last executing test programs: 7.248203426s ago: executing program 0 (id=583): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201610117592920570509201ec7010203010902"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000940)={"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"}) syz_usb_control_io(r1, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000440)={0x0, 0xe, 0x93, "18ac70ba6fd66ee649bbccdfa559569629bd98f9cb39cd0fc6f52f0abf2cf8659d5c9a7c4b8405abf99e6711eaa5271ede099a172cdbe5831764d4e91b28af85e1efa63ec1858270d71f9663dca1a404e2b5ef093a3a3b15452613a6f2c027c51f95d2d514fce31fda6a5edfde5892762a278ef2a61ca6c0903d017b13eb2f45e0f0a3e505b6d2f58eae6cb631342864db03c3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x2}, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x19, 0x2, "f856"}, &(0x7f0000000800)={0x40, 0x1a, 0x2}, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.287375763s ago: executing program 1 (id=589): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) 4.044852603s ago: executing program 0 (id=594): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000100000002000000ffff000005"], 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000000)=0x3, 0x4) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000002480)=[{0xffff, 0x2010, 0x0, 0x0}, {0x1ff, 0x4811, 0x0, 0x0}], 0x2}) 3.76200185s ago: executing program 1 (id=595): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x3e, &(0x7f0000000f00)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0xc, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x15, 0x0, [{0x7, 0xf, "3332432bd3028cdf502ba5d40c"}]}]}}}}}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r2, 0x1, 0x9, 0x3}) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x5}, 0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000300)={'wg2\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x15}}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r5, 0x89f2, &(0x7f0000000600)="4f48d732ae00634300eae94367625e86898ee87a59ac88ce27653ffb004c755e8f80d6f49b6e1d8c36625fb1827b95cd06d06c237b48f69451575f41a7280d9d282561389ed16430e557f3ef3b5dec00cb1f2f2aa330a0e2afa7052eac65dc16bfcb8d4f97d69e434bd452d6fa6c386a7e42187ca3284100b827379c7c5626ba526e98a08fbf7a2d5d878ce80546a57be2a56f779b4301c46491308dab79ed") r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) sendto$packet(r7, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x40, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c010000100001040000000000000000000000000001000000000000000000010000000000020000000000000000000112341234000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d23300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000"], 0x13c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 3.201229214s ago: executing program 1 (id=596): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x891a, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @remote}, {0x2, 0x4e21, @multicast2}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$KVM_RUN(r0, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) syz_open_dev$sndmidi(&(0x7f0000000080), 0x7fff, 0x20000) 2.876847371s ago: executing program 1 (id=598): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x1b1}], 0x1}}], 0x1, 0x42091) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x314) 2.759213494s ago: executing program 1 (id=601): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000033d000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0xba}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x20, 0x5, 0xfd}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x7df, 0x40, 0x9, 0xff, 0x10000000100006, 0x8001, 0x2, 0xb, 0x3, 0xffffffff, 0xfffffffffffffff, 0x9, 0x1, 0x20000000000fc, 0x0, 0x4], 0x8080000, 0x40005}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.484831991s ago: executing program 3 (id=602): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000000d0a010800000000000000000100fffe0900020073797a31000000000900010073797a30000000001d9c00dbde95d6cf8db7625a9b348db686d6a264629b5e48c53fecf3dd677c3b90c99ea605edff29c220bc30a7cdef04c99fca8216f53e40a77e3ce47f3e836725e0d4c5e378e828"], 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x2) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) 2.484593601s ago: executing program 1 (id=603): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201610117592920570509201ec7010203010902"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000940)={"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"}) syz_usb_control_io(r1, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000440)={0x0, 