last executing test programs: 10m37.991870564s ago: executing program 0 (id=973): r0 = socket$key(0xf, 0x3, 0x2) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000280)=""/223, 0xdf}], 0x2, 0x1e}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) keyctl$clear(0x5, 0xfffffffffffffffe) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)=',$@\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x21, &(0x7f0000000280)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}, @jmp={0x5, 0x0, 0x9, 0x8, 0x14, 0x4, 0x10}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000080)='syzkaller\x00', 0x10001, 0x6e, &(0x7f0000000100)=""/110, 0x40e00, 0xde, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0, 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0)=r7, 0x6) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r8, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a00020700000000000000000000000500"], 0x38}}, 0x40000) 10m36.766776292s ago: executing program 0 (id=974): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000a0000010900010073797a3100000000400004803c0001800b000100657874686472090000000000000005400000001805000200830000000800014000000000080004400000005a080003400000001c0900020073797a3200000000140000001100010000000000000000000100000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x8, 0x5a3465) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3300000010001fff0000000001000000000000d7", @ANYRESOCT, @ANYRESHEX, @ANYRES64=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x81) socket(0x1, 0x803, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x2, 0xc7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 10m33.645774621s ago: executing program 0 (id=986): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001b40)=[{&(0x7f0000000180)=@in={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@sndinfo={0x20, 0x84, 0x2, {0x43a, 0x6, 0x3, 0xfffffffe, r2}}], 0x20, 0x4}], 0x1, 0xe0) 10m33.258774258s ago: executing program 0 (id=988): syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x8402, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r2, 0x5}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x4, 0x0, 0x281ee, 0x104}, [@IFLA_CARRIER={0x5, 0x21, 0x8}]}, 0x28}}, 0x4004850) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f00000002c0)={0x1, r7}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 10m31.577446677s ago: executing program 0 (id=994): r0 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x2c020400) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1030000, 0x1000, 0x5, 0x2000000}, 0x20) 10m31.098729531s ago: executing program 0 (id=995): syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0xffffffffffffffff) inotify_init() r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) r3 = epoll_create1(0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x0, 0x0, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 10m30.49234311s ago: executing program 32 (id=995): syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0xffffffffffffffff) inotify_init() r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) r3 = epoll_create1(0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x0, 0x0, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2.834887973s ago: executing program 4 (id=3905): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x132) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x1060, 0x0, 0x0, 0x20000}) 2.61211806s ago: executing program 4 (id=3907): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100e3"], 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 2.336141988s ago: executing program 4 (id=3912): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg$sock(r1, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80c1) 1.730975653s ago: executing program 5 (id=3924): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x46) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.641692382s ago: executing program 2 (id=3925): r0 = open(&(0x7f0000000040)='./file0\x00', 0x8381, 0x30) ftruncate(r0, 0x7ffe) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81706}], 0x1000000000000013) 1.51496169s ago: executing program 5 (id=3927): r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000000)=0x3, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2b, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000002700)="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", 0x5b5, 0x0, &(0x7f0000001280)={0x1c, 0x1c}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @val, {@ipv6}}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/29, 0xa}, 0xaad28798167df0f8) 1.435710859s ago: executing program 2 (id=3929): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000c80)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x4085) recvfrom$inet(r0, &(0x7f0000000180)=""/33, 0xfffffffffffffe55, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000)="82ca", 0x2, 0x8005, 0x0, 0x0) execve(0x0, 0x0, 0x0) 1.267091001s ago: executing program 4 (id=3932): r0 = socket(0x1c, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0xa, 0x0, 0x0) 1.250718932s ago: executing program 5 (id=3933): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000080)=0x2, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x10, 0x2}, 0x10) 1.238842523s ago: executing program 1 (id=3934): r0 = socket$inet(0x2, 0x1, 0x0) listen(r0, 0x9) ioctl$KDGETMODE(r0, 0x40046676, 0xfffffffffffffffd) 1.026952343s ago: executing program 5 (id=3936): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) getresuid(0x0, &(0x7f0000001000), &(0x7f0000001040)) 1.02674318s ago: executing program 1 (id=3937): r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) listen(r0, 0x5) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x400c2) 968.183784ms ago: executing program 4 (id=3939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x129a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x3, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x7, 0x0, 0x13, {[@window={0xb, 0x3}, @generic={0x0, 0x7, "d58838068b"}]}}, {"2244070000bc0be4bdf9da"}}}}}, 0x4d) 838.981049ms ago: executing program 5 (id=3940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 819.763072ms ago: executing program 3 (id=3941): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000005000200020000000800030006ac0f000500090001"], 0x58}}, 0x0) 805.58108ms ago: executing program 1 (id=3942): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000005000200020000000800030009ac0f0005"], 0x58}}, 0x0) 731.244774ms ago: executing program 5 (id=3943): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x83}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0003020200000203"]}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) creat(0x0, 0x182) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8932, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) 623.059757ms ago: executing program 1 (id=3944): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="000000000000000028001280090001007665746800000000180002"], 0x48}}, 0x0) 622.727936ms ago: executing program 3 (id=3945): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 622.480363ms ago: executing program 4 (id=3946): keyctl$describe(0x6, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000010120c050000000000000109022400010000c00009040040010300020009210700090122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_012={0x2, 0x0, 0x8, "3bf2"}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0) 594.182881ms ago: executing program 1 (id=3947): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 517.028567ms ago: executing program 3 (id=3948): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000480)="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", 0x1e9}, {&(0x7f0000000300)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790749e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9ddeccee9f654466794aee4d442d3e0ea68180697f37bb2c39f3ef3e6069fe", 0xbe}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x4044040) 471.043072ms ago: executing program 1 (id=3949): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 432.90834ms ago: executing program 2 (id=3950): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000f5d711805a6f39c9d00000008000300", @ANYRES32=r2, @ANYBLOB="0a0034000202020202020000040008010400cc0004001e01"], 0x34}}, 0x8060040) 430.73859ms ago: executing program 3 (id=3951): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf0, 0x3e, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0xeeee0000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x83, 0x0, 0x1}, {0x100000, 0x3000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x5, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0x8, 0x98, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x12}, 0x40010000, 0x0, 0x3000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000038803e08"]) 286.993464ms ago: executing program 2 (id=3952): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000005000200020000000800030002ac0f0005"], 0x58}}, 0x0) 203.56694ms ago: executing program 2 (id=3953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 144.690853ms ago: executing program 3 (id=3954): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x9, 0xd}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 105.510621ms ago: executing program 2 (id=3955): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x48000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg$inet6(r3, 0x0, 0x0, 0x4000880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$rds(r0, &(0x7f00000012c0)={&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=[@fadd={0x58, 0x114, 0x6, {{0x2, 0x3}, &(0x7f0000000340), 0x0, 0x3, 0x8, 0x7, 0x10001, 0x65, 0x6}}], 0x58, 0x20004814}, 0x0) 0s ago: executing program 3 (id=3956): r0 = inotify_init() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): es in process `syz.2.2716'. [ 903.373694][T16584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.461039][T16584] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.495663][ T8575] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.503931][ T8575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.584263][ T8575] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.591482][ T8575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.639111][T16805] TC_ACT_REPEAT abuse ? [ 903.643688][ C1] TC_ACT_REPEAT abuse ? [ 903.780929][ T5950] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input58 [ 904.180099][ T9] usb 5-1: USB disconnect, device number 2 [ 904.180207][ C1] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 904.345937][T16584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.808043][ T5965] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 904.871046][T16584] veth0_vlan: entered promiscuous mode [ 904.894707][T16805] TC_ACT_REPEAT abuse ? [ 904.899347][ C1] TC_ACT_REPEAT abuse ? [ 904.988455][ T5952] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 904.996115][ T5965] usb 2-1: Using ep0 maxpacket: 32 [ 905.023680][ T5965] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.049671][T16857] bond0: entered promiscuous mode [ 905.064438][T16857] bond_slave_0: entered promiscuous mode [ 905.070642][ T5965] usb 2-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 905.086966][T16857] batadv0: entered promiscuous mode [ 905.093180][ T5965] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 905.105597][T16857] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 905.112389][ T5965] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 905.130253][ T5965] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 905.171926][T16584] veth1_vlan: entered promiscuous mode [ 905.209162][ T5952] usb 6-1: not running at top speed; connect to a high speed hub [ 905.227531][ T5965] usb 2-1: config 0 interface 0 has no altsetting 0 [ 905.240081][ T5965] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 905.259060][ T5952] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 905.278506][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.293090][ T5952] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 905.311864][ T5952] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 905.330087][ T5965] usb 2-1: config 0 descriptor?? [ 905.355778][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.403497][ T5952] usb 6-1: Product: syz [ 905.403857][T16584] veth0_macvtap: entered promiscuous mode [ 905.416880][ T5952] usb 6-1: Manufacturer: 㹗䯪曂Ç⊒㛔垧㫏ꗽﺾ騏聙〵햿깹楏鹷鈓ݓ矯┭䟫㔶탈Ộ煺솠炘♵奀㰮㥂쾚忬ꅒ庐뮧립곱ﶛ캃ᵆ쒨எ䖧謣旇⪍昦⦆⃐윕䛜須؂旸邰嬇ۋ銉护끺⾳⚍㧓㺛痝⌌봺끩熈趕 [ 905.531353][ T5952] usb 6-1: SerialNumber: syz [ 905.567707][ T5928] psmouse serio3: Failed to reset mouse on : -5 [ 905.596688][T16584] veth1_macvtap: entered promiscuous mode [ 905.768658][T16584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 905.791283][T16584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 905.812408][ T3167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.901216][ T3167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.931475][ T3167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.957222][ T3167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.988520][ T5952] usb 6-1: 0:2 : does not exist [ 906.034914][T16846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2720'. [ 906.075369][ T5952] usb 6-1: USB disconnect, device number 82 [ 906.085991][T16805] TC_ACT_REPEAT abuse ? [ 906.090628][ C1] TC_ACT_REPEAT abuse ? [ 906.292594][T16802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.325199][T16802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.467459][T16805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.595607][T16805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.723911][T16870] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2724'. [ 906.808645][T16870] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2724'. [ 907.087887][T16870] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2724'. [ 907.097185][T16870] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2724'. [ 907.125773][T12437] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 907.299600][T12437] usb 6-1: Using ep0 maxpacket: 32 [ 907.319373][T12437] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 907.329437][T12437] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.340565][ T8575] TC_ACT_REPEAT abuse ? [ 907.345096][ C1] TC_ACT_REPEAT abuse ? [ 907.391022][T12437] usb 6-1: config 0 descriptor?? [ 907.426196][T12437] gspca_main: sunplus-2.14.0 probing 041e:400b [ 907.942302][T16870] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2724'. [ 907.961681][T16870] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2724'. [ 907.995657][T12437] gspca_sunplus: reg_w_riv err -71 [ 908.028367][T12437] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 908.055245][T12437] usb 6-1: USB disconnect, device number 83 [ 908.153217][ T5965] usbhid 2-1:0.0: can't add hid device: -71 [ 908.162725][ T5965] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 908.246644][ T5965] usb 2-1: USB disconnect, device number 25 [ 908.343990][T16890] syz.2.2725 (16890): drop_caches: 2 [ 908.672245][T16803] TC_ACT_REPEAT abuse ? [ 908.677029][ C1] TC_ACT_REPEAT abuse ? [ 909.158088][ T5965] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 909.175118][T16915] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2731'. [ 909.278742][ T5952] TC_ACT_REPEAT abuse ? [ 909.377697][ T5928] misc userio: Buffer overflowed, userio client isn't keeping up [ 909.439018][ T5965] usb 6-1: Using ep0 maxpacket: 16 [ 909.452035][ T5965] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.464182][ T5965] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 909.529709][ T5965] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 909.557406][ T5965] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 909.604878][ T5965] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 909.654150][ T5965] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 909.663687][ T5965] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 909.686221][ T5965] usb 6-1: Manufacturer: syz [ 909.722815][ T5965] usb 6-1: config 0 descriptor?? [ 909.888051][T16802] TC_ACT_REPEAT abuse ? [ 909.892650][ C1] TC_ACT_REPEAT abuse ? [ 910.158110][ T5965] rc_core: IR keymap rc-hauppauge not found [ 910.170234][ T5965] Registered IR keymap rc-empty [ 910.175346][ T5965] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.197748][ T5965] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.226425][ T5965] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 910.478733][ T5965] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input61 [ 910.488648][ T5928] input: PS/2 Generic Mouse as /devices/serio3/input/input60 [ 910.710117][ T5928] psmouse serio3: Failed to enable mouse on [ 910.845884][ T5965] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.877793][ T5965] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 911.169009][ T5965] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 911.379001][ T5965] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 911.497786][ T5965] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 911.507869][T16957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2735'. [ 911.550316][T16802] TC_ACT_REPEAT abuse ? [ 911.554883][ C1] TC_ACT_REPEAT abuse ? [ 911.557830][ T5965] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 911.707813][ T5965] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 911.737737][ T5965] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 911.807002][ T5965] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 911.861590][ T5965] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 911.993949][ T5965] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 912.024168][ T5965] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 912.202992][ T5965] usb 6-1: USB disconnect, device number 84 [ 912.262582][T16970] netlink: 'syz.4.2737': attribute type 1 has an invalid length. [ 912.376453][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2737'. [ 912.948242][ T8575] TC_ACT_REPEAT abuse ? [ 912.952644][ C1] TC_ACT_REPEAT abuse ? [ 913.828867][ T5952] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 914.044799][ T5952] usb 4-1: Using ep0 maxpacket: 16 [ 914.075484][ T5952] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.110175][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 914.134071][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 914.146035][T16997] loop7: detected capacity change from 0 to 16384 [ 914.184857][ T5952] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 914.218930][T16802] TC_ACT_REPEAT abuse ? [ 914.223335][ C1] TC_ACT_REPEAT abuse ? [ 914.231423][ T5952] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 914.365175][T17006] netlink: 'syz.4.2744': attribute type 1 has an invalid length. [ 914.403046][T17006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2744'. [ 914.431838][ T5952] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 914.449125][ T5952] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 914.468834][ T5952] usb 4-1: Manufacturer: syz [ 914.484659][ T5952] usb 4-1: config 0 descriptor?? [ 914.760163][ T5952] rc_core: IR keymap rc-hauppauge not found [ 914.799245][T17000] loop7: detected capacity change from 16384 to 0 [ 914.805836][ T5952] Registered IR keymap rc-empty [ 914.809904][ C0] I/O error, dev loop7, sector 6400 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 914.824673][ C0] I/O error, dev loop7, sector 6656 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 914.900531][ T5952] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.034518][ T5952] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.088933][ T5952] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 915.111254][ T5952] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input62 [ 915.144428][ T5952] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.249561][T17012] netlink: 'syz.1.2745': attribute type 1 has an invalid length. [ 915.287639][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2745'. [ 915.327771][ T5952] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.528560][T16802] TC_ACT_REPEAT abuse ? [ 915.533014][ C1] TC_ACT_REPEAT abuse ? [ 915.648300][ T5952] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.670760][ T5952] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.767893][ T5952] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.782247][T17015] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2746'. [ 915.804972][T17015] netlink: 'syz.5.2746': attribute type 1 has an invalid length. [ 915.827762][ T5952] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.849368][ T5952] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.887783][ T5952] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 915.907816][ T5952] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 916.033327][ T5952] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 916.140896][ T5952] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 916.187658][ T5952] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 916.241928][ T5952] usb 4-1: USB disconnect, device number 44 [ 916.708802][T16805] TC_ACT_REPEAT abuse ? [ 916.713240][ C1] TC_ACT_REPEAT abuse ? [ 916.804482][ T5965] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 916.855511][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803377dc00: rx timeout, send abort [ 916.863899][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803377d000: rx timeout, send abort [ 916.873027][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803377dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 916.887451][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803377d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 916.987732][ T5965] usb 5-1: Using ep0 maxpacket: 8 [ 917.092523][ T5965] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 917.109823][ T5965] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 917.141747][ T5965] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 917.216383][ T5965] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 917.240332][ T5965] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 917.260402][ T5965] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 917.270264][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.393302][T17042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2755'. [ 917.504151][ T5965] usb 5-1: usb_control_msg returned -32 [ 917.512971][ T5965] usbtmc 5-1:16.0: can't read capabilities [ 917.872677][T17047] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 918.040117][T16802] TC_ACT_REPEAT abuse ? [ 918.044533][ C0] TC_ACT_REPEAT abuse ? [ 918.112922][ T5928] usb 5-1: USB disconnect, device number 3 [ 918.527502][T17054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2758'. [ 918.543474][T17054] netlink: 'syz.3.2758': attribute type 1 has an invalid length. [ 918.840963][T17062] netlink: 'syz.3.2760': attribute type 1 has an invalid length. [ 918.865675][T17062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2760'. [ 918.878352][T15785] TC_ACT_REPEAT abuse ? [ 919.229974][T17068] netlink: 'syz.4.2762': attribute type 1 has an invalid length. [ 919.378185][T16803] TC_ACT_REPEAT abuse ? [ 919.382770][ C1] TC_ACT_REPEAT abuse ? [ 919.405945][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2762'. [ 919.481843][T17073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2761'. [ 921.140182][ T1094] TC_ACT_REPEAT abuse ? [ 921.144583][ C0] TC_ACT_REPEAT abuse ? [ 921.257914][ T5965] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 921.421228][ T5965] usb 4-1: Using ep0 maxpacket: 8 [ 921.484796][ T5965] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 921.517745][ T5965] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 921.611825][ T5965] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 921.638505][ T5965] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 921.667715][ T5965] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 921.697849][ T5928] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 921.717207][ T5965] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 921.947750][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.008020][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 922.022604][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.051823][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.068146][ T5928] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 922.078321][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.098561][ T5928] usb 2-1: config 0 descriptor?? [ 922.120976][T17093] input: syz0 as /devices/virtual/input/input63 [ 922.192753][ T5965] usb 4-1: usb_control_msg returned -32 [ 922.262979][ T5965] usbtmc 4-1:16.0: can't read capabilities [ 922.324875][ T5965] usb 4-1: USB disconnect, device number 45 [ 922.490027][T16805] TC_ACT_REPEAT abuse ? [ 922.494585][ C0] TC_ACT_REPEAT abuse ? [ 922.765051][T17082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.779867][T17082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.906215][T17082] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 922.913154][T17082] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 923.039173][T17082] vhci_hcd vhci_hcd.0: Device attached [ 923.056913][T17098] vhci_hcd: connection closed [ 923.061838][ T5928] usbhid 2-1:0.0: can't add hid device: -71 [ 923.073459][T16805] vhci_hcd: stop threads [ 923.170333][ T5928] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 923.225720][T16805] vhci_hcd: release socket [ 923.287168][ T5928] usb 2-1: USB disconnect, device number 26 [ 923.287480][T16805] vhci_hcd: disconnect device [ 923.293283][ T5943] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 923.387922][ T5952] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 923.408010][ T5943] usb 35-1: enqueue for inactive port 0 [ 923.518388][ T5943] vhci_hcd: vhci_device speed not set [ 923.586581][ T5952] usb 4-1: config 0 has no interfaces? [ 923.592686][ T5952] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 924.162284][T16803] TC_ACT_REPEAT abuse ? [ 924.163551][ T43] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 924.166923][ C0] TC_ACT_REPEAT abuse ? [ 924.207915][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.238161][ T5871] Bluetooth: hci5: command 0x0c1a tx timeout [ 924.286875][ T5952] usb 4-1: config 0 descriptor?? [ 924.438079][ T43] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 924.607927][ T5952] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 924.885604][ T5952] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 924.895894][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.964154][ T5952] usb 2-1: Product: syz [ 924.979284][ T5952] usb 2-1: Manufacturer: syz [ 925.015258][ T5952] usb 2-1: SerialNumber: syz [ 925.053881][ T5952] usb 2-1: config 0 descriptor?? [ 925.096720][ T5952] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 925.441201][T16805] TC_ACT_REPEAT abuse ? [ 925.445943][ C1] TC_ACT_REPEAT abuse ? [ 925.731092][T17130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 925.769314][T17130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.778632][T17130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.317266][ T5965] usb 4-1: USB disconnect, device number 46 [ 926.455515][ T43] usb 2-1: USB disconnect, device number 27 [ 926.547725][T12437] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 926.701120][T12437] usb 5-1: Using ep0 maxpacket: 8 [ 926.711306][T12437] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 926.721044][T12437] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 926.740607][T12437] usb 5-1: Product: syz [ 926.744958][T12437] usb 5-1: Manufacturer: syz [ 926.755197][T12437] usb 5-1: SerialNumber: syz [ 926.773301][T12437] usb 5-1: config 0 descriptor?? [ 926.852636][T12437] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 926.977886][ T3167] TC_ACT_REPEAT abuse ? [ 926.982498][ C0] TC_ACT_REPEAT abuse ? [ 927.285888][T17141] loop2: detected capacity change from 0 to 7 [ 927.352938][T17141] loop2: [ 927.365447][T17141] loop2: partition table partially beyond EOD, truncated [ 927.389481][T12437] gspca_zc3xx: reg_w_i err -110 [ 927.488811][T12437] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 927.991782][T17154] input: syz0 as /devices/virtual/input/input64 [ 928.140853][ T43] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 928.309752][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 928.316873][ T43] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 928.326014][ T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 928.349858][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 928.380896][ T3167] TC_ACT_REPEAT abuse ? [ 928.385495][ C1] TC_ACT_REPEAT abuse ? [ 928.392888][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 928.479216][ T5952] TC_ACT_REPEAT abuse ? [ 928.681783][T17160] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2786'. [ 928.699644][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 928.785425][ T5235] loop2: [ 928.798631][ T5235] loop2: partition table partially beyond EOD, truncated [ 928.842092][ T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 928.894737][ T5235] loop2: [ 928.898667][ T5235] loop2: partition table partially beyond EOD, truncated [ 928.964475][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.180824][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 929.180842][ T30] audit: type=1326 audit(1757852195.520:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17161 comm="syz.2.2787" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe6f98eba9 code=0x0 [ 929.299582][ T43] usb 4-1: usb_control_msg returned -32 [ 929.305239][ T43] usbtmc 4-1:16.0: can't read capabilities [ 929.540490][ T43] usb 5-1: USB disconnect, device number 4 [ 929.618162][T16802] TC_ACT_REPEAT abuse ? [ 929.622776][ C0] TC_ACT_REPEAT abuse ? [ 929.667794][T17167] usbtmc 4-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 929.879591][ T43] usb 4-1: USB disconnect, device number 47 [ 930.305053][T17180] input: syz0 as /devices/virtual/input/input65 [ 930.330553][T17177] fuse: Bad value for 'rootmode' [ 930.657715][ T43] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 930.839988][ T43] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 930.849733][ T43] usb 2-1: New USB device strings: Mfr=1, Product=9, SerialNumber=3 [ 930.858386][ T43] usb 2-1: Product: syz [ 930.864124][ T43] usb 2-1: Manufacturer: syz [ 930.870583][ T43] usb 2-1: SerialNumber: syz [ 930.907236][ T43] usb 2-1: config 0 descriptor?? [ 930.910272][ T1094] TC_ACT_REPEAT abuse ? [ 930.916870][ C0] TC_ACT_REPEAT abuse ? [ 930.931898][ T43] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 931.101707][ T5965] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 931.358729][ T5965] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 931.395753][ T5965] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 931.476136][ T5965] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 932.267970][ T43] gspca_sunplus: reg_r err -110 [ 932.273447][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.277722][ T43] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 932.279798][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.296524][ T5965] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 932.640766][ T5965] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 932.736921][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 932.772609][ T5965] usb 4-1: Product: syz [ 932.800711][ T5965] usb 4-1: Manufacturer: syz [ 932.893958][ T5965] cdc_wdm 4-1:1.0: skipping garbage [ 932.960109][ T1094] TC_ACT_REPEAT abuse ? [ 932.964640][ C1] TC_ACT_REPEAT abuse ? [ 932.984854][ T5965] cdc_wdm 4-1:1.0: skipping garbage [ 933.087441][ T5965] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 933.173532][ T5965] cdc_wdm 4-1:1.0: Unknown control protocol [ 933.348240][T17202] netlink: 'syz.4.2794': attribute type 1 has an invalid length. [ 933.406289][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2794'. [ 933.538169][T17203] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 933.695705][ T5965] usb 4-1: USB disconnect, device number 48 [ 933.809888][ T43] usb 2-1: USB disconnect, device number 28 [ 934.208371][ T3167] TC_ACT_REPEAT abuse ? [ 934.212786][ C0] TC_ACT_REPEAT abuse ? [ 934.579885][ T5965] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 934.737904][ T5965] usb 6-1: Using ep0 maxpacket: 8 [ 934.748211][ T5965] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 934.756481][ T5965] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 934.786788][ T5965] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 934.834002][ T5965] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 934.861883][ T5965] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 934.930369][T17224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.940012][T17224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.999165][ T5965] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 935.048702][ T5965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.128927][ T5952] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 935.384305][T16802] TC_ACT_REPEAT abuse ? [ 935.388952][ C1] TC_ACT_REPEAT abuse ? [ 935.391012][ T5965] usb 6-1: usb_control_msg returned -32 [ 935.609853][ T5965] usbtmc 6-1:16.0: can't read capabilities [ 935.627832][ T5952] usb 4-1: Using ep0 maxpacket: 8 [ 935.647761][ T5952] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 935.666319][ T5952] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 935.704897][ T5952] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 935.746988][T17230] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 935.756346][ T5965] usb 6-1: USB disconnect, device number 85 [ 935.787741][ T5952] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 935.863893][ T5952] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 935.893773][ T5952] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 935.907489][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.160383][ T5952] usb 4-1: usb_control_msg returned -32 [ 936.185583][ T5952] usbtmc 4-1:16.0: can't read capabilities [ 936.299661][T17234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2805'. [ 936.503418][T17241] usbtmc 4-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 936.706572][ T5952] usb 4-1: USB disconnect, device number 49 [ 936.908378][T17251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 936.938980][ T1094] TC_ACT_REPEAT abuse ? [ 936.943554][ C0] TC_ACT_REPEAT abuse ? [ 937.446863][T17266] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2819'. [ 938.080067][ T1094] TC_ACT_REPEAT abuse ? [ 938.084677][ C0] TC_ACT_REPEAT abuse ? [ 938.089282][ T9] TC_ACT_REPEAT abuse ? [ 938.406667][T17305] blktrace: Concurrent blktraces are not allowed on loop4 [ 938.568740][T17308] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 938.580738][T17311] binder: 17309:17311 unknown command 0 [ 938.596838][T17311] binder: 17309:17311 ioctl c0306201 200000000080 returned -22 [ 938.613935][T17313] bridge1: entered allmulticast mode [ 939.208711][ T1094] TC_ACT_REPEAT abuse ? [ 939.213316][ C0] TC_ACT_REPEAT abuse ? [ 939.377731][ T9] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 939.404462][T17342] vxcan1: entered promiscuous mode [ 939.423514][T17342] team0: Device vxcan1 is of different type [ 939.532713][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 939.554158][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 939.591393][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 939.606914][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.621691][T17347] tipc: Enabling of bearer rejected, failed to enable media [ 939.634386][T17332] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 939.662185][T17349] binder: 17348:17349 unknown command 0 [ 939.672500][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 939.684100][T17349] binder: 17348:17349 ioctl c0306201 200000000080 returned -22 [ 940.049789][ T5943] usb 6-1: USB disconnect, device number 86 [ 940.401996][T16802] TC_ACT_REPEAT abuse ? [ 940.406536][ C1] TC_ACT_REPEAT abuse ? [ 941.180003][ T5185] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 941.190468][ T5185] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 941.207165][ T5185] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 941.224105][ T5185] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 941.234623][ T5185] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 941.274551][ T5871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 941.292036][ T5871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 941.306385][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 941.324610][ T5871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 941.337422][ T5871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 941.463444][T17380] kvm: pic: non byte write [ 941.489336][T17380] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2514866599 (321902924672 ns) > initial count (212992 ns). Using initial count to start timer. [ 941.548569][ T3167] TC_ACT_REPEAT abuse ? [ 941.553200][ C0] TC_ACT_REPEAT abuse ? [ 941.614676][T17387] binder: 17385:17387 ioctl c0306201 200000000240 returned -14 [ 941.794954][T17393] input: syz0 as /devices/virtual/input/input66 [ 941.917794][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 941.925938][ T9] TC_ACT_REPEAT abuse ? [ 942.095016][T17405] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 942.101795][T17405] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 942.252480][T16803] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 942.264399][T16803] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.293857][T17409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2875'. [ 942.303216][T17409] netlink: 'syz.3.2875': attribute type 19 has an invalid length. [ 942.311725][T17409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2875'. [ 942.342714][T17409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2875'. [ 942.355803][T17409] netlink: 'syz.3.2875': attribute type 19 has an invalid length. [ 942.369706][T17409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2875'. [ 942.408680][T16803] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 942.419248][T16803] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.435919][T16805] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 942.445695][T16805] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 942.504600][T16805] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 942.532113][T16805] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 942.612717][T16803] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 942.624158][T16803] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.651334][T17383] chnl_net:caif_netlink_parms(): no params data found [ 942.719939][T16805] TC_ACT_REPEAT abuse ? [ 942.724566][ C1] TC_ACT_REPEAT abuse ? [ 942.745002][T16803] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 942.776543][T16803] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.945506][T17383] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.972740][T17383] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.985988][T17383] bridge_slave_0: entered allmulticast mode [ 942.999607][T17383] bridge_slave_0: entered promiscuous mode [ 943.026939][T17383] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.058765][T17383] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.066041][T17383] bridge_slave_1: entered allmulticast mode [ 943.079435][T17383] bridge_slave_1: entered promiscuous mode [ 943.195857][T17442] binder: BINDER_SET_CONTEXT_MGR already set [ 943.203572][T17442] binder: 17439:17442 ioctl 4018620d 2000000002c0 returned -16 [ 943.281452][T17383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.335648][T17383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.357879][ T5185] Bluetooth: hci4: command tx timeout [ 943.589343][T17383] team0: Port device team_slave_0 added [ 943.599745][T16803] macsec0: left allmulticast mode [ 943.604808][T16803] veth1_macvtap: left allmulticast mode [ 943.631632][T16803] macsec0: left promiscuous mode [ 943.654085][T16803] bridge0: port 3(macsec0) entered disabled state [ 943.655722][T17454] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 943.702907][T16803] bridge_slave_1: left allmulticast mode [ 943.708960][T16803] bridge_slave_1: left promiscuous mode [ 943.714743][T16803] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.812924][T16803] bridge_slave_0: left allmulticast mode [ 943.822955][T16803] bridge_slave_0: left promiscuous mode [ 943.838331][T16803] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.850351][ T8575] TC_ACT_REPEAT abuse ? [ 945.106256][T17500] binder: 17499:17500 unknown command 0 [ 945.111955][T17500] binder: 17499:17500 ioctl c0306201 200000000080 returned -22 [ 945.437748][ T5185] Bluetooth: hci4: command tx timeout [ 945.660232][T16803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.671320][T16803] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 945.683971][T16803] bond0 (unregistering): Released all slaves [ 945.696882][T16803] bond1 (unregistering): Released all slaves [ 945.710543][T16803] bond2 (unregistering): Released all slaves [ 945.726325][T16803] bond3 (unregistering): Released all slaves [ 945.739898][T16803] bond4 (unregistering): Released all slaves [ 945.756883][T16803] bond5 (unregistering): Released all slaves [ 945.777126][T16803] bond6 (unregistering): Released all slaves [ 945.795630][T16803] bond7 (unregistering): Released all slaves [ 945.810435][T16803] bond8 (unregistering): Released all slaves [ 945.824196][T16803] bond9 (unregistering): Released all slaves [ 945.837740][T16803] bond10 (unregistering): Released all slaves [ 945.853551][T16803] bond11 (unregistering): Released all slaves [ 945.874248][T16803] bond12 (unregistering): Released all slaves [ 945.886839][T16803] bond13 (unregistering): Released all slaves [ 945.902332][T16803] bond14 (unregistering): Released all slaves [ 945.916207][T16803] bond15 (unregistering): Released all slaves [ 945.937095][T16803] bond16 (unregistering): Released all slaves [ 945.954122][T16803] bond17 (unregistering): Released all slaves [ 945.970608][T17383] team0: Port device team_slave_1 added [ 946.139726][ T8575] net_ratelimit: 3 callbacks suppressed [ 946.139745][ T8575] TC_ACT_REPEAT abuse ? [ 946.149982][ C1] TC_ACT_REPEAT abuse ? [ 946.220956][T17383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.244300][T17383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.270246][ C0] vkms_vblank_simulate: vblank timer overrun [ 946.366186][T17383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.424874][T17383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.442315][T17383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.468252][ C0] vkms_vblank_simulate: vblank timer overrun [ 946.506473][T17383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.567751][T16803] tipc: Left network mode [ 946.811139][T17533] TC_ACT_REPEAT abuse ? [ 946.828698][T17383] hsr_slave_0: entered promiscuous mode [ 946.835451][T17383] hsr_slave_1: entered promiscuous mode [ 946.854338][T17383] debugfs: 'hsr0' already exists in 'hsr' [ 946.860762][T17383] Cannot create hsr debugfs directory [ 947.053669][T17541] netlink: 340 bytes leftover after parsing attributes in process `syz.3.2925'. [ 947.099617][T17541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2925'. [ 947.290199][ T3167] TC_ACT_REPEAT abuse ? [ 947.294776][ C1] TC_ACT_REPEAT abuse ? [ 947.518035][ T5185] Bluetooth: hci4: command tx timeout [ 947.671394][T16803] hsr_slave_0: left promiscuous mode [ 947.687068][T16803] hsr_slave_1: left promiscuous mode [ 947.709254][T16803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 947.742899][T16803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 947.782168][T16803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 947.808288][T16803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 947.906219][T16803] veth1_macvtap: left promiscuous mode [ 947.924083][T16803] veth0_macvtap: left promiscuous mode [ 948.335373][T17530] syz.1.2921: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 948.355278][T17530] CPU: 0 UID: 0 PID: 17530 Comm: syz.1.2921 Not tainted syzkaller #0 PREEMPT(full) [ 948.355305][T17530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 948.355319][T17530] Call Trace: [ 948.355328][T17530] [ 948.355337][T17530] dump_stack_lvl+0x189/0x250 [ 948.355371][T17530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 948.355397][T17530] ? __pfx__printk+0x10/0x10 [ 948.355427][T17530] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 948.355452][T17530] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 948.355479][T17530] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 948.355506][T17530] warn_alloc+0x214/0x310 [ 948.355548][T17530] ? __pfx_warn_alloc+0x10/0x10 [ 948.355589][T17530] ? __get_vm_area_node+0x28f/0x300 [ 948.355618][T17530] ? hash_netport4_resize+0x235/0x1b60 [ 948.355649][T17530] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 948.355709][T17530] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 948.355746][T17530] ? rcu_is_watching+0x15/0xb0 [ 948.355769][T17530] ? hash_netport4_resize+0x235/0x1b60 [ 948.355793][T17530] ? hash_netport4_resize+0x235/0x1b60 [ 948.355817][T17530] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 948.355846][T17530] ? hash_netport4_resize+0x235/0x1b60 [ 948.355875][T17530] hash_netport4_resize+0x235/0x1b60 [ 948.355898][T17530] ? hash_netport4_uadt+0xc97/0xf30 [ 948.355928][T17530] ? __pfx_hash_netport4_add+0x10/0x10 [ 948.355952][T17530] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 948.355988][T17530] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 948.356022][T17530] call_ad+0x44b/0xb00 [ 948.356071][T17530] ? __pfx_call_ad+0x10/0x10 [ 948.356122][T17530] ? __nla_parse+0x40/0x60 [ 948.356148][T17530] ip_set_ad+0x791/0x930 [ 948.356189][T17530] ? __pfx_ip_set_ad+0x10/0x10 [ 948.356261][T17530] nfnetlink_rcv_msg+0xb4d/0x1130 [ 948.356294][T17530] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 948.356345][T17530] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 948.356407][T17530] ? __lock_acquire+0xab9/0xd20 [ 948.356454][T17530] netlink_rcv_skb+0x205/0x470 [ 948.356477][T17530] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 948.356509][T17530] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 948.356543][T17530] ? bpf_lsm_capable+0x9/0x20 [ 948.356571][T17530] ? security_capable+0x7e/0x2e0 [ 948.356611][T17530] nfnetlink_rcv+0x26a/0x2520 [ 948.356642][T17530] ? is_bpf_text_address+0x26/0x2b0 [ 948.356676][T17530] ? kernel_text_address+0xa5/0xe0 [ 948.356706][T17530] ? __kernel_text_address+0xd/0x40 [ 948.356734][T17530] ? unwind_get_return_address+0x4d/0x90 [ 948.356758][T17530] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 948.356783][T17530] ? arch_stack_walk+0xfc/0x150 [ 948.356824][T17530] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 948.356855][T17530] ? stack_depot_save_flags+0x40/0x860 [ 948.356890][T17530] ? __lock_acquire+0xab9/0xd20 [ 948.356944][T17530] ? __lock_acquire+0xab9/0xd20 [ 948.356983][T17530] ? netlink_deliver_tap+0x2e/0x1b0 [ 948.357013][T17530] ? netlink_deliver_tap+0x2e/0x1b0 [ 948.357043][T17530] netlink_unicast+0x82c/0x9e0 [ 948.357084][T17530] ? __pfx_netlink_unicast+0x10/0x10 [ 948.357123][T17530] ? netlink_sendmsg+0x642/0xb30 [ 948.357142][T17530] ? skb_put+0x11b/0x210 [ 948.357170][T17530] netlink_sendmsg+0x805/0xb30 [ 948.357202][T17530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 948.357228][T17530] ? aa_sock_msg_perm+0xf1/0x1d0 [ 948.357251][T17530] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 948.357273][T17530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 948.357296][T17530] __sock_sendmsg+0x21c/0x270 [ 948.357331][T17530] ____sys_sendmsg+0x505/0x830 [ 948.357364][T17530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 948.357399][T17530] ? import_iovec+0x74/0xa0 [ 948.357430][T17530] ___sys_sendmsg+0x21f/0x2a0 [ 948.357458][T17530] ? __pfx____sys_sendmsg+0x10/0x10 [ 948.357523][T17530] ? __fget_files+0x2a/0x420 [ 948.357541][T17530] ? __fget_files+0x3a0/0x420 [ 948.357567][T17530] __x64_sys_sendmsg+0x19b/0x260 [ 948.357592][T17530] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 948.357626][T17530] ? rcu_is_watching+0x15/0xb0 [ 948.357648][T17530] ? do_syscall_64+0xbe/0x3b0 [ 948.357681][T17530] do_syscall_64+0xfa/0x3b0 [ 948.357702][T17530] ? lockdep_hardirqs_on+0x9c/0x150 [ 948.357722][T17530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.357743][T17530] ? clear_bhb_loop+0x60/0xb0 [ 948.357769][T17530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.357789][T17530] RIP: 0033:0x7f6fd8d8eba9 [ 948.357807][T17530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.357824][T17530] RSP: 002b:00007f6fd9b5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 948.357845][T17530] RAX: ffffffffffffffda RBX: 00007f6fd8fd5fa0 RCX: 00007f6fd8d8eba9 [ 948.357859][T17530] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 948.357871][T17530] RBP: 00007f6fd8e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 948.357883][T17530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 948.357895][T17530] R13: 00007f6fd8fd6038 R14: 00007f6fd8fd5fa0 R15: 00007f6fd90ffa28 [ 948.357923][T17530] [ 948.841492][ C0] vkms_vblank_simulate: vblank timer overrun [ 948.850564][ T64] TC_ACT_REPEAT abuse ? [ 948.855143][ C1] TC_ACT_REPEAT abuse ? [ 948.922053][T17530] Mem-Info: [ 948.925359][T17530] active_anon:7677 inactive_anon:13 isolated_anon:0 [ 948.925359][T17530] active_file:17907 inactive_file:44398 isolated_file:0 [ 948.925359][T17530] unevictable:768 dirty:3331 writeback:0 [ 948.925359][T17530] slab_reclaimable:7338 slab_unreclaimable:126911 [ 948.925359][T17530] mapped:31115 shmem:1924 pagetables:1596 [ 948.925359][T17530] sec_pagetables:0 bounce:0 [ 948.925359][T17530] kernel_misc_reclaimable:0 [ 948.925359][T17530] free:1259309 free_pcp:13048 free_cma:0 [ 948.972603][T17530] Node 0 active_anon:30632kB inactive_anon:52kB active_file:69560kB inactive_file:175340kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124412kB dirty:11272kB writeback:0kB shmem:6156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13892kB pagetables:6268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 948.972819][T17530] Node 1 active_anon:132kB inactive_anon:0kB active_file:2068kB inactive_file:2252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:2052kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 948.972874][T17530] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 948.972946][T17530] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 948.972994][T17530] Node 0 DMA32 free:1133008kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30584kB inactive_anon:52kB active_file:69560kB inactive_file:173764kB unevictable:1536kB writepending:11268kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:42576kB local_pcp:13880kB free_cma:0kB [ 948.973057][T17530] lowmem_reserve[]: 0 0 1 1 1 [ 948.973101][T17530] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 948.973160][T17530] lowmem_reserve[]: 0 0 0 0 0 [ 948.973205][T17530] Node 1 Normal free:3888948kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:132kB inactive_anon:0kB active_file:2068kB inactive_file:2252kB unevictable:1536kB writepending:2052kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9760kB local_pcp:4384kB free_cma:0kB [ 948.973267][T17530] lowmem_reserve[]: 0 0 0 0 0 [ 948.973312][T17530] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 948.973451][T17530] Node 0 DMA32: 978*4kB (UME) 1021*8kB (UME) 490*16kB (UME) 920*32kB (UME) 308*64kB (UME) 200*128kB (UME) 94*256kB (UME) 39*512kB (UME) 35*1024kB (UME) 4*2048kB (U) 232*4096kB (M) = 1133008kB [ 948.973645][T17530] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 948.973894][T17530] Node 1 Normal: 201*4kB (UME) 54*8kB (UE) 50*16kB (UE) 234*32kB (UME) 76*64kB (UME) 14*128kB (UE) 6*256kB (UME) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 944*4096kB (M) = 3888948kB [ 948.974093][T17530] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 948.974112][T17530] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 948.974131][T17530] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 948.974149][T17530] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 948.974167][T17530] 64237 total pagecache pages [ 948.974180][T17530] 13 pages in swap cache [ 948.974188][T17530] Free swap = 124944kB [ 948.974197][T17530] Total swap = 124996kB [ 948.974206][T17530] 2097051 pages RAM [ 948.974216][T17530] 0 pages HighMem/MovableOnly [ 948.974225][T17530] 425671 pages reserved [ 948.974234][T17530] 0 pages cma reserved [ 949.348000][T16803] team0 (unregistering): Port device team_slave_1 removed [ 949.417482][T16803] team0 (unregistering): Port device team_slave_0 removed [ 949.613212][ T5185] Bluetooth: hci4: command tx timeout [ 950.068350][T16805] TC_ACT_REPEAT abuse ? [ 950.073097][ C0] TC_ACT_REPEAT abuse ? [ 950.482534][ T30] audit: type=1326 audit(1757852216.820:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17590 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 950.572255][ T30] audit: type=1326 audit(1757852216.820:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17590 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 950.637708][ T30] audit: type=1326 audit(1757852216.820:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17590 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 950.733476][ T30] audit: type=1326 audit(1757852216.820:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17590 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 950.850832][ T30] audit: type=1326 audit(1757852216.820:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17590 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 950.897983][T17594] kvm: kvm [17593]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 950.933324][T17594] kvm: kvm [17593]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 950.965333][ T30] audit: type=1326 audit(1757852216.820:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17590 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 951.001451][ T30] audit: type=1326 audit(1757852216.820:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17590 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 951.072583][ T30] audit: type=1326 audit(1757852216.820:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17590 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 951.159463][ T30] audit: type=1326 audit(1757852216.820:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17590 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 951.208559][ T30] audit: type=1326 audit(1757852216.820:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17590 comm="syz.1.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 951.240252][T16802] TC_ACT_REPEAT abuse ? [ 951.244898][ C1] TC_ACT_REPEAT abuse ? [ 951.306141][T16803] IPVS: stop unused estimator thread 0... [ 951.521737][ T9] TC_ACT_REPEAT abuse ? [ 952.000241][T17631] input: syz0 as /devices/virtual/input/input67 [ 952.166228][T17383] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 952.215834][T17383] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 952.294078][T17383] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 952.353593][T17383] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 952.419679][ T8586] TC_ACT_REPEAT abuse ? [ 952.424132][ C1] TC_ACT_REPEAT abuse ? [ 952.727874][ C1] TC_ACT_REPEAT abuse ? [ 952.839360][T17662] netlink: 'syz.1.2962': attribute type 1 has an invalid length. [ 952.886474][T17383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.955933][T17383] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.112586][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.119860][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.365912][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.373138][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.743173][ T1094] TC_ACT_REPEAT abuse ? [ 953.747805][ C1] TC_ACT_REPEAT abuse ? [ 953.993079][T17383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.285473][T17383] veth0_vlan: entered promiscuous mode [ 954.336114][T17383] veth1_vlan: entered promiscuous mode [ 954.474197][T17383] veth0_macvtap: entered promiscuous mode [ 954.535334][T17383] veth1_macvtap: entered promiscuous mode [ 954.652659][T17383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.716423][T17383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 954.766372][T16803] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.823493][T16803] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.824316][T16803] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.825020][T16803] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.918198][ T1094] TC_ACT_REPEAT abuse ? [ 954.918549][ C0] TC_ACT_REPEAT abuse ? [ 955.148110][T16802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.148132][T16802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.180391][T17720] random: crng reseeded on system resumption [ 955.303175][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.303198][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.891676][T17745] syz_tun: entered allmulticast mode [ 955.933183][T17745] dvmrp6: entered allmulticast mode [ 955.965210][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 955.965228][ T30] audit: type=1326 audit(1757852222.300:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17748 comm="syz.1.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 955.998974][T17743] syz_tun: left allmulticast mode [ 956.087685][ T30] audit: type=1326 audit(1757852222.350:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17748 comm="syz.1.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 956.127276][ T30] audit: type=1326 audit(1757852222.350:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17748 comm="syz.1.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 956.199524][ T30] audit: type=1326 audit(1757852222.350:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17748 comm="syz.1.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 956.221878][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.273517][ T30] audit: type=1326 audit(1757852222.350:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17748 comm="syz.1.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 956.367671][ T43] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 956.385769][ T30] audit: type=1326 audit(1757852222.350:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17748 comm="syz.1.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 956.463486][ T30] audit: type=1326 audit(1757852222.350:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17748 comm="syz.1.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 956.485896][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.551739][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 956.577612][ T43] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 956.607820][ T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 956.619228][ T30] audit: type=1326 audit(1757852222.350:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17748 comm="syz.1.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 956.659876][ T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 956.698098][ T43] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 956.718425][ T30] audit: type=1326 audit(1757852222.350:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17748 comm="syz.1.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 956.740780][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.770434][ T43] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 956.787792][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.807983][ T30] audit: type=1326 audit(1757852222.350:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17748 comm="syz.1.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 956.928696][T17786] syz_tun: entered allmulticast mode [ 957.019842][T17786] dvmrp6: entered allmulticast mode [ 957.052598][T17785] syz_tun: left allmulticast mode [ 957.065239][ T43] usb 6-1: GET_CAPABILITIES returned 0 [ 957.078469][ T43] usbtmc 6-1:16.0: can't read capabilities [ 957.184776][ T3167] net_ratelimit: 2 callbacks suppressed [ 957.184795][ T3167] TC_ACT_REPEAT abuse ? [ 957.195136][ C0] TC_ACT_REPEAT abuse ? [ 957.285069][ T5928] usb 6-1: USB disconnect, device number 87 [ 957.308568][T17803] netlink: 'syz.2.3010': attribute type 11 has an invalid length. [ 957.339917][T17803] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3010'. [ 957.409558][T17807] random: crng reseeded on system resumption [ 957.543653][T17810] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3014'. [ 957.631926][T17810] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3014'. [ 957.695422][T17810] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3014'. [ 957.951756][T17810] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3014'. [ 958.015295][T17810] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3014'. [ 958.052682][T17810] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3014'. [ 958.264957][T17810] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3014'. [ 958.286755][T17810] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3014'. [ 958.313729][T17810] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3014'. [ 958.349167][ T1094] TC_ACT_REPEAT abuse ? [ 958.353710][ C0] TC_ACT_REPEAT abuse ? [ 958.684452][T16802] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 958.712726][T16802] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 958.734731][T16802] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 958.752636][T16802] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 959.463666][ T3167] TC_ACT_REPEAT abuse ? [ 959.468301][ C0] TC_ACT_REPEAT abuse ? [ 960.234583][T17890] netlink: 'syz.2.3046': attribute type 1 has an invalid length. [ 960.342631][T17890] team0: Port device team_slave_0 removed [ 960.412348][T17896] input: syz0 as /devices/virtual/input/input68 [ 960.598614][T16805] TC_ACT_REPEAT abuse ? [ 960.603166][ C1] TC_ACT_REPEAT abuse ? [ 960.654574][T17888] syz.5.3045 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 961.057668][ T5952] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 961.118657][ T5965] TC_ACT_REPEAT abuse ? [ 961.183378][T17924] input: syz0 as /devices/virtual/input/input69 [ 961.205993][T17921] loop9: detected capacity change from 0 to 7 [ 961.220537][ T5952] usb 4-1: Using ep0 maxpacket: 8 [ 961.228304][ T5952] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 961.242636][T17921] Buffer I/O error on dev loop9, logical block 0, async page read [ 961.256953][T14226] udevd[14226]: setting mode of /dev/input/js0 to 020664 failed: No such file or directory [ 961.273579][ T5952] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 961.287848][T14226] udevd[14226]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 961.301824][T17921] Buffer I/O error on dev loop9, logical block 0, async page read [ 961.316202][ T5952] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 961.344113][T17921] Buffer I/O error on dev loop9, logical block 0, async page read [ 961.352780][ T5952] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 961.377032][T17921] Buffer I/O error on dev loop9, logical block 0, async page read [ 961.386968][ T5952] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 961.398994][T17921] Buffer I/O error on dev loop9, logical block 0, async page read [ 961.406980][T17921] Buffer I/O error on dev loop9, logical block 0, async page read [ 961.415330][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.427742][T17921] Buffer I/O error on dev loop9, logical block 0, async page read [ 961.439855][T17921] ldm_validate_partition_table(): Disk read failed. [ 961.488033][T17921] Buffer I/O error on dev loop9, logical block 0, async page read [ 961.496051][T17921] Buffer I/O error on dev loop9, logical block 0, async page read [ 961.532978][T17921] Buffer I/O error on dev loop9, logical block 0, async page read [ 961.546072][T17921] Dev loop9: unable to read RDB block 0 [ 961.546317][T17921] loop9: unable to read partition table [ 961.547499][T17921] loop9: partition table beyond EOD, truncated [ 961.562697][T17921] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 961.562697][T17921] ) failed (rc=-5) [ 961.635353][ T5952] usb 4-1: GET_CAPABILITIES returned 0 [ 961.635405][ T5952] usbtmc 4-1:16.0: can't read capabilities [ 961.757025][ T8575] TC_ACT_REPEAT abuse ? [ 961.842233][ T5965] usb 4-1: USB disconnect, device number 50 [ 962.240271][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 962.240291][ T30] audit: type=1326 audit(1757852228.580:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17956 comm="syz.1.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 962.304637][ T30] audit: type=1326 audit(1757852228.620:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17956 comm="syz.1.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 962.328016][ T30] audit: type=1326 audit(1757852228.620:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17956 comm="syz.1.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 962.351595][ T30] audit: type=1326 audit(1757852228.620:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17956 comm="syz.1.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 962.374349][ T30] audit: type=1326 audit(1757852228.630:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17956 comm="syz.1.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 962.433909][ T30] audit: type=1326 audit(1757852228.630:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17956 comm="syz.1.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 962.557047][ T30] audit: type=1326 audit(1757852228.630:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17956 comm="syz.1.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 962.604548][T17966] __nla_validate_parse: 2 callbacks suppressed [ 962.604569][T17966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3080'. [ 962.634838][ T30] audit: type=1326 audit(1757852228.630:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17956 comm="syz.1.