s ago: executing program 4 (id=1328): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000002100b704000000000000850000005700000095"], 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e) 2m10.041711392s ago: executing program 4 (id=1329): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r1, 0x80047437, 0xffffffffffffffff) 2m9.790603255s ago: executing program 4 (id=1330): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) 2m9.409337119s ago: executing program 4 (id=1331): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8140, 0x0) syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x2004000, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYBLOB="76e6299582673a17dc165b52126d9b5ebefaffce7591b3e858ec5ed1c0bcfbb28bb8b0771b9d7bafda74268d068808dfeb2186c0cb22ce6d409cafb470c8dbeee8adbd992946fcbac0d8526cacf256ba422844b1f83d45e058a5c282098be693631c1a9abe0347be4d78f840ad5fe1b5b66ec21a3649b537497775cba62faf8223fa64df6cc1c3ff32e60c28cc9db40351dbc9460f90ff5c82bfc19be3daf82609d615a9d272f9693791b73c9265ccca96d673ec071275dfc825d56bb3ae3b200390", @ANYRES32=0x0, @ANYRESHEX], 0x9, 0x226, &(0x7f0000000140)="$eJzs20tu00Acx/GfU8epy/u1YQMSSLAhKWmk0B09ABdgV6VuVeFSRNm0QqorJO7BHRASO24CSxYUwQmM/EriEjuOTR7A9yOl+Wfk38wo6riTKiMA/63L4U9Dhuph5fv+8W1JT59IMnOj1kwmCGBqfCNa9Fms6On7h3Tzcn4KwN9h6cfo9kbmAv+YFLX+XcCawsQATNnpxlK4D/hkSJ9/vu59ix/1gvuH042atKQvphe9TvKWtFwof2KEzzfNQTZ4NJTuwPAy9i/vovw9pfN20fnH46+cya+MCwYfmSRbJ7Xw5f076fw5SeclXZB0UdKl+LPWFUlXkx7k9cffOjP+jYLzB6oIfvuaqZZCyzadb+Zc0MjPB6tne9d1VicadaAe5x9OkLk7VFtxvl1y/CS/VjLfiPPN3r67lXnV45K9A/lqUseokC+d3e/2yyrr3yyx/gFEDg6Pnm26brLdd52Xccv4opZ/jV20n2qFPdGcM4pkz2NoJnMeVRzPY9DRhe9Lf6Cf5E0NWkzf0/jU24mGCG79QXErHmcR3rrihb0Y08guBveI92+S1QHgX9J6tfeidXB49GB3b3PH2XGetzvrjzpr7U53vbXddZ3VVpXdOYBFNvijLxX5n3n+V4IAAAAAAAAAAAAAAMA8XJN0fd6TAAAAADAT5U4IGfFRoKTla0+/nZzzhr5ZPIRDRAAAAAAAAAAAAAAAAAAAAEBpvwIAAP//cZUsSg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) migrate_pages(r3, 0x1000, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r2], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x10, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) rename(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)='./file0/file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) preadv2(r1, &(0x7f0000002500)=[{&(0x7f0000001580)=""/193, 0xc1}], 0x1000000000000273, 0x0, 0x0, 0x1c) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x20, 0x0, 0x1, 0x20000, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x76}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x81}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x40000c4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000828bd7000ffdbdf251b000000080015000200000008000100", @ANYRES32=r8, @ANYBLOB="88000100", @ANYRES32=r10, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) 2m8.260697482s ago: executing program 4 (id=1333): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket(0x200000000000011, 0x2, 0xd) socket(0x200000000000011, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0x9362, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x23042, 0x1df) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2m6.930895598s ago: executing program 4 (id=1337): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x1e, 0x23}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, 0x0, 0x0) r3 = memfd_create(0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x8001a0) splice(r1, 0x0, r3, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_EMATCHES={0x8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) userfaultfd(0x80001) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x108) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000002c0)="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") read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) write$vhost_msg(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) r6 = dup(r5) r7 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x144) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d1) 2m5.110796758s ago: executing program 34 (id=1300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket(0x2, 0x80805, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000140)={0x1d, r3, 0x3, {0x1, 0xff, 0x4}}, 0x18) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0x2, {0x0, 0x0, 0x3}, 0x1}, 0x18) close(0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000180)={0x1d, r7, 0x0, {0x2, 0xf0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="81b60ff1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) socket(0x8, 0x800, 0x200006) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) r8 = creat(&(0x7f0000000280)='./file1\x00', 0x2f) sendmsg$kcm(r8, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000440)="68db9ca854c1993b95ae59a19abdcf6ddc7622fb33c01affd449f39cb1cff1270f34bdbcdb35eb63f3c7d637a6d509f74d171f491eeefffedfb34d8bf84b2bbf0f325a1bafc3812f99594115a0c261e668a49825c3413f23ab40c32f8b824fa18cc983caf17b671c363ff89adada1403f66548a1fed8870f459b396f6b420ac7076e83bea8863c6a618b30c98b603d0474219f6de3c9ceed0116d9fea1133c55405251296c97dcc895d8986c8b422ec7561af98f271e65fa259293c13f6b8c83b5909df6f56804d1eb8835befdfdc8170ec82edb", 0xd4}, {&(0x7f0000000780)="b6e42360c21254cfecf9e9742e054ade4194bf85e48624d304835c6d7a5d3f24c184e3afbdc64cac9a5737ab0146e9f16da5e22212973784b31f375a5db63f2d3ae4e9c298b4ade9ee055a603d689aa038e9e5e696cf4eaaa71de0b792b34760757d2794d0d2c68e65537ad33a9994b4c68bd16ae63f4bde107f8695fdd16fb36f6e19dd2a3896f434209d6837c453593d9079a7527f6c7d1e188c6fad821eebd760a7f3f6caea5ff152d430dc81be4c9a383c3de06953870f3476e70ce97d68dc571c883294b990da09104d47f4de48b7ccc2e3dc8a19249a", 0xd9}], 0x2, &(0x7f00000009c0)=ANY=[@ANYBLOB="e0000000000000001100000006000000fc857a089fb3689d7dc7b6ea6b14d291bcb4fee9d853a7b75edf1c150e2b6caeec935add514d3e98b9cee5b206a310aba4faafcf8718921f60ebb7858f4bdc2cb8d8a6b0a12ef14fd94ceaeb774d1a1dc1f008813645d0baf93ab01bedefbf0bfc07ce0832fb3a4d9f12f774799cd063f6895288db324650dbc2303ae93f30f5e91f9e7335268af2c51ae3495b4b75d41f47eb1c2fe9be6bab491ec7bb77e80803d1aa42989bf8df522e868315582170938d53d6484be36d81df9f36de9acc00"/218], 0xe0}, 0x40044) syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) 1m51.638193489s ago: executing program 35 (id=1337): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x1e, 0x23}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, 0x0, 0x0) r3 = memfd_create(0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x8001a0) splice(r1, 0x0, r3, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_EMATCHES={0x8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) userfaultfd(0x80001) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x108) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000002c0)="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") read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) write$vhost_msg(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) r6 = dup(r5) r7 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x144) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d1) 24.968373698s ago: executing program 3 (id=1594): listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a06fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed00000f030000000000001d44000000000000730a04fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef77997e344e61482808c02b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(0xffffffffffffffff) 14.071445521s ago: executing program 1 (id=1632): socket(0x28, 0xa, 0x0) r0 = socket(0x28, 0x5, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0xf, 0x0, @thr={0x0, 0x0}}) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, 0x0, 0x0, 0x24008094) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r1, r1, 0x0, 0x101) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7e, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 12.615501698s ago: executing program 1 (id=1637): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 12.33770531s ago: executing program 3 (id=1639): socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xc) ioprio_get$uid(0x3, 0x0) getsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000140), 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x97) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, 0x0, 0x0, 0x3, 0x7) 10.785338128s ago: executing program 8 (id=1643): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8140, 0x0) syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x2004000, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYBLOB="76e6299582673a17dc165b52126d9b5ebefaffce7591b3e858ec5ed1c0bcfbb28bb8b0771b9d7bafda74268d068808dfeb2186c0cb22ce6d409cafb470c8dbeee8adbd992946fcbac0d8526cacf256ba422844b1f83d45e058a5c282098be693631c1a9abe0347be4d78f840ad5fe1b5b66ec21a3649b537497775cba62faf8223fa64df6cc1c3ff32e60c28cc9db40351dbc9460f90ff5c82bfc19be3daf82609d615a9d272f9693791b73c9265ccca96d673ec071275dfc825d56bb3ae3b200390", @ANYRES32=0x0, @ANYRESHEX], 0x9, 0x226, &(0x7f0000000140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) migrate_pages(r3, 0x1000, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r2], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x10, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)='./file0/file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) preadv2(r1, &(0x7f0000002500)=[{&(0x7f0000001580)=""/193, 0xc1}], 0x1000000000000273, 0x0, 0x0, 0x1c) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x20, 0x0, 0x1, 0x20000, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x76}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x81}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x40000c4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000828bd7000ffdbdf251b000000080015000200000008000100", @ANYRES32=r8, @ANYBLOB="88000100", @ANYRES32=r11, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) 8.954855459s ago: executing program 3 (id=1646): syz_open_procfs(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$llc(0x1a, 0x802, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) r5 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) close_range(r0, 0xffffffffffffffff, 0x0) 8.82578255s ago: executing program 1 (id=1647): socket(0x28, 0xa, 0x0) r0 = socket(0x28, 0x5, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0xf, 0x0, @thr={0x0, 0x0}}) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, 0x0, 0x0, 0x24008094) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r2, r2, 0x0, 0x101) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7e, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 8.479310414s ago: executing program 8 (id=1648): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.433967095s ago: executing program 5 (id=1649): listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(0xffffffffffffffff) 7.06422445s ago: executing program 5 (id=1651): r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x851, 0x1) 7.0639488s ago: executing program 3 (id=1652): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f0000000200)) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001080)={0x4, 0x1, {0x4, @struct={0x1, 0x9}, 0x0, 0x4, 0x6, 0xb6, 0x80000001, 0x7ff, 0x0, @struct={0x80000001}, 0x203, 0x6, [0x4, 0x7, 0x1, 0xffffffffffffffff, 0x4, 0x1]}, {0x100, @usage=0x40, 0x0, 0x401, 0x6, 0x2, 0x800000000007ff, 0x0, 0x0, @usage=0xff, 0x6, 0x100, [0xee, 0x4, 0x1, 0x8000000000000000, 0x6, 0x258b6064]}, {0x0, @usage=0xff0, 0x0, 0x10, 0x800, 0xe1, 0x2, 0x7, 0x4, @struct={0x7f, 0x8}, 0xc0000000, 0xd, [0x7, 0x7, 0x8, 0xa118930, 0x8, 0xf8]}, {0xfffffffffffff1ac, 0x21f, 0x100}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x2003, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @local, 0x0, 0x0, 0x8000000, 0x0, 0x6, 0x7fc}) 6.952805271s ago: executing program 7 (id=1653): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_open_procfs$namespace(0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r3 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r1, @ANYBLOB="f1e46cfecf22c1a85e127e75b1262ddf5236b744a0a0f9802be44445f4ff0c869e6e6a1e962b56961d12", @ANYRESOCT=r3, @ANYRES8], 0x48) mmap(&(0x7f0000bdd000/0x1000)=nil, 0x1000, 0x2000002, 0x13, r5, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r6) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000040) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xfffffffffffffdff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[], 0x94}}, 0x8000) sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000170a01010000fffffff7000000000008a1966862a68e67a03971537baadd09ffa552ac8bb9b86ca8f9c3a7da23c8aed6337a3ef8614aaacb644b7beec2a36c3a2c0cf60298672836d0fe398c63f9bfaf99c77de7a8f226503c0d218f4d38b26149a358b2aafec77e29b0efd643f4236110290dfe870118f5c02243cd6260506d63151327099d03000000c8b058e08d75a4e019bd5276fe716cdf0fee38d454ae0fbca751b862770b285a43924a01dc32f6fa64e39eb0b9bc398e23a4e609f15a142053051911380b8f324b01e8cc2fda5b9b33c16954a293bce01470c433e3485d2a9cd8c4605ea7f3"], 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) sendmsg$NFNL_MSG_ACCT_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r2], 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 6.809844243s ago: executing program 5 (id=1654): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 5.594252647s ago: executing program 1 (id=1655): r0 = openat$dsp1(0xffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) r1 = syz_open_dev$dvb_demux(0x0, 0x0, 0x700) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x1, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x4c, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r1, 0x6f2d, 0x400000002000) 5.559598067s ago: executing program 8 (id=1656): socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xc) ioprio_get$uid(0x3, 0x0) getsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000140), 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x97) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, 0x0, 0x0, 0x3, 0x7) 5.545511437s ago: executing program 7 (id=1657): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.38775188s ago: executing program 3 (id=1658): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x4000040) 5.33762218s ago: executing program 5 (id=1659): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8140, 0x0) syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x2004000, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYBLOB="76e6299582673a17dc165b52126d9b5ebefaffce7591b3e858ec5ed1c0bcfbb28bb8b0771b9d7bafda74268d068808dfeb2186c0cb22ce6d409cafb470c8dbeee8adbd992946fcbac0d8526cacf256ba422844b1f83d45e058a5c282098be693631c1a9abe0347be4d78f840ad5fe1b5b66ec21a3649b537497775cba62faf8223fa64df6cc1c3ff32e60c28cc9db40351dbc9460f90ff5c82bfc19be3daf82609d615a9d272f9693791b73c9265ccca96d673ec071275dfc825d56bb3ae3b200390", @ANYRES32=0x0, @ANYRESHEX], 0x9, 0x226, &(0x7f0000000140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) migrate_pages(r3, 0x1000, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r2], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x10, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) rename(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)='./file0/file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) preadv2(r1, &(0x7f0000002500)=[{&(0x7f0000001580)=""/193, 0xc1}], 0x1000000000000273, 0x0, 0x0, 0x1c) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x20, 0x0, 0x1, 