0xe, 0x93, "18ac70ba6fd66ee649bbccdfa559569629bd98f9cb39cd0fc6f52f0abf2cf8659d5c9a7c4b8405abf99e6711eaa5271ede099a172cdbe5831764d4e91b28af85e1efa63ec1858270d71f9663dca1a404e2b5ef093a3a3b15452613a6f2c027c51f95d2d514fce31fda6a5edfde5892762a278ef2a61ca6c0903d017b13eb2f45e0f0a3e505b6d2f58eae6cb631342864db03c3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x2}, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x19, 0x2, "f856"}, &(0x7f0000000800)={0x40, 0x1a, 0x2}, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.420977962s ago: executing program 3 (id=604): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) 2.372509963s ago: executing program 0 (id=605): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 1.848904766s ago: executing program 2 (id=606): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1.736085449s ago: executing program 2 (id=607): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x3e, &(0x7f0000000f00)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0xc, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x15, 0x0, [{0x7, 0xf, "3332432bd3028cdf502ba5d40c"}]}]}}}}}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r2, 0x1, 0x9, 0x3}) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x5}, 0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000300)={'wg2\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x15}}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r5, 0x89f2, &(0x7f0000000600)="4f48d732ae00634300eae94367625e86898ee87a59ac88ce27653ffb004c755e8f80d6f49b6e1d8c36625fb1827b95cd06d06c237b48f69451575f41a7280d9d282561389ed16430e557f3ef3b5dec00cb1f2f2aa330a0e2afa7052eac65dc16bfcb8d4f97d69e434bd452d6fa6c386a7e42187ca3284100b827379c7c5626ba526e98a08fbf7a2d5d878ce80546a57be2a56f779b4301c46491308dab79ed") r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) sendto$packet(r7, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x40, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c010000100001040000000000000000000000000001000000000000000000010000000000020000000000000000000112341234000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d23300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000"], 0x13c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 1.562367193s ago: executing program 2 (id=608): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0) r3 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) r4 = syz_io_uring_setup(0x617a, &(0x7f00000002c0)={0x0, 0x1992, 0x20000, 0x1, 0x15a}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) io_uring_enter(r4, 0x542d, 0xeaba, 0x0, &(0x7f0000000400)={[0x9b34]}, 0x8) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() 1.420357457s ago: executing program 0 (id=609): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x8083, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000200)={0x2000006, 0xfffffff9, 0x10021d9d, 0x6, 0xff, "42f42749a2ed195a14c84953dc7e8e5aec7776", 0xfffffffa, 0x1c680}) 1.232790881s ago: executing program 3 (id=610): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x1b1}, {0x0}], 0x2}}], 0x1, 0x42091) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x314) 1.228600391s ago: executing program 0 (id=611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000033d000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0xba}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x20, 0x5, 0xfd}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x7df, 0x40, 0x9, 0xff, 0x10000000100006, 0x8001, 0x2, 0xb, 0x3, 0xffffffff, 0xfffffffffffffff, 0x9, 0x1, 0x20000000000fc, 0x0, 0x4], 0x8080000, 0x40005}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.136405003s ago: executing program 3 (id=612): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) timer_gettime(r1, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000000d0a010800000000000000000100fffe0900020073797a31000000000900010073797a30000000001d9c00dbde95d6cf8db7625a9b348db686d6a264629b5e48c53fecf3dd677c3b90c99ea605edff29c220bc30a7cdef04c99fca8216f53e40a77e3ce47f3e836725e0d4c5e378e828"], 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x2) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) 916.392078ms ago: executing program 0 (id=613): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000100000002000000ffff000005"], 0x48) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000140)={&(0x7f0000002480)=[{0xffff, 0x2010, 0x0, 0x0}, {0x1ff, 0x4811, 0x0, 0x0}], 0x2}) 915.724908ms ago: executing