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 962.661334][T17966] macvlan0: entered promiscuous mode [ 962.667220][T17966] macvlan0: entered allmulticast mode [ 962.672762][T17966] veth1_vlan: entered allmulticast mode [ 962.682496][T17969] veth1_vlan: left allmulticast mode [ 962.692106][ T30] audit: type=1326 audit(1757852228.630:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17956 comm="syz.1.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 962.726931][ T30] audit: type=1326 audit(1757852228.630:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17956 comm="syz.1.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 962.908009][T17978] input: syz0 as /devices/virtual/input/input70 [ 962.929307][ T8575] net_ratelimit: 1 callbacks suppressed [ 962.929326][ T8575] TC_ACT_REPEAT abuse ? [ 962.939731][ C1] TC_ACT_REPEAT abuse ? [ 963.182748][T17983] random: crng reseeded on system resumption [ 963.528820][T17998] pim6reg1: entered promiscuous mode [ 963.547089][T17998] pim6reg1: entered allmulticast mode [ 963.567527][T18002] IPVS: Error connecting to the multicast addr [ 963.627710][T18005] input: syz0 as /devices/virtual/input/input71 [ 963.868187][T18013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3098'. [ 964.018247][T18013] macvtap1: entered promiscuous mode [ 964.046110][T18013] bridge0: entered promiscuous mode [ 964.059997][ T3167] TC_ACT_REPEAT abuse ? [ 964.064603][ C1] TC_ACT_REPEAT abuse ? [ 964.065594][T18013] macvtap1: entered allmulticast mode [ 964.088689][T18013] bridge0: entered allmulticast mode [ 964.580717][T18038] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3110'. [ 965.154192][T18062] netlink: 'syz.4.3122': attribute type 4 has an invalid length. [ 965.208915][T16803] TC_ACT_REPEAT abuse ? [ 965.213503][ C0] TC_ACT_REPEAT abuse ? [ 965.377070][T18072] TC_ACT_REPEAT abuse ? [ 965.395610][T18075] syz_tun: entered allmulticast mode [ 965.397397][T18072] TC_ACT_REPEAT abuse ? [ 965.418087][T18072] TC_ACT_REPEAT abuse ? [ 965.429670][T18076] program syz.4.3127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 965.449771][T18072] TC_ACT_REPEAT abuse ? [ 965.461434][T18075] dvmrp6: entered allmulticast mode [ 965.480842][T18074] syz_tun: left allmulticast mode [ 965.836463][T18096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3136'. [ 966.847418][T18094] warn_alloc: 1 callbacks suppressed [ 966.847460][T18094] syz.3.3134: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 966.876214][T18094] CPU: 1 UID: 0 PID: 18094 Comm: syz.3.3134 Not tainted syzkaller #0 PREEMPT(full) [ 966.876242][T18094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 966.876257][T18094] Call Trace: [ 966.876265][T18094] [ 966.876275][T18094] dump_stack_lvl+0x189/0x250 [ 966.876309][T18094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 966.876344][T18094] ? __pfx__printk+0x10/0x10 [ 966.876374][T18094] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 966.876398][T18094] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 966.876426][T18094] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 966.876453][T18094] warn_alloc+0x214/0x310 [ 966.876491][T18094] ? __pfx_warn_alloc+0x10/0x10 [ 966.876531][T18094] ? __get_vm_area_node+0x28f/0x300 [ 966.876561][T18094] ? hash_netport4_resize+0x235/0x1b60 [ 966.876592][T18094] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 966.876652][T18094] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 966.876689][T18094] ? rcu_is_watching+0x15/0xb0 [ 966.876712][T18094] ? hash_netport4_resize+0x235/0x1b60 [ 966.876736][T18094] ? hash_netport4_resize+0x235/0x1b60 [ 966.876760][T18094] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 966.876789][T18094] ? hash_netport4_resize+0x235/0x1b60 [ 966.876823][T18094] hash_netport4_resize+0x235/0x1b60 [ 966.876848][T18094] ? hash_netport4_uadt+0xc97/0xf30 [ 966.876880][T18094] ? __pfx_hash_netport4_add+0x10/0x10 [ 966.876906][T18094] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 966.876942][T18094] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 966.876976][T18094] call_ad+0x44b/0xb00 [ 966.877015][T18094] ? __pfx_call_ad+0x10/0x10 [ 966.877061][T18094] ? __nla_parse+0x40/0x60 [ 966.877087][T18094] ip_set_ad+0x791/0x930 [ 966.877128][T18094] ? __pfx_ip_set_ad+0x10/0x10 [ 966.877198][T18094] nfnetlink_rcv_msg+0xb4d/0x1130 [ 966.877231][T18094] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 966.877280][T18094] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 966.877308][T18094] ? kasan_save_free_info+0x46/0x50 [ 966.877387][T18094] netlink_rcv_skb+0x205/0x470 [ 966.877411][T18094] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 966.877444][T18094] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 966.877478][T18094] ? bpf_lsm_capable+0x9/0x20 [ 966.877505][T18094] ? security_capable+0x7e/0x2e0 [ 966.877547][T18094] nfnetlink_rcv+0x26a/0x2520 [ 966.877575][T18094] ? __dev_queue_xmit+0x1d79/0x3b50 [ 966.877608][T18094] ? __dev_queue_xmit+0x27b/0x3b50 [ 966.877644][T18094] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 966.877672][T18094] ? __pfx___dev_queue_xmit+0x10/0x10 [ 966.877708][T18094] ? ref_tracker_free+0x63a/0x7d0 [ 966.877725][T18094] ? __asan_memcpy+0x40/0x70 [ 966.877747][T18094] ? __pfx_ref_tracker_free+0x10/0x10 [ 966.877778][T18094] ? skb_clone+0x246/0x3a0 [ 966.877804][T18094] ? __netlink_deliver_tap+0x807/0x850 [ 966.877823][T18094] ? netlink_deliver_tap+0x2e/0x1b0 [ 966.877849][T18094] ? netlink_deliver_tap+0x2e/0x1b0 [ 966.877874][T18094] netlink_unicast+0x82c/0x9e0 [ 966.877910][T18094] ? __pfx_netlink_unicast+0x10/0x10 [ 966.877940][T18094] ? netlink_sendmsg+0x642/0xb30 [ 966.877957][T18094] ? skb_put+0x11b/0x210 [ 966.877981][T18094] netlink_sendmsg+0x805/0xb30 [ 966.878013][T18094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 966.878039][T18094] ? aa_sock_msg_perm+0xf1/0x1d0 [ 966.878061][T18094] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 966.878084][T18094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 966.878106][T18094] __sock_sendmsg+0x21c/0x270 [ 966.878141][T18094] ____sys_sendmsg+0x505/0x830 [ 966.878173][T18094] ? __pfx_____sys_sendmsg+0x10/0x10 [ 966.878207][T18094] ? import_iovec+0x74/0xa0 [ 966.878238][T18094] ___sys_sendmsg+0x21f/0x2a0 [ 966.878267][T18094] ? __pfx____sys_sendmsg+0x10/0x10 [ 966.878330][T18094] ? __fget_files+0x2a/0x420 [ 966.878355][T18094] ? __fget_files+0x3a0/0x420 [ 966.878385][T18094] __x64_sys_sendmsg+0x19b/0x260 [ 966.878415][T18094] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 966.878452][T18094] ? rcu_is_watching+0x15/0xb0 [ 966.878477][T18094] ? do_syscall_64+0xbe/0x3b0 [ 966.878505][T18094] do_syscall_64+0xfa/0x3b0 [ 966.878526][T18094] ? lockdep_hardirqs_on+0x9c/0x150 [ 966.878547][T18094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.878568][T18094] ? clear_bhb_loop+0x60/0xb0 [ 966.878593][T18094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.878613][T18094] RIP: 0033:0x7f6b5a98eba9 [ 966.878633][T18094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 966.878651][T18094] RSP: 002b:00007f6b5b84a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 966.878673][T18094] RAX: ffffffffffffffda RBX: 00007f6b5abd5fa0 RCX: 00007f6b5a98eba9 [ 966.878689][T18094] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 966.878703][T18094] RBP: 00007f6b5aa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 966.878715][T18094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 966.878728][T18094] R13: 00007f6b5abd6038 R14: 00007f6b5abd5fa0 R15: 00007f6b5acffa28 [ 966.878758][T18094] [ 967.133800][T18133] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3149'. [ 967.327711][ T5943] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 967.357640][T18094] Mem-Info: [ 967.357659][T18094] active_anon:10622 inactive_anon:13 isolated_anon:0 [ 967.357659][T18094] active_file:17907 inactive_file:44405 isolated_file:0 [ 967.357659][T18094] unevictable:768 dirty:96 writeback:71 [ 967.357659][T18094] slab_reclaimable:7100 slab_unreclaimable:115017 [ 967.357659][T18094] mapped:34974 shmem:4771 pagetables:1717 [ 967.357659][T18094] sec_pagetables:0 bounce:0 [ 967.357659][T18094] kernel_misc_reclaimable:0 [ 967.357659][T18094] free:1265285 free_pcp:14545 free_cma:0 [ 967.357719][T18094] Node 0 active_anon:42356kB inactive_anon:52kB active_file:69560kB inactive_file:175368kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139936kB dirty:380kB writeback:284kB shmem:17548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13928kB pagetables:6740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 967.357774][T18094] Node 1 active_anon:132kB inactive_anon:0kB active_file:2068kB inactive_file:2252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 967.357836][T18094] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 967.357895][T18094] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 967.357939][T18094] Node 0 DMA32 free:1156308kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42308kB inactive_anon:52kB active_file:69560kB inactive_file:173792kB unevictable:1536kB writepending:664kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:48924kB local_pcp:20440kB free_cma:0kB [ 967.358002][T18094] lowmem_reserve[]: 0 0 1 1 1 [ 967.358045][T18094] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 967.358105][T18094] lowmem_reserve[]: 0 0 0 0 0 [ 967.358147][T18094] Node 1 Normal free:3889460kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:132kB inactive_anon:0kB active_file:2068kB inactive_file:2252kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9248kB local_pcp:4128kB free_cma:0kB [ 967.358209][T18094] lowmem_reserve[]: 0 0 0 0 0 [ 967.358257][T18094] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 967.358399][T18094] Node 0 DMA32: 1041*4kB (UME) 128*8kB (UE) 267*16kB (UME) 414*32kB (UME) 329*64kB (UME) 199*128kB (UME) 106*256kB (UME) 38*512kB (UME) 36*1024kB (UME) 2*2048kB (U) 244*4096kB (UM) = 1156212kB [ 967.358589][T18094] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 967.358718][T18094] Node 1 Normal: 201*4kB (UME) 54*8kB (UE) 50*16kB (UE) 242*32kB (UME) 78*64kB (UME) 15*128kB (UE) 6*256kB (UME) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 944*4096kB (M) = 3889460kB [ 967.358907][T18094] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 967.358922][T18094] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 967.358940][T18094] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 967.358958][T18094] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 967.358976][T18094] 67092 total pagecache pages [ 967.358986][T18094] 13 pages in swap cache [ 967.358996][T18094] Free swap = 124944kB [ 967.359005][T18094] Total swap = 124996kB [ 967.359016][T18094] 2097051 pages RAM [ 967.359025][T18094] 0 pages HighMem/MovableOnly [ 967.359034][T18094] 425671 pages reserved [ 967.359043][T18094] 0 pages cma reserved [ 967.820904][T18127] tty tty24: ldisc open failed (-12), clearing slot 23 [ 968.042213][ T5943] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 968.074445][ T5943] usb 5-1: config 0 has no interfaces? [ 968.107778][ T5943] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 968.116862][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.155896][ T5943] usb 5-1: config 0 descriptor?? [ 968.224413][T18151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3156'. [ 968.431428][T18165] input: syz0 as /devices/virtual/input/input72 [ 968.443820][T18159] syzkaller0: entered promiscuous mode [ 968.508381][T18159] syzkaller0: entered allmulticast mode [ 968.721337][T18176] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 969.539553][ T5943] usb 5-1: USB disconnect, device number 5 [ 969.713652][T18180] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3170'. [ 971.280179][ T30] kauditd_printk_skb: 210 callbacks suppressed [ 971.280198][ T30] audit: type=1326 audit(1757852237.620:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18184 comm="syz.2.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9f18eba9 code=0x7ffc0000 [ 971.362991][ T30] audit: type=1326 audit(1757852237.650:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18184 comm="syz.2.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d9f18eba9 code=0x7ffc0000 [ 971.445088][ T30] audit: type=1326 audit(1757852237.660:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18184 comm="syz.2.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9f18eba9 code=0x7ffc0000 [ 971.506885][ T30] audit: type=1326 audit(1757852237.660:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18184 comm="syz.2.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d9f18eba9 code=0x7ffc0000 [ 971.547488][ T30] audit: type=1326 audit(1757852237.660:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18184 comm="syz.2.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9f18eba9 code=0x7ffc0000 [ 971.586565][ T30] audit: type=1326 audit(1757852237.660:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18184 comm="syz.2.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d9f18eba9 code=0x7ffc0000 [ 971.610995][T18193] binder: 18192:18193 unknown command 0 [ 971.616577][T18193] binder: 18192:18193 ioctl c0306201 200000000080 returned -22 [ 971.638508][ T30] audit: type=1326 audit(1757852237.660:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18184 comm="syz.2.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9f18eba9 code=0x7ffc0000 [ 971.667273][ T30] audit: type=1326 audit(1757852237.660:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18184 comm="syz.2.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d9f18eba9 code=0x7ffc0000 [ 971.721950][T18193] binder: BINDER_SET_CONTEXT_MGR already set [ 971.758224][ T30] audit: type=1326 audit(1757852237.660:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18184 comm="syz.2.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9f18eba9 code=0x7ffc0000 [ 971.771998][T18193] binder: 18192:18193 ioctl 4018620d 200000000040 returned -16 [ 971.824819][ T30] audit: type=1326 audit(1757852237.660:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18184 comm="syz.2.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2d9f18eba9 code=0x7ffc0000 [ 972.311724][T18224] input: syz0 as /devices/virtual/input/input73 [ 972.368378][T14226] udevd[14226]: setting mode of /dev/input/js0 to 020664 failed: No such file or directory [ 972.386729][T14226] udevd[14226]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 972.594578][T18233] binder: 18232:18233 unknown command 0 [ 972.605560][T18233] binder: 18232:18233 ioctl c0306201 200000000080 returned -22 [ 972.636740][T18233] binder: BINDER_SET_CONTEXT_MGR already set [ 972.652618][T18233] binder: 18232:18233 ioctl 4018620d 200000000040 returned -16 [ 973.129414][T18250] input: syz0 as /devices/virtual/input/input74 [ 973.171649][T18254] netlink: 'syz.1.3204': attribute type 10 has an invalid length. [ 973.180779][T18252] net_ratelimit: 3 callbacks suppressed [ 973.180799][T18252] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 973.193134][T18252] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 973.212065][T18254] batman_adv: batadv0: Removing interface: dummy0 [ 973.250379][T18254] team0: Port device dummy0 added [ 973.271668][T18255] netlink: 'syz.1.3204': attribute type 10 has an invalid length. [ 973.349485][T18255] team0: Port device dummy0 removed [ 973.375229][T18255] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 973.413508][T18257] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3205'. [ 973.679613][T18265] netlink: 'syz.4.3207': attribute type 1 has an invalid length. [ 974.114103][T18277] rdma_op ffff8880275d99f0 conn xmit_rdma 0000000000000000 [ 974.320035][T18282] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 974.326506][T18282] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 975.096357][T18305] tipc: Enabled bearer , priority 0 [ 975.119686][T18305] syzkaller0: entered promiscuous mode [ 975.138378][T18305] syzkaller0: entered allmulticast mode [ 975.214060][T18308] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3228'. [ 975.245947][T18305] tipc: Resetting bearer [ 975.385166][T18304] tipc: Resetting bearer [ 975.511062][T18304] tipc: Disabling bearer [ 975.971435][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 975.981708][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 976.000230][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 976.018444][ T5871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 976.056598][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 976.410363][ T30] kauditd_printk_skb: 234 callbacks suppressed [ 976.410381][ T30] audit: type=1326 audit(1757852242.750:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18329 comm="syz.1.