last executing test programs: 13.179493378s ago: executing program 1 (id=1453): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x11, 0x1, '/proc/mdstat\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x38}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 11.791777204s ago: executing program 1 (id=1455): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) dup(r0) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x14, r3, 0x405, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 11.211580291s ago: executing program 3 (id=1456): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r3, @ANYBLOB="080003"], 0x80}}, 0x8000) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x60001600, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) 10.271413882s ago: executing program 3 (id=1458): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x8c0, 0x80000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x26d7, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x64, 0x0) 10.165254903s ago: executing program 0 (id=1459): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r6 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) dup3(r6, r5, 0x80000) 10.157692372s ago: executing program 1 (id=1460): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xa) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) uname(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, 0x0) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r4, @ANYBLOB="0300"/18, @ANYRES32=0x0, @ANYRESOCT=r1], 0x50) syz_open_dev$vim2m(&(0x7f00000003c0), 0x80000bf, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xf, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095", @ANYRES16=r5, @ANYRES8], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) set_mempolicy(0x1, &(0x7f0000000080)=0x3, 0x8) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000100001040100080200fd05632cc94bdc", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES64], 0x44}}, 0x0) 6.670361983s ago: executing program 0 (id=1462): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x20000080) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r3 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r3}) 6.432319736s ago: executing program 2 (id=1463): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000001380)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f00000003c0)='GPL\x00', 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 6.335765087s ago: executing program 0 (id=1464): ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) inotify_init() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYBLOB="775eaa1bc72dcdd6576ec54a678b7668b84d3f7e6792e2bb18a9c1f2c723ba108a49ffc0577f23b61e2b5f20de4ab8c403e6dfdbf5901ea2a12d378b0edc2220d29ffb098468fd1a0ba42a4930aaa8fb0e87473aa3fbd13d1facfd1150a6ed863358072486818204af65a586be12e970594940ff8e51f3fa8cd9b110cc55", @ANYRES8], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) 6.223009108s ago: executing program 0 (id=1465): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) 6.132162829s ago: executing program 1 (id=1466): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r3, @ANYBLOB="080003"], 0x80}}, 0x8000) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x60001600, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) 5.351983979s ago: executing program 1 (id=1467): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x90004) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept4(r0, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000140)={0x0, "fc51620330dfc4536d7ae0257e5d07b15b112f495e1eb3291759e4e4ade8d52cb7d906f4da6e117989740a458a317c56f10755875efe7939ad7a23a8fd263c0885ebeae5910fc386bf61e776b00c983ed01bf9542b28ce546ebc56a05564b5705bbc884d64fbad597225093ce604ffa41783a9bc50e2c366938794f0fdd8da658784ecfac1ab9e7c2f6b8caaa11f3a1b799c9f227c57e07f4673f3119e1925b350b6e76ae1b001263a91e5f9b06ab664c976fbb11157382406f3793c2484c16989530b8becd66799e0376ca198a954ad29742c38af6af66da6da49ce52b07bb16508dabcdd5caa352d8dca7d6767a468ac1768dcc6cf4b91ba5f372bc32bce85"}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c800a2da39224f3baa4eea92782600796574fd98f10f958f7aae2560e83167ee7b235d7deee99825d337a2857a43c2c67835054dbae1165b864ba0cbde062a12efa50bce6c71d3d10dcd58631c24ad7f931b478aeb08890d02488ef83ea736d1fde9d9dabcda35cd0f0fbd529d62b6491a83a942d4b607d09d34e441e7d5f4fea8891e7b27b7ec516910a9f61a731316b94b5415cf77952a9b6001d427284b923c38"], 0xa6) 5.055412752s ago: executing program 3 (id=1468): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000300)='*\x00') socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0x0, &(0x7f0000000680)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="0a000000010001", 0x7) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @private}, &(0x7f00000000c0)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getitimer(0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x7, 0x6, @local}, 0x14) socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448ca, 0x0) 4.890460994s ago: executing program 3 (id=1469): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$igmp6(0xa, 0x3, 0x2) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) creat(&(0x7f0000000000)='./file0\x00', 0x30) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, 0x0) 4.382707481s ago: executing program 2 (id=1470): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.851774497s ago: executing program 3 (id=1471): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r6 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) dup3(r6, r5, 0x80000) 2.018793438s ago: executing program 2 (id=1472): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x38, 0x0, 0x9, 0x305, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x38}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x2, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 882.830491ms ago: executing program 2 (id=1473): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) 882.144681ms ago: executing program 3 (id=1474): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0x18, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=ANY=[@ANYBLOB="54010000", @ANYRES16=r4, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="0600cd00000000002f013300802009000802110000010802110000005050505050505f00ffffff"], 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 579.777134ms ago: executing program 2 (id=1475): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x1, 0x0, 0x7, [], [0x0, 0x0, 0xc, 0x1], [0x46b6], [0x4, 0x0, 0x3]}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000400)={r7, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x400000, 0x5], [0x1000, 0x0, 0x0, 0x80], [0x0, 0xfffffffffffffffd, 0x800000000, 0x3]}) close_range(r0, 0xffffffffffffffff, 0x0) 343.382467ms ago: executing program 0 (id=1476): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='limits\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="11000000000000000002"], 0x20) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) 159.453279ms ago: executing program 2 (id=1477): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x2c1, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) r3 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 113.753039ms ago: executing program 1 (id=1478): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) listen(0xffffffffffffffff, 0xffffffff) r3 = syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000380)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x27e2, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 0s ago: executing program 0 (id=1479): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$igmp6(0xa, 0x3, 0x2) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) creat(&(0x7f0000000000)='./file0\x00', 0x30) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, 0x0) kernel console output (not intermixed with test programs): lab_unreclaimable:94517 [ 446.380364][ T9355] mapped:24464 shmem:1380 pagetables:565 [ 446.380364][ T9355] sec_pagetables:0 bounce:0 [ 446.380364][ T9355] kernel_misc_reclaimable:0 [ 446.380364][ T9355] free:1357309 free_pcp:10443 free_cma:0 [ 446.520539][ T9355] Node 0 active_anon:23500kB inactive_anon:0kB active_file:4836kB inactive_file:160264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98008kB dirty:508kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:11504kB pagetables:2348kB sec_pagetables:0kB all_unreclaimable? no [ 446.553657][ T9355] Node 1 active_anon:0kB inactive_anon:0kB active_file:104kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 446.584844][ T9355] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 446.616279][ T9355] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 446.625033][ T9355] Node 0 DMA32 free:1518120kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:23492kB inactive_anon:0kB active_file:4836kB inactive_file:158952kB unevictable:1536kB writepending:508kB present:3129332kB managed:2589668kB mlocked:0kB bounce:0kB free_pcp:20384kB local_pcp:1444kB free_cma:0kB [ 446.665373][ T9355] lowmem_reserve[]: 0 0 1 1 1 [ 446.671079][ T9355] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 446.707259][ T9365] netlink: 20 bytes leftover after parsing attributes in process `syz.3.875'. [ 446.719651][ T9355] lowmem_reserve[]: 0 0 0 0 0 [ 446.727413][ T9355] Node 1 Normal free:3895656kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:104kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21024kB local_pcp:11264kB free_cma:0kB [ 446.764466][ T9355] lowmem_reserve[]: 0 0 0 0 0 [ 446.769987][ T9355] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 446.790572][ T9355] Node 0 DMA32: 1112*4kB (UME) 715*8kB (UME) 315*16kB (UME) 210*32kB (UME) 132*64kB (ME) 103*128kB (UME) 52*256kB (UME) 26*512kB (UME) 6*1024kB (UM) 4*2048kB (UM) 350*4096kB (UM) = 1518120kB [ 446.979386][ T9355] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 447.031438][ T9355] Node 1 Normal: 218*4kB (UME) 52*8kB (UME) 50*16kB (UME) 64*32kB (UME) 21*64kB (UME) 4*128kB (UME) 4*256kB (UME) 1*512kB (U) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3895656kB [ 447.053615][ T9355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 447.064523][ T9355] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 447.089179][ T9355] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 447.104709][ T9355] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 447.118022][ T9355] 42713 total pagecache pages [ 447.122826][ T9355] 2 pages in swap cache [ 447.128339][ T9355] Free swap = 124704kB [ 447.135055][ T9355] Total swap = 124996kB [ 447.141704][ T9355] 2097051 pages RAM [ 447.145536][ T9355] 0 pages HighMem/MovableOnly [ 447.151321][ T9355] 416120 pages reserved [ 447.155662][ T9355] 0 pages cma reserved [ 447.366349][ T5816] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 447.704672][ T5816] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 447.730259][ T5816] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 447.775935][ T5816] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 447.803754][ T5816] usb 3-1: config 1 interface 0 has no altsetting 0 [ 447.818880][ T5816] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 447.833346][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.866068][ T5816] usb 3-1: Product: ࢩ鱴ꑕ诶숔⊬ᶟ㫫롧茩샘鎸ꮼ瘗ힲﾸ嗚⣱늹⪶씻촛墀똇㵕㬅凡뉹ኵ⡜䢶୷憮벮꭪핎썵鿞尖ผ벟瘢흴Ⲽ풛֊ᚅ [ 447.950923][ T5816] usb 3-1: Manufacturer: ї [ 447.955512][ T5816] usb 3-1: SerialNumber: 仈吪꨷麷씿⃔৐἟㟜⭨끥⏕ᚴ庆럣굘 [ 448.038284][ T9367] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 448.063305][ T9367] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 448.326303][ T9373] block device autoloading is deprecated and will be removed. [ 448.348787][ T9375] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 448.355353][ T9375] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 448.674730][ T9379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.879'. [ 448.998594][ T5816] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 449.016725][ T9375] vhci_hcd vhci_hcd.0: Device attached [ 449.026186][ T5816] usb 3-1: USB disconnect, device number 4 [ 449.119426][ T9376] vhci_hcd: connection closed [ 449.131868][ T1136] vhci_hcd: stop threads [ 449.193726][ T1136] vhci_hcd: release socket [ 449.249210][ T1136] vhci_hcd: disconnect device [ 449.306032][ T5854] usb 39-1: new low-speed USB device number 9 using vhci_hcd [ 449.313593][ T5854] usb 39-1: enqueue for inactive port 0 [ 449.539989][ T5854] vhci_hcd: vhci_device speed not set [ 452.055393][ T9402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.887'. [ 455.634979][ T9432] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 455.641562][ T9432] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 455.650705][ T9432] vhci_hcd vhci_hcd.0: Device attached [ 455.662437][ T9432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.893'. [ 455.892508][ T9433] vhci_hcd: connection closed [ 455.900623][ T12] vhci_hcd: stop threads [ 455.914030][ T12] vhci_hcd: release socket [ 455.918849][ T12] vhci_hcd: disconnect device [ 457.378716][ T5816] vhci_hcd: vhci_device speed not set [ 458.881976][ T9449] netlink: 'syz.0.901': attribute type 10 has an invalid length. [ 459.091362][ T9449] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.172577][ T9449] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.343337][ T9449] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.443291][ T9449] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.549009][ T9449] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.574995][ T9449] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.605272][ T9449] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.627108][ T9449] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.326333][ T9465] tmpfs: Unknown parameter 'nr_ino' [ 462.005739][ T9479] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.910'. [ 463.346611][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 463.356230][ T5785] CPU: 0 PID: 5785 Comm: kworker/u5:8 Not tainted 6.6.94-syzkaller #0 [ 463.364407][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 463.374492][ T5785] Workqueue: hci3 hci_rx_work [ 463.379203][ T5785] Call Trace: [ 463.382488][ T5785] [ 463.385423][ T5785] dump_stack_lvl+0x16c/0x230 [ 463.390123][ T5785] ? show_regs_print_info+0x20/0x20 [ 463.395339][ T5785] ? load_image+0x3b0/0x3b0 [ 463.399860][ T5785] sysfs_create_dir_ns+0x256/0x280 [ 463.404975][ T5785] ? hci_rx_work+0x43a/0xd80 [ 463.409597][ T5785] ? sysfs_warn_dup+0xa0/0xa0 [ 463.414284][ T5785] ? do_raw_spin_unlock+0x121/0x230 [ 463.419500][ T5785] kobject_add_internal+0x6b8/0xc70 [ 463.424713][ T5785] kobject_add+0x156/0x220 [ 463.429141][ T5785] ? __rwlock_init+0x150/0x150 [ 463.433919][ T5785] ? kobject_init+0x1e0/0x1e0 [ 463.438600][ T5785] ? _raw_spin_unlock+0x28/0x40 [ 463.443475][ T5785] ? get_device_parent+0x366/0x390 [ 463.448593][ T5785] device_add+0x408/0xc20 [ 463.452925][ T5785] hci_conn_add_sysfs+0xd5/0x1e0 [ 463.457875][ T5785] le_conn_complete_evt+0xc37/0x1220 [ 463.463166][ T5785] ? hci_event_packet+0x4a7/0x1210 [ 463.468298][ T5785] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 