program 3 (id=614): writev(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r1, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed00", 0x13}, {&(0x7f0000000040)="35ba85253b191d4d85f7618803e93304e734d7f43fe630fe755e96ea50bfe0339d671f11cb790fd3e1", 0x29}, {&(0x7f0000000100)="127d589163267e4b0e", 0x9}], 0x3}}], 0x1, 0x20e8086) 342.482992ms ago: executing program 2 (id=615): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 211.830555ms ago: executing program 2 (id=616): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x3e, &(0x7f0000000f00)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0xc, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x15, 0x0, [{0x7, 0xf, "3332432bd3028cdf502ba5d40c"}]}]}}}}}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r2, 0x1, 0x9, 0x3}) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x5}, 0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000300)={'wg2\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x15}}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r5, 0x89f2, &(0x7f0000000600)="4f48d732ae00634300eae94367625e86898ee87a59ac88ce27653ffb004c755e8f80d6f49b6e1d8c36625fb1827b95cd06d06c237b48f69451575f41a7280d9d282561389ed16430e557f3ef3b5dec00cb1f2f2aa330a0e2afa7052eac65dc16bfcb8d4f97d69e434bd452d6fa6c386a7e42187ca3284100b827379c7c5626ba526e98a08fbf7a2d5d878ce80546a57be2a56f779b4301c46491308dab79ed") r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) sendto$packet(r7, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x40, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c010000100001040000000000000000000000000001000000000000000000010000000000020000000000000000000112341234000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d23300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000"], 0x13c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00'], 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 78.715669ms ago: executing program 2 (id=617): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket(0x200000000000011, 0x2, 0xd) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB="01000300"/13, @ANYBLOB="08000800020000000c0003000000000000"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 3 (id=618): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): 7][ T5777] veth1_macvtap: entered promiscuous mode [ 89.087083][ T5772] veth0_macvtap: entered promiscuous mode [ 89.120651][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.132333][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.142783][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.153720][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.168885][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.184233][ T5772] veth1_macvtap: entered promiscuous mode [ 89.204641][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.216963][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.227808][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.238652][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.255651][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.307501][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.319543][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.330223][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.341412][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.351819][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.362480][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.377221][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.386568][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.396150][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.404887][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.415091][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.429233][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.438955][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.491268][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.503964][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.514932][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.530179][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.549465][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.560306][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.574832][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.594126][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.603340][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.614354][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.634429][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.669084][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.678463][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.776731][ T5784] Bluetooth: hci0: command tx timeout [ 89.782667][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.795896][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.846045][ T5784] Bluetooth: hci1: command tx timeout [ 89.896937][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.904842][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.925601][ T5784] Bluetooth: hci2: command tx timeout [ 89.931100][ T5784] Bluetooth: hci3: command tx timeout [ 90.013812][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.023680][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.042424][ T5840] syzkaller0: entered promiscuous mode [ 90.048434][ T5840] syzkaller0: entered allmulticast mode [ 90.179896][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.198120][ T5842] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.215538][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.282929][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.305680][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.325994][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.334947][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.654713][ T5851] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4'. [ 90.924137][ T5858] binder: 5856:5858 ioctl c0306201 0 returned -14 [ 91.252031][ T5867] syzkaller0: entered promiscuous mode [ 91.269466][ T5867] syzkaller0: entered allmulticast mode [ 91.860010][ T5784] Bluetooth: hci0: command tx timeout [ 91.926768][ T5784] Bluetooth: hci1: command tx timeout [ 92.005966][ T5784] Bluetooth: hci2: command tx timeout [ 92.011458][ T5784] Bluetooth: hci3: command tx timeout [ 92.199055][ T27] cfg80211: failed to load regulatory.db [ 92.435276][ T5886] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16'. [ 93.212506][ T5894] binder: 5893:5894 ioctl c0306201 0 returned -14 [ 93.558152][ T5898] netlink: 72 bytes leftover after parsing attributes in process `syz.2.20'. [ 93.616621][ T5898] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 94.417306][ T5909] netlink: 48 bytes leftover after parsing attributes in process `syz.0.25'. [ 94.743240][ T5913] netlink: 148 bytes leftover after parsing attributes in process `syz.1.27'. [ 94.815949][ T5913] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 95.192965][ T5922] syz.1.30 uses obsolete (PF_INET,SOCK_PACKET) [ 95.514358][ T28] audit: type=1326 audit(1786294558.532:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.2.34" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f132679e0d9 code=0x0 [ 95.775642][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.885317][ T5816] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.965089][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 95.979580][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 95.991358][ T174] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.000744][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 96.013823][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.024720][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.039667][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.049063][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.075124][ T5816] usb 2-1: Using ep0 maxpacket: 32 [ 96.097441][ T5816] usb 2-1: config 0 has no interfaces? [ 96.114862][ T5816] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 96.154731][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.178997][ T5816] usb 2-1: Product: syz [ 96.183261][ T5816] usb 2-1: Manufacturer: syz [ 96.188510][ T5816] usb 2-1: SerialNumber: syz [ 96.196215][ T5816] usb 2-1: config 0 descriptor?? [ 96.221135][ T174] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.242331][ T174] usb 3-1: config 0 has no interfaces? [ 96.267920][ T174] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 96.291870][ T174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.304122][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 96.311859][ T174] usb 3-1: Product: syz [ 96.316278][ T9] usbtmc 1-1:16.0: can't read capabilities [ 96.322276][ T174] usb 3-1: Manufacturer: syz [ 96.342729][ T174] usb 3-1: SerialNumber: syz [ 96.352317][ T174] usb 3-1: config 0 descriptor?? [ 96.528486][ T9] usb 2-1: USB disconnect, device number 2 [ 96.528521][ T5816] usb 1-1: USB disconnect, device number 2 [ 97.026050][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 