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 976.495923][ T30] audit: type=1326 audit(1757852242.780:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18329 comm="syz.1.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 976.587771][ T30] audit: type=1326 audit(1757852242.780:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18329 comm="syz.1.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 976.686340][ T30] audit: type=1326 audit(1757852242.780:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18329 comm="syz.1.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 976.859781][ T30] audit: type=1326 audit(1757852242.780:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18329 comm="syz.1.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 976.947878][ T30] audit: type=1326 audit(1757852242.780:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18329 comm="syz.1.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 977.388049][T18322] chnl_net:caif_netlink_parms(): no params data found [ 977.681080][T18354] bridge_slave_0: left allmulticast mode [ 977.700386][T18354] bridge_slave_0: left promiscuous mode [ 977.729306][ T30] audit: type=1326 audit(1757852244.050:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.1.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 977.791744][T18354] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.850472][ T30] audit: type=1326 audit(1757852244.050:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.1.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 977.910941][T18354] bridge_slave_1: left allmulticast mode [ 977.931064][T18354] bridge_slave_1: left promiscuous mode [ 977.958164][T18354] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.976211][ T30] audit: type=1326 audit(1757852244.070:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.1.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 978.005069][T18354] bond0: (slave bond_slave_0): Releasing backup interface [ 978.089175][ T30] audit: type=1326 audit(1757852244.070:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.1.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd8d8eba9 code=0x7ffc0000 [ 978.158881][ T5185] Bluetooth: hci2: command tx timeout [ 978.159578][T18354] bond0: (slave bond_slave_1): Releasing backup interface [ 978.273375][T18354] team0: Port device team_slave_0 removed [ 978.342591][T18354] team0: Port device team_slave_1 removed [ 978.389148][T18354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 978.467680][T18354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.510112][T18354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 978.517531][T18354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.964990][T18322] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.987837][T18322] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.038871][T18322] bridge_slave_0: entered allmulticast mode [ 979.046691][T18322] bridge_slave_0: entered promiscuous mode [ 979.074863][T18322] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.127734][T18322] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.151641][T18362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3249'. [ 979.166239][T18322] bridge_slave_1: entered allmulticast mode [ 979.221163][T18322] bridge_slave_1: entered promiscuous mode [ 979.451310][T18322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.498109][T18322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.591840][T18322] team0: Port device team_slave_0 added [ 979.611040][T18322] team0: Port device team_slave_1 added [ 979.626314][T18263] warn_alloc: 3 callbacks suppressed [ 979.626334][T18263] syz.5.3209: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 979.664244][T18263] CPU: 1 UID: 0 PID: 18263 Comm: syz.5.3209 Not tainted syzkaller #0 PREEMPT(full) [ 979.664271][T18263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 979.664285][T18263] Call Trace: [ 979.664293][T18263] [ 979.664303][T18263] dump_stack_lvl+0x189/0x250 [ 979.664335][T18263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 979.664361][T18263] ? __pfx__printk+0x10/0x10 [ 979.664390][T18263] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 979.664415][T18263] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 979.664442][T18263] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 979.664469][T18263] warn_alloc+0x214/0x310 [ 979.664507][T18263] ? __pfx_warn_alloc+0x10/0x10 [ 979.664548][T18263] ? __get_vm_area_node+0x28f/0x300 [ 979.664577][T18263] ? hash_netiface_create+0x358/0xfe0 [ 979.664609][T18263] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 979.664670][T18263] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 979.664700][T18263] ? hash_netiface_create+0x358/0xfe0 [ 979.664730][T18263] ? __get_vm_area_node+0x28f/0x300 [ 979.664759][T18263] ? hash_netiface_create+0x358/0xfe0 [ 979.664788][T18263] __vmalloc_node_range_noprof+0x56a/0x12f0 [ 979.664819][T18263] ? hash_netiface_create+0x358/0xfe0 [ 979.664845][T18263] ? do_syscall_64+0xfa/0x3b0 [ 979.664897][T18263] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 979.664933][T18263] ? rcu_is_watching+0x15/0xb0 [ 979.664955][T18263] ? hash_netiface_create+0x358/0xfe0 [ 979.664989][T18263] ? hash_netiface_create+0x358/0xfe0 [ 979.665014][T18263] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 979.665045][T18263] ? hash_netiface_create+0x358/0xfe0 [ 979.665072][T18263] ? hash_netiface_create+0x2fe/0xfe0 [ 979.665105][T18263] hash_netiface_create+0x358/0xfe0 [ 979.665142][T18263] ? __nla_parse+0x40/0x60 [ 979.665164][T18263] ? __pfx_hash_netiface_create+0x10/0x10 [ 979.665193][T18263] ip_set_create+0xa94/0x1940 [ 979.665224][T18263] ? ip_set_create+0x4a2/0x1940 [ 979.665265][T18263] ? __pfx_ip_set_create+0x10/0x10 [ 979.665332][T18263] nfnetlink_rcv_msg+0xb4d/0x1130 [ 979.665365][T18263] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 979.665415][T18263] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 979.665443][T18263] ? kasan_save_free_info+0x46/0x50 [ 979.665518][T18263] netlink_rcv_skb+0x205/0x470 [ 979.665542][T18263] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 979.665574][T18263] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 979.665607][T18263] ? bpf_lsm_capable+0x9/0x20 [ 979.665634][T18263] ? security_capable+0x7e/0x2e0 [ 979.665672][T18263] nfnetlink_rcv+0x26a/0x2520 [ 979.665707][T18263] ? __dev_queue_xmit+0x1d79/0x3b50 [ 979.665746][T18263] ? __dev_queue_xmit+0x27b/0x3b50 [ 979.665786][T18263] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 979.665816][T18263] ? __pfx___dev_queue_xmit+0x10/0x10 [ 979.665858][T18263] ? ref_tracker_free+0x63a/0x7d0 [ 979.665878][T18263] ? __asan_memcpy+0x40/0x70 [ 979.665901][T18263] ? __pfx_ref_tracker_free+0x10/0x10 [ 979.665939][T18263] ? skb_clone+0x246/0x3a0 [ 979.665969][T18263] ? __netlink_deliver_tap+0x807/0x850 [ 979.665996][T18263] ? netlink_deliver_tap+0x2e/0x1b0 [ 979.666029][T18263] ? netlink_deliver_tap+0x2e/0x1b0 [ 979.666058][T18263] netlink_unicast+0x82c/0x9e0 [ 979.666099][T18263] ? __pfx_netlink_unicast+0x10/0x10 [ 979.666133][T18263] ? netlink_sendmsg+0x642/0xb30 [ 979.666153][T18263] ? skb_put+0x11b/0x210 [ 979.666181][T18263] netlink_sendmsg+0x805/0xb30 [ 979.666213][T18263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 979.666239][T18263] ? aa_sock_msg_perm+0xf1/0x1d0 [ 979.666262][T18263] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 979.666285][T18263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 979.666308][T18263] __sock_sendmsg+0x21c/0x270 [ 979.666342][T18263] ____sys_sendmsg+0x505/0x830 [ 979.666374][T18263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 979.666409][T18263] ? import_iovec+0x74/0xa0 [ 979.666440][T18263] ___sys_sendmsg+0x21f/0x2a0 [ 979.666468][T18263] ? __pfx____sys_sendmsg+0x10/0x10 [ 979.666533][T18263] ? __fget_files+0x2a/0x420 [ 979.666551][T18263] ? __fget_files+0x3a0/0x420 [ 979.666580][T18263] __x64_sys_sendmsg+0x19b/0x260 [ 979.666609][T18263] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 979.666647][T18263] ? rcu_is_watching+0x15/0xb0 [ 979.666673][T18263] ? do_syscall_64+0xbe/0x3b0 [ 979.666700][T18263] do_syscall_64+0xfa/0x3b0 [ 979.666720][T18263] ? lockdep_hardirqs_on+0x9c/0x150 [ 979.666741][T18263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.666762][T18263] ? clear_bhb_loop+0x60/0xb0 [ 979.666785][T18263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.666805][T18263] RIP: 0033:0x7fbc9978eba9 [ 979.666824][T18263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 979.666843][T18263] RSP: 002b:00007fbc9a677038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 979.666864][T18263] RAX: ffffffffffffffda RBX: 00007fbc999d5fa0 RCX: 00007fbc9978eba9 [ 979.666881][T18263] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 979.666895][T18263] RBP: 00007fbc99811e19 R08: 0000000000000000 R09: 0000000000000000 [ 979.666908][T18263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 979.666921][T18263] R13: 00007fbc999d6038 R14: 00007fbc999d5fa0 R15: 00007fbc99affa28 [ 979.666955][T18263] [ 979.666963][T18263] Mem-Info: [ 980.186553][T18263] active_anon:10255 inactive_anon:13 isolated_anon:0 [ 980.186553][T18263] active_file:17235 inactive_file:40316 isolated_file:0 [ 980.186553][T18263] unevictable:768 dirty:137 writeback:0 [ 980.186553][T18263] slab_reclaimable:7074 slab_unreclaimable:115829 [ 980.186553][T18263] mapped:34907 shmem:4589 pagetables:1715 [ 980.186553][T18263] sec_pagetables:0 bounce:0 [ 980.186553][T18263] kernel_misc_reclaimable:0 [ 980.186553][T18263] free:1225197 free_pcp:28134 free_cma:0 [ 980.243821][ T5185] Bluetooth: hci2: command tx timeout [ 980.254913][T18381] syz_tun: entered allmulticast mode [ 980.255582][T18263] Node 0 active_anon:40936kB inactive_anon:52kB active_file:68920kB inactive_file:161060kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139608kB dirty:544kB writeback:0kB shmem:16788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13816kB pagetables:6736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 980.261698][T18322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.302131][T18263] Node 1 active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 980.305300][T18322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.346488][T18263] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 980.373556][T18322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.389638][T18263] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 980.389694][T18263] Node 0 DMA32 free:995616kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40988kB inactive_anon:52kB active_file:68920kB inactive_file:159484kB unevictable:1536kB writepending:540kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:99132kB local_pcp:31348kB free_cma:0kB [ 980.389760][T18263] lowmem_reserve[]: 0 0 1 1 1 [ 980.389801][T18263] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 980.446465][T18322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 980.480098][T18263] lowmem_reserve[]: 0 0 0 0 0 [ 980.484841][T18263] Node 1 Normal free:3889720kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13216kB local_pcp:8224kB free_cma:0kB [ 980.516881][T18263] lowmem_reserve[]: 0 0 0 0 0 [ 980.521902][T18263] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 980.543653][T18322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.571962][T18263] Node 0 DMA32: 8*4kB (UE) 44*8kB (UME) 242*16kB (UME) 334*32kB (UME) 124*64kB (UE) 70*128kB (UME) 73*256kB (UME) 34*512kB (UME) 22*1024kB (UME) 2*2048kB (U) 220*4096kB (UM) = 995680kB [ 980.598048][T18263] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 980.618974][T18263] Node 1 Normal: 202*4kB (UME) 56*8kB (UME) 51*16kB (UME) 243*32kB (UME) 81*64kB (UME) 15*128kB (UE) 6*256kB (UME) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 944*4096kB (M) = 3889720kB [ 980.644726][T18322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.657749][T18263] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 980.680912][T18379] syz_tun: left allmulticast mode [ 980.686164][T18263] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 980.751875][T18263] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 980.769055][T18263] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 980.779081][T18263] 60091 total pagecache pages [ 980.783974][T18263] 13 pages in swap cache [ 980.788513][T18263] Free swap = 124944kB [ 980.792780][T18263] Total swap = 124996kB [ 980.796947][T18263] 2097051 pages RAM [ 980.801495][T18263] 0 pages HighMem/MovableOnly [ 980.806275][T18263] 425671 pages reserved [ 980.812914][T18387] input: syz0 as /devices/virtual/input/input75 [ 980.834383][T18322] hsr_slave_0: entered promiscuous mode [ 980.849765][T18263] 0 pages cma reserved [ 980.863194][T18322] hsr_slave_1: entered promiscuous mode [ 980.887178][T18322] debugfs: 'hsr0' already exists in 'hsr' [ 980.901517][T18322] Cannot create hsr debugfs directory [ 980.953872][ T43] hid-generic 0000:0003:0000.0026: unknown main item tag 0x0 [ 980.970885][ T43] hid-generic 0000:0003:0000.0026: unknown main item tag 0x0 [ 980.997848][ T43] hid-generic 0000:0003:0000.0026: hidraw0: HID v0.03 Device [syz0] on syz0 [ 981.199222][ T5943] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 981.337661][ T5943] usb 4-1: device descriptor read/64, error -71 [ 981.369672][T18322] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 981.401026][T18322] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.557362][T18322] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 981.567967][T18322] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.598897][ T5943] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 981.698111][T18322] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 981.737826][ T5943] usb 4-1: device descriptor read/64, error -71 [ 981.748434][T18322] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.859714][ T5943] usb usb4-port1: attempt power cycle [ 981.921178][T18322] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 981.952695][T18322] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.058499][T18413] input: syz0 as /devices/virtual/input/input76 [ 982.228002][ T5943] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 982.290480][ T5943] usb 4-1: device descriptor read/8, error -71 [ 982.318322][ T5185] Bluetooth: hci2: command tx timeout [ 982.487316][T18322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 982.505116][T18322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 982.522215][T18322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 982.537905][ T5943] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 982.573957][T18322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 982.581195][ T5943] usb 4-1: device descriptor read/8, error -71 [ 982.688179][ T5943] usb usb4-port1: unable to enumerate USB device [ 982.865366][T18322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.929836][T18322] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.980218][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.987445][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 983.036487][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.043741][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.284766][T18322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.400817][T18458] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 983.450817][T18322] veth0_vlan: entered promiscuous mode [ 983.493408][T18322] veth1_vlan: entered promiscuous mode [ 983.630377][T18322] veth0_macvtap: entered promiscuous mode [ 983.671771][T18322] veth1_macvtap: entered promiscuous mode [ 983.728671][T18322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.793686][T18322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 983.826865][T16803] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.849004][T16803] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.872282][T16802] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.887248][T16802] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.188024][ T8575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.195877][ T8575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.197822][T18483] netlink: 340 bytes leftover after parsing attributes in process `syz.5.3302'. [ 984.233787][T18483] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3302'. [ 984.339761][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.360598][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.398563][ T5185] Bluetooth: hci2: command tx timeout [ 984.497121][T18495] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3307'. [ 