last executing test programs: 1m19.961696745s ago: executing program 0 (id=599): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = userfaultfd(0x80801) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) listen(r3, 0x6) r5 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r5, &(0x7f0000000400)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x3}}, 0x10) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0xffff0018) 1m18.085410271s ago: executing program 0 (id=605): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) wait4(0x0, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x2000077c, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r5, &(0x7f0000001f00)="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", 0x1cc) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r7, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m16.646205873s ago: executing program 0 (id=611): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) wait4(0x0, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x2000077c, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r5, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48baed9dfb44bd33dba6bd292aad455d53d0c6f09126918f54e663d71c3506756e3eca40c1c7d2b3173d11d86322843bc6ee4beeff184bfeb2f15cfd1ae189bb68995feab724d720656d528d8b67823c02941343f1f478e74a152bdc0a55b2ce0c3dfb338c25e4b63a3a3063c240ea4a0712507fad227c65b7da6ed66f943a61c724a0db0d774b994b4fc8ddc44a10c32f59e555e5d1b07195df685079189c3140956b641b5617e9bab446bc57bd614e99827f8e1797ec6d59fc7cf1057bd947f233de2e12d217aa517da60e38a648e3a3ef7359bacef04e583e430786d6606bc06d8d48297e76deaecc592b98ff4c4024f7cbb9ab9b3d0c5aa08e940fdc7462fd7e92632f3a36576d83088a30f960", 0x1ad) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r7, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m10.416088589s ago: executing program 0 (id=627): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x58}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1m7.876038516s ago: executing program 0 (id=633): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) close(r4) 1m5.300953395s ago: executing program 0 (id=644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="7400000009060102000000000000007fffffff000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x4048001}, 0xc894) 49.623770392s ago: executing program 32 (id=644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="7400000009060102000000000000007fffffff000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x4048001}, 0xc894) 12.412106259s ago: executing program 2 (id=732): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0x2}) 9.848796814s ago: executing program 2 (id=734): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x70bd2d, 0x25dfdbee, {0x2, 0x0, 0x10, 0x8, 0x7, 0x0, 0x0, 0x5, 0x1000e}}, 0x1c}, 0x1, 0x0, 0x0, 0x80640c1}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 9.446018815s ago: executing program 2 (id=736): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1fffffff}}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0xfee, &(0x7f0000001e00)=""/4078}, 0x94) 9.161479208s ago: executing program 2 (id=738): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c51400030069703667726530000000206b3bb2000014000000110001000000c1b16ea670a1d6e9f094"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) close(r1) 8.88905511s ago: executing program 1 (id=739): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0x2}) 8.717917531s ago: executing program 3 (id=741): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x26, 0x0, @void}, 0x10) close(0x3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x6) 6.994845856s ago: executing program 1 (id=742): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0xc0105702, &(0x7f0000000000)=0x26) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201ab00c4b20710200e01015a7a0102030109021b0001"], 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000500)='n', 0x1) r2 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x20, r3, 0x0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000480)="6d433a3a92646108add89103433b184176fa31e78f66ae5797c32bf23577e3bad416918cb279bfc5f5b2eb666cde21960b6750eee094439dd2975095cf77794211df40650470a37ce0988e295f9f1c7507c11ad1f1f8039d09699f4cae6ed0cb85204ce02e04069e820ee961591155266a585756e9fd8fb08629b4e4c20f52ec7973fbe69325a10d7be48eb1a92c291bedf647da1a6b32d2bf18ff76e78bb0bf9b7f2c265883ed1b3fab047516", 0xad}, {0x0}], 0x3, &(0x7f0000000a40)=ANY=[], 0x2b8}, 0x2, 0x48000, 0x1, {0x2}}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) close(r2) io_setup(0xc, &(0x7f0000000040)) 6.878113479s ago: executing program 2 (id=743): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.871261675s ago: executing program 3 (id=744): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 6.608412669s ago: executing program 2 (id=745): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e000004000280", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket(0x11, 0x2, 0x10001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) 5.124484317s ago: executing program 4 (id=748): syz_emit_ethernet(0x46, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x2d, 0x34, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xb, 0x9, [@multicast2, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 5.006049805s ago: executing program 4 (id=749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0x2}) 4.34804616s ago: executing program 3 (id=750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0) 4.258521294s ago: executing program 1 (id=751): close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r1, 0x24, 0x0, 0x92f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x2d, 0x34, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xb, 0x9, [@multicast2, @loopback]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 4.065089183s ago: executing program 1 (id=752): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c51400030069703667726530000000206b3bb2000014000000110001000000c1b16ea670a1d6e9f094"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) close(r1) 3.979092029s ago: executing program 3 (id=753): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x26, 0x0, @void}, 0x10) close(0x3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x6) 3.787282045s ago: executing program 1 (id=754): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.773223915s ago: executing program 3 (id=755): r0 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x50440, 0x29) socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x8) fchdir(r2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) 3.606679714s ago: executing program 1 (id=756): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 2.403240268s ago: executing program 4 (id=757): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a497", 0x1a}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 2.254584893s ago: executing program 4 (id=758): syz_emit_ethernet(0x46, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x2d, 0x34, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xb, 0x9, [@multicast2, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 2.2083693s ago: executing program 4 (id=759): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 768.074436ms ago: executing program 4 (id=760): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0xc0105702, &(0x7f0000000000)=0x26) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201ab00c4b20710200e01015a7a0102030109021b0001"], 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000500)='n', 0x1) r2 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x20, r3, 0x0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000480)="6d433a3a92646108add89103433b184176fa31e78f66ae5797c32bf23577e3bad416918cb279bfc5f5b2eb666cde21960b6750eee094439dd2975095cf77794211df40650470a37ce0988e295f9f1c7507c11ad1f1f8039d09699f4cae6ed0cb85204ce02e04069e820ee961591155266a585756e9fd8fb08629b4e4c20f52ec7973fbe69325a10d7be48eb1a92c291bedf647da1a6b32d2bf18ff76e78bb0bf9b7f2c265883ed1b3fab047516", 0xad}, {0x0}], 0x3, &(0x7f0000000a40)=ANY=[], 0x2b8}, 0x2, 0x48000, 0x1, {0x2}}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) close(r2) io_setup(0xc, &(0x7f0000000040)) 0s ago: executing program 3 (id=761): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x10e, 0x0, &(0x7f0000001780)="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", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000003c0)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000a00)={0x1d, r1}, 0x10, 0x0, 0x1, 0x0, 0x0, 0x4081991}, 0x4004080) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. [ 99.633972][ T9] cfg80211: failed to load regulatory.db [ 99.863118][ T5579] cgroup: Unknown subsys name 'net' [ 100.093601][ T5579] cgroup: Unknown subsys name 'cpuset' [ 100.158632][ T5579] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 102.483435][ T5579] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.245370][ T5598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.266186][ T5598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.269092][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.278455][ T5598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.283580][ T5598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.370138][ T5598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.420596][ T4906] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.437746][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.440679][ T4906] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.447766][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.451805][ T4906] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.456360][ T4906] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.464493][ T4906] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.466123][ T4906] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.509800][ T4906] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.604149][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.653550][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.659563][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.677319][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.686905][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.785901][ T5598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 107.805380][ T5598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 107.807401][ T5598] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 107.829904][ T5598] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 107.846178][ T5598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.360182][ T5598] Bluetooth: hci0: command tx timeout [ 109.597649][ T5598] Bluetooth: hci2: command tx timeout [ 109.767645][ T5598] Bluetooth: hci3: command tx timeout [ 109.767674][ T60] Bluetooth: hci1: command tx timeout [ 109.918139][ T60] Bluetooth: hci4: command tx timeout [ 110.701021][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.702021][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.702185][ T5601] bridge_slave_0: entered allmulticast mode [ 110.704598][ T5601] bridge_slave_0: entered promiscuous mode [ 110.738030][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.738202][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.738401][ T5597] bridge_slave_0: entered allmulticast mode [ 110.740549][ T5597] bridge_slave_0: entered promiscuous mode [ 110.742229][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.742352][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.743291][ T5605] bridge_slave_0: entered allmulticast mode [ 110.745243][ T5605] bridge_slave_0: entered promiscuous mode [ 110.746914][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.747057][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.747230][ T5600] bridge_slave_0: entered allmulticast mode [ 110.780365][ T5600] bridge_slave_0: entered promiscuous mode [ 110.844400][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.844511][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.844659][ T5601] bridge_slave_1: entered allmulticast mode [ 110.846556][ T5601] bridge_slave_1: entered promiscuous mode [ 110.855047][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.855372][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.862083][ T5597] bridge_slave_1: entered allmulticast mode [ 110.873747][ T5597] bridge_slave_1: entered promiscuous mode [ 110.881703][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.882024][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.890591][ T5605] bridge_slave_1: entered allmulticast mode [ 110.899624][ T5605] bridge_slave_1: entered promiscuous mode [ 110.905601][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.905805][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.906665][ T5600] bridge_slave_1: entered allmulticast mode [ 110.922310][ T5600] bridge_slave_1: entered promiscuous mode [ 110.929786][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.930178][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.962563][ T5602] bridge_slave_0: entered allmulticast mode [ 110.972433][ T5602] bridge_slave_0: entered promiscuous mode [ 111.056272][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.056407][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.056544][ T5602] bridge_slave_1: entered allmulticast mode [ 111.064432][ T5602] bridge_slave_1: entered promiscuous mode [ 111.171390][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.176607][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.194016][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.212701][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.243636][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.246745][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.260021][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.276553][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.290148][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.372391][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.437772][ T60] Bluetooth: hci0: command tx timeout [ 111.487766][ T5601] team0: Port device team_slave_0 added [ 111.490430][ T5597] team0: Port device team_slave_0 added [ 111.493206][ T5605] team0: Port device team_slave_0 added [ 111.515423][ T5600] team0: Port device team_slave_0 added [ 111.545185][ T5601] team0: Port device team_slave_1 added [ 111.547350][ T5597] team0: Port device team_slave_1 added [ 111.561587][ T5605] team0: Port device team_slave_1 added [ 111.563680][ T5600] team0: Port device team_slave_1 added [ 111.565801][ T5602] team0: Port device team_slave_0 added [ 111.646260][ T5602] team0: Port device team_slave_1 added [ 111.677790][ T60] Bluetooth: hci2: command tx timeout [ 111.743052][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.743068][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.743087][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.745402][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.745419][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.745454][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.838615][ T60] Bluetooth: hci1: command tx timeout [ 111.843368][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.843386][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.843414][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.845420][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.845436][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.845464][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.849554][ T60] Bluetooth: hci3: command tx timeout [ 111.947365][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.947385][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.956518][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.974009][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.974056][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.974149][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.994562][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.994614][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.994682][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.001833][ T60] Bluetooth: hci4: command tx timeout [ 112.024981][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.025033][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.025105][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.621383][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.621400][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.621419][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.704573][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.704589][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.704610][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.935603][ T5601] hsr_slave_0: entered promiscuous mode [ 112.937015][ T5601] hsr_slave_1: entered promiscuous mode [ 112.960045][ T5597] hsr_slave_0: entered promiscuous mode [ 112.961259][ T5597] hsr_slave_1: entered promiscuous mode [ 112.962228][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 112.962325][ T5597] Cannot create hsr debugfs directory [ 112.982822][ T5605] hsr_slave_0: entered promiscuous mode [ 112.996364][ T5605] hsr_slave_1: entered promiscuous mode [ 112.997274][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 112.997294][ T5605] Cannot create hsr debugfs directory [ 113.024053][ T5600] hsr_slave_0: entered promiscuous mode [ 113.025143][ T5600] hsr_slave_1: entered promiscuous mode [ 113.025850][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 113.025871][ T5600] Cannot create hsr debugfs directory [ 113.176050][ T5602] hsr_slave_0: entered promiscuous mode [ 113.177180][ T5602] hsr_slave_1: entered promiscuous mode [ 113.180949][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 113.181041][ T5602] Cannot create hsr debugfs directory [ 113.517684][ T60] Bluetooth: hci0: command tx timeout [ 113.757919][ T60] Bluetooth: hci2: command tx timeout [ 113.917752][ T60] Bluetooth: hci3: command tx timeout [ 113.917792][ T60] Bluetooth: hci1: command tx timeout [ 114.077743][ T5598] Bluetooth: hci4: command tx timeout [ 114.165871][ T5601] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 114.219792][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.250796][ T5601] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.274495][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.276874][ T5601] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.324668][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.355167][ T5601] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 114.389454][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.549488][ T5597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.593521][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.611333][ T5597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.643134][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.647302][ T5597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.683106][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.716746][ T5597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.751991][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.910623][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 114.957066][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.977264][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 115.022582][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.027147][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 115.052934][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.088079][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.125762][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.322890][ T5600] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.365513][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.385978][ T5600] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.433490][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.453739][ T5600] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.481647][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.513337][ T5600] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.543262][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.597651][ T5598] Bluetooth: hci0: command tx timeout [ 115.697175][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.787960][ T5602] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 115.833401][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.837693][ T5598] Bluetooth: hci2: command tx timeout [ 115.860540][ T5602] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 115.901720][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.924390][ T5602] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.970309][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.998599][ T5598] Bluetooth: hci1: command tx timeout [ 115.998654][ T5598] Bluetooth: hci3: command tx timeout [ 116.006099][ T5602] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 116.032631][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.076742][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.136955][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.157140][ T1300] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.158913][ T60] Bluetooth: hci4: command tx timeout [ 116.174689][ T1300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.246052][ T1300] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.246227][ T1300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.349374][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.401651][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.402374][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.444963][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.505034][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.505457][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.624795][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.664013][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.729249][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.729397][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.848219][ T1300] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.848359][ T1300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.951838][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.022451][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.044889][ T1300] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.045033][ T1300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.163253][ T2154] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.163422][ T2154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.412305][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.548914][ T3355] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.549127][ T3355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.641480][ T3355] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.641636][ T3355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.030083][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.655919][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.708014][ T5601] veth0_vlan: entered promiscuous mode [ 118.844099][ T5601] veth1_vlan: entered promiscuous mode [ 119.208263][ T5601] veth0_macvtap: entered promiscuous mode [ 119.239182][ T5597] veth0_vlan: entered promiscuous mode [ 119.274609][ T5601] veth1_macvtap: entered promiscuous mode [ 119.321436][ T5597] veth1_vlan: entered promiscuous mode [ 119.381632][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.462677][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.501856][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.572604][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.742840][ T5597] veth0_macvtap: entered promiscuous mode [ 119.876779][ T5597] veth1_macvtap: entered promiscuous mode [ 120.004316][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.243233][ T5605] veth0_vlan: entered promiscuous mode [ 120.301161][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.379384][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.387216][ T5605] veth1_vlan: entered promiscuous mode [ 120.679158][ T5600] veth0_vlan: entered promiscuous mode [ 120.708617][ T5602] veth0_vlan: entered promiscuous mode [ 120.713589][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.713628][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.870522][ T5600] veth1_vlan: entered promiscuous mode [ 121.030570][ T5602] veth1_vlan: entered promiscuous mode [ 121.051276][ T5605] veth0_macvtap: entered promiscuous mode [ 121.057397][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.057646][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.238342][ T5605] veth1_macvtap: entered promiscuous mode [ 121.267396][ T1449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.267465][ T1449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.467111][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.516572][ T2145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.516597][ T2145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.586755][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.595429][ T5600] veth0_macvtap: entered promiscuous mode [ 121.652644][ T5602] veth0_macvtap: entered promiscuous mode [ 121.676189][ T5600] veth1_macvtap: entered promiscuous mode [ 121.786971][ T5602] veth1_macvtap: entered promiscuous mode [ 121.993285][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.078164][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.109481][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.556141][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.763795][ T5792] tipc: Started in network mode [ 122.763844][ T5792] tipc: Node identity 862de0642c58, cluster identity 4711 [ 122.764605][ T5792] tipc: Enabled bearer , priority 0 [ 122.836121][ T2154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.836148][ T2154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.946826][ T5791] tipc: Resetting bearer [ 123.359548][ T5789] tipc: Disabling bearer [ 123.735882][ T3355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.735908][ T3355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.770676][ T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.770701][ T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.847081][ T5811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9'. [ 124.847125][ T5811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9'. [ 125.071009][ T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.071035][ T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.328493][ T3355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.328517][ T3355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.388310][ T1300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.540640][ T752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.540667][ T752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.631152][ T752] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.631455][ T752] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.744535][ T752] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.745278][ T752] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.835067][ T752] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.837274][ T1449] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.287727][ T734] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.342076][ T2154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.342386][ T2154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.616005][ T2154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.616285][ T2154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.669119][ T2154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.698928][ T2154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.803582][ T2145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.808295][ T1300] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.808551][ T1300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.808775][ T1300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.808981][ T1300] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.900259][ T1300] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.050719][ T5878] syz_tun: entered allmulticast mode [ 134.324986][ T5876] syz_tun: left allmulticast mode [ 134.971662][ T5887] syzkaller0: entered promiscuous mode [ 134.971695][ T5887] syzkaller0: entered allmulticast mode [ 135.076866][ T5887] tipc: Started in network mode [ 135.076907][ T5887] tipc: Node identity 26508977bc3d, cluster identity 4711 [ 135.077212][ T5887] tipc: Enabled bearer , priority 0 [ 135.483811][ T5886] tipc: Resetting bearer [ 136.978483][ T5903] mmap: syz.2.33 (5903) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 139.327791][ T5886] tipc: Disabling bearer [ 140.597981][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.604541][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.882183][ T5867] tipc: Node number set to 2590869879 [ 143.793015][ T5925] syz.4.37: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 143.795008][ T5925] CPU: 1 UID: 0 PID: 5925 Comm: syz.4.37 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 143.795036][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.795060][ T5925] Call Trace: [ 143.795080][ T5925] [ 143.795095][ T5925] dump_stack_lvl+0xe8/0x150 [ 143.795169][ T5925] warn_alloc+0x24d/0x270 [ 143.795202][ T5925] ? __pfx_warn_alloc+0x10/0x10 [ 143.795233][ T5925] ? xsk_setsockopt+0x52a/0x960 [ 143.795261][ T5925] ? __x64_sys_setsockopt+0x143/0x1b0 [ 143.795332][ T5925] __vmalloc_node_range_noprof+0x130/0x1560 [ 143.795403][ T5925] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 143.795440][ T5925] ? __kmalloc_cache_noprof+0x3da/0x6b0 [ 143.795466][ T5925] ? xskq_create+0x56/0x220 [ 143.795496][ T5925] xskq_create+0x148/0x220 [ 143.795521][ T5925] ? xsk_init_queue+0x8a/0xe0 [ 143.795549][ T5925] xsk_init_queue+0x8a/0xe0 [ 143.795576][ T5925] xsk_setsockopt+0x52a/0x960 [ 143.795599][ T5925] ? __fget_files+0x2a/0x420 [ 143.795630][ T5925] ? __pfx_xsk_setsockopt+0x10/0x10 [ 143.795667][ T5925] ? __fget_files+0x2a/0x420 [ 143.795694][ T5925] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 143.795726][ T5925] ? __pfx_xsk_setsockopt+0x10/0x10 [ 143.795753][ T5925] do_sock_setsockopt+0x17c/0x1b0 [ 143.795794][ T5925] __x64_sys_setsockopt+0x143/0x1b0 [ 143.795836][ T5925] do_syscall_64+0x166/0x520 [ 143.795886][ T5925] ? trace_irq_disable+0x3b/0x140 [ 143.795913][ T5925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.795939][ T5925] ? clear_bhb_loop+0x70/0xc0 [ 143.795968][ T5925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.795992][ T5925] RIP: 0033:0x7f4afde8e0d9 [ 143.796025][ T5925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.796050][ T5925] RSP: 002b:00007f4afc0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 143.796084][ T5925] RAX: ffffffffffffffda RBX: 00007f4afe115fa0 RCX: 00007f4afde8e0d9 [ 143.796111][ T5925] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 143.796125][ T5925] RBP: 00007f4afdf25024 R08: 0000000000000004 R09: 0000000000000000 [ 143.796146][ T5925] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.796160][ T5925] R13: 00007f4afe116038 R14: 00007f4afe115fa0 R15: 00007ffd235e6ef8 [ 143.796198][ T5925] [ 143.796211][ T5925] Mem-Info: [ 143.796223][ T5925] active_anon:1580 inactive_anon:5412 isolated_anon:0 [ 143.796223][ T5925] active_file:5246 inactive_file:37994 isolated_file:0 [ 143.796223][ T5925] unevictable:0 dirty:59 writeback:23 [ 143.796223][ T5925] slab_reclaimable:11140 slab_unreclaimable:100210 [ 143.796223][ T5925] mapped:32557 shmem:1915 pagetables:1116 [ 143.796223][ T5925] sec_pagetables:0 bounce:0 [ 143.796223][ T5925] kernel_misc_reclaimable:0 [ 143.796223][ T5925] free:1330755 free_pcp:6121 free_cma:0 [ 143.796288][ T5925] Node 0 active_anon:6320kB inactive_anon:21648kB active_file:20780kB inactive_file:151976kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130228kB dirty:232kB writeback:92kB shmem:7660kB kernel_stack:13152kB pagetables:4328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 143.796383][ T5925] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 143.796444][ T5925] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 143.796515][ T5925] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 143.796557][ T5925] Node 0 DMA32 free:1369328kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6320kB inactive_anon:21648kB active_file:20780kB inactive_file:151976kB unevictable:0kB writepending:324kB zspages:0kB present:3129332kB managed:2559548kB mlocked:0kB bounce:0kB free_pcp:24352kB local_pcp:14708kB free_cma:0kB [ 143.796628][ T5925] lowmem_reserve[]: 0 0 1 1 1 [ 143.796667][ T5925] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1840kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 143.796731][ T5925] lowmem_reserve[]: 0 0 0 0 0 [ 143.796769][ T5925] Node 1 Normal free:3938332kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 143.796843][ T5925] lowmem_reserve[]: 0 0 0 0 0 [ 143.796881][ T5925] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 143.797024][ T5925] Node 0 DMA32: 1786*4kB (UM) 1058*8kB (UME) 241*16kB (UME) 105*32kB (UME) 41*64kB (UME) 13*128kB (UME) 5*256kB (UME) 25*512kB (ME) 15*1024kB (UM) 13*2048kB (UME) 314*4096kB (M) = 1369320kB [ 143.797216][ T5925] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 143.797336][ T5925] Node 1 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 2*32kB [ 143.861974][ T5901] syzkaller0: entered promiscuous mode [ 143.862069][ T5901] syzkaller0: entered allmulticast mode [ 144.432313][ T5925] (UM) 3*64kB (UM) 2*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3938332kB [ 144.432450][ T5925] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.432470][ T5925] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.432488][ T5925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.432506][ T5925] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.432524][ T5925] 43756 total pagecache pages [ 144.432549][ T5925] 0 pages in swap cache [ 144.432563][ T5925] Free swap = 124996kB [ 144.432573][ T5925] Total swap = 124996kB [ 144.432584][ T5925] 2097051 pages RAM [ 144.432593][ T5925] 0 pages HighMem/MovableOnly [ 144.432601][ T5925] 425089 pages reserved [ 144.432609][ T5925] 0 pages cma reserved [ 144.969111][ T5925] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 146.193748][ T5951] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 150.268857][ T5980] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 150.473160][ T5992] netlink: 56 bytes leftover after parsing attributes in process `syz.4.54'. [ 150.665492][ T5992] netlink: 56 bytes leftover after parsing attributes in process `syz.4.54'. [ 153.342598][ T5992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.54'. [ 153.917040][ T6031] netlink: 9 bytes leftover after parsing attributes in process `syz.4.66'. [ 154.530577][ T6031] netlink: 9 bytes leftover after parsing attributes in process `syz.4.66'. [ 154.706192][ T6039] netlink: 'syz.0.69': attribute type 2 has an invalid length. [ 154.706224][ T6039] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.69'. [ 156.283631][ T6050] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 156.371454][ T6066] netlink: 56 bytes leftover after parsing attributes in process `syz.2.73'. [ 156.512610][ T6066] netlink: 56 bytes leftover after parsing attributes in process `syz.2.73'. [ 156.966813][ T6066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.73'. [ 157.556561][ T6075] netlink: 20 bytes leftover after parsing attributes in process `syz.3.77'. [ 157.952972][ T6087] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.81'. [ 158.361814][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 159.457154][ T6115] can0: slcan on ttyS3. [ 161.844683][ T6133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.92'. [ 162.235229][ T6113] can0 (unregistered): slcan off ttyS3. [ 165.276182][ T6149] Zero length message leads to an empty skb [ 166.134685][ T6166] netlink: 48 bytes leftover after parsing attributes in process `syz.0.104'. [ 166.134981][ T6166] netlink: 48 bytes leftover after parsing attributes in process `syz.0.104'. [ 167.647672][ T6185] can0: slcan on ttyS3. [ 170.888871][ T6184] can0 (unregistered): slcan off ttyS3. [ 172.123591][ T6212] wlan0 speed is unknown, defaulting to 1000 [ 172.123728][ T6212] wlan0 speed is unknown, defaulting to 1000 [ 172.130402][ T6212] wlan0 speed is unknown, defaulting to 1000 [ 172.133701][ T6212] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 172.133751][ T6212] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 172.133804][ T6212] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 172.141408][ T6212] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 172.156421][ T6212] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 172.937472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 172.992883][ T6212] wlan0 speed is unknown, defaulting to 1000 [ 173.002321][ T6212] wlan0 speed is unknown, defaulting to 1000 [ 173.010618][ T6212] wlan0 speed is unknown, defaulting to 1000 [ 173.015311][ T6212] wlan0 speed is unknown, defaulting to 1000 [ 173.019739][ T6212] wlan0 speed is unknown, defaulting to 1000 [ 174.453368][ T6241] can0: slcan on ttyS3. [ 175.107951][ T6238] can0 (unregistered): slcan off ttyS3. [ 176.572123][ T6271] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 178.164719][ T5906] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 178.555094][ T5906] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 179.382743][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'. [ 179.940559][ T5906] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 179.940617][ T5906] usb 2-1: can't read configurations, error -71 [ 180.279636][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 182.047469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 183.310815][ T6333] syz.0.142: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 183.310916][ T6333] CPU: 0 UID: 0 PID: 6333 Comm: syz.0.142 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 183.310941][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.310955][ T6333] Call Trace: [ 183.310965][ T6333] [ 183.310976][ T6333] dump_stack_lvl+0xe8/0x150 [ 183.311020][ T6333] warn_alloc+0x24d/0x270 [ 183.311053][ T6333] ? __pfx_warn_alloc+0x10/0x10 [ 183.311086][ T6333] ? xsk_setsockopt+0x52a/0x960 [ 183.311111][ T6333] ? __x64_sys_setsockopt+0x143/0x1b0 [ 183.311169][ T6333] __vmalloc_node_range_noprof+0x130/0x1560 [ 183.311232][ T6333] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 183.311263][ T6333] ? __kmalloc_cache_noprof+0x3da/0x6b0 [ 183.311282][ T6333] ? xskq_create+0x56/0x220 [ 183.311307][ T6333] xskq_create+0x148/0x220 [ 183.311331][ T6333] ? xsk_init_queue+0x8a/0xe0 [ 183.311357][ T6333] xsk_init_queue+0x8a/0xe0 [ 183.311383][ T6333] xsk_setsockopt+0x52a/0x960 [ 183.311405][ T6333] ? __fget_files+0x2a/0x420 [ 183.311436][ T6333] ? __pfx_xsk_setsockopt+0x10/0x10 [ 183.311473][ T6333] ? __fget_files+0x2a/0x420 [ 183.311499][ T6333] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 183.311529][ T6333] ? __pfx_xsk_setsockopt+0x10/0x10 [ 183.311551][ T6333] do_sock_setsockopt+0x17c/0x1b0 [ 183.311591][ T6333] __x64_sys_setsockopt+0x143/0x1b0 [ 183.311631][ T6333] do_syscall_64+0x166/0x520 [ 183.311660][ T6333] ? trace_irq_disable+0x3b/0x140 [ 183.311682][ T6333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.311706][ T6333] ? clear_bhb_loop+0x70/0xc0 [ 183.311734][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.311758][ T6333] RIP: 0033:0x7f1f3f28e0d9 [ 183.311779][ T6333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.311798][ T6333] RSP: 002b:00007f1f3d4c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 183.311832][ T6333] RAX: ffffffffffffffda RBX: 00007f1f3f516090 RCX: 00007f1f3f28e0d9 [ 183.311854][ T6333] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 183.311883][ T6333] RBP: 00007f1f3f325024 R08: 0000000000000004 R09: 0000000000000000 [ 183.311899][ T6333] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.311913][ T6333] R13: 00007f1f3f516128 R14: 00007f1f3f516090 R15: 00007ffd1838b718 [ 183.311950][ T6333] [ 183.312737][ T6333] Mem-Info: [ 183.312753][ T6333] active_anon:3054 inactive_anon:24477 isolated_anon:0 [ 183.312753][ T6333] active_file:5384 inactive_file:47151 isolated_file:0 [ 183.312753][ T6333] unevictable:0 dirty:117 writeback:0 [ 183.312753][ T6333] slab_reclaimable:11200 slab_unreclaimable:100821 [ 183.312753][ T6333] mapped:42087 shmem:21160 pagetables:1208 [ 183.312753][ T6333] sec_pagetables:0 bounce:0 [ 183.312753][ T6333] kernel_misc_reclaimable:0 [ 183.312753][ T6333] free:1299778 free_pcp:5925 free_cma:0 [ 183.312813][ T6333] Node 0 active_anon:12216kB inactive_anon:97908kB active_file:21332kB inactive_file:188604kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:168348kB dirty:464kB writeback:0kB shmem:84640kB kernel_stack:13352kB pagetables:4696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 183.312885][ T6333] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 183.312938][ T6333] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.313003][ T6333] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 183.313042][ T6333] Node 0 DMA32 free:1245172kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12216kB inactive_anon:97908kB active_file:21332kB inactive_file:188604kB unevictable:0kB writepending:464kB zspages:0kB present:3129332kB managed:2559548kB mlocked:0kB bounce:0kB free_pcp:23692kB local_pcp:8996kB free_cma:0kB [ 183.313108][ T6333] lowmem_reserve[]: 0 0 1 1 1 [ 183.313146][ T6333] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1840kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 183.313209][ T6333] lowmem_reserve[]: 0 0 0 0 0 [ 183.313246][ T6333] Node 1 Normal free:3938580kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.313310][ T6333] lowmem_reserve[]: 0 0 0 0 0 [ 183.313442][ T6333] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 183.313577][ T6333] Node 0 DMA32: 366*4kB (UME) 875*8kB (UME) 352*16kB (UME) 274*32kB (UM) 87*64kB (UME) 29*128kB (UME) 10*256kB (UME) 4*512kB (UE) 0*1024kB 2*2048kB (UE) 294*4096kB (M) = 1245072kB [ 183.313745][ T6333] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 183.313885][ T6333] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 7*16kB (UM) 4*32kB (UM) 4*64kB (UM) 2*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3938580kB [ 183.314069][ T6333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.314088][ T6333] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.314106][ T6333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.314124][ T6333] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.314151][ T6333] 73691 total pagecache pages [ 183.314160][ T6333] 0 pages in swap cache [ 183.314168][ T6333] Free swap = 124996kB [ 183.314176][ T6333] Total swap = 124996kB [ 183.314185][ T6333] 2097051 pages RAM [ 183.314192][ T6333] 0 pages HighMem/MovableOnly [ 183.314200][ T6333] 425089 pages reserved [ 183.314207][ T6333] 0 pages cma reserved [ 183.347462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 184.384444][ T6328] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 187.243793][ T6371] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 194.484270][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'. [ 194.681005][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'. [ 196.427292][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 196.596059][ T6483] syzkaller0: entered promiscuous mode [ 196.596096][ T6483] syzkaller0: entered allmulticast mode [ 198.339190][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'. [ 199.158514][ T6504] warn_alloc: 1 callbacks suppressed [ 199.158537][ T6504] syz.2.184: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 199.158632][ T6504] CPU: 0 UID: 0 PID: 6504 Comm: syz.2.184 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 199.158656][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.158669][ T6504] Call Trace: [ 199.158684][ T6504] [ 199.158694][ T6504] dump_stack_lvl+0xe8/0x150 [ 199.158738][ T6504] warn_alloc+0x24d/0x270 [ 199.158771][ T6504] ? __pfx_warn_alloc+0x10/0x10 [ 199.158792][ T6504] ? xsk_setsockopt+0x52a/0x960 [ 199.158817][ T6504] ? __x64_sys_setsockopt+0x143/0x1b0 [ 199.158871][ T6504] __vmalloc_node_range_noprof+0x130/0x1560 [ 199.158934][ T6504] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 199.158967][ T6504] ? __kmalloc_cache_noprof+0x3da/0x6b0 [ 199.158991][ T6504] ? xskq_create+0x56/0x220 [ 199.159020][ T6504] xskq_create+0x148/0x220 [ 199.159046][ T6504] ? xsk_init_queue+0x8a/0xe0 [ 199.159073][ T6504] xsk_init_queue+0x8a/0xe0 [ 199.159100][ T6504] xsk_setsockopt+0x52a/0x960 [ 199.159122][ T6504] ? __fget_files+0x2a/0x420 [ 199.159154][ T6504] ? __pfx_xsk_setsockopt+0x10/0x10 [ 199.159191][ T6504] ? __fget_files+0x2a/0x420 [ 199.159217][ T6504] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 199.159256][ T6504] ? __pfx_xsk_setsockopt+0x10/0x10 [ 199.159282][ T6504] do_sock_setsockopt+0x17c/0x1b0 [ 199.159334][ T6504] __x64_sys_setsockopt+0x143/0x1b0 [ 199.159379][ T6504] do_syscall_64+0x166/0x520 [ 199.159406][ T6504] ? trace_irq_disable+0x3b/0x140 [ 199.159429][ T6504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.159454][ T6504] ? clear_bhb_loop+0x70/0xc0 [ 199.159483][ T6504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.159506][ T6504] RIP: 0033:0x7faf703ce0d9 [ 199.159528][ T6504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.159548][ T6504] RSP: 002b:00007faf6e626028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 199.159571][ T6504] RAX: ffffffffffffffda RBX: 00007faf70655fa0 RCX: 00007faf703ce0d9 [ 199.159588][ T6504] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 199.159602][ T6504] RBP: 00007faf70465024 R08: 0000000000000004 R09: 0000000000000000 [ 199.159617][ T6504] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.159631][ T6504] R13: 00007faf70656038 R14: 00007faf70655fa0 R15: 00007ffca4b8c0a8 [ 199.159667][ T6504] [ 199.159917][ T6504] Mem-Info: [ 199.159931][ T6504] active_anon:181 inactive_anon:5785 isolated_anon:0 [ 199.159931][ T6504] active_file:5847 inactive_file:46694 isolated_file:0 [ 199.159931][ T6504] unevictable:0 dirty:188 writeback:0 [ 199.159931][ T6504] slab_reclaimable:11216 slab_unreclaimable:100403 [ 199.159931][ T6504] mapped:29606 shmem:520 pagetables:1126 [ 199.159931][ T6504] sec_pagetables:0 bounce:0 [ 199.159931][ T6504] kernel_misc_reclaimable:0 [ 199.159931][ T6504] free:1324097 free_pcp:3368 free_cma:0 [ 199.159996][ T6504] Node 0 active_anon:724kB inactive_anon:23140kB active_file:23184kB inactive_file:186776kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118424kB dirty:752kB writeback:0kB shmem:2080kB kernel_stack:13312kB pagetables:4368kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 199.160071][ T6504] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 199.160127][ T6504] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 199.160193][ T6504] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 199.160234][ T6504] Node 0 DMA32 free:1342448kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:724kB inactive_anon:23140kB active_file:23184kB inactive_file:186776kB unevictable:0kB writepending:752kB zspages:0kB present:3129332kB managed:2559548kB mlocked:0kB bounce:0kB free_pcp:13464kB local_pcp:6240kB free_cma:0kB [ 199.160313][ T6504] lowmem_reserve[]: 0 0 1 1 1 [ 199.160352][ T6504] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1840kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 199.160427][ T6504] lowmem_reserve[]: 0 0 0 0 0 [ 199.160468][ T6504] Node 1 Normal free:3938580kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 199.160536][ T6504] lowmem_reserve[]: 0 0 0 0 0 [ 199.160576][ T6504] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 199.163182][ T6504] Node 0 DMA32: 1642*4kB (UME) 1500*8kB (UME) 1102*16kB (UME) 775*32kB (UM) 450*64kB (UME) 187*128kB (UME) 48*256kB (UME) 10*512kB (UME) 1*1024kB (M) 3*2048kB (UME) 294*4096kB (M) = 1342536kB [ 199.163407][ T6504] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 199.163544][ T6504] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 7*16kB (UM) 4*32kB (UM) 4*64kB (UM) 2*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3938580kB [ 199.163756][ T6504] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 199.163778][ T6504] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 199.163798][ T6504] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 199.163819][ T6504] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 199.163840][ T6504] 53057 total pagecache pages [ 199.163884][ T6504] 0 pages in swap cache [ 199.163893][ T6504] Free swap = 124996kB [ 199.163904][ T6504] Total swap = 124996kB [ 199.163915][ T6504] 2097051 pages RAM [ 199.163924][ T6504] 0 pages HighMem/MovableOnly [ 199.163933][ T6504] 425089 pages reserved [ 199.163942][ T6504] 0 pages cma reserved [ 199.849206][ T6504] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 199.995304][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'. [ 202.661901][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.661972][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.816552][ T6566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.198'. [ 204.129933][ T6566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.198'. [ 206.717202][ T6575] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 208.656059][ T6613] netlink: 56 bytes leftover after parsing attributes in process `syz.3.207'. [ 208.737930][ T6613] netlink: 56 bytes leftover after parsing attributes in process `syz.3.207'. [ 212.977511][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.207'. [ 213.631255][ T6662] input: syz0 as /devices/virtual/input/input5 [ 219.169028][ T6716] input: syz0 as /devices/virtual/input/input6 [ 223.545503][ T6735] netlink: 68 bytes leftover after parsing attributes in process `syz.4.238'. [ 226.447571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 229.116734][ T6813] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.265'. [ 229.271096][ T6819] netlink: 56 bytes leftover after parsing attributes in process `syz.1.267'. [ 229.316673][ T6819] netlink: 56 bytes leftover after parsing attributes in process `syz.1.267'. [ 229.714418][ T5610] Bluetooth: hci0: command 0x0406 tx timeout [ 229.734981][ T5610] Bluetooth: hci2: command 0x0406 tx timeout [ 232.429485][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.267'. [ 232.548197][ T6851] syzkaller0: entered promiscuous mode [ 232.548232][ T6851] syzkaller0: entered allmulticast mode [ 233.490979][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 234.806996][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 234.807047][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 234.808493][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 234.941450][ T6889] warn_alloc: 2 callbacks suppressed [ 234.941489][ T6889] syz.0.285: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 234.941812][ T6889] CPU: 0 UID: 0 PID: 6889 Comm: syz.0.285 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 234.941845][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.941940][ T6889] Call Trace: [ 234.941991][ T6889] [ 234.942023][ T6889] dump_stack_lvl+0xe8/0x150 [ 234.942275][ T6889] warn_alloc+0x24d/0x270 [ 234.942375][ T6889] ? __pfx_warn_alloc+0x10/0x10 [ 234.942416][ T6889] ? xsk_setsockopt+0x52a/0x960 [ 234.942525][ T6889] ? __x64_sys_setsockopt+0x143/0x1b0 [ 234.942660][ T6889] __vmalloc_node_range_noprof+0x130/0x1560 [ 234.942736][ T6889] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 234.942773][ T6889] ? __kmalloc_cache_noprof+0x3da/0x6b0 [ 234.942799][ T6889] ? xskq_create+0x56/0x220 [ 234.942827][ T6889] xskq_create+0x148/0x220 [ 234.942852][ T6889] ? xsk_init_queue+0x8a/0xe0 [ 234.942879][ T6889] xsk_init_queue+0x8a/0xe0 [ 234.942906][ T6889] xsk_setsockopt+0x52a/0x960 [ 234.942928][ T6889] ? __fget_files+0x2a/0x420 [ 234.943027][ T6889] ? __pfx_xsk_setsockopt+0x10/0x10 [ 234.943064][ T6889] ? __fget_files+0x2a/0x420 [ 234.943090][ T6889] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 234.943172][ T6889] ? __pfx_xsk_setsockopt+0x10/0x10 [ 234.943207][ T6889] do_sock_setsockopt+0x17c/0x1b0 [ 234.943252][ T6889] __x64_sys_setsockopt+0x143/0x1b0 [ 234.943294][ T6889] do_syscall_64+0x166/0x520 [ 234.943342][ T6889] ? trace_irq_disable+0x3b/0x140 [ 234.943384][ T6889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.943408][ T6889] ? clear_bhb_loop+0x70/0xc0 [ 234.943437][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.943490][ T6889] RIP: 0033:0x7f1f3f28e0d9 [ 234.943538][ T6889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.943558][ T6889] RSP: 002b:00007f1f3d4c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 234.943627][ T6889] RAX: ffffffffffffffda RBX: 00007f1f3f516090 RCX: 00007f1f3f28e0d9 [ 234.943648][ T6889] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 234.943668][ T6889] RBP: 00007f1f3f325024 R08: 0000000000000004 R09: 0000000000000000 [ 234.943683][ T6889] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.943707][ T6889] R13: 00007f1f3f516128 R14: 00007f1f3f516090 R15: 00007ffd1838b718 [ 234.943746][ T6889] [ 234.963162][ T6889] Mem-Info: [ 234.963200][ T6889] active_anon:180 inactive_anon:8523 isolated_anon:0 [ 234.963200][ T6889] active_file:15499 inactive_file:39233 isolated_file:0 [ 234.963200][ T6889] unevictable:0 dirty:184 writeback:0 [ 234.963200][ T6889] slab_reclaimable:11325 slab_unreclaimable:100264 [ 234.963200][ T6889] mapped:33764 shmem:3390 pagetables:1165 [ 234.963200][ T6889] sec_pagetables:0 bounce:0 [ 234.963200][ T6889] kernel_misc_reclaimable:0 [ 234.963200][ T6889] free:1318231 free_pcp:3514 free_cma:0 [ 234.963399][ T6889] Node 0 active_anon:720kB inactive_anon:34092kB active_file:61792kB inactive_file:156932kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:135056kB dirty:736kB writeback:0kB shmem:13560kB kernel_stack:13588kB pagetables:4524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 234.963549][ T6889] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 234.978396][ T6889] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 234.978588][ T6889] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 234.978724][ T6889] Node 0 DMA32 free:1318984kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:720kB inactive_anon:34092kB active_file:61792kB inactive_file:156932kB unevictable:0kB writepending:736kB zspages:0kB present:3129332kB managed:2559548kB mlocked:0kB bounce:0kB free_pcp:14048kB local_pcp:7344kB free_cma:0kB [ 234.981120][ T6889] lowmem_reserve[]: 0 0 1 1 1 [ 234.981178][ T6889] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1840kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 234.981279][ T6889] lowmem_reserve[]: 0 0 0 0 0 [ 234.981321][ T6889] Node 1 Normal free:3938580kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 234.981397][ T6889] lowmem_reserve[]: 0 0 0 0 0 [ 234.981437][ T6889] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 234.981652][ T6889] Node 0 DMA32: 866*4kB (UME) 1234*8kB (UME) 679*16kB (UME) 602*32kB (UME) 334*64kB (UME) 132*128kB (UM) 35*256kB (UME) 23*512kB (UME) 6*1024kB (M) 3*2048kB (UME) 294*4096kB (M) = 1318984kB [ 234.981890][ T6889] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 234.994687][ T6889] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 7*16kB (UM) 4*32kB (UM) 4*64kB (UM) 2*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3938580kB [ 234.994990][ T6889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.995078][ T6889] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 234.995180][ T6889] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.995242][ T6889] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 235.018066][ T6889] 58118 total pagecache pages [ 235.018177][ T6889] 0 pages in swap cache [ 235.018213][ T6889] Free swap = 124996kB [ 235.018249][ T6889] Total swap = 124996kB [ 235.018288][ T6889] 2097051 pages RAM [ 235.018308][ T6889] 0 pages HighMem/MovableOnly [ 235.018329][ T6889] 425089 pages reserved [ 235.018351][ T6889] 0 pages cma reserved [ 235.666304][ T6889] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 238.202336][ T6920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.290'. [ 238.607992][ T6924] syzkaller0: entered promiscuous mode [ 238.608048][ T6924] syzkaller0: entered allmulticast mode [ 238.720348][ T6924] tipc: Enabled bearer , priority 0 [ 238.760099][ T6923] tipc: Resetting bearer [ 239.040718][ T5867] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 239.658395][ T6938] syz.3.295 (6938) used greatest stack depth: 18440 bytes left [ 240.024499][ T6923] tipc: Disabling bearer [ 240.048655][ T5867] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 240.049549][ T5867] usb 1-1: config 0 has no interfaces? [ 240.053631][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.053660][ T5867] usb 1-1: Product: syz [ 240.053677][ T5867] usb 1-1: Manufacturer: syz [ 240.053694][ T5867] usb 1-1: SerialNumber: syz [ 240.178175][ T6937] netlink: 56 bytes leftover after parsing attributes in process `syz.1.298'. [ 240.178995][ T6937] netlink: 56 bytes leftover after parsing attributes in process `syz.1.298'. [ 240.454236][ T5867] usb 1-1: config 0 descriptor?? [ 240.855153][ T5867] usb 1-1: USB disconnect, device number 2 [ 241.026959][ T6962] netlink: 20 bytes leftover after parsing attributes in process `syz.2.305'. [ 241.415921][ T5786] tipc: Node number set to 2859851876 [ 241.445785][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.298'. [ 244.000085][ T6986] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 244.155406][ T6966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 245.175428][ T7018] input: syz0 as /devices/virtual/input/input7 [ 248.338333][ T7040] netlink: 56 bytes leftover after parsing attributes in process `syz.4.323'. [ 248.361035][ T7040] netlink: 56 bytes leftover after parsing attributes in process `syz.4.323'. [ 249.028686][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.323'. [ 251.295369][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'. [ 253.695406][ T7097] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 255.685053][ T7116] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.349'. [ 257.292373][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.354'. [ 259.897430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 259.959888][ T7133] syzkaller0: entered promiscuous mode [ 259.959919][ T7133] syzkaller0: entered allmulticast mode [ 259.964043][ T7135] tipc: Started in network mode [ 259.964068][ T7135] tipc: Node identity 967bb03a7d32, cluster identity 4711 [ 259.964687][ T7135] tipc: Enabled bearer , priority 0 [ 260.118047][ T7125] tipc: Resetting bearer [ 260.403624][ T7125] tipc: Disabling bearer [ 260.763132][ T7161] syzkaller0: entered promiscuous mode [ 260.763185][ T7161] syzkaller0: entered allmulticast mode [ 260.803953][ T7149] tipc: Started in network mode [ 260.803992][ T7149] tipc: Node identity e2505467f12d, cluster identity 4711 [ 260.804198][ T7149] tipc: Enabled bearer , priority 0 [ 260.872622][ T7149] tipc: Resetting bearer [ 260.931177][ T7148] tipc: Resetting bearer [ 261.233039][ T7148] tipc: Disabling bearer [ 261.479787][ T7167] tipc: Enabled bearer , priority 0 [ 261.507198][ T7164] tipc: Resetting bearer [ 261.590533][ T7173] syzkaller0: entered promiscuous mode [ 261.590566][ T7173] syzkaller0: entered allmulticast mode [ 261.636744][ T7163] tipc: Resetting bearer [ 261.988726][ T7163] tipc: Disabling bearer [ 263.111496][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 263.605415][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.605624][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.240502][ T5610] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 269.846031][ T5609] libceph: connect (1)[c::]:6789 error -101 [ 269.875251][ T5609] libceph: mon0 (1)[c::]:6789 connect error [ 270.081377][ T7279] ceph: No mds server is up or the cluster is laggy [ 270.395515][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 270.566618][ T7298] syz.2.396: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 270.566714][ T7298] CPU: 1 UID: 0 PID: 7298 Comm: syz.2.396 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 270.566742][ T7298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.566757][ T7298] Call Trace: [ 270.566767][ T7298] [ 270.566779][ T7298] dump_stack_lvl+0xe8/0x150 [ 270.566828][ T7298] warn_alloc+0x24d/0x270 [ 270.566863][ T7298] ? __pfx_warn_alloc+0x10/0x10 [ 270.566885][ T7298] ? xsk_setsockopt+0x52a/0x960 [ 270.566914][ T7298] ? __x64_sys_setsockopt+0x143/0x1b0 [ 270.566977][ T7298] __vmalloc_node_range_noprof+0x130/0x1560 [ 270.567048][ T7298] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 270.567087][ T7298] ? __kmalloc_cache_noprof+0x3da/0x6b0 [ 270.567112][ T7298] ? xskq_create+0x56/0x220 [ 270.567142][ T7298] xskq_create+0x148/0x220 [ 270.567168][ T7298] ? xsk_init_queue+0x8a/0xe0 [ 270.567196][ T7298] xsk_init_queue+0x8a/0xe0 [ 270.567224][ T7298] xsk_setsockopt+0x52a/0x960 [ 270.567258][ T7298] ? __fget_files+0x2a/0x420 [ 270.567291][ T7298] ? __pfx_xsk_setsockopt+0x10/0x10 [ 270.567330][ T7298] ? __fget_files+0x2a/0x420 [ 270.567361][ T7298] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 270.567392][ T7298] ? __pfx_xsk_setsockopt+0x10/0x10 [ 270.567419][ T7298] do_sock_setsockopt+0x17c/0x1b0 [ 270.567463][ T7298] __x64_sys_setsockopt+0x143/0x1b0 [ 270.567508][ T7298] do_syscall_64+0x166/0x520 [ 270.567537][ T7298] ? trace_irq_disable+0x3b/0x140 [ 270.567561][ T7298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.567586][ T7298] ? clear_bhb_loop+0x70/0xc0 [ 270.567614][ T7298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.567638][ T7298] RIP: 0033:0x7faf703ce0d9 [ 270.567661][ T7298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.567681][ T7298] RSP: 002b:00007faf6e626028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 270.567707][ T7298] RAX: ffffffffffffffda RBX: 00007faf70655fa0 RCX: 00007faf703ce0d9 [ 270.567746][ T7298] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 270.567760][ T7298] RBP: 00007faf70465024 R08: 0000000000000004 R09: 0000000000000000 [ 270.567775][ T7298] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.567798][ T7298] R13: 00007faf70656038 R14: 00007faf70655fa0 R15: 00007ffca4b8c0a8 [ 270.567835][ T7298] [ 270.575425][ T7298] Mem-Info: [ 270.587252][ T7298] active_anon:180 inactive_anon:5755 isolated_anon:0 [ 270.587252][ T7298] active_file:15521 inactive_file:41399 isolated_file:0 [ 270.587252][ T7298] unevictable:850 dirty:143 writeback:25 [ 270.587252][ T7298] slab_reclaimable:11422 slab_unreclaimable:99725 [ 270.587252][ T7298] mapped:34792 shmem:1390 pagetables:1196 [ 270.587252][ T7298] sec_pagetables:0 bounce:0 [ 270.587252][ T7298] kernel_misc_reclaimable:0 [ 270.587252][ T7298] free:1308514 free_pcp:3193 free_cma:0 [ 270.587552][ T7298] Node 0 active_anon:720kB inactive_anon:23020kB active_file:61880kB inactive_file:165596kB unevictable:3400kB isolated(anon):0kB isolated(file):0kB mapped:139168kB dirty:572kB writeback:100kB shmem:5560kB kernel_stack:13608kB pagetables:4648kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 270.587709][ T7298] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 270.587832][ T7298] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 270.588039][ T7298] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 270.588140][ T7298] Node 0 DMA32 free:1280116kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:720kB inactive_anon:23020kB active_file:61880kB inactive_file:165596kB unevictable:3400kB writepending:572kB zspages:0kB present:3129332kB managed:2559548kB mlocked:3400kB bounce:0kB free_pcp:12816kB local_pcp:11388kB free_cma:0kB [ 270.588282][ T7298] lowmem_reserve[]: 0 0 1 1 1 [ 270.588382][ T7298] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1840kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 270.588532][ T7298] lowmem_reserve[]: 0 0 0 0 0 [ 270.588625][ T7298] Node 1 Normal free:3938580kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 270.992721][ T7298] lowmem_reserve[]: 0 0 0 0 0 [ 270.993007][ T7298] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 270.995452][ T7298] Node 0 DMA32: 472*4kB (U) 733*8kB (UM) 835*16kB (UME) 531*32kB (UME) 385*64kB (UME) 121*128kB (UME) 51*256kB (UME) 22*512kB (UM) 5*1024kB (M) 3*2048kB (UM) 284*4096kB (UM) = 1277080kB [ 270.996490][ T7298] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 270.996890][ T7298] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 7*16kB (UM) 4*32kB (UM) 4*64kB (UM) 2*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3938580kB [ 270.998602][ T7298] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.998652][ T7298] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.998716][ T7298] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.998824][ T7298] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.998883][ T7298] 58308 total pagecache pages [ 270.998923][ T7298] 0 pages in swap cache [ 270.998962][ T7298] Free swap = 124996kB [ 270.998999][ T7298] Total swap = 124996kB [ 270.999039][ T7298] 2097051 pages RAM [ 270.999091][ T7298] 0 pages HighMem/MovableOnly [ 270.999128][ T7298] 425089 pages reserved [ 270.999165][ T7298] 0 pages cma reserved [ 272.690351][ T7317] netlink: 44 bytes leftover after parsing attributes in process `syz.1.399'. [ 273.755632][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'. [ 275.784159][ T5610] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 275.988472][ T1241] libceph: connect (1)[c::]:6789 error -101 [ 275.988689][ T1241] libceph: mon0 (1)[c::]:6789 connect error [ 276.449014][ T7342] ceph: No mds server is up or the cluster is laggy [ 276.496155][ T5721] libceph: connect (1)[c::]:6789 error -101 [ 276.537794][ T5721] libceph: mon0 (1)[c::]:6789 connect error [ 276.902563][ T7349] netlink: 44 bytes leftover after parsing attributes in process `syz.3.412'. [ 277.250970][ T7358] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 277.320772][ T7361] netlink: 56 bytes leftover after parsing attributes in process `syz.4.417'. [ 277.322052][ T7361] netlink: 56 bytes leftover after parsing attributes in process `syz.4.417'. [ 277.811372][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.417'. [ 277.811668][ T7380] netlink: 56 bytes leftover after parsing attributes in process `syz.3.421'. [ 277.813319][ T7380] netlink: 56 bytes leftover after parsing attributes in process `syz.3.421'. [ 278.207308][ T7393] netlink: 44 bytes leftover after parsing attributes in process `syz.2.426'. [ 278.760902][ T5610] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 279.403382][ T1241] libceph: connect (1)[c::]:6789 error -101 [ 279.403603][ T1241] libceph: mon0 (1)[c::]:6789 connect error [ 279.577896][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.421'. [ 279.610874][ T7403] warning: `syz.1.427' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 279.641763][ T7390] tipc: Enabled bearer , priority 0 [ 279.648007][ T7396] ceph: No mds server is up or the cluster is laggy [ 279.658031][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 279.658261][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 279.976073][ T7388] tipc: Disabling bearer [ 287.625221][ T5610] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 287.632589][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 287.632836][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 287.677553][ T1241] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 287.836079][ T1241] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 287.847579][ T1241] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.847609][ T1241] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 287.850732][ T1241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.850758][ T1241] usb 4-1: Product: syz [ 287.850774][ T1241] usb 4-1: Manufacturer: syz [ 287.850790][ T1241] usb 4-1: SerialNumber: syz [ 287.906597][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 287.906897][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 287.951065][ T1241] usb 4-1: config 0 descriptor?? [ 288.236051][ T7517] ceph: No mds server is up or the cluster is laggy [ 288.372119][ T5867] usb 4-1: USB disconnect, device number 2 [ 288.412209][ T1241] libceph: connect (1)[c::]:6789 error -101 [ 288.412467][ T1241] libceph: mon0 (1)[c::]:6789 connect error [ 289.287980][ T7547] syz.2.468 uses obsolete (PF_INET,SOCK_PACKET) [ 293.290161][ T7603] netlink: 48 bytes leftover after parsing attributes in process `syz.1.492'. [ 293.290447][ T7603] netlink: 48 bytes leftover after parsing attributes in process `syz.1.492'. [ 293.608191][ T7608] syzkaller1: entered promiscuous mode [ 293.608227][ T7608] syzkaller1: entered allmulticast mode [ 294.564617][ T7606] syzkaller0: entered promiscuous mode [ 294.564672][ T7606] syzkaller0: entered allmulticast mode [ 295.070431][ T7633] overlayfs: missing 'workdir' [ 296.563873][ T7625] tipc: Enabled bearer , priority 0 [ 297.826364][ T7635] tipc: Resetting bearer [ 298.220370][ T7609] tipc: Disabling bearer [ 299.601098][ T5712] tipc: Node number set to 326980711 [ 301.918771][ T7723] tipc: Enabled bearer , priority 0 [ 301.920218][ T7723] syzkaller0: entered promiscuous mode [ 301.920246][ T7723] syzkaller0: entered allmulticast mode [ 304.687167][ T7721] tipc: Resetting bearer [ 306.075288][ T7721] tipc: Disabling bearer [ 310.463154][ T7818] tipc: Enabled bearer , priority 0 [ 310.479053][ T7818] syzkaller0: entered promiscuous mode [ 310.479084][ T7818] syzkaller0: entered allmulticast mode [ 310.579065][ T7817] tipc: Resetting bearer [ 311.002113][ T7817] tipc: Disabling bearer [ 311.101370][ T7832] program syz.2.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.152126][ T5610] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 312.894705][ T7840] process 'syz.0.573' launched './file2' with NULL argv: empty string added [ 312.916939][ T7840] kAFS: No cell specified [ 316.239409][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 317.468257][ T5610] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 317.468445][ T7887] program syz.1.587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.975723][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.609'. [ 324.881791][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.881877][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.516481][ T7995] program syz.3.628 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.613758][ T5610] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 332.930297][ T8050] program syz.1.641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 332.934070][ T5610] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 345.052173][ T8112] program syz.4.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.462064][ T5610] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 346.205661][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'. [ 355.519905][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 355.554619][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.596712][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.605300][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.631282][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 356.452566][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.678'. [ 357.757643][ T5610] Bluetooth: hci5: command tx timeout [ 359.837553][ T5610] Bluetooth: hci5: command tx timeout [ 360.055612][ T8154] wlan0 speed is unknown, defaulting to 1000 [ 361.955109][ T5610] Bluetooth: hci5: command tx timeout [ 364.523908][ T5610] Bluetooth: hci5: command tx timeout [ 374.088982][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 374.089011][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'. [ 376.715180][ T2145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.944338][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.710'. [ 378.812909][ T2145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.909144][ T2145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.742363][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'. [ 382.866960][ T2145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.719894][ T8154] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.722124][ T8154] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.722415][ T8154] bridge_slave_0: entered allmulticast mode [ 383.765045][ T8154] bridge_slave_0: entered promiscuous mode [ 383.873349][ T8154] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.873563][ T8154] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.873804][ T8154] bridge_slave_1: entered allmulticast mode [ 383.980737][ T8154] bridge_slave_1: entered promiscuous mode [ 385.330823][ T8154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.197056][ T8154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.599007][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.599086][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.090548][ T8154] team0: Port device team_slave_0 added [ 388.094351][ T8154] team0: Port device team_slave_1 added [ 388.562536][ T8154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.562558][ T8154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.562608][ T8154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.207682][ T8154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.207704][ T8154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.207735][ T8154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.213291][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.745'. [ 391.289072][ T5740] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 391.972944][ T2145] bridge_slave_1: left allmulticast mode [ 392.024784][ T2145] bridge_slave_1: left promiscuous mode [ 392.057751][ T2145] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.390239][ T5740] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 392.392437][ T5740] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.392463][ T5740] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 392.455780][ T5740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.455816][ T5740] usb 2-1: Product: syz [ 392.455833][ T5740] usb 2-1: Manufacturer: syz [ 392.455849][ T5740] usb 2-1: SerialNumber: syz [ 392.551676][ T5740] usb 2-1: config 0 descriptor?? [ 392.633292][ T2145] bridge_slave_0: left allmulticast mode [ 392.633337][ T2145] bridge_slave_0: left promiscuous mode [ 392.633627][ T2145] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.814307][ T5740] usb 2-1: USB disconnect, device number 4 [ 397.348490][ T5867] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 397.510086][ T5867] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 397.528041][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.528062][ T5867] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 397.533421][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.533451][ T5867] usb 5-1: Product: syz [ 397.533462][ T5867] usb 5-1: Manufacturer: syz [ 397.533473][ T5867] usb 5-1: SerialNumber: syz [ 397.604541][ T5867] usb 5-1: config 0 descriptor?? [ 398.031063][ T5867] usb 5-1: USB disconnect, device number 2 [ 398.314507][ T2155] ------------[ cut here ]------------ [ 398.314528][ T2155] in_task() && kcov_mode_enabled(mode) [ 398.314576][ T2155] WARNING: kernel/kcov.c:894 at kcov_remote_start+0x5d6/0x710, CPU#0: kworker/u8:15/2155 [ 398.314637][ T2155] Modules linked in: [ 398.314704][ T2155] CPU: 0 UID: 0 PID: 2155 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 398.314733][ T2155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.314749][ T2155] Workqueue: events_unbound cfg80211_wiphy_work [ 398.314824][ T2155] RIP: 0010:kcov_remote_start+0x5d6/0x710 [ 398.314850][ T2155] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 91 c9 01 03 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 ab fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 dc cd 88 09 89 c0 48 c7 c7 c0 32 a2 [ 398.314870][ T2155] RSP: 0018:ffffc900081379d8 EFLAGS: 00010202 [ 398.314891][ T2155] RAX: 0000000000000000 RBX: ffff88802bcd3e00 RCX: 8000000000000001 [ 398.314908][ T2155] RDX: 0000000000000000 RSI: ffffffff8bcb9e60 RDI: ffffffff8bcb9e20 [ 398.314925][ T2155] RBP: ffff88802613bc80 R08: ffffffff8b510e52 R09: 0000000000000000 [ 398.314941][ T2155] R10: 0000000000000000 R11: ffffffff8e1c3740 R12: dffffc0000000000 [ 398.314957][ T2155] R13: ffff888062589ef8 R14: 0000000000000000 R15: ffff8880628f1180 [ 398.314974][ T2155] FS: 0000000000000000(0000) GS:ffff888125c06000(0000) knlGS:0000000000000000 [ 398.314993][ T2155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.315009][ T2155] CR2: 000000110c2c5589 CR3: 0000000039f4a000 CR4: 00000000003526f0 [ 398.315031][ T2155] Call Trace: [ 398.315041][ T2155] [ 398.315059][ T2155] ieee80211_iface_work+0x20c/0x1010 [ 398.315132][ T2155] cfg80211_wiphy_work+0x29e/0x420 [ 398.315160][ T2155] ? process_scheduled_works+0x97a/0x1630 [ 398.315217][ T2155] process_scheduled_works+0xc3d/0x1630 [ 398.315293][ T2155] ? __pfx_process_scheduled_works+0x10/0x10 [ 398.315329][ T2155] ? assign_work+0x3cf/0x5d0 [ 398.315364][ T2155] worker_thread+0xa47/0xfb0 [ 398.315426][ T2155] kthread+0x38b/0x470 [ 398.315487][ T2155] ? __pfx_worker_thread+0x10/0x10 [ 398.315521][ T2155] ? __pfx_kthread+0x10/0x10 [ 398.315558][ T2155] ret_from_fork+0x514/0xb70 [ 398.315645][ T2155] ? __pfx_ret_from_fork+0x10/0x10 [ 398.315682][ T2155] ? __switch_to+0xc89/0x1420 [ 398.315739][ T2155] ? __pfx_kthread+0x10/0x10 [ 398.315775][ T2155] ret_from_fork_asm+0x1a/0x30 [ 398.315835][ T2155] [ 398.315864][ T2155] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 398.315883][ T2155] CPU: 0 UID: 0 PID: 2155 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 398.315911][ T2155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.315926][ T2155] Workqueue: events_unbound cfg80211_wiphy_work [ 398.315951][ T2155] Call Trace: [ 398.315962][ T2155] [ 398.315971][ T2155] vpanic+0x56d/0xa60 [ 398.316032][ T2155] ? __pfx__printk+0x10/0x10 [ 398.316058][ T2155] ? __pfx_vpanic+0x10/0x10 [ 398.316090][ T2155] ? is_bpf_text_address+0x292/0x2b0 [ 398.316139][ T2155] ? is_bpf_text_address+0x26/0x2b0 [ 398.316179][ T2155] panic+0xc5/0xd0 [ 398.316215][ T2155] ? __pfx_panic+0x10/0x10 [ 398.316261][ T2155] ? ret_from_fork_asm+0x1a/0x30 [ 398.316312][ T2155] __warn+0x315/0x4c0 [ 398.316345][ T2155] ? kcov_remote_start+0x5d6/0x710 [ 398.316374][ T2155] ? kcov_remote_start+0x5d6/0x710 [ 398.316396][ T2155] __report_bug+0x276/0x570 [ 398.316436][ T2155] ? kcov_remote_start+0x5d6/0x710 [ 398.316464][ T2155] ? __pfx___report_bug+0x10/0x10 [ 398.316497][ T2155] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 398.316563][ T2155] ? rt_spin_lock+0x1e2/0x400 [ 398.316589][ T2155] ? rt_spin_lock+0x1e2/0x400 [ 398.316613][ T2155] ? kcov_remote_start+0x5d6/0x710 [ 398.316635][ T2155] report_bug+0x16b/0x220 [ 398.316667][ T2155] ? kcov_remote_start+0x5d6/0x710 [ 398.316687][ T2155] ? kcov_remote_start+0x5d8/0x710 [ 398.316720][ T2155] handle_bug+0x9c/0x200 [ 398.316757][ T2155] exc_invalid_op+0x1a/0x50 [ 398.316791][ T2155] asm_exc_invalid_op+0x1a/0x20 [ 398.316816][ T2155] RIP: 0010:kcov_remote_start+0x5d6/0x710 [ 398.316839][ T2155] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 91 c9 01 03 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 ab fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 dc cd 88 09 89 c0 48 c7 c7 c0 32 a2 [ 398.316858][ T2155] RSP: 0018:ffffc900081379d8 EFLAGS: 00010202 [ 398.316878][ T2155] RAX: 0000000000000000 RBX: ffff88802bcd3e00 RCX: 8000000000000001 [ 398.316895][ T2155] RDX: 0000000000000000 RSI: ffffffff8bcb9e60 RDI: ffffffff8bcb9e20 [ 398.316912][ T2155] RBP: ffff88802613bc80 R08: ffffffff8b510e52 R09: 0000000000000000 [ 398.316928][ T2155] R10: 0000000000000000 R11: ffffffff8e1c3740 R12: dffffc0000000000 [ 398.316945][ T2155] R13: ffff888062589ef8 R14: 0000000000000000 R15: ffff8880628f1180 [ 398.316971][ T2155] ? rt_spin_lock+0x1e2/0x400 [ 398.317003][ T2155] ? kcov_remote_start+0xeb/0x710 [ 398.317030][ T2155] ieee80211_iface_work+0x20c/0x1010 [ 398.317078][ T2155] cfg80211_wiphy_work+0x29e/0x420 [ 398.317107][ T2155] ? process_scheduled_works+0x97a/0x1630 [ 398.317136][ T2155] process_scheduled_works+0xc3d/0x1630 [ 398.317202][ T2155] ? __pfx_process_scheduled_works+0x10/0x10 [ 398.317239][ T2155] ? assign_work+0x3cf/0x5d0 [ 398.317274][ T2155] worker_thread+0xa47/0xfb0 [ 398.317333][ T2155] kthread+0x38b/0x470 [ 398.317367][ T2155] ? __pfx_worker_thread+0x10/0x10 [ 398.317393][ T2155] ? __pfx_kthread+0x10/0x10 [ 398.317427][ T2155] ret_from_fork+0x514/0xb70 [ 398.317463][ T2155] ? __pfx_ret_from_fork+0x10/0x10 [ 398.317496][ T2155] ? __switch_to+0xc89/0x1420 [ 398.317529][ T2155] ? __pfx_kthread+0x10/0x10 [ 398.317564][ T2155] ret_from_fork_asm+0x1a/0x30 [ 398.317621][ T2155] [ 398.318381][ T2155] Kernel Offset: disabled