463.474547][ T5785] ? __copy_skb_header+0xa7/0x550 [ 463.479572][ T5785] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 463.485213][ T5785] ? skb_pull_data+0xfb/0x200 [ 463.489895][ T5785] hci_le_conn_complete_evt+0x187/0x440 [ 463.495454][ T5785] ? hci_remote_host_features_evt+0x160/0x160 [ 463.501533][ T5785] hci_event_packet+0x795/0x1210 [ 463.506502][ T5785] ? bis_list+0x290/0x290 [ 463.510848][ T5785] ? lockdep_hardirqs_on+0x98/0x150 [ 463.516066][ T5785] ? hci_send_to_monitor+0xd7/0x4f0 [ 463.521282][ T5785] hci_rx_work+0x43a/0xd80 [ 463.525726][ T5785] ? process_scheduled_works+0x957/0x15b0 [ 463.531474][ T5785] process_scheduled_works+0xa45/0x15b0 [ 463.537088][ T5785] ? assign_work+0x400/0x400 [ 463.541720][ T5785] ? assign_work+0x39e/0x400 [ 463.546333][ T5785] worker_thread+0xa55/0xfc0 [ 463.550943][ T5785] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 463.556855][ T5785] ? _raw_spin_unlock+0x40/0x40 [ 463.561720][ T5785] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 463.567649][ T5785] kthread+0x2fa/0x390 [ 463.571729][ T5785] ? pr_cont_work+0x560/0x560 [ 463.576423][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 463.581037][ T5785] ret_from_fork+0x48/0x80 [ 463.585506][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 463.590111][ T5785] ret_from_fork_asm+0x11/0x20 [ 463.594902][ T5785] [ 463.603657][ T5785] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 463.620168][ T5785] Bluetooth: hci3: failed to register connection device [ 463.752643][ T5775] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 463.857038][ T9493] tmpfs: Bad value for 'nr_inodes' [ 467.522580][ T9518] overlayfs: missing 'workdir' [ 468.039208][ T9530] tmpfs: Bad value for 'nr_inodes' [ 469.826029][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 471.052000][ T9563] warn_alloc: 1 callbacks suppressed [ 471.052010][ T9563] syz.0.935: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 471.093511][ T9563] CPU: 1 PID: 9563 Comm: syz.0.935 Not tainted 6.6.94-syzkaller #0 [ 471.101451][ T9563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 471.111529][ T9563] Call Trace: [ 471.114810][ T9563] [ 471.117747][ T9563] dump_stack_lvl+0x16c/0x230 [ 471.122445][ T9563] ? show_regs_print_info+0x20/0x20 [ 471.127667][ T9563] ? load_image+0x3b0/0x3b0 [ 471.132177][ T9563] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 471.138593][ T9563] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 471.145098][ T9563] warn_alloc+0x210/0x300 [ 471.149442][ T9563] ? stack_trace_save+0x9c/0xe0 [ 471.154297][ T9563] ? zone_watermark_ok_safe+0x230/0x230 [ 471.159850][ T9563] ? kasan_set_track+0x5f/0x70 [ 471.164637][ T9563] ? kasan_set_track+0x4e/0x70 [ 471.169402][ T9563] ? __kasan_kmalloc+0x8f/0xa0 [ 471.174191][ T9563] ? xsk_init_queue+0xb0/0x110 [ 471.178951][ T9563] ? xsk_setsockopt+0x43c/0x6f0 [ 471.183797][ T9563] ? do_sock_setsockopt+0x254/0x3e0 [ 471.188998][ T9563] ? __x64_sys_setsockopt+0x1be/0x250 [ 471.194389][ T9563] __vmalloc_node_range+0x126/0x1320 [ 471.199712][ T9563] ? free_vm_area+0x50/0x50 [ 471.204233][ T9563] vmalloc_user+0x74/0x80 [ 471.208568][ T9563] ? xskq_create+0xbf/0x170 [ 471.213074][ T9563] xskq_create+0xbf/0x170 [ 471.217413][ T9563] xsk_init_queue+0xb0/0x110 [ 471.222006][ T9563] xsk_setsockopt+0x43c/0x6f0 [ 471.226682][ T9563] ? xsk_poll+0x670/0x670 [ 471.231015][ T9563] ? aa_sock_opt_perm+0x74/0x100 [ 471.235952][ T9563] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 471.241493][ T9563] ? security_socket_setsockopt+0x7e/0xa0 [ 471.247210][ T9563] ? xsk_poll+0x670/0x670 [ 471.251537][ T9563] do_sock_setsockopt+0x254/0x3e0 [ 471.256561][ T9563] ? __ia32_sys_recv+0xb0/0xb0 [ 471.261340][ T9563] ? __fdget+0x180/0x210 [ 471.265581][ T9563] __x64_sys_setsockopt+0x1be/0x250 [ 471.270781][ T9563] do_syscall_64+0x55/0xb0 [ 471.275197][ T9563] ? clear_bhb_loop+0x40/0x90 [ 471.279865][ T9563] ? clear_bhb_loop+0x40/0x90 [ 471.284535][ T9563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 471.290434][ T9563] RIP: 0033:0x7f4b1258e929 [ 471.294844][ T9563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.314459][ T9563] RSP: 002b:00007f4b1335d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 471.322876][ T9563] RAX: ffffffffffffffda RBX: 00007f4b127b5fa0 RCX: 00007f4b1258e929 [ 471.330840][ T9563] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 471.338803][ T9563] RBP: 00007f4b12610b39 R08: 0000000000000004 R09: 0000000000000000 [ 471.346768][ T9563] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.354734][ T9563] R13: 0000000000000000 R14: 00007f4b127b5fa0 R15: 00007ffdac73f368 [ 471.362707][ T9563] [ 471.380029][ T9563] Mem-Info: [ 471.383318][ T9563] active_anon:8222 inactive_anon:0 isolated_anon:0 [ 471.383318][ T9563] active_file:1252 inactive_file:40126 isolated_file:0 [ 471.383318][ T9563] unevictable:768 dirty:93 writeback:0 [ 471.383318][ T9563] slab_reclaimable:10684 slab_unreclaimable:94152 [ 471.383318][ T9563] mapped:27287 shmem:4234 pagetables:566 [ 471.383318][ T9563] sec_pagetables:0 bounce:0 [ 471.383318][ T9563] kernel_misc_reclaimable:0 [ 471.383318][ T9563] free:1351022 free_pcp:14440 free_cma:0 [ 471.474664][ T9563] Node 0 active_anon:32888kB inactive_anon:0kB active_file:4904kB inactive_file:160304kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:109096kB dirty:372kB writeback:0kB shmem:15400kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11464kB pagetables:2264kB sec_pagetables:0kB all_unreclaimable? no [ 471.517224][ T9563] Node 1 active_anon:0kB inactive_anon:0kB active_file:104kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 471.557883][ T9563] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 471.586169][ T9563] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 471.591978][ T9563] Node 0 DMA32 free:1493064kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:32904kB inactive_anon:0kB active_file:4904kB inactive_file:158992kB unevictable:1536kB writepending:372kB present:3129332kB managed:2589668kB mlocked:0kB bounce:0kB free_pcp:36872kB local_pcp:17360kB free_cma:0kB [ 471.645947][ T9563] lowmem_reserve[]: 0 0 1 1 1 [ 471.699521][ T9563] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 471.732735][ T9563] lowmem_reserve[]: 0 0 0 0 0 [ 471.737576][ T9563] Node 1 Normal free:3895656kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:104kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21024kB local_pcp:11264kB free_cma:0kB [ 471.750525][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'. [ 471.767373][ T9563] lowmem_reserve[]: 0 0 0 0 0 [ 471.767437][ T9563] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 471.810511][ T9563] Node 0 DMA32: 957*4kB (UME) 501*8kB (UME) 157*16kB (UME) 327*32kB (UME) 54*64kB (UME) 63*128kB (UME) 45*256kB (UME) 20*512kB (UME) 7*1024kB (UM) 5*2048kB (M) 347*4096kB (M) = 1492812kB [ 471.836358][ T9563] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 471.848495][ T9563] Node 1 Normal: 218*4kB (UME) 52*8kB (UME) 50*16kB (UME) 64*32kB (UME) 21*64kB (UME) 4*128kB (UME) 4*256kB (UME) 1*512kB (U) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3895656kB [ 471.866682][ T9563] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 471.876535][ T9563] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 471.886248][ T9563] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 471.915305][ T9563] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 471.976179][ T9563] 45610 total pagecache pages [ 471.986484][ T9563] 2 pages in swap cache [ 471.990689][ T9563] Free swap = 124704kB [ 472.008407][ T9563] Total swap = 124996kB [ 472.018735][ T9563] 2097051 pages RAM [ 472.028900][ T9563] 0 pages HighMem/MovableOnly [ 472.038252][ T9563] 416120 pages reserved [ 472.060869][ T9563] 0 pages cma reserved [ 476.573690][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 477.952536][ T9619] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.951'. [ 481.459593][ T9649] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.961'. [ 483.167691][ T9664] warn_alloc: 2 callbacks suppressed [ 483.167772][ T9664] syz.1.966: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 483.272312][ T9664] CPU: 1 PID: 9664 Comm: syz.1.966 Not tainted 6.6.94-syzkaller #0 [ 483.280266][ T9664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 483.290350][ T9664] Call Trace: [ 483.293651][ T9664] [ 483.296606][ T9664] dump_stack_lvl+0x16c/0x230 [ 483.301351][ T9664] ? show_regs_print_info+0x20/0x20 [ 483.306595][ T9664] ? load_image+0x3b0/0x3b0 [ 483.311135][ T9664] ? __rcu_read_unlock+0x7c/0xd0 [ 483.316112][ T9664] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 483.322561][ T9664] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 483.329098][ T9664] warn_alloc+0x210/0x300 [ 483.333454][ T9664] ? stack_trace_save+0x9c/0xe0 [ 483.338363][ T9664] ? zone_watermark_ok_safe+0x230/0x230 [ 483.343955][ T9664] ? kasan_set_track+0x5f/0x70 [ 483.348751][ T9664] ? kasan_set_track+0x4e/0x70 [ 483.353545][ T9664] ? __kasan_kmalloc+0x8f/0xa0 [ 483.358343][ T9664] ? xsk_init_queue+0xb0/0x110 [ 483.363139][ T9664] ? xsk_setsockopt+0x43c/0x6f0 [ 483.368020][ T9664] ? do_sock_setsockopt+0x254/0x3e0 [ 483.373252][ T9664] ? __x64_sys_setsockopt+0x1be/0x250 [ 483.378657][ T9664] __vmalloc_node_range+0x126/0x1320 [ 483.384008][ T9664] ? free_vm_area+0x50/0x50 [ 483.388574][ T9664] vmalloc_user+0x74/0x80 [ 483.392942][ T9664] ? xskq_create+0xbf/0x170 [ 483.397481][ T9664] xskq_create+0xbf/0x170 [ 483.401853][ T9664] xsk_init_queue+0xb0/0x110 [ 483.406474][ T9664] xsk_setsockopt+0x43c/0x6f0 [ 483.411192][ T9664] ? xsk_poll+0x670/0x670 [ 483.415567][ T9664] ? aa_sock_opt_perm+0x74/0x100 [ 483.420564][ T9664] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 483.426152][ T9664] ? security_socket_setsockopt+0x7e/0xa0 [ 483.431907][ T9664] ? xsk_poll+0x670/0x670 [ 483.436275][ T9664] do_sock_setsockopt+0x254/0x3e0 [ 483.441342][ T9664] ? __ia32_sys_recv+0xb0/0xb0 [ 483.446139][ T9664] ? __fdget+0x180/0x210 [ 483.450420][ T9664] __x64_sys_setsockopt+0x1be/0x250 [ 483.455660][ T9664] do_syscall_64+0x55/0xb0 [ 483.460116][ T9664] ? clear_bhb_loop+0x40/0x90 [ 483.464839][ T9664] ? clear_bhb_loop+0x40/0x90 [ 483.469545][ T9664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 483.475475][ T9664] RIP: 0033:0x7f80e118e929 [ 483.479932][ T9664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.499565][ T9664] RSP: 002b:00007f80e205e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 483.508011][ T9664] RAX: ffffffffffffffda RBX: 00007f80e13b5fa0 RCX: 00007f80e118e929 [ 483.516019][ T9664] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 483.524031][ T9664] RBP: 00007f80e1210b39 R08: 0000000000000004 R09: 0000000000000000 [ 483.532030][ T9664] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.540017][ T9664] R13: 0000000000000000 R14: 00007f80e13b5fa0 R15: 00007ffcedac9da8 [ 483.548006][ T9664] [ 483.566363][ T9664] Mem-Info: [ 483.569513][ T9664] active_anon:7769 inactive_anon:0 isolated_anon:0 [ 483.569513][ T9664] active_file:1252 inactive_file:40130 isolated_file:0 [ 483.569513][ T9664] unevictable:768 dirty:154 writeback:0 [ 483.569513][ T9664] slab_reclaimable:10669 slab_unreclaimable:94751 [ 483.569513][ T9664] mapped:26813 shmem:3765 pagetables:582 [ 483.569513][ T9664] sec_pagetables:0 bounce:0 [ 483.569513][ T9664] kernel_misc_reclaimable:0 [ 483.569513][ T9664] free:1356470 free_pcp:8807 free_cma:0 [ 483.627905][ T9664] Node 0 active_anon:31676kB inactive_anon:0kB active_file:4904kB inactive_file:160320kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107800kB dirty:616kB writeback:0kB shmem:14124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11436kB pagetables:2328kB sec_pagetables:0kB all_unreclaimable? no [ 483.661442][ T9664] Node 1 active_anon:0kB inactive_anon:0kB active_file:104kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 483.693986][ T9664] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 483.721502][ T9664] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 483.727514][ T9664] Node 0 DMA32 free:1514856kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:32724kB inactive_anon:0kB active_file:4904kB inactive_file:159008kB unevictable:1536kB writepending:616kB present:3129332kB managed:2589668kB mlocked:0kB bounce:0kB free_pcp:12684kB local_pcp:11292kB free_cma:0kB [ 483.806745][ T9664] lowmem_reserve[]: 0 0 1 1 1 [ 483.811567][ T9664] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 483.843191][ T9664] lowmem_reserve[]: 0 0 0 0 0 [ 483.848327][ T9664] Node 1 Normal free:3895656kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:104kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21024kB local_pcp:9760kB free_cma:0kB [ 483.878489][ T9664] lowmem_reserve[]: 0 0 0 0 0 [ 483.883367][ T9664] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 484.007343][ T9664] Node 0 DMA32: 629*4kB (UM) 383*8kB (UE) 105*16kB (UME) 259*32kB (UME) 132*64kB (UME) 55*128kB (UME) 37*256kB (UME) 19*512kB (UME) 9*1024kB (UM) 5*2048kB (UM) 350*4096kB (UM) = 1503292kB [ 484.027473][ T9664] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 484.039609][ T9664] Node 1 Normal: 218*4kB (UME) 52*8kB (UME) 50*16kB (UME) 64*32kB (UME) 21*64kB (UME) 4*128kB (UME) 4*256kB (UME) 1*512kB (U) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3895656kB [ 484.063344][ T9664] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 484.097028][ T9664] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 484.115925][ T9664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 484.135995][ T9664] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 484.145333][ T9664] 48485 total pagecache pages [ 484.316612][ T9664] 3 pages in swap cache [ 484.320825][ T9664] Free swap = 124696kB [ 484.325120][ T9664] Total swap = 124996kB [ 484.334156][ T9664] 2097051 pages RAM [ 484.346836][ T9664] 0 pages HighMem/MovableOnly [ 484.356179][ T9664] 416120 pages reserved [ 484.364369][ T9664] 0 pages cma reserved [ 494.695411][ T9770] warn_alloc: 2 callbacks suppressed [ 494.695422][ T9770] syz.1.997: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 494.887795][ T9770] CPU: 1 PID: 9770 Comm: syz.1.997 Not tainted 6.6.94-syzkaller #0 [ 494.895782][ T9770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 494.905880][ T9770] Call Trace: [ 494.909179][ T9770] [ 494.912128][ T9770] dump_stack_lvl+0x16c/0x230 [ 494.916842][ T9770] ? show_regs_print_info+0x20/0x20 [ 494.922083][ T9770] ? load_image+0x3b0/0x3b0 [ 494.926618][ T9770] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 494.933082][ T9770] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 494.939616][ T9770] warn_alloc+0x210/0x300 [ 494.943986][ T9770] ? stack_trace_save+0x9c/0xe0 [ 494.948871][ T9770] ? zone_watermark_ok_safe+0x230/0x230 [ 494.954451][ T9770] ? kasan_set_track+0x5f/0x70 [ 494.959245][ T9770] ? kasan_set_track+0x4e/0x70 [ 494.964043][ T9770] ? __kasan_kmalloc+0x8f/0xa0 [ 494.968836][ T9770] ? xsk_init_queue+0xb0/0x110 [ 494.973635][ T9770] ? xsk_setsockopt+0x43c/0x6f0 [ 494.978534][ T9770] ? do_sock_setsockopt+0x254/0x3e0 [ 494.983750][ T9770] ? __x64_sys_setsockopt+0x1be/0x250 [ 494.989141][ T9770] __vmalloc_node_range+0x126/0x1320 [ 494.994453][ T9770] ? free_vm_area+0x50/0x50 [ 494.998972][ T9770] vmalloc_user+0x74/0x80 [ 495.003309][ T9770] ? xskq_create+0xbf/0x170 [ 495.007819][ T9770] xskq_create+0xbf/0x170 [ 495.012154][ T9770] xsk_init_queue+0xb0/0x110 [ 495.016742][ T9770] xsk_setsockopt+0x43c/0x6f0 [ 495.021417][ T9770] ? xsk_poll+0x670/0x670 [ 495.025745][ T9770] ? aa_sock_opt_perm+0x74/0x100 [ 495.030683][ T9770] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 495.036247][ T9770] ? security_socket_setsockopt+0x7e/0xa0 [ 495.041960][ T9770] ? xsk_poll+0x670/0x670 [ 495.046293][ T9770] do_sock_setsockopt+0x254/0x3e0 [ 495.051312][ T9770] ? __ia32_sys_recv+0xb0/0xb0 [ 495.056101][ T9770] ? __fdget+0x180/0x210 [ 495.060383][ T9770] __x64_sys_setsockopt+0x1be/0x250 [ 495.065585][ T9770] do_syscall_64+0x55/0xb0 [ 495.070020][ T9770] ? clear_bhb_loop+0x40/0x90 [ 495.074719][ T9770] ? clear_bhb_loop+0x40/0x90 [ 495.079397][ T9770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.085289][ T9770] RIP: 0033:0x7f80e118e929 [ 495.089711][ T9770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.109345][ T9770] RSP: 002b:00007f80e205e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 495.117762][ T9770] RAX: ffffffffffffffda RBX: 00007f80e13b5fa0 RCX: 00007f80e118e929 [ 495.125735][ T9770] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 495.133715][ T9770] RBP: 00007f80e1210b39 R08: 0000000000000004 R09: 0000000000000000 [ 495.141698][ T9770] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.149683][ T9770] R13: 0000000000000000 R14: 00007f80e13b5fa0 R15: 00007ffcedac9da8 [ 495.157695][ T9770] [ 495.225973][ T9770] Mem-Info: [ 495.272363][ T9770] active_anon:7585 inactive_anon:22 isolated_anon:0 [ 495.272363][ T9770] active_file:1252 inactive_file:40134 isolated_file:0 [ 495.272363][ T9770] unevictable:768 dirty:134 writeback:0 [ 495.272363][ T9770] slab_reclaimable:10662 slab_unreclaimable:95027 [ 495.272363][ T9770] mapped:25410 shmem:3647 pagetables:538 [ 495.272363][ T9770] sec_pagetables:0 bounce:0 [ 495.272363][ T9770] kernel_misc_reclaimable:0 [ 495.272363][ T9770] free:1354355 free_pcp:10762 free_cma:0 [ 495.345959][ T9770] Node 0 active_anon:26240kB inactive_anon:88kB active_file:4904kB inactive_file:160336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101640kB dirty:536kB writeback:0kB shmem:8952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11332kB pagetables:2152kB sec_pagetables:0kB all_unreclaimable? no [ 495.379606][ T9770] Node 1 active_anon:0kB inactive_anon:0kB active_file:104kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 495.657153][ T9770] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 495.710528][ T9770] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 495.717357][ T9770] Node 0 DMA32 free:1506396kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:32788kB inactive_anon:88kB active_file:4904kB inactive_file:159024kB unevictable:1536kB writepending:536kB present:3129332kB managed:2589668kB mlocked:0kB bounce:0kB free_pcp:19172kB local_pcp:8624kB free_cma:0kB [ 495.834660][ T9770] lowmem_reserve[]: 0 0 1 1 1 [ 495.865258][ T9770] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 495.917514][ T9770] lowmem_reserve[]: 0 0 0 0 0 [ 495.935038][ T9770] Node 1 Normal free:3895656kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:104kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21024kB local_pcp:11264kB free_cma:0kB [ 495.978946][ T9770] lowmem_reserve[]: 0 0 0 0 0 [ 495.984078][ T9770] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 496.004003][ T9770] Node 0 DMA32: 704*4kB (UME) 602*8kB (UME) 318*16kB (UME) 241*32kB (UME) 126*64kB (UME) 71*128kB (UME) 39*256kB (UME) 10*512kB (UME) 6*1024kB (UM) 6*2048kB (UM) 350*4096kB (UM) = 1504720kB [ 496.024148][ T9770] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 496.040068][ T9770] Node 1 Normal: 218*4kB (UME) 52*8kB (UME) 50*16kB (UME) 64*32kB (UME) 21*64kB (UME) 4*128kB (UME) 4*256kB (UME) 1*512kB (U) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3895656kB [ 496.107242][ T9770] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 496.133197][ T9770] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 496.156684][ T9770] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 496.191505][ T9770] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 496.392167][ T9770] 45619 total pagecache pages [ 496.398939][ T9770] 3 pages in swap cache [ 496.406044][ T9770] Free swap = 124372kB [ 496.410304][ T9770] Total swap = 124996kB [ 496.414468][ T9770] 2097051 pages RAM [ 496.418879][ T9770] 0 pages HighMem/MovableOnly [ 496.555956][ T9770] 416120 pages reserved [ 496.560286][ T9770] 0 pages cma reserved [ 499.502931][ T9803] Illegal XDP return value 779672064 on prog (id 333) dev syz_tun, expect packet loss! [ 501.419284][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.426201][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.033658][ T9812] mkiss: ax0: crc mode is auto. [ 504.654512][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 506.557326][ T9855] netlink: 'syz.2.1015': attribute type 10 has an invalid length. [ 507.207275][ T9892] warn_alloc: 1 callbacks suppressed [ 507.207292][ T9892] syz.2.1022: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 507.294561][ T9892] CPU: 0 PID: 9892 Comm: syz.2.1022 Not tainted 6.6.94-syzkaller #0 [ 507.302604][ T9892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 507.312680][ T9892] Call Trace: [ 507.315986][ T9892] [ 507.318963][ T9892] dump_stack_lvl+0x16c/0x230 [ 507.323683][ T9892] ? show_regs_print_info+0x20/0x20 [ 507.328906][ T9892] ? load_image+0x3b0/0x3b0 [ 507.333439][ T9892] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 507.339850][ T9892] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 507.346362][ T9892] warn_alloc+0x210/0x300 [ 507.350698][ T9892] ? stack_trace_save+0x9c/0xe0 [ 507.355563][ T9892] ? zone_watermark_ok_safe+0x230/0x230 [ 507.361219][ T9892] ? kasan_set_track+0x5f/0x70 [ 507.366023][ T9892] ? kasan_set_track+0x4e/0x70 [ 507.370821][ T9892] ? __kasan_kmalloc+0x8f/0xa0 [ 507.375593][ T9892] ? xsk_init_queue+0xb0/0x110 [ 507.380377][ T9892] ? xsk_setsockopt+0x43c/0x6f0 [ 507.385241][ T9892] ? do_sock_setsockopt+0x254/0x3e0 [ 507.390469][ T9892] ? __x64_sys_setsockopt+0x1be/0x250 [ 507.395856][ T9892] __vmalloc_node_range+0x126/0x1320 [ 507.401177][ T9892] ? free_vm_area+0x50/0x50 [ 507.405727][ T9892] vmalloc_user+0x74/0x80 [ 507.410089][ T9892] ? xskq_create+0xbf/0x170 [ 507.414599][ T9892] xskq_create+0xbf/0x170 [ 507.418939][ T9892] xsk_init_queue+0xb0/0x110 [ 507.423534][ T9892] xsk_setsockopt+0x43c/0x6f0 [ 507.428225][ T9892] ? xsk_poll+0x670/0x670 [ 507.432574][ T9892] ? aa_sock_opt_perm+0x74/0x100 [ 507.437535][ T9892] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 507.443093][ T9892] ? security_socket_setsockopt+0x7e/0xa0 [ 507.448814][ T9892] ? xsk_poll+0x670/0x670 [ 507.453159][ T9892] do_sock_setsockopt+0x254/0x3e0 [ 507.458190][ T9892] ? __ia32_sys_recv+0xb0/0xb0 [ 507.462964][ T9892] ? __fdget+0x180/0x210 [ 507.467213][ T9892] __x64_sys_setsockopt+0x1be/0x250 [ 507.472426][ T9892] do_syscall_64+0x55/0xb0 [ 507.476847][ T9892] ? clear_bhb_loop+0x40/0x90 [ 507.481526][ T9892] ? clear_bhb_loop+0x40/0x90 [ 507.486208][ T9892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.492135][ T9892] RIP: 0033:0x7f03cf58e929 [ 507.496547][ T9892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.516157][ T9892] RSP: 002b:00007f03d03d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 507.524573][ T9892] RAX: ffffffffffffffda RBX: 00007f03cf7b5fa0 RCX: 00007f03cf58e929 [ 507.532555][ T9892] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 507.540546][ T9892] RBP: 00007f03cf610b39 R08: 0000000000000004 R09: 0000000000000000 [ 507.548522][ T9892] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.556498][ T9892] R13: 0000000000000000 R14: 00007f03cf7b5fa0 R15: 00007fff4316dc38 [ 507.564495][ T9892] [ 507.591768][ T9892] Mem-Info: [ 507.594944][ T9892] active_anon:5790 inactive_anon:0 isolated_anon:0 [ 507.594944][ T9892] active_file:1252 inactive_file:40138 isolated_file:0 [ 507.594944][ T9892] unevictable:768 dirty:49 writeback:0 [ 507.594944][ T9892] slab_reclaimable:10798 slab_unreclaimable:95448 [ 507.594944][ T9892] mapped:24456 shmem:1882 pagetables:536 [ 507.594944][ T9892] sec_pagetables:0 bounce:0 [ 507.594944][ T9892] kernel_misc_reclaimable:0 [ 507.594944][ T9892] free:1354867 free_pcp:11487 free_cma:0 [ 507.762232][ T9892] Node 0 active_anon:33660kB inactive_anon:0kB active_file:4904kB inactive_file:160352kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108872kB dirty:196kB writeback:0kB shmem:16292kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11208kB pagetables:2144kB sec_pagetables:0kB all_unreclaimable? no [ 507.795113][ T9892] Node 1 active_anon:0kB inactive_anon:0kB active_file:104kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 507.885983][ T9892] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 509.260788][ T9892] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 509.266732][ T9892] Node 0 DMA32 free:1501388kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:32584kB inactive_anon:0kB active_file:4904kB inactive_file:159048kB unevictable:1536kB writepending:300kB present:3129332kB managed:2589668kB mlocked:0kB bounce:0kB free_pcp:22488kB local_pcp:972kB free_cma:0kB [ 509.303974][ T9892] lowmem_reserve[]: 0 0 1 1 1 [ 509.308869][ T9892] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 509.347123][ T9892] lowmem_reserve[]: 0 0 0 0 0 [ 509.351989][ T9892] Node 1 Normal free:3895656kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:104kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21024kB local_pcp:9760kB free_cma:0kB [ 509.391619][ T9892] lowmem_reserve[]: 0 0 0 0 0 [ 509.397897][ T9892] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 509.414756][ T9892] Node 0 DMA32: 308*4kB (UME) 368*8kB (UME) 468*16kB (UME) 621*32kB (UME) 180*64kB (UM) 60*128kB (UME) 43*256kB (UME) 17*512kB (UME) 6*1024kB (UM) 6*2048kB (UM) 350*4096kB (UM) = 1522480kB [ 509.438217][ T9892] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 509.451616][ T9892] Node 1 Normal: 218*4kB (UME) 52*8kB (UME) 50*16kB (UME) 64*32kB (UME) 21*64kB (UME) 4*128kB (UME) 4*256kB (UME) 1*512kB (U) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3895656kB [ 509.495214][ T9892] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 509.504888][ T9892] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 509.522257][ T9892] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 509.531948][ T9892] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 509.552095][ T9892] 42775 total pagecache pages [ 509.586034][ T9892] 3 pages in swap cache [ 509.590269][ T9892] Free swap = 124372kB [ 509.606442][ T9892] Total swap = 124996kB [ 509.610961][ T9892] 2097051 pages RAM [ 509.614976][ T9892] 0 pages HighMem/MovableOnly [ 509.623074][ T9892] 416120 pages reserved [ 509.627723][ T9892] 0 pages cma reserved [ 510.629938][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1027'. [ 510.836815][ T9921] netlink: 'syz.0.1028': attribute type 10 has an invalid length. [ 512.041552][ T28] audit: type=1326 audit(1750848468.419:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 512.573230][ T28] audit: type=1326 audit(1750848468.419:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 512.693465][ T28] audit: type=1326 audit(1750848468.489:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 513.034994][ T28] audit: type=1326 audit(1750848468.489:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 513.112220][ T28] audit: type=1326 audit(1750848468.709:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 513.436009][ T28] audit: type=1326 audit(1750848468.709:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 513.459848][ T28] audit: type=1326 audit(1750848469.139:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 513.882479][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 514.579426][ T9960] team0: No ports can be present during mode change [ 514.644046][ T9960] netlink: 'syz.3.1041': attribute type 10 has an invalid length. [ 514.911382][ T5775] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 518.579265][T10005] kvm: pic: single mode not supported [ 518.579484][T10005] kvm: pic: single mode not supported [ 518.591360][T10005] kvm: pic: single mode not supported [ 518.747678][T10008] warn_alloc: 2 callbacks suppressed [ 518.747696][T10008] syz.3.1054: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 518.832024][T10008] CPU: 1 PID: 10008 Comm: syz.3.1054 Not tainted 6.6.94-syzkaller #0 [ 518.840158][T10008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 518.850244][T10008] Call Trace: [ 518.853556][T10008] [ 518.856523][T10008] dump_stack_lvl+0x16c/0x230 [ 518.861243][T10008] ? show_regs_print_info+0x20/0x20 [ 518.866485][T10008] ? load_image+0x3b0/0x3b0 [ 518.871026][T10008] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 518.877482][T10008] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 518.884021][T10008] warn_alloc+0x210/0x300 [ 518.888407][T10008] ? stack_trace_save+0x9c/0xe0 [ 518.893303][T10008] ? zone_watermark_ok_safe+0x230/0x230 [ 518.898895][T10008] ? kasan_set_track+0x5f/0x70 [ 518.903741][T10008] ? kasan_set_track+0x4e/0x70 [ 518.908570][T10008] ? __kasan_kmalloc+0x8f/0xa0 [ 518.913379][T10008] ? xsk_init_queue+0xb0/0x110 [ 518.918193][T10008] ? xsk_setsockopt+0x43c/0x6f0 [ 518.923082][T10008] ? do_sock_setsockopt+0x254/0x3e0 [ 518.928308][T10008] ? __x64_sys_setsockopt+0x1be/0x250 [ 518.933731][T10008] __vmalloc_node_range+0x126/0x1320 [ 518.939097][T10008] ? free_vm_area+0x50/0x50 [ 518.943655][T10008] vmalloc_user+0x74/0x80 [ 518.948026][T10008] ? xskq_create+0xbf/0x170 [ 518.952571][T10008] xskq_create+0xbf/0x170 [ 518.956936][T10008] xsk_init_queue+0xb0/0x110 [ 518.961604][T10008] xsk_setsockopt+0x43c/0x6f0 [ 518.966322][T10008] ? xsk_poll+0x670/0x670 [ 518.970694][T10008] ? aa_sock_opt_perm+0x74/0x100 [ 518.975673][T10008] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 518.981255][T10008] ? security_socket_setsockopt+0x7e/0xa0 [ 518.987007][T10008] ? xsk_poll+0x670/0x670 [ 518.991374][T10008] do_sock_setsockopt+0x254/0x3e0 [ 518.996434][T10008] ? __ia32_sys_recv+0xb0/0xb0 [ 519.001257][T10008] ? __fdget+0x180/0x210 [ 519.005585][T10008] __x64_sys_setsockopt+0x1be/0x250 [ 519.010826][T10008] do_syscall_64+0x55/0xb0 [ 519.015276][T10008] ? clear_bhb_loop+0x40/0x90 [ 519.020000][T10008] ? clear_bhb_loop+0x40/0x90 [ 519.024718][T10008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 519.030671][T10008] RIP: 0033:0x7f257d38e929 [ 519.035128][T10008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.054792][T10008] RSP: 002b:00007f257e2bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 519.063259][T10008] RAX: ffffffffffffffda RBX: 00007f257d5b5fa0 RCX: 00007f257d38e929 [ 519.071269][T10008] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 519.079266][T10008] RBP: 00007f257d410b39 R08: 0000000000000004 R09: 0000000000000000 [ 519.087265][T10008] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.095263][T10008] R13: 0000000000000000 R14: 00007f257d5b5fa0 R15: 00007ffc346fb518 [ 519.103279][T10008] [ 519.185937][T10008] Mem-Info: [ 519.189135][T10008] active_anon:10737 inactive_anon:0 isolated_anon:369 [ 519.189135][T10008] active_file:1239 inactive_file:40144 isolated_file:13 [ 519.189135][T10008] unevictable:768 dirty:43 writeback:0 [ 519.189135][T10008] slab_reclaimable:10749 slab_unreclaimable:95175 [ 519.189135][T10008] mapped:31922 shmem:7089 pagetables:598 [ 519.189135][T10008] sec_pagetables:5 bounce:0 [ 519.189135][T10008] kernel_misc_reclaimable:0 [ 519.189135][T10008] free:1348923 free_pcp:11845 free_cma:0 [ 519.234704][T10008] Node 0 active_anon:32776kB inactive_anon:0kB active_file:4824kB inactive_file:160376kB unevictable:1536kB isolated(anon):1476kB isolated(file):52kB mapped:117384kB dirty:172kB writeback:0kB shmem:16648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11304kB pagetables:2392kB sec_pagetables:20kB all_unreclaimable? no [ 519.286076][T10008] Node 1 active_anon:10372kB inactive_anon:0kB active_file:132kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:10504kB dirty:0kB writeback:0kB shmem:11908kB shmem_thp:4096kB shmem_pmdmapped:4096kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 519.324999][T10008] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 519.368690][T10008] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 519.374622][T10008] Node 0 DMA32 free:1495832kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:32824kB inactive_anon:0kB active_file:4824kB inactive_file:159064kB unevictable:1536kB writepending:172kB present:3129332kB managed:2589668kB mlocked:0kB bounce:0kB free_pcp:28668kB local_pcp:14232kB free_cma:0kB [ 519.410302][T10008] lowmem_reserve[]: 0 0 1 1 1 [ 519.415120][T10008] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 519.466554][T10008] lowmem_reserve[]: 0 0 0 0 0 [ 519.471471][T10008] Node 1 Normal free:3883748kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:6184kB inactive_anon:0kB active_file:132kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:26660kB local_pcp:15396kB free_cma:0kB [ 519.526079][T10008] lowmem_reserve[]: 0 0 0 0 0 [ 519.530911][T10008] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 519.577659][T10008] Node 0 DMA32: 2*4kB (UM) 1*8kB (E) 135*16kB (UME) 337*32kB (UME) 162*64kB (UME) 64*128kB (UME) 45*256kB (UME) 17*512kB (UME) 6*1024kB (UM) 2*2048kB (U) 350*4096kB (UM) = 1495584kB [ 519.637925][T10008] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 519.774057][T10008] Node 1 Normal: 215*4kB (UE) 49*8kB (UE) 50*16kB (UME) 63*32kB (UE) 20*64kB (UME) 4*128kB (UME) 4*256kB (UME) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 945*4096kB (M) = 3883748kB [ 519.834734][T10008] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 519.875932][T10008] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 519.890422][T10008] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 519.900564][T10008] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 520.710759][T10008] 42779 total pagecache pages [ 520.745779][T10008] 3 pages in swap cache [ 520.760438][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1056'. [ 520.793238][T10008] Free swap = 124116kB [ 520.809641][T10008] Total swap = 124996kB [ 520.814421][T10008] 2097051 pages RAM [ 520.821920][T10008] 0 pages HighMem/MovableOnly [ 520.827551][T10008] 416120 pages reserved [ 520.832024][T10008] 0 pages cma reserved [ 522.268314][T10030] lo speed is unknown, defaulting to 1000 [ 522.274397][T10030] lo speed is unknown, defaulting to 1000 [ 522.282153][T10030] lo speed is unknown, defaulting to 1000 [ 522.292156][T10030] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 522.305389][T10030] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 522.770969][T10030] lo speed is unknown, defaulting to 1000 [ 522.778487][T10030] lo speed is unknown, defaulting to 1000 [ 522.785235][T10030] lo speed is unknown, defaulting to 1000 [ 522.791999][T10030] lo speed is unknown, defaulting to 1000 [ 523.962812][T10052] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1064'. [ 528.350118][T10085] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1075'. [ 530.005539][T10096] warn_alloc: 1 callbacks suppressed [ 530.005554][T10096] syz.2.1078: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 530.027305][T10096] CPU: 1 PID: 10096 Comm: syz.2.1078 Not tainted 6.6.94-syzkaller #0 [ 530.035460][T10096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 530.045535][T10096] Call Trace: [ 530.048835][T10096] [ 530.051811][T10096] dump_stack_lvl+0x16c/0x230 [ 530.056518][T10096] ? show_regs_print_info+0x20/0x20 [ 530.061773][T10096] ? load_image+0x3b0/0x3b0 [ 530.066317][T10096] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 530.068151][T10094] mkiss: ax0: crc mode is auto. [ 530.072738][T10096] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 530.072772][T10096] warn_alloc+0x210/0x300 [ 530.088499][T10096] ? stack_trace_save+0x9c/0xe0 [ 530.093418][T10096] ? zone_watermark_ok_safe+0x230/0x230 [ 530.099000][T10096] ? kasan_set_track+0x5f/0x70 [ 530.103785][T10096] ? kasan_set_track+0x4e/0x70 [ 530.108569][T10096] ? __kasan_kmalloc+0x8f/0xa0 [ 530.113340][T10096] ? xsk_init_queue+0xb0/0x110 [ 530.118119][T10096] ? xsk_setsockopt+0x43c/0x6f0 [ 530.122981][T10096] ? do_sock_setsockopt+0x254/0x3e0 [ 530.128190][T10096] ? __x64_sys_setsockopt+0x1be/0x250 [ 530.133579][T10096] __vmalloc_node_range+0x126/0x1320 [ 530.138912][T10096] ? free_vm_area+0x50/0x50 [ 530.143463][T10096] vmalloc_user+0x74/0x80 [ 530.147834][T10096] ? xskq_create+0xbf/0x170 [ 530.152380][T10096] xskq_create+0xbf/0x170 [ 530.156733][T10096] xsk_init_queue+0xb0/0x110 [ 530.161334][T10096] xsk_setsockopt+0x43c/0x6f0 [ 530.166095][T10096] ? xsk_poll+0x670/0x670 [ 530.170479][T10096] ? aa_sock_opt_perm+0x74/0x100 [ 530.175521][T10096] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 530.181100][T10096] ? security_socket_setsockopt+0x7e/0xa0 [ 530.186836][T10096] ? xsk_poll+0x670/0x670 [ 530.191185][T10096] do_sock_setsockopt+0x254/0x3e0 [ 530.196227][T10096] ? __ia32_sys_recv+0xb0/0xb0 [ 530.201032][T10096] ? __fdget+0x180/0x210 [ 530.205293][T10096] __x64_sys_setsockopt+0x1be/0x250 [ 530.210507][T10096] do_syscall_64+0x55/0xb0 [ 530.214943][T10096] ? clear_bhb_loop+0x40/0x90 [ 530.219673][T10096] ? clear_bhb_loop+0x40/0x90 [ 530.224369][T10096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.230370][T10096] RIP: 0033:0x7f03cf58e929 [ 530.234796][T10096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.254420][T10096] RSP: 002b:00007f03d03d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 530.262853][T10096] RAX: ffffffffffffffda RBX: 00007f03cf7b5fa0 RCX: 00007f03cf58e929 [ 530.270919][T10096] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 530.278903][T10096] RBP: 00007f03cf610b39 R08: 0000000000000004 R09: 0000000000000000 [ 530.286992][T10096] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.294970][T10096] R13: 0000000000000000 R14: 00007f03cf7b5fa0 R15: 00007fff4316dc38 [ 530.303071][T10096] [ 530.355913][T10096] Mem-Info: [ 530.359186][T10096] active_anon:8590 inactive_anon:0 isolated_anon:0 [ 530.359186][T10096] active_file:1252 inactive_file:40148 isolated_file:0 [ 530.359186][T10096] unevictable:768 dirty:138 writeback:0 [ 530.359186][T10096] slab_reclaimable:10727 slab_unreclaimable:94779 [ 530.359186][T10096] mapped:28681 shmem:4605 pagetables:566 [ 530.359186][T10096] sec_pagetables:0 bounce:0 [ 530.359186][T10096] kernel_misc_reclaimable:0 [ 530.359186][T10096] free:1351540 free_pcp:12299 free_cma:0 [ 530.475348][T10096] Node 0 active_anon:36452kB inactive_anon:0kB active_file:4824kB inactive_file:160400kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116728kB dirty:644kB writeback:0kB shmem:18916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11292kB pagetables:2384kB sec_pagetables:0kB all_unreclaimable? no [ 530.616037][T10096] Node 1 active_anon:0kB inactive_anon:0kB active_file:184kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:156kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 530.704873][T10096] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 530.772962][T10096] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 530.794594][T10096] Node 0 DMA32 free:1498728kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:44300kB inactive_anon:0kB active_file:4824kB inactive_file:159088kB unevictable:1536kB writepending:660kB present:3129332kB managed:2589668kB mlocked:0kB bounce:0kB free_pcp:15612kB local_pcp:14240kB free_cma:0kB [ 530.976111][T10096] lowmem_reserve[]: 0 0 1 1 1 [ 531.062338][T10096] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 531.132239][T10096] lowmem_reserve[]: 0 0 0 0 0 [ 531.155598][T10096] Node 1 Normal free:3884508kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:184kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:32092kB local_pcp:21212kB free_cma:0kB [ 531.194835][T10096] lowmem_reserve[]: 0 0 0 0 0 [ 531.201386][T10096] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 531.229445][T10096] Node 0 DMA32: 0*4kB 1*8kB (E) 3*16kB (UME) 290*32kB (UME) 29*64kB (UME) 1*128kB (U) 61*256kB (UME) 21*512kB (UME) 9*1024kB (UM) 7*2048kB (UM) 348*4096kB (UM) = 1486648kB [ 531.267492][T10096] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 531.270216][T10107] 9pnet_virtio: no channels available for device syz [ 531.280170][T10096] Node 1 Normal: 219*4kB (UME) 54*8kB (UME) 54*16kB (UME) 71*32kB (UME) 22*64kB (UME) 4*128kB (UE) 5*256kB (UME) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 945*4096kB (M) = 3884508kB [ 531.338805][T10096] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 531.348955][T10096] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 531.358760][T10096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 531.368979][T10096] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 531.436794][T10096] 48650 total pagecache pages [ 531.452263][T10096] 3 pages in swap cache [ 531.462156][T10096] Free swap = 124372kB [ 531.467529][T10096] Total swap = 124996kB [ 531.471990][T10096] 2097051 pages RAM [ 531.478938][T10096] 0 pages HighMem/MovableOnly [ 531.483812][T10096] 416120 pages reserved [ 531.488594][T10096] 0 pages cma reserved [ 532.628791][T10117] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1084'. [ 535.002101][T10142] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1094'. [ 535.393063][T10139] mkiss: ax0: crc mode is auto. [ 536.830740][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1099'. [ 538.455280][T10200] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1105'. [ 539.452963][T10203] mkiss: ax0: crc mode is auto. [ 541.826355][T10230] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1115'. [ 543.690086][T10249] warn_alloc: 3 callbacks suppressed [ 543.690101][T10249] syz.0.1121: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 543.813361][T10249] CPU: 0 PID: 10249 Comm: syz.0.1121 Not tainted 6.6.94-syzkaller #0 [ 543.821483][T10249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 543.831580][T10249] Call Trace: [ 543.834950][T10249] [ 543.837911][T10249] dump_stack_lvl+0x16c/0x230 [ 543.842603][T10249] ? show_regs_print_info+0x20/0x20 [ 543.847805][T10249] ? load_image+0x3b0/0x3b0 [ 543.852318][T10249] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 543.858731][T10249] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 543.865230][T10249] warn_alloc+0x210/0x300 [ 543.869564][T10249] ? stack_trace_save+0x9c/0xe0 [ 543.874424][T10249] ? zone_watermark_ok_safe+0x230/0x230 [ 543.879981][T10249] ? kasan_set_track+0x5f/0x70 [ 543.884765][T10249] ? kasan_set_track+0x4e/0x70 [ 543.889530][T10249] ? __kasan_kmalloc+0x8f/0xa0 [ 543.894294][T10249] ? xsk_init_queue+0xb0/0x110 [ 543.899073][T10249] ? xsk_setsockopt+0x43c/0x6f0 [ 543.903929][T10249] ? do_sock_setsockopt+0x254/0x3e0 [ 543.909136][T10249] ? __x64_sys_setsockopt+0x1be/0x250 [ 543.914521][T10249] __vmalloc_node_range+0x126/0x1320 [ 543.919825][T10249] ? free_vm_area+0x50/0x50 [ 543.924341][T10249] vmalloc_user+0x74/0x80 [ 543.928670][T10249] ? xskq_create+0xbf/0x170 [ 543.933171][T10249] xskq_create+0xbf/0x170 [ 543.937505][T10249] xsk_init_queue+0xb0/0x110 [ 543.942099][T10249] xsk_setsockopt+0x43c/0x6f0 [ 543.946775][T10249] ? xsk_poll+0x670/0x670 [ 543.951124][T10249] ? aa_sock_opt_perm+0x74/0x100 [ 543.956081][T10249] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 543.961644][T10249] ? security_socket_setsockopt+0x7e/0xa0 [ 543.967369][T10249] ? xsk_poll+0x670/0x670 [ 543.971710][T10249] do_sock_setsockopt+0x254/0x3e0 [ 543.976739][T10249] ? __ia32_sys_recv+0xb0/0xb0 [ 543.981504][T10249] ? __fdget+0x180/0x210 [ 543.985753][T10249] __x64_sys_setsockopt+0x1be/0x250 [ 543.990973][T10249] do_syscall_64+0x55/0xb0 [ 543.995398][T10249] ? clear_bhb_loop+0x40/0x90 [ 544.000083][T10249] ? clear_bhb_loop+0x40/0x90 [ 544.004767][T10249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 544.010664][T10249] RIP: 0033:0x7f4b1258e929 [ 544.015075][T10249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.034687][T10249] RSP: 002b:00007f4b1335d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 544.043106][T10249] RAX: ffffffffffffffda RBX: 00007f4b127b5fa0 RCX: 00007f4b1258e929 [ 544.051077][T10249] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 544.059051][T10249] RBP: 00007f4b12610b39 R08: 0000000000000004 R09: 0000000000000000 [ 544.067039][T10249] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.075016][T10249] R13: 0000000000000000 R14: 00007f4b127b5fa0 R15: 00007ffdac73f368 [ 544.083004][T10249] [ 544.116892][T10249] Mem-Info: [ 544.121393][T10249] active_anon:9108 inactive_anon:0 isolated_anon:0 [ 544.121393][T10249] active_file:1252 inactive_file:40156 isolated_file:0 [ 544.121393][T10249] unevictable:768 dirty:214 writeback:0 [ 544.121393][T10249] slab_reclaimable:10673 slab_unreclaimable:95057 [ 544.121393][T10249] mapped:25641 shmem:5141 pagetables:558 [ 544.121393][T10249] sec_pagetables:0 bounce:0 [ 544.121393][T10249] kernel_misc_reclaimable:0 [ 544.121393][T10249] free:1352517 free_pcp:10544 free_cma:0 [ 544.181279][T10249] Node 0 active_anon:35232kB inactive_anon:0kB active_file:4824kB inactive_file:160424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103200kB dirty:856kB writeback:0kB shmem:17828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11216kB pagetables:2232kB sec_pagetables:0kB all_unreclaimable? no [ 544.226252][T10249] Node 1 active_anon:0kB inactive_anon:0kB active_file:184kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:164kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 544.290473][T10249] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 544.336128][T10249] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 544.356182][T10249] Node 0 DMA32 free:1508428kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:31804kB inactive_anon:0kB active_file:4824kB inactive_file:159112kB unevictable:1536kB writepending:856kB present:3129332kB managed:2589668kB mlocked:0kB bounce:0kB free_pcp:16660kB local_pcp:1960kB free_cma:0kB [ 544.980819][T10249] lowmem_reserve[]: 0 0 1 1 1 [ 544.985941][T10249] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 545.015905][T10249] lowmem_reserve[]: 0 0 0 0 0 [ 545.020696][T10249] Node 1 Normal free:3885768kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:184kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:30832kB local_pcp:10880kB free_cma:0kB [ 545.121425][T10249] lowmem_reserve[]: 0 0 0 0 0 [ 545.152402][T10249] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 545.171639][T10249] Node 0 DMA32: 20*4kB (U) 1*8kB (U) 38*16kB (UM) 276*32kB (UE) 32*64kB (UM) 23*128kB (UME) 71*256kB (UME) 25*512kB (UME) 8*1024kB (UM) 9*2048kB (UM) 349*4096kB (UM) = 1501624kB [ 545.210297][T10249] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 545.283753][T10249] Node 1 Normal: 220*4kB (UME) 53*8kB (UME) 51*16kB (UME) 72*32kB (UME) 24*64kB (UME) 5*128kB (UME) 7*256kB (UME) 3*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 945*4096kB (M) = 3885768kB [ 545.303826][T10260] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1125'. [ 546.088330][T10249] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 546.098416][T10249] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 546.108555][T10249] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 546.118669][T10249] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 546.128114][T10249] 47947 total pagecache pages [ 546.132882][T10249] 3 pages in swap cache [ 546.143027][T10249] Free swap = 124628kB [ 546.151747][T10249] Total swap = 124996kB [ 546.156219][T10249] 2097051 pages RAM [ 546.160038][T10249] 0 pages HighMem/MovableOnly [ 546.174261][T10249] 416120 pages reserved [ 546.182507][T10249] 0 pages cma reserved [ 546.281167][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 546.294156][T10261] netlink: 'syz.1.1122': attribute type 5 has an invalid length. [ 546.302858][T10261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1122'. [ 546.360787][T10261] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 546.386677][T10261] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 546.395600][T10261] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 546.416909][T10261] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 546.425610][T10261] geneve2: entered promiscuous mode [ 547.073416][T10271] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 547.079986][T10271] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 547.087815][T10271] vhci_hcd vhci_hcd.0: Device attached [ 547.102639][T10261] geneve2: entered allmulticast mode [ 547.405976][ T785] usb 37-1: new low-speed USB device number 7 using vhci_hcd [ 547.599280][ T28] audit: type=1326 audit(1750848503.999:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 547.791996][T10272] vhci_hcd: connection reset by peer [ 547.804233][ T42] vhci_hcd: stop threads [ 547.809159][ T42] vhci_hcd: release socket [ 547.813692][ T42] vhci_hcd: disconnect device [ 547.820010][ T28] audit: type=1326 audit(1750848504.059:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 547.848798][ T28] audit: type=1326 audit(1750848504.059:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 547.910480][ T28] audit: type=1326 audit(1750848504.189:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 548.354090][ T28] audit: type=1326 audit(1750848504.189:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 548.395791][ T28] audit: type=1326 audit(1750848504.699:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 549.544066][T10297] lo speed is unknown, defaulting to 1000 [ 551.094965][T10304] ALSA: mixer_oss: invalid index 40000 [ 551.241499][ T28] audit: type=1326 audit(1750848507.659:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10315 comm="syz.1.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e118e929 code=0x7fc00000 [ 551.552098][ T28] audit: type=1326 audit(1750848507.659:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10315 comm="syz.1.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e118e929 code=0x7fc00000 [ 551.655447][ T28] audit: type=1326 audit(1750848507.729:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10315 comm="syz.1.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e118e929 code=0x7fc00000 [ 551.709457][ T28] audit: type=1326 audit(1750848507.739:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10315 comm="syz.1.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e118e929 code=0x7fc00000 [ 552.736419][ T785] vhci_hcd: vhci_device speed not set [ 554.686970][T10354] ALSA: mixer_oss: invalid index 40000 [ 554.932619][T10368] lo speed is unknown, defaulting to 1000 [ 554.998967][T10370] warn_alloc: 2 callbacks suppressed [ 554.998983][T10370] syz.2.1153: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 555.020277][T10370] CPU: 0 PID: 10370 Comm: syz.2.1153 Not tainted 6.6.94-syzkaller #0 [ 555.028502][T10370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 555.038617][T10370] Call Trace: [ 555.041920][T10370] [ 555.044868][T10370] dump_stack_lvl+0x16c/0x230 [ 555.049593][T10370] ? show_regs_print_info+0x20/0x20 [ 555.054816][T10370] ? load_image+0x3b0/0x3b0 [ 555.059322][T10370] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 555.065732][T10370] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 555.072229][T10370] warn_alloc+0x210/0x300 [ 555.076564][T10370] ? stack_trace_save+0x9c/0xe0 [ 555.081436][T10370] ? zone_watermark_ok_safe+0x230/0x230 [ 555.086998][T10370] ? kasan_set_track+0x5f/0x70 [ 555.091772][T10370] ? kasan_set_track+0x4e/0x70 [ 555.096540][T10370] ? __kasan_kmalloc+0x8f/0xa0 [ 555.101314][T10370] ? xsk_init_queue+0xb0/0x110 [ 555.106086][T10370] ? xsk_setsockopt+0x43c/0x6f0 [ 555.110957][T10370] ? do_sock_setsockopt+0x254/0x3e0 [ 555.116184][T10370] ? __x64_sys_setsockopt+0x1be/0x250 [ 555.121562][T10370] __vmalloc_node_range+0x126/0x1320 [ 555.126884][T10370] ? free_vm_area+0x50/0x50 [ 555.131411][T10370] vmalloc_user+0x74/0x80 [ 555.135748][T10370] ? xskq_create+0xbf/0x170 [ 555.140324][T10370] xskq_create+0xbf/0x170 [ 555.144669][T10370] xsk_init_queue+0xb0/0x110 [ 555.149273][T10370] xsk_setsockopt+0x43c/0x6f0 [ 555.153973][T10370] ? xsk_poll+0x670/0x670 [ 555.158340][T10370] ? aa_sock_opt_perm+0x74/0x100 [ 555.163303][T10370] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 555.168875][T10370] ? security_socket_setsockopt+0x7e/0xa0 [ 555.174602][T10370] ? xsk_poll+0x670/0x670 [ 555.178950][T10370] do_sock_setsockopt+0x254/0x3e0 [ 555.183985][T10370] ? __ia32_sys_recv+0xb0/0xb0 [ 555.188756][T10370] ? __fdget+0x180/0x210 [ 555.193009][T10370] __x64_sys_setsockopt+0x1be/0x250 [ 555.198222][T10370] do_syscall_64+0x55/0xb0 [ 555.202657][T10370] ? clear_bhb_loop+0x40/0x90 [ 555.207340][T10370] ? clear_bhb_loop+0x40/0x90 [ 555.212066][T10370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 555.217977][T10370] RIP: 0033:0x7f03cf58e929 [ 555.222402][T10370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.242013][T10370] RSP: 002b:00007f03d03d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 555.250463][T10370] RAX: ffffffffffffffda RBX: 00007f03cf7b5fa0 RCX: 00007f03cf58e929 [ 555.258448][T10370] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 555.266426][T10370] RBP: 00007f03cf610b39 R08: 0000000000000004 R09: 0000000000000000 [ 555.274401][T10370] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.282374][T10370] R13: 0000000000000000 R14: 00007f03cf7b5fa0 R15: 00007fff4316dc38 [ 555.290368][T10370] [ 555.312386][T10370] Mem-Info: [ 555.323434][T10370] active_anon:10237 inactive_anon:0 isolated_anon:0 [ 555.323434][T10370] active_file:1252 inactive_file:40160 isolated_file:0 [ 555.323434][T10370] unevictable:768 dirty:86 writeback:0 [ 555.323434][T10370] slab_reclaimable:10740 slab_unreclaimable:94586 [ 555.323434][T10370] mapped:31063 shmem:6266 pagetables:571 [ 555.323434][T10370] sec_pagetables:0 bounce:0 [ 555.323434][T10370] kernel_misc_reclaimable:0 [ 555.323434][T10370] free:1351702 free_pcp:12380 free_cma:0 [ 555.441409][T10370] Node 0 active_anon:41348kB inactive_anon:0kB active_file:4824kB inactive_file:160440kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125488kB dirty:344kB writeback:0kB shmem:23728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11228kB pagetables:2384kB sec_pagetables:0kB all_unreclaimable? no [ 555.533300][T10370] Node 1 active_anon:0kB inactive_anon:0kB active_file:184kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:164kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 555.583511][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 555.583527][ T28] audit: type=1326 audit(1750848511.999:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.3.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257d38e929 code=0x7fc00000 [ 555.770228][T10370] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 555.800996][T10370] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 555.807152][T10370] Node 0 DMA32 free:1496852kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:53444kB inactive_anon:0kB active_file:4824kB inactive_file:159128kB unevictable:1536kB writepending:352kB present:3129332kB managed:2589668kB mlocked:0kB bounce:0kB free_pcp:14408kB local_pcp:2100kB free_cma:0kB [ 555.854217][ T28] audit: type=1326 audit(1750848511.999:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.3.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257d38e929 code=0x7fc00000 [ 555.993408][T10370] lowmem_reserve[]: 0 0 1 1 1 [ 555.999897][T10370] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 556.035992][ T28] audit: type=1326 audit(1750848512.049:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.3.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257d38e929 code=0x7fc00000 [ 556.064073][T10370] lowmem_reserve[]: 0 0 0 0 0 [ 556.104158][T10370] Node 1 Normal free:3886524kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:184kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:30076kB local_pcp:19196kB free_cma:0kB [ 556.193379][ T28] audit: type=1326 audit(1750848512.049:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.3.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257d38e929 code=0x7fc00000 [ 556.224574][T10370] lowmem_reserve[]: 0 0 0 0 0 [ 556.250781][T10370] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 556.336881][ T28] audit: type=1326 audit(1750848512.219:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.3.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257d38e929 code=0x7fc00000 [ 556.359363][ T28] audit: type=1326 audit(1750848512.689:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.3.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257d38e929 code=0x7fc00000 [ 556.401093][T10370] Node 0 DMA32: 1580*4kB (UME) 633*8kB (UME) 337*16kB (UME) 460*32kB (UME) 112*64kB (UME) 43*128kB (UM) 64*256kB (UME) 23*512kB (UME) 8*1024kB (UM) 9*2048kB (UM) 349*4096kB (UM) = 1528456kB [ 556.420832][T10370] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 556.443118][T10370] Node 1 Normal: 219*4kB (UME) 54*8kB (UME) 52*16kB (UME) 71*32kB (UME) 24*64kB (UME) 5*128kB (UME) 6*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3886524kB [ 556.511711][T10370] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 556.705037][T10370] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 556.714484][T10370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 557.472360][T10370] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 557.607237][T10370] 46126 total pagecache pages [ 557.612051][T10370] 3 pages in swap cache [ 557.670599][T10370] Free swap = 124628kB [ 557.674846][T10370] Total swap = 124996kB [ 557.686156][T10370] 2097051 pages RAM [ 557.692359][T10370] 0 pages HighMem/MovableOnly [ 557.707023][T10370] 416120 pages reserved [ 557.711397][T10370] 0 pages cma reserved [ 558.080161][T10398] netlink: 'syz.3.1161': attribute type 4 has an invalid length. [ 558.134175][T10398] netlink: set zone limit has 8 unknown bytes [ 559.272276][ T28] audit: type=1326 audit(1750848515.689:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10408 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e118e929 code=0x7fc00000 [ 559.539367][ T28] audit: type=1326 audit(1750848515.709:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10408 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e118e929 code=0x7fc00000 [ 559.744151][ T28] audit: type=1326 audit(1750848515.719:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10408 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e118e929 code=0x7fc00000 [ 559.817697][T10400] ALSA: mixer_oss: invalid index 40000 [ 559.918506][ T28] audit: type=1326 audit(1750848516.339:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10408 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e118e929 code=0x7fc00000 [ 561.593740][T10435] netlink: set zone limit has 8 unknown bytes [ 561.876241][T10438] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[10438] [ 562.462908][T10446] mkiss: ax0: crc mode is auto. [ 562.868785][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.875147][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.262267][T10463] ALSA: mixer_oss: invalid index 40000 [ 565.881699][T10484] netlink: 'syz.3.1180': attribute type 4 has an invalid length. [ 565.892423][T10484] netlink: set zone limit has 8 unknown bytes [ 567.223388][T10494] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1182'. [ 569.795899][ T5760] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 569.869495][T10528] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1195'. [ 570.220215][ T5760] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 570.644238][ T5760] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 570.654145][ T5760] usb 2-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 570.667130][ T5760] usb 2-1: config 1 interface 0 has no altsetting 0 [ 570.688340][ T5760] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 570.697679][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.705719][ T5760] usb 2-1: Product: ࢩ鱴ꑕ诶숔⊬ᶟ㫫롧茩샘鎸ꮼ瘗ힲﾸ嗚⣱늹⪶씻촛墀똇㵕㬅凡뉹ኵ⡜䢶୷憮벮꭪핎썵鿞尖ผ벟瘢흴Ⲽ풛֊ᚅ [ 570.736010][ T5760] usb 2-1: Manufacturer: ї [ 570.740609][ T5760] usb 2-1: SerialNumber: 仈吪꨷麷씿⃔৐἟㟜⭨끥⏕ᚴ庆럣굘 [ 570.752547][T10521] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 570.772061][T10521] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 570.871588][T10530] mkiss: ax0: crc mode is auto. [ 571.464120][ T5760] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 571.683428][ T5760] usb 2-1: USB disconnect, device number 3 [ 572.627242][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 574.363943][T10582] netlink: 'syz.2.1207': attribute type 4 has an invalid length. [ 574.427971][T10582] netlink: set zone limit has 8 unknown bytes [ 574.996218][ T5760] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 575.238295][ T5760] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 575.268162][ T5760] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 575.310963][ T5760] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 575.529153][ T5760] usb 1-1: config 1 interface 0 has no altsetting 0 [ 576.083565][ T5760] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 576.108361][ T5760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.135340][ T5760] usb 1-1: Product: ࢩ鱴ꑕ诶숔⊬ᶟ㫫롧茩샘鎸ꮼ瘗ힲﾸ嗚⣱늹⪶씻촛墀똇㵕㬅凡뉹ኵ⡜䢶୷憮벮꭪핎썵鿞尖ผ벟瘢흴Ⲽ풛֊ᚅ [ 576.233330][ T5760] usb 1-1: Manufacturer: ї [ 576.243731][ T5760] usb 1-1: SerialNumber: 仈吪꨷麷씿⃔৐἟㟜⭨끥⏕ᚴ庆럣굘 [ 576.355596][T10609] netlink: 'syz.1.1214': attribute type 4 has an invalid length. [ 576.393847][T10609] netlink: set zone limit has 8 unknown bytes [ 576.781651][T10581] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 576.838106][T10581] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 577.469742][T10625] netlink: 'syz.1.1218': attribute type 4 has an invalid length. [ 577.533283][T10625] netlink: set zone limit has 8 unknown bytes [ 577.600159][ T5760] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 577.914006][ T5760] usb 1-1: USB disconnect, device number 5 [ 579.272585][T10644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1223'. [ 579.516683][T10644] team0: No ports can be present during mode change [ 579.556860][T10644] netlink: 'syz.2.1223': attribute type 10 has an invalid length. [ 579.715352][ T5760] IPVS: starting estimator thread 0... [ 580.785955][T10655] ksmbd: Unknown IPC event: 6, ignore. [ 581.186850][T10653] IPVS: using max 26 ests per chain, 62400 per kthread [ 582.214068][T10668] netlink: 'syz.0.1229': attribute type 4 has an invalid length. [ 582.236850][T10671] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1227'. [ 582.279769][T10668] netlink: set zone limit has 8 unknown bytes [ 582.451090][T10669] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 582.457665][T10669] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 582.475954][T10670] vhci_hcd: connection closed [ 582.477901][T10669] vhci_hcd vhci_hcd.0: Device attached [ 582.528854][ T6394] vhci_hcd: stop threads [ 582.533154][ T6394] vhci_hcd: release socket [ 582.578499][ T6394] vhci_hcd: disconnect device [ 582.803676][T10676] ptrace attach of "./syz-executor exec"[5770] was attempted by ""[10676] [ 584.281975][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'. [ 584.421372][T10695] warning: `syz.0.1236' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 584.464430][T10697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1237'. [ 584.501110][T10697] team0: No ports can be present during mode change [ 584.675848][T10701] netlink: 'syz.2.1238': attribute type 4 has an invalid length. [ 584.699336][T10701] netlink: set zone limit has 8 unknown bytes [ 585.046294][T10697] netlink: 'syz.1.1237': attribute type 10 has an invalid length. [ 585.247055][T10705] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 585.253643][T10705] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 585.305796][T10705] vhci_hcd vhci_hcd.0: Device attached [ 585.315427][T10711] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 585.322070][T10711] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 585.340303][T10711] vhci_hcd vhci_hcd.0: Device attached [ 585.375989][T10705] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 585.382660][T10705] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 585.410560][T10711] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 585.425761][T10705] vhci_hcd vhci_hcd.0: Device attached [ 585.435562][T10705] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(16) [ 585.442218][T10705] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 585.459330][T10705] vhci_hcd vhci_hcd.0: Device attached [ 585.467604][T10705] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(20) [ 585.474264][T10705] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 585.486370][T10705] vhci_hcd vhci_hcd.0: Device attached [ 585.624355][T10711] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 585.632869][ T5854] usb 33-1: new low-speed USB device number 8 using vhci_hcd [ 585.633292][T10705] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 585.758014][T10705] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 585.790287][T10723] vhci_hcd: connection closed [ 585.790530][ T12] vhci_hcd: stop threads [ 585.791304][T10717] vhci_hcd: connection closed [ 585.795249][ T12] vhci_hcd: release socket [ 585.799677][T10721] vhci_hcd: connection closed [ 585.816786][T10706] vhci_hcd: connection reset by peer [ 585.818498][T10714] vhci_hcd: connection closed [ 585.901295][ T12] vhci_hcd: disconnect device [ 585.949636][ T12] vhci_hcd: stop threads [ 585.954438][ T12] vhci_hcd: release socket [ 585.959932][ T12] vhci_hcd: disconnect device [ 586.041127][ T12] vhci_hcd: stop threads [ 586.045932][ T12] vhci_hcd: release socket [ 586.051339][ T12] vhci_hcd: disconnect device [ 586.062033][ T12] vhci_hcd: stop threads [ 586.069135][ T12] vhci_hcd: release socket [ 586.074638][ T12] vhci_hcd: disconnect device [ 586.081542][ T12] vhci_hcd: stop threads [ 586.088960][ T12] vhci_hcd: release socket [ 586.093658][ T12] vhci_hcd: disconnect device [ 586.333162][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1247'. [ 586.368522][T10730] netlink: 'syz.1.1247': attribute type 10 has an invalid length. [ 586.437295][T10730] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.485945][T10730] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 586.556842][T10730] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.572494][ T28] audit: type=1326 audit(1750848542.989:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 586.610498][T10730] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 586.645459][ T28] audit: type=1326 audit(1750848543.049:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 586.689470][T10740] overlayfs: failed to resolve './file1': -2 [ 586.901384][T10730] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.943762][T10730] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 587.199216][T10730] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.334663][T10730] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 587.354381][ T28] audit: type=1326 audit(1750848543.679:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.0.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 588.004873][T10745] netlink: set zone limit has 8 unknown bytes [ 588.389902][T10751] netlink: 'syz.0.1252': attribute type 13 has an invalid length. [ 588.783339][T10755] netlink: set zone limit has 8 unknown bytes [ 588.922173][T10757] netlink: 'syz.2.1253': attribute type 4 has an invalid length. [ 588.997948][T10730] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 589.008976][T10730] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 589.027507][T10730] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 589.053690][T10730] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 589.103967][T10730] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 589.123473][T10730] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 589.240571][T10730] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 589.348764][T10730] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 590.025858][ T28] audit: type=1326 audit(1750848546.439:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 590.186445][ T28] audit: type=1326 audit(1750848546.439:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 590.271969][ T28] audit: type=1326 audit(1750848546.489:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 590.295360][ T28] audit: type=1326 audit(1750848546.489:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 590.338001][ T28] audit: type=1326 audit(1750848546.719:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 590.731998][ T28] audit: type=1326 audit(1750848547.149:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 590.820379][T10783] bridge2: entered promiscuous mode [ 590.837120][ T5854] vhci_hcd: vhci_device speed not set [ 592.219541][ T785] usb usb34-port1: attempt power cycle [ 592.968938][T10806] team0: Port device bond0 removed [ 593.082262][ T785] usb usb34-port1: unable to enumerate USB device [ 593.513747][T10806] netlink: 'syz.1.1268': attribute type 10 has an invalid length. [ 593.564400][T10806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.799657][T10806] team0: Port device bond0 added [ 593.824362][ T28] audit: type=1326 audit(1750848550.239:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10809 comm="syz.0.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 593.924862][ T28] audit: type=1326 audit(1750848550.239:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10809 comm="syz.0.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 594.150084][ T28] audit: type=1326 audit(1750848550.289:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10809 comm="syz.0.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 594.180302][ T28] audit: type=1326 audit(1750848550.289:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10809 comm="syz.0.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 594.656004][ T28] audit: type=1326 audit(1750848550.969:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10809 comm="syz.0.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 598.733151][T10847] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[10847] [ 599.787165][ T28] audit: type=1326 audit(1750848556.199:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10856 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e118e929 code=0x7fc00000 [ 599.809877][ T28] audit: type=1326 audit(1750848556.199:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10856 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e118e929 code=0x7fc00000 [ 599.982108][T10838] ALSA: mixer_oss: invalid index 40000 [ 600.056945][ T28] audit: type=1326 audit(1750848556.249:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10856 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e118e929 code=0x7fc00000 [ 600.135082][ T28] audit: type=1326 audit(1750848556.449:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10856 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e118e929 code=0x7fc00000 [ 600.237041][ T28] audit: type=1326 audit(1750848556.449:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10856 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e118e929 code=0x7fc00000 [ 600.611142][ T28] audit: type=1326 audit(1750848556.919:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10856 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e118e929 code=0x7fc00000 [ 600.621790][T10864] mkiss: ax0: crc mode is auto. [ 601.838131][T10882] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 601.844713][T10882] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 601.870770][T10882] vhci_hcd vhci_hcd.0: Device attached [ 601.949273][T10884] vhci_hcd: connection closed [ 601.969496][ T58] vhci_hcd: stop threads [ 602.196012][ T785] usb 37-1: new low-speed USB device number 8 using vhci_hcd [ 602.254085][ T58] vhci_hcd: release socket [ 602.262964][ T5775] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 602.273609][ T5775] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 602.344414][ T58] vhci_hcd: disconnect device [ 604.214125][T10907] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1297'. [ 604.956872][T10920] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[10920] [ 605.016931][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1298'. [ 605.039781][T10898] ALSA: mixer_oss: invalid index 40000 [ 606.038318][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.234980][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.510164][T10939] netlink: 'syz.2.1302': attribute type 10 has an invalid length. [ 606.544196][T10939] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.802579][T10939] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.026999][T10939] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.097472][T10939] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.336040][ T785] vhci_hcd: vhci_device speed not set [ 607.374449][T10939] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.396461][T10939] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.412416][T10939] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.429062][T10939] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.196452][T10953] netlink: 'syz.1.1306': attribute type 4 has an invalid length. [ 608.220778][T10953] netlink: set zone limit has 8 unknown bytes [ 608.458801][T10955] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 608.465360][T10955] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 608.486191][T10955] vhci_hcd vhci_hcd.0: Device attached [ 608.552691][T10955] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 608.559350][T10955] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 608.597106][T10955] vhci_hcd vhci_hcd.0: Device attached [ 608.650511][T10955] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 608.657145][T10955] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 608.696251][T10955] vhci_hcd vhci_hcd.0: Device attached [ 608.736583][T10955] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 608.775536][T10955] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 608.782166][T10955] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 608.796528][ T5760] usb 33-1: new low-speed USB device number 9 using vhci_hcd [ 608.849219][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'. [ 608.895364][T10955] vhci_hcd vhci_hcd.0: Device attached [ 608.967940][T10962] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(21) [ 608.974566][T10962] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 609.039792][T10955] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 609.066772][T10974] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 609.083020][T10962] vhci_hcd vhci_hcd.0: Device attached [ 609.104650][T10955] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 609.163531][T10972] vhci_hcd: connection closed [ 609.163840][ T1136] vhci_hcd: stop threads [ 609.180823][T10964] vhci_hcd: connection closed [ 609.180931][T10960] vhci_hcd: connection closed [ 609.186224][T10969] vhci_hcd: connection closed [ 609.191567][T10957] vhci_hcd: connection reset by peer [ 609.211547][ T1136] vhci_hcd: release socket [ 609.242749][ T1136] vhci_hcd: disconnect device [ 609.249068][ T1136] vhci_hcd: stop threads [ 609.253441][ T1136] vhci_hcd: release socket [ 609.260691][ T1136] vhci_hcd: disconnect device [ 609.265727][ T1136] vhci_hcd: stop threads [ 609.283407][ T1136] vhci_hcd: release socket [ 609.550323][ T1136] vhci_hcd: disconnect device [ 609.563560][ T1136] vhci_hcd: stop threads [ 609.569214][ T1136] vhci_hcd: release socket [ 609.573819][ T1136] vhci_hcd: disconnect device [ 609.583118][ T1136] vhci_hcd: stop threads [ 609.588054][ T1136] vhci_hcd: release socket [ 609.592661][ T1136] vhci_hcd: disconnect device [ 609.623621][T10956] ALSA: mixer_oss: invalid index 40000 [ 610.210106][T10991] netlink: 'syz.2.1316': attribute type 10 has an invalid length. [ 610.257550][T10991] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.412424][T10991] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.529883][T11002] netlink: 'syz.1.1317': attribute type 4 has an invalid length. [ 610.594785][T11002] netlink: set zone limit has 8 unknown bytes [ 611.180017][T10893] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 611.268977][T10991] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.634029][T10893] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 611.817529][T10991] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.026057][T11000] lo speed is unknown, defaulting to 1000 [ 613.764955][T11029] syz.0.1324[11029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 613.766067][T11029] syz.0.1324[11029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 613.794014][T11029] random: crng reseeded on system resumption [ 614.699100][T11030] netlink: 'syz.1.1326': attribute type 4 has an invalid length. [ 614.711560][T11030] netlink: set zone limit has 8 unknown bytes [ 614.810389][ T5760] vhci_hcd: vhci_device speed not set [ 615.443112][T10991] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.523506][T10991] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.537538][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1328'. [ 615.724499][T10991] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.748877][T10991] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.316638][ T786] usb usb34-port1: attempt power cycle [ 618.272237][ T786] usb usb34-port1: unable to enumerate USB device [ 618.413632][T11056] ptrace attach of "./syz-executor exec"[5768] was attempted by ""[11056] [ 618.819621][T11063] loop6: detected capacity change from 0 to 524287999 [ 619.236224][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 619.245429][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 619.333943][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 619.343259][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 619.407965][ T11] loop: Write error at byte offset 1, length 1024. [ 619.415281][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 619.425004][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 619.435110][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 619.444300][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 619.452929][ T6394] loop: Write error at byte offset 545793, length 4096. [ 619.460783][ T6394] loop: Write error at byte offset 1070081, length 4096. [ 619.467960][ C0] I/O error, dev loop6, sector 1066 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 619.467992][ C0] I/O error, dev loop6, sector 1066 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 619.502980][ C0] I/O error, dev loop6, sector 2090 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 619.512951][ C0] I/O error, dev loop6, sector 2090 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 619.594268][T11067] netlink: 'syz.2.1336': attribute type 4 has an invalid length. [ 619.610069][T11067] netlink: set zone limit has 8 unknown bytes [ 619.861603][ T6394] loop: Write error at byte offset 1594369, length 4096. [ 620.069445][ C1] I/O error, dev loop6, sector 3114 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 620.079844][ T6394] loop: Write error at byte offset 2118657, length 4096. [ 620.095938][ T6394] loop: Write error at byte offset 2642945, length 4096. [ 620.113316][ T6394] loop: Write error at byte offset 3167233, length 4096. [ 620.179373][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.192893][ T6394] loop: Write error at byte offset 3691521, length 4096. [ 620.395944][ T6394] loop: Write error at byte offset 4215809, length 4096. [ 620.423713][ T6394] loop: Write error at byte offset 4740097, length 4096. [ 620.454162][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.476725][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.524380][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.556379][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.564296][T11063] ldm_validate_partition_table(): Disk read failed. [ 620.585435][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.618834][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.666239][T11063] Dev loop6: unable to read RDB block 0 [ 620.714351][T11063] loop6: unable to read partition table [ 620.750614][T11063] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 620.911273][ T5140] ldm_validate_partition_table(): Disk read failed. [ 620.933606][ T5140] Dev loop6: unable to read RDB block 0 [ 620.986739][ T5140] loop6: unable to read partition table [ 621.524099][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1340'. [ 623.432764][T11107] nft_compat: unsupported protocol 0 [ 624.301416][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.308421][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.026283][T11115] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[11115] [ 625.056133][T11113] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 625.062691][T11113] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 625.136031][T11113] vhci_hcd vhci_hcd.0: Device attached [ 625.193304][T11113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1343'. [ 625.410652][ T785] usb 33-1: new low-speed USB device number 10 using vhci_hcd [ 625.521743][T11116] vhci_hcd: connection reset by peer [ 625.547826][ T1092] vhci_hcd: stop threads [ 625.552132][ T1092] vhci_hcd: release socket [ 625.598323][ T1092] vhci_hcd: disconnect device [ 627.942278][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 627.982386][T11144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1355'. [ 628.351362][T11149] loop6: detected capacity change from 0 to 524287999 [ 628.875946][ C0] blk_print_req_error: 90 callbacks suppressed [ 628.875962][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 628.891386][ C0] buffer_io_error: 25 callbacks suppressed [ 628.891398][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 628.912346][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 628.921532][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 628.937842][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 628.947091][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 628.975736][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 628.984982][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 629.021999][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 629.031203][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 629.050144][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 629.059437][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 629.074052][ T58] lo_write_bvec: 22 callbacks suppressed [ 629.074063][ T58] loop: Write error at byte offset 1, length 1024. [ 629.099669][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 629.109433][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 629.133956][ T58] loop: Write error at byte offset 586753, length 4096. [ 629.140983][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 629.141017][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 629.194079][T11149] ldm_validate_partition_table(): Disk read failed. [ 629.236900][ T58] loop: Write error at byte offset 1111041, length 4096. [ 629.243954][ C0] I/O error, dev loop6, sector 1146 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 629.272269][ T58] loop: Write error at byte offset 1635329, length 4096. [ 629.286139][ T58] loop: Write error at byte offset 2159617, length 4096. [ 629.295387][ T58] loop: Write error at byte offset 2683905, length 4096. [ 629.306977][T11156] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1359'. [ 629.336349][ T58] loop: Write error at byte offset 3208193, length 4096. [ 629.512584][ T58] loop: Write error at byte offset 3732481, length 4096. [ 629.520372][ T58] loop: Write error at byte offset 4256769, length 4096. [ 629.527706][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 629.539895][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 629.565841][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 629.580597][T11149] Dev loop6: unable to read RDB block 0 [ 630.616513][T11149] loop6: unable to read partition table [ 630.638336][T11149] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 630.975940][ T785] vhci_hcd: vhci_device speed not set [ 631.885717][T11175] nft_compat: unsupported protocol 0 [ 633.185878][ T5760] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 633.377873][ T5760] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 633.391437][ T5760] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 633.406616][ T785] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 633.421665][ T5760] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.448761][ T5760] usb 4-1: config 1 interface 0 has no altsetting 0 [ 633.468620][ T5760] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 633.479118][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.498769][ T5760] usb 4-1: Product: ࢩ鱴ꑕ诶숔⊬ᶟ㫫롧茩샘鎸ꮼ瘗ힲﾸ嗚⣱늹⪶씻촛墀똇㵕㬅凡뉹ኵ⡜䢶୷憮벮꭪핎썵鿞尖ผ벟瘢흴Ⲽ풛֊ᚅ [ 633.525943][ T5760] usb 4-1: Manufacturer: ї [ 633.525963][ T5760] usb 4-1: SerialNumber: 仈吪꨷麷씿⃔৐἟㟜⭨끥⏕ᚴ庆럣굘 [ 633.529645][T11183] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 633.556152][T11183] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 633.655994][ T785] usb 2-1: Using ep0 maxpacket: 32 [ 633.663257][ T785] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 633.672307][ T785] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 633.692147][ T785] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 633.706093][ T785] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 633.725943][ T785] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 633.769638][ T785] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 633.823606][ T785] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 633.853186][ T785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.892750][ T785] usb 2-1: config 0 descriptor?? [ 634.152898][ T785] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 634.497349][ T786] usb 2-1: USB disconnect, device number 4 [ 635.617603][ T786] usblp0: removed [ 636.516326][ T5760] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 636.564233][ T5760] usb 4-1: USB disconnect, device number 8 [ 636.639477][ T28] audit: type=1326 audit(1750848593.059:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 637.115995][ T28] audit: type=1326 audit(1750848593.059:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 637.154130][ T28] audit: type=1326 audit(1750848593.129:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 637.225358][ T28] audit: type=1326 audit(1750848593.129:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 637.425956][ T28] audit: type=1326 audit(1750848593.759:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 637.763147][T11219] team0: Port device bond0 removed [ 637.880135][T11221] netlink: 'syz.2.1376': attribute type 10 has an invalid length. [ 637.900164][T11221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.915215][T11221] team0: Port device bond0 added [ 639.156315][T11243] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1383'. [ 639.226867][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1381'. [ 640.130299][T11263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1385'. [ 640.179157][T11261] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 640.185726][T11261] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 640.196617][T11261] vhci_hcd vhci_hcd.0: Device attached [ 640.312216][T11264] vhci_hcd: connection closed [ 640.312480][ T1092] vhci_hcd: stop threads [ 640.324331][ T1092] vhci_hcd: release socket [ 640.346439][ T1092] vhci_hcd: disconnect device [ 640.618909][T11271] team0: Port device bond0 removed [ 640.716102][T11271] netlink: 'syz.3.1392': attribute type 10 has an invalid length. [ 640.757042][T11271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.789303][T11271] team0: Port device bond0 added [ 643.185872][ T28] audit: type=1326 audit(1750848599.389:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11297 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e118e929 code=0x7fc00000 [ 643.341233][ T28] audit: type=1326 audit(1750848599.389:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11297 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e118e929 code=0x7fc00000 [ 643.555153][ T28] audit: type=1326 audit(1750848599.449:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11297 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e118e929 code=0x7fc00000 [ 643.665981][ T28] audit: type=1326 audit(1750848599.449:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11297 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e118e929 code=0x7fc00000 [ 643.694659][ T28] audit: type=1326 audit(1750848599.589:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11297 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e118e929 code=0x7fc00000 [ 643.851301][ T28] audit: type=1326 audit(1750848599.589:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11297 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e118e929 code=0x7fc00000 [ 643.941030][ T28] audit: type=1326 audit(1750848600.139:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11297 comm="syz.1.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e118e929 code=0x7fc00000 [ 644.297205][T11316] 9pnet_virtio: no channels available for device syz [ 644.397060][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1405'. [ 644.416954][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1405'. [ 647.161730][T11340] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 647.168326][T11340] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 647.203065][T11340] vhci_hcd vhci_hcd.0: Device attached [ 647.221091][T11340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1411'. [ 647.383271][T11341] vhci_hcd: connection closed [ 647.388231][ T11] vhci_hcd: stop threads [ 647.415568][ T11] vhci_hcd: release socket [ 647.476002][ T785] usb 39-1: new low-speed USB device number 10 using vhci_hcd [ 647.523390][ T11] vhci_hcd: disconnect device [ 648.347161][T11348] nft_compat: unsupported protocol 0 [ 652.211061][T11383] team0: Port device bond0 removed [ 652.354951][T11384] netlink: 'syz.1.1426': attribute type 10 has an invalid length. [ 652.394528][T11384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.441820][T11384] team0: Port device bond0 added [ 652.617266][ T785] vhci_hcd: vhci_device speed not set [ 652.761651][T11392] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1429'. [ 653.842128][T11410] lo speed is unknown, defaulting to 1000 [ 654.136261][ T28] audit: type=1326 audit(1750848609.699:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 654.221577][ T28] audit: type=1326 audit(1750848609.699:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 654.453644][ T28] audit: type=1326 audit(1750848609.759:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 654.484362][ T28] audit: type=1326 audit(1750848609.759:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 654.656838][ T28] audit: type=1326 audit(1750848609.989:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 654.876539][ T28] audit: type=1326 audit(1750848610.389:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.0.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 655.235619][T11400] lo speed is unknown, defaulting to 1000 [ 659.780429][T11441] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1441'. [ 661.097142][ T28] audit: type=1800 audit(1750848617.499:70): pid=11436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1440" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 661.201469][T11446] team0: Port device bond0 removed [ 661.311103][T11448] netlink: 'syz.2.1442': attribute type 10 has an invalid length. [ 661.353339][T11448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.363386][T11448] team0: Port device bond0 added [ 661.599143][ T28] audit: type=1326 audit(1750848618.019:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 661.665989][ T28] audit: type=1326 audit(1750848618.019:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 661.823105][ T28] audit: type=1326 audit(1750848618.109:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 662.313986][ T28] audit: type=1326 audit(1750848618.729:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1258e929 code=0x7fc00000 [ 665.902348][T11490] nft_compat: unsupported protocol 0 [ 667.226546][T11497] team0: Port device bond0 removed [ 667.466671][T11497] netlink: 'syz.1.1455': attribute type 10 has an invalid length. [ 667.496145][T11497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.649939][T11497] team0: Port device bond0 added [ 667.724405][T11500] lo speed is unknown, defaulting to 1000 [ 667.903127][ T28] audit: type=1326 audit(1750848624.319:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cf58e929 code=0x7fc00000 [ 668.203316][ T28] audit: type=1326 audit(1750848624.319:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cf58e929 code=0x7fc00000 [ 668.393886][ T28] audit: type=1326 audit(1750848624.399:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cf58e929 code=0x7fc00000 [ 668.597790][ T28] audit: type=1326 audit(1750848624.399:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cf58e929 code=0x7fc00000 [ 668.626724][ T28] audit: type=1326 audit(1750848624.529:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cf58e929 code=0x7fc00000 [ 668.788984][ T28] audit: type=1326 audit(1750848624.529:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cf58e929 code=0x7fc00000 [ 668.811466][ T28] audit: type=1326 audit(1750848624.949:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cf58e929 code=0x7fc00000 [ 671.855623][T11518] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1461'. [ 672.141678][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1460'. [ 672.762615][ T5760] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 672.821298][T11538] lo speed is unknown, defaulting to 1000 [ 672.966012][ T5760] usb 3-1: Using ep0 maxpacket: 8 [ 672.985552][ T5760] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 673.005926][ T5760] usb 3-1: config 0 has no interface number 0 [ 673.012079][ T5760] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 673.053548][ T5760] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 673.083995][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.111248][ T5760] usb 3-1: config 0 descriptor?? [ 673.162677][ T5760] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 673.539869][ T5760] usb 3-1: USB disconnect, device number 5 [ 674.006075][ T28] audit: type=1326 audit(1750848630.389:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11552 comm="syz.3.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257d38e929 code=0x7fc00000 [ 674.341529][ T28] audit: type=1326 audit(1750848630.399:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11552 comm="syz.3.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257d38e929 code=0x7fc00000 [ 674.424638][T10893] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 674.463483][ T5785] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 674.463765][ T28] audit: type=1326 audit(1750848630.449:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11552 comm="syz.3.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257d38e929 code=0x7fc00000 [ 674.530428][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.579518][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.679185][ T28] audit: type=1326 audit(1750848630.449:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11552 comm="syz.3.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257d38e929 code=0x7fc00000 [ 674.857031][ T28] audit: type=1326 audit(1750848631.129:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11552 comm="syz.3.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257d38e929 code=0x7fc00000 [ 676.794858][T11571] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1472'. [ 678.491358][T11579] mkiss: ax0: crc mode is auto. [ 679.218988][T11574] ------------[ cut here ]------------ [ 679.224813][T11574] WARNING: CPU: 1 PID: 11574 at net/mac80211/ibss.c:501 ieee80211_ibss_csa_beacon+0x5bd/0x6a0 [ 679.235156][T11574] Modules linked in: [ 679.239154][T11574] CPU: 1 PID: 11574 Comm: syz.3.1474 Not tainted 6.6.94-syzkaller #0 [ 679.247278][T11574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 679.257377][T11574] RIP: 0010:ieee80211_ibss_csa_beacon+0x5bd/0x6a0 [ 679.263836][T11574] Code: f7 c6 05 95 47 58 04 01 48 c7 c7 20 a3 bd 8b be fe 01 00 00 48 c7 c2 c0 a3 bd 8b e8 fd 9e 8b f7 e9 5f fe ff ff e8 f3 88 a9 f7 <0f> 0b b8 ea ff ff ff e9 7a ff ff ff e8 e2 88 a9 f7 0f 0b e9 b2 fa [ 679.283843][T11574] RSP: 0018:ffffc9000b946f00 EFLAGS: 00010287 [ 679.290056][T11574] RAX: ffffffff89dc0cdd RBX: ffff88801e648700 RCX: 0000000000080000 [ 679.298189][T11574] RDX: ffffc9000cdeb000 RSI: 0000000000001ae6 RDI: 0000000000001ae7 [ 679.306319][T11574] RBP: 1ffff1100bc1fab3 R08: ffffffff90d855e7 R09: 1ffffffff21b0abc [ 679.314310][T11574] R10: dffffc0000000000 R11: fffffbfff21b0abd R12: ffffc9000b9470e0 [ 679.322399][T11574] R13: ffff88805e0fd598 R14: ffff88805e0fda88 R15: ffff88805e0fcc80 [ 679.330420][T11574] FS: 00007f257e2bf6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 679.339409][T11574] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 679.346021][T11574] CR2: 0000001b2c917ff8 CR3: 0000000056953000 CR4: 00000000003506e0 [ 679.354000][T11574] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 679.362026][T11574] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 679.370029][T11574] Call Trace: [ 679.373585][T11574] [ 679.376610][T11574] ? ieee80211_recalc_dtim+0x230/0x230 [ 679.382099][T11574] ieee80211_set_csa_beacon+0x77e/0xa10 [ 679.387752][T11574] ieee80211_channel_switch+0x7c2/0xe30 [ 679.393361][T11574] ? trace_contention_end+0x39/0xe0 [ 679.398716][T11574] ? ieee80211_csa_finalize+0xf00/0xf00 [ 679.404310][T11574] ? mutex_lock_nested+0x20/0x20 [ 679.409355][T11574] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 679.415198][T11574] rdev_channel_switch+0xeb/0x240 [ 679.420328][T11574] nl80211_channel_switch+0xa07/0x1040 [ 679.425913][T11574] ? nl80211_set_coalesce+0x1310/0x1310 [ 679.431548][T11574] ? __nla_parse+0x40/0x50 [ 679.436051][T11574] ? nl80211_pre_doit+0x4f1/0x930 [ 679.441115][T11574] genl_family_rcv_msg_doit+0x209/0x2f0 [ 679.446745][T11574] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 679.452667][T11574] ? bpf_lsm_capable+0x9/0x10 [ 679.457449][T11574] ? security_capable+0x89/0xb0 [ 679.462365][T11574] genl_rcv_msg+0x60b/0x790 [ 679.466974][T11574] ? genl_bind+0x360/0x360 [ 679.471430][T11574] ? nl80211_exit+0x30/0x30 [ 679.476197][T11574] ? nl80211_set_coalesce+0x1310/0x1310 [ 679.481857][T11574] ? nl80211_pre_doit+0x930/0x930 [ 679.487006][T11574] ? ref_tracker_free+0x634/0x7d0 [ 679.492145][T11574] ? __copy_skb_header+0xa7/0x550 [ 679.497265][T11574] netlink_rcv_skb+0x216/0x480 [ 679.502080][T11574] ? genl_bind+0x360/0x360 [ 679.506546][T11574] ? netlink_ack+0x1110/0x1110 [ 679.511343][T11574] ? __lock_acquire+0x7c80/0x7c80 [ 679.516428][T11574] ? down_read+0x1ac/0x2e0 [ 679.520908][T11574] genl_rcv+0x28/0x40 [ 679.524930][T11574] netlink_unicast+0x750/0x8c0 [ 679.529750][T11574] netlink_sendmsg+0x8c1/0xbe0 [ 679.534540][T11574] ? netlink_getsockopt+0x580/0x580 [ 679.539799][T11574] ? aa_sock_msg_perm+0x94/0x150 [ 679.544781][T11574] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 679.550148][T11574] ? security_socket_sendmsg+0x80/0xa0 [ 679.555614][T11574] ? netlink_getsockopt+0x580/0x580 [ 679.560886][T11574] ____sys_sendmsg+0x5bf/0x950 [ 679.565706][T11574] ? __asan_memset+0x22/0x40 [ 679.570370][T11574] ? __sys_sendmsg_sock+0x30/0x30 [ 679.575436][T11574] ? __import_iovec+0x5f2/0x860 [ 679.580622][T11574] ? import_iovec+0x73/0xa0 [ 679.585145][T11574] ___sys_sendmsg+0x220/0x290 [ 679.589899][T11574] ? __sys_sendmsg+0x270/0x270 [ 679.594702][T11574] __se_sys_sendmsg+0x1a5/0x270 [ 679.599603][T11574] ? __x64_sys_sendmsg+0x80/0x80 [ 679.604577][T11574] ? lockdep_hardirqs_on+0x98/0x150 [ 679.609870][T11574] do_syscall_64+0x55/0xb0 [ 679.614311][T11574] ? clear_bhb_loop+0x40/0x90 [ 679.619070][T11574] ? clear_bhb_loop+0x40/0x90 [ 679.623750][T11574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 679.629674][T11574] RIP: 0033:0x7f257d38e929 [ 679.634091][T11574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.653750][T11574] RSP: 002b:00007f257e2bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.662317][T11574] RAX: ffffffffffffffda RBX: 00007f257d5b5fa0 RCX: 00007f257d38e929 [ 679.670310][T11574] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 679.678307][T11574] RBP: 00007f257d410b39 R08: 0000000000000000 R09: 0000000000000000 [ 679.686469][T11574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.694438][T11574] R13: 0000000000000000 R14: 00007f257d5b5fa0 R15: 00007ffc346fb518 [ 679.702498][T11574] [ 679.705518][T11574] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 679.712822][T11574] CPU: 1 PID: 11574 Comm: syz.3.1474 Not tainted 6.6.94-syzkaller #0 [ 679.720885][T11574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 679.730937][T11574] Call Trace: [ 679.734230][T11574] [ 679.737158][T11574] dump_stack_lvl+0x16c/0x230 [ 679.741845][T11574] ? show_regs_print_info+0x20/0x20 [ 679.747052][T11574] ? load_image+0x3b0/0x3b0 [ 679.751576][T11574] panic+0x2c0/0x710 [ 679.755489][T11574] ? bpf_jit_dump+0xd0/0xd0 [ 679.760005][T11574] __warn+0x2e0/0x470 [ 679.763987][T11574] ? ieee80211_ibss_csa_beacon+0x5bd/0x6a0 [ 679.769803][T11574] ? ieee80211_ibss_csa_beacon+0x5bd/0x6a0 [ 679.775619][T11574] report_bug+0x2be/0x4f0 [ 679.779968][T11574] ? ieee80211_ibss_csa_beacon+0x5bd/0x6a0 [ 679.785797][T11574] ? ieee80211_ibss_csa_beacon+0x5bd/0x6a0 [ 679.791620][T11574] ? ieee80211_ibss_csa_beacon+0x5bf/0x6a0 [ 679.797463][T11574] handle_bug+0xcf/0x120 [ 679.801733][T11574] exc_invalid_op+0x1a/0x50 [ 679.806235][T11574] asm_exc_invalid_op+0x1a/0x20 [ 679.811087][T11574] RIP: 0010:ieee80211_ibss_csa_beacon+0x5bd/0x6a0 [ 679.817512][T11574] Code: f7 c6 05 95 47 58 04 01 48 c7 c7 20 a3 bd 8b be fe 01 00 00 48 c7 c2 c0 a3 bd 8b e8 fd 9e 8b f7 e9 5f fe ff ff e8 f3 88 a9 f7 <0f> 0b b8 ea ff ff ff e9 7a ff ff ff e8 e2 88 a9 f7 0f 0b e9 b2 fa [ 679.837135][T11574] RSP: 0018:ffffc9000b946f00 EFLAGS: 00010287 [ 679.843196][T11574] RAX: ffffffff89dc0cdd RBX: ffff88801e648700 RCX: 0000000000080000 [ 679.851164][T11574] RDX: ffffc9000cdeb000 RSI: 0000000000001ae6 RDI: 0000000000001ae7 [ 679.859131][T11574] RBP: 1ffff1100bc1fab3 R08: ffffffff90d855e7 R09: 1ffffffff21b0abc [ 679.867098][T11574] R10: dffffc0000000000 R11: fffffbfff21b0abd R12: ffffc9000b9470e0 [ 679.875059][T11574] R13: ffff88805e0fd598 R14: ffff88805e0fda88 R15: ffff88805e0fcc80 [ 679.883048][T11574] ? ieee80211_ibss_csa_beacon+0x5bd/0x6a0 [ 679.888873][T11574] ? ieee80211_recalc_dtim+0x230/0x230 [ 679.894335][T11574] ieee80211_set_csa_beacon+0x77e/0xa10 [ 679.899902][T11574] ieee80211_channel_switch+0x7c2/0xe30 [ 679.905459][T11574] ? trace_contention_end+0x39/0xe0 [ 679.910693][T11574] ? ieee80211_csa_finalize+0xf00/0xf00 [ 679.916245][T11574] ? mutex_lock_nested+0x20/0x20 [ 679.921194][T11574] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 679.927007][T11574] rdev_channel_switch+0xeb/0x240 [ 679.932034][T11574] nl80211_channel_switch+0xa07/0x1040 [ 679.937516][T11574] ? nl80211_set_coalesce+0x1310/0x1310 [ 679.943109][T11574] ? __nla_parse+0x40/0x50 [ 679.947532][T11574] ? nl80211_pre_doit+0x4f1/0x930 [ 679.952567][T11574] genl_family_rcv_msg_doit+0x209/0x2f0 [ 679.958124][T11574] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 679.964028][T11574] ? bpf_lsm_capable+0x9/0x10 [ 679.968709][T11574] ? security_capable+0x89/0xb0 [ 679.973590][T11574] genl_rcv_msg+0x60b/0x790 [ 679.978105][T11574] ? genl_bind+0x360/0x360 [ 679.982526][T11574] ? nl80211_exit+0x30/0x30 [ 679.987039][T11574] ? nl80211_set_coalesce+0x1310/0x1310 [ 679.992624][T11574] ? nl80211_pre_doit+0x930/0x930 [ 679.997659][T11574] ? ref_tracker_free+0x634/0x7d0 [ 680.002702][T11574] ? __copy_skb_header+0xa7/0x550 [ 680.007748][T11574] netlink_rcv_skb+0x216/0x480 [ 680.012533][T11574] ? genl_bind+0x360/0x360 [ 680.016959][T11574] ? netlink_ack+0x1110/0x1110 [ 680.021769][T11574] ? __lock_acquire+0x7c80/0x7c80 [ 680.026808][T11574] ? down_read+0x1ac/0x2e0 [ 680.031231][T11574] genl_rcv+0x28/0x40 [ 680.035216][T11574] netlink_unicast+0x750/0x8c0 [ 680.040001][T11574] netlink_sendmsg+0x8c1/0xbe0 [ 680.044781][T11574] ? netlink_getsockopt+0x580/0x580 [ 680.049994][T11574] ? aa_sock_msg_perm+0x94/0x150 [ 680.054953][T11574] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 680.060254][T11574] ? security_socket_sendmsg+0x80/0xa0 [ 680.065748][T11574] ? netlink_getsockopt+0x580/0x580 [ 680.071068][T11574] ____sys_sendmsg+0x5bf/0x950 [ 680.075847][T11574] ? __asan_memset+0x22/0x40 [ 680.080499][T11574] ? __sys_sendmsg_sock+0x30/0x30 [ 680.085567][T11574] ? __import_iovec+0x5f2/0x860 [ 680.090440][T11574] ? import_iovec+0x73/0xa0 [ 680.094958][T11574] ___sys_sendmsg+0x220/0x290 [ 680.099643][T11574] ? __sys_sendmsg+0x270/0x270 [ 680.104473][T11574] __se_sys_sendmsg+0x1a5/0x270 [ 680.109335][T11574] ? __x64_sys_sendmsg+0x80/0x80 [ 680.114298][T11574] ? lockdep_hardirqs_on+0x98/0x150 [ 680.119502][T11574] do_syscall_64+0x55/0xb0 [ 680.123921][T11574] ? clear_bhb_loop+0x40/0x90 [ 680.128597][T11574] ? clear_bhb_loop+0x40/0x90 [ 680.133289][T11574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 680.139194][T11574] RIP: 0033:0x7f257d38e929 [ 680.143607][T11574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 680.163218][T11574] RSP: 002b:00007f257e2bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.171636][T11574] RAX: ffffffffffffffda RBX: 00007f257d5b5fa0 RCX: 00007f257d38e929 [ 680.179620][T11574] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 680.187593][T11574] RBP: 00007f257d410b39 R08: 0000000000000000 R09: 0000000000000000 [ 680.195570][T11574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.203539][T11574] R13: 0000000000000000 R14: 00007f257d5b5fa0 R15: 00007ffc346fb518 [ 680.211534][T11574] [ 680.214876][T11574] Kernel Offset: disabled [ 680.219323][T11574] Rebooting in 86400 seconds..