985.028882][T18524] netlink: 'syz.3.3321': attribute type 33 has an invalid length. [ 985.036721][T18524] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3321'. [ 985.080891][T18524] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 985.205561][T18532] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3323'. [ 985.255610][T18532] netlink: 'syz.5.3323': attribute type 1 has an invalid length. [ 985.276215][T18535] binder: BINDER_SET_CONTEXT_MGR already set [ 985.312499][T18535] binder: 18533:18535 ioctl 4018620d 200000000040 returned -16 [ 985.688076][T18556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3334'. [ 985.729490][T18558] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3334'. [ 986.439191][T18599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3356'. [ 986.820062][ T43] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 986.892560][T18614] input: syz0 as /devices/virtual/input/input78 [ 986.981989][ T43] usb 6-1: device descriptor read/64, error -71 [ 987.238274][ T43] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 987.389827][ T43] usb 6-1: device descriptor read/64, error -71 [ 987.541633][ T43] usb usb6-port1: attempt power cycle [ 987.633924][T18640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3374'. [ 987.880309][T18644] input: syz0 as /devices/virtual/input/input79 [ 987.907636][ T43] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 987.940655][ T43] usb 6-1: device descriptor read/8, error -71 [ 988.188298][ T43] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 988.218862][ T43] usb 6-1: device descriptor read/8, error -71 [ 988.329912][ T43] usb usb6-port1: unable to enumerate USB device [ 988.647787][ T92] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 988.810636][ T92] usb 2-1: Using ep0 maxpacket: 8 [ 988.819777][ T92] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 988.836721][ T92] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 988.863432][ T92] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 988.878119][ T92] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 988.893419][ T92] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 988.925790][ T92] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 988.955968][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.215737][ T92] usb 2-1: GET_CAPABILITIES returned 0 [ 989.231387][ T92] usbtmc 2-1:16.0: can't read capabilities [ 989.535810][T18657] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 989.535906][ T43] usb 2-1: USB disconnect, device number 29 [ 989.560264][T18672] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -19 [ 989.691588][T18680] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3390'. [ 989.705054][T18680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3390'. [ 989.737727][ T92] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 989.897739][ T92] usb 4-1: Using ep0 maxpacket: 8 [ 989.910621][ T92] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 989.928781][ T92] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 989.950151][ T92] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 989.970931][ T92] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 989.991530][ T92] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 990.021118][ T92] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 990.036919][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.259974][ T92] usb 4-1: GET_CAPABILITIES returned 0 [ 990.269413][ T92] usbtmc 4-1:16.0: can't read capabilities [ 990.569303][ T5965] usb 4-1: USB disconnect, device number 55 [ 990.589178][T18674] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 990.626180][T18694] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -19 [ 991.350669][T18708] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3399'. [ 991.827657][T12437] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 991.977638][T12437] usb 6-1: device descriptor read/64, error -71 [ 992.048703][T18728] binder: 18726:18728 unknown command 0 [ 992.068433][T18728] binder: 18726:18728 ioctl c0306201 200000000080 returned -22 [ 992.169779][T18734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3411'. [ 992.234738][T12437] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 992.398011][T12437] usb 6-1: device descriptor read/64, error -71 [ 992.530592][T12437] usb usb6-port1: attempt power cycle [ 992.908133][T12437] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 992.931644][ T5871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 992.941474][ T5871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 992.951829][ T5871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 992.960365][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 992.971517][ T5871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 992.999956][ T7416] syz_tun (unregistering): left promiscuous mode [ 993.016116][T12437] usb 6-1: device descriptor read/8, error -71 [ 993.042726][T18754] binder: 18752:18754 unknown command 0 [ 993.048727][T18754] binder: 18752:18754 ioctl c0306201 200000000080 returned -22 [ 993.121885][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.132031][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.227839][T18760] random: crng reseeded on system resumption [ 993.271308][T12437] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 993.323170][T12437] usb 6-1: device descriptor read/8, error -71 [ 993.438029][T12437] usb usb6-port1: unable to enumerate USB device [ 993.895514][T18785] binder: 18783:18785 unknown command 0 [ 993.901751][T18785] binder: 18783:18785 ioctl c0306201 200000000080 returned -22 [ 993.903984][T18786] syz_tun: entered allmulticast mode [ 993.932670][T18753] chnl_net:caif_netlink_parms(): no params data found [ 994.153450][T18753] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.169259][T18753] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.177402][T18753] bridge_slave_0: entered allmulticast mode [ 994.199227][T18753] bridge_slave_0: entered promiscuous mode [ 994.216299][T18753] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.243941][T18753] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.279970][T18753] bridge_slave_1: entered allmulticast mode [ 994.308663][T18753] bridge_slave_1: entered promiscuous mode [ 994.501921][T18753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 994.562630][T18753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 994.599232][T18809] binder: 18808:18809 ioctl 4018620d 0 returned -22 [ 994.621412][T18809] binder: 18808:18809 unknown command 0 [ 994.651976][T18809] binder: 18808:18809 ioctl c0306201 200000000080 returned -22 [ 994.808875][T18753] team0: Port device team_slave_0 added [ 994.852585][T18753] team0: Port device team_slave_1 added [ 995.018862][T18753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.039298][ T5871] Bluetooth: hci0: command tx timeout [ 995.050813][T18753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.101320][T18753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.113848][T18832] 8021q: VLANs not supported on ip6gre0 [ 995.136167][T18753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 995.156152][T18753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.235105][T18753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 995.337993][ T5950] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 995.485037][ T5950] usb 5-1: device descriptor read/64, error -71 [ 995.540004][T18753] hsr_slave_0: entered promiscuous mode [ 995.547328][T18753] hsr_slave_1: entered promiscuous mode [ 995.554978][T18753] debugfs: 'hsr0' already exists in 'hsr' [ 995.561149][T18753] Cannot create hsr debugfs directory [ 995.737062][T18845] dvmrp6: entered allmulticast mode [ 995.758235][ T5950] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 995.917938][ T5950] usb 5-1: device descriptor read/64, error -71 [ 996.027909][ T5950] usb usb5-port1: attempt power cycle [ 996.217442][T18753] team0: Port device netdevsim0 removed [ 996.377682][ T5950] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 996.436215][ T5950] usb 5-1: device descriptor read/8, error -71 [ 996.483940][T18858] 8021q: VLANs not supported on ip6gre0 [ 996.662906][T18753] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 996.687726][ T5950] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 996.695019][T18753] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 996.719290][ T5950] usb 5-1: device descriptor read/8, error -71 [ 996.733292][T18753] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 996.777391][T18753] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 996.827942][ T5950] usb usb5-port1: unable to enumerate USB device [ 996.997265][T18880] input: syz0 as /devices/virtual/input/input80 [ 997.090094][T18753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.117954][ T5871] Bluetooth: hci0: command tx timeout [ 997.171944][T18753] 8021q: adding VLAN 0 to HW filter on device team0 [ 997.210009][ T8575] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.217371][ T8575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.244035][ T8575] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.251252][ T8575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.473722][T18753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 997.597413][T18895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 997.637337][T18753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 997.774406][T18753] veth0_vlan: entered promiscuous mode [ 997.845795][T18753] veth1_vlan: entered promiscuous mode [ 997.940105][T18753] veth0_macvtap: entered promiscuous mode [ 997.983871][T18753] veth1_macvtap: entered promiscuous mode [ 997.998990][T18910] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3487'. [ 998.057261][T18753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 998.114007][T18753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 998.158425][ T8586] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.167350][ T8586] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.231567][ T8586] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.262201][ T8586] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.283392][T18920] 8021q: VLANs not supported on ip6gre0 [ 998.303798][T18921] syz_tun: entered allmulticast mode [ 998.394665][T18918] dvmrp6: entered allmulticast mode [ 998.442532][T18916] syz_tun: left allmulticast mode [ 998.604478][ T8586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.626821][ T8586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.826636][T16802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.839677][T16802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.849006][T18941] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3502'. [ 999.050078][T18947] 8021q: VLANs not supported on ip6gre0 [ 999.208057][ T5871] Bluetooth: hci0: command tx timeout [ 999.637181][T18969] ip6_vti0: entered promiscuous mode [ 1000.361824][T18988] pim6reg1: entered promiscuous mode [ 1000.367166][T18988] pim6reg1: entered allmulticast mode [ 1001.000464][T19012] veth0_vlan: entered allmulticast mode [ 1001.279348][ T5871] Bluetooth: hci0: command tx timeout [ 1001.491940][T19037] pim6reg1: entered promiscuous mode [ 1001.523245][T19037] pim6reg1: entered allmulticast mode [ 1001.609092][T19044] input: syz0 as /devices/virtual/input/input81 [ 1001.835845][T19053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3552'. [ 1004.246293][T19074] sit0: entered promiscuous mode [ 1004.267042][T19074] sit0: entered allmulticast mode [ 1004.482674][T19083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3565'. [ 1004.680859][T19094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3571'. [ 1004.771076][ T3167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.196814][T19121] syz_tun: entered promiscuous mode [ 1005.210902][T19121] vlan2: entered promiscuous mode [ 1005.717971][ T5952] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1005.877646][ T5952] usb 5-1: Using ep0 maxpacket: 32 [ 1005.885366][ T5952] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1005.898098][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.909146][ T5952] usb 5-1: config 0 descriptor?? [ 1006.021851][T19159] syz_tun: entered promiscuous mode [ 1006.041567][T19159] vlan3: entered promiscuous mode [ 1006.128234][ T5952] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1006.172141][ T5952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1006.187161][ T5952] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1006.215778][ T5952] usb 5-1: media controller created [ 1006.277018][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1006.354007][ T5952] az6027: usb out operation failed. (-71) [ 1006.394992][ T5952] az6027: usb out operation failed. (-71) [ 1006.435959][ T5952] stb0899_attach: Driver disabled by Kconfig [ 1006.450063][ T5952] az6027: no front-end attached [ 1006.450063][ T5952] [ 1006.466613][ T5952] az6027: usb out operation failed. (-71) [ 1006.476694][ T5952] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1006.495422][ T5952] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input82 [ 1006.529338][T19175] input: syz0 as /devices/virtual/input/input83 [ 1006.543967][ T5952] dvb-usb: schedule remote query interval to 400 msecs. [ 1006.553805][ T5952] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1006.568095][T19178] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3609'. [ 1006.574404][ T5952] usb 5-1: USB disconnect, device number 10 [ 1006.788197][ T5952] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1007.508244][T19219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3626'. [ 1007.531255][T19218] wg2: entered promiscuous mode [ 1007.536319][T19218] wg2: entered allmulticast mode [ 1007.721800][T19224] pim6reg1: entered promiscuous mode [ 1007.747505][T19224] pim6reg1: entered allmulticast mode [ 1008.133448][T19240] pim6reg1: entered promiscuous mode [ 1008.143010][T19240] pim6reg1: entered allmulticast mode [ 1008.733749][T19269] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3648'. [ 1008.844633][T19273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3650'. [ 1009.637756][T19310] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3667'. [ 1010.246776][T19333] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3678'. [ 1012.126891][T19405] 8021q: VLANs not supported on ip6gre0 [ 1012.497055][T19428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3718'. [ 1012.601387][T19433] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3720'. [ 1012.717370][T19436] pim6reg1: entered promiscuous mode [ 1012.767153][T19436] pim6reg1: entered allmulticast mode [ 1013.313074][T19461] input: syz0 as /devices/virtual/input/input84 [ 1014.181134][T19496] input: syz0 as /devices/virtual/input/input85 [ 1014.486325][T19504] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3751'. [ 1016.186456][T19569] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3782'. [ 1016.642457][T19591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3794'. [ 1016.906313][T19599] pim6reg1: entered promiscuous mode [ 1016.913390][T19599] pim6reg1: entered allmulticast mode [ 1017.015334][T19606] pim6reg1: entered promiscuous mode [ 1017.023243][T19606] pim6reg1: entered allmulticast mode [ 1017.162190][T19614] veth1_macvtap: left promiscuous mode [ 1017.173898][T19614] macsec0: entered allmulticast mode [ 1017.301861][T19620] : renamed from vlan0 (while UP) [ 1017.900624][T19650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3821'. [ 1017.961692][T19652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3823'. [ 1018.186930][T19658] wg2: entered promiscuous mode [ 1018.202809][T19658] wg2: entered allmulticast mode [ 1018.670231][T19678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3836'. [ 1018.743716][T19680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3837'. [ 1019.924655][T19724] pim6reg1: entered promiscuous mode [ 1019.935927][T19724] pim6reg1: entered allmulticast mode [ 1020.315866][T19735] pim6reg1: entered promiscuous mode [ 1020.321444][T19735] pim6reg1: entered allmulticast mode [ 1020.848610][T16802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.278337][T19769] binder: 19768:19769 unknown command 0 [ 1021.314894][T19769] binder: 19768:19769 ioctl c0306201 200000000080 returned -22 [ 1021.340544][T19769] binder: 19768:19769 ioctl c0306201 0 returned -14 [ 1021.471279][T19771] input: syz0 as /devices/virtual/input/input86 [ 1022.168118][T19793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3883'. [ 1022.435405][T19799] binder: 19798:19799 unknown command 0 [ 