0x20000, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x76}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x81}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x40000c4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000828bd7000ffdbdf251b000000080015000200000008000100", @ANYRES32=r8, @ANYBLOB="88000100", @ANYRES32=r11, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) 4.931668945s ago: executing program 7 (id=1660): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b1", 0x23}, {&(0x7f00000006c0)="080c04", 0x3}], 0x2, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff0000000000"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_open_dev$video(&(0x7f0000000300), 0x8, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.530621529s ago: executing program 8 (id=1661): listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(0xffffffffffffffff) 2.910591907s ago: executing program 1 (id=1662): syz_open_procfs(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$llc(0x1a, 0x802, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) r5 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) close_range(r0, 0xffffffffffffffff, 0x0) 2.65915707s ago: executing program 7 (id=1663): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) close(0x3) 2.617471941s ago: executing program 5 (id=1664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20008004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 1.601684502s ago: executing program 3 (id=1665): socket(0x28, 0xa, 0x0) r0 = socket(0x28, 0x5, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0xf, 0x0, @thr={0x0, 0x0}}) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, 0x0, 0x0, 0x24008094) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r2, r2, 0x0, 0x101) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7e, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 1.328704275s ago: executing program 7 (id=1666): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f286", 0x2f}, {&(0x7f00000006c0)='\b\f', 0x2}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e44272215dba2195d826f9fd", 0x87}], 0x3, 0x0, 0x1a0}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe80000000400000000000000000001b000000fb00000000000020000400"/64, @ANYRES32=0x0, @ANYBLOB="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"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 997.589709ms ago: executing program 1 (id=1667): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 861.59384ms ago: executing program 8 (id=1668): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f0000000200)) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001080)={0x4, 0x1, {0x4, @struct={0x1, 0x9}, 0x0, 0x4, 0x6, 0xb6, 0x80000001, 0x7ff, 0x0, @struct={0x80000001}, 0x203, 0x6, [0x4, 0x7, 0x1, 0xffffffffffffffff, 0x4, 0x1]}, {0x100, @usage=0x40, 0x0, 0x401, 0x6, 0x2, 0x800000000007ff, 0x0, 0x0, @usage=0xff, 0x6, 0x100, [0xee, 0x4, 0x1, 0x8000000000000000, 0x6, 0x258b6064]}, {0x0, @usage=0xff0, 0x0, 0x10, 0x800, 0xe1, 0x2, 0x7, 0x4, @struct={0x7f, 0x8}, 0xc0000000, 0xd, [0x7, 0x7, 0x8, 0xa118930, 0x8, 0xf8]}, {0xfffffffffffff1ac, 0x21f, 0x100}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x2003, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @local, 0x0, 0x0, 0x8000000, 0x0, 0x6, 0x7fc}) 615.713954ms ago: executing program 7 (id=1669): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 615.046843ms ago: executing program 5 (id=1670): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 8 (id=1671): socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xc) ioprio_get$uid(0x3, 0x0) getsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000140), 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x97) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, 0x0, 0x0, 0x3, 0x7) kernel console output (not intermixed with test programs): 374:6): pid=8191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1090" name="file1" dev="loop0" ino=1048595 res=0 errno=0 [ 413.762223][ T8197] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 413.950124][ T26] audit: type=1800 audit(1778188266.504:7): pid=8197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1090" name="file1" dev="loop0" ino=1048595 res=0 errno=0 [ 414.678240][ T8191] syz.0.1090 (8191) used greatest stack depth: 20376 bytes left [ 415.749345][ T8270] loop4: detected capacity change from 0 to 512 [ 416.807875][ T8270] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2757: inode #11: comm syz.4.1120: corrupted xattr block 95 [ 416.880885][ T8270] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 416.922025][ T8270] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1120: bg 0: block 7: invalid block bitmap [ 416.956595][ T8290] syz.0.1125: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 417.008413][ T8270] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 417.035532][ T8290] CPU: 1 PID: 8290 Comm: syz.0.1125 Not tainted syzkaller #0 [ 417.042975][ T8290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 417.053055][ T8290] Call Trace: [ 417.056505][ T8290] [ 417.059479][ T8290] dump_stack_lvl+0x188/0x250 [ 417.064195][ T8290] ? rcu_lock_release+0x5/0x20 [ 417.069030][ T8290] ? show_regs_print_info+0x20/0x20 [ 417.074419][ T8290] ? load_image+0x400/0x400 [ 417.078963][ T8290] warn_alloc+0x243/0x320 [ 417.083352][ T8290] ? rcu_lock_release+0x20/0x20 [ 417.088245][ T8290] ? zone_watermark_ok_safe+0x240/0x240 [ 417.094012][ T8290] ? dvb_demux_do_ioctl+0x313/0x530 [ 417.099245][ T8290] ? kfree+0xef/0x2a0 [ 417.103328][ T8290] __vmalloc_node_range+0x2b1/0x8b0 [ 417.108537][ T8290] ? mutex_lock_io_nested+0x60/0x60 [ 417.113753][ T8290] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 417.119565][ T8290] vmalloc+0x75/0x80 [ 417.123476][ T8290] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 417.129299][ T8290] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 417.134947][ T8290] dvb_demux_do_ioctl+0x450/0x530 [ 417.139984][ T8290] dvb_usercopy+0x191/0x2b0 [ 417.144496][ T8290] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 417.150044][ T8290] ? dvb_generic_ioctl+0xb0/0xb0 [ 417.155091][ T8290] ? dvb_demux_poll+0x210/0x210 [ 417.159943][ T8290] dvb_demux_ioctl+0x25/0x30 [ 417.164544][ T8290] __se_sys_ioctl+0xfa/0x170 [ 417.169231][ T8290] do_syscall_64+0x4c/0xa0 [ 417.173653][ T8290] ? clear_bhb_loop+0x30/0x80 [ 417.178336][ T8290] ? clear_bhb_loop+0x30/0x80 [ 417.183024][ T8290] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 417.188922][ T8290] RIP: 0033:0x7f642c6c5dd9 [ 417.193347][ T8290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.213393][ T8290] RSP: 002b:00007f642a8dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.221925][ T8290] RAX: ffffffffffffffda RBX: 00007f642c93f180 RCX: 00007f642c6c5dd9 [ 417.229951][ T8290] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 417.238237][ T8290] RBP: 00007f642c75bd69 R08: 0000000000000000 R09: 0000000000000000 [ 417.246323][ T8290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.254520][ T8290] R13: 00007f642c93f218 R14: 00007f642c93f180 R15: 00007fff9afdfbb8 [ 417.262620][ T8290] [ 417.299054][ T8270] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2923: inode #11: comm syz.4.1120: corrupted xattr block 95 [ 417.328996][ T8270] EXT4-fs warning (device loop4): ext4_evict_inode:304: xattr delete (err -117) [ 417.343736][ T8270] EXT4-fs (loop4): 1 orphan inode deleted [ 417.349722][ T8270] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 417.353806][ T8290] Mem-Info: [ 417.365533][ T8290] active_anon:3149 inactive_anon:12496 isolated_anon:0 [ 417.365533][ T8290] active_file:21353 inactive_file:37909 isolated_file:0 [ 417.365533][ T8290] unevictable:768 dirty:90 writeback:0 [ 417.365533][ T8290] slab_reclaimable:18523 slab_unreclaimable:106843 [ 417.365533][ T8290] mapped:35898 shmem:10312 pagetables:790 bounce:0 [ 417.365533][ T8290] kernel_misc_reclaimable:0 [ 417.365533][ T8290] free:1346830 free_pcp:6101 free_cma:0 [ 417.382907][ T8292] loop3: detected capacity change from 0 to 64 [ 417.536879][ T8290] Node 0 active_anon:12588kB inactive_anon:49652kB active_file:84976kB inactive_file:151636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143400kB dirty:360kB writeback:0kB shmem:39172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10936kB pagetables:3260kB all_unreclaimable? no [ 417.700162][ T8290] Node 1 active_anon:8kB inactive_anon:532kB active_file:436kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:192kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 417.739071][ T8290] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 417.822000][ T8290] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 417.897102][ T8299] attempt to access beyond end of device [ 417.897102][ T8299] loop3: rw=0, want=268435470, limit=64 [ 417.909380][ T8299] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 417.928597][ T8299] attempt to access beyond end of device [ 417.928597][ T8299] loop3: rw=0, want=268435470, limit=64 [ 417.940290][ T8299] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 418.159874][ T8290] Node 0 DMA32 free:1452568kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:12588kB inactive_anon:63152kB active_file:84976kB inactive_file:151636kB unevictable:1536kB writepending:360kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:8968kB local_pcp:5804kB free_cma:0kB [ 418.405349][ T8290] lowmem_reserve[]: 0 0 0 0 0 [ 418.415509][ T8290] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 418.470887][ T8290] lowmem_reserve[]: 0 0 0 0 0 [ 418.476758][ T8290] Node 1 Normal free:3917920kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:8kB inactive_anon:532kB active_file:436kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:2788kB local_pcp:2788kB free_cma:0kB [ 418.505608][ T8290] lowmem_reserve[]: 0 0 0 0 0 [ 418.511111][ T8290] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 418.541624][ T8290] Node 0 DMA32: 912*4kB (U) 283*8kB (UME) 1224*16kB (UME) 466*32kB (UME) 299*64kB (UME) 155*128kB (UME) 82*256kB (UME) 59*512kB (UME) 17*1024kB (UME) 5*2048kB (UM) 316*4096kB (UM) = 1452568kB [ 418.586694][ T8290] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 418.601586][ T8290] Node 1 Normal: 234*4kB (UME) 49*8kB (UME) 23*16kB (UME) 172*32kB (UME) 81*64kB (UME) 24*128kB (UE) 14*256kB (UME) 7*512kB (UME) 2*1024kB (UE) 3*2048kB (UME) 949*4096kB (M) = 3917920kB [ 418.739094][ T8290] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.748717][ T8290] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.802587][ T8290] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.813156][ T8290] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 419.331342][ T8290] 75215 total pagecache pages [ 419.714577][ T8290] 0 pages in swap cache [ 419.728949][ T8290] Swap cache stats: add 3323, delete 3323, find 1349/1578 [ 419.776130][ T8290] Free swap = 124448kB [ 419.790952][ T8290] Total swap = 124996kB [ 419.795167][ T8290] 2097051 pages RAM [ 419.829021][ T8290] 0 pages HighMem/MovableOnly [ 419.869314][ T8290] 411492 pages reserved [ 419.873524][ T8290] 0 pages cma reserved [ 420.215847][ T8313] loop4: detected capacity change from 0 to 2048 [ 420.364179][ T8313] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 422.078019][ T8327] loop3: detected capacity change from 0 to 2048 [ 422.384833][ T8327] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 423.186991][ T8338] loop1: detected capacity change from 0 to 4096 [ 423.317317][ T8338] ntfs3: Unknown parameter 'hide_dot_files' [ 430.073101][ T8421] loop3: detected capacity change from 0 to 128 [ 430.350871][ T8421] EXT4-fs (loop3): Test dummy encryption mode enabled [ 430.376689][ T8421] EXT4-fs (loop3): journaled quota format not specified [ 430.835965][ T8436] loop3: detected capacity change from 0 to 16 [ 430.907443][ T8436] erofs: (device loop3): mounted with root inode @ nid 36. [ 430.919611][ T8436] erofs: (device loop3): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 431.351751][ T8445] warn_alloc: 1 callbacks suppressed [ 431.351768][ T8445] syz.1.1174: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 431.486430][ T8445] CPU: 0 PID: 8445 Comm: syz.1.1174 Not tainted syzkaller #0 [ 431.493904][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.504171][ T8445] Call Trace: [ 431.507588][ T8445] [ 431.510682][ T8445] dump_stack_lvl+0x188/0x250 [ 431.515516][ T8445] ? rcu_lock_release+0x5/0x20 [ 431.520323][ T8445] ? show_regs_print_info+0x20/0x20 [ 431.525734][ T8445] ? load_image+0x400/0x400 [ 431.530389][ T8445] warn_alloc+0x243/0x320 [ 431.534776][ T8445] ? rcu_lock_release+0x20/0x20 [ 431.539841][ T8445] ? zone_watermark_ok_safe+0x240/0x240 [ 431.545766][ T8445] ? dvb_demux_do_ioctl+0x313/0x530 [ 431.551018][ T8445] ? kfree+0xef/0x2a0 [ 431.555046][ T8445] __vmalloc_node_range+0x2b1/0x8b0 [ 431.560446][ T8445] ? mutex_lock_io_nested+0x60/0x60 [ 431.565687][ T8445] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 431.572120][ T8445] vmalloc+0x75/0x80 [ 431.576179][ T8445] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 431.582043][ T8445] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 431.587993][ T8445] dvb_demux_do_ioctl+0x450/0x530 [ 431.593086][ T8445] dvb_usercopy+0x191/0x2b0 [ 431.597652][ T8445] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 431.603475][ T8445] ? dvb_generic_ioctl+0xb0/0xb0 [ 431.608670][ T8445] ? dvb_demux_poll+0x210/0x210 [ 431.613567][ T8445] dvb_demux_ioctl+0x25/0x30 [ 431.618198][ T8445] __se_sys_ioctl+0xfa/0x170 [ 431.622826][ T8445] do_syscall_64+0x4c/0xa0 [ 431.627280][ T8445] ? clear_bhb_loop+0x30/0x80 [ 431.632077][ T8445] ? clear_bhb_loop+0x30/0x80 [ 431.636791][ T8445] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 431.642719][ T8445] RIP: 0033:0x7f94d9926dd9 [ 431.647168][ T8445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.667699][ T8445] RSP: 002b:00007f94d7b3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.676436][ T8445] RAX: ffffffffffffffda RBX: 00007f94d9ba0180 RCX: 00007f94d9926dd9 [ 431.684458][ T8445] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 431.692646][ T8445] RBP: 00007f94d99bcd69 R08: 0000000000000000 R09: 0000000000000000 [ 431.700674][ T8445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.708887][ T8445] R13: 00007f94d9ba0218 R14: 00007f94d9ba0180 R15: 00007ffdfd92b498 [ 431.716928][ T8445] [ 431.720216][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.971105][ T8445] Mem-Info: [ 431.974291][ T8445] active_anon:4464 inactive_anon:17176 isolated_anon:0 [ 431.974291][ T8445] active_file:21355 inactive_file:37904 isolated_file:0 [ 431.974291][ T8445] unevictable:768 dirty:147 writeback:0 [ 431.974291][ T8445] slab_reclaimable:18241 slab_unreclaimable:107106 [ 431.974291][ T8445] mapped:40662 shmem:16303 pagetables:783 bounce:0 [ 431.974291][ T8445] kernel_misc_reclaimable:0 [ 431.974291][ T8445] free:1343387 free_pcp:3512 free_cma:0 [ 432.733100][ T8445] Node 0 active_anon:16008kB inactive_anon:71376kB active_file:84996kB inactive_file:151612kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:165604kB dirty:556kB writeback:0kB shmem:64616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10872kB pagetables:3232kB all_unreclaimable? no [ 432.765137][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.808957][ T8445] Node 1 active_anon:8kB inactive_anon:532kB active_file:424kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152kB dirty:44kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 432.838942][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.055404][ T8445] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 433.109019][ T8445] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 433.115186][ T8445] Node 0 DMA32 free:1439184kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:23948kB inactive_anon:39500kB active_file:85004kB inactive_file:151612kB unevictable:1536kB writepending:560kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:35120kB local_pcp:16256kB free_cma:0kB [ 433.146005][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.208921][ T8445] lowmem_reserve[]: 0 0 0 0 0 [ 433.213817][ T8445] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 433.239979][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.253720][ T8445] lowmem_reserve[]: 0 0 0 0 0 [ 433.264867][ T8445] Node 1 Normal free:3918876kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:8kB inactive_anon:532kB active_file:424kB inactive_file:0kB unevictable:1536kB writepending:44kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:1792kB local_pcp:1792kB free_cma:0kB [ 433.761761][ T8445] lowmem_reserve[]: 0 0 0 0 0 [ 433.933009][ T8445] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 434.029892][ T8445] Node 0 DMA32: 939*4kB (UME) 625*8kB (UME) 336*16kB (UME) 408*32kB (UME) 305*64kB (ME) 159*128kB (UME) 97*256kB (UME) 63*512kB (UME) 17*1024kB (UME) 5*2048kB (UM) 316*4096kB (UM) = 1446132kB [ 434.100935][ T8445] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 434.112696][ T8445] Node 1 Normal: 236*4kB (UME) 52*8kB (UME) 26*16kB (UME) 173*32kB (UME) 83*64kB (UME) 26*128kB (UME) 14*256kB (UME) 6*512kB (UME) 3*1024kB (UME) 3*2048kB (UME) 949*4096kB (M) = 3918928kB [ 434.163656][ T8445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 434.183625][ T8445] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 434.194867][ T8445] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 434.205355][ T8445] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 434.215755][ T8445] 67463 total pagecache pages [ 434.239064][ T8445] 0 pages in swap cache [ 434.308265][ T8445] Swap cache stats: add 3323, delete 3323, find 1349/1578 [ 434.411089][ T8445] Free swap = 124448kB [ 434.415319][ T8445] Total swap = 124996kB [ 434.419695][ T8445] 2097051 pages RAM [ 434.423558][ T8445] 0 pages HighMem/MovableOnly [ 434.428254][ T8445] 411492 pages reserved [ 434.432941][ T8445] 0 pages cma reserved [ 434.464314][ T8485] loop4: detected capacity change from 0 to 1024 [ 434.554557][ T8485] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 434.699676][ T8485] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000e11d, mo2=0002] [ 434.708507][ T8485] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 434.716834][ T8485] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,nodelalloc,,errors=continue. Quota mode: writeback. [ 437.721554][ T8510] loop0: detected capacity change from 0 to 128 [ 437.918760][ T8515] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1198'. [ 438.064379][ T8518] loop1: detected capacity change from 0 to 128 [ 439.042710][ T8524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 439.050058][ T8524] IPv6: NLM_F_CREATE should be set when creating new route [ 439.057587][ T8524] IPv6: NLM_F_CREATE should be set when creating new route [ 439.137721][ T8524] device sit0 entered promiscuous mode [ 440.307341][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.314052][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.534055][ T8524] netlink: 'syz.4.1200': attribute type 1 has an invalid length. [ 440.607540][ T8524] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1200'. [ 441.132122][ T8533] IPVS: Unknown mcast interface: pimreg0 [ 442.536868][ T6102] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 442.949421][ T6102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.996462][ T6102] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 443.051939][ T6102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.142069][ T6102] usb 2-1: config 0 descriptor?? [ 443.812336][ T8568] udc-core: couldn't find an available UDC or it's busy [ 443.819428][ T8568] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 445.650245][ T6102] usbhid 2-1:0.0: can't add hid device: -71 [ 445.657696][ T6102] usbhid: probe of 2-1:0.0 failed with error -71 [ 445.683326][ T6102] usb 2-1: USB disconnect, device number 6 [ 445.706131][ T8586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1220'. [ 446.109274][ T8595] vivid-008: disconnect [ 446.856627][ T8591] vivid-008: reconnect [ 448.037960][ T8607] syz.4.1229: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 448.113020][ T8607] CPU: 0 PID: 8607 Comm: syz.4.1229 Not tainted syzkaller #0 [ 448.120644][ T8607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 448.130948][ T8607] Call Trace: [ 448.134264][ T8607] [ 448.137218][ T8607] dump_stack_lvl+0x188/0x250 [ 448.142048][ T8607] ? rcu_lock_release+0x5/0x20 [ 448.146840][ T8607] ? show_regs_print_info+0x20/0x20 [ 448.152183][ T8607] ? load_image+0x400/0x400 [ 448.156821][ T8607] warn_alloc+0x243/0x320 [ 448.161174][ T8607] ? rcu_lock_release+0x20/0x20 [ 448.166077][ T8607] ? zone_watermark_ok_safe+0x240/0x240 [ 448.171650][ T8607] ? dvb_demux_do_ioctl+0x313/0x530 [ 448.176872][ T8607] ? kfree+0xef/0x2a0 [ 448.180893][ T8607] __vmalloc_node_range+0x2b1/0x8b0 [ 448.186230][ T8607] ? mutex_lock_io_nested+0x60/0x60 [ 448.191562][ T8607] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 448.197608][ T8607] vmalloc+0x75/0x80 [ 448.201540][ T8607] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 448.207471][ T8607] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 448.213529][ T8607] dvb_demux_do_ioctl+0x450/0x530 [ 448.218601][ T8607] dvb_usercopy+0x191/0x2b0 [ 448.223238][ T8607] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 448.229010][ T8607] ? dvb_generic_ioctl+0xb0/0xb0 [ 448.234120][ T8607] ? dvb_demux_poll+0x210/0x210 [ 448.239097][ T8607] dvb_demux_ioctl+0x25/0x30 [ 448.243780][ T8607] __se_sys_ioctl+0xfa/0x170 [ 448.248407][ T8607] do_syscall_64+0x4c/0xa0 [ 448.253145][ T8607] ? clear_bhb_loop+0x30/0x80 [ 448.258008][ T8607] ? clear_bhb_loop+0x30/0x80 [ 448.262719][ T8607] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 448.268655][ T8607] RIP: 0033:0x7fb23ab70dd9 [ 448.273115][ T8607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.292856][ T8607] RSP: 002b:00007fb238d88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 448.301369][ T8607] RAX: ffffffffffffffda RBX: 00007fb23adea180 RCX: 00007fb23ab70dd9 [ 448.309559][ T8607] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 448.318267][ T8607] RBP: 00007fb23ac06d69 R08: 0000000000000000 R09: 0000000000000000 [ 448.326285][ T8607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.334285][ T8607] R13: 00007fb23adea218 R14: 00007fb23adea180 R15: 00007ffe6dc3ec68 [ 448.342311][ T8607] [ 448.345476][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.659130][ T8607] Mem-Info: [ 448.662628][ T8607] active_anon:3142 inactive_anon:12484 isolated_anon:0 [ 448.662628][ T8607] active_file:21376 inactive_file:37888 isolated_file:0 [ 448.662628][ T8607] unevictable:768 dirty:109 writeback:0 [ 448.662628][ T8607] slab_reclaimable:18259 slab_unreclaimable:106812 [ 448.662628][ T8607] mapped:33064 shmem:10072 pagetables:764 bounce:0 [ 448.662628][ T8607] kernel_misc_reclaimable:0 [ 448.662628][ T8607] free:1346703 free_pcp:6182 free_cma:0 [ 448.705545][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.798909][ T8607] Node 0 active_anon:12560kB inactive_anon:44804kB active_file:85080kB inactive_file:151552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132020kB dirty:436kB writeback:0kB shmem:33312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10804kB pagetables:3156kB all_unreclaimable? no [ 448.831413][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.936490][ T8607] Node 1 active_anon:8kB inactive_anon:532kB active_file:424kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:184kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 448.966568][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.068997][ T6102] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 449.159106][ T8607] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 449.319944][ T8607] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 449.358937][ T6102] usb 2-1: Using ep0 maxpacket: 32 [ 449.379097][ T8607] Node 0 DMA32 free:1453280kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:12552kB inactive_anon:39992kB active_file:85088kB inactive_file:151552kB unevictable:1536kB writepending:452kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:31796kB local_pcp:20672kB free_cma:0kB [ 449.409229][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.559350][ T6102] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 449.568053][ T6102] usb 2-1: config 0 has no interface number 0 [ 449.633858][ T8607] lowmem_reserve[]: 0 0 0 0 0 [ 449.679250][ T8607] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 449.784572][ T8607] lowmem_reserve[]: 0 0 0 0 0 [ 449.799420][ T6102] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 449.808568][ T6102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.823469][ T8607] Node 1 Normal free:3919684kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:8kB inactive_anon:532kB active_file:424kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:1036kB local_pcp:1036kB free_cma:0kB [ 449.838907][ T6102] usb 2-1: Product: syz [ 449.865134][ T6102] usb 2-1: Manufacturer: syz [ 449.879111][ T6102] usb 2-1: SerialNumber: syz [ 449.888968][ T6102] usb 2-1: config 0 descriptor?? [ 449.950025][ T6102] smsc95xx v2.0.0 [ 450.006038][ T8607] lowmem_reserve[]: 0 0 0 0 0 [ 450.044965][ T8607] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 450.061209][ T8607] Node 0 DMA32: 2*4kB (UM) 16*8kB (UME) 908*16kB (UME) 561*32kB (UME) 323*64kB (UME) 157*128kB (UME) 98*256kB (UME) 63*512kB (UME) 17*1024kB (UME) 5*2048kB (UM) 316*4096kB (UM) = 1452712kB [ 450.080701][ T8607] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 450.092928][ T8607] Node 1 Normal: 235*4kB (UME) 51*8kB (UME) 26*16kB (UME) 173*32kB (UME) 83*64kB (UME) 26*128kB (UME) 15*256kB (UME) 7*512kB (UME) 3*1024kB (UME) 3*2048kB (UME) 949*4096kB (M) = 3919684kB [ 450.112965][ T8607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 450.140492][ T8607] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 450.179156][ T8607] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 450.208982][ T8607] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 450.244539][ T8607] 66641 total pagecache pages [ 450.265642][ T8607] 0 pages in swap cache [ 450.278904][ T8607] Swap cache stats: add 3323, delete 3323, find 1349/1578 [ 450.309101][ T8607] Free swap = 124448kB [ 450.313447][ T8607] Total swap = 124996kB [ 450.317715][ T8607] 2097051 pages RAM [ 450.328646][ T8607] 0 pages HighMem/MovableOnly [ 450.334383][ T8607] 411492 pages reserved [ 450.338685][ T8607] 0 pages cma reserved [ 450.392169][ T6102] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 450.408945][ T6102] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 450.740689][ T8637] loop4: detected capacity change from 0 to 128 [ 451.639642][ T6102] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 451.752806][ T4270] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 451.849950][ T6102] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 452.300105][ T6102] usb 2-1: USB disconnect, device number 7 [ 452.444432][ T8646] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1242'. [ 452.512761][ T4270] usb 4-1: Using ep0 maxpacket: 16 [ 452.695606][ T4270] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 452.704332][ T4270] usb 4-1: config 254 has no interface number 0 [ 452.727121][ T4270] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 452.747936][ T4270] usb 4-1: config 254 interface 235 altsetting 2 has an invalid endpoint with address 0xFF, skipping [ 452.765612][ T4270] usb 4-1: config 254 interface 235 has no altsetting 0 [ 454.316582][ T8655] binder: 8654:8655 ioctl c0306201 0 returned -14 [ 454.369085][ T4270] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 454.378777][ T4270] usb 4-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 455.340324][ T8658] input: syz1 as /devices/virtual/input/input7 [ 455.779042][ T4270] usb 4-1: can't set config #254, error -71 [ 455.788019][ T4270] usb 4-1: USB disconnect, device number 16 [ 457.205590][ T8670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1250'. [ 457.222549][ T8672] loop3: detected capacity change from 0 to 128 [ 458.438981][ T8681] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1254'. [ 458.645217][ T8674] chnl_net:caif_netlink_parms(): no params data found [ 458.851021][ T8674] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.858321][ T8674] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.946152][ T8674] device bridge_slave_0 entered promiscuous mode [ 458.965298][ T8674] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.985591][ T8674] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.740432][ T8674] device bridge_slave_1 entered promiscuous mode [ 459.796165][ T8674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.823442][ T8674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.923225][ T8674] team0: Port device team_slave_0 added [ 459.943778][ T8705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1263'. [ 459.965922][ T8674] team0: Port device team_slave_1 added [ 460.446692][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.459556][ T5371] Bluetooth: hci2: command 0x0409 tx timeout [ 460.466276][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.503978][ T8674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.524398][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.535211][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.562486][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.574879][ T8674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.639730][ T8674] device hsr_slave_0 entered promiscuous mode [ 460.653451][ T8674] device hsr_slave_1 entered promiscuous mode [ 460.662494][ T8674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.678097][ T8674] Cannot create hsr debugfs directory [ 460.825007][ T8720] loop4: detected capacity change from 0 to 128 [ 460.838783][ T8722] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1269'. [ 460.986482][ T8674] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 460.995790][ T8674] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 461.028322][ T8674] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 461.076893][ T8674] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 461.153591][ T8674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.220198][ T8674] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.245604][ T8674] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 461.256721][ T8674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 461.299886][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 461.319341][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 461.353537][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 461.394741][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 461.403815][ T4458] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.410959][ T4458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.430263][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 461.439855][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 461.458836][ T4458] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.466275][ T4458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.476641][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 461.500521][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 461.542711][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 461.554142][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 461.563429][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 461.579940][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 461.626922][ T8736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1276'. [ 461.729536][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 461.745072][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 461.764910][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 461.774643][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 461.805668][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 462.991217][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 463.233089][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 463.246798][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 463.496024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 463.504816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 463.523888][ T8674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.569169][ T21] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 464.582764][ T8757] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1280'. [ 464.701864][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 464.763380][ T21] usb 4-1: device descriptor read/all, error -71 [ 464.845297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 464.860670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 464.969781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 465.009756][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 465.860792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 465.879701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 465.888458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 465.900131][ T8674] device veth0_vlan entered promiscuous mode [ 465.911517][ T8674] device veth1_vlan entered promiscuous mode [ 465.960095][ T8674] device veth0_macvtap entered promiscuous mode [ 466.089530][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 466.251830][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 466.261400][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 466.629892][ T8674] device veth1_macvtap entered promiscuous mode [ 466.683366][ T8674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.699685][ T8674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.734352][ T8674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.749357][ T8674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.764562][ T8674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.782235][ T8674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.793029][ T8674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.808989][ T8674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.825567][ T8674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.889406][ T8674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.679857][ T8674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.692954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 467.712341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 467.727113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 467.750669][ T8674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.769216][ T8674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.833009][ T8674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.883071][ T8674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.902742][ T1344] Bluetooth: hci2: command 0x0419 tx timeout [ 467.912409][ T8674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.928358][ T8674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.948701][ T8674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.963108][ T8674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.978587][ T8674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.093994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 468.114221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 468.130648][ T8674] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.589595][ T8785] autofs4:pid:8785:autofs_fill_super: called with bogus options [ 469.559081][ T8674] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.568187][ T8674] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.577859][ T8674] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.832000][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.867705][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.915818][ T4458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.930239][ T4458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.938137][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 470.070607][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 471.514463][ T8798] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1290'. [ 472.435963][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.617586][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.075263][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.216702][ T8824] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1300'. [ 473.681376][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.912316][ T8830] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1301'. [ 473.938937][ T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 474.382719][ T8839] autofs4:pid:8839:autofs_fill_super: called with bogus options [ 475.449109][ T21] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 475.549309][ T23] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 475.559504][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.573064][ T23] usb 7-1: Product: syz [ 475.579027][ T23] usb 7-1: Manufacturer: syz [ 475.585084][ T23] usb 7-1: SerialNumber: syz [ 475.615361][ T23] usb 7-1: config 0 descriptor?? [ 475.818311][ T23] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 475.839061][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 476.001019][ T21] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 476.012095][ T21] usb 4-1: config 2 has no interface number 0 [ 476.018435][ T21] usb 4-1: config 2 interface 31 has no altsetting 0 [ 476.054959][ T26] audit: type=1326 audit(1778188328.734:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8822 comm="syz.6.1300" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1057eccdd9 code=0x7ffc0000 [ 476.125246][ T26] audit: type=1326 audit(1778188328.744:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8822 comm="syz.6.1300" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1057eccdd9 code=0x7ffc0000 [ 476.226752][ T21] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 476.241877][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.265354][ T21] usb 4-1: Product: syz [ 476.270579][ T21] usb 4-1: Manufacturer: syz [ 476.275764][ T21] usb 4-1: SerialNumber: syz [ 476.349074][ T23] gspca_sunplus: reg_r err -110 [ 476.498560][ T8875] netlink: 'syz.4.1313': attribute type 4 has an invalid length. [ 476.507600][ T8875] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1313'. [ 478.249735][ T21] ch9200: probe of 4-1:2.31 failed with error -22 [ 478.266849][ T21] usb 4-1: USB disconnect, device number 19 [ 478.315554][ T9] device hsr_slave_0 left promiscuous mode [ 478.340362][ T9] device hsr_slave_1 left promiscuous mode [ 478.349811][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.357409][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.368685][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.378959][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.389456][ T9] device bridge_slave_1 left promiscuous mode [ 478.400866][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.421369][ T9] device bridge_slave_0 left promiscuous mode [ 478.428283][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.030448][ T8910] autofs4:pid:8910:autofs_fill_super: called with bogus options [ 479.929031][ T9] device veth1_macvtap left promiscuous mode [ 479.935217][ T9] device veth0_macvtap left promiscuous mode [ 479.981780][ T9] device veth1_vlan left promiscuous mode [ 479.987796][ T9] device veth0_vlan left promiscuous mode [ 480.886236][ T9] team0 (unregistering): Port device team_slave_1 removed [ 480.904590][ T9] team0 (unregistering): Port device team_slave_0 removed [ 480.921449][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.947095][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.022628][ T9] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 481.073267][ T9] bond0 (unregistering): Released all slaves [ 483.997713][ T8983] program syz.4.1330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 484.328284][ T8993] loop4: detected capacity change from 0 to 64 [ 484.680898][ T8997] attempt to access beyond end of device [ 484.680898][ T8997] loop4: rw=0, want=268435470, limit=64 [ 484.692385][ T8997] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 484.706050][ T8997] attempt to access beyond end of device [ 484.706050][ T8997] loop4: rw=0, want=268435470, limit=64 [ 484.717340][ T8997] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 485.836572][ T8956] dlm: no local IP address has been set [ 485.871739][ T8956] dlm: cannot start dlm midcomms -107 [ 487.377300][ T6102] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 488.639267][ T6102] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 488.650481][ T6102] usb 4-1: config 0 interface 0 has no altsetting 0 [ 488.809148][ T6102] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 488.839025][ T6102] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 488.869098][ T6102] usb 4-1: Product: syz [ 488.873435][ T6102] usb 4-1: Manufacturer: syz [ 488.878056][ T6102] usb 4-1: SerialNumber: syz [ 488.885867][ T6102] usb 4-1: config 0 descriptor?? [ 488.909304][ T9030] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 488.934684][ T6102] usb 4-1: selecting invalid altsetting 0 [ 489.000818][ T9055] kvm [9054]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x2000000800 [ 489.118037][ T9055] kvm [9054]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x2000000800 [ 489.141229][ T9055] kvm [9054]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x4000000000 [ 489.151415][ T9055] kvm [9054]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x4000000000 [ 489.180775][ T9059] chnl_net:caif_netlink_parms(): no params data found [ 489.206426][ T9055] kvm [9054]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x7800000000 [ 489.217412][ T9030] usb 4-1: selecting invalid altsetting 0 [ 489.235623][ T9055] kvm [9054]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x8000000000 [ 489.276165][ T9055] kvm [9054]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xf800000000 [ 489.287584][ T9055] kvm [9054]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 489.303076][ T9055] kvm [9054]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x2000000800 [ 489.313141][ T9055] kvm [9054]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x2000000800 [ 489.320672][ T9059] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.377291][ T9059] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.405106][ T9059] device bridge_slave_0 entered promiscuous mode [ 489.412052][ T9030] usb 4-1: 0:0: usb_set_interface failed (-22) [ 489.439337][ T9029] usb 4-1: selecting invalid altsetting 0 [ 489.440486][ T9059] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.462071][ T9029] usb 4-1: 0:0: usb_set_interface failed (-22) [ 489.478571][ T9059] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.486088][ T9029] usb 4-1: selecting invalid altsetting 0 [ 489.486146][ T9029] usb 4-1: 0:0: usb_set_interface failed (-22) [ 489.486274][ T9029] usb 4-1: selecting invalid altsetting 0 [ 489.486337][ T9029] usb 4-1: 0:0: usb_set_interface failed (-22) [ 489.487085][ T6102] usb 4-1: USB disconnect, device number 20 [ 489.518419][ T9059] device bridge_slave_1 entered promiscuous mode [ 489.632822][ T9059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.666896][ T9059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.713411][ T9059] team0: Port device team_slave_0 added [ 489.736004][ T9059] team0: Port device team_slave_1 added [ 489.792266][ T9059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.804056][ T9059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.813782][ T9085] loop1: detected capacity change from 0 to 64 [ 489.832550][ T9059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.853732][ T9059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.861551][ T9059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.888286][ T9059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.941807][ T9059] device hsr_slave_0 entered promiscuous mode [ 489.961120][ T9059] device hsr_slave_1 entered promiscuous mode [ 490.906652][ T9059] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 490.920071][ T9059] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 490.933770][ T9059] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 490.939101][ T23] Bluetooth: hci5: command 0x0409 tx timeout [ 490.951114][ T9059] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 491.064507][ T9059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.094301][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 491.103100][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 491.115513][ T9059] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.127225][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 491.258161][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 491.275816][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.283009][ T4336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.317110][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 491.366143][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 491.394255][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 491.403306][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.410458][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.418628][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 491.450818][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 491.469999][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 491.480661][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 491.508806][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 491.527074][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 491.572863][ T23] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 491.589646][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 491.606854][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 491.623711][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 491.635115][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 491.654132][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 493.320612][ T9059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 493.332664][ T1107] Bluetooth: hci5: command 0x041b tx timeout [ 493.567864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 493.583081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 493.609620][ T23] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 494.165552][ T23] usb 4-1: config 0 has no interface number 0 [ 494.167605][ T23] usb 4-1: config 0 interface 1 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 494.167646][ T23] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 494.167672][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.176951][ T23] usb 4-1: config 0 descriptor?? [ 494.185369][ T9059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.359292][ T23] usb 4-1: can't set config #0, error -71 [ 494.370214][ T23] usb 4-1: USB disconnect, device number 21 [ 495.416563][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 495.653704][ T9152] loop3: detected capacity change from 0 to 64 [ 495.696112][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 495.706229][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 495.741581][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 495.762656][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 495.801849][ T9059] device veth0_vlan entered promiscuous mode [ 495.813600][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 495.825240][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 495.848166][ T9059] device veth1_vlan entered promiscuous mode [ 496.677104][ T9059] device veth0_macvtap entered promiscuous mode [ 496.690564][ T9059] device veth1_macvtap entered promiscuous mode [ 496.709917][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 496.718092][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 496.769682][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 496.786142][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 496.810257][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 496.836701][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 496.865204][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.886709][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.903799][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.935502][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.951271][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.988719][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.002859][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.155056][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.165931][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.176943][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.200782][ T9059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.489551][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 497.610208][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.696451][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.238074][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.264893][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.272593][ T9187] overlayfs: failed to clone upperpath [ 498.280572][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.280599][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.280617][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.280631][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.330768][ T9059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.357528][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 498.367659][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 498.392204][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 498.408453][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 498.441930][ T9059] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.472301][ T9059] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.487760][ T9059] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.505942][ T9059] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.660568][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.677081][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.686640][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 498.736972][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.753333][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.790590][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 501.491580][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.498108][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.421494][ T9235] overlayfs: overlapping lowerdir path [ 503.451651][ T9231] overlayfs: overlapping lowerdir path [ 504.128934][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 504.359560][ T9258] autofs4:pid:9258:autofs_fill_super: called with bogus options [ 504.373352][ T9241] chnl_net:caif_netlink_parms(): no params data found [ 504.380551][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 504.659195][ T7] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 504.668736][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.759416][ T7] usb 2-1: Product: syz [ 504.763755][ T7] usb 2-1: Manufacturer: syz [ 504.768378][ T7] usb 2-1: SerialNumber: syz [ 504.863228][ T9241] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.891613][ T7] usb 2-1: config 0 descriptor?? [ 504.901896][ T9241] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.950706][ T7] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 504.958536][ T7] dvb-usb: bulk message failed: -22 (4/0) [ 504.990483][ T9241] device bridge_slave_0 entered promiscuous mode [ 504.998291][ T7] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 505.045148][ T9241] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.059528][ T7] dvb-usb: bulk message failed: -22 (5/0) [ 505.085809][ T9241] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.090046][ T7] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 505.132936][ T9241] device bridge_slave_1 entered promiscuous mode [ 505.183419][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 505.239352][ T7] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 505.258651][ T9254] dvb-usb: bulk message failed: -22 (7/0) [ 505.267646][ T7] usb 2-1: media controller created [ 505.287595][ T9241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.374481][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 505.376808][ T9241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.428830][ T9275] overlayfs: failed to clone upperpath [ 505.445208][ T9254] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 505.476053][ T7] usb 2-1: selecting invalid altsetting 3 [ 505.511295][ T7] ttusb2: set interface to alts=3 failed [ 505.551703][ T9241] team0: Port device team_slave_0 added [ 505.587262][ T9241] team0: Port device team_slave_1 added [ 505.648941][ T1107] Bluetooth: hci6: command 0x0409 tx timeout [ 505.675843][ T7] DVB: Unable to find symbol tda10086_attach() [ 505.683851][ T7] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 505.705377][ T9241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.732059][ T9241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.779092][ T7] dvb-usb: bulk message failed: -22 (4/0) [ 505.785699][ T7] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 505.829066][ T7] dvb-usb: bulk message failed: -22 (5/0) [ 505.847354][ T7] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 505.860977][ T9241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.880166][ T7] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 505.906545][ T9241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.951567][ T9241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.991891][ T9254] ttusb2: i2c transfer failed. [ 506.054208][ T9241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.188512][ T9241] device hsr_slave_0 entered promiscuous mode [ 506.212900][ T9241] device hsr_slave_1 entered promiscuous mode [ 506.248085][ T9241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.400846][ T9241] Cannot create hsr debugfs directory [ 506.752997][ T21] usb 2-1: USB disconnect, device number 8 [ 506.791390][ T21] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 507.197636][ T9241] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 507.232190][ T9241] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 507.292035][ T9241] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 507.322939][ T9241] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 507.495459][ T9241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.556874][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 507.572343][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 507.628276][ T9241] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.663007][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 507.698111][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 507.730100][ T7] Bluetooth: hci6: command 0x041b tx timeout [ 507.753898][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.756930][ T9322] syz.7.1382: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 507.761064][ T4441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.792721][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 507.815962][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 507.843780][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 507.865223][ T9322] ,cpuset=syz7,mems_allowed=0-1 [ 507.879427][ T4241] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.886563][ T4241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.897000][ T9322] CPU: 0 PID: 9322 Comm: syz.7.1382 Not tainted syzkaller #0 [ 507.904429][ T9322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 507.914517][ T9322] Call Trace: [ 507.917833][ T9322] [ 507.920798][ T9322] dump_stack_lvl+0x188/0x250 [ 507.925604][ T9322] ? rcu_lock_release+0x5/0x20 [ 507.930407][ T9322] ? show_regs_print_info+0x20/0x20 [ 507.935654][ T9322] ? load_image+0x400/0x400 [ 507.940294][ T9322] warn_alloc+0x243/0x320 [ 507.944657][ T9322] ? rcu_lock_release+0x20/0x20 [ 507.949550][ T9322] ? zone_watermark_ok_safe+0x240/0x240 [ 507.955139][ T9322] ? dvb_demux_do_ioctl+0x313/0x530 [ 507.960371][ T9322] ? kfree+0xef/0x2a0 [ 507.964396][ T9322] __vmalloc_node_range+0x2b1/0x8b0 [ 507.969715][ T9322] ? mutex_lock_io_nested+0x60/0x60 [ 507.974964][ T9322] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 507.980962][ T9322] vmalloc+0x75/0x80 [ 507.984935][ T9322] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 507.990791][ T9322] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 507.996481][ T9322] dvb_demux_do_ioctl+0x450/0x530 [ 508.001691][ T9322] dvb_usercopy+0x191/0x2b0 [ 508.006249][ T9322] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 508.011967][ T9322] ? dvb_generic_ioctl+0xb0/0xb0 [ 508.016984][ T9322] ? dvb_demux_poll+0x210/0x210 [ 508.021886][ T9322] dvb_demux_ioctl+0x25/0x30 [ 508.026523][ T9322] __se_sys_ioctl+0xfa/0x170 [ 508.031430][ T9322] do_syscall_64+0x4c/0xa0 [ 508.035885][ T9322] ? clear_bhb_loop+0x30/0x80 [ 508.040701][ T9322] ? clear_bhb_loop+0x30/0x80 [ 508.045416][ T9322] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 508.051346][ T9322] RIP: 0033:0x7fed1e3dddd9 [ 508.055780][ T9322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.075501][ T9322] RSP: 002b:00007fed1c5f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 508.084022][ T9322] RAX: ffffffffffffffda RBX: 00007fed1e657180 RCX: 00007fed1e3dddd9 [ 508.092086][ T9322] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 508.100063][ T9322] RBP: 00007fed1e473d69 R08: 0000000000000000 R09: 0000000000000000 [ 508.108471][ T9322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.116538][ T9322] R13: 00007fed1e657218 R14: 00007fed1e657180 R15: 00007ffd086790a8 [ 508.124525][ T9322] [ 508.189402][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 508.303910][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 508.321434][ T9322] Mem-Info: [ 508.324948][ T9322] active_anon:6026 inactive_anon:14387 isolated_anon:0 [ 508.324948][ T9322] active_file:23397 inactive_file:36368 isolated_file:0 [ 508.324948][ T9322] unevictable:768 dirty:171 writeback:0 [ 508.324948][ T9322] slab_reclaimable:18217 slab_unreclaimable:106927 [ 508.324948][ T9322] mapped:48058 shmem:13888 pagetables:910 bounce:0 [ 508.324948][ T9322] kernel_misc_reclaimable:0 [ 508.324948][ T9322] free:1328990 free_pcp:6056 free_cma:0 [ 508.367109][ C1] vkms_vblank_simulate: vblank timer overrun [ 508.794192][ T9322] Node 0 active_anon:24096kB inactive_anon:58716kB active_file:93164kB inactive_file:145472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:193524kB dirty:684kB writeback:0kB shmem:54676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11488kB pagetables:3640kB all_unreclaimable? no [ 509.188971][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 509.205670][ T9322] Node 1 active_anon:8kB inactive_anon:532kB active_file:424kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:208kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 509.235373][ C1] vkms_vblank_simulate: vblank timer overrun [ 509.252051][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 509.295958][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 509.318515][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 509.338559][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 509.351952][ T9322] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 509.379638][ T9322] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 509.385628][ T9322] Node 0 DMA32 free:1374012kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:24088kB inactive_anon:59516kB active_file:93164kB inactive_file:145472kB unevictable:1536kB writepending:692kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:25480kB local_pcp:6948kB free_cma:0kB [ 509.389850][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 509.416030][ C1] vkms_vblank_simulate: vblank timer overrun [ 509.423131][ T9322] lowmem_reserve[]: 0 0 0 0 0 [ 509.440598][ T9322] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 509.466459][ C1] vkms_vblank_simulate: vblank timer overrun [ 509.478985][ T9322] lowmem_reserve[]: 0 0 0 0 0 [ 509.484199][ T9322] Node 1 Normal free:3920736kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:8kB inactive_anon:532kB active_file:424kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 509.514553][ T9322] lowmem_reserve[]: 0 0 0 0 0 [ 509.523744][ T9322] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 509.681868][ T9322] Node 0 DMA32: 9*4kB (UME) 36*8kB (ME) 142*16kB (E) 291*32kB (UME) 227*64kB (ME) 100*128kB (UME) 90*256kB (ME) 61*512kB (ME) 16*1024kB (ME) 3*2048kB (UM) 307*4096kB (M) = 1373508kB [ 509.689825][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 509.700523][ C1] vkms_vblank_simulate: vblank timer overrun [ 509.714496][ T9322] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 509.728954][ T9322] Node 1 Normal: 236*4kB (UME) 48*8kB (UME) 25*16kB (UME) 171*32kB (UME) 81*64kB (UME) 24*128kB (UE) 13*256kB (UE) 5*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 950*4096kB (M) = 3920736kB [ 510.168579][ T7] Bluetooth: hci6: command 0x040f tx timeout [ 510.221875][ T9241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 510.266902][ T9322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 510.309343][ T9322] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 510.358816][ T9322] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 510.385590][ T9322] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 510.418924][ T9322] 74923 total pagecache pages [ 510.446801][ T9322] 0 pages in swap cache [ 510.452055][ T9322] Swap cache stats: add 6422, delete 6422, find 1359/1598 [ 510.464311][ T9322] Free swap = 124660kB [ 510.468745][ T9322] Total swap = 124996kB [ 510.476295][ T9322] 2097051 pages RAM [ 510.482284][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 510.485226][ T9322] 0 pages HighMem/MovableOnly [ 510.502385][ T9322] 411492 pages reserved [ 510.506557][ T9322] 0 pages cma reserved [ 510.518783][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 510.764710][ T9241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.796285][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 510.832404][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 512.209615][ T1107] Bluetooth: hci6: command 0x0419 tx timeout [ 512.688316][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 512.710314][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 512.747784][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 512.759761][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 512.822649][ T9241] device veth0_vlan entered promiscuous mode [ 513.404316][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 513.424364][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 513.483908][ T9241] device veth1_vlan entered promiscuous mode [ 513.541517][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 513.555209][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 513.560576][ T9417] loop3: detected capacity change from 0 to 128 [ 513.584143][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 513.608117][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 513.642235][ T9241] device veth0_macvtap entered promiscuous mode [ 513.672495][ T9241] device veth1_macvtap entered promiscuous mode [ 513.692488][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 513.710512][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 513.750240][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.769881][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.791035][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.842871][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.854298][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.866072][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.878903][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.890409][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.942157][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.968998][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.979764][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.993648][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.010628][ T9241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.035013][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 514.064938][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 514.181307][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.263962][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.306228][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.344192][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.384907][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.421375][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.472246][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.530811][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.569285][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.601601][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.679894][ T9241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.743318][ T9241] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.839578][ T9431] autofs4:pid:9431:autofs_fill_super: called with bogus options [ 515.072009][ T9241] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.098973][ T9241] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.121063][ T9241] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.833439][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 515.842700][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 515.859170][ T9432] vcan0: MTU too low for tipc bearer [ 515.864631][ T9432] tipc: Enabling of bearer rejected, failed to enable media [ 516.644690][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.657730][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.678946][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 516.715840][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.726685][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.738143][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 517.875503][ T9457] loop8: detected capacity change from 0 to 64 [ 518.232873][ T9458] attempt to access beyond end of device [ 518.232873][ T9458] loop8: rw=0, want=268435470, limit=64 [ 518.244068][ T9458] Buffer I/O error on dev loop8, logical block 134217734, async page read [ 518.253361][ T9458] attempt to access beyond end of device [ 518.253361][ T9458] loop8: rw=0, want=268435470, limit=64 [ 518.265141][ T9458] Buffer I/O error on dev loop8, logical block 134217734, async page read [ 522.370379][ T6102] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 522.779560][ T6102] usb 2-1: unable to get BOS descriptor or descriptor too short [ 523.469233][ T6102] usb 2-1: config 1 has an invalid interface number: 5 but max is 0 [ 523.500949][ T6102] usb 2-1: config 1 has no interface number 0 [ 524.602305][ T6102] usb 2-1: config 1 interface 5 has no altsetting 0 [ 525.013433][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1424'. [ 525.073712][ T9546] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1424'. [ 525.133092][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1424'. [ 525.149091][ T6102] usb 2-1: string descriptor 0 read error: -71 [ 525.155383][ T6102] usb 2-1: New USB device found, idVendor=2dee, idProduct=4d22, bcdDevice=f5.d3 [ 525.252994][ T6102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.440298][ T6102] usb 2-1: can't set config #1, error -71 [ 525.460871][ T6102] usb 2-1: USB disconnect, device number 9 [ 525.534276][ T9552] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1425'. [ 525.817265][ T9557] serio: Serial port ttyS3 [ 525.829134][ T4270] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 526.089073][ T4270] usb 4-1: Using ep0 maxpacket: 32 [ 526.269256][ T4270] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 526.290519][ T4270] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 526.307900][ T4270] usb 4-1: config 0 interface 0 has no altsetting 0 [ 526.315439][ T4270] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 526.329392][ T4270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.442949][ T4270] usb 4-1: config 0 descriptor?? [ 526.562906][ T9574] syz.8.1431: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 526.577601][ T9574] CPU: 0 PID: 9574 Comm: syz.8.1431 Not tainted syzkaller #0 [ 526.585092][ T9574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 526.595168][ T9574] Call Trace: [ 526.598466][ T9574] [ 526.601415][ T9574] dump_stack_lvl+0x188/0x250 [ 526.606119][ T9574] ? rcu_lock_release+0x5/0x20 [ 526.610996][ T9574] ? show_regs_print_info+0x20/0x20 [ 526.616216][ T9574] ? load_image+0x400/0x400 [ 526.620745][ T9574] ? __rcu_read_unlock+0x78/0xd0 [ 526.625717][ T9574] warn_alloc+0x243/0x320 [ 526.630075][ T9574] ? rcu_lock_release+0x20/0x20 [ 526.634962][ T9574] ? zone_watermark_ok_safe+0x240/0x240 [ 526.640625][ T9574] ? kfree+0xef/0x2a0 [ 526.644810][ T9574] __vmalloc_node_range+0x2b1/0x8b0 [ 526.650047][ T9574] ? mutex_lock_io_nested+0x60/0x60 [ 526.655448][ T9574] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 526.661624][ T9574] vmalloc+0x75/0x80 [ 526.665544][ T9574] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 526.671478][ T9574] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 526.677490][ T9574] dvb_demux_do_ioctl+0x450/0x530 [ 526.682543][ T9574] dvb_usercopy+0x191/0x2b0 [ 526.687073][ T9574] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 526.693262][ T9574] ? dvb_generic_ioctl+0xb0/0xb0 [ 526.698246][ T9574] ? dvb_demux_poll+0x210/0x210 [ 526.703222][ T9574] dvb_demux_ioctl+0x25/0x30 [ 526.707835][ T9574] __se_sys_ioctl+0xfa/0x170 [ 526.712457][ T9574] do_syscall_64+0x4c/0xa0 [ 526.716896][ T9574] ? clear_bhb_loop+0x30/0x80 [ 526.721690][ T9574] ? clear_bhb_loop+0x30/0x80 [ 526.726389][ T9574] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 526.732313][ T9574] RIP: 0033:0x7fbd14309dd9 [ 526.736877][ T9574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.756822][ T9574] RSP: 002b:00007fbd12521028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 526.765911][ T9574] RAX: ffffffffffffffda RBX: 00007fbd14583180 RCX: 00007fbd14309dd9 [ 526.774188][ T9574] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 526.782618][ T9574] RBP: 00007fbd1439fd69 R08: 0000000000000000 R09: 0000000000000000 [ 526.791496][ T9574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.799586][ T9574] R13: 00007fbd14583218 R14: 00007fbd14583180 R15: 00007fff61342738 [ 526.807848][ T9574] [ 526.813035][ T9574] Mem-Info: [ 526.816692][ T9574] active_anon:6048 inactive_anon:10443 isolated_anon:0 [ 526.816692][ T9574] active_file:23404 inactive_file:36368 isolated_file:0 [ 526.816692][ T9574] unevictable:768 dirty:74 writeback:10 [ 526.816692][ T9574] slab_reclaimable:18201 slab_unreclaimable:108136 [ 526.816692][ T9574] mapped:39333 shmem:10266 pagetables:880 bounce:0 [ 526.816692][ T9574] kernel_misc_reclaimable:0 [ 526.816692][ T9574] free:1339581 free_pcp:7720 free_cma:0 [ 526.860312][ T9574] Node 0 active_anon:24184kB inactive_anon:41240kB active_file:93192kB inactive_file:145472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157112kB dirty:296kB writeback:40kB shmem:38988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11716kB pagetables:3520kB all_unreclaimable? no [ 526.892111][ T9574] Node 1 active_anon:8kB inactive_anon:532kB active_file:424kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:220kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 526.921633][ T9574] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 526.948009][ T9574] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 526.953794][ T9574] Node 0 DMA32 free:1422196kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:24184kB inactive_anon:41240kB active_file:93192kB inactive_file:145472kB unevictable:1536kB writepending:336kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:30880kB local_pcp:11672kB free_cma:0kB [ 526.983997][ T9574] lowmem_reserve[]: 0 0 0 0 0 [ 526.988706][ T9574] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 527.018890][ T9574] lowmem_reserve[]: 0 0 0 0 0 [ 527.023866][ T9574] Node 1 Normal free:3920768kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:8kB inactive_anon:532kB active_file:424kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 527.052744][ T9574] lowmem_reserve[]: 0 0 0 0 0 [ 527.057468][ T9574] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 527.070088][ T9574] Node 0 DMA32: 97*4kB (UME) 393*8kB (UME) 606*16kB (UME) 692*32kB (UME) 300*64kB (UME) 153*128kB (UME) 102*256kB (UME) 66*512kB (UME) 24*1024kB (UME) 7*2048kB (UM) 305*4096kB (M) = 1422252kB [ 527.089290][ T9574] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 527.100814][ T9574] Node 1 Normal: 236*4kB (UME) 48*8kB (UME) 25*16kB (UME) 172*32kB (UME) 81*64kB (UME) 24*128kB (UE) 13*256kB (UE) 5*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 950*4096kB (M) = 3920768kB [ 527.119332][ T9574] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 527.129158][ T9574] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 527.138605][ T9574] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 527.148209][ T9574] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 527.158102][ T9574] 70035 total pagecache pages [ 527.162828][ T9574] 0 pages in swap cache [ 527.167065][ T9574] Swap cache stats: add 8157, delete 8157, find 1359/1598 [ 527.174227][ T9574] Free swap = 124640kB [ 527.178380][ T9574] Total swap = 124996kB [ 527.182557][ T9574] 2097051 pages RAM [ 527.186354][ T9574] 0 pages HighMem/MovableOnly [ 527.191162][ T9574] 411492 pages reserved [ 527.195321][ T9574] 0 pages cma reserved [ 527.311229][ T4310] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.333852][ T9577] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1433'. [ 527.387451][ T4310] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.535116][ T4270] corsair-psu 0003:1B1C:1C09.0006: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 527.625663][ T9584] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1435'. [ 528.298068][ T4270] corsair-psu 0003:1B1C:1C09.0006: unable to initialize device (-90) [ 528.310694][ T4310] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.319243][ T4270] corsair-psu: probe of 0003:1B1C:1C09.0006 failed with error -90 [ 528.479646][ T4310] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.550774][ T4237] usb 4-1: USB disconnect, device number 22 [ 528.675989][ T9598] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1439'. [ 528.871313][ T4310] tipc: Disabling bearer [ 528.877759][ T4310] tipc: Left network mode [ 530.942404][ T9059] cgroup: fork rejected by pids controller in /syz7 [ 532.942168][ T9641] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.070987][ T4310] device hsr_slave_0 left promiscuous mode [ 534.077325][ T4310] device hsr_slave_1 left promiscuous mode [ 534.088240][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.117726][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.136958][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.152013][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.160071][ T4310] device vlan2 left promiscuous mode [ 534.165365][ T4310] device geneve0 left promiscuous mode [ 534.198248][ T4310] bridge0: port 3(vlan2) entered disabled state [ 534.236915][ T4310] device bridge_slave_1 left promiscuous mode [ 534.280364][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.293413][ T4310] device bridge_slave_0 left promiscuous mode [ 534.317131][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.880645][ T4310] device veth1_macvtap left promiscuous mode [ 534.888691][ T4310] device veth0_macvtap left promiscuous mode [ 534.914023][ T4310] device veth1_vlan left promiscuous mode [ 534.919981][ T4310] device veth0_vlan left promiscuous mode [ 536.172573][ T9675] input: syz1 as /devices/virtual/input/input8 [ 536.289044][ T4270] Bluetooth: hci1: command 0x0409 tx timeout [ 536.344173][ T4310] team0 (unregistering): Port device team_slave_1 removed [ 536.377595][ T4310] team0 (unregistering): Port device team_slave_0 removed [ 536.407616][ T4310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.425950][ T4310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.679359][ T4310] bond0 (unregistering): Released all slaves [ 537.038351][ T9684] netlink: 'syz.8.1459': attribute type 1 has an invalid length. [ 537.253630][ T9685] device bond1 entered promiscuous mode [ 537.276952][ T9685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 538.234207][ T9660] chnl_net:caif_netlink_parms(): no params data found [ 538.369542][ T4270] Bluetooth: hci1: command 0x041b tx timeout [ 538.779620][ T9660] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.787358][ T9660] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.796252][ T9660] device bridge_slave_0 entered promiscuous mode [ 538.805368][ T9660] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.813219][ T9660] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.830153][ T9660] device bridge_slave_1 entered promiscuous mode [ 538.888524][ T9660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.903585][ T9660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.943825][ T9660] team0: Port device team_slave_0 added [ 539.075055][ T9660] team0: Port device team_slave_1 added [ 539.174721][ T9660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.256809][ T9660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.389068][ T9660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.949447][ T9660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.956455][ T9660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.052586][ T9660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.155881][ T4270] Bluetooth: hci1: command 0x040f tx timeout [ 541.463419][ T9660] device hsr_slave_0 entered promiscuous mode [ 541.482030][ T9660] device hsr_slave_1 entered promiscuous mode [ 542.227665][ T9660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.248944][ T9660] Cannot create hsr debugfs directory [ 542.260701][ T26] audit: type=1326 audit(1778188394.944:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9746 comm="syz.8.1471" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd14309dd9 code=0x0 [ 542.284545][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.665635][ T9660] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.841028][ T9660] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.977994][ T9660] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.168927][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 543.382963][ T9660] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.705545][ T9660] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 545.743725][ T9660] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 545.861704][ T9660] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 545.893335][ T9660] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 546.084367][ T9660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.152466][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 546.161655][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 546.192561][ T9660] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.216955][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 546.255042][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 546.279919][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.287174][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.339531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 546.362866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 546.399795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 546.439438][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.446733][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.524147][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 546.587537][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 546.599957][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 546.633094][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 546.650213][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 546.672294][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 546.710128][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 546.739561][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 546.752891][ T9660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 546.793290][ T9660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 546.824117][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 546.853519][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 546.875814][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 547.393249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 547.403728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 547.647276][ T2302] Bluetooth: hci1: command 0x0405 tx timeout [ 547.656586][ T9660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.809180][ T21] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 551.596818][ T9541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 551.609883][ T9541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 551.641532][ T9541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 551.665040][ T9541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 551.707204][ T9660] device veth0_vlan entered promiscuous mode [ 551.720516][ T9541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 551.742652][ T9541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 551.767577][ T9660] device veth1_vlan entered promiscuous mode [ 551.835361][ T9541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 551.851028][ T9541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 551.877588][ T9660] device veth0_macvtap entered promiscuous mode [ 551.912564][ T9660] device veth1_macvtap entered promiscuous mode [ 551.969094][ T21] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 551.986441][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.009535][ T21] usb 4-1: Product: syz [ 552.020218][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.035048][ T21] usb 4-1: Manufacturer: syz [ 552.056588][ T21] usb 4-1: SerialNumber: syz [ 552.063351][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.183393][ T9854] trusted_key: encrypted_key: insufficient parameters specified [ 552.196331][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.206991][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.216935][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.229507][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.263427][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.350980][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.366481][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.378303][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.261435][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.272238][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.285274][ T9660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.350468][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 553.360336][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 553.381954][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 554.097996][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 554.126445][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.571146][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.581119][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.623307][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.637591][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.653541][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.667907][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.683797][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.698581][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.722060][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.748783][ T9660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.787494][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 554.801212][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 554.968670][ T9660] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.041028][ T9660] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.105858][ T9660] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.205962][ T9660] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.668299][ T21] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71 [ 555.680589][ T21] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 555.692320][ T21] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 555.702418][ T21] lan78xx: probe of 4-1:1.0 failed with error -71 [ 555.725173][ T21] usb 4-1: USB disconnect, device number 23 [ 555.760341][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.768984][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.776680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 556.000902][ T9538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.018683][ T9893] trusted_key: encrypted_key: insufficient parameters specified [ 556.059866][ T9538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.069288][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 557.297721][ T9928] loop7: detected capacity change from 0 to 64 [ 557.307460][ T9927] overlayfs: failed to clone upperpath [ 559.984074][ T9940] attempt to access beyond end of device [ 559.984074][ T9940] loop7: rw=0, want=268435470, limit=64 [ 559.995527][ T9940] Buffer I/O error on dev loop7, logical block 134217734, async page read [ 560.004995][ T9940] attempt to access beyond end of device [ 560.004995][ T9940] loop7: rw=0, want=268435470, limit=64 [ 560.017241][ T9940] Buffer I/O error on dev loop7, logical block 134217734, async page read [ 561.522376][ T4310] device hsr_slave_0 left promiscuous mode [ 561.561828][ T4310] device hsr_slave_1 left promiscuous mode [ 561.572924][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.602271][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.635867][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.671224][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.707002][ T4310] device bridge_slave_1 left promiscuous mode [ 561.723969][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.749685][ T4310] device bridge_slave_0 left promiscuous mode [ 561.762513][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.802845][ T4310] device veth1_macvtap left promiscuous mode [ 561.823137][ T4310] device veth0_macvtap left promiscuous mode [ 561.839450][ T4310] device veth1_vlan left promiscuous mode [ 561.852986][ T4310] device veth0_vlan left promiscuous mode [ 562.050786][ T9965] trusted_key: encrypted_key: insufficient parameters specified [ 562.519151][ T5371] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 562.702962][ T4310] team0 (unregistering): Port device team_slave_1 removed [ 562.736684][ T4310] team0 (unregistering): Port device team_slave_0 removed [ 562.759559][ T4310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.818937][ T5371] usb 9-1: Using ep0 maxpacket: 16 [ 562.825678][ T4310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.930972][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.937479][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.969347][ T5371] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.983659][ T5371] usb 9-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 563.118425][ T5371] usb 9-1: config 0 interface 0 has no altsetting 0 [ 563.137385][ T5371] usb 9-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 563.171521][ T5371] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.201557][ T4310] bond0 (unregistering): Released all slaves [ 563.225637][ T5371] usb 9-1: config 0 descriptor?? [ 563.550485][ T9999] tipc: Can't bind to reserved service type 1 [ 564.850836][T10011] trusted_key: encrypted_key: insufficient parameters specified [ 565.376759][ T5371] usbhid 9-1:0.0: can't add hid device: -71 [ 565.384402][ T5371] usbhid: probe of 9-1:0.0 failed with error -71 [ 565.438101][ T5371] usb 9-1: USB disconnect, device number 2 [ 565.866303][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1532'. [ 567.864417][T10065] trusted_key: encrypted_key: insufficient parameters specified [ 572.320915][T10134] syz.1.1548: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 572.336363][T10134] CPU: 0 PID: 10134 Comm: syz.1.1548 Not tainted syzkaller #0 [ 572.343855][T10134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 572.354017][T10134] Call Trace: [ 572.357378][T10134] [ 572.360395][T10134] dump_stack_lvl+0x188/0x250 [ 572.365415][T10134] ? rcu_lock_release+0x5/0x20 [ 572.370291][T10134] ? show_regs_print_info+0x20/0x20 [ 572.375558][T10134] ? load_image+0x400/0x400 [ 572.380194][T10134] ? __rcu_read_unlock+0x78/0xd0 [ 572.385169][T10134] warn_alloc+0x243/0x320 [ 572.389525][T10134] ? rcu_lock_release+0x20/0x20 [ 572.394403][T10134] ? zone_watermark_ok_safe+0x240/0x240 [ 572.399983][T10134] ? rcu_lock_release+0xa/0x20 [ 572.404871][T10134] __vmalloc_node_range+0x2b1/0x8b0 [ 572.410448][T10134] ? mutex_lock_io_nested+0x60/0x60 [ 572.415768][T10134] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 572.421686][T10134] vmalloc+0x75/0x80 [ 572.425616][T10134] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 572.431454][T10134] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 572.437122][T10134] dvb_demux_do_ioctl+0x450/0x530 [ 572.442173][T10134] dvb_usercopy+0x191/0x2b0 [ 572.446792][T10134] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 572.452497][T10134] ? dvb_generic_ioctl+0xb0/0xb0 [ 572.457480][T10134] ? dvb_demux_poll+0x210/0x210 [ 572.462631][T10134] dvb_demux_ioctl+0x25/0x30 [ 572.467335][T10134] __se_sys_ioctl+0xfa/0x170 [ 572.471948][T10134] do_syscall_64+0x4c/0xa0 [ 572.476381][T10134] ? clear_bhb_loop+0x30/0x80 [ 572.481075][T10134] ? clear_bhb_loop+0x30/0x80 [ 572.485795][T10134] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 572.491711][T10134] RIP: 0033:0x7f94d9926dd9 [ 572.496177][T10134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.515812][T10134] RSP: 002b:00007f94d7b3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 572.524254][T10134] RAX: ffffffffffffffda RBX: 00007f94d9ba0180 RCX: 00007f94d9926dd9 [ 572.532513][T10134] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 572.540510][T10134] RBP: 00007f94d99bcd69 R08: 0000000000000000 R09: 0000000000000000 [ 572.548497][T10134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.556502][T10134] R13: 00007f94d9ba0218 R14: 00007f94d9ba0180 R15: 00007ffdfd92b498 [ 572.564512][T10134] [ 572.569239][T10134] Mem-Info: [ 572.572446][T10134] active_anon:6038 inactive_anon:10983 isolated_anon:0 [ 572.572446][T10134] active_file:23423 inactive_file:36412 isolated_file:0 [ 572.572446][T10134] unevictable:768 dirty:163 writeback:0 [ 572.572446][T10134] slab_reclaimable:18215 slab_unreclaimable:103007 [ 572.572446][T10134] mapped:39340 shmem:10273 pagetables:934 bounce:0 [ 572.572446][T10134] kernel_misc_reclaimable:0 [ 572.572446][T10134] free:1344254 free_pcp:3872 free_cma:0 [ 572.615731][T10134] Node 0 active_anon:24144kB inactive_anon:43400kB active_file:93268kB inactive_file:145648kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157204kB dirty:652kB writeback:0kB shmem:39016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11596kB pagetables:3736kB all_unreclaimable? no [ 572.647220][T10134] Node 1 active_anon:8kB inactive_anon:532kB active_file:424kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:156kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 572.676438][T10134] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 572.702924][T10134] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 572.708776][T10134] Node 0 DMA32 free:1440888kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:24144kB inactive_anon:43400kB active_file:93268kB inactive_file:145648kB unevictable:1536kB writepending:652kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:15488kB local_pcp:8948kB free_cma:0kB [ 572.738930][T10134] lowmem_reserve[]: 0 0 0 0 0 [ 572.743638][T10134] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 572.773502][T10134] lowmem_reserve[]: 0 0 0 0 0 [ 572.778299][T10134] Node 1 Normal free:3920768kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:8kB inactive_anon:532kB active_file:424kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 572.806975][T10134] lowmem_reserve[]: 0 0 0 0 0 [ 572.811717][T10134] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 572.824344][T10134] Node 0 DMA32: 804*4kB (UME) 603*8kB (UME) 891*16kB (UME) 791*32kB (UME) 388*64kB (UME) 211*128kB (UME) 88*256kB (UME) 68*512kB (UME) 20*1024kB (UME) 7*2048kB (UM) 305*4096kB (M) = 1440888kB [ 572.843463][T10134] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 572.854959][T10134] Node 1 Normal: 236*4kB (UME) 48*8kB (UME) 25*16kB (UME) 172*32kB (UME) 81*64kB (UME) 24*128kB (UE) 13*256kB (UE) 5*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 950*4096kB (M) = 3920768kB [ 572.873395][T10134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 572.882983][T10134] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 572.893001][T10134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 572.902793][T10134] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 572.912104][T10134] 70105 total pagecache pages [ 572.916769][T10134] 0 pages in swap cache [ 572.920923][T10134] Swap cache stats: add 8157, delete 8157, find 1359/1598 [ 572.928295][T10134] Free swap = 124640kB [ 572.932451][T10134] Total swap = 124996kB [ 572.936678][T10134] 2097051 pages RAM [ 572.940492][T10134] 0 pages HighMem/MovableOnly [ 572.945440][T10134] 411492 pages reserved [ 572.949633][T10134] 0 pages cma reserved [ 577.191236][T10178] loop3: detected capacity change from 0 to 64 [ 579.604906][T10197] netlink: 'syz.5.1566': attribute type 4 has an invalid length. [ 579.612718][T10197] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1566'. [ 579.625869][T10197] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 582.464511][T10266] netlink: 'syz.7.1577': attribute type 4 has an invalid length. [ 582.472517][T10266] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1577'. [ 585.814349][ T1107] Bluetooth: hci2: command 0x0406 tx timeout [ 587.331340][T10333] warn_alloc: 1 callbacks suppressed [ 587.331380][T10333] syz.7.1587: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz7,mems_allowed=0-1 [ 587.351558][T10333] CPU: 1 PID: 10333 Comm: syz.7.1587 Not tainted syzkaller #0 [ 587.359054][T10333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 587.369332][T10333] Call Trace: [ 587.372642][T10333] [ 587.375609][T10333] dump_stack_lvl+0x188/0x250 [ 587.380326][T10333] ? rcu_lock_release+0x5/0x20 [ 587.385136][T10333] ? show_regs_print_info+0x20/0x20 [ 587.390364][T10333] ? load_image+0x400/0x400 [ 587.394980][T10333] ? __rcu_read_unlock+0x78/0xd0 [ 587.400207][T10333] warn_alloc+0x243/0x320 [ 587.404652][T10333] ? rcu_lock_release+0x20/0x20 [ 587.409526][T10333] ? finish_task_switch+0x12f/0x640 [ 587.414752][T10333] ? zone_watermark_ok_safe+0x240/0x240 [ 587.420328][T10333] ? dvb_demux_do_ioctl+0x313/0x530 [ 587.425559][T10333] ? kfree+0xef/0x2a0 [ 587.429570][T10333] __vmalloc_node_range+0x2b1/0x8b0 [ 587.434879][T10333] ? mutex_lock_io_nested+0x60/0x60 [ 587.440109][T10333] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 587.445941][T10333] vmalloc+0x75/0x80 [ 587.449857][T10333] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 587.455686][T10333] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 587.461351][T10333] dvb_demux_do_ioctl+0x450/0x530 [ 587.466406][T10333] dvb_usercopy+0x191/0x2b0 [ 587.470937][T10333] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 587.476506][T10333] ? dvb_generic_ioctl+0xb0/0xb0 [ 587.481584][T10333] ? bpf_lsm_file_ioctl+0x5/0x10 [ 587.486562][T10333] ? __sanitizer_cov_trace_pc+0x32/0x60 [ 587.492232][T10333] ? dvb_demux_poll+0x210/0x210 [ 587.497121][T10333] dvb_demux_ioctl+0x25/0x30 [ 587.501741][T10333] __se_sys_ioctl+0xfa/0x170 [ 587.506617][T10333] do_syscall_64+0x4c/0xa0 [ 587.511169][T10333] ? clear_bhb_loop+0x30/0x80 [ 587.515977][T10333] ? clear_bhb_loop+0x30/0x80 [ 587.520764][T10333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 587.526682][T10333] RIP: 0033:0x7f34ea3a5dd9 [ 587.531126][T10333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.551075][T10333] RSP: 002b:00007f34e85bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.559545][T10333] RAX: ffffffffffffffda RBX: 00007f34ea61f180 RCX: 00007f34ea3a5dd9 [ 587.567643][T10333] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 587.575724][T10333] RBP: 00007f34ea43bd69 R08: 0000000000000000 R09: 0000000000000000 [ 587.583727][T10333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.591744][T10333] R13: 00007f34ea61f218 R14: 00007f34ea61f180 R15: 00007ffd89d30178 [ 587.599851][T10333] [ 587.603034][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.609781][T10333] Mem-Info: [ 587.612959][T10333] active_anon:6042 inactive_anon:10990 isolated_anon:0 [ 587.612959][T10333] active_file:23429 inactive_file:36412 isolated_file:0 [ 587.612959][T10333] unevictable:768 dirty:25 writeback:0 [ 587.612959][T10333] slab_reclaimable:18191 slab_unreclaimable:103936 [ 587.612959][T10333] mapped:39372 shmem:10281 pagetables:972 bounce:0 [ 587.612959][T10333] kernel_misc_reclaimable:0 [ 587.612959][T10333] free:1341950 free_pcp:5428 free_cma:0 [ 587.655270][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.661659][T10333] Node 0 active_anon:24160kB inactive_anon:43428kB active_file:93292kB inactive_file:145648kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157276kB dirty:100kB writeback:0kB shmem:39048kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11648kB pagetables:3888kB all_unreclaimable? no [ 587.693141][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.699313][T10333] Node 1 active_anon:8kB inactive_anon:532kB active_file:424kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:212kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 587.728980][T10333] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 587.755231][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.765176][T10333] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 587.771011][T10333] Node 0 DMA32 free:1431448kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:24160kB inactive_anon:43528kB active_file:93292kB inactive_file:145648kB unevictable:1536kB writepending:100kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:21736kB local_pcp:5364kB free_cma:0kB [ 587.801329][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.807468][T10333] lowmem_reserve[]: 0 0 0 0 0 [ 587.812242][T10333] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 587.837956][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.844098][T10333] lowmem_reserve[]: 0 0 0 0 0 [ 587.848873][T10333] Node 1 Normal free:3920544kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:8kB inactive_anon:532kB active_file:424kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:64kB free_cma:0kB [ 587.877531][T10333] lowmem_reserve[]: 0 0 0 0 0 [ 587.882358][T10333] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 587.895258][T10333] Node 0 DMA32: 1374*4kB (UME) 694*8kB (UME) 459*16kB (UME) 746*32kB (UME) 324*64kB (UME) 211*128kB (UME) 88*256kB (UME) 68*512kB (UME) 20*1024kB (UME) 7*2048kB (UM) 305*4096kB (M) = 1431448kB [ 587.914592][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.920657][T10333] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 587.932204][T10333] Node 1 Normal: 236*4kB (UME) 48*8kB (UME) 20*16kB (UME) 168*32kB (UME) 81*64kB (UME) 24*128kB (UE) 13*256kB (UE) 5*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 950*4096kB (M) = 3920560kB [ 587.951117][T10333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 587.961089][T10333] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 587.970502][T10333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 587.980066][T10333] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 587.989448][T10333] 70119 total pagecache pages [ 587.994112][T10333] 0 pages in swap cache [ 587.998565][T10333] Swap cache stats: add 8161, delete 8161, find 1359/1599 [ 588.005739][T10333] Free swap = 124640kB [ 588.009964][T10333] Total swap = 124996kB [ 588.014258][T10333] 2097051 pages RAM [ 588.018261][T10333] 0 pages HighMem/MovableOnly [ 588.022953][T10333] 411492 pages reserved [ 588.027097][T10333] 0 pages cma reserved [ 588.258125][T10337] loop7: detected capacity change from 0 to 64 [ 589.024702][T10357] attempt to access beyond end of device [ 589.024702][T10357] loop7: rw=0, want=268435470, limit=64 [ 589.036123][T10357] Buffer I/O error on dev loop7, logical block 134217734, async page read [ 589.045738][T10357] attempt to access beyond end of device [ 589.045738][T10357] loop7: rw=0, want=268435470, limit=64 [ 589.056858][T10357] Buffer I/O error on dev loop7, logical block 134217734, async page read [ 597.652354][T10494] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1625'. [ 598.867238][T10520] binder: 10517:10520 ioctl c0306201 0 returned -14 [ 598.916672][T10521] warn_alloc: 1 callbacks suppressed [ 598.916711][T10521] syz.1.1629: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 598.936819][T10521] CPU: 0 PID: 10521 Comm: syz.1.1629 Not tainted syzkaller #0 [ 598.944409][T10521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 598.955623][T10521] Call Trace: [ 598.958941][T10521] [ 598.962065][T10521] dump_stack_lvl+0x188/0x250 [ 598.966769][T10521] ? rcu_lock_release+0x5/0x20 [ 598.971593][T10521] ? show_regs_print_info+0x20/0x20 [ 598.976818][T10521] ? load_image+0x400/0x400 [ 598.981364][T10521] ? __rcu_read_unlock+0x78/0xd0 [ 598.986606][T10521] warn_alloc+0x243/0x320 [ 598.991139][T10521] ? rcu_lock_release+0x20/0x20 [ 598.996280][T10521] ? zone_watermark_ok_safe+0x240/0x240 [ 599.001868][T10521] ? kfree+0xef/0x2a0 [ 599.006230][T10521] __vmalloc_node_range+0x2b1/0x8b0 [ 599.011584][T10521] ? mutex_lock_io_nested+0x60/0x60 [ 599.016838][T10521] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 599.022892][T10521] vmalloc+0x75/0x80 [ 599.026838][T10521] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 599.032692][T10521] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 599.038375][T10521] dvb_demux_do_ioctl+0x450/0x530 [ 599.043651][T10521] dvb_usercopy+0x191/0x2b0 [ 599.048303][T10521] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 599.054075][T10521] ? dvb_generic_ioctl+0xb0/0xb0 [ 599.059366][T10521] ? dvb_demux_poll+0x210/0x210 [ 599.064281][T10521] dvb_demux_ioctl+0x25/0x30 [ 599.068904][T10521] __se_sys_ioctl+0xfa/0x170 [ 599.073530][T10521] do_syscall_64+0x4c/0xa0 [ 599.078058][T10521] ? clear_bhb_loop+0x30/0x80 [ 599.082758][T10521] ? clear_bhb_loop+0x30/0x80 [ 599.087462][T10521] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 599.093378][T10521] RIP: 0033:0x7f94d9926dd9 [ 599.097818][T10521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.117535][T10521] RSP: 002b:00007f94d7b3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.126329][T10521] RAX: ffffffffffffffda RBX: 00007f94d9ba0180 RCX: 00007f94d9926dd9 [ 599.134417][T10521] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 599.142408][T10521] RBP: 00007f94d99bcd69 R08: 0000000000000000 R09: 0000000000000000 [ 599.150673][T10521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.158758][T10521] R13: 00007f94d9ba0218 R14: 00007f94d9ba0180 R15: 00007ffdfd92b498 [ 599.166855][T10521] [ 599.170826][T10521] Mem-Info: [ 599.174170][T10521] active_anon:8166 inactive_anon:11697 isolated_anon:0 [ 599.174170][T10521] active_file:23435 inactive_file:36412 isolated_file:0 [ 599.174170][T10521] unevictable:768 dirty:46 writeback:0 [ 599.174170][T10521] slab_reclaimable:18199 slab_unreclaimable:104222 [ 599.174170][T10521] mapped:40011 shmem:13151 pagetables:978 bounce:0 [ 599.174170][T10521] kernel_misc_reclaimable:0 [ 599.174170][T10521] free:1338962 free_pcp:4759 free_cma:0 [ 599.217354][T10521] Node 0 active_anon:32656kB inactive_anon:46256kB active_file:93316kB inactive_file:145648kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:159948kB dirty:184kB writeback:0kB shmem:50528kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11716kB pagetables:3912kB all_unreclaimable? no [ 599.249094][T10521] Node 1 active_anon:8kB inactive_anon:532kB active_file:424kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 599.279180][T10521] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.305561][T10521] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 599.311356][T10521] Node 0 DMA32 free:1419416kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:32656kB inactive_anon:46336kB active_file:93316kB inactive_file:145648kB unevictable:1536kB writepending:188kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:18912kB local_pcp:7940kB free_cma:0kB [ 599.345066][T10521] lowmem_reserve[]: 0 0 0 0 0 [ 599.350577][T10521] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.376243][T10521] lowmem_reserve[]: 0 0 0 0 0 [ 599.381231][T10521] Node 1 Normal free:3920624kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:8kB inactive_anon:532kB active_file:424kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.409618][T10521] lowmem_reserve[]: 0 0 0 0 0 [ 599.414328][T10521] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 599.427137][T10521] Node 0 DMA32: 938*4kB (UME) 802*8kB (UME) 536*16kB (UME) 311*32kB (UME) 336*64kB (UME) 211*128kB (UME) 91*256kB (UME) 68*512kB (UME) 20*1024kB (UME) 7*2048kB (UM) 305*4096kB (M) = 1419416kB [ 599.446325][T10521] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 599.458065][T10521] Node 1 Normal: 236*4kB (UME) 48*8kB (UME) 24*16kB (UME) 168*32kB (UME) 81*64kB (UME) 24*128kB (UE) 13*256kB (UE) 5*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 950*4096kB (M) = 3920624kB [ 599.476393][T10521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 599.485978][T10521] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 599.495380][T10521] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 599.504969][T10521] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 599.514376][T10521] 72995 total pagecache pages [ 599.519246][T10521] 0 pages in swap cache [ 599.523404][T10521] Swap cache stats: add 8169, delete 8169, find 1359/1602 [ 599.530562][T10521] Free swap = 124640kB [ 599.534828][T10521] Total swap = 124996kB [ 599.539285][T10521] 2097051 pages RAM [ 599.543109][T10521] 0 pages HighMem/MovableOnly [ 599.547773][T10521] 411492 pages reserved [ 599.551943][T10521] 0 pages cma reserved [ 599.685548][T10523] input: syz1 as /devices/virtual/input/input9 [ 601.312147][T10544] netlink: 'syz.5.1635': attribute type 4 has an invalid length. [ 601.320078][T10544] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1635'. [ 603.205644][T10568] loop8: detected capacity change from 0 to 64 [ 604.960266][T10581] attempt to access beyond end of device [ 604.960266][T10581] loop8: rw=0, want=268435470, limit=64 [ 604.971457][T10581] Buffer I/O error on dev loop8, logical block 134217734, async page read [ 604.981049][T10581] attempt to access beyond end of device [ 604.981049][T10581] loop8: rw=0, want=268435470, limit=64 [ 604.993028][T10581] Buffer I/O error on dev loop8, logical block 134217734, async page read [ 606.907838][T10614] netlink: 'syz.7.1653': attribute type 4 has an invalid length. [ 606.915866][T10614] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1653'. [ 613.104575][T10666] binder: 10663:10666 ioctl 4018620d 0 returned -22 [ 613.638900][ T8824] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2