last executing test programs: 11.933065764s ago: executing program 2 (id=1024): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x44, r2, 0x1, 0x1070bd2c, 0x25dfdbfd, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2a}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sched_setattr(0x0, 0x0, 0x0) 10.534245628s ago: executing program 2 (id=1026): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b010203010902"], 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x1fbc, &(0x7f00000001c0)={0x0, 0xd2a, 0x100, 0x2, 0xea}) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x68) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 9.348964711s ago: executing program 0 (id=1031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) read$ptp(r1, &(0x7f00000004c0)=""/4096, 0x1000) 9.245809582s ago: executing program 0 (id=1032): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) 8.427320183s ago: executing program 2 (id=1033): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x0) 7.141233117s ago: executing program 2 (id=1035): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x8d0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)={0x1, 0x0, [{0x0, 0xe4, &(0x7f0000000300)=""/228}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 7.016576984s ago: executing program 3 (id=1037): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ftruncate(r5, 0xb) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xe98, 0x30, 0xb, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0xfffffff7, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x84, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x80000001, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0x7, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x1, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x5, 0x10001, 0x407}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x6, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x110, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x7}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000001, 0x4, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x8, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0x401, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x8000, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x7c2, 0x8000, 0xffff, 0x7}, {0x6, 0x92c4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 6.426264896s ago: executing program 3 (id=1038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.093901646s ago: executing program 3 (id=1039): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000540)='_', 0x1}], 0x1}}], 0x1, 0x4008000) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 5.596736635s ago: executing program 1 (id=1040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c00044000000000000000011400"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) read$ptp(r1, &(0x7f00000004c0)=""/4096, 0x1000) 5.528093252s ago: executing program 1 (id=1041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0xcac, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.350282309s ago: executing program 1 (id=1042): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r0) 5.227048657s ago: executing program 0 (id=1043): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x0) 5.140849601s ago: executing program 1 (id=1044): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0xc081) socket$kcm(0x2, 0xa, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001840)=[{0x0}, {0x0}, {0x0}], 0x3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000000)={'security\x00', 0x0, [0x6, 0x4, 0x6, 0x6, 0x9]}, &(0x7f0000000100)=0x54) 5.140360691s ago: executing program 3 (id=1045): syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create1(0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000400)='./file2\x00', 0x0, 0x90000, 0x0) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x181102, 0x8c) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000500)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x9, 0x1, 0x8, 0x43, 0x40000003, 0x89, 0x9, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x8, 0x10000, 0xfffffff4]}) 4.257326799s ago: executing program 0 (id=1046): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ftruncate(r5, 0xb) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xe98, 0x30, 0xb, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0xfffffff7, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x84, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x80000001, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0x7, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x1, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x5, 0x10001, 0x407}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x6, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x110, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x7}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000001, 0x4, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x8, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0x401, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x8000, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x7c2, 0x8000, 0xffff, 0x7}, {0x6, 0x92c4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 3.391365331s ago: executing program 3 (id=1047): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) pread64(r0, 0x0, 0x0, 0x100000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) prlimit64(r4, 0xb, &(0x7f0000000140)={0x3000, 0x8}, &(0x7f0000000180)) pread64(r3, &(0x7f0000032680)=""/102400, 0x19000, 0x1000000300) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x620d, 0x5, 0xfffffc00}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0) 3.344976033s ago: executing program 2 (id=1048): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) 2.342072069s ago: executing program 1 (id=1049): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x78, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x128}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4840) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0x42, 0x4, 0x498, 0xffffffff, 0x1e0, 0x1e0, 0x0, 0xffffffff, 0xffffffff, 0x400, 0x400, 0x400, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0xffffff00, 0x0, 'veth0_to_batadv\x00', 'pimreg0\x00', {}, {}, 0x11, 0x1}, 0x0, 0xd8, 0x120, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connbytes={{0x38}, {[{0x6}, {0x1}], 0x2}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x88, {0x5}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0x1e0, 0x220, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@inet=@sctp={{0x148}, {[0x4e23, 0x4e24], [0x4e20, 0x4e20], [0x0, 0x65, 0x3, 0xffff, 0x9, 0x8000, 0x800, 0x0, 0xfffffc00, 0x1a, 0x8, 0x2, 0x6, 0x8, 0x1, 0x4, 0x895, 0x1, 0x7, 0x8001, 0x4, 0x3, 0x7, 0x23b, 0x7fff, 0x2400, 0x10, 0x5, 0x7ff, 0xee, 0x7, 0x4, 0x6, 0x7, 0x1087, 0x3, 0x39d, 0xffffffff, 0x4, 0x5, 0x1, 0x0, 0x4, 0x200, 0x0, 0x5, 0xe6, 0x1, 0xffff, 0x1, 0x401, 0x7, 0x4, 0x1, 0x1, 0x76b, 0x8, 0x401, 0xa71c, 0x4000000, 0x8, 0x0, 0x1ff, 0x9], 0x1, [{0xfc, 0x1}, {0x8, 0x9, 0x29}, {0x2, 0x81, 0x7}, {0x8, 0x7}], 0x0, 0x1, 0x7}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x101002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000001c0), 0x2004064, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRES32=r3, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) read$msr(0xffffffffffffffff, &(0x7f000001f6c0)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000500)={0x9, 0x0, [{0x0, 0x1, 0x0, 0x0, @irqchip={0x3}}, {0x9, 0x5, 0x1, 0x0, @sint={0x8, 0x5}}, {0x80000001, 0x3, 0x1, 0x0, @irqchip={0x7, 0x1}}, {0x6, 0x1, 0x0, 0x0, @irqchip={0x20002, 0x2}}, {0x5d400000, 0x3, 0x1, 0x0, @adapter={0xd, 0x5d889c2, 0x3, 0x3, 0x2}}, {0x80000000, 0x2, 0x1, 0x0, @adapter={0x6, 0x6, 0x4, 0x5dd, 0x2}}, {0x1, 0x1, 0x1, 0x0, @msi={0x2, 0x7fff, 0x9, 0x1}}, {0x7ff, 0x5, 0x0, 0x0, @adapter={0x6, 0x5e9, 0x8000000000000001, 0x200, 0x58e}}, {0x8, 0x6, 0x0, 0x0, @irqchip={0x4, 0x6}}]}) 1.434516973s ago: executing program 3 (id=1050): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x2000000, &(0x7f00000003c0)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5513, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) 727.267733ms ago: executing program 0 (id=1051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0xcac, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 120.368122ms ago: executing program 2 (id=1052): openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000500)={0xffffffffffffffff}, 0x2, 0x5}}, 0x6e) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0x8, {0x0, r1, 0x1}}, 0x18) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002180)={r0, 0xffffffffffffffff, 0xe, 0x0, @void}, 0x10) r2 = syz_usb_connect(0x0, 0x48, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004014}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c450) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 67.467843ms ago: executing program 1 (id=1053): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001280004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff02000000000000000000000000000104206558"], 0xfdef) 0s ago: executing program 0 (id=1054): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x0) kernel console output (not intermixed with test programs): luetooth: hci2: command tx timeout [ 74.301546][ T5767] Bluetooth: hci3: command tx timeout [ 74.451295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 74.471294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 74.502882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 74.561415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 74.620169][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 74.642138][ T23] usb 3-1: not running at top speed; connect to a high speed hub [ 74.651958][ T23] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 74.727706][ T23] usb 3-1: config 1 interface 0 has no altsetting 0 [ 74.738267][ T23] usb 3-1: string descriptor 0 read error: -22 [ 74.745478][ T23] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.40 [ 74.756184][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.769830][ T5832] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 74.971738][ T5845] ======================================================= [ 74.971738][ T5845] WARNING: The mand mount option has been deprecated and [ 74.971738][ T5845] and is ignored by this kernel. Remove the mand [ 74.971738][ T5845] option from the mount to silence this warning. [ 74.971738][ T5845] ======================================================= [ 75.058759][ T5845] rpc_pipefs: Unknown parameter 'discard' [ 75.320780][ T5851] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8'. [ 75.357602][ T23] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 75.383975][ T23] gt683r_led 0003:1770:FF00.0001: unexpected long global item [ 75.418962][ T23] gt683r_led 0003:1770:FF00.0001: hid parsing failed [ 75.436135][ T23] gt683r_led: probe of 0003:1770:FF00.0001 failed with error -22 [ 76.294936][ T5769] Bluetooth: hci1: command tx timeout [ 76.300610][ T5767] Bluetooth: hci0: command tx timeout [ 76.363777][ T5860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9'. [ 76.379778][ T5860] IPv6: sit1: Disabled Multicast RS [ 76.385962][ T5860] sit1: entered allmulticast mode [ 76.405683][ T5767] Bluetooth: hci3: command tx timeout [ 76.411208][ T5767] Bluetooth: hci2: command tx timeout [ 76.541749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.712124][ T5869] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.773582][ T5863] sched: RT throttling activated [ 77.859585][ T9] usb 3-1: USB disconnect, device number 2 [ 78.027883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.036639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.175866][ T5880] rpc_pipefs: Unknown parameter 'discard' [ 78.247945][ T5881] Cannot find set identified by id 0 to match [ 79.111399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 79.121720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.520507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.931895][ T5802] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.952106][ T787] cfg80211: failed to load regulatory.db [ 82.510228][ T5901] ALSA: mixer_oss: invalid OSS volume 'LI' [ 82.523403][ T5901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24'. [ 82.576915][ T5902] netlink: 68 bytes leftover after parsing attributes in process `syz.1.24'. [ 85.057892][ T5915] netlink: 68 bytes leftover after parsing attributes in process `syz.2.27'. [ 85.893731][ T5922] Cannot find add_set index 128 as target [ 85.931158][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29'. [ 86.866473][ T5926] ALSA: mixer_oss: invalid OSS volume 'LI' [ 87.437555][ T5939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.31'. [ 91.234128][ T5959] ALSA: mixer_oss: invalid OSS volume 'LI' [ 91.392864][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'. [ 91.402731][ T5966] netlink: 1 bytes leftover after parsing attributes in process `syz.3.39'. [ 92.151517][ T27] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 92.224592][ T5981] netlink: 16 bytes leftover after parsing attributes in process `syz.2.44'. [ 92.233667][ T5981] netlink: 16 bytes leftover after parsing attributes in process `syz.2.44'. [ 92.270642][ T5981] sit2: entered allmulticast mode [ 93.012117][ T27] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 93.091662][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 93.098468][ T27] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 93.108304][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.453232][ T27] usb 2-1: config 0 descriptor?? [ 94.463635][ T27] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 94.550666][ T27] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 94.597751][ T27] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 94.695530][ T27] corsair-psu 0003:1B1C:1C09.0002: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 94.892372][ T27] corsair-psu 0003:1B1C:1C09.0002: unable to initialize device (-71) [ 95.264126][ T27] corsair-psu: probe of 0003:1B1C:1C09.0002 failed with error -71 [ 96.165269][ T27] usb 2-1: USB disconnect, device number 3 [ 96.246918][ T5998] IPv6: sit1: Disabled Multicast RS [ 96.252750][ T5998] sit1: entered allmulticast mode [ 96.766043][ T6007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.49'. [ 97.658913][ T6013] ALSA: mixer_oss: invalid OSS volume 'LI' [ 99.519806][ T6026] netlink: 108 bytes leftover after parsing attributes in process `syz.3.56'. [ 99.529811][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 100.237263][ T6033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.54'. [ 100.246471][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 102.003513][ T6036] Zero length message leads to an empty skb [ 105.053823][ T6071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.66'. [ 105.161401][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.361326][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 105.369717][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.441436][ T27] usb 2-1: config 0 has no interfaces? [ 105.478752][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 105.515760][ T27] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 105.545061][ T27] usb 2-1: Product: syz [ 105.585189][ T27] usb 2-1: Manufacturer: syz [ 105.635677][ T27] usb 2-1: config 0 descriptor?? [ 105.918767][ T5802] usb 2-1: USB disconnect, device number 4 [ 107.395905][ T6081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.68'. [ 107.408853][ T6081] IPv6: sit1: Disabled Multicast RS [ 107.415041][ T6081] sit1: entered allmulticast mode [ 107.416425][ T6086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'. [ 107.435753][ T6086] netlink: 68 bytes leftover after parsing attributes in process `syz.0.69'. [ 108.084997][ T6094] rpc_pipefs: Unknown parameter 'discard' [ 108.568737][ T6097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.72'. [ 109.945552][ T6116] syz.0.78: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 109.960994][ T6116] CPU: 1 PID: 6116 Comm: syz.0.78 Not tainted syzkaller #0 [ 109.968216][ T6116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 109.978388][ T6116] Call Trace: [ 109.981689][ T6116] [ 109.984638][ T6116] dump_stack_lvl+0x18c/0x250 [ 109.989347][ T6116] ? show_regs_print_info+0x20/0x20 [ 109.994791][ T6116] ? load_image+0x400/0x400 [ 109.999496][ T6116] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 110.005937][ T6116] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 110.012549][ T6116] warn_alloc+0x246/0x340 [ 110.016899][ T6116] ? stack_trace_save+0xaa/0x100 [ 110.021855][ T6116] ? zone_watermark_ok_safe+0x230/0x230 [ 110.027421][ T6116] ? kasan_set_track+0x5f/0x70 [ 110.032192][ T6116] ? kasan_set_track+0x4e/0x70 [ 110.036974][ T6116] ? __kasan_kmalloc+0x8f/0xa0 [ 110.042020][ T6116] ? xsk_init_queue+0xad/0x100 [ 110.046894][ T6116] ? xsk_setsockopt+0x42e/0x760 [ 110.051762][ T6116] ? do_sock_setsockopt+0x175/0x1a0 [ 110.056972][ T6116] ? __x64_sys_setsockopt+0x182/0x200 [ 110.062361][ T6116] __vmalloc_node_range+0x126/0x1330 [ 110.067809][ T6116] ? free_vm_area+0x50/0x50 [ 110.072429][ T6116] vmalloc_user+0x74/0x80 [ 110.076865][ T6116] ? xskq_create+0xbf/0x170 [ 110.081476][ T6116] xskq_create+0xbf/0x170 [ 110.085837][ T6116] xsk_init_queue+0xad/0x100 [ 110.090459][ T6116] xsk_setsockopt+0x42e/0x760 [ 110.095158][ T6116] ? xsk_poll+0x680/0x680 [ 110.099516][ T6116] ? __fget_files+0x28/0x4b0 [ 110.104122][ T6116] ? __fget_files+0x28/0x4b0 [ 110.108730][ T6116] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 110.114290][ T6116] ? security_socket_setsockopt+0x7e/0xa0 [ 110.120145][ T6116] ? xsk_poll+0x680/0x680 [ 110.124606][ T6116] do_sock_setsockopt+0x175/0x1a0 [ 110.129727][ T6116] ? __fdget+0x180/0x210 [ 110.134075][ T6116] __x64_sys_setsockopt+0x182/0x200 [ 110.139479][ T6116] do_syscall_64+0x55/0xa0 [ 110.144097][ T6116] ? clear_bhb_loop+0x40/0x90 [ 110.148797][ T6116] ? clear_bhb_loop+0x40/0x90 [ 110.153496][ T6116] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.159420][ T6116] RIP: 0033:0x7f2e9219c799 [ 110.163958][ T6116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.183683][ T6116] RSP: 002b:00007f2e8fff4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 110.192143][ T6116] RAX: ffffffffffffffda RBX: 00007f2e92416270 RCX: 00007f2e9219c799 [ 110.200154][ T6116] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 110.208139][ T6116] RBP: 00007f2e92232c99 R08: 0000000000000004 R09: 0000000000000000 [ 110.216431][ T6116] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.224806][ T6116] R13: 00007f2e92416308 R14: 00007f2e92416270 R15: 00007ffe34d954b8 [ 110.232986][ T6116] [ 110.238437][ T6116] Mem-Info: [ 110.242456][ T6116] active_anon:16485 inactive_anon:0 isolated_anon:0 [ 110.242456][ T6116] active_file:12657 inactive_file:39967 isolated_file:0 [ 110.242456][ T6116] unevictable:779 dirty:91 writeback:0 [ 110.242456][ T6116] slab_reclaimable:10200 slab_unreclaimable:91418 [ 110.242456][ T6116] mapped:31639 shmem:12034 pagetables:581 [ 110.242456][ T6116] sec_pagetables:0 bounce:0 [ 110.242456][ T6116] kernel_misc_reclaimable:0 [ 110.242456][ T6116] free:1337216 free_pcp:13802 free_cma:0 [ 110.289124][ T6116] Node 0 active_anon:65940kB inactive_anon:0kB active_file:50628kB inactive_file:159668kB unevictable:1580kB isolated(anon):0kB isolated(file):0kB mapped:126556kB dirty:364kB writeback:0kB shmem:46600kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10608kB pagetables:2324kB sec_pagetables:0kB all_unreclaimable? no [ 110.322156][ T6116] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 110.353133][ T6116] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 110.380493][ T6116] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 110.386334][ T6116] Node 0 DMA32 free:1444332kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:65900kB inactive_anon:0kB active_file:50628kB inactive_file:158844kB unevictable:1580kB writepending:364kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:32744kB local_pcp:19504kB free_cma:0kB [ 110.417231][ T6116] lowmem_reserve[]: 0 0 0 0 0 [ 110.423334][ T6116] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 110.451890][ T6116] lowmem_reserve[]: 0 0 0 0 0 [ 110.457131][ T6116] Node 1 Normal free:3889164kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22460kB local_pcp:8024kB free_cma:0kB [ 110.487843][ T6116] lowmem_reserve[]: 0 0 0 0 0 [ 110.492736][ T6116] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 110.505760][ T6116] Node 0 DMA32: 345*4kB (UME) 141*8kB (UE) 484*16kB (UE) 17*32kB (UE) 31*64kB (UME) 20*128kB (ME) 8*256kB (UME) 21*512kB (M) 11*1024kB (UM) 14*2048kB (UME) 336*4096kB (M) = 1444332kB [ 110.524096][ T6116] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 110.536107][ T6116] Node 1 Normal: 181*4kB (UME) 73*8kB (UME) 45*16kB (UME) 37*32kB (UME) 18*64kB (UME) 6*128kB (UE) 0*256kB 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3889164kB [ 110.554267][ T6116] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 110.563975][ T6116] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 110.573433][ T6116] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 110.605202][ T6116] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 110.615058][ T6116] 64669 total pagecache pages [ 110.619801][ T6116] 0 pages in swap cache [ 110.624009][ T6116] Free swap = 124996kB [ 110.628400][ T6116] Total swap = 124996kB [ 110.632744][ T6116] 2097051 pages RAM [ 110.636605][ T6116] 0 pages HighMem/MovableOnly [ 110.641364][ T6116] 416924 pages reserved [ 110.645592][ T6116] 0 pages cma reserved [ 115.060966][ T6128] ALSA: mixer_oss: invalid OSS volume 'LI' [ 115.071019][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'. [ 115.127501][ T6129] netlink: 68 bytes leftover after parsing attributes in process `syz.1.80'. [ 115.882283][ T6131] rpc_pipefs: Unknown parameter 'discard' [ 117.236664][ T6135] ALSA: mixer_oss: invalid OSS volume 'LI' [ 117.492956][ T6145] syzkaller0: entered promiscuous mode [ 117.498474][ T6145] syzkaller0: entered allmulticast mode [ 118.193011][ T6160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.81'. [ 118.223234][ T6160] IPv6: sit3: Disabled Multicast RS [ 118.232815][ T6160] sit3: entered allmulticast mode [ 119.510990][ T6164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.91'. [ 119.633947][ T6166] rpc_pipefs: Unknown parameter 'discard' [ 121.306112][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'. [ 121.998699][ T6177] ALSA: mixer_oss: invalid OSS volume 'LI' [ 122.377776][ T6183] syzkaller0: entered promiscuous mode [ 122.401546][ T6183] syzkaller0: entered allmulticast mode [ 123.800747][ T6196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.101'. [ 124.354296][ T6198] rpc_pipefs: Unknown parameter 'discard' [ 124.704653][ T6206] xt_TPROXY: Can be used only with -p tcp or -p udp [ 124.716322][ T6206] warning: `syz.2.105' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 124.738512][ T5769] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 124.739114][ T5769] Bluetooth: hci0: unknown advertising packet type: 0x6c [ 124.746783][ T5769] Bluetooth: hci0: Malformed LE Event: 0x02 [ 125.524058][ T6207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.104'. [ 127.853637][ T6227] ALSA: mixer_oss: invalid OSS volume 'LI' [ 128.702198][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'. [ 130.852520][ T6251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.117'. [ 132.701639][ T5769] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 132.710305][ T5769] Bluetooth: hci0: Injecting HCI hardware error event [ 132.784888][ T5769] Bluetooth: hci0: hardware error 0x00 [ 133.105109][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.136332][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.547155][ T6264] rpc_pipefs: Unknown parameter 'discard' [ 134.395523][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 134.524963][ T6273] ALSA: mixer_oss: invalid OSS volume 'LI' [ 135.331505][ T5769] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 135.521066][ T6279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.123'. [ 135.771954][ T6287] ptrace attach of "./syz-executor exec"[6288] was attempted by "./syz-executor exec"[6287] [ 136.772410][ T6298] netlink: 16 bytes leftover after parsing attributes in process `syz.3.128'. [ 136.785540][ T6298] IPv6: sit2: Disabled Multicast RS [ 136.791798][ T6298] sit2: entered allmulticast mode [ 138.794717][ T6311] rpc_pipefs: Unknown parameter 'discard' [ 139.794690][ T6314] ALSA: mixer_oss: invalid OSS volume 'LI' [ 144.556999][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.140'. [ 145.664272][ T6349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.141'. [ 147.299786][ T6360] tmpfs: Bad value for 'mpol' [ 149.075501][ T6366] ALSA: mixer_oss: invalid OSS volume 'LI' [ 150.909442][ T6386] bond0: entered promiscuous mode [ 150.914788][ T6386] bond_slave_0: entered promiscuous mode [ 150.921761][ T6386] bond_slave_1: entered promiscuous mode [ 150.956996][ T6386] batadv0: entered promiscuous mode [ 150.973958][ T6386] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 151.256649][ T6389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.151'. [ 151.529502][ T6396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.153'. [ 152.602770][ T6405] tmpfs: Bad value for 'mpol' [ 153.693559][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.158'. [ 159.390725][ T6430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.164'. [ 161.453402][ T6448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.168'. [ 164.506062][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.175'. [ 165.813053][ T6479] netlink: 20 bytes leftover after parsing attributes in process `syz.0.173'. [ 170.943643][ T6522] Cannot find set identified by id 0 to match [ 173.381635][ T6528] xt_TPROXY: Can be used only with -p tcp or -p udp [ 173.721794][ T6540] syz.2.189 uses obsolete (PF_INET,SOCK_PACKET) [ 175.336782][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'. [ 175.493669][ T6555] netlink: 68 bytes leftover after parsing attributes in process `syz.2.194'. [ 176.337732][ T6561] Cannot find set identified by id 0 to match [ 183.450510][ T6589] serio: Serial port ptm0 [ 183.791944][ T6594] syz.2.199: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 183.807005][ T6594] CPU: 0 PID: 6594 Comm: syz.2.199 Not tainted syzkaller #0 [ 183.814308][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.824400][ T6594] Call Trace: [ 183.827688][ T6594] [ 183.830633][ T6594] dump_stack_lvl+0x18c/0x250 [ 183.835344][ T6594] ? show_regs_print_info+0x20/0x20 [ 183.840557][ T6594] ? load_image+0x400/0x400 [ 183.845089][ T6594] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 183.851533][ T6594] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 183.858061][ T6594] warn_alloc+0x246/0x340 [ 183.862414][ T6594] ? stack_trace_save+0xaa/0x100 [ 183.867373][ T6594] ? zone_watermark_ok_safe+0x230/0x230 [ 183.872948][ T6594] ? kasan_set_track+0x5f/0x70 [ 183.877842][ T6594] ? kasan_set_track+0x4e/0x70 [ 183.882623][ T6594] ? __kasan_kmalloc+0x8f/0xa0 [ 183.887400][ T6594] ? xsk_init_queue+0xad/0x100 [ 183.892177][ T6594] ? xsk_setsockopt+0x42e/0x760 [ 183.897040][ T6594] ? do_sock_setsockopt+0x175/0x1a0 [ 183.902243][ T6594] ? __x64_sys_setsockopt+0x182/0x200 [ 183.907711][ T6594] __vmalloc_node_range+0x126/0x1330 [ 183.913041][ T6594] ? free_vm_area+0x50/0x50 [ 183.917571][ T6594] vmalloc_user+0x74/0x80 [ 183.921923][ T6594] ? xskq_create+0xbf/0x170 [ 183.926698][ T6594] xskq_create+0xbf/0x170 [ 183.931042][ T6594] xsk_init_queue+0xad/0x100 [ 183.935645][ T6594] xsk_setsockopt+0x42e/0x760 [ 183.940421][ T6594] ? xsk_poll+0x680/0x680 [ 183.944865][ T6594] ? __fget_files+0x28/0x4b0 [ 183.949698][ T6594] ? __fget_files+0x28/0x4b0 [ 183.954320][ T6594] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 183.959877][ T6594] ? security_socket_setsockopt+0x7e/0xa0 [ 183.965619][ T6594] ? xsk_poll+0x680/0x680 [ 183.970054][ T6594] do_sock_setsockopt+0x175/0x1a0 [ 183.975114][ T6594] ? __fdget+0x180/0x210 [ 183.979387][ T6594] __x64_sys_setsockopt+0x182/0x200 [ 183.984653][ T6594] do_syscall_64+0x55/0xa0 [ 183.989106][ T6594] ? clear_bhb_loop+0x40/0x90 [ 183.993797][ T6594] ? clear_bhb_loop+0x40/0x90 [ 183.998493][ T6594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.004452][ T6594] RIP: 0033:0x7f5669d9c799 [ 184.009076][ T6594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.028878][ T6594] RSP: 002b:00007f5667fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 184.037348][ T6594] RAX: ffffffffffffffda RBX: 00007f566a016180 RCX: 00007f5669d9c799 [ 184.045336][ T6594] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 184.053318][ T6594] RBP: 00007f5669e32c99 R08: 0000000000000004 R09: 0000000000000000 [ 184.061497][ T6594] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.069486][ T6594] R13: 00007f566a016218 R14: 00007f566a016180 R15: 00007ffd77aec138 [ 184.077604][ T6594] [ 184.082485][ T6594] Mem-Info: [ 184.085949][ T6594] active_anon:13624 inactive_anon:0 isolated_anon:0 [ 184.085949][ T6594] active_file:17583 inactive_file:39995 isolated_file:0 [ 184.085949][ T6594] unevictable:768 dirty:108 writeback:0 [ 184.085949][ T6594] slab_reclaimable:10434 slab_unreclaimable:90849 [ 184.085949][ T6594] mapped:27181 shmem:9499 pagetables:529 [ 184.085949][ T6594] sec_pagetables:0 bounce:0 [ 184.085949][ T6594] kernel_misc_reclaimable:0 [ 184.085949][ T6594] free:1335138 free_pcp:13312 free_cma:0 [ 184.131932][ T6594] Node 0 active_anon:54496kB inactive_anon:0kB active_file:70332kB inactive_file:159780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108724kB dirty:432kB writeback:0kB shmem:36460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10452kB pagetables:2116kB sec_pagetables:0kB all_unreclaimable? no [ 184.165166][ T6594] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 184.196928][ T6594] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 184.224360][ T6594] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 184.230167][ T6594] Node 0 DMA32 free:1436020kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:54456kB inactive_anon:0kB active_file:70332kB inactive_file:158956kB unevictable:1536kB writepending:432kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:30588kB local_pcp:19424kB free_cma:0kB [ 184.260882][ T6594] lowmem_reserve[]: 0 0 0 0 0 [ 184.265856][ T6594] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 184.298246][ T6594] lowmem_reserve[]: 0 0 0 0 0 [ 184.303237][ T6594] Node 1 Normal free:3889164kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22652kB local_pcp:14564kB free_cma:0kB [ 184.333078][ T6594] lowmem_reserve[]: 0 0 0 0 0 [ 184.337996][ T6594] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 184.350899][ T6594] Node 0 DMA32: 593*4kB (UME) 1742*8kB (UME) 1036*16kB (UME) 504*32kB (UME) 464*64kB (UME) 44*128kB (UME) 18*256kB (UME) 37*512kB (M) 1*1024kB (U) 14*2048kB (ME) 317*4096kB (M) = 1436020kB [ 184.370194][ T6594] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 184.384351][ T6594] Node 1 Normal: 181*4kB (UME) 73*8kB (UME) 45*16kB (UME) 37*32kB (UME) 18*64kB (UME) 6*128kB (UE) 0*256kB 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3889164kB [ 184.402053][ T6594] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.412004][ T6594] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.443524][ T6594] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.453419][ T6594] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.462819][ T6594] 67102 total pagecache pages [ 184.467501][ T6594] 0 pages in swap cache [ 184.471711][ T6594] Free swap = 124996kB [ 184.475882][ T6594] Total swap = 124996kB [ 184.481313][ T6594] 2097051 pages RAM [ 184.485141][ T6594] 0 pages HighMem/MovableOnly [ 184.489836][ T6594] 416924 pages reserved [ 184.494141][ T6594] 0 pages cma reserved [ 185.581817][ T6598] netlink: 68 bytes leftover after parsing attributes in process `syz.3.203'. [ 185.637561][ T6601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.207'. [ 189.880513][ T6627] lo: entered allmulticast mode [ 189.907170][ T6627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.557253][ T5773] Bluetooth: Unexpected start frame (len 0) [ 191.504886][ T6641] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 191.651914][ T5769] Bluetooth: hci3: command 0x0406 tx timeout [ 191.657981][ T5767] Bluetooth: hci2: command 0x0406 tx timeout [ 191.664240][ T5767] Bluetooth: hci1: command 0x0406 tx timeout [ 191.746423][ T6644] rpc_pipefs: Unknown parameter 'discard' [ 193.536195][ T6653] netlink: 20 bytes leftover after parsing attributes in process `syz.3.220'. [ 193.794634][ T6658] ALSA: mixer_oss: invalid OSS volume 'LI' [ 193.801958][ T6658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'. [ 193.859992][ T6659] netlink: 68 bytes leftover after parsing attributes in process `syz.1.221'. [ 194.556671][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.568949][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.802937][ T6664] Cannot find add_set index 128 as target [ 194.983724][ T6667] netlink: 68 bytes leftover after parsing attributes in process `syz.2.224'. [ 195.466014][ T5082] Bluetooth: Unexpected start frame (len 0) [ 195.516156][ T6671] syzkaller0: entered promiscuous mode [ 195.541358][ T6671] syzkaller0: entered allmulticast mode [ 195.595623][ T6674] rpc_pipefs: Unknown parameter 'discard' [ 195.637873][ T6671] tc action pedit offset must be on 32 bit boundaries [ 197.469225][ T6693] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 198.944379][ T6703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.234'. [ 198.965515][ T6704] Cannot find add_set index 128 as target [ 199.315122][ T5082] Bluetooth: Unexpected start frame (len 0) [ 199.447375][ T6708] rpc_pipefs: Unknown parameter 'discard' [ 199.898475][ T6720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.241'. [ 200.551234][ T6727] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 201.726073][ T6736] Cannot find add_set index 128 as target [ 201.797123][ T5082] Bluetooth: Unexpected start frame (len 0) [ 201.814456][ T6743] rpc_pipefs: Unknown parameter 'discard' [ 202.488900][ T6747] netlink: 20 bytes leftover after parsing attributes in process `syz.0.250'. [ 202.785016][ T6750] syz.3.251: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 202.800335][ T6750] CPU: 1 PID: 6750 Comm: syz.3.251 Not tainted syzkaller #0 [ 202.808470][ T6750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 202.818751][ T6750] Call Trace: [ 202.822060][ T6750] [ 202.825121][ T6750] dump_stack_lvl+0x18c/0x250 [ 202.830116][ T6750] ? show_regs_print_info+0x20/0x20 [ 202.835338][ T6750] ? load_image+0x400/0x400 [ 202.839871][ T6750] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 202.846434][ T6750] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 202.852972][ T6750] warn_alloc+0x246/0x340 [ 202.857329][ T6750] ? stack_trace_save+0xaa/0x100 [ 202.862289][ T6750] ? zone_watermark_ok_safe+0x230/0x230 [ 202.867949][ T6750] ? kasan_set_track+0x5f/0x70 [ 202.872725][ T6750] ? kasan_set_track+0x4e/0x70 [ 202.877497][ T6750] ? __kasan_kmalloc+0x8f/0xa0 [ 202.882305][ T6750] ? xsk_init_queue+0xad/0x100 [ 202.887190][ T6750] ? xsk_setsockopt+0x42e/0x760 [ 202.892149][ T6750] ? do_sock_setsockopt+0x175/0x1a0 [ 202.897445][ T6750] ? __x64_sys_setsockopt+0x182/0x200 [ 202.902922][ T6750] __vmalloc_node_range+0x126/0x1330 [ 202.908722][ T6750] ? free_vm_area+0x50/0x50 [ 202.913341][ T6750] vmalloc_user+0x74/0x80 [ 202.917689][ T6750] ? xskq_create+0xbf/0x170 [ 202.922298][ T6750] xskq_create+0xbf/0x170 [ 202.926661][ T6750] xsk_init_queue+0xad/0x100 [ 202.931289][ T6750] xsk_setsockopt+0x42e/0x760 [ 202.935990][ T6750] ? xsk_poll+0x680/0x680 [ 202.940347][ T6750] ? __fget_files+0x28/0x4b0 [ 202.944961][ T6750] ? __fget_files+0x28/0x4b0 [ 202.949578][ T6750] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 202.955258][ T6750] ? security_socket_setsockopt+0x7e/0xa0 [ 202.961000][ T6750] ? xsk_poll+0x680/0x680 [ 202.965363][ T6750] do_sock_setsockopt+0x175/0x1a0 [ 202.970408][ T6750] ? __fdget+0x180/0x210 [ 202.974847][ T6750] __x64_sys_setsockopt+0x182/0x200 [ 202.980067][ T6750] do_syscall_64+0x55/0xa0 [ 202.984522][ T6750] ? clear_bhb_loop+0x40/0x90 [ 202.989220][ T6750] ? clear_bhb_loop+0x40/0x90 [ 202.993918][ T6750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.999915][ T6750] RIP: 0033:0x7f4478f9c799 [ 203.004503][ T6750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.024588][ T6750] RSP: 002b:00007f4479d84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 203.033048][ T6750] RAX: ffffffffffffffda RBX: 00007f4479216180 RCX: 00007f4478f9c799 [ 203.041065][ T6750] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 203.049142][ T6750] RBP: 00007f4479032c99 R08: 0000000000000004 R09: 0000000000000000 [ 203.057135][ T6750] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.065115][ T6750] R13: 00007f4479216218 R14: 00007f4479216180 R15: 00007fff53431268 [ 203.073125][ T6750] [ 203.077783][ T6750] Mem-Info: [ 203.080975][ T6750] active_anon:11035 inactive_anon:0 isolated_anon:0 [ 203.080975][ T6750] active_file:17600 inactive_file:40003 isolated_file:0 [ 203.080975][ T6750] unevictable:768 dirty:110 writeback:0 [ 203.080975][ T6750] slab_reclaimable:10373 slab_unreclaimable:90894 [ 203.080975][ T6750] mapped:27185 shmem:6892 pagetables:510 [ 203.080975][ T6750] sec_pagetables:0 bounce:0 [ 203.080975][ T6750] kernel_misc_reclaimable:0 [ 203.080975][ T6750] free:1342138 free_pcp:10286 free_cma:0 [ 203.128551][ T6750] Node 0 active_anon:44140kB inactive_anon:0kB active_file:70400kB inactive_file:159812kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108740kB dirty:440kB writeback:0kB shmem:26032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10480kB pagetables:2040kB sec_pagetables:0kB all_unreclaimable? no [ 203.161460][ T6750] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 203.192750][ T6750] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.221912][ T6750] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 203.227857][ T6750] Node 0 DMA32 free:1464020kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:44100kB inactive_anon:0kB active_file:70400kB inactive_file:158988kB unevictable:1536kB writepending:440kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:18460kB local_pcp:7620kB free_cma:0kB [ 203.258771][ T6750] lowmem_reserve[]: 0 0 0 0 0 [ 203.263859][ T6750] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.291071][ T6750] lowmem_reserve[]: 0 0 0 0 0 [ 203.295906][ T6750] Node 1 Normal free:3889164kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22684kB local_pcp:8088kB free_cma:0kB [ 203.326536][ T6750] lowmem_reserve[]: 0 0 0 0 0 [ 203.332113][ T6750] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 203.345479][ T6750] Node 0 DMA32: 757*4kB (U) 830*8kB (UME) 493*16kB (UME) 652*32kB (UME) 495*64kB (UME) 82*128kB (UME) 48*256kB (UME) 46*512kB (M) 18*1024kB (UM) 11*2048kB (ME) 319*4096kB (M) = 1464020kB [ 203.364644][ T6750] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 203.377037][ T6750] Node 1 Normal: 181*4kB (UME) 73*8kB (UME) 45*16kB (UME) 37*32kB (UME) 18*64kB (UME) 6*128kB (UE) 0*256kB 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3889164kB [ 203.394749][ T6750] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.404473][ T6750] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 203.436122][ T6750] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.445842][ T6750] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 203.455228][ T6750] 64495 total pagecache pages [ 203.459933][ T6750] 0 pages in swap cache [ 203.464282][ T6750] Free swap = 124996kB [ 203.468476][ T6750] Total swap = 124996kB [ 203.472834][ T6750] 2097051 pages RAM [ 203.476673][ T6750] 0 pages HighMem/MovableOnly [ 203.481510][ T6750] 416924 pages reserved [ 203.485677][ T6750] 0 pages cma reserved [ 208.756984][ T6766] xt_TPROXY: Can be used only with -p tcp or -p udp [ 209.425975][ T5082] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 209.426036][ T5082] Bluetooth: hci1: unknown advertising packet type: 0x6c [ 209.433802][ T5082] Bluetooth: hci1: Malformed LE Event: 0x02 [ 210.134062][ T6775] rpc_pipefs: Unknown parameter 'discard' [ 210.502328][ T6783] Cannot find set identified by id 0 to match [ 210.795498][ T6786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.261'. [ 211.261806][ T6788] netlink: 20 bytes leftover after parsing attributes in process `syz.3.262'. [ 211.748150][ T6803] xt_TPROXY: Can be used only with -p tcp or -p udp [ 212.416219][ T5082] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 212.416945][ T5082] Bluetooth: hci1: unknown advertising packet type: 0x6c [ 212.424415][ T5082] Bluetooth: hci1: Malformed LE Event: 0x02 [ 213.089918][ T5082] Bluetooth: Unexpected start frame (len 0) [ 213.568880][ T6819] 9pnet_fd: Insufficient options for proto=fd [ 215.738661][ T6836] Cannot find set identified by id 0 to match [ 215.968484][ T6839] syzkaller0: entered promiscuous mode [ 215.974331][ T6839] syzkaller0: entered allmulticast mode [ 217.896105][ T49] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x78 [ 217.913528][ T5082] Bluetooth: Unexpected start frame (len 0) [ 221.456115][ T6889] syzkaller0: entered promiscuous mode [ 221.471451][ T5082] Bluetooth: Unexpected start frame (len 0) [ 221.492837][ T6889] syzkaller0: entered allmulticast mode [ 226.175199][ T6925] syzkaller0: entered promiscuous mode [ 226.191456][ T6925] syzkaller0: entered allmulticast mode [ 227.022795][ T6932] Cannot find set identified by id 0 to match [ 227.402063][ T6940] syz.1.302: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 227.417182][ T6940] CPU: 0 PID: 6940 Comm: syz.1.302 Not tainted syzkaller #0 [ 227.424574][ T6940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 227.434660][ T6940] Call Trace: [ 227.437969][ T6940] [ 227.440909][ T6940] dump_stack_lvl+0x18c/0x250 [ 227.445610][ T6940] ? show_regs_print_info+0x20/0x20 [ 227.450824][ T6940] ? load_image+0x400/0x400 [ 227.455350][ T6940] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 227.461782][ T6940] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 227.468305][ T6940] warn_alloc+0x246/0x340 [ 227.472663][ T6940] ? stack_trace_save+0xaa/0x100 [ 227.477647][ T6940] ? zone_watermark_ok_safe+0x230/0x230 [ 227.483243][ T6940] ? kasan_set_track+0x5f/0x70 [ 227.488041][ T6940] ? kasan_set_track+0x4e/0x70 [ 227.492906][ T6940] ? __kasan_kmalloc+0x8f/0xa0 [ 227.497692][ T6940] ? xsk_init_queue+0xad/0x100 [ 227.502489][ T6940] ? xsk_setsockopt+0x42e/0x760 [ 227.507359][ T6940] ? do_sock_setsockopt+0x175/0x1a0 [ 227.512565][ T6940] ? __x64_sys_setsockopt+0x182/0x200 [ 227.517951][ T6940] __vmalloc_node_range+0x126/0x1330 [ 227.523298][ T6940] ? free_vm_area+0x50/0x50 [ 227.527826][ T6940] vmalloc_user+0x74/0x80 [ 227.532172][ T6940] ? xskq_create+0xbf/0x170 [ 227.536713][ T6940] xskq_create+0xbf/0x170 [ 227.541087][ T6940] xsk_init_queue+0xad/0x100 [ 227.545716][ T6940] xsk_setsockopt+0x42e/0x760 [ 227.550426][ T6940] ? xsk_poll+0x680/0x680 [ 227.554797][ T6940] ? __fget_files+0x28/0x4b0 [ 227.559642][ T6940] ? __fget_files+0x28/0x4b0 [ 227.564342][ T6940] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 227.569918][ T6940] ? security_socket_setsockopt+0x7e/0xa0 [ 227.575679][ T6940] ? xsk_poll+0x680/0x680 [ 227.580231][ T6940] do_sock_setsockopt+0x175/0x1a0 [ 227.585290][ T6940] ? __fdget+0x180/0x210 [ 227.589549][ T6940] __x64_sys_setsockopt+0x182/0x200 [ 227.594767][ T6940] do_syscall_64+0x55/0xa0 [ 227.599204][ T6940] ? clear_bhb_loop+0x40/0x90 [ 227.603918][ T6940] ? clear_bhb_loop+0x40/0x90 [ 227.608782][ T6940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.614689][ T6940] RIP: 0033:0x7f0d7719c799 [ 227.619120][ T6940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.638916][ T6940] RSP: 002b:00007f0d78098028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 227.647353][ T6940] RAX: ffffffffffffffda RBX: 00007f0d77416180 RCX: 00007f0d7719c799 [ 227.655512][ T6940] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 227.663533][ T6940] RBP: 00007f0d77232c99 R08: 0000000000000004 R09: 0000000000000000 [ 227.671689][ T6940] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.679874][ T6940] R13: 00007f0d77416218 R14: 00007f0d77416180 R15: 00007ffd09cb62d8 [ 227.688094][ T6940] [ 227.692775][ T6940] Mem-Info: [ 227.697235][ T6940] active_anon:12445 inactive_anon:0 isolated_anon:0 [ 227.697235][ T6940] active_file:17600 inactive_file:40011 isolated_file:0 [ 227.697235][ T6940] unevictable:768 dirty:90 writeback:0 [ 227.697235][ T6940] slab_reclaimable:10256 slab_unreclaimable:90523 [ 227.697235][ T6940] mapped:27105 shmem:8307 pagetables:542 [ 227.697235][ T6940] sec_pagetables:0 bounce:0 [ 227.697235][ T6940] kernel_misc_reclaimable:0 [ 227.697235][ T6940] free:1342061 free_pcp:8832 free_cma:0 [ 227.743040][ T6940] Node 0 active_anon:49780kB inactive_anon:0kB active_file:70400kB inactive_file:159844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108420kB dirty:360kB writeback:0kB shmem:31692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10584kB pagetables:2168kB sec_pagetables:0kB all_unreclaimable? no [ 227.775873][ T6940] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 227.807589][ T6940] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 227.835601][ T6940] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 227.841457][ T6940] Node 0 DMA32 free:1463712kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:49740kB inactive_anon:0kB active_file:70400kB inactive_file:159020kB unevictable:1536kB writepending:360kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:12612kB local_pcp:8712kB free_cma:0kB [ 227.872432][ T6940] lowmem_reserve[]: 0 0 0 0 0 [ 227.877217][ T6940] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 227.905951][ T6940] lowmem_reserve[]: 0 0 0 0 0 [ 227.910919][ T6940] Node 1 Normal free:3889164kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22716kB local_pcp:14628kB free_cma:0kB [ 227.941301][ T6940] lowmem_reserve[]: 0 0 0 0 0 [ 227.946077][ T6940] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 227.959060][ T6940] Node 0 DMA32: 2*4kB (ME) 879*8kB (UME) 524*16kB (UME) 729*32kB (UME) 419*64kB (UM) 83*128kB (UME) 56*256kB (UME) 34*512kB (M) 18*1024kB (UM) 11*2048kB (ME) 321*4096kB (UM) = 1463712kB [ 227.977703][ T6940] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 227.989864][ T6940] Node 1 Normal: 181*4kB (UME) 73*8kB (UME) 45*16kB (UME) 37*32kB (UME) 18*64kB (UME) 6*128kB (UE) 0*256kB 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3889164kB [ 228.009261][ T6940] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 228.019185][ T6940] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 228.028631][ T6940] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 228.038286][ T6940] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 228.069978][ T6940] 65918 total pagecache pages [ 228.074839][ T6940] 0 pages in swap cache [ 228.079016][ T6940] Free swap = 124996kB [ 228.083213][ T6940] Total swap = 124996kB [ 228.087380][ T6940] 2097051 pages RAM [ 228.091271][ T6940] 0 pages HighMem/MovableOnly [ 228.095954][ T6940] 416924 pages reserved [ 228.100347][ T6940] 0 pages cma reserved [ 228.918157][ T6938] netlink: 20 bytes leftover after parsing attributes in process `syz.2.303'. [ 233.078006][ T6977] Cannot find set identified by id 0 to match [ 233.199340][ T6980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.313'. [ 233.393321][ T6982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.316'. [ 233.567153][ T6985] 9pnet_fd: Insufficient options for proto=fd [ 236.746213][ T7020] netlink: 56 bytes leftover after parsing attributes in process `syz.1.324'. [ 239.182915][ T7055] warn_alloc: 1 callbacks suppressed [ 239.182933][ T7055] syz.0.330: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 239.203397][ T7055] CPU: 1 PID: 7055 Comm: syz.0.330 Not tainted syzkaller #0 [ 239.210893][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 239.221074][ T7055] Call Trace: [ 239.224454][ T7055] [ 239.227396][ T7055] dump_stack_lvl+0x18c/0x250 [ 239.232099][ T7055] ? show_regs_print_info+0x20/0x20 [ 239.237324][ T7055] ? load_image+0x400/0x400 [ 239.241853][ T7055] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 239.248285][ T7055] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 239.254807][ T7055] warn_alloc+0x246/0x340 [ 239.259171][ T7055] ? stack_trace_save+0xaa/0x100 [ 239.264145][ T7055] ? zone_watermark_ok_safe+0x230/0x230 [ 239.269732][ T7055] ? kasan_set_track+0x5f/0x70 [ 239.274507][ T7055] ? kasan_set_track+0x4e/0x70 [ 239.279451][ T7055] ? __kasan_kmalloc+0x8f/0xa0 [ 239.284313][ T7055] ? xsk_init_queue+0xad/0x100 [ 239.289090][ T7055] ? xsk_setsockopt+0x42e/0x760 [ 239.294043][ T7055] ? do_sock_setsockopt+0x175/0x1a0 [ 239.299251][ T7055] ? __x64_sys_setsockopt+0x182/0x200 [ 239.304633][ T7055] __vmalloc_node_range+0x126/0x1330 [ 239.309961][ T7055] ? free_vm_area+0x50/0x50 [ 239.314488][ T7055] vmalloc_user+0x74/0x80 [ 239.318831][ T7055] ? xskq_create+0xbf/0x170 [ 239.323348][ T7055] xskq_create+0xbf/0x170 [ 239.327699][ T7055] xsk_init_queue+0xad/0x100 [ 239.332308][ T7055] xsk_setsockopt+0x42e/0x760 [ 239.337174][ T7055] ? xsk_poll+0x680/0x680 [ 239.341522][ T7055] ? __fget_files+0x28/0x4b0 [ 239.346128][ T7055] ? __fget_files+0x28/0x4b0 [ 239.350734][ T7055] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 239.356318][ T7055] ? security_socket_setsockopt+0x7e/0xa0 [ 239.362245][ T7055] ? xsk_poll+0x680/0x680 [ 239.366710][ T7055] do_sock_setsockopt+0x175/0x1a0 [ 239.371848][ T7055] ? __fdget+0x180/0x210 [ 239.376139][ T7055] __x64_sys_setsockopt+0x182/0x200 [ 239.381371][ T7055] do_syscall_64+0x55/0xa0 [ 239.385817][ T7055] ? clear_bhb_loop+0x40/0x90 [ 239.390528][ T7055] ? clear_bhb_loop+0x40/0x90 [ 239.395220][ T7055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.401126][ T7055] RIP: 0033:0x7f2e9219c799 [ 239.405549][ T7055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.425543][ T7055] RSP: 002b:00007f2e92f83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 239.434196][ T7055] RAX: ffffffffffffffda RBX: 00007f2e92416180 RCX: 00007f2e9219c799 [ 239.442354][ T7055] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 239.450443][ T7055] RBP: 00007f2e92232c99 R08: 0000000000000004 R09: 0000000000000000 [ 239.458440][ T7055] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.466429][ T7055] R13: 00007f2e92416218 R14: 00007f2e92416180 R15: 00007ffe34d954b8 [ 239.474438][ T7055] [ 239.478401][ T7055] Mem-Info: [ 239.481667][ T7055] active_anon:8346 inactive_anon:0 isolated_anon:0 [ 239.481667][ T7055] active_file:17600 inactive_file:40015 isolated_file:0 [ 239.481667][ T7055] unevictable:768 dirty:75 writeback:0 [ 239.481667][ T7055] slab_reclaimable:10274 slab_unreclaimable:90437 [ 239.481667][ T7055] mapped:28171 shmem:4247 pagetables:546 [ 239.481667][ T7055] sec_pagetables:0 bounce:0 [ 239.481667][ T7055] kernel_misc_reclaimable:0 [ 239.481667][ T7055] free:1343922 free_pcp:10858 free_cma:0 [ 239.527639][ T7055] Node 0 active_anon:33384kB inactive_anon:0kB active_file:70400kB inactive_file:159860kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112684kB dirty:300kB writeback:0kB shmem:15452kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10700kB pagetables:2184kB sec_pagetables:0kB all_unreclaimable? no [ 239.560448][ T7055] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 239.591654][ T7055] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.619287][ T7055] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 239.625323][ T7055] Node 0 DMA32 free:1471156kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:33344kB inactive_anon:0kB active_file:70400kB inactive_file:159036kB unevictable:1536kB writepending:300kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:20684kB local_pcp:16104kB free_cma:0kB [ 239.657530][ T7055] lowmem_reserve[]: 0 0 0 0 0 [ 239.662426][ T7055] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.690227][ T7055] lowmem_reserve[]: 0 0 0 0 0 [ 239.695060][ T7055] Node 1 Normal free:3889164kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22748kB local_pcp:8088kB free_cma:0kB [ 239.725612][ T7055] lowmem_reserve[]: 0 0 0 0 0 [ 239.730488][ T7055] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 239.743843][ T7055] Node 0 DMA32: 67*4kB (UME) 289*8kB (UE) 466*16kB (UE) 686*32kB (UME) 491*64kB (UME) 96*128kB (UME) 57*256kB (UME) 37*512kB (M) 16*1024kB (UM) 11*2048kB (ME) 323*4096kB (UM) = 1471156kB [ 239.763128][ T7055] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 239.775192][ T7055] Node 1 Normal: 181*4kB (UME) 73*8kB (UME) 45*16kB (UME) 37*32kB (UME) 18*64kB (UME) 6*128kB (UE) 0*256kB 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3889164kB [ 239.793604][ T7055] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.803308][ T7055] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 239.835191][ T7055] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.845030][ T7055] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 239.854638][ T7055] 61862 total pagecache pages [ 239.859415][ T7055] 0 pages in swap cache [ 239.863741][ T7055] Free swap = 124996kB [ 239.867987][ T7055] Total swap = 124996kB [ 239.872218][ T7055] 2097051 pages RAM [ 239.876026][ T7055] 0 pages HighMem/MovableOnly [ 239.881378][ T7055] 416924 pages reserved [ 239.885536][ T7055] 0 pages cma reserved [ 240.832156][ T7054] 9pnet_fd: Insufficient options for proto=fd [ 241.130485][ T7060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.332'. [ 242.617912][ T7069] netlink: 108 bytes leftover after parsing attributes in process `syz.0.336'. [ 242.627181][ T7069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.336'. [ 243.133490][ T7073] netlink: 56 bytes leftover after parsing attributes in process `syz.2.334'. [ 245.272917][ T7079] syzkaller0: entered promiscuous mode [ 245.278500][ T7079] syzkaller0: entered allmulticast mode [ 245.996809][ T7086] xt_TPROXY: Can be used only with -p tcp or -p udp [ 246.014555][ T5082] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 246.017770][ T5082] Bluetooth: hci2: Malformed LE Event: 0x02 [ 246.969736][ T7091] 9pnet_fd: Insufficient options for proto=fd [ 247.521987][ T7100] Cannot find set identified by id 0 to match [ 248.264168][ T7088] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 248.389388][ T7103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.344'. [ 249.611439][ T7105] fuse: Bad value for 'fd' [ 250.175307][ T7119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.349'. [ 250.477543][ T7127] xt_TPROXY: Can be used only with -p tcp or -p udp [ 251.641798][ T7133] 9pnet_fd: Insufficient options for proto=fd [ 253.351426][ T7142] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 253.458055][ T7148] netlink: 20 bytes leftover after parsing attributes in process `syz.3.358'. [ 255.988143][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.994735][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.185125][ T7170] rpc_pipefs: Unknown parameter 'discard' [ 256.318020][ T7173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.365'. [ 256.331642][ T7175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.367'. [ 256.595954][ T5082] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 256.596002][ T5082] Bluetooth: hci1: Malformed LE Event: 0x02 [ 257.539320][ T7187] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 257.849910][ T7184] 9pnet_fd: Insufficient options for proto=fd [ 260.102277][ T7202] rpc_pipefs: Unknown parameter 'discard' [ 260.327220][ T7211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.377'. [ 260.772498][ T7213] tipc: Started in network mode [ 260.795760][ T7213] tipc: Node identity 8af6810f8cb1, cluster identity 4711 [ 260.809844][ T7213] tipc: Enabled bearer , priority 0 [ 260.952838][ T7220] syzkaller0: entered promiscuous mode [ 260.958381][ T7220] syzkaller0: entered allmulticast mode [ 261.479533][ T7220] tipc: Resetting bearer [ 261.593735][ T7212] tipc: Resetting bearer [ 262.102510][ T7212] tipc: Disabling bearer [ 262.144833][ T7230] 9pnet_fd: Insufficient options for proto=fd [ 262.235041][ T23] tipc: Node number set to 105349391 [ 262.595631][ T7241] rpc_pipefs: Unknown parameter 'discard' [ 262.646340][ T7239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.386'. [ 264.566852][ T7267] rpc_pipefs: Unknown parameter 'discard' [ 264.615591][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.395'. [ 266.471928][ T7295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.405'. [ 266.479528][ T7298] rpc_pipefs: Unknown parameter 'discard' [ 268.818037][ T7310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.411'. [ 269.296837][ T7318] Cannot find add_set index 128 as target [ 270.438019][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'. [ 270.551307][ T5825] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 270.624311][ T7330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.417'. [ 270.744139][ T5825] usb 3-1: unable to get BOS descriptor or descriptor too short [ 270.762008][ T5825] usb 3-1: not running at top speed; connect to a high speed hub [ 270.785649][ T5825] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 270.807438][ T5825] usb 3-1: config 1 interface 0 has no altsetting 0 [ 270.829184][ T5825] usb 3-1: string descriptor 0 read error: -22 [ 270.841102][ T5825] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.40 [ 270.864853][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.877984][ T7322] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 272.653828][ T5825] usbhid 3-1:1.0: can't add hid device: -71 [ 272.681605][ T5825] usbhid: probe of 3-1:1.0 failed with error -71 [ 272.712920][ T5825] usb 3-1: USB disconnect, device number 3 [ 274.771375][ T7364] syz.1.427: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 274.787796][ T7364] CPU: 0 PID: 7364 Comm: syz.1.427 Not tainted syzkaller #0 [ 274.795115][ T7364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 274.805283][ T7364] Call Trace: [ 274.808584][ T7364] [ 274.811523][ T7364] dump_stack_lvl+0x18c/0x250 [ 274.816239][ T7364] ? show_regs_print_info+0x20/0x20 [ 274.821466][ T7364] ? load_image+0x400/0x400 [ 274.825987][ T7364] ? __rcu_read_unlock+0x7c/0xd0 [ 274.830946][ T7364] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 274.837548][ T7364] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 274.844067][ T7364] warn_alloc+0x246/0x340 [ 274.848414][ T7364] ? stack_trace_save+0xaa/0x100 [ 274.853370][ T7364] ? zone_watermark_ok_safe+0x230/0x230 [ 274.858943][ T7364] ? kasan_set_track+0x5f/0x70 [ 274.863727][ T7364] ? kasan_set_track+0x4e/0x70 [ 274.868495][ T7364] ? __kasan_kmalloc+0x8f/0xa0 [ 274.873278][ T7364] ? xsk_init_queue+0xad/0x100 [ 274.878051][ T7364] ? xsk_setsockopt+0x42e/0x760 [ 274.882916][ T7364] ? do_sock_setsockopt+0x175/0x1a0 [ 274.888123][ T7364] ? __x64_sys_setsockopt+0x182/0x200 [ 274.893512][ T7364] __vmalloc_node_range+0x126/0x1330 [ 274.899184][ T7364] ? free_vm_area+0x50/0x50 [ 274.904179][ T7364] vmalloc_user+0x74/0x80 [ 274.908679][ T7364] ? xskq_create+0xbf/0x170 [ 274.913222][ T7364] xskq_create+0xbf/0x170 [ 274.918054][ T7364] xsk_init_queue+0xad/0x100 [ 274.922954][ T7364] xsk_setsockopt+0x42e/0x760 [ 274.927746][ T7364] ? xsk_poll+0x680/0x680 [ 274.932110][ T7364] ? __fget_files+0x28/0x4b0 [ 274.936742][ T7364] ? __fget_files+0x28/0x4b0 [ 274.941526][ T7364] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 274.947087][ T7364] ? security_socket_setsockopt+0x7e/0xa0 [ 274.952822][ T7364] ? xsk_poll+0x680/0x680 [ 274.957268][ T7364] do_sock_setsockopt+0x175/0x1a0 [ 274.962303][ T7364] ? __fdget+0x180/0x210 [ 274.966557][ T7364] __x64_sys_setsockopt+0x182/0x200 [ 274.971770][ T7364] do_syscall_64+0x55/0xa0 [ 274.976198][ T7364] ? clear_bhb_loop+0x40/0x90 [ 274.980881][ T7364] ? clear_bhb_loop+0x40/0x90 [ 274.985566][ T7364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.991474][ T7364] RIP: 0033:0x7f0d7719c799 [ 274.995899][ T7364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.015700][ T7364] RSP: 002b:00007f0d78098028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 275.024133][ T7364] RAX: ffffffffffffffda RBX: 00007f0d77416180 RCX: 00007f0d7719c799 [ 275.032115][ T7364] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 275.040112][ T7364] RBP: 00007f0d77232c99 R08: 0000000000000004 R09: 0000000000000000 [ 275.048267][ T7364] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.056307][ T7364] R13: 00007f0d77416218 R14: 00007f0d77416180 R15: 00007ffd09cb62d8 [ 275.064484][ T7364] [ 275.068901][ T7364] Mem-Info: [ 275.072603][ T7364] active_anon:8392 inactive_anon:0 isolated_anon:0 [ 275.072603][ T7364] active_file:17600 inactive_file:40029 isolated_file:0 [ 275.072603][ T7364] unevictable:769 dirty:76 writeback:0 [ 275.072603][ T7364] slab_reclaimable:10704 slab_unreclaimable:91011 [ 275.072603][ T7364] mapped:27328 shmem:4231 pagetables:555 [ 275.072603][ T7364] sec_pagetables:0 bounce:0 [ 275.072603][ T7364] kernel_misc_reclaimable:0 [ 275.072603][ T7364] free:1343733 free_pcp:9609 free_cma:0 [ 275.119256][ T7364] Node 0 active_anon:33568kB inactive_anon:0kB active_file:70400kB inactive_file:159916kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:109312kB dirty:304kB writeback:0kB shmem:15388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10668kB pagetables:2220kB sec_pagetables:0kB all_unreclaimable? no [ 275.152771][ T7364] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 275.183546][ T7364] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 275.213294][ T7364] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 275.222710][ T7364] Node 0 DMA32 free:1470400kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:33528kB inactive_anon:0kB active_file:70400kB inactive_file:159092kB unevictable:1540kB writepending:304kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:15688kB local_pcp:1176kB free_cma:0kB [ 275.253830][ T7364] lowmem_reserve[]: 0 0 0 0 0 [ 275.266344][ T7364] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 275.293911][ T7364] lowmem_reserve[]: 0 0 0 0 0 [ 275.303940][ T7364] Node 1 Normal free:3889164kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22748kB local_pcp:14660kB free_cma:0kB [ 275.344750][ T7364] lowmem_reserve[]: 0 0 0 0 0 [ 275.354348][ T7364] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 275.389316][ T7364] Node 0 DMA32: 2*4kB (ME) 11*8kB (UE) 594*16kB (UME) 778*32kB (UME) 496*64kB (UME) 94*128kB (UME) 46*256kB (UME) 42*512kB (ME) 19*1024kB (UM) 8*2048kB (M) 323*4096kB (UM) = 1470400kB [ 275.431908][ T7364] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 275.461338][ T7364] Node 1 Normal: 181*4kB (UME) 73*8kB (UME) 45*16kB (UME) 37*32kB (UME) 18*64kB (UME) 6*128kB (UE) 0*256kB 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3889164kB [ 275.487270][ T7364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 275.497473][ T7364] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 275.581275][ T7364] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 275.591021][ T7364] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 275.601071][ T7364] 61861 total pagecache pages [ 275.605927][ T7364] 0 pages in swap cache [ 275.610163][ T7364] Free swap = 124996kB [ 275.614628][ T7364] Total swap = 124996kB [ 275.620695][ T7364] 2097051 pages RAM [ 275.624865][ T7364] 0 pages HighMem/MovableOnly [ 275.629760][ T7364] 416924 pages reserved [ 275.634438][ T7364] 0 pages cma reserved [ 278.421869][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 278.632513][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 278.659110][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 278.711493][ T9] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 278.769670][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 278.804288][ T9] usb 1-1: string descriptor 0 read error: -22 [ 278.817621][ T9] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.40 [ 278.830087][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.857710][ T7379] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 280.896353][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 280.930375][ T9] usbhid: probe of 1-1:1.0 failed with error -71 [ 281.081329][ T9] usb 1-1: USB disconnect, device number 2 [ 281.667108][ T7394] Cannot find add_set index 128 as target [ 286.668527][ T7430] Cannot find set identified by id 0 to match [ 288.011349][ T7441] warn_alloc: 1 callbacks suppressed [ 288.011382][ T7441] syz.2.448: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 288.032544][ T7441] CPU: 1 PID: 7441 Comm: syz.2.448 Not tainted syzkaller #0 [ 288.040046][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 288.050567][ T7441] Call Trace: [ 288.053916][ T7441] [ 288.057182][ T7441] dump_stack_lvl+0x18c/0x250 [ 288.061896][ T7441] ? show_regs_print_info+0x20/0x20 [ 288.067213][ T7441] ? load_image+0x400/0x400 [ 288.072365][ T7441] ? __rcu_read_unlock+0x7c/0xd0 [ 288.077495][ T7441] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 288.084494][ T7441] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 288.091755][ T7441] warn_alloc+0x246/0x340 [ 288.096557][ T7441] ? stack_trace_save+0xaa/0x100 [ 288.101782][ T7441] ? zone_watermark_ok_safe+0x230/0x230 [ 288.107927][ T7441] ? kasan_set_track+0x5f/0x70 [ 288.113003][ T7441] ? kasan_set_track+0x4e/0x70 [ 288.118342][ T7441] ? __kasan_kmalloc+0x8f/0xa0 [ 288.123163][ T7441] ? xsk_init_queue+0xad/0x100 [ 288.127980][ T7441] ? xsk_setsockopt+0x42e/0x760 [ 288.133850][ T7441] ? do_sock_setsockopt+0x175/0x1a0 [ 288.139852][ T7441] ? __x64_sys_setsockopt+0x182/0x200 [ 288.145354][ T7441] __vmalloc_node_range+0x126/0x1330 [ 288.151066][ T7441] ? free_vm_area+0x50/0x50 [ 288.155704][ T7441] vmalloc_user+0x74/0x80 [ 288.160068][ T7441] ? xskq_create+0xbf/0x170 [ 288.164600][ T7441] xskq_create+0xbf/0x170 [ 288.168957][ T7441] xsk_init_queue+0xad/0x100 [ 288.174642][ T7441] xsk_setsockopt+0x42e/0x760 [ 288.180173][ T7441] ? xsk_poll+0x680/0x680 [ 288.184890][ T7441] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 288.191182][ T7441] ? do_sock_setsockopt+0x54/0x1a0 [ 288.196533][ T7441] ? xsk_poll+0x680/0x680 [ 288.201441][ T7441] do_sock_setsockopt+0x175/0x1a0 [ 288.206586][ T7441] ? __fdget+0x180/0x210 [ 288.210858][ T7441] __x64_sys_setsockopt+0x182/0x200 [ 288.216192][ T7441] do_syscall_64+0x55/0xa0 [ 288.221143][ T7441] ? clear_bhb_loop+0x40/0x90 [ 288.226114][ T7441] ? clear_bhb_loop+0x40/0x90 [ 288.230829][ T7441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.236849][ T7441] RIP: 0033:0x7f5669d9c799 [ 288.241598][ T7441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.261544][ T7441] RSP: 002b:00007f5667fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 288.270690][ T7441] RAX: ffffffffffffffda RBX: 00007f566a016180 RCX: 00007f5669d9c799 [ 288.278953][ T7441] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 288.287557][ T7441] RBP: 00007f5669e32c99 R08: 0000000000000004 R09: 0000000000000000 [ 288.296947][ T7441] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.306105][ T7441] R13: 00007f566a016218 R14: 00007f566a016180 R15: 00007ffd77aec138 [ 288.314122][ T7441] [ 288.318167][ T7441] Mem-Info: [ 288.321462][ T7441] active_anon:11487 inactive_anon:0 isolated_anon:0 [ 288.321462][ T7441] active_file:17600 inactive_file:40033 isolated_file:0 [ 288.321462][ T7441] unevictable:768 dirty:48 writeback:0 [ 288.321462][ T7441] slab_reclaimable:10718 slab_unreclaimable:90822 [ 288.321462][ T7441] mapped:27301 shmem:7264 pagetables:524 [ 288.321462][ T7441] sec_pagetables:0 bounce:0 [ 288.321462][ T7441] kernel_misc_reclaimable:0 [ 288.321462][ T7441] free:1342308 free_pcp:9862 free_cma:0 [ 288.367404][ T7441] Node 0 active_anon:45948kB inactive_anon:0kB active_file:70400kB inactive_file:159932kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:109204kB dirty:192kB writeback:0kB shmem:27520kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10680kB pagetables:2096kB sec_pagetables:0kB all_unreclaimable? no [ 288.400613][ T7441] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 288.433283][ T7441] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 288.463899][ T7441] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 288.470517][ T7441] Node 0 DMA32 free:1464700kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:45908kB inactive_anon:0kB active_file:70400kB inactive_file:159108kB unevictable:1536kB writepending:192kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:16700kB local_pcp:2500kB free_cma:0kB [ 288.502675][ T7441] lowmem_reserve[]: 0 0 0 0 0 [ 288.507961][ T7441] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 288.536654][ T7441] lowmem_reserve[]: 0 0 0 0 0 [ 288.541741][ T7441] Node 1 Normal free:3889164kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22748kB local_pcp:8088kB free_cma:0kB [ 288.572047][ T7441] lowmem_reserve[]: 0 0 0 0 0 [ 288.577033][ T7441] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 288.590300][ T7441] Node 0 DMA32: 1523*4kB (UE) 722*8kB (UME) 624*16kB (UME) 615*32kB (UME) 413*64kB (UME) 100*128kB (UME) 14*256kB (UM) 40*512kB (M) 20*1024kB (UME) 8*2048kB (M) 323*4096kB (UM) = 1464700kB [ 288.610788][ T7441] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 288.624117][ T7441] Node 1 Normal: 181*4kB (UME) 73*8kB (UME) 45*16kB (UME) 37*32kB (UME) 18*64kB (UME) 6*128kB (UE) 0*256kB 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3889164kB [ 288.643265][ T7441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 288.653143][ T7441] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 288.662645][ T7441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 288.764041][ T7441] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 288.773493][ T7441] 64897 total pagecache pages [ 288.778190][ T7441] 0 pages in swap cache [ 288.782379][ T7441] Free swap = 124996kB [ 288.786801][ T7441] Total swap = 124996kB [ 288.791386][ T7441] 2097051 pages RAM [ 288.795245][ T7441] 0 pages HighMem/MovableOnly [ 288.800199][ T7441] 416924 pages reserved [ 288.804524][ T7441] 0 pages cma reserved [ 291.459361][ T7458] syzkaller0: entered promiscuous mode [ 291.466489][ T7458] syzkaller0: entered allmulticast mode [ 298.884934][ T7497] Cannot find set identified by id 0 to match [ 301.424916][ T7516] syzkaller0: entered promiscuous mode [ 301.550456][ T7516] syzkaller0: entered allmulticast mode [ 301.594401][ T5773] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 301.594453][ T5773] Bluetooth: hci1: Malformed LE Event: 0x02 [ 303.265640][ T7529] capability: warning: `syz.0.472' uses 32-bit capabilities (legacy support in use) [ 304.198402][ T7543] netlink: 16 bytes leftover after parsing attributes in process `syz.2.477'. [ 305.717282][ T5773] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 305.717361][ T5773] Bluetooth: hci3: Malformed LE Event: 0x02 [ 305.878145][ T7553] syz.1.481[7553]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 305.918745][ T7553] loop1: detected capacity change from 0 to 512 [ 305.963760][ T7553] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 306.033742][ T7553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.074672][ T7553] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.187445][ T7562] tipc: Started in network mode [ 306.211621][ T7562] tipc: Node identity 9a5f2c3df69e, cluster identity 4711 [ 306.235670][ T7562] tipc: Enabled bearer , priority 0 [ 306.276839][ T7565] syzkaller0: entered promiscuous mode [ 306.297086][ T7565] syzkaller0: entered allmulticast mode [ 306.321103][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.435502][ T7562] tipc: Resetting bearer [ 306.454725][ T7561] tipc: Resetting bearer [ 306.752619][ T7561] tipc: Disabling bearer [ 307.852714][ T7585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.488'. [ 308.110886][ T5773] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 308.110938][ T5773] Bluetooth: hci3: Malformed LE Event: 0x02 [ 308.399544][ T23] IPVS: starting estimator thread 0... [ 308.422531][ T7593] netlink: 'syz.0.494': attribute type 1 has an invalid length. [ 308.489346][ T7593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 308.541590][ T7595] IPVS: using max 20 ests per chain, 48000 per kthread [ 308.559863][ T7603] loop2: detected capacity change from 0 to 512 [ 308.584850][ T7598] bond1: (slave veth3): Enslaving as an active interface with a down link [ 308.627909][ T7593] bond1: (slave dummy0): making interface the new active one [ 308.635349][ T7603] FAT-fs (loop2): bogus number of FAT sectors [ 308.635434][ T7603] FAT-fs (loop2): Can't find a valid FAT filesystem [ 308.670030][ T7593] dummy0: entered promiscuous mode [ 308.677935][ T7593] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 309.455007][ T7613] syzkaller1: entered promiscuous mode [ 309.460618][ T7613] syzkaller1: entered allmulticast mode [ 311.328462][ T7629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.503'. [ 311.961353][ T5825] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 312.592346][ T5825] usb 4-1: unable to get BOS descriptor or descriptor too short [ 312.611359][ T5825] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 312.620340][ T5825] usb 4-1: can't read configurations, error -71 [ 313.161370][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 315.330563][ T7692] loop1: detected capacity change from 0 to 512 [ 315.379020][ T7692] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 315.620310][ T7692] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 315.646342][ T7692] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 315.657351][ T7692] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 315.817884][ T7692] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 316.281512][ T7695] netlink: 188 bytes leftover after parsing attributes in process `syz.1.527'. [ 316.301457][ T7695] netlink: 64 bytes leftover after parsing attributes in process `syz.1.527'. [ 317.046827][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 317.449542][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.456309][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.533333][ T5765] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 317.550925][ T7710] 9pnet_fd: Insufficient options for proto=fd [ 317.852312][ T5765] usb 1-1: unable to get BOS descriptor or descriptor too short [ 317.911691][ T5765] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 317.934189][ T5765] usb 1-1: can't read configurations, error -71 [ 319.645074][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 323.288184][ T7751] Cannot find set identified by id 0 to match [ 323.468606][ T7754] warn_alloc: 1 callbacks suppressed [ 323.468623][ T7754] syz.1.545: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 323.489084][ T7754] CPU: 0 PID: 7754 Comm: syz.1.545 Not tainted syzkaller #0 [ 323.497431][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 323.507715][ T7754] Call Trace: [ 323.511382][ T7754] [ 323.514424][ T7754] dump_stack_lvl+0x18c/0x250 [ 323.519510][ T7754] ? show_regs_print_info+0x20/0x20 [ 323.525045][ T7754] ? load_image+0x400/0x400 [ 323.529607][ T7754] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 323.536508][ T7754] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 323.543633][ T7754] warn_alloc+0x246/0x340 [ 323.548038][ T7754] ? stack_trace_save+0xaa/0x100 [ 323.553027][ T7754] ? zone_watermark_ok_safe+0x230/0x230 [ 323.558631][ T7754] ? kasan_set_track+0x5f/0x70 [ 323.563443][ T7754] ? kasan_set_track+0x4e/0x70 [ 323.568399][ T7754] ? __kasan_kmalloc+0x8f/0xa0 [ 323.573303][ T7754] ? xsk_init_queue+0xad/0x100 [ 323.578100][ T7754] ? xsk_setsockopt+0x42e/0x760 [ 323.582996][ T7754] ? do_sock_setsockopt+0x175/0x1a0 [ 323.588221][ T7754] ? __x64_sys_setsockopt+0x182/0x200 [ 323.593722][ T7754] __vmalloc_node_range+0x126/0x1330 [ 323.599535][ T7754] ? free_vm_area+0x50/0x50 [ 323.604364][ T7754] vmalloc_user+0x74/0x80 [ 323.608721][ T7754] ? xskq_create+0xbf/0x170 [ 323.613255][ T7754] xskq_create+0xbf/0x170 [ 323.617589][ T7754] xsk_init_queue+0xad/0x100 [ 323.622186][ T7754] xsk_setsockopt+0x42e/0x760 [ 323.626861][ T7754] ? xsk_poll+0x680/0x680 [ 323.631214][ T7754] ? __fget_files+0x28/0x4b0 [ 323.635810][ T7754] ? __fget_files+0x28/0x4b0 [ 323.640661][ T7754] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 323.646383][ T7754] ? security_socket_setsockopt+0x7e/0xa0 [ 323.652104][ T7754] ? xsk_poll+0x680/0x680 [ 323.656437][ T7754] do_sock_setsockopt+0x175/0x1a0 [ 323.661522][ T7754] ? __fdget+0x180/0x210 [ 323.666074][ T7754] __x64_sys_setsockopt+0x182/0x200 [ 323.671472][ T7754] do_syscall_64+0x55/0xa0 [ 323.675991][ T7754] ? clear_bhb_loop+0x40/0x90 [ 323.680839][ T7754] ? clear_bhb_loop+0x40/0x90 [ 323.685527][ T7754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.691524][ T7754] RIP: 0033:0x7f0d7719c799 [ 323.696023][ T7754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.716071][ T7754] RSP: 002b:00007f0d780b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 323.724594][ T7754] RAX: ffffffffffffffda RBX: 00007f0d77416090 RCX: 00007f0d7719c799 [ 323.732750][ T7754] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 323.741067][ T7754] RBP: 00007f0d77232c99 R08: 0000000000000004 R09: 0000000000000000 [ 323.749300][ T7754] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.757282][ T7754] R13: 00007f0d77416128 R14: 00007f0d77416090 R15: 00007ffd09cb62d8 [ 323.765279][ T7754] [ 323.770594][ T7754] Mem-Info: [ 323.774304][ T7754] active_anon:20316 inactive_anon:0 isolated_anon:0 [ 323.774304][ T7754] active_file:17600 inactive_file:40049 isolated_file:0 [ 323.774304][ T7754] unevictable:768 dirty:160 writeback:0 [ 323.774304][ T7754] slab_reclaimable:10477 slab_unreclaimable:92178 [ 323.774304][ T7754] mapped:28165 shmem:16096 pagetables:550 [ 323.774304][ T7754] sec_pagetables:0 bounce:0 [ 323.774304][ T7754] kernel_misc_reclaimable:0 [ 323.774304][ T7754] free:1318499 free_pcp:6908 free_cma:0 [ 323.820120][ T7754] Node 0 active_anon:79064kB inactive_anon:0kB active_file:70400kB inactive_file:159996kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112660kB dirty:640kB writeback:0kB shmem:60648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10588kB pagetables:2200kB sec_pagetables:0kB all_unreclaimable? no [ 323.853842][ T7754] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 323.884809][ T7754] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.912116][ T7754] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 323.918097][ T7754] Node 0 DMA32 free:1369272kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:73824kB inactive_anon:0kB active_file:70400kB inactive_file:159172kB unevictable:1536kB writepending:440kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:17152kB local_pcp:4852kB free_cma:0kB [ 323.950512][ T7754] lowmem_reserve[]: 0 0 0 0 0 [ 323.955317][ T7754] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.982408][ T7754] lowmem_reserve[]: 0 0 0 0 0 [ 323.987247][ T7754] Node 1 Normal free:3889164kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22780kB local_pcp:14692kB free_cma:0kB [ 324.016984][ T7754] lowmem_reserve[]: 0 0 0 0 0 [ 324.021766][ T7754] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 324.034832][ T7754] Node 0 DMA32: 117*4kB (U) 83*8kB (UME) 502*16kB (UME) 290*32kB (UME) 522*64kB (UME) 63*128kB (UME) 49*256kB (UM) 24*512kB (UM) 22*1024kB (UME) 16*2048kB (UM) 306*4096kB (UM) = 1393420kB [ 324.054976][ T7754] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 324.066932][ T7754] Node 1 Normal: 181*4kB (UME) 73*8kB (UME) 45*16kB (UME) 37*32kB (UME) 18*64kB (UME) 6*128kB (UE) 0*256kB 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3889164kB [ 324.084479][ T7754] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 324.094105][ T7754] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 324.103539][ T7754] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 324.113864][ T7754] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 324.123224][ T7754] 69370 total pagecache pages [ 324.128004][ T7754] 0 pages in swap cache [ 324.132263][ T7754] Free swap = 124996kB [ 324.136430][ T7754] Total swap = 124996kB [ 324.140784][ T7754] 2097051 pages RAM [ 324.144647][ T7754] 0 pages HighMem/MovableOnly [ 324.149346][ T7754] 416924 pages reserved [ 324.154804][ T7754] 0 pages cma reserved [ 324.692048][ T7760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.548'. [ 324.711260][ T5765] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 324.753994][ T7762] loop3: detected capacity change from 0 to 512 [ 324.772559][ T7762] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 324.948921][ T5765] usb 2-1: unable to get BOS descriptor or descriptor too short [ 324.990294][ T5765] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 325.020484][ T5765] usb 2-1: can't read configurations, error -71 [ 325.055540][ T7762] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 325.105459][ T7762] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 325.114132][ T7762] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 325.223075][ T1307] dummy0: left promiscuous mode [ 325.979062][ T7777] rpc_pipefs: Unknown parameter 'discard' [ 326.284591][ T7783] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 326.374651][ T7786] syzkaller0: entered promiscuous mode [ 327.204655][ T7786] syzkaller0: entered allmulticast mode [ 327.952838][ T7798] loop0: detected capacity change from 0 to 1024 [ 327.992070][ T7798] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 328.007632][ T7798] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 328.029686][ T7802] loop3: detected capacity change from 0 to 512 [ 328.038582][ T7798] JBD2: no valid journal superblock found [ 328.081968][ T7802] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 328.119084][ T7798] EXT4-fs (loop0): Could not load journal inode [ 328.175560][ T7802] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 328.204520][ T7802] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 328.247609][ T7802] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 329.132716][ T7798] loop0: detected capacity change from 0 to 8192 [ 330.684705][ T7821] 9pnet_fd: Insufficient options for proto=fd [ 330.973312][ T7825] Cannot find add_set index 128 as target [ 331.853876][ T7832] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 332.463336][ T7842] syzkaller0: entered promiscuous mode [ 332.468979][ T7842] syzkaller0: entered allmulticast mode [ 336.020246][ T7869] tipc: Enabled bearer , priority 0 [ 336.055220][ T7869] syzkaller0: entered promiscuous mode [ 336.060829][ T7869] syzkaller0: entered allmulticast mode [ 336.158346][ T7869] tipc: Resetting bearer [ 336.178421][ T7868] tipc: Resetting bearer [ 336.201429][ T7868] tipc: Disabling bearer [ 336.463989][ T7877] syzkaller0: entered promiscuous mode [ 336.478516][ T7877] syzkaller0: entered allmulticast mode [ 336.556254][ T7881] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 338.830382][ T7894] ALSA: mixer_oss: invalid OSS volume 'LI' [ 339.775909][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.593'. [ 340.501759][ T5773] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 340.501815][ T5773] Bluetooth: hci1: Malformed LE Event: 0x02 [ 340.934328][ T28] audit: type=1326 audit(1773343152.417:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7917 comm="syz.0.599" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e9219c799 code=0x0 [ 341.004778][ T7921] loop3: detected capacity change from 0 to 2048 [ 341.009379][ T7919] syzkaller0: entered promiscuous mode [ 341.018459][ T7919] syzkaller0: entered allmulticast mode [ 341.070030][ T7921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.251829][ T7925] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 341.340591][ T7932] loop2: detected capacity change from 0 to 128 [ 341.386519][ T7932] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 341.402919][ T49] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 341.451434][ T49] EXT4-fs (loop3): This should not happen!! Data will be lost [ 341.451434][ T49] [ 341.482912][ T49] EXT4-fs (loop3): Total free blocks count 0 [ 341.502998][ T7932] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 341.521396][ T49] EXT4-fs (loop3): Free/Dirty block details [ 341.530383][ T49] EXT4-fs (loop3): free_blocks=2415919504 [ 341.531892][ T7932] ext2 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.547036][ T49] EXT4-fs (loop3): dirty_blocks=16 [ 341.547108][ T49] EXT4-fs (loop3): Block reservation details [ 341.558360][ T49] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 341.596525][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.272729][ T5761] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 344.564244][ T7961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.610'. [ 344.871655][ T7964] tipc: Started in network mode [ 344.876772][ T7964] tipc: Node identity 1ec65f1f80e2, cluster identity 4711 [ 344.896617][ T7964] tipc: Enabled bearer , priority 0 [ 344.922540][ T7964] syzkaller0: entered promiscuous mode [ 344.931416][ T7964] syzkaller0: entered allmulticast mode [ 345.143442][ T7972] tipc: Resetting bearer [ 345.164277][ T7969] tipc: Enabling of bearer rejected, failed to enable media [ 345.796099][ T7963] tipc: Resetting bearer [ 345.863773][ T7963] tipc: Disabling bearer [ 345.916039][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.614'. [ 346.888770][ T7989] loop0: detected capacity change from 0 to 512 [ 346.903522][ T7989] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 347.159696][ T7997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.619'. [ 347.354507][ T8003] netlink: 20 bytes leftover after parsing attributes in process `syz.1.621'. [ 347.370497][ T7989] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 347.427972][ T7989] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 347.683421][ T7989] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 347.767639][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'. [ 349.024305][ T8019] tipc: Enabled bearer , priority 0 [ 349.071435][ T8016] syzkaller0: entered promiscuous mode [ 349.076963][ T8016] syzkaller0: entered allmulticast mode [ 349.101111][ T8021] tipc: Enabled bearer , priority 0 [ 349.144389][ T8016] tipc: Resetting bearer [ 349.151444][ T8021] syzkaller0: entered promiscuous mode [ 349.156962][ T8021] syzkaller0: entered allmulticast mode [ 349.485123][ T8026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.629'. [ 349.527154][ T8015] tipc: Resetting bearer [ 349.680464][ T8015] tipc: Disabling bearer [ 349.789064][ T8021] tipc: Resetting bearer [ 350.290178][ T8020] tipc: Resetting bearer [ 350.361953][ T8020] tipc: Disabling bearer [ 350.376119][ T5802] tipc: Node number set to 2653183775 [ 350.415520][ T8036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.631'. [ 350.879301][ T8044] loop0: detected capacity change from 0 to 512 [ 350.888718][ T8044] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 351.121844][ T28] audit: type=1800 audit(1773343162.597:3): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.634" name="file1" dev="loop0" ino=1048596 res=0 errno=0 [ 351.134891][ T8044] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 351.301762][ T8044] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 351.312393][ T8044] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 351.404458][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.635'. [ 352.284178][ T8052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.638'. [ 352.602586][ T8060] syzkaller0: entered promiscuous mode [ 352.618574][ T8060] syzkaller0: entered allmulticast mode [ 352.682089][ T8062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.641'. [ 353.923294][ T8072] ALSA: mixer_oss: invalid OSS volume 'LI' [ 353.932153][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.643'. [ 354.231893][ T8074] netlink: 68 bytes leftover after parsing attributes in process `syz.2.643'. [ 355.365799][ T8085] syzkaller0: entered promiscuous mode [ 355.534089][ T8085] syzkaller0: entered allmulticast mode [ 356.242419][ T8094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.651'. [ 362.108908][ T8139] ALSA: mixer_oss: invalid OSS volume 'LI' [ 362.115571][ T8139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.661'. [ 362.202865][ T8139] netlink: 68 bytes leftover after parsing attributes in process `syz.3.661'. [ 363.653602][ T8148] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 363.720680][ T8157] Driver unsupported XDP return value 0 on prog (id 54) dev N/A, expect packet loss! [ 363.965963][ T8161] syzkaller0: entered promiscuous mode [ 363.976027][ T8161] syzkaller0: entered allmulticast mode [ 365.315187][ T8179] syzkaller0: entered promiscuous mode [ 365.328177][ T8179] syzkaller0: entered allmulticast mode [ 366.258205][ T8184] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 367.503423][ T8203] syzkaller0: entered promiscuous mode [ 367.508941][ T8203] syzkaller0: entered allmulticast mode [ 368.152094][ T8214] syzkaller0: entered promiscuous mode [ 368.167857][ T8214] syzkaller0: entered allmulticast mode [ 370.589672][ T8237] tipc: Started in network mode [ 370.602651][ T8237] tipc: Node identity c6546e65c79b, cluster identity 4711 [ 370.622494][ T8237] tipc: Enabled bearer , priority 0 [ 370.678932][ T8237] syzkaller0: entered promiscuous mode [ 370.691289][ T8237] syzkaller0: entered allmulticast mode [ 370.715085][ T8235] tipc: Resetting bearer [ 370.846838][ T8235] tipc: Disabling bearer [ 371.901750][ T8246] syzkaller0: entered promiscuous mode [ 371.917441][ T8246] syzkaller0: entered allmulticast mode [ 372.313205][ T8250] syzkaller0: entered promiscuous mode [ 372.319065][ T8250] syzkaller0: entered allmulticast mode [ 373.423053][ T8273] tipc: Enabled bearer , priority 0 [ 373.448457][ T8273] syzkaller0: entered promiscuous mode [ 373.704741][ T8273] syzkaller0: entered allmulticast mode [ 374.031549][ T8268] tipc: Resetting bearer [ 374.058355][ T8268] tipc: Disabling bearer [ 374.167503][ T8281] syzkaller0: entered promiscuous mode [ 374.191260][ T8281] syzkaller0: entered allmulticast mode [ 374.707210][ T8295] loop3: detected capacity change from 0 to 512 [ 374.746898][ T8295] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 374.863877][ T28] audit: type=1800 audit(1773343186.347:4): pid=8295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.713" name="file1" dev="loop3" ino=1048597 res=0 errno=0 [ 374.865830][ T8295] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 374.970015][ T8295] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 375.021496][ T8305] tipc: Enabled bearer , priority 0 [ 375.037399][ T8305] syzkaller0: entered promiscuous mode [ 375.041375][ T8295] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 375.049517][ T8305] syzkaller0: entered allmulticast mode [ 375.084592][ T8303] tipc: Enabled bearer , priority 0 [ 375.100759][ T8303] syzkaller0: entered promiscuous mode [ 375.106859][ T8303] syzkaller0: entered allmulticast mode [ 375.120006][ T8304] tipc: Resetting bearer [ 375.227622][ T8304] tipc: Disabling bearer [ 375.278643][ T8309] tipc: Resetting bearer [ 375.295973][ T8308] fuse: Invalid rootmode [ 375.304985][ T8301] tipc: Resetting bearer [ 375.356047][ T8301] tipc: Disabling bearer [ 376.257468][ T8322] syzkaller0: entered promiscuous mode [ 376.267141][ T8322] syzkaller0: entered allmulticast mode [ 376.454653][ T8325] netlink: 20 bytes leftover after parsing attributes in process `syz.3.722'. [ 378.346350][ T8337] tipc: Enabled bearer , priority 0 [ 378.369933][ T8337] syzkaller0: entered promiscuous mode [ 378.386163][ T8337] syzkaller0: entered allmulticast mode [ 378.518766][ T8336] tipc: Resetting bearer [ 378.772412][ T8336] tipc: Disabling bearer [ 378.856166][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.865068][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.438993][ T8348] netlink: 20 bytes leftover after parsing attributes in process `syz.1.731'. [ 379.731763][ T8354] loop1: detected capacity change from 0 to 1024 [ 379.792758][ T8354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.834729][ T8362] loop3: detected capacity change from 0 to 512 [ 379.931525][ T8362] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 380.055852][ T8362] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 380.076880][ T28] audit: type=1800 audit(1773343191.537:5): pid=8362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.726" name="file1" dev="loop3" ino=1048598 res=0 errno=0 [ 380.102506][ T8362] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 380.146857][ T8354] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4045: comm syz.1.734: Allocating blocks 497-513 which overlap fs metadata [ 380.149605][ T8362] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 380.176825][ T8353] EXT4-fs (loop1): pa ffff888078235740: logic 131104, phys. 177, len 21 [ 380.185637][ T8353] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5386: group 0, free 0, pa_free 1 [ 380.490450][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.855347][ T8365] loop2: detected capacity change from 0 to 512 [ 381.908130][ T8365] FAT-fs (loop2): Unrecognized mount option "ü€ž”ª" or missing value [ 383.103457][ T8382] tipc: Enabled bearer , priority 0 [ 383.188934][ T8382] tipc: Resetting bearer [ 383.322276][ T8381] tipc: Disabling bearer [ 383.359522][ T8386] syzkaller0: entered promiscuous mode [ 383.368170][ T8386] syzkaller0: entered allmulticast mode [ 383.892883][ T8399] loop0: detected capacity change from 0 to 512 [ 383.900859][ T8399] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 384.087551][ T28] audit: type=1800 audit(1773343195.567:6): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.743" name="file1" dev="loop0" ino=1048599 res=0 errno=0 [ 384.101959][ T8399] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 384.245909][ T8399] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 384.276452][ T8399] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 384.429869][ T8402] netlink: 20 bytes leftover after parsing attributes in process `syz.3.742'. [ 384.764793][ T8405] ALSA: mixer_oss: invalid OSS volume 'LI' [ 385.230918][ T8410] netlink: 24 bytes leftover after parsing attributes in process `syz.3.746'. [ 385.334629][ T8417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.748'. [ 387.098930][ T8423] tipc: Enabled bearer , priority 0 [ 387.264590][ T8423] tipc: Resetting bearer [ 387.407248][ T8421] tipc: Disabling bearer [ 388.524687][ T8446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.758'. [ 388.918489][ T8448] ALSA: mixer_oss: invalid OSS volume 'LI' [ 389.868546][ T8460] tipc: Enabled bearer , priority 0 [ 389.966038][ T8460] syzkaller0: entered promiscuous mode [ 390.001512][ T8460] syzkaller0: entered allmulticast mode [ 390.076144][ T8460] tipc: Resetting bearer [ 390.096194][ T8458] tipc: Resetting bearer [ 390.159073][ T8458] tipc: Disabling bearer [ 390.794442][ T8473] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 391.179498][ T8477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.764'. [ 391.223472][ T8480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.765'. [ 391.461992][ T8487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.768'. [ 391.506780][ T8486] tipc: Enabled bearer , priority 0 [ 391.535390][ T8486] syzkaller0: entered promiscuous mode [ 391.556506][ T8486] syzkaller0: entered allmulticast mode [ 391.596481][ T8486] tipc: Resetting bearer [ 391.624615][ T8484] tipc: Resetting bearer [ 391.770680][ T8484] tipc: Disabling bearer [ 393.956304][ T8504] fuse: Unknown parameter 'use00000000000000000000' [ 394.040862][ T8505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.774'. [ 394.688445][ T8517] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 395.812721][ T8536] 9pnet_fd: Insufficient options for proto=fd [ 396.032820][ T8544] tipc: Enabled bearer , priority 0 [ 396.087672][ T8544] syzkaller0: entered promiscuous mode [ 396.790864][ T8544] syzkaller0: entered allmulticast mode [ 396.836368][ T8544] tipc: Resetting bearer [ 396.878922][ T8543] tipc: Resetting bearer [ 396.969612][ T8543] tipc: Disabling bearer [ 397.643143][ T8553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.786'. [ 398.512424][ T8553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.786'. [ 399.852026][ T8570] fuse: Unknown parameter 'use00000000000000000000' [ 400.052501][ T8575] syzkaller0: entered promiscuous mode [ 400.057699][ T8576] 9pnet_fd: Insufficient options for proto=fd [ 400.057997][ T8575] syzkaller0: entered allmulticast mode [ 401.239855][ T8588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.797'. [ 401.254913][ T8588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.797'. [ 402.015847][ T8606] fuse: Unknown parameter 'use00000000000000000000' [ 402.283176][ T8610] syzkaller0: entered promiscuous mode [ 402.295447][ T8610] syzkaller0: entered allmulticast mode [ 403.791914][ T8624] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 404.286801][ T8634] fuse: Unknown parameter 'user_i00000000000000000000' [ 404.549749][ T8638] tipc: Enabled bearer , priority 0 [ 404.577555][ T8638] syzkaller0: entered promiscuous mode [ 404.591183][ T8638] syzkaller0: entered allmulticast mode [ 404.657530][ T8637] tipc: Resetting bearer [ 404.755865][ T8637] tipc: Disabling bearer [ 404.780818][ T8643] syzkaller0: entered promiscuous mode [ 404.788081][ T8643] syzkaller0: entered allmulticast mode [ 405.034445][ T8650] loop0: detected capacity change from 0 to 128 [ 405.072086][ T8650] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 405.141662][ T8650] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 407.193372][ T8670] 9pnet_fd: Insufficient options for proto=fd [ 407.224919][ T8672] syzkaller0: entered promiscuous mode [ 407.265477][ T8672] syzkaller0: entered allmulticast mode [ 407.884499][ T8682] syzkaller0: entered promiscuous mode [ 407.916707][ T8682] syzkaller0: entered allmulticast mode [ 408.001665][ T8689] fuse: Unknown parameter 'user_i00000000000000000000' [ 408.967032][ T8704] syzkaller0: entered promiscuous mode [ 409.006863][ T8704] syzkaller0: entered allmulticast mode [ 409.723128][ T8721] fuse: Unknown parameter 'user_i00000000000000000000' [ 409.918914][ T8723] loop2: detected capacity change from 0 to 512 [ 409.971056][ T8723] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 410.096987][ T8729] syzkaller0: entered promiscuous mode [ 410.144758][ T8729] syzkaller0: entered allmulticast mode [ 410.173732][ T8723] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 410.251930][ T8723] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 410.260409][ T8723] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 413.024748][ T8754] tipc: Enabled bearer , priority 0 [ 413.069001][ T8754] syzkaller0: entered promiscuous mode [ 413.095815][ T8754] syzkaller0: entered allmulticast mode [ 413.162474][ T8762] fuse: Unknown parameter 'user_id00000000000000000000' [ 413.345663][ T8753] tipc: Resetting bearer [ 413.478289][ T8753] tipc: Disabling bearer [ 413.538168][ T8770] loop2: detected capacity change from 0 to 512 [ 413.572222][ T8770] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 413.712761][ T8770] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 413.730262][ T8770] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 413.762840][ T8770] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 413.851235][ T8771] tipc: Enabled bearer , priority 0 [ 413.992229][ T8766] tipc: Resetting bearer [ 414.032952][ T8772] syzkaller0: entered promiscuous mode [ 414.044483][ T8772] syzkaller0: entered allmulticast mode [ 414.117033][ T8763] tipc: Resetting bearer [ 414.186278][ T8763] tipc: Disabling bearer [ 415.028594][ T8784] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 416.101402][ T8794] syzkaller0: entered promiscuous mode [ 416.138793][ T8794] syzkaller0: entered allmulticast mode [ 416.188418][ T8797] fuse: Unknown parameter 'user_id00000000000000000000' [ 416.273467][ T8799] syzkaller0: entered promiscuous mode [ 416.302528][ T8799] syzkaller0: entered allmulticast mode [ 416.361715][ T8804] loop0: detected capacity change from 0 to 512 [ 416.378766][ T8804] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 416.463976][ T8804] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 416.514261][ T8804] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 416.573242][ T8804] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 416.606618][ T8807] tipc: Enabled bearer , priority 0 [ 416.642122][ T8807] syzkaller0: entered promiscuous mode [ 416.670293][ T8807] syzkaller0: entered allmulticast mode [ 416.745595][ T8805] tipc: Resetting bearer [ 416.826810][ T8805] tipc: Disabling bearer [ 416.863343][ T8814] tipc: Enabled bearer , priority 0 [ 416.881074][ T8814] syzkaller0: entered promiscuous mode [ 416.887299][ T8814] syzkaller0: entered allmulticast mode [ 416.954061][ T8812] tipc: Resetting bearer [ 417.482703][ T8812] tipc: Disabling bearer [ 417.522966][ T8825] fuse: Unknown parameter 'user_id00000000000000000000' [ 419.053946][ T8831] rpc_pipefs: Unknown parameter 'discard' [ 419.225645][ T8834] loop3: detected capacity change from 0 to 512 [ 419.258264][ T8834] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 419.392984][ T8834] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 419.438565][ T8834] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 419.464293][ T8834] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 419.582204][ T8838] syzkaller0: entered promiscuous mode [ 419.594487][ T8838] syzkaller0: entered allmulticast mode [ 419.909364][ T8843] tipc: Enabled bearer , priority 0 [ 419.947020][ T8843] tipc: Resetting bearer [ 420.048195][ T8842] tipc: Disabling bearer [ 420.143142][ T8848] fuse: Bad value for 'fd' [ 422.175468][ T8865] loop3: detected capacity change from 0 to 512 [ 422.196800][ T8865] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 422.305019][ T8865] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 422.337883][ T8865] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 422.367137][ T8865] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 422.861321][ T8872] syzkaller0: entered promiscuous mode [ 422.881302][ T8872] syzkaller0: entered allmulticast mode [ 423.301014][ T8880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.890'. [ 423.320526][ T8879] tipc: Enabled bearer , priority 0 [ 423.339091][ T8879] tipc: Resetting bearer [ 423.364350][ T8878] tipc: Disabling bearer [ 423.389515][ T8882] fuse: Bad value for 'fd' [ 425.657253][ T8903] syzkaller0: entered promiscuous mode [ 425.663165][ T8903] syzkaller0: entered allmulticast mode [ 425.966100][ T8907] ALSA: mixer_oss: invalid OSS volume 'LI' [ 425.975013][ T8907] netlink: 68 bytes leftover after parsing attributes in process `syz.1.901'. [ 426.563140][ T8911] fuse: Bad value for 'fd' [ 427.448531][ T8923] loop0: detected capacity change from 0 to 512 [ 427.470760][ T8923] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 429.705745][ T8923] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 429.729131][ T8923] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 429.738422][ T8923] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 430.420056][ T8940] 9pnet_fd: Insufficient options for proto=fd [ 433.052596][ T8961] syzkaller0: entered promiscuous mode [ 433.134785][ T8961] syzkaller0: entered allmulticast mode [ 433.167502][ T8970] loop1: detected capacity change from 0 to 512 [ 433.197470][ T8970] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 433.317112][ T8970] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 433.327448][ T8970] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 433.351527][ T8970] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 434.049172][ T8979] 9pnet_fd: Insufficient options for proto=fd [ 434.117898][ T8986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.909'. [ 436.237386][ T9005] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 436.886832][ T9009] loop2: detected capacity change from 0 to 512 [ 436.928296][ T9009] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 437.038752][ T9011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.930'. [ 437.141381][ T9009] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 437.181645][ T9009] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 437.212291][ T9009] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 437.367329][ T9016] 9pnet_fd: Insufficient options for proto=fd [ 437.383992][ T9018] syzkaller0: entered promiscuous mode [ 437.403496][ T9018] syzkaller0: entered allmulticast mode [ 438.501888][ T9030] loop1: detected capacity change from 0 to 64 [ 439.379416][ T9038] syzkaller0: entered promiscuous mode [ 439.386028][ T9038] syzkaller0: entered allmulticast mode [ 439.423799][ T9040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.938'. [ 439.619102][ T9042] syzkaller0: entered promiscuous mode [ 439.645614][ T9042] syzkaller0: entered allmulticast mode [ 439.852904][ T9034] loop3: detected capacity change from 0 to 32768 [ 439.864640][ T9045] netlink: 20 bytes leftover after parsing attributes in process `syz.1.940'. [ 439.903817][ T9034] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.936 (9034) [ 439.943665][ T9034] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 439.954573][ T9034] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 439.964740][ T9034] BTRFS info (device loop3): turning off barriers [ 439.973172][ T9034] BTRFS info (device loop3): setting nodatasum [ 439.979873][ T9034] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 439.990043][ T9034] BTRFS info (device loop3): use zstd compression, level 3 [ 439.997452][ T9034] BTRFS info (device loop3): using free space tree [ 440.259014][ T9066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.941'. [ 440.288001][ T9068] loop2: detected capacity change from 0 to 512 [ 440.301471][ T9068] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 440.315381][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.322736][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.378540][ T9068] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 440.436609][ T9068] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 440.536829][ T9068] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 440.714719][ T9073] syzkaller0: entered promiscuous mode [ 440.731443][ T9073] syzkaller0: entered allmulticast mode [ 440.806207][ T9034] syz.3.936 (9034) used greatest stack depth: 20016 bytes left [ 441.057097][ T5764] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 441.312104][ T9082] netlink: 32 bytes leftover after parsing attributes in process `syz.2.947'. [ 441.373044][ T9082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.947'. [ 441.945715][ T9091] netlink: 20 bytes leftover after parsing attributes in process `syz.3.949'. [ 442.586206][ T9093] mmap: syz.3.950 (9093) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 442.747242][ T9097] loop0: detected capacity change from 0 to 512 [ 442.766588][ T9097] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 444.030833][ T9097] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 444.157714][ T9097] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 444.399216][ T9097] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 445.358657][ T9115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.956'. [ 445.371367][ T9115] netlink: 20 bytes leftover after parsing attributes in process `syz.0.956'. [ 445.652576][ T9118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.958'. [ 446.933317][ T9133] loop0: detected capacity change from 0 to 512 [ 446.962354][ T9133] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 447.254601][ T9128] loop1: detected capacity change from 0 to 32768 [ 447.816853][ T9128] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 447.906812][ T9145] netlink: 32 bytes leftover after parsing attributes in process `syz.2.966'. [ 447.927850][ T9145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.966'. [ 448.195650][ T9155] syzkaller0: entered promiscuous mode [ 448.236757][ T9155] syzkaller0: entered allmulticast mode [ 448.316282][ T9128] XFS (loop1): Ending clean mount [ 448.379361][ T9128] XFS (loop1): Quotacheck needed: Please wait. [ 448.928786][ T9128] XFS (loop1): Quotacheck: Done. [ 449.949926][ T5763] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 450.049987][ T9167] syzkaller0: entered promiscuous mode [ 450.064209][ T9167] syzkaller0: entered allmulticast mode [ 450.183663][ T9169] loop0: detected capacity change from 0 to 512 [ 450.212457][ T9169] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 450.352897][ T9169] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 450.393715][ T9169] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 450.434022][ T9169] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 450.504760][ T9172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.977'. [ 450.527713][ T9172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.977'. [ 450.743006][ T9180] rpc_pipefs: Unknown parameter 'discard' [ 450.896232][ T9186] syzkaller0: entered promiscuous mode [ 450.921178][ T9186] syzkaller0: entered allmulticast mode [ 452.292384][ T9196] loop2: detected capacity change from 0 to 512 [ 452.310951][ T9196] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 452.397388][ T9196] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 452.421605][ T9196] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 452.436343][ T9196] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 453.225662][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.988'. [ 453.249391][ T9207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.988'. [ 453.345371][ T9209] rpc_pipefs: Unknown parameter 'discard' [ 454.463260][ T9218] program syz.2.993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 455.527636][ T9226] loop2: detected capacity change from 0 to 512 [ 455.562561][ T9226] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 455.888256][ T9226] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 455.918135][ T9226] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 455.949012][ T9226] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 456.232803][ T9231] syzkaller0: entered promiscuous mode [ 456.238329][ T9231] syzkaller0: entered allmulticast mode [ 456.717225][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1000'. [ 456.728292][ T9242] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1000'. [ 456.755284][ T9244] rpc_pipefs: Unknown parameter 'discard' [ 457.283313][ T9252] ALSA: mixer_oss: invalid OSS volume 'LI' [ 457.291921][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1004'. [ 457.348829][ T9253] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1004'. [ 460.115486][ T9271] syzkaller0: entered promiscuous mode [ 460.121297][ T9271] syzkaller0: entered allmulticast mode [ 460.144404][ T9260] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 460.214394][ T9273] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1011'. [ 462.421870][ T9299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1019'. [ 462.855293][ T9301] tipc: Enabled bearer , priority 0 [ 462.890780][ T9301] tipc: Resetting bearer [ 462.921966][ T9300] tipc: Disabling bearer [ 462.943709][ T9303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1020'. [ 464.416531][ T9310] 9pnet_fd: Insufficient options for proto=fd [ 465.116040][ T5825] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 465.371263][ T5825] usb 3-1: Using ep0 maxpacket: 8 [ 465.378295][ T5825] usb 3-1: config 0 has no interfaces? [ 465.392588][ T5825] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 465.414936][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.445167][ T5825] usb 3-1: Product: syz [ 465.451176][ T5825] usb 3-1: Manufacturer: syz [ 465.466562][ T5825] usb 3-1: SerialNumber: syz [ 465.504505][ T5825] usb 3-1: config 0 descriptor?? [ 465.733517][ T5802] usb 3-1: USB disconnect, device number 4 [ 465.842729][ T9336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1031'. [ 466.128524][ T9340] ALSA: mixer_oss: invalid OSS volume 'LI' [ 466.137780][ T9340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1030'. [ 466.194904][ T9341] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1030'. [ 466.303323][ T5825] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 466.615445][ T5825] usb 1-1: Using ep0 maxpacket: 32 [ 466.668014][ T5825] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 466.701262][ T5825] usb 1-1: config 0 has no interface number 0 [ 466.707422][ T5825] usb 1-1: config 0 interface 184 has no altsetting 0 [ 466.769815][ T5825] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 467.988394][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.015792][ T5825] usb 1-1: Product: syz [ 468.020022][ T5825] usb 1-1: Manufacturer: syz [ 468.028264][ T5825] usb 1-1: SerialNumber: syz [ 468.044630][ T5825] usb 1-1: config 0 descriptor?? [ 468.055650][ T5825] smsc75xx v1.0.0 [ 468.296518][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1036'. [ 469.291769][ T5825] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 469.314246][ T5825] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 469.326145][ T5825] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 469.338371][ T5825] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 469.348621][ T5825] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 469.361017][ T5825] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 469.375115][ T5825] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 469.390626][ T5825] usb 1-1: USB disconnect, device number 5 [ 469.604787][ T9366] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1040'. [ 469.677375][ T9368] tipc: Enabled bearer , priority 0 [ 469.684964][ T9368] syzkaller0: entered promiscuous mode [ 469.690472][ T9368] syzkaller0: entered allmulticast mode [ 469.705528][ T9368] tipc: Resetting bearer [ 469.714736][ T9367] tipc: Resetting bearer [ 469.735820][ T9367] tipc: Disabling bearer [ 469.839911][ T9370] loop1: detected capacity change from 0 to 512 [ 469.848997][ T9370] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 469.871694][ T9370] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 469.906894][ T9370] EXT4-fs (loop1): 1 truncate cleaned up [ 469.914700][ T9370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.995439][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.970944][ T9380] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 473.056258][ T9392] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 473.441479][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1049'. [ 474.649755][ T9400] loop3: detected capacity change from 0 to 40427 [ 474.662850][ T9405] tipc: Enabled bearer , priority 0 [ 474.693340][ T9400] F2FS-fs (loop3): invalid crc value [ 474.701444][ T9405] syzkaller0: entered promiscuous mode [ 474.706940][ T9405] syzkaller0: entered allmulticast mode [ 474.716210][ T9400] F2FS-fs (loop3): Found nat_bits in checkpoint [ 474.775894][ T9405] tipc: Resetting bearer [ 474.837401][ T9404] tipc: Resetting bearer [ 474.972803][ T9404] tipc: Disabling bearer [ 475.001968][ T9400] F2FS-fs (loop3): Start checkpoint disabled! [ 475.071493][ T9400] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 475.162352][ T9400] ------------[ cut here ]------------ [ 475.168218][ T9400] kernel BUG at fs/f2fs/segment.c:3481! [ 475.196852][ T9400] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 475.202969][ T9400] CPU: 0 PID: 9400 Comm: syz.3.1050 Not tainted syzkaller #0 [ 475.210602][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 475.220657][ T9400] RIP: 0010:f2fs_allocate_data_block+0x3f6f/0x3fb0 [ 475.227201][ T9400] Code: 1a fe 48 8b 54 24 30 e9 88 eb ff ff e8 2a e1 c1 fd 48 c7 c7 d0 e9 6f 8d 4c 89 f6 e8 0b 96 97 00 e9 a4 eb ff ff e8 11 e1 c1 fd <0f> 0b e8 0a e1 c1 fd 0f 0b e8 03 e1 c1 fd 0f 0b e8 fc e0 c1 fd 0f [ 475.246916][ T9400] RSP: 0018:ffffc900042e7410 EFLAGS: 00010287 [ 475.252979][ T9400] RAX: ffffffff83c53b4f RBX: 0000000000000200 RCX: 0000000000080000 [ 475.261299][ T9400] RDX: ffffc9000d11a000 RSI: 00000000000336ff RDI: 0000000000033700 [ 475.270068][ T9400] RBP: 0000000000000200 R08: ffff88805cd86c5f R09: 1ffff1100b9b0d8b [ 475.278227][ T9400] R10: dffffc0000000000 R11: ffffed100b9b0d8c R12: 1ffff9200085cef8 [ 475.286327][ T9400] R13: 0000000000000000 R14: 0000000000003600 R15: dffffc0000000000 [ 475.294297][ T9400] FS: 00007f4479dc66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 475.303228][ T9400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.309811][ T9400] CR2: 00007f4478fe9e80 CR3: 000000005d1b4000 CR4: 00000000003506f0 [ 475.317870][ T9400] Call Trace: [ 475.321142][ T9400] [ 475.324077][ T9400] ? f2fs_mark_inode_dirty_sync+0x120/0x1f0 [ 475.329968][ T9400] f2fs_map_blocks+0x1338/0x3e60 [ 475.334923][ T9400] ? f2fs_get_block_locked+0xe0/0xe0 [ 475.340201][ T9400] ? __up_read+0x2b6/0x6b0 [ 475.344639][ T9400] ? up_read+0x20/0x20 [ 475.348698][ T9400] ? f2fs_allocate_pinning_section+0x1af/0x590 [ 475.354847][ T9400] f2fs_expand_inode_data+0x67a/0xa10 [ 475.360233][ T9400] ? f2fs_insert_range+0x470/0x470 [ 475.365347][ T9400] ? __mnt_drop_write_file+0xc3/0x100 [ 475.370713][ T9400] ? file_modified_flags+0x267/0x2a0 [ 475.376002][ T9400] f2fs_fallocate+0x416/0x890 [ 475.380670][ T9400] vfs_fallocate+0x58e/0x700 [ 475.385251][ T9400] do_vfs_ioctl+0x19f6/0x1cc0 [ 475.389935][ T9400] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 475.395635][ T9400] ? tomoyo_path_number_perm+0x217/0x620 [ 475.401271][ T9400] ? __lock_acquire+0x7d40/0x7d40 [ 475.406312][ T9400] ? slab_free_freelist_hook+0x130/0x1a0 [ 475.411945][ T9400] ? tomoyo_path_number_perm+0x5b4/0x620 [ 475.417571][ T9400] ? tomoyo_path_number_perm+0x217/0x620 [ 475.423387][ T9400] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 475.428903][ T9400] ? __fget_files+0x28/0x4b0 [ 475.433496][ T9400] ? __fget_files+0x28/0x4b0 [ 475.438095][ T9400] ? bpf_lsm_file_ioctl+0x9/0x10 [ 475.443024][ T9400] ? security_file_ioctl+0x80/0xa0 [ 475.448217][ T9400] __se_sys_ioctl+0x83/0x170 [ 475.452802][ T9400] do_syscall_64+0x55/0xa0 [ 475.457210][ T9400] ? clear_bhb_loop+0x40/0x90 [ 475.461874][ T9400] ? clear_bhb_loop+0x40/0x90 [ 475.466626][ T9400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.472505][ T9400] RIP: 0033:0x7f4478f9c799 [ 475.476908][ T9400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.496499][ T9400] RSP: 002b:00007f4479dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.504907][ T9400] RAX: ffffffffffffffda RBX: 00007f4479215fa0 RCX: 00007f4478f9c799 [ 475.513067][ T9400] RDX: 00002000000000c0 RSI: 0000000040305828 RDI: 0000000000000004 [ 475.521230][ T9400] RBP: 00007f4479032c99 R08: 0000000000000000 R09: 0000000000000000 [ 475.529213][ T9400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.537188][ T9400] R13: 00007f4479216038 R14: 00007f4479215fa0 R15: 00007fff53431268 [ 475.545164][ T9400] [ 475.548185][ T9400] Modules linked in: [ 475.571318][ T9400] ---[ end trace 0000000000000000 ]--- [ 475.577502][ T9400] RIP: 0010:f2fs_allocate_data_block+0x3f6f/0x3fb0 [ 475.588585][ T9400] Code: 1a fe 48 8b 54 24 30 e9 88 eb ff ff e8 2a e1 c1 fd 48 c7 c7 d0 e9 6f 8d 4c 89 f6 e8 0b 96 97 00 e9 a4 eb ff ff e8 11 e1 c1 fd <0f> 0b e8 0a e1 c1 fd 0f 0b e8 03 e1 c1 fd 0f 0b e8 fc e0 c1 fd 0f [ 475.891245][ T9400] RSP: 0018:ffffc900042e7410 EFLAGS: 00010287 [ 476.673242][ T9400] RAX: ffffffff83c53b4f RBX: 0000000000000200 RCX: 0000000000080000 [ 476.688019][ T9400] RDX: ffffc9000d11a000 RSI: 00000000000336ff RDI: 0000000000033700 [ 476.703213][ T9400] RBP: 0000000000000200 R08: ffff88805cd86c5f R09: 1ffff1100b9b0d8b [ 476.712234][ T9400] R10: dffffc0000000000 R11: ffffed100b9b0d8c R12: 1ffff9200085cef8 [ 476.720315][ T9400] R13: 0000000000000000 R14: 0000000000003600 R15: dffffc0000000000 [ 476.730004][ T9400] FS: 00007f4479dc66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 476.739173][ T9400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.746046][ T9400] CR2: 00007f0d773e92f8 CR3: 000000005d1b4000 CR4: 00000000003506e0 [ 476.754165][ T9400] Kernel panic - not syncing: Fatal exception [ 476.760699][ T9400] Kernel Offset: disabled [ 476.765357][ T9400] Rebooting in 86400 seconds..