1022.485056][T19799] binder: 19798:19799 ioctl c0306201 200000000080 returned -22 [ 1022.534878][T19799] binder: 19798:19799 ioctl c0306201 0 returned -14 [ 1023.344270][ T5952] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1023.749433][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.760795][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.770669][ T5952] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.00 [ 1023.780296][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.791481][ T5952] usb 2-1: config 0 descriptor?? [ 1024.221235][ T5952] apple 0003:05AC:0242.0027: hidraw0: USB HID v0.00 Device [HID 05ac:0242] on usb-dummy_hcd.1-1/input0 [ 1024.407393][ T5952] usb 2-1: USB disconnect, device number 30 [ 1024.861103][T19649] Set syz1 is full, maxelem 65536 reached [ 1026.166818][T19915] raw_sendmsg: syz.5.3933 forgot to set AF_INET. Fix it! [ 1026.492311][T19936] syzkaller1: entered promiscuous mode [ 1026.506746][T19936] syzkaller1: entered allmulticast mode [ 1026.847774][ T5952] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1027.007844][ T5952] usb 6-1: Using ep0 maxpacket: 16 [ 1027.025018][ T5952] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1027.041256][ T5950] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1027.048908][ T5952] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1027.060281][ T5952] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1027.073946][ T5952] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1027.088094][ T43] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1027.102831][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.111010][ T5952] usb 6-1: Product: syz [ 1027.115203][ T5952] usb 6-1: Manufacturer: syz [ 1027.131277][ T5952] usb 6-1: SerialNumber: syz [ 1027.227936][ T5950] usb 5-1: Using ep0 maxpacket: 16 [ 1027.248142][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 1027.257987][ T5950] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.288745][ T43] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1027.306140][ T5950] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.318078][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.328014][ T5950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1027.334657][ T5950] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1027.344883][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.353962][ T43] usb 2-1: config 0 descriptor?? [ 1027.426860][ T5950] usb 5-1: config 0 descriptor?? [ 1027.437405][T19969] BUG: Bad page state in process syz.2.3955 pfn:46a01 [ 1027.446332][T19969] page does not match folio [ 1027.453114][T19969] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x46a01 [ 1027.473284][T19969] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1027.481440][T19969] raw: 00fff00000000000 0000000000000000 00000000ffffffff ffffffffffffffff [ 1027.490908][T19969] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 1027.500809][T19969] page dumped because: nonzero pincount [ 1027.506638][T19969] page_owner tracks the page as allocated [ 1027.513546][T19969] page last allocated via order 9, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 19968, tgid 19968 (syz.2.3955), ts 1027263919081, free_ts 976154810438 [ 1027.535647][T19969] post_alloc_hook+0x240/0x2a0 [ 1027.540584][T19969] get_page_from_freelist+0x21e4/0x22c0 [ 1027.546403][T19969] __alloc_frozen_pages_noprof+0x181/0x370 [ 1027.552542][T19969] alloc_pages_mpol+0x232/0x4a0 [ 1027.558899][ T5952] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 1027.560589][T19969] alloc_pages_noprof+0xa9/0x190 [ 1027.571599][T19969] folio_alloc_noprof+0x1e/0x30 [ 1027.576615][T19969] filemap_alloc_folio_noprof+0xdf/0x470 [ 1027.580865][ T43] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1027.583763][T19969] page_cache_ra_order+0x4de/0xd40 [ 1027.596099][T19969] do_sync_mmap_readahead+0x25e/0x7a0 [ 1027.599707][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1027.611939][T19969] filemap_fault+0x62c/0x1200 [ 1027.617955][ T43] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1027.622229][T19969] __do_fault+0x138/0x390 [ 1027.625397][ T43] usb 2-1: media controller created [ 1027.634418][T19969] __handle_mm_fault+0x1847/0x5440 [ 1027.640084][T19969] handle_mm_fault+0x40a/0x8e0 [ 1027.644916][T19969] do_user_addr_fault+0xa81/0x1390 [ 1027.656512][T19969] exc_page_fault+0x76/0xf0 [ 1027.661213][T19969] asm_exc_page_fault+0x26/0x30 [ 1027.666107][T19969] page last free pid 15310 tgid 15310 stack trace: [ 1027.669278][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1027.688905][T19969] free_unref_folios+0xdbd/0x1520 [ 1027.705896][T19969] folios_put_refs+0x559/0x640 [ 1027.712469][T19969] truncate_inode_pages_range+0x346/0xda0 [ 1027.721664][T19969] blkdev_flush_mapping+0x108/0x270 [ 1027.726910][T19969] bdev_release+0x417/0x650 [ 1027.733094][T19969] blkdev_release+0x15/0x20 [ 1027.741112][T19969] __fput+0x449/0xa70 [ 1027.745125][T19969] task_work_run+0x1d1/0x260 [ 1027.751323][T19969] do_exit+0x6b5/0x2300 [ 1027.755523][T19969] do_group_exit+0x21c/0x2d0 [ 1027.764890][T19969] get_signal+0x1286/0x1340 [ 1027.769694][T19969] arch_do_signal_or_restart+0x9a/0x750 [ 1027.775378][T19969] exit_to_user_mode_loop+0x75/0x110 [ 1027.781038][T19969] do_syscall_64+0x2bd/0x3b0 [ 1027.785664][T19969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.791753][T19969] Modules linked in: [ 1027.795687][T19969] CPU: 0 UID: 0 PID: 19969 Comm: syz.2.3955 Not tainted syzkaller #0 PREEMPT(full) [ 1027.795711][T19969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1027.795723][T19969] Call Trace: [ 1027.795731][T19969] [ 1027.795741][T19969] dump_stack_lvl+0x189/0x250 [ 1027.795771][T19969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1027.795796][T19969] ? __pfx_print_modules+0x10/0x10 [ 1027.795824][T19969] ? percpu_ref_put+0x19/0x180 [ 1027.795851][T19969] ? percpu_ref_put+0x19/0x180 [ 1027.795880][T19969] ? percpu_ref_put+0xf9/0x180 [ 1027.795909][T19969] bad_page+0x180/0x1c0 [ 1027.795932][T19969] free_tail_page_prepare+0x2c3/0x4f0 [ 1027.795960][T19969] __free_frozen_pages+0x7b7/0xd30 [ 1027.795997][T19969] __folio_put+0x21b/0x2c0 [ 1027.796019][T19969] ? __pfx___folio_put+0x10/0x10 [ 1027.796047][T19969] delete_from_page_cache_batch+0x84c/0x9b0 [ 1027.796072][T19969] ? shmem_mapping+0xd/0x50 [ 1027.796099][T19969] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 1027.796124][T19969] ? __filemap_fdatawait_range+0x1d2/0x230 [ 1027.796153][T19969] ? __pfx_workingset_update_node+0x10/0x10 [ 1027.796174][T19969] ? folio_mapping+0x16f/0x240 [ 1027.796199][T19969] ? truncate_cleanup_folio+0x34a/0x430 [ 1027.796227][T19969] truncate_inode_pages_range+0x28a/0xda0 [ 1027.796266][T19969] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 1027.796317][T19969] ? lockdep_hardirqs_on+0x9c/0x150 [ 1027.796336][T19969] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 1027.796356][T19969] ? smp_call_function_many_cond+0xe38/0x12d0 [ 1027.796402][T19969] ? __pfx___mutex_lock+0x10/0x10 [ 1027.796427][T19969] ? __pfx_has_bh_in_lru+0x10/0x10 [ 1027.796461][T19969] blkdev_flush_mapping+0x108/0x270 [ 1027.796482][T19969] ? bdev_release+0x40f/0x650 [ 1027.796502][T19969] bdev_release+0x417/0x650 [ 1027.796528][T19969] ? __pfx_blkdev_release+0x10/0x10 [ 1027.796549][T19969] blkdev_release+0x15/0x20 [ 1027.796568][T19969] __fput+0x449/0xa70 [ 1027.796599][T19969] task_work_run+0x1d1/0x260 [ 1027.796626][T19969] ? __pfx_task_work_run+0x10/0x10 [ 1027.796658][T19969] do_exit+0x6b5/0x2300 [ 1027.796689][T19969] ? do_raw_spin_lock+0x121/0x290 [ 1027.796715][T19969] ? __pfx_do_exit+0x10/0x10 [ 1027.796756][T19969] do_group_exit+0x21c/0x2d0 [ 1027.796780][T19969] ? lockdep_hardirqs_on+0x9c/0x150 [ 1027.796802][T19969] get_signal+0x1286/0x1340 [ 1027.796841][T19969] arch_do_signal_or_restart+0x9a/0x750 [ 1027.796878][T19969] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1027.796921][T19969] ? exit_to_user_mode_loop+0x40/0x110 [ 1027.796952][T19969] exit_to_user_mode_loop+0x75/0x110 [ 1027.796981][T19969] do_syscall_64+0x2bd/0x3b0 [ 1027.797001][T19969] ? lockdep_hardirqs_on+0x9c/0x150 [ 1027.797019][T19969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.797038][T19969] ? clear_bhb_loop+0x60/0xb0 [ 1027.797061][T19969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.797078][T19969] RIP: 0033:0x7f2d9f18eba9 [ 1027.797094][T19969] Code: Unable to access opcode bytes at 0x7f2d9f18eb7f. [ 1027.797104][T19969] RSP: 002b:00007f2d9ff850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1027.797123][T19969] RAX: 0000000000000001 RBX: 00007f2d9f3d5fa8 RCX: 00007f2d9f18eba9 [ 1027.797136][T19969] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2d9f3d5fac [ 1027.797149][T19969] RBP: 00007f2d9f3d5fa0 R08: 7fffffffffffffff R09: 0000000000000000 [ 1027.797162][T19969] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1027.797176][T19969] R13: 00007f2d9f3d6038 R14: 00007f2d9f4ff940 R15: 00007f2d9f4ffa28 [ 1027.797208][T19969] [ 1027.797238][T19969] Disabling lock debugging due to kernel taint [ 1027.856379][ T5950] zeroplus 0003:0C12:0005.0028: hidraw0: USB HID v0.07 Device [HID 0c12:0005] on usb-dummy_hcd.4-1/input0 [ 1027.861873][T19969] BUG: Bad page state in process syz.2.3955 pfn:46a00 [ 1027.871743][ T5950] zeroplus 0003:0C12:0005.0028: no inputs found [ 1027.887591][T19969] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46a00 [ 1028.061802][ T5950] usb 5-1: USB disconnect, device number 11 [ 1028.068140][T19969] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 1028.194094][T19969] flags: 0xfff0000000004d(locked|referenced|uptodate|head|node=0|zone=1|lastcpupid=0x7ff) [ 1028.205582][T19969] raw: 00fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 1028.213796][ T43] az6027: usb out operation failed. (-71) [ 1028.215219][T19969] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1028.229511][ T43] stb0899_attach: Driver disabled by Kconfig [ 1028.229940][T19969] head: 00fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 1028.236130][ T43] az6027: no front-end attached [ 1028.236130][ T43] [ 1028.245058][T19969] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1028.260530][ T43] az6027: usb out operation failed. (-71) [ 1028.261047][T19969] head: 00fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1028.268830][ T43] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1028.275446][T19969] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 1028.275463][T19969] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 1028.275475][T19969] page_owner tracks the page as allocated [ 1028.275503][T19969] page last allocated via order 9, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 19968, tgid 19968 (syz.2.3955), ts 1027263919081, free_ts 976154810438 [ 1028.275541][T19969] post_alloc_hook+0x240/0x2a0 [ 1028.275571][T19969] get_page_from_freelist+0x21e4/0x22c0 [ 1028.275590][T19969] __alloc_frozen_pages_noprof+0x181/0x370 [ 1028.275616][T19969] alloc_pages_mpol+0x232/0x4a0 [ 1028.275658][T19969] alloc_pages_noprof+0xa9/0x190 [ 1028.275683][T19969] folio_alloc_noprof+0x1e/0x30 [ 1028.275709][T19969] filemap_alloc_folio_noprof+0xdf/0x470 [ 1028.275737][T19969] page_cache_ra_order+0x4de/0xd40 [ 1028.275763][T19969] do_sync_mmap_readahead+0x25e/0x7a0 [ 1028.275802][T19969] filemap_fault+0x62c/0x1200 [ 1028.275820][T19969] __do_fault+0x138/0x390 [ 1028.275836][T19969] __handle_mm_fault+0x1847/0x5440 [ 1028.275860][T19969] handle_mm_fault+0x40a/0x8e0 [ 1028.275883][T19969] do_user_addr_fault+0xa81/0x1390 [ 1028.275910][T19969] exc_page_fault+0x76/0xf0 [ 1028.275945][T19969] asm_exc_page_fault+0x26/0x30 [ 1028.275963][T19969] page last free pid 15310 tgid 15310 stack trace: [ 1028.275976][T19969] free_unref_folios+0xdbd/0x1520 [ 1028.276002][T19969] folios_put_refs+0x559/0x640 [ 1028.276023][T19969] truncate_inode_pages_range+0x346/0xda0 [ 1028.276047][T19969] blkdev_flush_mapping+0x108/0x270 [ 1028.276086][T19969] bdev_release+0x417/0x650 [ 1028.276104][T19969] blkdev_release+0x15/0x20 [ 1028.276123][T19969] __fput+0x449/0xa70 [ 1028.276140][T19969] task_work_run+0x1d1/0x260 [ 1028.276165][T19969] do_exit+0x6b5/0x2300 [ 1028.276187][T19969] do_group_exit+0x21c/0x2d0 [ 1028.276226][T19969] get_signal+0x1286/0x1340 [ 1028.276244][T19969] arch_do_signal_or_restart+0x9a/0x750 [ 1028.276271][T19969] exit_to_user_mode_loop+0x75/0x110 [ 1028.276297][T19969] do_syscall_64+0x2bd/0x3b0 [ 1028.291220][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input87 [ 1028.302003][T19969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.339944][ T43] dvb-usb: schedule remote query interval to 400 msecs. [ 1028.357080][T19969] Modules linked in: [ 1028.361147][ T43] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1028.365605][T19969] [ 1028.374050][ T43] usb 2-1: USB disconnect, device number 31 [ 1028.383195][T19969] CPU: 0 UID: 0 PID: 19969 Comm: syz.2.3955 Tainted: G B syzkaller #0 PREEMPT(full) [ 1028.383225][T19969] Tainted: [B]=BAD_PAGE [ 1028.383232][T19969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1028.383245][T19969] Call Trace: [ 1028.383253][T19969] [ 1028.383261][T19969] dump_stack_lvl+0x189/0x250 [ 1028.383293][T19969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1028.383315][T19969] ? __pfx_print_modules+0x10/0x10 [ 1028.383347][T19969] bad_page+0x180/0x1c0 [ 1028.383387][T19969] __free_frozen_pages+0xce2/0xd30 [ 1028.383470][T19969] __folio_put+0x21b/0x2c0 [ 1028.383489][T19969] ? __pfx___folio_put+0x10/0x10 [ 1028.383510][T19969] delete_from_page_cache_batch+0x84c/0x9b0 [ 1028.383538][T19969] ? shmem_mapping+0xd/0x50 [ 1028.383560][T19969] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 1028.383586][T19969] ? __filemap_fdatawait_range+0x1d2/0x230 [ 1028.383614][T19969] ? __pfx_workingset_update_node+0x10/0x10 [ 1028.383635][T19969] ? folio_mapping+0x16f/0x240 [ 1028.383656][T19969] ? truncate_cleanup_folio+0x34a/0x430 [ 1028.383680][T19969] truncate_inode_pages_range+0x28a/0xda0 [ 1028.383708][T19969] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 1028.383741][T19969] ? lockdep_hardirqs_on+0x9c/0x150 [ 1028.383761][T19969] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 1028.383781][T19969] ? smp_call_function_many_cond+0xe38/0x12d0 [ 1028.383811][T19969] ? __pfx___mutex_lock+0x10/0x10 [ 1028.383832][T19969] ? __pfx_has_bh_in_lru+0x10/0x10 [ 1028.383853][T19969] blkdev_flush_mapping+0x108/0x270 [ 1028.383874][T19969] ? bdev_release+0x40f/0x650 [ 1028.383893][T19969] bdev_release+0x417/0x650 [ 1028.383914][T19969] ? __pfx_blkdev_release+0x10/0x10 [ 1028.383935][T19969] blkdev_release+0x15/0x20 [ 1028.383955][T19969] __fput+0x449/0xa70 [ 1028.383979][T19969] task_work_run+0x1d1/0x260 [ 1028.384004][T19969] ? __pfx_task_work_run+0x10/0x10 [ 1028.384033][T19969] do_exit+0x6b5/0x2300 [ 1028.384059][T19969] ? do_raw_spin_lock+0x121/0x290 [ 1028.384083][T19969] ? __pfx_do_exit+0x10/0x10 [ 1028.384111][T19969] do_group_exit+0x21c/0x2d0 [ 1028.384136][T19969] ? lockdep_hardirqs_on+0x9c/0x150 [ 1028.384154][T19969] get_signal+0x1286/0x1340 [ 1028.384180][T19969] arch_do_signal_or_restart+0x9a/0x750 [ 1028.384210][T19969] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1028.384243][T19969] ? exit_to_user_mode_loop+0x40/0x110 [ 1028.384272][T19969] exit_to_user_mode_loop+0x75/0x110 [ 1028.384298][T19969] do_syscall_64+0x2bd/0x3b0 [ 1028.384317][T19969] ? lockdep_hardirqs_on+0x9c/0x150 [ 1028.384335][T19969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.384354][T19969] ? clear_bhb_loop+0x60/0xb0 [ 1028.384375][T19969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.384394][T19969] RIP: 0033:0x7f2d9f18eba9 [ 1028.384417][T19969] Code: Unable to access opcode bytes at 0x7f2d9f18eb7f. [ 1028.384428][T19969] RSP: 002b:00007f2d9ff850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1028.384448][T19969] RAX: 0000000000000001 RBX: 00007f2d9f3d5fa8 RCX: 00007f2d9f18eba9 [ 1028.384463][T19969] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2d9f3d5fac [ 1028.384476][T19969] RBP: 00007f2d9f3d5fa0 R08: 7fffffffffffffff R09: 0000000000000000 [ 1028.384490][T19969] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1028.384503][T19969] R13: 00007f2d9f3d6038 R14: 00007f2d9f4ff940 R15: 00007f2d9f4ffa28 [ 1028.384523][T19969] [ 1028.605802][ T5952] usb 6-1: 2:1: cannot get freq at ep 0x82 [ 1028.876275][ T5952] usb 6-1: USB disconnect, device number 96 [ 1028.895499][ T43] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1028.906583][ T6833] udevd[6833]: setting owner of /dev/audio3 to uid=0, gid=29 failed: No such file or directory [ 1028.931565][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory