last executing test programs: 21m26.57684399s ago: executing program 32 (id=13): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x800, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d06, &(0x7f0000002180)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x3, 0x6) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x76}, "14bffd076773e618d39a90a7ddede0f1cbbfb5400507109f248002f538054f1d79f119c666d26733442cafd720bdb2541415da118792c9c7d05d58719ec0d92263e2739da7bc6b092a07f4122aea955b70195af1efcdf25f4a45cf1e36245c76d420b0a64fd997374c6ac536273d1c80341fe913eb46"}, 0x7a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x4884) tkill(0x0, 0xb) 18m47.511150833s ago: executing program 0 (id=180): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000001780)=""/4101, 0x1010, 0x400020a4, 0x0, 0xba) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r7, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) socket$netlink(0x10, 0x3, 0x0) 18m45.787805343s ago: executing program 0 (id=182): rt_sigtimedwait(&(0x7f0000000300)={[0x4]}, 0x0, &(0x7f00000004c0), 0x8) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setownex(r3, 0xf, &(0x7f0000000040)={0x1}) capset(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000180)={0xb, 0x30a, 0x6d9d, 0x3, 0x7, 0xfffffff8}) mkdir(0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8001, 0x2) socket(0x10, 0x3, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = socket(0x40000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x2716, 0x0, &(0x7f00000000c0)) 18m43.983563696s ago: executing program 0 (id=184): syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x3, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141042, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x40580, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25"}) eventfd2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10044, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffec5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xfd6d, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40) mount_setattr(0xffffffffffffffff, &(0x7f00000020c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x8900, &(0x7f00000005c0)={0x0, 0x1, 0x80000}, 0x4d) fanotify_mark(0xffffffffffffffff, 0x102, 0x40001043, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000640), 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 18m40.60458703s ago: executing program 0 (id=186): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$rds(0xffffffffffffffff, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'fo\x00', 0x15, 0x81, 0x2e}, {@private=0xa010100, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d56}}, 0x44) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x20008000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) 18m33.5845179s ago: executing program 0 (id=193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) ptrace(0x11, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xc001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0x4, 0x0, &(0x7f0000000080)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd77c7000) r3 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_smc(0x2b, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000480)="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", 0x1d8, 0xfffffffffffffffd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r6, &(0x7f0000000000)='7', 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r6, 0x3b80, &(0x7f0000000180)={0x8, r7}) creat(0x0, 0xd931d3864d39dcfb) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 18m30.302281252s ago: executing program 4 (id=195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x40044160, 0x3) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000001080)={0x0, 0x0}, 0x10) ioctl$RTC_ALM_READ(r2, 0x40187013, &(0x7f0000000180)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(0x0, r6) sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0xc818}, 0x80) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000119000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r8, 0x124, 0x14, 0x17, 0x0, 0x0) 18m28.741217108s ago: executing program 0 (id=196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000300)={0x0, 0xffff, 0x0, 0x0, r2}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x8001, 0x401, 0x8, 0x4, 0x6, r4}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r6 = dup(r5) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) getsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, &(0x7f0000000180), &(0x7f0000000240)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 18m25.384858365s ago: executing program 4 (id=197): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$MEMREADOOB(r0, 0xc00c4d04, &(0x7f0000000640)={0x5, 0x82, &(0x7f0000000400)="4504abc72f8b931be088bf611468ec80998d7b1b40aeec7927e20b8853f9e1d2b0519a7696b7791c64b9809826e4f6e0eec541aaf64fa9433e9925d839251da52166083e2bbaff69ef7afe53a48c7fcde1a402832a85cf6183b07c6ab4a3fd155c77aabd092e6aadaae4c41b9f50755104c89656c1c02137066b9c23f2e1761f7555"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000300000095000000000000007000c01f84d37a21f7364fd967aab05d20d2e06fa3ae2d441d1eebb8f62dc3430c3496089d8c7496ab86816393279c076518869f5dffd85b4081b9b70c628809adeab44f967acfedc5aeeb510920d3e5a402ee8ff6eb738445c3406ed3a5709a1824c71f3762141ae4b1bf72b3d5ee7fd3c60ccac5a8cfabebdd303a74d946665e29a14f92b103cb2cbf6c24ccbfbee224bf64df5569a650c249cdd1ed24f696aef9ac667bb03a8af88c73b189a65752"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r4, r4, 0xd, 0x0, 0x0, 0xb, 0xf9, 0x10cf, 0x3737, 0x8b, 0x2, 0x9, 'syz0\x00'}) r5 = socket(0x10, 0x3, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r6, 0xb00}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x6}, 0x8) dup2(r5, r1) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) 18m20.767884498s ago: executing program 4 (id=201): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0xd1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x19}, @val={0x8, 0x3, r3}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x23, 0x800, 0x1) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x100) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="0fc7ffb80a0000000f23c80f21f8350000f0000f23f8f082721000b80e0000000f23d80f21f835400000c00f23f8f26d262e0fc71bb8736f00000f23d80f21f835000000f00f23f80fc7ae2b350000660f3838c20f01fc", 0x57}], 0xaaaaaaaaaaaabc2, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./proc/sys/kernel/sem\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x40, 0x1, 0x70bd29, 0x25dfdbfe, {0x2}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x2004c856}, 0x4008094) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r0, 0x0, 0x0, 0x8001, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup=r0, r0, 0x27, 0x4, 0x0, @void, @value=r0, @void, @void, r9}, 0x20) 18m15.50176714s ago: executing program 4 (id=205): timer_create(0x0, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$cec(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) mlockall(0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x20}}, [@jmp={0x5, 0x1, 0x5, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xfeffffff}, 0x94) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000034e2400000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000010000800000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000020000000044010500ac14143b000000000000000000000000000000002b00000000000000ac14140c0000000000000000000000000000000000000200000000000000000000000000ffffffff000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001000000000000000000000000000000ff020000000000000000100000000001000000003c00000002"], 0x1fc}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x1000}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000700)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)}, 0x94) ioctl$CEC_S_MODE(r0, 0x40046109, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setrlimit(0x5, &(0x7f0000000040)={0x8000, 0xa}) timer_delete(0x0) 18m11.469433298s ago: executing program 33 (id=196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000300)={0x0, 0xffff, 0x0, 0x0, r2}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x8001, 0x401, 0x8, 0x4, 0x6, r4}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r6 = dup(r5) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) getsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, &(0x7f0000000180), &(0x7f0000000240)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 18m11.042425971s ago: executing program 4 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x7f}}, './file0\x00'}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000300)={0x0, 0xffff, 0x0, 0x0, r2}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000380)={'\x00', 0x8001, 0x401, 0x8, 0x4, 0x6, r5}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r7 = dup(r6) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r8, 0x200004) sendfile(r7, r8, 0x0, 0x80001d00c0d1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 18m5.678372637s ago: executing program 4 (id=210): socket$netlink(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) r0 = socket(0x28, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES8=r0], 0x0, 0x9, 0xba, &(0x7f0000000480)=""/186, 0x41100, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') fstat(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f00005cf000/0x3000)=nil, 0x3000, 0x16) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000002900)={0xfffffffffffffffa, 0xffffffffffffffff, 0x0, {0x200, 0x81}, 0x4b}, 0x1) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000300)='ufs\x00', 0x2140e3, 0x0) madvise(&(0x7f0000523000/0x2000)=nil, 0x2000, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.1\x00', 0x1ff) syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17m47.349109251s ago: executing program 34 (id=210): socket$netlink(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) r0 = socket(0x28, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES8=r0], 0x0, 0x9, 0xba, &(0x7f0000000480)=""/186, 0x41100, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') fstat(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f00005cf000/0x3000)=nil, 0x3000, 0x16) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000002900)={0xfffffffffffffffa, 0xffffffffffffffff, 0x0, {0x200, 0x81}, 0x4b}, 0x1) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000300)='ufs\x00', 0x2140e3, 0x0) madvise(&(0x7f0000523000/0x2000)=nil, 0x2000, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.1\x00', 0x1ff) syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16m6.739855048s ago: executing program 5 (id=27): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @private2}}}, &(0x7f0000000040)=0x84) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r6, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) fcntl$setsig(r1, 0xa, 0x21) r7 = syz_open_procfs(0x0, 0x0) preadv(r7, 0x0, 0x0, 0x2, 0x7f0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16m5.458618791s ago: executing program 5 (id=269): fsopen(0x0, 0x0) 16m4.87717883s ago: executing program 5 (id=271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000240)={r8, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f000000a300)={{0x80000000, 0x0, 0x2, [0x80000001, 0x8]}, {0x80000000, r9, 0x6, [0x2, 0x3]}, 0x0, [0x7d, 0x8]}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r1, 0x0, 0x40) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x94}}, 0x0) 16m2.86798762s ago: executing program 5 (id=272): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0x40000e9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0x0, 0xffffffff, 0xfffffffc], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffbfffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x9, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x3, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1001, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0xffc, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$read_default(0x2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) syz_open_dev$loop(0x0, 0x2, 0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom$inet(r5, &(0x7f0000000280)=""/244, 0xf4, 0x40010022, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) listns(&(0x7f0000000000)={0x20, 0x0, 0x5, 0x20000, 0x0, 0x3}, &(0x7f0000000080)=[0x0], 0x1, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x38, r6, 0xe29, 0x70bd29, 0x5dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000140)=0x8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r7, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r7, 0x80084121, &(0x7f0000000000)) 15m46.237609889s ago: executing program 35 (id=272): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0x40000e9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0x0, 0xffffffff, 0xfffffffc], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffbfffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x9, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x3, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1001, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0xffc, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$read_default(0x2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) syz_open_dev$loop(0x0, 0x2, 0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom$inet(r5, &(0x7f0000000280)=""/244, 0xf4, 0x40010022, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) listns(&(0x7f0000000000)={0x20, 0x0, 0x5, 0x20000, 0x0, 0x3}, &(0x7f0000000080)=[0x0], 0x1, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x38, r6, 0xe29, 0x70bd29, 0x5dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000140)=0x8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r7, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r7, 0x80084121, &(0x7f0000000000)) 15m18.008326166s ago: executing program 2 (id=308): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) statfs(&(0x7f0000000240)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x6) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./mnt\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f00000001c0)='openpromfs\x00', 0x62400, 0x0) setxattr$security_ima(&(0x7f0000000180)='./mnt\x00', &(0x7f0000000080), 0x0, 0xffbf, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) socket$inet6(0xa, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) 15m15.877535702s ago: executing program 2 (id=312): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="020000000400"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) tgkill(0x0, 0x0, 0x34) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r6, r5, 0x0, 0x8) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) 15m14.493044148s ago: executing program 2 (id=314): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x228) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000440)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f00000008c0)={&(0x7f0000000480)={{@host}, {@my=0x0, 0x800}, 0x400, "544ef36678552ca74ade8fdd513fff0bc96bcedcd68db8d6eb054b11c30f270d7e40e6b6cc19e024f819aac3b289eb58e5cc668ae05f999ca425a184069d6f835535da14c5ed43c1074c0febbc5c8d5f62cae49919183250f850bfed43f679bb6e427e536b5b47581e8f0d4c41bee492c86f7a88fd7f9e9f3aab0ac81c573a75d28a2ecf14284ad8b7cee6db9a3baf04af8e3054c8a64496cf22d6f17bc83db909af402b953dd4f7631ca3c47ba2f5085e95673f5d5e0185c8b8435b5bcd4580a9a06c3d95f26373fdd54f9acb594b9d9393ff21099de732a6a228d6732f45d5f61de393fe91a9e33b5341183fc03252f23e9dc8a67638201d6d6e62c4e3baed1c3d6ae711423f1b8df86c9d8a36a9284083fc89adc30b5c126cf2d8479f26a1be6436373214e21d6dc3f2d5b02c927cc5e77bf3e0e5aed073b4f6b280759ef2fc1d1c8bb3f9657267911f3ab77703bdec1099dd5ebe8e2c5ec814a61a6228430cefd225be0b128d6af64845e078942ca7c3ec815cba1f73941e76ccbc41f5e5a6a140f926de1ce28c148c8cef5baa267cadfbb868ecb8e9e5e17dc13827228cb724b4d104543d37eb287f8b1923bd7480acd27373334d7b098a91a16267d7b27c6b19de9ccb30669f9b76ca6b452e36af2ae4f965e9750c613d4c5d1e4eb3fd0a35426fbbd7c8f61a677f08ba6458c1d1eca9f0b54693ac448574fe1013b39f3d118974fc25730c64006033aef80a38cf79117488e78fdf359865518235752ef088d5d23ee8724dcf9af534d4d454e174784d935eb352d23d433daf2981b838149b00ac3d69d587e5c643c07e93bc093199e487c509634437c20e98fe3f10570cdf7611328b65d90beea566e5196df2aedacba9b377e2fd93b6080c540785136c8d7ab99a3cde178c3ee22956a79adbb20c2c2059bf7ac1082d99932a5fdfff5b57c1c1a6acaebf35f5cc391dc68684579bbdcde937a53587ab15c38193df2cb7fe003ecfbb8b6c0a16d7d26047fa9f21f6f4165d3b6a6b12a9639222a6ba01c1def9f921b0c22dda4718e798cd52628b3b8a0b15ff6e9718f059fad1f71d627112183f2d8a3df7c9e84af0a0051b1134a451e7d3feaa3bc4a85cbb00f378b4d83bb6a767eb5a8cb5843331aacdd309c1f0a9df6f251b18f0f871696419a94bfe580b4b2507978d257e5b7d6f5cd4aa76b264a6237689f2f4542807a43880d8479c80f6ca0525f03da46099cfa76851da086924d43de77746fdc7ed050bbb2b56e511fdbe95944fc0858bb838e7834afae7815b9e490d52cc82f1639ef59a96f9ce98df1abe31e1532768500a2d1dcb0ff534207f35d80d884a9be69b4609927329c17bd9fcc40f2cd0f0f53b16bf86efa37f5cf8ee2e1f8a81e39314562da14161f01af47a1ef7809e3653eecccd36aebc9762e6d999a80e5808500ebb590a"}, 0x418, 0x8}) mmap$IORING_OFF_CQ_RING(0x0, 0xd60, 0x9, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x18) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000280)={'team_slave_0\x00', 0xefff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x100, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000040)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r5, 0x40047438, 0x0) ioctl(r5, 0x7439, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x14801}, 0x820) r7 = dup2(r6, r6) write$tun(r7, &(0x7f00000000c0)=ANY=[], 0x46) 15m8.595744358s ago: executing program 2 (id=316): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffbfff, 0x1, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0xffc, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0xc07, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f92, 0x200, 0x1006, 0x15a, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcbdd, 0x8000, 0x10000000, 0x146, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, r7, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @remote, 0x4}, 0x1c) socket(0x1d, 0x3, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa661", 0x4fe, r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) 15m3.74761721s ago: executing program 2 (id=320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x5405, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r5 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r5, 0x29, 0x1, 0x0, &(0x7f0000000100)) r6 = socket(0xa, 0x80805, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) getsockopt$bt_hci(r6, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) socket(0x2, 0x80805, 0x0) r8 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, 0x0, &(0x7f00000007c0)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="813af867875cc3a45981de2ef985fb8a592243b2d16f1a6f36e1cadac73ae1da00074319606f9715c183b3dc5726b8b4767e452e512a5ff9a4899a4960feb50db7659a010bfe4f70783f354bca4ae6d4edd8ae951bda5e502561aa600aad753417f9fdacfd66a4d4aec57957943b8029988468a831c1872fadf9416d7a0e2a503bcf504c0357806195f9e3b625dfc7733204d06d75f8cd82265b79b894692971f59931bd44762b37bf4289ddf3ee"], 0x30}, 0x1, 0x0, 0x0, 0x4050805}, 0x4000000) 15m1.875939832s ago: executing program 2 (id=324): openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x80840, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/251}], 0x59) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x80) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0), 0x12) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='hpfs\x00', 0x20920d1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x20008030) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) 14m45.276315419s ago: executing program 36 (id=324): openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x80840, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/251}], 0x59) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x80) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0), 0x12) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='hpfs\x00', 0x20920d1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x20008030) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) 14m4.134696724s ago: executing program 3 (id=371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000300)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r8, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00'], 0x28}}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYRES64=r8, @ANYBLOB="2d324617fa9cfd5b09e42193571f15169a4eb29d4276290ced9253982ab91f695bfb85e93c275c0fdb88330d66634dc0866b95f0b4ca0c95b667401ff105c2c270c77c321c89e1f571c89002000000fc2e1cb29abda3c0", @ANYBLOB="d9b5dfa2db106c319d27f54f19503a97bb7779a9b0eca78ce4217a3ab2fddb633fcb0ed76c6eed07926e5f182d3621b52b516a022134be840b1e1c3803c1e403df31e8d52057a9a669fa0203559c42a9313463018881cadc0795e82d170f6b0b27c4bc12a025bf273b21cc2a75e042e673b3b15c54dcfb41a2e55ed1b4fddef2bb3b9a64dba39cf7b6", @ANYRES8=r0, @ANYBLOB="f14f750f3da55c15686576bf29a30c0d918df1d73dd09c62e0bbf349107576b16d831b3a23444bcdc5928333d15ae486990c3668d0a36f97027141bdeed244cc135b53e71a5b93ef7b849f653b66975963121d3a7cfba629de6a841e359ab2a18648e4bf58ca8fc615d70e5f07a5af77f2", @ANYRES8=r1], 0xb0}, 0x1, 0x0, 0x0, 0x4044000}, 0x8050) r9 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, 0x0) r10 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000000000)={0x1, r10}) connect$inet(r10, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 13m58.201129518s ago: executing program 3 (id=373): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r7 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x400, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r11 = userfaultfd(0x80801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r11, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0xf4ffffff}) 13m48.387867564s ago: executing program 3 (id=376): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xb, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) unshare(0x22020600) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, 0x0, 0x0, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2003b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 13m47.321005187s ago: executing program 3 (id=379): socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002a80), 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000001c0)={r2, 0x0, 0xd}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180)=0x204, 0xffffffffffffffcc) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{0x0}, {&(0x7f0000000700)="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", 0x13a}], 0x2}}], 0x1, 0x2090) write(r4, &(0x7f0000001e00)="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", 0x488) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000200)=0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 13m46.717971822s ago: executing program 3 (id=380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000001c0)="18000000010013", 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0", @ANYRES32=r6, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = dup(0xffffffffffffffff) setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f0000000000), 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket(0x25, 0x1, 0x9) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) accept4(r8, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) 13m44.747181558s ago: executing program 3 (id=383): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x10042, 0x4d) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x48) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x80000000, 0xe3, 0x6, 0xc, 0x1, "164b9014ee60f18ac7ccbd0e8f47aa234948e3"}) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) sendmmsg$inet(r0, 0x0, 0x0, 0x2400c0c6) 13m27.875484116s ago: executing program 37 (id=383): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x10042, 0x4d) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x48) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x80000000, 0xe3, 0x6, 0xc, 0x1, "164b9014ee60f18ac7ccbd0e8f47aa234948e3"}) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) sendmmsg$inet(r0, 0x0, 0x0, 0x2400c0c6) 15.449486422s ago: executing program 9 (id=1967): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x170}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) removexattr(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0xcf) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @local, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, '.\x00', '\x00', "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) ioctl$SNDCTL_SEQ_GETINCOUNT(r3, 0x80045105, &(0x7f0000000500)) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000280)=""/50, 0x32}], 0x1}, 0xfff}], 0x1, 0x0, 0x0) writev(r4, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb0", 0x3}], 0x1) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x2, 0x10000, 0x0, 0x40058}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {}, 0x1}) io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r9, 0x0, r10, 0x0, 0x6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 13.982173373s ago: executing program 8 (id=1973): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @none, 0x0, 0x2}, 0xe) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "a4a703", 0x1}}}, 0xd) 13.683008407s ago: executing program 8 (id=1976): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201410148134420240400756e69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000001340)={0x1c, &(0x7f0000000880)={0x40, 0x15, 0x4, "96509e5d"}, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="202c06000000fb97200ade5cd3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.350074449s ago: executing program 9 (id=1986): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x1, @loopback}, 0x1a) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) 7.305008819s ago: executing program 8 (id=1987): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, r1, 0x1, 0x72bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ef, 0x1, 0x1, 0xffff, 0x5, 0x2, 0x7, 0xb2a5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7.26133203s ago: executing program 7 (id=1988): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000780)={0x0, {{0xa, 0x4e24, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x3, {{0xa, 0x4e22, 0x1, @mcast2, 0x3}}, {{0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x37}}}}, 0x108) 7.018292318s ago: executing program 6 (id=1990): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r1, 0x4) syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[], 0x0) 6.931469035s ago: executing program 9 (id=1991): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r2, 0x400454e2, 0x110c230004) 6.649438198s ago: executing program 8 (id=1992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x40, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x4, 0x5, 0x8000, 0xf000, 0x3ff, 0xfffe, 0xf]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x3}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x50811}, 0x0) 6.479425943s ago: executing program 7 (id=1993): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="24002d80050001000300ff0005000400fd000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x24881}, 0x800) 6.471808382s ago: executing program 1 (id=1994): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000000)={0xed, ""/237}) 6.361140962s ago: executing program 6 (id=1995): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xb, 0x5}]}, @enum={0xe, 0x8, 0x0, 0x6, 0x4, [{0x1, 0x9}, {0x10, 0x4}, {0x5, 0x5}, {0x7, 0x4}, {0x5, 0x20}, {0x5, 0x4}, {0x80000003, 0x9}, {0x3, 0x1}]}]}, {0x0, [0x0]}}, 0x0, 0x7b}, 0x28) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1}, 0x94) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="680200000005010400000000000000000a000004540201000300000008"], 0x268}, 0x1, 0x0, 0x0, 0x20000091}, 0x4880) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380)={0x27, r7, 0xffffffffffffffff, 0x1, 0x7, 0x4, "66248c08d77deba19f4efc6a141bd3e5dff2a2a846ba8da97927c5d55338fb37a0cce5175dd65d42b7f148d1403925f9d74488a8fc4390c3f880ab8e983c9c", 0x12}, 0x60) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x12000051) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000600)={r1, &(0x7f0000000240)='\x00', 0x100, &(0x7f0000000400)={@align, {0xc, 0x200, 0x9, 0xd5}}, 0x41, 0x0, &(0x7f00000005c0)=0x7}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) move_pages(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001800010900000000ffdbdf2542180000ff0000080000000208000120ac141400445de764e3070db0af9989c0916cba4c5acff7ec1a58cec88006bc8c83cf3a93008d2e7ac83bad14ef0c978e0ae9eb56b5fed015e1e484827b484bcfa6ed6ef3829079da0e3191b5f0c2092b0e753ea3bbd652d444de0b024f33ca150eda22e9eafa5a93c8bb21f9da1ae36eb3e7c36153c87facfddaa34de24b3b199626f17f865631cbd8fe6f712eb5016492b917009b8c47"], 0x24}}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x3, 0x3}) 6.251886646s ago: executing program 8 (id=1996): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x170}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) removexattr(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0xcf) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @local, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, '.\x00', '\x00', "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) ioctl$SNDCTL_SEQ_GETINCOUNT(r3, 0x80045105, &(0x7f0000000500)) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000280)=""/50, 0x32}], 0x1}, 0xfff}], 0x1, 0x0, 0x0) writev(r4, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb0", 0x3}], 0x1) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x2, 0x10000, 0x0, 0x40058}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {}, 0x1}) io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r9, 0x0, r10, 0x0, 0x6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 6.216753081s ago: executing program 9 (id=1997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) 4.877137647s ago: executing program 7 (id=1998): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000003c0)={0x20, 0x31, 0x2, {0x2, 0x3}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1838}}, 0x0, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x5, 0x8, "9c28ccdc", "93ce5324"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x2, 0x6, 0x7, 0x8, 0x9, 0xfff7}}}, 0x0) 4.87671741s ago: executing program 1 (id=1999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x2000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) 2.801955324s ago: executing program 9 (id=2000): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TCGETA(r3, 0x5405, &(0x7f00000001c0)) listen(r2, 0xa) recvmsg(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r7, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000300)={0x8, r7}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_CAP_MAX_VCPU_ID(r9, 0x4068aea3, &(0x7f0000000140)={0xdb}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r6}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r5, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000040)={0x8, r4}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000440)={0x8}) close(r0) 1.572108114s ago: executing program 1 (id=2001): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @local, @local, {[], {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x5, 0x0, 0xf500, {[@mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0x5, @loopback, 0x1, "45673d923b56653c"}]}}}}}}}}, 0x0) 1.376896038s ago: executing program 6 (id=2002): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0a902d04"], 0xd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$video4linux(&(0x7f00000000c0), 0x3, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0xfffffffd, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x191) syz_io_uring_setup(0x3064, &(0x7f0000000080)={0x0, 0xa831, 0x40000, 0x0, 0x1ed}, &(0x7f0000000100)=0x0, &(0x7f0000000180), 0x0) r6 = syz_io_uring_setup(0x7a36, &(0x7f0000000640)={0x0, 0x591f, 0x10000, 0x0, 0x51}, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000700)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$nl_generic(r9, 0x0, 0x0) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x106f) ioctl$UFFDIO_CONTINUE(r10, 0xc020aa07, &(0x7f0000000340)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0xefc, &(0x7f0000000380)={0x0, 0xfffffffd, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r12, r13, r14, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r16 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r16, 0x6, 0x3, &(0x7f0000000340)=0x25, 0x4) execveat(r10, &(0x7f0000000480)='./file0\x00', &(0x7f0000000580)={[&(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='/dev/v4l-subdev#\x00']}, &(0x7f00000006c0)={[&(0x7f00000005c0)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', &(0x7f0000000600)='[-\xa3\x00']}, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r16, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_submit(r5, r7, r14, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x2, {}, 0x1, {0x0, r15}}) r17 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_NOP128={0x3f, 0x3b, 0x0, r17, 0xc995, 0x9, 0x0, 0x28, 0x0, {0x8}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0) r18 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r19 = ioctl$KVM_CREATE_VCPU(r18, 0xae41, 0x0) fchdir(r6) ioctl$KVM_SET_MSRS(r19, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d07, 0x0, 0xfffffffffffffffd}]}) 985.349415ms ago: executing program 1 (id=2003): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 979.674435ms ago: executing program 7 (id=2004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000dc0)={0x934, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x90c, 0x70, [@NL80211_MESH_SETUP_IE={0x905, 0x3, "8368acd311e9c2cdadec02ea2ac00dc89408db1ea108a025074fd4f5899968d36ea212ee992be2aae1c753a5080f6410f8019301ff8c74dfa901c513d650517981b5590b23747d2e3598d9d9e8383590319370bee26337ee49bf36c1f5a6bf66c49f57d48d957719844fea1812610d0132477ca3951f38ae6102f41e9ceaf7ef34c5364bda1ee657f362da2d6d3f38e48858f9ea6b48d1e46e4e67579b3dbb471ffcb20aacbcc5d3c330f0993c1256599e25a121f86bf259aceac2c5d8a20771878cbdc1f0b31b24117eabb3a758a854f010ff044077fba14bfc4476462b05cfec9aa53878a38fe58d934ba3dcef35adb2d148cebe3ea12b437107ddc3962d28af2b5691e0556c7f61110468247d08b64040c7225f32d7519b0d419838c0c8cc5e2b29e7ad8f0e0abb6eff879f6194931959cf83c3ea5d6874d58a24d15db7b5911183b7cdefbc854863c021c1d4c0a51c24ea1a7440aa49d0960d3d9b39bcbcabd8fb5e583ea284051a132c3bee578c13a8aa9bad6ac17beebe638fa48c5d6e019d5213d15c32a1fb3642814d35ef0edfc5efbb18a626c4b38f1b7393923486cef1ad52028fd83d5697365a7c721f30ada9d190a6edbca5ae66bdaf03ea6393efd59a1c376af74982133951dadbb30f96071a8274a3614349cb03a894afc6cd76bf56e7f6621c4e84fd2ebd6dadb6a256a4634097627bb6d34db068b66a0c0b01d7a637a489f52901a91501d829584a5f5f4731697bf227b7d840ca79e077a9af8746881c2ba802542b7e3f9b6a37be8f2358e734bb9d240033b8e1294a538ac73c84491019ad21bac12ec2617caffd8870ea67a5a5b373517032c9e70118430dc8f7fb04370d5836d38137fea80250c587f69d67f863aad4da109dc5a3c1c62e269744c68f15a34241636b9e099c5570959e519f463cdca3c14918d29fae71c338d1132f96d45b5d8c6804acc92266193eb090b6397e22fc8c592b013cd8e4d0047d5e251e0741f5997ed01011eb96db6b78303b6f19594b7732d53bd1cbe7d4cc52f5a05afa54a523f970e8cd944f256faac230c8468b9ceb54c9fb28f5d69f08af10fc5c363ee6c3e6ed7b0cc3aa31a2f89ea397e3a213c36feea4df9ae0d61d2038e584a004a5628ce722213468baae8c870017ccf4ff98a1c46aa1392358355bd08bc3a02bb74cd694d15ff7055c0f0a4388b144f192c19ff2598ea45f28df01cabc1225158456d95646f0b75984d5eb572edb89a966776bb9f7c775607cee6fa32d76031f18d361b0ff5937da1ffea95a2e23f78a79cd6534c955be2e66f34d6c415bcb844064e20bec9244cb95ae534653dae0a5f16aca033e6885ce3e159d08ce58be843c10b8941a59c8ec8d7aa02ac9e799f5ff5828235c6d80ed332d7f4a8d6e10148f8df97f0b2adfaaadc4886b9bc71fade3c1978d021d546240d3c2ad5208059d23d246d13b1b59a380709856fdb902e4a4a473ead7dfa0b280cbbf2f099be166b54c1449ca57ef31e7f19f95db46c7eacfa80b2197e9efab27119683e91d6550f12e560f7221448fc8bc75f233067a737868b48cfedd6af9dd0247afcd7eda459aa8c3771bb1d804be70106a46af39dcedc4205237be9a67e1ca5e0782d7deddd4e4b607232e850583d4d6a35fcb9a0352d1b48bfa52e4fe17a448ba73dc45b24ba78fc6b17953479e515bf312f4ce1cf4722dca0c05d552938da9577d6132167872a2c8ac40b94a5534b305013202925e4dad7e38db1ff61224bf66b9de8bdc3662c4c62cf9c2f082d27f1e90c94ab3d6d9a6cb1fba9ba2e27ed7b70170237c3a4bc5445625836da1f16378e6d02b02297cfe480d13ff29a8fdcfbe7505faf77d237583fbc2757c1ef9fcfa9f22f42cdde722501a953fc4fe39e640efd59a6c0dc918f3ee2b38151bd2d4c74b30a8023c46f7523767f8e39878cc724f694461375e552f99c2889c9bd5a1ea47b020ed0909976757b692ae21dfa8f5efe6b3df3e7aab43736c2655166e525f1f4ecbde7575a821a85d52de3adfa56167fff6524f296585eaf158400e22e7d06bb8cdd874ea99e85556d87c27a01b1805370a5373cdc974bbc45f5a287fe4d832060a988de32c998f21a13639c5d8e07b04511b65c0fdacd86fb63ef5bb7fee8ab16804a99c978e1ceb2729e4d03ec17a5c4d8a17b9e4925d6485315036c42b92e11515e7044f03addbf3c2833efa32d0a5546712e21118a1d6ff8ca4482898a50efafa50a646d2f07bafa8aa9d448969b03783bad6672d7bfa3fec8986a582080f837d2da5561b10438d79e8dd7f26d051cdccd58318326e910b785331cfca2b514ee905aa482c0e3a7408685b05aa852816d63a1d5361bf46e7799fc175843cb6d18388499c432c63174e66adf13c7c859fbd0ccc851a43eced1b9aafd1d967e1736fba04b6646355eb354355d2b54f46fe68803762b49a2d5b97ec370a62c73f13f81893200032562c4125868667af10e4de7d44eb50c81527250a0f6837ab1508a3ec1a4bf7ffbc6ecde33d76f3cbcf64b4ab386248077032c67a3fc350b5497941fc4583f19833b619befa8d418dc4f78d8789cdfb44662649f73643fb64d238b3b4bf6049f4c1cc11b164afe27630ea315c156d72cbb36c327a29bcd552b3640d5d60a286e7169d226a603ea6f22b8bbec9f3e9ac4194b02e6b4c5566f6fb53f748d3cc25466dbab37622ef44cf2649cb0d7b2e44ef83b693026456a4cd7955f4be5c6e6ef6fe0be5b38602645ad623df4ca13d8b6e657832203a743c6d2587dc04031ebd823ccf859466222042ac42abcd0f344f26ebf1870be43f19656f340772179fba6b2cdc7c77952dfa497a1f5272c4d6946c59ab42af77e6a5b57aee5a54266693ad1bf36104b070cf37a26758cd51a035e957fd7cefcb0ee1ab98a7d89f4521b89fe0ec59669657c888c09cec0fc5ba3fb5f88edf98a3d2bf48975d8571b4235d1de59c600ecf17bf00b6ed9e73b16c38b9ab00c2cd30523993df3494cdf4a3895df3dd5002b9ea37319f3e7cc641f3ffea6c48ee582f8cd088084073c318f796883456346d657f250c4b6365d959ec6efc46fa5ffc9eba9553c9209a72534d1fbf9e2c603046edbf5504fd0fca258ae96836ea946c58080a73dd545184a2bc4ecefbdf610fa061458d3af15c601c368c4e8db423b664304d7291964856163b428a9bf35ae2118ec4417c456e25c5795f0152a57c3eec196ab11afea79b0e0703f784a711f0"}]}]}, 0x934}}, 0x0) 766.533328ms ago: executing program 7 (id=2005): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x0, 0x0) 714.705252ms ago: executing program 6 (id=2006): write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x19, 0x1, {0x48, {0x8, 0x0, 0x100}, 0x8b, 0x0, 0x0, 0xff, 0x5, 0x4000087, 0xbf43, 0x20000008000007, 0x8, 0x400000000008, 0x200002, 0x2, 0x6, 0x4, 0x8, 0x8000000000408, 0x0, 0xfffffffffffffff7}}, 0xa0) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5393, &(0x7f00000001c0)) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) 477.277123ms ago: executing program 7 (id=2007): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x102, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc1, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xf9f, 0x0, @opaque="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"}}}}}, 0x0) 402.465427ms ago: executing program 6 (id=2008): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="6000508011000a004abee339084eeef16f162471f4000000080003000dac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 401.385837ms ago: executing program 1 (id=2009): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x20002}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x119, 0x0, &(0x7f0000000700)="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", 0x0, 0x3f95b0e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffefffc}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x3) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 309.08ms ago: executing program 8 (id=2010): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01000000241400001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1, @ANYBLOB="08000a00c0"], 0x4c}}, 0x0) 201.192804ms ago: executing program 9 (id=2011): socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0x36, 0x0, &(0x7f00000009c0)="c1df07000000d30a0000e68886dd8772432c7976ac7819c262e050cbbb2d0f328f8723d8b56c4bcd03cf2883ed1c2fedb704a4960444", 0x0, 0x3df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 37.829284ms ago: executing program 6 (id=2012): openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 1 (id=2013): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5004, 0x7, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000200), &(0x7f0000001540)=""/166}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001300)={r0, &(0x7f0000000200), &(0x7f00000000c0)=""/109}, 0x20) kernel console output (not intermixed with test programs): red promiscuous mode [ 1211.322901][ T3322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.349613][T11140] veth1_macvtap: entered promiscuous mode [ 1211.713311][T11766] Driver unsupported XDP return value 0 on prog (id 91) dev N/A, expect packet loss! [ 1211.818033][T11140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1211.851461][ T3322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.851480][ T3322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.912178][T11140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1212.370334][ T1436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.370351][ T1436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.477206][ T180] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.655991][ T1437] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.833708][ T3322] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.834055][ T3322] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.834357][ T3322] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.234085][ T3322] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.235477][ T1436] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.387383][T11779] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.389252][T11779] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.270712][ T3322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1215.270730][ T3322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.311608][ T3358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.311626][ T3358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.750965][T11800] warn_alloc: 1 callbacks suppressed [ 1216.750980][T11800] syz.6.1112: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1216.751034][T11800] CPU: 0 UID: 0 PID: 11800 Comm: syz.6.1112 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1216.751052][T11800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1216.751063][T11800] Call Trace: [ 1216.751070][T11800] [ 1216.751078][T11800] dump_stack_lvl+0xe8/0x150 [ 1216.751107][T11800] warn_alloc+0x24d/0x270 [ 1216.751136][T11800] ? __pfx_warn_alloc+0x10/0x10 [ 1216.751156][T11800] ? xsk_setsockopt+0x52a/0x960 [ 1216.751183][T11800] ? __x64_sys_setsockopt+0x143/0x1b0 [ 1216.751224][T11800] __vmalloc_node_range_noprof+0x127/0x1540 [ 1216.751270][T11800] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1216.751292][T11800] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1216.751315][T11800] ? xskq_create+0x56/0x220 [ 1216.751340][T11800] xskq_create+0x148/0x220 [ 1216.751361][T11800] ? xsk_init_queue+0x8a/0xe0 [ 1216.751383][T11800] xsk_init_queue+0x8a/0xe0 [ 1216.751404][T11800] xsk_setsockopt+0x52a/0x960 [ 1216.751426][T11800] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1216.751455][T11800] ? __fget_files+0x2a/0x420 [ 1216.751471][T11800] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1216.751487][T11800] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1216.751507][T11800] do_sock_setsockopt+0x17c/0x1b0 [ 1216.751537][T11800] __x64_sys_setsockopt+0x143/0x1b0 [ 1216.751568][T11800] do_syscall_64+0x166/0x520 [ 1216.751590][T11800] ? trace_irq_disable+0x3b/0x140 [ 1216.751611][T11800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.751628][T11800] ? clear_bhb_loop+0x70/0xc0 [ 1216.751647][T11800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.751664][T11800] RIP: 0033:0x7fd1ee88e159 [ 1216.751679][T11800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1216.751693][T11800] RSP: 002b:00007fd1ecaa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1216.751710][T11800] RAX: ffffffffffffffda RBX: 00007fd1eeb16180 RCX: 00007fd1ee88e159 [ 1216.751722][T11800] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1216.751732][T11800] RBP: 00007fd1ee92503b R08: 0000000000000004 R09: 0000000000000000 [ 1216.751742][T11800] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1216.751752][T11800] R13: 00007fd1eeb16218 R14: 00007fd1eeb16180 R15: 00007ffe677268c8 [ 1216.751778][T11800] [ 1216.751823][T11800] Mem-Info: [ 1216.751830][T11800] active_anon:202 inactive_anon:26610 isolated_anon:0 [ 1216.751830][T11800] active_file:26597 inactive_file:36413 isolated_file:0 [ 1216.751830][T11800] unevictable:0 dirty:147 writeback:0 [ 1216.751830][T11800] slab_reclaimable:12802 slab_unreclaimable:113575 [ 1216.751830][T11800] mapped:33817 shmem:15803 pagetables:1686 [ 1216.751830][T11800] sec_pagetables:0 bounce:0 [ 1216.751830][T11800] kernel_misc_reclaimable:0 [ 1216.751830][T11800] free:1265751 free_pcp:7967 free_cma:0 [ 1216.751873][T11800] Node 0 active_anon:808kB inactive_anon:106440kB active_file:106188kB inactive_file:145652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:135268kB dirty:588kB writeback:0kB shmem:63212kB kernel_stack:14208kB pagetables:6612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1216.751912][T11800] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1216.751948][T11800] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1216.751992][T11800] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 1216.752022][T11800] Node 0 DMA32 free:1104108kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:808kB inactive_anon:106440kB active_file:106188kB inactive_file:145652kB unevictable:0kB writepending:588kB zspages:0kB present:3129332kB managed:2558768kB mlocked:0kB bounce:0kB free_pcp:31864kB local_pcp:31864kB free_cma:0kB [ 1216.752071][T11800] lowmem_reserve[]: 0 0 1 1 1 [ 1216.752098][T11800] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1812kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1216.752141][T11800] lowmem_reserve[]: 0 0 0 0 0 [ 1216.752169][T11800] Node 1 Normal free:3943536kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1216.752219][T11800] lowmem_reserve[]: 0 0 0 0 0 [ 1216.752252][T11800] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1216.752347][T11800] Node 0 DMA32: 1063*4kB (UE) 102*8kB (UE) 10*16kB (UE) 0*32kB 20*64kB (UME) 81*128kB (UM) 137*256kB (UM) 45*512kB (UME) 25*1024kB (UME) 8*2048kB (UM) 241*4096kB (UM) = 1104108kB [ 1216.752473][T11800] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1216.752553][T11800] Node 1 Normal: 6*4kB (UM) 9*8kB (UM) 11*16kB (UM) 11*32kB (UM) 8*64kB (UM) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3943536kB [ 1216.752678][T11800] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1216.752691][T11800] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1216.752704][T11800] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1216.752717][T11800] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1216.752729][T11800] 78810 total pagecache pages [ 1216.752736][T11800] 1 pages in swap cache [ 1216.752741][T11800] Free swap = 124992kB [ 1216.752747][T11800] Total swap = 124996kB [ 1216.752754][T11800] 2097051 pages RAM [ 1216.752759][T11800] 0 pages HighMem/MovableOnly [ 1216.752765][T11800] 425290 pages reserved [ 1216.752771][T11800] 0 pages cma reserved [ 1217.407400][T11810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1218.319554][T11822] x_tables: ip_tables: udp match: only valid for protocol 17 [ 1218.497435][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1221.916524][T11853] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1222.025569][T11858] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1222.168449][T11860] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1136'. [ 1222.392205][ T6819] kernel write not supported for file /admmidi2 (pid: 6819 comm: kworker/0:7) [ 1223.999233][T11884] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1224.811771][T11899] Bluetooth: MGMT ver 1.23 [ 1224.879464][T11904] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1225.525633][T11914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1227.557937][T11959] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1229.469317][T11979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1230.007360][ T1435] IPVS: starting estimator thread 0... [ 1230.039329][ T5731] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1230.104481][T11995] IPVS: using max 13 ests per chain, 31200 per kthread [ 1230.234031][ T5731] usb 7-1: Using ep0 maxpacket: 8 [ 1230.234688][ T5731] usb 7-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 1230.259407][ T5731] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1230.259440][ T5731] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1230.259467][ T5731] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.319241][ T5731] usb 7-1: config 0 descriptor?? [ 1230.627056][ T4909] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1230.644409][ T4909] Bluetooth: hci2: Injecting HCI hardware error event [ 1230.649866][ T4909] Bluetooth: hci2: hardware error 0x00 [ 1230.927333][ T5731] logitech 0003:046D:C50C.0004: unknown main item tag 0x0 [ 1230.927360][ T5731] logitech 0003:046D:C50C.0004: unknown main item tag 0x0 [ 1230.927380][ T5731] logitech 0003:046D:C50C.0004: unknown main item tag 0x0 [ 1230.927409][ T5731] logitech 0003:046D:C50C.0004: unknown main item tag 0x0 [ 1230.927429][ T5731] logitech 0003:046D:C50C.0004: unknown main item tag 0x0 [ 1230.927447][ T5731] logitech 0003:046D:C50C.0004: unknown main item tag 0x0 [ 1230.934200][ T5731] logitech 0003:046D:C50C.0004: unknown main item tag 0x0 [ 1230.934223][ T5731] logitech 0003:046D:C50C.0004: unknown main item tag 0x0 [ 1230.934242][ T5731] logitech 0003:046D:C50C.0004: unknown main item tag 0x0 [ 1230.934261][ T5731] logitech 0003:046D:C50C.0004: unknown main item tag 0x0 [ 1230.936153][ T5731] logitech 0003:046D:C50C.0004: unknown global tag 0xc [ 1230.936167][ T5731] logitech 0003:046D:C50C.0004: item 0 1 1 12 parsing failed [ 1230.941749][ T5731] logitech 0003:046D:C50C.0004: parse failed [ 1230.944955][ T5731] logitech 0003:046D:C50C.0004: probe with driver logitech failed with error -22 [ 1231.163646][T12012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.311573][ T10] usb 7-1: USB disconnect, device number 9 [ 1231.835096][T12006] Bluetooth: hci2: unexpected event for opcode 0x002d [ 1232.457525][T12036] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1232.546824][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1207'. [ 1233.138661][ T4909] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1233.485509][ T4909] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1233.498113][ T4909] Bluetooth: hci0: Injecting HCI hardware error event [ 1233.498758][T12006] Bluetooth: hci0: hardware error 0x00 [ 1233.791395][T12057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1234.073429][T12061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1234.205055][T12064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1234.797442][ T5731] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1234.816208][T12082] netlink: 'syz.1.1227': attribute type 3 has an invalid length. [ 1234.960092][ T5731] usb 10-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 1234.982916][ T5731] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1234.982937][ T5731] usb 10-1: Product: syz [ 1234.982948][ T5731] usb 10-1: Manufacturer: syz [ 1235.048720][ T4909] Bluetooth: hci0: unexpected event for opcode 0x002d [ 1235.173656][T12088] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1235.524233][ T5731] scsi host1: uas [ 1235.716043][ T5731] usb 10-1: USB disconnect, device number 2 [ 1235.913212][T12006] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1236.860653][T12120] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1241'. [ 1238.027049][T12136] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1247'. [ 1238.275841][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1251'. [ 1240.178670][T12152] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1240.556307][T12158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1240.782627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.813464][T12164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1241.201808][ T10] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 1241.250639][T12172] wireguard: wg1: Could not create IPv4 socket [ 1241.367506][ T10] usb 10-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 1241.369773][ T10] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1241.369793][ T10] usb 10-1: config 0 has no interface number 0 [ 1241.369825][ T10] usb 10-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1241.369846][ T10] usb 10-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.369863][ T10] usb 10-1: config 0 interface 1 has no altsetting 0 [ 1241.369887][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.394961][ T10] usb 10-1: config 0 descriptor?? [ 1241.740437][T12185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1241.942483][T12182] can: request_module (can-proto-0) failed. [ 1242.227291][ T10] uclogic 0003:2179:0053.0005: failed retrieving string descriptor #100: -71 [ 1242.227339][ T10] uclogic 0003:2179:0053.0005: failed retrieving pen parameters: -71 [ 1242.227366][ T10] uclogic 0003:2179:0053.0005: pen probing failed: -71 [ 1242.227386][ T10] uclogic 0003:2179:0053.0005: failed probing parameters: -71 [ 1242.227465][ T10] uclogic 0003:2179:0053.0005: probe with driver uclogic failed with error -71 [ 1242.301524][ T10] usb 10-1: USB disconnect, device number 3 [ 1243.140312][T12192] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1269'. [ 1243.202085][T12193] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1269'. [ 1245.987889][ T6819] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1246.057256][ T199] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1246.182225][ T6819] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 1246.183593][ T6819] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.183639][ T6819] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1246.183669][ T6819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.424103][ T199] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1246.436529][ T199] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.436587][ T199] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1246.436604][ T199] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1246.436621][ T199] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1246.436652][ T199] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.541272][T12230] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 1247.113305][ T199] gud 7-1:1.0: No supported pixel formats found [ 1247.113335][ T199] gud 7-1:1.0: probe with driver gud failed with error -22 [ 1247.332186][ T6819] ttusb_dec_init_stb: unknown model returned by firmware (00000000) - please report [ 1247.332355][ T6819] ttusb-dec 2-1:1.0: probe with driver ttusb-dec failed with error -2 [ 1247.383809][ T199] usb 7-1: USB disconnect, device number 10 [ 1247.643747][ T7015] usb 2-1: USB disconnect, device number 2 [ 1247.962692][T12237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1250.722295][T12284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1250.833962][T12287] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1308'. [ 1250.851822][T12286] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1251.183431][ T199] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1251.273839][T12298] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1251.345917][ T199] usb 10-1: Using ep0 maxpacket: 16 [ 1251.349152][ T199] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1251.354136][ T199] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.354166][ T199] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1251.354186][ T199] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1251.354210][ T199] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.413736][ T199] usb 10-1: config 0 descriptor?? [ 1251.798280][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1314'. [ 1252.602451][ T199] hid_parser_main: 114 callbacks suppressed [ 1252.602472][ T199] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0 [ 1252.602494][ T199] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0 [ 1252.602513][ T199] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0 [ 1252.602532][ T199] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0 [ 1252.602551][ T199] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0 [ 1252.602570][ T199] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0 [ 1252.602588][ T199] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0 [ 1252.602607][ T199] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0 [ 1252.602626][ T199] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0 [ 1252.602645][ T199] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0 [ 1252.602691][ T199] konepure 0003:1E7D:2DBE.0006: unbalanced collection at end of report description [ 1252.691841][ T199] konepure 0003:1E7D:2DBE.0006: parse failed [ 1252.691902][ T199] konepure 0003:1E7D:2DBE.0006: probe with driver konepure failed with error -22 [ 1252.951534][ T199] usb 10-1: USB disconnect, device number 4 [ 1253.385023][T12324] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1253.538994][T12322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1253.882913][T12336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1254.620550][T12344] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1255.184323][T12354] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1256.731602][T12391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1257.123263][T12394] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1257.836742][ T38] kauditd_printk_skb: 267 callbacks suppressed [ 1257.836757][ T38] audit: type=1326 audit(1789256672.092:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12408 comm="syz.6.1359" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ee88e159 code=0x7ffc0000 [ 1257.836987][ T38] audit: type=1326 audit(1789256672.092:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12408 comm="syz.6.1359" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ee88e159 code=0x7ffc0000 [ 1257.872685][ T38] audit: type=1326 audit(1789256672.138:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12408 comm="syz.6.1359" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd1ee88e159 code=0x7ffc0000 [ 1257.872727][ T38] audit: type=1326 audit(1789256672.138:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12408 comm="syz.6.1359" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ee88e159 code=0x7ffc0000 [ 1257.872760][ T38] audit: type=1326 audit(1789256672.138:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12408 comm="syz.6.1359" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ee88e159 code=0x7ffc0000 [ 1257.878239][ T38] audit: type=1326 audit(1789256672.138:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12408 comm="syz.6.1359" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fd1ee88e159 code=0x7ffc0000 [ 1257.887974][ T38] audit: type=1326 audit(1789256672.138:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12408 comm="syz.6.1359" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ee88e159 code=0x7ffc0000 [ 1257.890865][ T38] audit: type=1326 audit(1789256672.147:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12408 comm="syz.6.1359" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ee88e159 code=0x7ffc0000 [ 1258.229549][T12414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1258.289232][T12416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1258.933922][T12419] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1259.805566][T12445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1260.003182][T12452] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 1260.085002][T12446] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1260.596936][T12459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1261.339562][T12464] syz.6.1382: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1261.339623][T12464] CPU: 0 UID: 0 PID: 12464 Comm: syz.6.1382 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1261.339642][T12464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1261.339652][T12464] Call Trace: [ 1261.339658][T12464] [ 1261.339666][T12464] dump_stack_lvl+0xe8/0x150 [ 1261.339695][T12464] warn_alloc+0x24d/0x270 [ 1261.339723][T12464] ? __pfx_warn_alloc+0x10/0x10 [ 1261.339743][T12464] ? xsk_setsockopt+0x52a/0x960 [ 1261.339762][T12464] ? __x64_sys_setsockopt+0x143/0x1b0 [ 1261.339803][T12464] __vmalloc_node_range_noprof+0x127/0x1540 [ 1261.339846][T12464] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1261.339867][T12464] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1261.339890][T12464] ? xskq_create+0x56/0x220 [ 1261.339915][T12464] xskq_create+0x148/0x220 [ 1261.339935][T12464] ? xsk_init_queue+0x8a/0xe0 [ 1261.339957][T12464] xsk_init_queue+0x8a/0xe0 [ 1261.339980][T12464] xsk_setsockopt+0x52a/0x960 [ 1261.340001][T12464] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1261.340030][T12464] ? __fget_files+0x2a/0x420 [ 1261.340046][T12464] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1261.340061][T12464] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1261.340082][T12464] do_sock_setsockopt+0x17c/0x1b0 [ 1261.340112][T12464] __x64_sys_setsockopt+0x143/0x1b0 [ 1261.340142][T12464] do_syscall_64+0x166/0x520 [ 1261.340166][T12464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.340182][T12464] ? clear_bhb_loop+0x70/0xc0 [ 1261.340203][T12464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.340219][T12464] RIP: 0033:0x7fd1ee88e159 [ 1261.340233][T12464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1261.340248][T12464] RSP: 002b:00007fd1ecae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1261.340264][T12464] RAX: ffffffffffffffda RBX: 00007fd1eeb15fa0 RCX: 00007fd1ee88e159 [ 1261.340277][T12464] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1261.340296][T12464] RBP: 00007fd1ee92503b R08: 0000000000000004 R09: 0000000000000000 [ 1261.340306][T12464] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1261.340317][T12464] R13: 00007fd1eeb16038 R14: 00007fd1eeb15fa0 R15: 00007ffe677268c8 [ 1261.340342][T12464] [ 1261.340349][T12464] Mem-Info: [ 1261.340355][T12464] active_anon:202 inactive_anon:27490 isolated_anon:0 [ 1261.340355][T12464] active_file:26615 inactive_file:36413 isolated_file:0 [ 1261.340355][T12464] unevictable:0 dirty:235 writeback:0 [ 1261.340355][T12464] slab_reclaimable:12819 slab_unreclaimable:114734 [ 1261.340355][T12464] mapped:32931 shmem:16530 pagetables:1831 [ 1261.340355][T12464] sec_pagetables:0 bounce:0 [ 1261.340355][T12464] kernel_misc_reclaimable:0 [ 1261.340355][T12464] free:1268848 free_pcp:2133 free_cma:0 [ 1261.340397][T12464] Node 0 active_anon:808kB inactive_anon:109960kB active_file:106260kB inactive_file:145652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131724kB dirty:936kB writeback:0kB shmem:66120kB kernel_stack:14560kB pagetables:7192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1261.340437][T12464] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1261.340473][T12464] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.340519][T12464] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 1261.340549][T12464] Node 0 DMA32 free:1117032kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:808kB inactive_anon:109960kB active_file:106260kB inactive_file:145652kB unevictable:0kB writepending:936kB zspages:0kB present:3129332kB managed:2558768kB mlocked:0kB bounce:0kB free_pcp:8052kB local_pcp:8052kB free_cma:0kB [ 1261.340596][T12464] lowmem_reserve[]: 0 0 1 1 1 [ 1261.340624][T12464] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1812kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1261.340668][T12464] lowmem_reserve[]: 0 0 0 0 0 [ 1261.340695][T12464] Node 1 Normal free:3943000kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:476kB local_pcp:476kB free_cma:0kB [ 1261.340762][T12464] lowmem_reserve[]: 0 0 0 0 0 [ 1261.340790][T12464] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1261.340890][T12464] Node 0 DMA32: 818*4kB (UME) 226*8kB (UM) 85*16kB (UME) 88*32kB (UM) 87*64kB (M) 187*128kB (M) 124*256kB (UME) 42*512kB (UME) 25*1024kB (UM) 8*2048kB (UM) 240*4096kB (UM) = 1117032kB [ 1261.341028][T12464] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1261.341112][T12464] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 1*16kB (M) 3*32kB (UM) 8*64kB (UM) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3943044kB [ 1261.341240][T12464] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1261.341254][T12464] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1261.341267][T12464] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1261.341286][T12464] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1261.341299][T12464] 79557 total pagecache pages [ 1261.341306][T12464] 1 pages in swap cache [ 1261.341312][T12464] Free swap = 124992kB [ 1261.341319][T12464] Total swap = 124996kB [ 1261.341325][T12464] 2097051 pages RAM [ 1261.341331][T12464] 0 pages HighMem/MovableOnly [ 1261.341337][T12464] 425290 pages reserved [ 1261.341343][T12464] 0 pages cma reserved [ 1262.997942][T12488] MPI: mpi too large (113288 bits) [ 1263.181650][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1263.419152][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1263.419715][ T10] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1263.421257][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.421280][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.421306][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.441685][ T10] usb 9-1: config 0 descriptor?? [ 1263.495168][ T6819] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1263.690170][ T6819] usb 2-1: Using ep0 maxpacket: 8 [ 1263.691049][ T6819] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1263.692837][ T6819] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1263.692855][ T6819] usb 2-1: config 0 has no interface number 0 [ 1263.693524][ T6819] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1263.693543][ T6819] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1263.693561][ T6819] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1263.693580][ T6819] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1263.695452][ T6819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.977579][ T6819] usb 2-1: config 0 descriptor?? [ 1263.997561][ T10] koneplus 0003:1E7D:2D51.0007: item fetching failed at offset 4/5 [ 1263.999745][ T10] koneplus 0003:1E7D:2D51.0007: parse failed [ 1263.999801][ T10] koneplus 0003:1E7D:2D51.0007: probe with driver koneplus failed with error -22 [ 1264.305849][ T199] usb 9-1: USB disconnect, device number 2 [ 1264.781525][T12514] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1402'. [ 1264.805009][ T6819] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1264.887052][ T6819] usb 2-1: USB disconnect, device number 3 [ 1265.267300][ T6819] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1266.040859][T12530] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1267.627941][T12551] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1267.734996][T12543] can: request_module (can-proto-0) failed. [ 1268.100429][T12558] Bluetooth: MGMT ver 1.23 [ 1268.218003][T12561] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1422'. [ 1268.675938][T12573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1268.863760][T12568] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1269.388626][T12581] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1269.761725][T12586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1270.682807][T12609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1270.854105][ T6819] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1271.037360][ T6819] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1271.044322][ T6819] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1271.044345][ T6819] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1271.047065][ T6819] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1271.047083][ T6819] usb 7-1: Manufacturer: syz [ 1271.095603][ T6819] usb 7-1: config 0 descriptor?? [ 1271.592145][ T6819] hid_parser_main: 4 callbacks suppressed [ 1271.592165][ T6819] cougar 0003:060B:700A.0008: unknown main item tag 0x0 [ 1271.592187][ T6819] cougar 0003:060B:700A.0008: unknown main item tag 0x0 [ 1271.592205][ T6819] cougar 0003:060B:700A.0008: unknown main item tag 0x0 [ 1271.592224][ T6819] cougar 0003:060B:700A.0008: unknown main item tag 0x0 [ 1271.592242][ T6819] cougar 0003:060B:700A.0008: unknown main item tag 0x0 [ 1271.788319][T12618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1272.041574][ T6819] cougar 0003:060B:700A.0008: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 1273.038249][ T6819] usb 7-1: USB disconnect, device number 11 [ 1273.808364][T12639] fido_id[12639]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1273.870781][T12648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1275.122387][T12662] macsec1: entered promiscuous mode [ 1275.122413][T12662] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1275.225262][T12662] macsec1: entered allmulticast mode [ 1275.225287][T12662] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1275.248923][T12662] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1275.442311][T12662] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 1275.789025][ T10] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1276.236192][T12006] Bluetooth: hci1: command 0x0406 tx timeout [ 1276.759750][T12692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1278.012535][T12713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1278.400781][ T8612] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1278.559505][ T8612] usb 10-1: Using ep0 maxpacket: 16 [ 1278.560072][ T8612] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1278.561444][ T8612] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1278.561468][ T8612] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1278.561486][ T8612] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1278.561516][ T8612] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.594596][ T8612] usb 10-1: config 0 descriptor?? [ 1280.057684][T12737] macsec1: entered promiscuous mode [ 1280.057703][T12737] hsr0: entered promiscuous mode [ 1280.071311][ T8612] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0009/input/input11 [ 1281.142648][ T8612] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1281.307038][ T8612] usb 10-1: USB disconnect, device number 5 [ 1282.082704][T12764] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1282.097865][T12759] fido_id[12759]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1282.947630][T12777] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1283.978449][ T6819] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1284.184363][ T6819] usb 9-1: Using ep0 maxpacket: 16 [ 1284.190441][ T6819] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1284.192590][ T6819] usb 9-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 1284.192627][ T6819] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1284.192647][ T6819] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 1284.192667][ T6819] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25191, setting to 1024 [ 1284.198360][ T6819] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.198378][ T6819] usb 9-1: Product: syz [ 1284.198388][ T6819] usb 9-1: Manufacturer: syz [ 1284.198399][ T6819] usb 9-1: SerialNumber: syz [ 1284.264806][ T6819] usb 9-1: config 0 descriptor?? [ 1284.355405][ T8612] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 1284.629139][ T8612] usb 10-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1284.630485][ T8612] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1284.630509][ T8612] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 8 [ 1284.630529][ T8612] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1284.630548][ T8612] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1284.630571][ T8612] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.679621][ T8612] usb 10-1: config 0 descriptor?? [ 1285.689531][T12794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1286.568573][T12800] syz.7.1505: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1286.568635][T12800] CPU: 0 UID: 0 PID: 12800 Comm: syz.7.1505 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1286.568655][T12800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1286.568666][T12800] Call Trace: [ 1286.568672][T12800] [ 1286.568680][T12800] dump_stack_lvl+0xe8/0x150 [ 1286.568710][T12800] warn_alloc+0x24d/0x270 [ 1286.568738][T12800] ? __pfx_warn_alloc+0x10/0x10 [ 1286.568759][T12800] ? xsk_setsockopt+0x52a/0x960 [ 1286.568778][T12800] ? __x64_sys_setsockopt+0x143/0x1b0 [ 1286.568819][T12800] __vmalloc_node_range_noprof+0x127/0x1540 [ 1286.568863][T12800] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1286.568884][T12800] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1286.568907][T12800] ? xskq_create+0x56/0x220 [ 1286.568932][T12800] xskq_create+0x148/0x220 [ 1286.568952][T12800] ? xsk_init_queue+0x8a/0xe0 [ 1286.568975][T12800] xsk_init_queue+0x8a/0xe0 [ 1286.568997][T12800] xsk_setsockopt+0x52a/0x960 [ 1286.569018][T12800] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1286.569047][T12800] ? __fget_files+0x2a/0x420 [ 1286.569063][T12800] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1286.569085][T12800] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1286.569107][T12800] do_sock_setsockopt+0x17c/0x1b0 [ 1286.569137][T12800] __x64_sys_setsockopt+0x143/0x1b0 [ 1286.569168][T12800] do_syscall_64+0x166/0x520 [ 1286.569191][T12800] ? trace_irq_disable+0x3b/0x140 [ 1286.569213][T12800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.569229][T12800] ? clear_bhb_loop+0x70/0xc0 [ 1286.569249][T12800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.569266][T12800] RIP: 0033:0x7f3847dae159 [ 1286.569281][T12800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1286.569296][T12800] RSP: 002b:00007f3845fc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1286.569312][T12800] RAX: ffffffffffffffda RBX: 00007f3848036180 RCX: 00007f3847dae159 [ 1286.569325][T12800] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1286.569335][T12800] RBP: 00007f3847e4503b R08: 0000000000000004 R09: 0000000000000000 [ 1286.569345][T12800] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1286.569356][T12800] R13: 00007f3848036218 R14: 00007f3848036180 R15: 00007ffc96cfd6c8 [ 1286.569381][T12800] [ 1286.569388][T12800] Mem-Info: [ 1286.569395][T12800] active_anon:203 inactive_anon:14493 isolated_anon:0 [ 1286.569395][T12800] active_file:26625 inactive_file:36413 isolated_file:0 [ 1286.569395][T12800] unevictable:0 dirty:112 writeback:0 [ 1286.569395][T12800] slab_reclaimable:12830 slab_unreclaimable:114700 [ 1286.569395][T12800] mapped:33140 shmem:3398 pagetables:1869 [ 1286.569395][T12800] sec_pagetables:0 bounce:0 [ 1286.569395][T12800] kernel_misc_reclaimable:0 [ 1286.569395][T12800] free:1282936 free_pcp:821 free_cma:0 [ 1286.569437][T12800] Node 0 active_anon:812kB inactive_anon:57972kB active_file:106300kB inactive_file:145652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132560kB dirty:444kB writeback:0kB shmem:13592kB kernel_stack:14720kB pagetables:7344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1286.569476][T12800] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1286.569512][T12800] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1286.569557][T12800] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 1286.569587][T12800] Node 0 DMA32 free:1172864kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:812kB inactive_anon:57972kB active_file:106300kB inactive_file:145652kB unevictable:0kB writepending:444kB zspages:0kB present:3129332kB managed:2558768kB mlocked:0kB bounce:0kB free_pcp:3280kB local_pcp:3280kB free_cma:0kB [ 1286.569634][T12800] lowmem_reserve[]: 0 0 1 1 1 [ 1286.569662][T12800] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1812kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1286.569705][T12800] lowmem_reserve[]: 0 0 0 0 0 [ 1286.569751][T12800] Node 1 Normal free:3943520kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1286.569798][T12800] lowmem_reserve[]: 0 0 0 0 0 [ 1286.569827][T12800] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1286.569924][T12800] Node 0 DMA32: 696*4kB (UME) 1134*8kB (UME) 1069*16kB (UME) 575*32kB (UME) 334*64kB (UME) 202*128kB (UM) 122*256kB (UM) 41*512kB (UME) 26*1024kB (UM) 8*2048kB (UM) 240*4096kB (UM) = 1172864kB [ 1286.570067][T12800] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1286.570154][T12800] Node 1 Normal: 6*4kB (UM) 9*8kB (UM) 10*16kB (UM) 11*32kB (UM) 8*64kB (UM) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3943520kB [ 1286.570278][T12800] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1286.570291][T12800] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1286.570304][T12800] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1286.570317][T12800] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1286.570329][T12800] 66433 total pagecache pages [ 1286.570335][T12800] 1 pages in swap cache [ 1286.570341][T12800] Free swap = 124992kB [ 1286.570347][T12800] Total swap = 124996kB [ 1286.570353][T12800] 2097051 pages RAM [ 1286.570359][T12800] 0 pages HighMem/MovableOnly [ 1286.570365][T12800] 425290 pages reserved [ 1286.570370][T12800] 0 pages cma reserved [ 1288.986045][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1289.270893][ T6819] appledisplay 9-1:0.0: Error while getting initial brightness: -110 [ 1289.752334][ T8612] usb 10-1: can't set config #0, error -71 [ 1289.802405][ T6819] appledisplay 9-1:0.0: probe with driver appledisplay failed with error -110 [ 1289.828791][ T8612] usb 10-1: USB disconnect, device number 6 [ 1290.083632][ T6819] usb 9-1: USB disconnect, device number 3 [ 1291.586702][T12830] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1291.983749][T12835] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1294.607734][T12840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1299.564934][ T4909] Bluetooth: hci1: connection err: -111 [ 1299.773825][T12890] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1301.730716][T12931] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1552'. [ 1303.479361][T12952] can: request_module (can-proto-0) failed. [ 1303.896655][T12957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.039232][ T6819] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1304.201634][ T6819] usb 7-1: Using ep0 maxpacket: 8 [ 1304.203019][ T6819] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1304.204237][ T6819] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1304.204265][ T6819] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1304.204294][ T6819] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1304.204315][ T6819] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1304.204335][ T6819] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1304.204355][ T6819] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1304.204375][ T6819] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1304.204396][ T6819] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1304.205344][ T6819] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1304.205369][ T6819] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1304.205398][ T6819] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1304.205419][ T6819] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1304.205438][ T6819] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1304.205458][ T6819] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1304.205478][ T6819] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1304.205498][ T6819] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1304.206435][ T6819] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1304.206461][ T6819] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1304.206489][ T6819] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1304.206509][ T6819] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1304.206529][ T6819] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1304.206548][ T6819] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1304.206568][ T6819] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1304.206588][ T6819] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1304.210881][ T6819] usb 7-1: string descriptor 0 read error: -22 [ 1304.210992][ T6819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.363348][ T6819] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1304.481943][ T8612] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1304.659782][ T8612] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1304.676986][ T8612] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.677029][ T8612] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1304.677046][ T8612] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1304.677063][ T8612] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1304.679115][ T8612] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.679155][ T8612] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1304.679179][ T8612] usb 2-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1304.679197][ T8612] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1304.688648][ T8612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.688668][ T8612] usb 2-1: Product: syz [ 1304.688680][ T8612] usb 2-1: Manufacturer: syz [ 1304.688691][ T8612] usb 2-1: SerialNumber: syz [ 1304.873052][ T6819] usb 7-1: USB disconnect, device number 12 [ 1304.912300][T12980] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1304.929794][ T8612] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 1305.139094][ T8612] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1305.233261][ T8612] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1305.322722][ T8612] usb 2-1: USB disconnect, device number 4 [ 1305.409653][ T8612] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1305.451395][ T8612] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1305.505650][ T8612] ti_usb_3410_5052 2-1:2.0: device disconnected [ 1305.656611][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1573'. [ 1306.382037][ T8612] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1306.549133][ T8612] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1306.550248][ T8612] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.573227][ T8612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.573247][ T8612] usb 2-1: Product: syz [ 1306.573258][ T8612] usb 2-1: Manufacturer: syz [ 1306.573269][ T8612] usb 2-1: SerialNumber: syz [ 1306.747572][ T8612] usb 2-1: config 0 descriptor?? [ 1306.776175][ T8612] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1306.818524][T13006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.820519][T13006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.252395][ T8612] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 1308.252486][ T8612] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1308.516011][ T199] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1308.677649][ T199] usb 7-1: Using ep0 maxpacket: 32 [ 1308.678469][ T199] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1308.679512][ T199] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1308.679535][ T199] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1308.679562][ T199] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.698594][ T199] usb 7-1: config 0 descriptor?? [ 1309.268146][ T199] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 1309.268176][ T199] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 1309.469419][ T199] ft260 0003:0403:6030.000A: failed to retrieve chip version [ 1309.469748][ T199] ft260 0003:0403:6030.000A: probe with driver ft260 failed with error -71 [ 1309.494299][ T199] usb 7-1: USB disconnect, device number 13 [ 1309.591707][ T8612] usb 2-1: USB disconnect, device number 5 [ 1310.508737][T13038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1310.948126][T13049] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1310.981477][T13048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1311.885618][ T8612] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1312.049024][ T8612] usb 9-1: Using ep0 maxpacket: 16 [ 1312.053164][ T8612] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1312.054169][ T8612] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.054205][ T8612] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1312.054237][ T8612] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1312.054252][ T8612] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1312.054267][ T8612] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1312.055253][ T8612] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1312.055269][ T8612] usb 9-1: Manufacturer: syz [ 1312.067378][ T8612] usb 9-1: config 0 descriptor?? [ 1312.461941][T13072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1312.492583][ T199] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1312.514877][ T8612] rc_core: IR keymap rc-hauppauge not found [ 1312.514893][ T8612] Registered IR keymap rc-empty [ 1312.515589][ T8612] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1312.537053][ T8612] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1312.609445][ T8612] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1312.629526][ T8612] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input12 [ 1312.689982][ T199] usb 7-1: Using ep0 maxpacket: 16 [ 1312.691826][ T199] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1312.695661][ T199] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.695703][ T199] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.695721][ T199] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1312.696692][ T199] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1312.696708][ T199] usb 7-1: SerialNumber: syz [ 1312.738464][ T199] hub 7-1:1.0: bad descriptor, ignoring hub [ 1312.738493][ T199] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1312.803254][ T199] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1312.856197][ T8612] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1312.873366][ T8612] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1312.893971][ T8612] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1312.970836][ T8612] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1312.993559][ T8612] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1313.012994][ T8612] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1313.044633][ T8612] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1313.077432][ T8612] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1313.088633][ T8612] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1313.111865][ T8612] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1313.158324][ T199] usb 7-1: USB disconnect, device number 14 [ 1313.204648][ T8612] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1313.204670][ T8612] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1313.244452][ T8612] usb 9-1: USB disconnect, device number 4 [ 1314.052056][T13089] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1314.262808][ T199] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1314.436382][ T199] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1314.446618][ T199] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 1314.446637][ T199] usb 7-1: config 0 has no interface number 0 [ 1314.459428][ T199] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.459524][ T199] usb 7-1: Product: syz [ 1314.459536][ T199] usb 7-1: Manufacturer: syz [ 1314.459547][ T199] usb 7-1: SerialNumber: syz [ 1314.504937][ T199] usb 7-1: config 0 descriptor?? [ 1315.324313][ T199] asix 7-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 1315.324525][ T199] asix 7-1:0.251: probe with driver asix failed with error -524 [ 1315.637704][ T8612] usb 7-1: USB disconnect, device number 15 [ 1315.858722][T13102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1316.605607][T13127] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1629'. [ 1317.288307][T13139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1317.475164][T13141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1318.054979][T13149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1318.148580][ T199] kernel write not supported for file /1451/attr/sockcreate (pid: 199 comm: kworker/0:2) [ 1318.412093][T13164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1318.738612][T13171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1318.927913][T13173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1319.366988][ T199] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1319.428730][ T7015] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1319.526320][ T199] usb 10-1: Using ep0 maxpacket: 16 [ 1319.557472][ T199] usb 10-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 1319.558759][ T199] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1319.558783][ T199] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1319.558813][ T199] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.592794][ T199] usb 10-1: config 0 descriptor?? [ 1319.602775][ T7015] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 1319.608892][ T7015] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1319.608912][ T7015] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1319.608940][ T7015] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.750011][T13189] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1320.395250][ T7015] gud 7-1:1.0: Failed to add properties (error=-71) [ 1320.395283][ T7015] gud 7-1:1.0: probe with driver gud failed with error -71 [ 1320.543921][ T7015] usb 7-1: USB disconnect, device number 16 [ 1320.605387][ T199] aquacomputer_d5next 0003:0C70:F00E.000B: hidraw0: USB HID v0.00 Device [HID 0c70:f00e] on usb-dummy_hcd.9-1/input0 [ 1321.757552][ T199] usb 10-1: USB disconnect, device number 7 [ 1322.500437][ T4909] Bluetooth: hci1: unexpected event for opcode 0x042d [ 1324.815003][T13237] warn_alloc: 1 callbacks suppressed [ 1324.815020][T13237] syz.1.1673: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1324.815075][T13237] CPU: 0 UID: 0 PID: 13237 Comm: syz.1.1673 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1324.815093][T13237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1324.815105][T13237] Call Trace: [ 1324.815111][T13237] [ 1324.815118][T13237] dump_stack_lvl+0xe8/0x150 [ 1324.815147][T13237] warn_alloc+0x24d/0x270 [ 1324.815175][T13237] ? __pfx_warn_alloc+0x10/0x10 [ 1324.815196][T13237] ? xsk_setsockopt+0x52a/0x960 [ 1324.815215][T13237] ? __x64_sys_setsockopt+0x143/0x1b0 [ 1324.815255][T13237] __vmalloc_node_range_noprof+0x127/0x1540 [ 1324.815299][T13237] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1324.815320][T13237] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1324.815344][T13237] ? xskq_create+0x56/0x220 [ 1324.815369][T13237] xskq_create+0x148/0x220 [ 1324.815390][T13237] ? xsk_init_queue+0x8a/0xe0 [ 1324.815412][T13237] xsk_init_queue+0x8a/0xe0 [ 1324.815434][T13237] xsk_setsockopt+0x52a/0x960 [ 1324.815458][T13237] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1324.815487][T13237] ? __fget_files+0x2a/0x420 [ 1324.815503][T13237] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1324.815519][T13237] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1324.815539][T13237] do_sock_setsockopt+0x17c/0x1b0 [ 1324.815569][T13237] __x64_sys_setsockopt+0x143/0x1b0 [ 1324.815600][T13237] do_syscall_64+0x166/0x520 [ 1324.815623][T13237] ? trace_irq_disable+0x3b/0x140 [ 1324.815643][T13237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.815660][T13237] ? clear_bhb_loop+0x70/0xc0 [ 1324.815680][T13237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.815696][T13237] RIP: 0033:0x7f76fa0ae159 [ 1324.815711][T13237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1324.815726][T13237] RSP: 002b:00007f76f82c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1324.815742][T13237] RAX: ffffffffffffffda RBX: 00007f76fa336180 RCX: 00007f76fa0ae159 [ 1324.815755][T13237] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1324.815765][T13237] RBP: 00007f76fa14503b R08: 0000000000000004 R09: 0000000000000000 [ 1324.815782][T13237] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1324.815792][T13237] R13: 00007f76fa336218 R14: 00007f76fa336180 R15: 00007fffd4d857b8 [ 1324.815818][T13237] [ 1324.815824][T13237] Mem-Info: [ 1324.815832][T13237] active_anon:202 inactive_anon:14475 isolated_anon:0 [ 1324.815832][T13237] active_file:26640 inactive_file:36413 isolated_file:0 [ 1324.815832][T13237] unevictable:0 dirty:182 writeback:0 [ 1324.815832][T13237] slab_reclaimable:12931 slab_unreclaimable:114609 [ 1324.815832][T13237] mapped:33899 shmem:3401 pagetables:1879 [ 1324.815832][T13237] sec_pagetables:0 bounce:0 [ 1324.815832][T13237] kernel_misc_reclaimable:0 [ 1324.815832][T13237] free:1279060 free_pcp:3113 free_cma:0 [ 1324.815876][T13237] Node 0 active_anon:808kB inactive_anon:57900kB active_file:106360kB inactive_file:145652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:135596kB dirty:724kB writeback:0kB shmem:13604kB kernel_stack:14624kB pagetables:7384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1324.815916][T13237] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1324.815953][T13237] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1324.815998][T13237] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 1324.816028][T13237] Node 0 DMA32 free:1157360kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:808kB inactive_anon:57900kB active_file:106360kB inactive_file:145652kB unevictable:0kB writepending:724kB zspages:0kB present:3129332kB managed:2558768kB mlocked:0kB bounce:0kB free_pcp:12448kB local_pcp:12448kB free_cma:0kB [ 1324.816080][T13237] lowmem_reserve[]: 0 0 1 1 1 [ 1324.816108][T13237] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1812kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1324.816151][T13237] lowmem_reserve[]: 0 0 0 0 0 [ 1324.816178][T13237] Node 1 Normal free:3943520kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1324.816223][T13237] lowmem_reserve[]: 0 0 0 0 0 [ 1324.816251][T13237] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1324.816346][T13237] Node 0 DMA32: 2248*4kB (UM) 1546*8kB (UME) 1140*16kB (UME) 664*32kB (UM) 189*64kB (UME) 106*128kB (UME) 121*256kB (UM) 41*512kB (UME) 25*1024kB (M) 7*2048kB (M) 239*4096kB (UM) = 1157360kB [ 1324.816477][T13237] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1324.816557][T13237] Node 1 Normal: 6*4kB (UM) 9*8kB (UM) 10*16kB (UM) 11*32kB (UM) 8*64kB (UM) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3943520kB [ 1324.816701][T13237] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1324.816714][T13237] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1324.816727][T13237] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1324.816740][T13237] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1324.816753][T13237] 66451 total pagecache pages [ 1324.816759][T13237] 1 pages in swap cache [ 1324.816765][T13237] Free swap = 124992kB [ 1324.816771][T13237] Total swap = 124996kB [ 1324.816783][T13237] 2097051 pages RAM [ 1324.816789][T13237] 0 pages HighMem/MovableOnly [ 1324.816794][T13237] 425290 pages reserved [ 1324.816800][T13237] 0 pages cma reserved [ 1327.817226][ T199] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1328.023103][ T199] usb 7-1: Using ep0 maxpacket: 16 [ 1328.023663][ T199] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1328.025844][ T199] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.025867][ T199] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1328.025884][ T199] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1328.025903][ T199] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1328.025926][ T199] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.035518][T13250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1328.085566][ T199] usb 7-1: config 0 descriptor?? [ 1328.896525][ T6819] usb 7-1: USB disconnect, device number 17 [ 1328.901092][ T8612] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1329.209630][ T8612] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1329.209673][ T8612] usb 10-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1329.211252][ T8612] usb 10-1: config index 0 descriptor too short (expected 40744, got 96) [ 1329.211273][ T8612] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.211287][ T8612] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1329.211321][ T8612] usb 10-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 1329.211348][ T8612] usb 10-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1329.211367][ T8612] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 226 [ 1329.225231][ T8612] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.225252][ T8612] usb 10-1: Product: syz [ 1329.225264][ T8612] usb 10-1: Manufacturer: syz [ 1329.225275][ T8612] usb 10-1: SerialNumber: syz [ 1333.952474][ T8612] usb 10-1: can't set config #1, error -71 [ 1333.975733][ T8612] usb 10-1: USB disconnect, device number 8 [ 1334.472751][T13286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1339.185866][T13331] warn_alloc: 1 callbacks suppressed [ 1339.185883][T13331] syz.1.1713: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1339.185939][T13331] CPU: 0 UID: 0 PID: 13331 Comm: syz.1.1713 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1339.185959][T13331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1339.185970][T13331] Call Trace: [ 1339.185977][T13331] [ 1339.185984][T13331] dump_stack_lvl+0xe8/0x150 [ 1339.186014][T13331] warn_alloc+0x24d/0x270 [ 1339.186042][T13331] ? __pfx_warn_alloc+0x10/0x10 [ 1339.186064][T13331] ? xsk_setsockopt+0x52a/0x960 [ 1339.186084][T13331] ? __x64_sys_setsockopt+0x143/0x1b0 [ 1339.186126][T13331] __vmalloc_node_range_noprof+0x127/0x1540 [ 1339.186171][T13331] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1339.186193][T13331] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1339.186218][T13331] ? xskq_create+0x56/0x220 [ 1339.186243][T13331] xskq_create+0x148/0x220 [ 1339.186265][T13331] ? xsk_init_queue+0x8a/0xe0 [ 1339.186287][T13331] xsk_init_queue+0x8a/0xe0 [ 1339.186310][T13331] xsk_setsockopt+0x52a/0x960 [ 1339.186332][T13331] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1339.186362][T13331] ? __fget_files+0x2a/0x420 [ 1339.186378][T13331] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1339.186395][T13331] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1339.186416][T13331] do_sock_setsockopt+0x17c/0x1b0 [ 1339.186447][T13331] __x64_sys_setsockopt+0x143/0x1b0 [ 1339.186485][T13331] do_syscall_64+0x166/0x520 [ 1339.186510][T13331] ? trace_irq_disable+0x3b/0x140 [ 1339.186533][T13331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.186550][T13331] ? clear_bhb_loop+0x70/0xc0 [ 1339.186571][T13331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.186589][T13331] RIP: 0033:0x7f76fa0ae159 [ 1339.186604][T13331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1339.186619][T13331] RSP: 002b:00007f76f82c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1339.186637][T13331] RAX: ffffffffffffffda RBX: 00007f76fa336180 RCX: 00007f76fa0ae159 [ 1339.186649][T13331] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1339.186660][T13331] RBP: 00007f76fa14503b R08: 0000000000000004 R09: 0000000000000000 [ 1339.186671][T13331] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1339.186682][T13331] R13: 00007f76fa336218 R14: 00007f76fa336180 R15: 00007fffd4d857b8 [ 1339.186708][T13331] [ 1339.186715][T13331] Mem-Info: [ 1339.186723][T13331] active_anon:2835 inactive_anon:32615 isolated_anon:0 [ 1339.186723][T13331] active_file:26644 inactive_file:36413 isolated_file:0 [ 1339.186723][T13331] unevictable:0 dirty:230 writeback:0 [ 1339.186723][T13331] slab_reclaimable:12920 slab_unreclaimable:114421 [ 1339.186723][T13331] mapped:33206 shmem:24169 pagetables:1838 [ 1339.186723][T13331] sec_pagetables:0 bounce:0 [ 1339.186723][T13331] kernel_misc_reclaimable:0 [ 1339.186723][T13331] free:1261022 free_pcp:2494 free_cma:0 [ 1339.186765][T13331] Node 0 active_anon:11340kB inactive_anon:130460kB active_file:106376kB inactive_file:145652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132824kB dirty:920kB writeback:0kB shmem:96676kB kernel_stack:14624kB pagetables:7220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1339.186806][T13331] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1339.186844][T13331] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1339.186891][T13331] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 1339.186922][T13331] Node 0 DMA32 free:1085208kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:11340kB inactive_anon:130460kB active_file:106376kB inactive_file:145652kB unevictable:0kB writepending:920kB zspages:0kB present:3129332kB managed:2558768kB mlocked:0kB bounce:0kB free_pcp:9972kB local_pcp:9972kB free_cma:0kB [ 1339.186971][T13331] lowmem_reserve[]: 0 0 1 1 1 [ 1339.186999][T13331] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1812kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1339.187044][T13331] lowmem_reserve[]: 0 0 0 0 0 [ 1339.187072][T13331] Node 1 Normal free:3943520kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1339.187118][T13331] lowmem_reserve[]: 0 0 0 0 0 [ 1339.187147][T13331] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1339.187245][T13331] Node 0 DMA32: 358*4kB (UM) 332*8kB (UE) 106*16kB (UE) 80*32kB (UE) 26*64kB (UME) 8*128kB (UE) 106*256kB (UM) 41*512kB (UME) 26*1024kB (UM) 8*2048kB (UM) 240*4096kB (UM) = 1085208kB [ 1339.187378][T13331] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1339.187460][T13331] Node 1 Normal: 6*4kB (UM) 9*8kB (UM) 10*16kB (UM) 11*32kB (UM) 8*64kB (UM) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3943520kB [ 1339.187595][T13331] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1339.187609][T13331] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1339.187622][T13331] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1339.187635][T13331] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1339.187649][T13331] 87223 total pagecache pages [ 1339.187655][T13331] 1 pages in swap cache [ 1339.187661][T13331] Free swap = 124992kB [ 1339.187667][T13331] Total swap = 124996kB [ 1339.187674][T13331] 2097051 pages RAM [ 1339.187680][T13331] 0 pages HighMem/MovableOnly [ 1339.187686][T13331] 425290 pages reserved [ 1339.187691][T13331] 0 pages cma reserved [ 1343.583714][T13351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1343.766580][T13356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.768414][T13356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.780224][T13356] hsr0: left promiscuous mode [ 1347.032487][ T199] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1347.161379][T13388] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1347.227574][ T199] usb 9-1: Using ep0 maxpacket: 32 [ 1347.228227][ T199] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1347.229452][ T199] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1347.229478][ T199] usb 9-1: config 0 has no interface number 0 [ 1347.229511][ T199] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1347.231511][ T199] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.231545][ T199] usb 9-1: Product: syz [ 1347.231556][ T199] usb 9-1: Manufacturer: syz [ 1347.231567][ T199] usb 9-1: SerialNumber: syz [ 1347.284598][ T199] usb 9-1: config 0 descriptor?? [ 1347.404571][T13392] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1348.330156][ T199] f81534 9-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 1348.330200][ T199] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1348.330214][ T199] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1348.330279][ T199] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1348.444295][ T199] usb 9-1: USB disconnect, device number 5 [ 1349.994720][ T6819] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1350.230922][ T6819] usb 10-1: not running at top speed; connect to a high speed hub [ 1350.230954][ T6819] usb 10-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1350.251503][ T6819] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.251525][ T6819] usb 10-1: Product: syz [ 1350.251537][ T6819] usb 10-1: Manufacturer: syz [ 1350.251548][ T6819] usb 10-1: SerialNumber: syz [ 1350.372570][ T6819] keyspan 10-1:1.0: Keyspan 4 port adapter converter detected [ 1350.635368][ C0] usb 10-1: malformed indat packet [ 1350.639728][ C0] usb 10-1: malformed indat packet [ 1350.639999][ C0] usb 10-1: malformed indat packet [ 1350.640274][ C0] usb 10-1: malformed indat packet [ 1350.640544][ C0] usb 10-1: malformed indat packet [ 1350.640809][ C0] usb 10-1: malformed indat packet [ 1350.894912][ T6819] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1351.106177][ T6819] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1351.189080][ T6819] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1351.202573][ T6819] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1351.252262][ T6819] usb 10-1: USB disconnect, device number 9 [ 1351.497917][ T6819] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1351.735085][ T6819] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1351.829532][ T6819] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1351.930926][ T6819] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1352.011312][ T6819] keyspan 10-1:1.0: device disconnected [ 1352.059295][T13428] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1353.329194][ T6819] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1353.492560][ T6819] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1353.493596][ T6819] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1353.493620][ T6819] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1353.494672][ T6819] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1353.494694][ T6819] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1353.499032][ T6819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.499051][ T6819] usb 2-1: Product: syz [ 1353.499062][ T6819] usb 2-1: Manufacturer: syz [ 1353.499073][ T6819] usb 2-1: SerialNumber: syz [ 1353.627084][ T6819] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 1353.672360][ T6819] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1353.715641][ T6819] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1353.925630][T13451] tun0: tun_chr_ioctl cmd 2148553947 [ 1354.069522][T13443] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 1354.120499][ T8612] usb 2-1: USB disconnect, device number 6 [ 1354.236236][ T8612] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1354.315207][ T8612] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1354.321323][ T8612] ti_usb_3410_5052 2-1:2.0: device disconnected [ 1355.908654][ T6819] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1356.071990][ T6819] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1356.073112][ T6819] usb 10-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1356.073147][ T6819] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1356.073163][ T6819] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1356.073187][ T6819] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.092455][ T6819] cdc_acm 10-1:1.0: probe with driver cdc_acm failed with error -22 [ 1356.218770][T13480] device-mapper: ioctl: name not supplied when creating device [ 1356.334426][ T6819] usb 10-1: string descriptor 0 read error: -71 [ 1356.382345][ T6819] usb 10-1: USB disconnect, device number 10 [ 1356.816818][T13491] program syz.6.1774 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1357.224728][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1358.553043][ T8612] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1358.739294][ T8612] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1358.760718][ T8612] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.760739][ T8612] usb 7-1: Product: syz [ 1358.760749][ T8612] usb 7-1: Manufacturer: syz [ 1358.760759][ T8612] usb 7-1: SerialNumber: syz [ 1358.803270][ T8612] usb 7-1: config 0 descriptor?? [ 1358.823956][ T7443] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1358.844042][ T8612] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1359.046028][ T7443] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1359.053013][ T7443] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.053045][ T7443] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1359.070908][ T7443] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.070928][ T7443] usb 10-1: Product: syz [ 1359.070940][ T7443] usb 10-1: Manufacturer: syz [ 1359.070951][ T7443] usb 10-1: SerialNumber: syz [ 1359.616900][T13515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.645166][T13515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.709202][ T7443] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 1359.720364][ T8612] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1359.724005][ T8612] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1359.724048][ T8612] usb 7-1: media controller created [ 1359.770954][ T7443] usb 10-1: USB disconnect, device number 11 [ 1359.934248][ T8612] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1360.299822][ T8612] DVB: Unable to find symbol mt352_attach() [ 1360.342768][ T7443] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1360.514297][ T7443] usb 10-1: Using ep0 maxpacket: 8 [ 1360.517494][ T7443] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1360.526217][ T7443] usb 10-1: config index 0 descriptor too short (expected 301, got 72) [ 1360.526238][ T7443] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.526282][ T7443] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1360.526299][ T7443] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1360.526318][ T7443] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1360.526336][ T7443] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1360.526368][ T7443] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.551207][ T8612] DVB: Unable to find symbol nxt6000_attach() [ 1360.551220][ T8612] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1360.609871][ T8612] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input13 [ 1360.863148][ T7443] usb 10-1: usb_control_msg returned -71 [ 1360.863187][ T7443] usbtmc 10-1:16.0: can't read capabilities [ 1361.125300][ T8612] dvb-usb: schedule remote query interval to 1000 msecs. [ 1361.125318][ T8612] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1361.125331][ T8612] dvb-usb: bulk message failed: -22 (7/0) [ 1361.125344][ T8612] dvb-usb: bulk message failed: -22 (7/0) [ 1361.143225][ T8612] usb 7-1: USB disconnect, device number 18 [ 1361.173668][T13544] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1361.515078][ T7443] usb 10-1: USB disconnect, device number 12 [ 1362.041803][ T8612] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1362.546679][T13572] ucma_write: process 360 (syz.9.1807) changed security contexts after opening file descriptor, this is not allowed. [ 1362.549286][T13568] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1362.891676][ T4909] Bluetooth: hci1: unexpected event for opcode 0x042d [ 1363.935633][T13598] [ 1364.306171][T13599] input: syz0 as /devices/virtual/input/input14 [ 1366.009517][T13628] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1366.424869][ T8612] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1366.504220][T13639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1366.529705][ T7443] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1366.666030][ T8612] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1366.667028][ T8612] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.696463][ T7443] usb 10-1: Using ep0 maxpacket: 32 [ 1366.704769][ T7443] usb 10-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 1366.711720][ T7443] usb 10-1: config 2 has an invalid interface number: 88 but max is 0 [ 1366.711739][ T7443] usb 10-1: config 2 has no interface number 0 [ 1366.711769][ T7443] usb 10-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 1366.711787][ T7443] usb 10-1: config 2 interface 88 has no altsetting 0 [ 1366.765701][ T7443] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1366.765721][ T7443] usb 10-1: Product: syz [ 1366.765731][ T7443] usb 10-1: Manufacturer: syz [ 1366.765741][ T7443] usb 10-1: SerialNumber: syz [ 1366.802393][ T8612] usb 7-1: config 0 descriptor?? [ 1366.873093][ T8612] cp210x 7-1:0.0: cp210x converter detected [ 1367.101584][T13636] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1367.386992][T13636] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1367.668123][ T8612] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1367.668183][ T8612] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 1368.000568][ T1436] tipc: Subscription rejected, illegal request [ 1368.116943][ T7443] asix 10-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1368.117167][ T7443] asix 10-1:2.88: probe with driver asix failed with error -71 [ 1368.228705][ T8612] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1368.293036][ T7443] usb 10-1: USB disconnect, device number 13 [ 1368.435615][ T8612] usb 7-1: USB disconnect, device number 19 [ 1368.774021][ T8612] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1368.774535][ T8612] cp210x 7-1:0.0: device disconnected [ 1369.249853][ T7443] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1369.365743][T13663] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1369.414142][ T7443] usb 2-1: Using ep0 maxpacket: 8 [ 1369.414712][ T7443] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1369.419050][ T7443] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1369.419070][ T7443] usb 2-1: config 179 has no interface number 0 [ 1369.419112][ T7443] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1369.419131][ T7443] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1369.419152][ T7443] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1369.419172][ T7443] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1369.419192][ T7443] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1369.419223][ T7443] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.446698][T13660] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1370.953643][ T8612] usb 2-1: USB disconnect, device number 7 [ 1370.953701][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1370.953753][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1371.408946][ T4909] Bluetooth: hci1: unexpected event for opcode 0x042d [ 1371.438628][T13674] input: syz1 as /devices/virtual/input/input15 [ 1372.176780][ T7443] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1372.339071][ T7443] usb 9-1: Using ep0 maxpacket: 32 [ 1372.340374][ T7443] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1372.341695][ T7443] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 1372.341713][ T7443] usb 9-1: config 0 has no interface number 0 [ 1372.345436][ T7443] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.345454][ T7443] usb 9-1: Product: syz [ 1372.345465][ T7443] usb 9-1: Manufacturer: syz [ 1372.345476][ T7443] usb 9-1: SerialNumber: syz [ 1372.364478][ T7443] usb 9-1: config 0 descriptor?? [ 1372.401977][ T7443] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1372.538678][T13695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1372.675759][T13698] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1373.043515][ T7443] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1373.249200][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1373.294145][ T7443] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1373.338473][ T7443] usb 9-1: USB disconnect, device number 6 [ 1373.391692][T13704] ALSA: seq fatal error: cannot create timer (-19) [ 1373.427887][ T7443] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1373.450577][ T7443] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1373.457853][ T7443] quatech2 9-1:0.51: device disconnected [ 1373.790697][T13710] block nbd9: not configured, cannot reconfigure [ 1375.253915][T13717] syz.1.1865: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1375.253974][T13717] CPU: 0 UID: 0 PID: 13717 Comm: syz.1.1865 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1375.253992][T13717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1375.254003][T13717] Call Trace: [ 1375.254009][T13717] [ 1375.254016][T13717] dump_stack_lvl+0xe8/0x150 [ 1375.254044][T13717] warn_alloc+0x24d/0x270 [ 1375.254070][T13717] ? __pfx_warn_alloc+0x10/0x10 [ 1375.254090][T13717] ? xsk_setsockopt+0x52a/0x960 [ 1375.254107][T13717] ? __x64_sys_setsockopt+0x143/0x1b0 [ 1375.254146][T13717] __vmalloc_node_range_noprof+0x127/0x1540 [ 1375.254186][T13717] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1375.254206][T13717] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1375.254228][T13717] ? xskq_create+0x56/0x220 [ 1375.254251][T13717] xskq_create+0x148/0x220 [ 1375.254271][T13717] ? xsk_init_queue+0x8a/0xe0 [ 1375.254292][T13717] xsk_init_queue+0x8a/0xe0 [ 1375.254312][T13717] xsk_setsockopt+0x52a/0x960 [ 1375.254332][T13717] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1375.254364][T13717] ? __fget_files+0x2a/0x420 [ 1375.254380][T13717] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1375.254395][T13717] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1375.254414][T13717] do_sock_setsockopt+0x17c/0x1b0 [ 1375.254443][T13717] __x64_sys_setsockopt+0x143/0x1b0 [ 1375.254472][T13717] do_syscall_64+0x166/0x520 [ 1375.254493][T13717] ? trace_irq_disable+0x3b/0x140 [ 1375.254513][T13717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.254529][T13717] ? clear_bhb_loop+0x70/0xc0 [ 1375.254547][T13717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.254582][T13717] RIP: 0033:0x7f76fa0ae159 [ 1375.254597][T13717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1375.254611][T13717] RSP: 002b:00007f76f82c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1375.254627][T13717] RAX: ffffffffffffffda RBX: 00007f76fa336180 RCX: 00007f76fa0ae159 [ 1375.254639][T13717] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1375.254649][T13717] RBP: 00007f76fa14503b R08: 0000000000000004 R09: 0000000000000000 [ 1375.254659][T13717] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1375.254681][T13717] R13: 00007f76fa336218 R14: 00007f76fa336180 R15: 00007fffd4d857b8 [ 1375.254705][T13717] [ 1375.254710][T13717] Mem-Info: [ 1375.254718][T13717] active_anon:2362 inactive_anon:33809 isolated_anon:0 [ 1375.254718][T13717] active_file:27140 inactive_file:35929 isolated_file:0 [ 1375.254718][T13717] unevictable:0 dirty:279 writeback:0 [ 1375.254718][T13717] slab_reclaimable:12861 slab_unreclaimable:114801 [ 1375.254718][T13717] mapped:33262 shmem:24863 pagetables:1910 [ 1375.254718][T13717] sec_pagetables:0 bounce:0 [ 1375.254718][T13717] kernel_misc_reclaimable:0 [ 1375.254718][T13717] free:1260125 free_pcp:2014 free_cma:0 [ 1375.254778][T13717] Node 0 active_anon:9448kB inactive_anon:135236kB active_file:108360kB inactive_file:143716kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133048kB dirty:1116kB writeback:0kB shmem:99452kB kernel_stack:14656kB pagetables:7508kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1375.254818][T13717] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1375.254853][T13717] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1375.254899][T13717] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 1375.254929][T13717] Node 0 DMA32 free:1081620kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:9448kB inactive_anon:135236kB active_file:108360kB inactive_file:143716kB unevictable:0kB writepending:1116kB zspages:0kB present:3129332kB managed:2558768kB mlocked:0kB bounce:0kB free_pcp:8052kB local_pcp:8052kB free_cma:0kB [ 1375.254978][T13717] lowmem_reserve[]: 0 0 1 1 1 [ 1375.255008][T13717] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1812kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1375.255051][T13717] lowmem_reserve[]: 0 0 0 0 0 [ 1375.255078][T13717] Node 1 Normal free:3943520kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1375.255122][T13717] lowmem_reserve[]: 0 0 0 0 0 [ 1375.255165][T13717] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1375.255264][T13717] Node 0 DMA32: 33*4kB (UME) 166*8kB (UME) 73*16kB (UME) 26*32kB (UME) 7*64kB (UE) 10*128kB (UME) 115*256kB (UM) 41*512kB (UME) 26*1024kB (UM) 8*2048kB (UM) 240*4096kB (UM) = 1081668kB [ 1375.255402][T13717] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1375.255483][T13717] Node 1 Normal: 6*4kB (UM) 9*8kB (UM) 10*16kB (UM) 11*32kB (UM) 8*64kB (UM) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3943520kB [ 1375.255608][T13717] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1375.255622][T13717] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1375.255635][T13717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1375.255647][T13717] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1375.255660][T13717] 87929 total pagecache pages [ 1375.255666][T13717] 1 pages in swap cache [ 1375.255671][T13717] Free swap = 124992kB [ 1375.255677][T13717] Total swap = 124996kB [ 1375.255683][T13717] 2097051 pages RAM [ 1375.255689][T13717] 0 pages HighMem/MovableOnly [ 1375.255695][T13717] 425290 pages reserved [ 1375.255700][T13717] 0 pages cma reserved [ 1376.012631][T13717] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1865'. [ 1381.582718][T13731] vlan0: entered allmulticast mode [ 1381.582737][T13731] bond0: entered allmulticast mode [ 1381.885758][T13737] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1381.995072][ T7015] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1382.058950][T13742] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1382.059057][T13742] syzkaller0: linktype set to 6 [ 1382.169121][ T7015] usb 10-1: Using ep0 maxpacket: 8 [ 1382.171619][ T7015] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1382.174386][ T7015] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.373641][ T7015] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1382.373657][ T7015] pvrusb2: ********** [ 1382.373663][ T7015] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1382.373672][ T7015] pvrusb2: Important functionality might not be entirely working. [ 1382.373679][ T7015] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1382.373688][ T7015] pvrusb2: ********** [ 1382.800330][ T2387] pvrusb2: Invalid write control endpoint [ 1382.932959][ T7015] usb 10-1: USB disconnect, device number 14 [ 1388.698281][T13785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1389.508690][T13800] kvm [13793]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xffffffffffffff47 [ 1390.320875][ T2387] pvrusb2: Invalid write control endpoint [ 1390.320888][ T2387] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1390.320896][ T2387] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1390.320903][ T2387] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1390.320910][ T2387] pvrusb2: Device being rendered inoperable [ 1390.353269][ T2387] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1390.473026][ T2387] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1390.580593][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1901'. [ 1390.761320][T13812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1391.189230][ T2387] pvrusb2: Attached sub-driver cx25840 [ 1391.189304][ T2387] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1391.189314][ T2387] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1391.653383][T13831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1393.776158][ T7016] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1393.940315][ T7016] usb 9-1: Using ep0 maxpacket: 32 [ 1393.941342][ T7016] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1393.942342][ T7016] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.942364][ T7016] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1393.955818][ T7016] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1393.955838][ T7016] usb 9-1: Product: syz [ 1393.955848][ T7016] usb 9-1: Manufacturer: syz [ 1394.096074][ T7016] hub 9-1:4.0: USB hub found [ 1394.340304][ T7016] hub 9-1:4.0: 2 ports detected [ 1394.734922][ T7016] hub 9-1:4.0: config failed, can't get hub status (err -71) [ 1394.880802][ T7016] usb 9-1: USB disconnect, device number 7 [ 1395.606407][T13902] kAFS: bad VL server IP address [ 1396.324338][T13914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1398.240788][T13922] warn_alloc: 2 callbacks suppressed [ 1398.240805][T13922] syz.6.1932: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1398.240864][T13922] CPU: 0 UID: 0 PID: 13922 Comm: syz.6.1932 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1398.240882][T13922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1398.240893][T13922] Call Trace: [ 1398.240900][T13922] [ 1398.240908][T13922] dump_stack_lvl+0xe8/0x150 [ 1398.240938][T13922] warn_alloc+0x24d/0x270 [ 1398.240967][T13922] ? __pfx_warn_alloc+0x10/0x10 [ 1398.240988][T13922] ? xsk_setsockopt+0x52a/0x960 [ 1398.241008][T13922] ? __x64_sys_setsockopt+0x143/0x1b0 [ 1398.241050][T13922] __vmalloc_node_range_noprof+0x127/0x1540 [ 1398.241094][T13922] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1398.241116][T13922] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1398.241140][T13922] ? xskq_create+0x56/0x220 [ 1398.241165][T13922] xskq_create+0x148/0x220 [ 1398.241187][T13922] ? xsk_init_queue+0x8a/0xe0 [ 1398.241209][T13922] xsk_init_queue+0x8a/0xe0 [ 1398.241232][T13922] xsk_setsockopt+0x52a/0x960 [ 1398.241267][T13922] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1398.241295][T13922] ? __fget_files+0x2a/0x420 [ 1398.241312][T13922] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1398.241327][T13922] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1398.241358][T13922] do_sock_setsockopt+0x17c/0x1b0 [ 1398.241407][T13922] __x64_sys_setsockopt+0x143/0x1b0 [ 1398.241439][T13922] do_syscall_64+0x166/0x520 [ 1398.241462][T13922] ? trace_irq_disable+0x3b/0x140 [ 1398.241484][T13922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.241503][T13922] ? clear_bhb_loop+0x70/0xc0 [ 1398.241530][T13922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.241548][T13922] RIP: 0033:0x7fd1ee88e159 [ 1398.241563][T13922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1398.241577][T13922] RSP: 002b:00007fd1ecaa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1398.241595][T13922] RAX: ffffffffffffffda RBX: 00007fd1eeb16180 RCX: 00007fd1ee88e159 [ 1398.241607][T13922] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1398.241618][T13922] RBP: 00007fd1ee92503b R08: 0000000000000004 R09: 0000000000000000 [ 1398.241628][T13922] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1398.241639][T13922] R13: 00007fd1eeb16218 R14: 00007fd1eeb16180 R15: 00007ffe677268c8 [ 1398.241666][T13922] [ 1398.241673][T13922] Mem-Info: [ 1398.241680][T13922] active_anon:204 inactive_anon:17283 isolated_anon:0 [ 1398.241680][T13922] active_file:27150 inactive_file:35929 isolated_file:0 [ 1398.241680][T13922] unevictable:0 dirty:222 writeback:0 [ 1398.241680][T13922] slab_reclaimable:12870 slab_unreclaimable:114310 [ 1398.241680][T13922] mapped:36083 shmem:6118 pagetables:1902 [ 1398.241680][T13922] sec_pagetables:0 bounce:0 [ 1398.241680][T13922] kernel_misc_reclaimable:0 [ 1398.241680][T13922] free:1280818 free_pcp:1072 free_cma:0 [ 1398.241725][T13922] Node 0 active_anon:816kB inactive_anon:69132kB active_file:108400kB inactive_file:143716kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:144332kB dirty:888kB writeback:0kB shmem:24472kB kernel_stack:14784kB pagetables:7476kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1398.241766][T13922] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1398.241803][T13922] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1398.241850][T13922] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 1398.241881][T13922] Node 0 DMA32 free:1164392kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:816kB inactive_anon:69132kB active_file:108400kB inactive_file:143716kB unevictable:0kB writepending:888kB zspages:0kB present:3129332kB managed:2558768kB mlocked:0kB bounce:0kB free_pcp:4284kB local_pcp:4284kB free_cma:0kB [ 1398.241931][T13922] lowmem_reserve[]: 0 0 1 1 1 [ 1398.241960][T13922] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1812kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1398.242006][T13922] lowmem_reserve[]: 0 0 0 0 0 [ 1398.242034][T13922] Node 1 Normal free:3943520kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1398.242081][T13922] lowmem_reserve[]: 0 0 0 0 0 [ 1398.242110][T13922] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1398.242217][T13922] Node 0 DMA32: 678*4kB (UME) 494*8kB (UME) 1158*16kB (UME) 802*32kB (UME) 275*64kB (UME) 152*128kB (UME) 115*256kB (UM) 41*512kB (UME) 26*1024kB (UM) 8*2048kB (UM) 240*4096kB (UM) = 1164392kB [ 1398.242360][T13922] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1398.242443][T13922] Node 1 Normal: 6*4kB (UM) 9*8kB (UM) 10*16kB (UM) 11*32kB (UM) 8*64kB (UM) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3943520kB [ 1398.242574][T13922] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1398.242587][T13922] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1398.242601][T13922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1398.242614][T13922] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1398.242627][T13922] 69194 total pagecache pages [ 1398.242634][T13922] 1 pages in swap cache [ 1398.242640][T13922] Free swap = 124992kB [ 1398.242646][T13922] Total swap = 124996kB [ 1398.242652][T13922] 2097051 pages RAM [ 1398.242658][T13922] 0 pages HighMem/MovableOnly [ 1398.242664][T13922] 425290 pages reserved [ 1398.242670][T13922] 0 pages cma reserved [ 1402.496582][T13953] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1402.673898][T13957] Line length is too long: Should be less than 4094 [ 1407.401458][ T4909] Bluetooth: hci1: unexpected event for opcode 0x202d [ 1409.620419][T13974] warn_alloc: 1 callbacks suppressed [ 1409.620436][T13974] syz.8.1950: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1409.620491][T13974] CPU: 0 UID: 0 PID: 13974 Comm: syz.8.1950 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1409.620510][T13974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1409.620521][T13974] Call Trace: [ 1409.620528][T13974] [ 1409.620535][T13974] dump_stack_lvl+0xe8/0x150 [ 1409.620564][T13974] warn_alloc+0x24d/0x270 [ 1409.620592][T13974] ? __pfx_warn_alloc+0x10/0x10 [ 1409.620612][T13974] ? xsk_setsockopt+0x52a/0x960 [ 1409.620631][T13974] ? __x64_sys_setsockopt+0x143/0x1b0 [ 1409.620672][T13974] __vmalloc_node_range_noprof+0x127/0x1540 [ 1409.620715][T13974] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1409.620737][T13974] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1409.620760][T13974] ? xskq_create+0x56/0x220 [ 1409.620784][T13974] xskq_create+0x148/0x220 [ 1409.620805][T13974] ? xsk_init_queue+0x8a/0xe0 [ 1409.620827][T13974] xsk_init_queue+0x8a/0xe0 [ 1409.620848][T13974] xsk_setsockopt+0x52a/0x960 [ 1409.620870][T13974] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1409.620898][T13974] ? __fget_files+0x2a/0x420 [ 1409.620915][T13974] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1409.620930][T13974] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1409.620951][T13974] do_sock_setsockopt+0x17c/0x1b0 [ 1409.620981][T13974] __x64_sys_setsockopt+0x143/0x1b0 [ 1409.621011][T13974] do_syscall_64+0x166/0x520 [ 1409.621034][T13974] ? trace_irq_disable+0x3b/0x140 [ 1409.621056][T13974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.621072][T13974] ? clear_bhb_loop+0x70/0xc0 [ 1409.621092][T13974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.621108][T13974] RIP: 0033:0x7feacefce159 [ 1409.621124][T13974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1409.621138][T13974] RSP: 002b:00007feacd1e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1409.621155][T13974] RAX: ffffffffffffffda RBX: 00007feacf256180 RCX: 00007feacefce159 [ 1409.621168][T13974] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1409.621178][T13974] RBP: 00007feacf06503b R08: 0000000000000004 R09: 0000000000000000 [ 1409.621188][T13974] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1409.621199][T13974] R13: 00007feacf256218 R14: 00007feacf256180 R15: 00007ffd92a39068 [ 1409.621224][T13974] [ 1409.621230][T13974] Mem-Info: [ 1409.621238][T13974] active_anon:210 inactive_anon:14529 isolated_anon:0 [ 1409.621238][T13974] active_file:27150 inactive_file:35929 isolated_file:0 [ 1409.621238][T13974] unevictable:0 dirty:262 writeback:0 [ 1409.621238][T13974] slab_reclaimable:12870 slab_unreclaimable:114321 [ 1409.621238][T13974] mapped:33375 shmem:3414 pagetables:1941 [ 1409.621238][T13974] sec_pagetables:0 bounce:0 [ 1409.621238][T13974] kernel_misc_reclaimable:0 [ 1409.621238][T13974] free:1280760 free_pcp:3657 free_cma:0 [ 1409.621279][T13974] Node 0 active_anon:840kB inactive_anon:58116kB active_file:108400kB inactive_file:143716kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133500kB dirty:1048kB writeback:0kB shmem:13656kB kernel_stack:14848kB pagetables:7632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1409.621318][T13974] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1409.621362][T13974] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1409.621406][T13974] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 1409.621436][T13974] Node 0 DMA32 free:1164160kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:840kB inactive_anon:58116kB active_file:108400kB inactive_file:143716kB unevictable:0kB writepending:1048kB zspages:0kB present:3129332kB managed:2558768kB mlocked:0kB bounce:0kB free_pcp:14624kB local_pcp:14624kB free_cma:0kB [ 1409.621484][T13974] lowmem_reserve[]: 0 0 1 1 1 [ 1409.621512][T13974] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1812kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1409.621554][T13974] lowmem_reserve[]: 0 0 0 0 0 [ 1409.621582][T13974] Node 1 Normal free:3943520kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1409.621626][T13974] lowmem_reserve[]: 0 0 0 0 0 [ 1409.621654][T13974] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1409.621748][T13974] Node 0 DMA32: 806*4kB (UE) 494*8kB (UME) 1151*16kB (UM) 780*32kB (UME) 276*64kB (UME) 152*128kB (UME) 115*256kB (UM) 41*512kB (UME) 26*1024kB (UM) 8*2048kB (UM) 240*4096kB (UM) = 1164152kB [ 1409.621878][T13974] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1409.621958][T13974] Node 1 Normal: 6*4kB (UM) 9*8kB (UM) 10*16kB (UM) 11*32kB (UM) 8*64kB (UM) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3943520kB [ 1409.622082][T13974] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1409.622094][T13974] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1409.622107][T13974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1409.622119][T13974] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1409.622132][T13974] 66490 total pagecache pages [ 1409.622138][T13974] 1 pages in swap cache [ 1409.622143][T13974] Free swap = 124992kB [ 1409.622149][T13974] Total swap = 124996kB [ 1409.622156][T13974] 2097051 pages RAM [ 1409.622161][T13974] 0 pages HighMem/MovableOnly [ 1409.622167][T13974] 425290 pages reserved [ 1409.622173][T13974] 0 pages cma reserved [ 1412.531292][T13987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1413.015960][ T4909] Bluetooth: hci4: unexpected cc 0x204b length: 34 > 3 [ 1413.153687][ T7015] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1413.316188][ T7015] usb 7-1: Using ep0 maxpacket: 32 [ 1413.329722][ T7015] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1413.332451][ T7015] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1413.332470][ T7015] usb 7-1: config 0 has no interface number 0 [ 1413.335886][ T7015] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.335904][ T7015] usb 7-1: Product: syz [ 1413.335915][ T7015] usb 7-1: Manufacturer: syz [ 1413.335927][ T7015] usb 7-1: SerialNumber: syz [ 1413.379067][ T7015] usb 7-1: config 0 descriptor?? [ 1413.391733][ T7015] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1413.507418][T14016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1413.663413][ T7015] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1413.817768][ T7015] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1414.097040][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1414.103652][ T7015] usb 7-1: USB disconnect, device number 20 [ 1414.239419][T14022] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1414.268068][ T7015] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1414.279114][ T7015] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1414.279767][ T7015] quatech2 7-1:0.51: device disconnected [ 1415.333963][ T7016] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1415.496305][ T7016] usb 9-1: Using ep0 maxpacket: 32 [ 1415.497056][ T7016] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.6e [ 1415.498108][ T7016] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 1415.498128][ T7016] usb 9-1: config 0 has no interface number 0 [ 1415.498161][ T7016] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1415.515036][ T7016] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.515056][ T7016] usb 9-1: Product: syz [ 1415.515067][ T7016] usb 9-1: Manufacturer: syz [ 1415.515079][ T7016] usb 9-1: SerialNumber: syz [ 1415.524198][ T7016] usb 9-1: config 0 descriptor?? [ 1415.777391][T14056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1421.257579][ T7016] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 1421.257605][ T7016] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1421.338455][ T7016] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1421.338482][ T7016] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1421.338498][ T7016] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1421.338512][ T7016] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1421.338723][ T7016] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 1421.393532][ T7016] usb 9-1: USB disconnect, device number 8 [ 1424.923346][T14106] warn_alloc: 1 callbacks suppressed [ 1424.923363][T14106] syz.6.1995: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1424.923437][T14106] CPU: 0 UID: 0 PID: 14106 Comm: syz.6.1995 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1424.923455][T14106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1424.923467][T14106] Call Trace: [ 1424.923473][T14106] [ 1424.923480][T14106] dump_stack_lvl+0xe8/0x150 [ 1424.923511][T14106] warn_alloc+0x24d/0x270 [ 1424.923539][T14106] ? __pfx_warn_alloc+0x10/0x10 [ 1424.923560][T14106] ? xsk_setsockopt+0x52a/0x960 [ 1424.923580][T14106] ? __x64_sys_setsockopt+0x143/0x1b0 [ 1424.923623][T14106] __vmalloc_node_range_noprof+0x127/0x1540 [ 1424.923667][T14106] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1424.923689][T14106] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1424.923713][T14106] ? xskq_create+0x56/0x220 [ 1424.923739][T14106] xskq_create+0x148/0x220 [ 1424.923761][T14106] ? xsk_init_queue+0x8a/0xe0 [ 1424.923784][T14106] xsk_init_queue+0x8a/0xe0 [ 1424.923808][T14106] xsk_setsockopt+0x52a/0x960 [ 1424.923830][T14106] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1424.923872][T14106] ? __fget_files+0x2a/0x420 [ 1424.923889][T14106] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1424.923904][T14106] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1424.923925][T14106] do_sock_setsockopt+0x17c/0x1b0 [ 1424.923955][T14106] __x64_sys_setsockopt+0x143/0x1b0 [ 1424.923986][T14106] do_syscall_64+0x166/0x520 [ 1424.924016][T14106] ? trace_irq_disable+0x3b/0x140 [ 1424.924038][T14106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.924055][T14106] ? clear_bhb_loop+0x70/0xc0 [ 1424.924076][T14106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.924092][T14106] RIP: 0033:0x7fd1ee88e159 [ 1424.924108][T14106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1424.924122][T14106] RSP: 002b:00007fd1ecaa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1424.924138][T14106] RAX: ffffffffffffffda RBX: 00007fd1eeb16180 RCX: 00007fd1ee88e159 [ 1424.924151][T14106] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1424.924160][T14106] RBP: 00007fd1ee92503b R08: 0000000000000004 R09: 0000000000000000 [ 1424.924170][T14106] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1424.924180][T14106] R13: 00007fd1eeb16218 R14: 00007fd1eeb16180 R15: 00007ffe677268c8 [ 1424.924206][T14106] [ 1424.924212][T14106] Mem-Info: [ 1424.924219][T14106] active_anon:206 inactive_anon:14554 isolated_anon:0 [ 1424.924219][T14106] active_file:27158 inactive_file:35929 isolated_file:0 [ 1424.924219][T14106] unevictable:0 dirty:88 writeback:0 [ 1424.924219][T14106] slab_reclaimable:12892 slab_unreclaimable:113970 [ 1424.924219][T14106] mapped:33288 shmem:3403 pagetables:1918 [ 1424.924219][T14106] sec_pagetables:0 bounce:0 [ 1424.924219][T14106] kernel_misc_reclaimable:0 [ 1424.924219][T14106] free:1284171 free_pcp:661 free_cma:0 [ 1424.924260][T14106] Node 0 active_anon:824kB inactive_anon:58216kB active_file:108432kB inactive_file:143716kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133152kB dirty:352kB writeback:0kB shmem:13612kB kernel_stack:14752kB pagetables:7540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1424.924299][T14106] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1424.924334][T14106] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1424.924378][T14106] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 1424.924408][T14106] Node 0 DMA32 free:1177804kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:824kB inactive_anon:58216kB active_file:108432kB inactive_file:143716kB unevictable:0kB writepending:352kB zspages:0kB present:3129332kB managed:2558768kB mlocked:0kB bounce:0kB free_pcp:2640kB local_pcp:2640kB free_cma:0kB [ 1424.924455][T14106] lowmem_reserve[]: 0 0 1 1 1 [ 1424.924483][T14106] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1812kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1424.924526][T14106] lowmem_reserve[]: 0 0 0 0 0 [ 1424.924554][T14106] Node 1 Normal free:3943520kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1424.924598][T14106] lowmem_reserve[]: 0 0 0 0 0 [ 1424.924626][T14106] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1424.924720][T14106] Node 0 DMA32: 733*4kB (UM) 885*8kB (UM) 1161*16kB (UME) 815*32kB (UM) 337*64kB (UME) 186*128kB (UME) 120*256kB (UM) 41*512kB (UME) 26*1024kB (UM) 8*2048kB (UM) 240*4096kB (UM) = 1177804kB [ 1424.924862][T14106] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1424.924944][T14106] Node 1 Normal: 6*4kB (UM) 9*8kB (UM) 10*16kB (UM) 11*32kB (UM) 8*64kB (UM) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3943520kB [ 1424.925074][T14106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1424.925087][T14106] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1424.925099][T14106] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1424.925112][T14106] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1424.925125][T14106] 66487 total pagecache pages [ 1424.925131][T14106] 1 pages in swap cache [ 1424.925136][T14106] Free swap = 124992kB [ 1424.925142][T14106] Total swap = 124996kB [ 1424.925149][T14106] 2097051 pages RAM [ 1424.925154][T14106] 0 pages HighMem/MovableOnly [ 1424.925160][T14106] 425290 pages reserved [ 1424.925166][T14106] 0 pages cma reserved [ 1427.057351][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1427.450706][T14122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1428.480377][T14139] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2008'. [ 1428.502309][T14141] program syz.1.2009 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1428.682948][T14145] ------------[ cut here ]------------ [ 1428.682962][T14145] err == -EMSGSIZE [ 1428.682980][T14145] WARNING: net/core/rtnetlink.c:4599 at rtmsg_ifinfo_build_skb+0x21c/0x260, CPU#0: syz.8.2010/14145 [ 1454.970634][T14145] Modules linked in: [ 1454.974536][T14145] CPU: 0 UID: 0 PID: 14145 Comm: syz.8.2010 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1454.984459][T14145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1454.994553][T14145] RIP: 0010:rtmsg_ifinfo_build_skb+0x21c/0x260 [ 1455.000746][T14145] Code: f6 ba 01 00 00 00 89 e9 e8 21 fc 3a 00 4c 89 f0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 5b d9 2c 02 cc e8 85 93 98 f8 90 <0f> 0b 90 eb 8f 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 8b fe ff ff 4c [ 1455.020385][T14145] RSP: 0018:ffffc9000ce3e808 EFLAGS: 00010287 [ 1455.026458][T14145] RAX: ffffffff892e000b RBX: 1ffff1100589b821 RCX: 0000000000080000 [ 1455.034450][T14145] RDX: ffffc9000fccb000 RSI: 00000000000069e7 RDI: 00000000000069e8 [ 1455.042459][T14145] RBP: 00000000ffffffa6 R08: 0000000000000000 R09: 0000000000000000 [ 1455.050430][T14145] R10: fffff520019c7ca8 R11: 0000000000000020 R12: 0000000000000000 [ 1455.058426][T14145] R13: 0000000000000000 R14: ffff888034601500 R15: ffff88802c4dc000 [ 1455.066422][T14145] FS: 00007feacd2266c0(0000) GS:ffff888125bcd000(0000) knlGS:0000000000000000 [ 1455.075386][T14145] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1455.081997][T14145] CR2: 00007fd8c16ab840 CR3: 00000000606ce000 CR4: 00000000003526f0 [ 1455.090084][T14145] Call Trace: [ 1455.093452][T14145] [ 1455.096447][T14145] rtnetlink_event+0x1b7/0x270 [ 1455.101311][T14145] notifier_call_chain+0x1a5/0x3d0 [ 1455.106520][T14145] netif_disable_lro+0xdd/0x4b0 [ 1455.111419][T14145] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 1455.116828][T14145] ? __pfx_netif_disable_lro+0x10/0x10 [ 1455.122366][T14145] ? neigh_parms_alloc+0x428/0x530 [ 1455.127509][T14145] ? neigh_parms_alloc+0x30e/0x530 [ 1455.132694][T14145] ipv6_add_dev+0x4b7/0x1400 [ 1455.137421][T14145] addrconf_notify+0x771/0x1050 [ 1455.142346][T14145] notifier_call_chain+0x1a5/0x3d0 [ 1455.147530][T14145] register_netdevice+0x18c0/0x1ed0 [ 1455.152819][T14145] ? __pfx_register_netdevice+0x10/0x10 [ 1455.158401][T14145] macsec_newlink+0x706/0x1200 [ 1455.163227][T14145] ? rcu_is_watching+0x16/0xb0 [ 1455.168011][T14145] ? __pfx_macsec_newlink+0x10/0x10 [ 1455.173261][T14145] ? alloc_netdev_mqs+0xd59/0x12c0 [ 1455.178394][T14145] ? __kvmalloc_node_noprof+0x5d4/0x890 [ 1455.183999][T14145] ? alloc_netdev_mqs+0xd59/0x12c0 [ 1455.189132][T14145] ? alloc_netdev_mqs+0xd59/0x12c0 [ 1455.194321][T14145] ? validate_linkmsg+0x765/0x950 [ 1455.199380][T14145] ? rtnl_create_link+0xa04/0xd70 [ 1455.204469][T14145] ? __pfx_macsec_newlink+0x10/0x10 [ 1455.209697][T14145] rtnl_newlink_create+0x305/0x7b0 [ 1455.214864][T14145] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1455.220521][T14145] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1455.226377][T14145] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1455.232199][T14145] rtnl_newlink+0x166d/0x1c30 [ 1455.236935][T14145] ? __pfx_rtnl_newlink+0x10/0x10 [ 1455.241972][T14145] ? do_syscall_64+0x166/0x520 [ 1455.246757][T14145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.252893][T14145] ? __lock_acquire+0x747/0x2de0 [ 1455.257860][T14145] ? kasan_quarantine_put+0xbb/0x1f0 [ 1455.263199][T14145] ? lockdep_hardirqs_on+0x7b/0x110 [ 1455.268416][T14145] ? nlmon_xmit+0xb0/0x100 [ 1455.272908][T14145] ? kmem_cache_free+0x187/0x6d0 [ 1455.277865][T14145] ? nlmon_xmit+0xb0/0x100 [ 1455.282344][T14145] ? __lock_acquire+0x747/0x2de0 [ 1455.287311][T14145] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 1455.292723][T14145] ? lockdep_hardirqs_on+0x7b/0x110 [ 1455.297937][T14145] ? __dev_queue_xmit+0x294/0x3880 [ 1455.303091][T14145] ? __dev_queue_xmit+0x1ee9/0x3880 [ 1455.308321][T14145] ? lock_acquire+0x115/0x350 [ 1455.313059][T14145] ? __pfx_rtnl_newlink+0x10/0x10 [ 1455.318110][T14145] rtnetlink_rcv_msg+0x802/0xc00 [ 1455.323072][T14145] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1455.328242][T14145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1455.333725][T14145] ? ref_tracker_free+0x668/0x820 [ 1455.338787][T14145] ? __pfx_ref_tracker_free+0x10/0x10 [ 1455.344172][T14145] netlink_rcv_skb+0x226/0x4a0 [ 1455.348973][T14145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1455.354441][T14145] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1455.359819][T14145] ? netlink_deliver_tap+0x2e/0x1b0 [ 1455.365021][T14145] ? netlink_deliver_tap+0x2e/0x1b0 [ 1455.370249][T14145] netlink_unicast+0x7f5/0x990 [ 1455.375023][T14145] netlink_sendmsg+0x813/0xb40 [ 1455.379847][T14145] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1455.385487][T14145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1455.390816][T14145] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1455.397252][T14145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1455.402575][T14145] sock_sendmsg_nosec+0x13a/0x180 [ 1455.407608][T14145] ____sys_sendmsg+0x565/0x870 [ 1455.412409][T14145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1455.417699][T14145] ? import_iovec+0x73/0xa0 [ 1455.422249][T14145] ___sys_sendmsg+0x2a5/0x360 [ 1455.426920][T14145] ? __lock_acquire+0x747/0x2de0 [ 1455.431886][T14145] ? __pfx____sys_sendmsg+0x10/0x10 [ 1455.437083][T14145] ? futex_wait+0x2a2/0x390 [ 1455.441640][T14145] ? __fget_files+0x2a/0x420 [ 1455.446255][T14145] ? __fget_files+0x3a8/0x420 [ 1455.450943][T14145] __x64_sys_sendmsg+0x1b7/0x290 [ 1455.455919][T14145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1455.461396][T14145] do_syscall_64+0x166/0x520 [ 1455.466026][T14145] ? trace_irq_disable+0x3b/0x140 [ 1455.471066][T14145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.477166][T14145] ? clear_bhb_loop+0x70/0xc0 [ 1455.481846][T14145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.487763][T14145] RIP: 0033:0x7feacefce159 [ 1455.492186][T14145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1455.511834][T14145] RSP: 002b:00007feacd226028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1455.520301][T14145] RAX: ffffffffffffffda RBX: 00007feacf255fa0 RCX: 00007feacefce159 [ 1455.528284][T14145] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 1455.536308][T14145] RBP: 00007feacf06503b R08: 0000000000000000 R09: 0000000000000000 [ 1455.544326][T14145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1455.552328][T14145] R13: 00007feacf256038 R14: 00007feacf255fa0 R15: 00007ffd92a39068 [ 1455.560328][T14145] [ 1455.563390][T14145] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1455.570693][T14145] CPU: 0 UID: 0 PID: 14145 Comm: syz.8.2010 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1455.580582][T14145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1455.590641][T14145] Call Trace: [ 1455.593924][T14145] [ 1455.596855][T14145] vpanic+0x56d/0xa60 [ 1455.600840][T14145] ? __pfx__printk+0x10/0x10 [ 1455.605429][T14145] ? __pfx_vpanic+0x10/0x10 [ 1455.609928][T14145] ? is_bpf_text_address+0x292/0x2b0 [ 1455.615224][T14145] ? is_bpf_text_address+0x26/0x2b0 [ 1455.620440][T14145] panic+0xc5/0xd0 [ 1455.624152][T14145] ? __pfx_panic+0x10/0x10 [ 1455.628603][T14145] __warn+0x315/0x4c0 [ 1455.632582][T14145] ? rtmsg_ifinfo_build_skb+0x21c/0x260 [ 1455.638146][T14145] ? rtmsg_ifinfo_build_skb+0x21c/0x260 [ 1455.643695][T14145] __report_bug+0x276/0x570 [ 1455.648203][T14145] ? ___sys_sendmsg+0x2a5/0x360 [ 1455.653052][T14145] ? do_accept+0x660/0x760 [ 1455.657488][T14145] ? rtmsg_ifinfo_build_skb+0x21c/0x260 [ 1455.663034][T14145] ? __pfx___report_bug+0x10/0x10 [ 1455.668075][T14145] ? rtmsg_ifinfo_build_skb+0x21c/0x260 [ 1455.673637][T14145] report_bug+0x16b/0x220 [ 1455.677979][T14145] ? rtmsg_ifinfo_build_skb+0x21c/0x260 [ 1455.683530][T14145] ? rtmsg_ifinfo_build_skb+0x21e/0x260 [ 1455.689091][T14145] handle_bug+0x9c/0x200 [ 1455.693347][T14145] exc_invalid_op+0x1a/0x50 [ 1455.697854][T14145] asm_exc_invalid_op+0x1a/0x20 [ 1455.702718][T14145] RIP: 0010:rtmsg_ifinfo_build_skb+0x21c/0x260 [ 1455.708878][T14145] Code: f6 ba 01 00 00 00 89 e9 e8 21 fc 3a 00 4c 89 f0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 5b d9 2c 02 cc e8 85 93 98 f8 90 <0f> 0b 90 eb 8f 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 8b fe ff ff 4c [ 1455.728570][T14145] RSP: 0018:ffffc9000ce3e808 EFLAGS: 00010287 [ 1455.734653][T14145] RAX: ffffffff892e000b RBX: 1ffff1100589b821 RCX: 0000000000080000 [ 1455.742627][T14145] RDX: ffffc9000fccb000 RSI: 00000000000069e7 RDI: 00000000000069e8 [ 1455.750599][T14145] RBP: 00000000ffffffa6 R08: 0000000000000000 R09: 0000000000000000 [ 1455.758576][T14145] R10: fffff520019c7ca8 R11: 0000000000000020 R12: 0000000000000000 [ 1455.766545][T14145] R13: 0000000000000000 R14: ffff888034601500 R15: ffff88802c4dc000 [ 1455.774524][T14145] ? rtmsg_ifinfo_build_skb+0x21b/0x260 [ 1455.780101][T14145] ? rtmsg_ifinfo_build_skb+0x21b/0x260 [ 1455.785665][T14145] rtnetlink_event+0x1b7/0x270 [ 1455.790443][T14145] notifier_call_chain+0x1a5/0x3d0 [ 1455.795582][T14145] netif_disable_lro+0xdd/0x4b0 [ 1455.800457][T14145] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 1455.805851][T14145] ? __pfx_netif_disable_lro+0x10/0x10 [ 1455.811316][T14145] ? neigh_parms_alloc+0x428/0x530 [ 1455.816463][T14145] ? neigh_parms_alloc+0x30e/0x530 [ 1455.821593][T14145] ipv6_add_dev+0x4b7/0x1400 [ 1455.826202][T14145] addrconf_notify+0x771/0x1050 [ 1455.831058][T14145] notifier_call_chain+0x1a5/0x3d0 [ 1455.836192][T14145] register_netdevice+0x18c0/0x1ed0 [ 1455.841421][T14145] ? __pfx_register_netdevice+0x10/0x10 [ 1455.846982][T14145] macsec_newlink+0x706/0x1200 [ 1455.851767][T14145] ? rcu_is_watching+0x16/0xb0 [ 1455.856537][T14145] ? __pfx_macsec_newlink+0x10/0x10 [ 1455.861747][T14145] ? alloc_netdev_mqs+0xd59/0x12c0 [ 1455.866862][T14145] ? __kvmalloc_node_noprof+0x5d4/0x890 [ 1455.872413][T14145] ? alloc_netdev_mqs+0xd59/0x12c0 [ 1455.877541][T14145] ? alloc_netdev_mqs+0xd59/0x12c0 [ 1455.882661][T14145] ? validate_linkmsg+0x765/0x950 [ 1455.887698][T14145] ? rtnl_create_link+0xa04/0xd70 [ 1455.892728][T14145] ? __pfx_macsec_newlink+0x10/0x10 [ 1455.897939][T14145] rtnl_newlink_create+0x305/0x7b0 [ 1455.903061][T14145] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1455.908705][T14145] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1455.914523][T14145] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1455.920336][T14145] rtnl_newlink+0x166d/0x1c30 [ 1455.925047][T14145] ? __pfx_rtnl_newlink+0x10/0x10 [ 1455.930089][T14145] ? do_syscall_64+0x166/0x520 [ 1455.934857][T14145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.940952][T14145] ? __lock_acquire+0x747/0x2de0 [ 1455.945897][T14145] ? kasan_quarantine_put+0xbb/0x1f0 [ 1455.951199][T14145] ? lockdep_hardirqs_on+0x7b/0x110 [ 1455.956404][T14145] ? nlmon_xmit+0xb0/0x100 [ 1455.960844][T14145] ? kmem_cache_free+0x187/0x6d0 [ 1455.965796][T14145] ? nlmon_xmit+0xb0/0x100 [ 1455.970225][T14145] ? __lock_acquire+0x747/0x2de0 [ 1455.975180][T14145] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 1455.980561][T14145] ? lockdep_hardirqs_on+0x7b/0x110 [ 1455.985767][T14145] ? __dev_queue_xmit+0x294/0x3880 [ 1455.990882][T14145] ? __dev_queue_xmit+0x1ee9/0x3880 [ 1455.996120][T14145] ? lock_acquire+0x115/0x350 [ 1456.000830][T14145] ? __pfx_rtnl_newlink+0x10/0x10 [ 1456.005855][T14145] rtnetlink_rcv_msg+0x802/0xc00 [ 1456.010799][T14145] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1456.015936][T14145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1456.021402][T14145] ? ref_tracker_free+0x668/0x820 [ 1456.026473][T14145] ? __pfx_ref_tracker_free+0x10/0x10 [ 1456.031868][T14145] netlink_rcv_skb+0x226/0x4a0 [ 1456.036643][T14145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1456.042106][T14145] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1456.047397][T14145] ? netlink_deliver_tap+0x2e/0x1b0 [ 1456.052589][T14145] ? netlink_deliver_tap+0x2e/0x1b0 [ 1456.057790][T14145] netlink_unicast+0x7f5/0x990 [ 1456.062615][T14145] netlink_sendmsg+0x813/0xb40 [ 1456.067386][T14145] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1456.073025][T14145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1456.078311][T14145] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1456.084750][T14145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1456.090054][T14145] sock_sendmsg_nosec+0x13a/0x180 [ 1456.095090][T14145] ____sys_sendmsg+0x565/0x870 [ 1456.099870][T14145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1456.105175][T14145] ? import_iovec+0x73/0xa0 [ 1456.109703][T14145] ___sys_sendmsg+0x2a5/0x360 [ 1456.114400][T14145] ? __lock_acquire+0x747/0x2de0 [ 1456.119354][T14145] ? __pfx____sys_sendmsg+0x10/0x10 [ 1456.124569][T14145] ? futex_wait+0x2a2/0x390 [ 1456.129134][T14145] ? __fget_files+0x2a/0x420 [ 1456.133738][T14145] ? __fget_files+0x3a8/0x420 [ 1456.138437][T14145] __x64_sys_sendmsg+0x1b7/0x290 [ 1456.143384][T14145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1456.148864][T14145] do_syscall_64+0x166/0x520 [ 1456.153464][T14145] ? trace_irq_disable+0x3b/0x140 [ 1456.158495][T14145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.164569][T14145] ? clear_bhb_loop+0x70/0xc0 [ 1456.169268][T14145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.175170][T14145] RIP: 0033:0x7feacefce159 [ 1456.179596][T14145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1456.199202][T14145] RSP: 002b:00007feacd226028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1456.207645][T14145] RAX: ffffffffffffffda RBX: 00007feacf255fa0 RCX: 00007feacefce159 [ 1456.215620][T14145] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 1456.223593][T14145] RBP: 00007feacf06503b R08: 0000000000000000 R09: 0000000000000000 [ 1456.231567][T14145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1456.239537][T14145] R13: 00007feacf256038 R14: 00007feacf255fa0 R15: 00007ffd92a39068 [ 1456.247542][T14145] [ 1456.250629][T14145] Kernel Offset: disabled [ 1456.254954][T14145] Rebooting in 86400 seconds..