97.035384][ T5955] netlink: 64 bytes leftover after parsing attributes in process `syz.3.41'. [ 97.465120][ T5835] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 97.525485][ T5816] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.070158][ T5969] netlink: 'syz.3.42': attribute type 3 has an invalid length. [ 98.081438][ T5969] netlink: 666 bytes leftover after parsing attributes in process `syz.3.42'. [ 98.596718][ T174] usb 3-1: USB disconnect, device number 2 [ 98.739836][ T5835] usb 4-1: unable to get BOS descriptor or descriptor too short [ 98.768827][ T5835] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 98.809233][ T5835] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 98.826718][ T5835] usb 4-1: can't read configurations, error -71 [ 99.113183][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 99.128245][ T5982] netlink: 64 bytes leftover after parsing attributes in process `syz.1.50'. [ 99.571242][ T2133] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.712865][ T5997] tipc: Started in network mode [ 99.727945][ T5997] tipc: Node identity ac1414aa, cluster identity 4711 [ 99.748290][ T5997] tipc: Enabled bearer , priority 10 [ 99.765630][ T2133] usb 2-1: Using ep0 maxpacket: 32 [ 99.782320][ T2133] usb 2-1: config 0 has no interfaces? [ 99.801766][ T2133] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 99.824250][ T2133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.849485][ T2133] usb 2-1: Product: syz [ 99.853736][ T2133] usb 2-1: Manufacturer: syz [ 99.861104][ T2133] usb 2-1: SerialNumber: syz [ 99.891282][ T2133] usb 2-1: config 0 descriptor?? [ 100.268512][ T6011] gretap0: entered promiscuous mode [ 100.282538][ T6011] macsec1: entered allmulticast mode [ 100.299433][ T27] usb 2-1: USB disconnect, device number 3 [ 100.324363][ T6011] gretap0: entered allmulticast mode [ 100.373306][ T6011] gretap0: left allmulticast mode [ 100.381034][ T6011] gretap0: left promiscuous mode [ 100.866610][ T5815] tipc: Node number set to 2886997162 [ 101.102409][ T6037] tipc: Started in network mode [ 101.107746][ T6037] tipc: Node identity ac1414aa, cluster identity 4711 [ 101.117041][ T6037] tipc: Enabled bearer , priority 10 [ 101.835614][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.036503][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 102.074541][ T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 102.125093][ T5815] tipc: Node number set to 2886997162 [ 102.130046][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 102.149664][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.163251][ T27] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.183827][ T27] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.193433][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.445775][ T27] usb 4-1: GET_CAPABILITIES returned 0 [ 102.452741][ T27] usbtmc 4-1:16.0: can't read capabilities [ 102.525231][ T5816] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.694063][ T27] usb 4-1: USB disconnect, device number 4 [ 102.735355][ T5816] usb 1-1: Using ep0 maxpacket: 32 [ 102.755120][ T5816] usb 1-1: config 0 has no interfaces? [ 102.773835][ T5816] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 102.800499][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.824221][ T5816] usb 1-1: Product: syz [ 102.839559][ T5816] usb 1-1: Manufacturer: syz [ 102.844246][ T5816] usb 1-1: SerialNumber: syz [ 102.870683][ T5816] usb 1-1: config 0 descriptor?? [ 103.584800][ T6060] kvm: kvm [6059]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 103.615609][ T6060] kvm: kvm [6059]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 104.086546][ T6084] syz.2.87 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 104.098116][ T6084] CPU: 0 PID: 6084 Comm: syz.2.87 Not tainted syzkaller #0 [ 104.105386][ T6084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.115515][ T6084] Call Trace: [ 104.118883][ T6084] [ 104.121856][ T6084] dump_stack_lvl+0x18c/0x250 [ 104.126613][ T6084] ? show_regs_print_info+0x20/0x20 [ 104.131860][ T6084] ? load_image+0x420/0x420 [ 104.136422][ T6084] ? ___ratelimit+0x478/0x610 [ 104.141146][ T6084] ? radix_tree_cpu_dead+0x160/0x160 [ 104.146473][ T6084] dump_header+0xd8/0x820 [ 104.150842][ T6084] oom_kill_process+0x390/0x580 [ 104.155742][ T6084] out_of_memory+0xe0e/0x1200 [ 104.160481][ T6084] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 104.166161][ T6084] ? mutex_lock_nested+0x20/0x20 [ 104.171117][ T6084] ? unregister_oom_notifier+0x20/0x20 [ 104.176621][ T6084] mem_cgroup_out_of_memory+0x2c2/0x390 [ 104.182243][ T6084] ? try_charge_memcg+0xc91/0x17c0 [ 104.187398][ T6084] ? drain_local_stock+0x630/0x630 [ 104.192575][ T6084] ? do_raw_spin_unlock+0x121/0x230 [ 104.197831][ T6084] try_charge_memcg+0xca1/0x17c0 [ 104.202808][ T6084] ? folio_flags+0x120/0x120 [ 104.207432][ T6084] ? percpu_ref_tryget+0x15/0x180 [ 104.212498][ T6084] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 104.218254][ T6084] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 104.224269][ T6084] ? percpu_ref_tryget+0x15/0x180 [ 104.229338][ T6084] ? percpu_ref_tryget+0x15/0x180 [ 104.234395][ T6084] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 104.240140][ T6084] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 104.245889][ T6084] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 104.251735][ T6084] obj_cgroup_charge+0x36e/0x630 [ 104.256707][ T6084] ? get_obj_cgroup_from_current+0xd4/0x280 [ 104.262629][ T6084] ? obj_cgroup_charge+0xed/0x630 [ 104.267684][ T6084] ? mod_objcg_mlstate+0x320/0x320 [ 104.272822][ T6084] ? percpu_ref_tryget+0x15/0x180 [ 104.277877][ T6084] ? percpu_ref_tryget+0x15/0x180 [ 104.282940][ T6084] ? get_obj_cgroup_from_current+0xd4/0x280 [ 104.288872][ T6084] slab_pre_alloc_hook+0x2e2/0x300 [ 104.294069][ T6084] kmem_cache_alloc+0x5a/0x2c0 [ 104.298873][ T6084] ? __anon_vma_prepare+0x68/0x440 [ 104.304047][ T6084] __anon_vma_prepare+0x68/0x440 [ 104.309011][ T6084] ? __pte_alloc+0x113/0x2a0 [ 104.313653][ T6084] handle_mm_fault+0x3ded/0x4a50 [ 104.318619][ T6084] ? handle_mm_fault+0xe6/0x4a50 [ 104.323600][ T6084] ? numa_migrate_prep+0x350/0x350 [ 104.328747][ T6084] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 104.334059][ T6084] do_user_addr_fault+0x736/0x12d0 [ 104.339218][ T6084] exc_page_fault+0x64/0x100 [ 104.343841][ T6084] ? clear_bhb_loop+0x40/0x90 [ 104.348556][ T6084] asm_exc_page_fault+0x26/0x30 [ 104.353439][ T6084] RIP: 0033:0x7f1326760002 [ 104.357917][ T6084] Code: 8d 15 41 19 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 b8 2d 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 104.377595][ T6084] RSP: 002b:00007f1327612d20 EFLAGS: 00010286 [ 104.383699][ T6084] RAX: ffffffffffffffff RBX: 00007f1320000000 RCX: 00007f132679ded7 [ 104.391745][ T6084] RDX: 00007f132685191f RSI: 0000000000021000 RDI: 00007f1320000000 [ 104.399751][ T6084] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 104.407758][ T6084] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 104.415762][ T6084] R13: 0000000000001000 R14: 00007f1324000000 R15: 0000000003609000 [ 104.423779][ T6084] [ 104.452830][ T6084] memory: usage 8kB, limit 8kB, failcnt 25 [ 104.465325][ T6084] memory+swap: usage 12kB, limit 9007199254740988kB, failcnt 0 [ 104.475957][ T6084] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 104.510555][ T6084] Memory cgroup stats for /syz2/test: [ 104.511061][ T6084] cache 0 [ 104.550747][ T6084] rss 0 [ 104.560035][ T6084] rss_huge 0 [ 104.563324][ T6084] shmem 0 [ 104.583011][ T6084] mapped_file 0 [ 104.595164][ T6084] dirty 0 [ 104.598191][ T6084] writeback 0 [ 104.633381][ T6084] workingset_refault_anon 0 [ 104.642296][ T6084] workingset_refault_file 0 [ 104.659014][ T6084] swap 4096 [ 104.662360][ T6084] pgpgin 1 [ 104.666126][ T6084] pgpgout 1 [ 104.669478][ T6084] pgfault 4 [ 104.672795][ T6084] pgmajfault 0 [ 104.676961][ T6084] inactive_anon 0 [ 104.680806][ T6084] active_anon 0 [ 104.684449][ T6084] inactive_file 0 [ 104.688771][ T6084] active_file 0 [ 104.692399][ T6084] unevictable 0 [ 104.696511][ T6084] hierarchical_memory_limit 8192 [ 104.703769][ T6084] hierarchical_memsw_limit 9223372036854771712 [ 104.713860][ T6084] total_cache 0 [ 104.720931][ T6084] total_rss 0 [ 104.728838][ T6084] total_rss_huge 0 [ 104.736072][ T6084] total_shmem 0 [ 104.743003][ T6084] total_mapped_file 0 [ 104.752742][ T6084] total_dirty 0 [ 104.763027][ T6084] total_writeback 0 [ 104.775972][ T6084] total_workingset_refault_anon 0 [ 104.784839][ T6084] total_workingset_refault_file 0 [ 104.803220][ T6084] total_swap 4096 [ 104.817343][ T6084] total_pgpgin 1 [ 104.824196][ T6084] total_pgpgout 1 [ 104.830670][ T6093] netlink: 72 bytes leftover after parsing attributes in process `syz.1.89'. [ 104.841054][ T6084] total_pgfault 4 [ 104.844846][ T6084] total_pgmajfault 0 [ 104.853186][ T6084] total_inactive_anon 0 [ 104.872411][ T6084] total_active_anon 0 [ 104.892426][ T6084] total_inactive_file 0 [ 104.915089][ T6084] total_active_file 0 [ 104.929585][ T6084] total_unevictable 0 [ 104.957433][ T6084] anon_cost 0 [ 104.972638][ T6084] file_cost 0 [ 104.996250][ T6084] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.87,pid=6083,uid=0 [ 105.019067][ T6093] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 105.076167][ T6084] Memory cgroup out of memory: Killed process 6083 (syz.2.87) total-vm:169756kB, anon-rss:1240kB, file-rss:23040kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 105.196359][ T9] usb 1-1: USB disconnect, device number 4 [ 105.553830][ T6097] binder: 6096:6097 ioctl c0306201 0 returned -14 [ 105.835097][ T5835] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.025074][ T5835] usb 3-1: Using ep0 maxpacket: 8 [ 106.032603][ T5835] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 106.055404][ T5835] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 106.075096][ T5835] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.098102][ T5835] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.149112][ T5835] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.179608][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.452178][ T5835] usb 3-1: GET_CAPABILITIES returned 0 [ 106.480910][ T5835] usbtmc 3-1:16.0: can't read capabilities [ 106.711524][ T5835] usb 3-1: USB disconnect, device number 3 [ 107.247348][ T6120] syz.1.99 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 107.260510][ T6120] CPU: 1 PID: 6120 Comm: syz.1.99 Not tainted syzkaller #0 [ 107.267782][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.277859][ T6120] Call Trace: [ 107.281148][ T6120] [ 107.284086][ T6120] dump_stack_lvl+0x18c/0x250 [ 107.288788][ T6120] ? show_regs_print_info+0x20/0x20 [ 107.294006][ T6120] ? load_image+0x420/0x420 [ 107.298530][ T6120] ? ___ratelimit+0x478/0x610 [ 107.303236][ T6120] ? radix_tree_cpu_dead+0x160/0x160 [ 107.308565][ T6120] dump_header+0xd8/0x820 [ 107.312919][ T6120] oom_kill_process+0x390/0x580 [ 107.317795][ T6120] out_of_memory+0xe0e/0x1200 [ 107.322499][ T6120] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 107.328157][ T6120] ? print_unlock_imbalance_bug+0x160/0x160 [ 107.334067][ T6120] ? mutex_lock_nested+0x20/0x20 [ 107.339026][ T6120] ? unregister_oom_notifier+0x20/0x20 [ 107.344511][ T6120] mem_cgroup_out_of_memory+0x2c2/0x390 [ 107.350119][ T6120] ? try_charge_memcg+0xc91/0x17c0 [ 107.355250][ T6120] ? drain_local_stock+0x630/0x630 [ 107.360380][ T6120] ? do_raw_spin_unlock+0x121/0x230 [ 107.365610][ T6120] try_charge_memcg+0xca1/0x17c0 [ 107.370608][ T6120] ? folio_flags+0x120/0x120 [ 107.375251][ T6120] ? percpu_ref_tryget+0x15/0x180 [ 107.380290][ T6120] ? get_mem_cgroup_from_mm+0x38/0x290 [ 107.385770][ T6120] charge_memcg+0x11b/0x3b0 [ 107.390293][ T6120] ? __mem_cgroup_charge+0x80/0x80 [ 107.395416][ T6120] ? get_mem_cgroup_from_mm+0x38/0x290 [ 107.400886][ T6120] ? get_mem_cgroup_from_mm+0x38/0x290 [ 107.406364][ T6120] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 107.411932][ T6120] __mem_cgroup_charge+0x25/0x80 [ 107.416902][ T6120] handle_mm_fault+0x1b00/0x4a50 [ 107.421859][ T6120] ? handle_mm_fault+0xe6/0x4a50 [ 107.426821][ T6120] ? numa_migrate_prep+0x350/0x350 [ 107.431980][ T6120] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 107.437294][ T6120] do_user_addr_fault+0x736/0x12d0 [ 107.442437][ T6120] exc_page_fault+0x64/0x100 [ 107.447052][ T6120] ? clear_bhb_loop+0x40/0x90 [ 107.451746][ T6120] asm_exc_page_fault+0x26/0x30 [ 107.456616][ T6120] RIP: 0033:0x7f79ab160002 [ 107.461042][ T6120] Code: 8d 15 41 19 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 b8 2d 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 107.480667][ T6120] RSP: 002b:00007f79abf9ed20 EFLAGS: 00010286 [ 107.486769][ T6120] RAX: ffffffffffffffff RBX: 00007f79a4000000 RCX: 00007f79ab19ded7 [ 107.494748][ T6120] RDX: 00007f79ab25191f RSI: 0000000000021000 RDI: 00007f79a4000000 [ 107.502764][ T6120] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 107.510749][ T6120] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 107.518766][ T6120] R13: 0000000000001000 R14: 00007f79a8000000 R15: 0000000002c09000 [ 107.526764][ T6120] [ 107.765651][ T6120] memory: usage 8kB, limit 8kB, failcnt 27 [ 107.771837][ T6120] memory+swap: usage 12kB, limit 9007199254740988kB, failcnt 0 [ 107.786330][ T6120] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 107.793254][ T6120] Memory cgroup stats for /syz1/test: [ 107.793523][ T6120] cache 0 [ 107.805601][ T6120] rss 0 [ 107.808415][ T6120] rss_huge 0 [ 107.811621][ T6120] shmem 0 [ 107.814605][ T6120] mapped_file 0 [ 107.818220][ T6120] dirty 0 [ 107.821213][ T6120] writeback 0 [ 107.824514][ T6120] workingset_refault_anon 0 [ 107.834281][ T6120] workingset_refault_file 0 [ 107.838916][ T6120] swap 4096 [ 107.842172][ T6120] pgpgin 1 [ 107.856114][ T6120] pgpgout 1 [ 107.865322][ T6120] pgfault 3 [ 107.868514][ T6120] pgmajfault 0 [ 107.871930][ T6120] inactive_anon 0 [ 107.898025][ T6120] active_anon 0 [ 107.908051][ T6120] inactive_file 0 [ 107.925458][ T6120] active_file 0 [ 107.932812][ T6120] unevictable 0 [ 107.943018][ T6120] hierarchical_memory_limit 8192 [ 107.949965][ T6120] hierarchical_memsw_limit 9223372036854771712 [ 107.956633][ T6120] total_cache 0 [ 107.960210][ T6120] total_rss 0 [ 107.963609][ T6120] total_rss_huge 0 [ 107.975966][ T6120] total_shmem 0 [ 107.980289][ T6120] total_mapped_file 0 [ 107.990464][ T6120] total_dirty 0 [ 107.994101][ T6120] total_writeback 0 [ 108.031465][ T6120] total_workingset_refault_anon 0 [ 108.047234][ T6120] total_workingset_refault_file 0 [ 108.074314][ T6120] total_swap 4096 [ 108.099164][ T6120] total_pgpgin 1 [ 108.102814][ T6120] total_pgpgout 1 [ 108.111782][ T6124] binder: 6123:6124 ioctl c0306201 0 returned -14 [ 108.122785][ T6120] total_pgfault 3 [ 108.128710][ T6120] total_pgmajfault 0 [ 108.132691][ T6120] total_inactive_anon 0 [ 108.155067][ T6120] total_active_anon 0 [ 108.163409][ T6120] total_inactive_file 0 [ 108.189239][ T6120] total_active_file 0 [ 108.193314][ T6120] total_unevictable 0 [ 108.211125][ T6120] anon_cost 0 [ 108.214518][ T6120] file_cost 0 [ 108.243272][ T6120] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.99,pid=6119,uid=0 [ 108.292047][ T6120] Memory cgroup out of memory: Killed process 6120 (syz.1.99) total-vm:169756kB, anon-rss:1368kB, file-rss:22912kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 108.631012][ T6137] Zero length message leads to an empty skb [ 109.115169][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.157551][ T6146] capability: warning: `syz.2.109' uses 32-bit capabilities (legacy support in use) [ 109.235110][ T5814] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 109.366984][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 109.381166][ T27] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.454232][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.505207][ T27] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 109.545153][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.654601][ T27] usb 2-1: config 0 descriptor?? [ 110.710071][ T6157] binder: 6155:6157 ioctl c0306201 0 returned -14 [ 110.811034][ T6144] netlink: 'syz.0.108': attribute type 3 has an invalid length. [ 110.857888][ T6144] netlink: 666 bytes leftover after parsing attributes in process `syz.0.108'. [ 111.432457][ T6164] syz.3.114 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 111.477118][ T6164] CPU: 0 PID: 6164 Comm: syz.3.114 Not tainted syzkaller #0 [ 111.484522][ T6164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.494627][ T6164] Call Trace: [ 111.497942][ T6164] [ 111.500915][ T6164] dump_stack_lvl+0x18c/0x250 [ 111.505640][ T6164] ? show_regs_print_info+0x20/0x20 [ 111.510906][ T6164] ? load_image+0x420/0x420 [ 111.515465][ T6164] ? ___ratelimit+0x478/0x610 [ 111.520196][ T6164] ? radix_tree_cpu_dead+0x160/0x160 [ 111.525538][ T6164] dump_header+0xd8/0x820 [ 111.529959][ T6164] oom_kill_process+0x390/0x580 [ 111.534877][ T6164] out_of_memory+0xe0e/0x1200 [ 111.539617][ T6164] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 111.545300][ T6164] ? print_unlock_imbalance_bug+0x160/0x160 [ 111.551266][ T6164] ? mutex_lock_nested+0x20/0x20 [ 111.556261][ T6164] ? unregister_oom_notifier+0x20/0x20 [ 111.561806][ T6164] mem_cgroup_out_of_memory+0x2c2/0x390 [ 111.567425][ T6164] ? try_charge_memcg+0xc91/0x17c0 [ 111.572599][ T6164] ? drain_local_stock+0x630/0x630 [ 111.577800][ T6164] ? do_raw_spin_unlock+0x121/0x230 [ 111.583068][ T6164] try_charge_memcg+0xca1/0x17c0 [ 111.588109][ T6164] ? folio_flags+0x120/0x120 [ 111.592768][ T6164] ? percpu_ref_tryget+0x15/0x180 [ 111.597861][ T6164] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 111.603640][ T6164] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 111.609684][ T6164] ? percpu_ref_tryget+0x15/0x180 [ 111.614776][ T6164] ? percpu_ref_tryget+0x15/0x180 [ 111.619866][ T6164] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 111.625635][ T6164] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 111.631441][ T6164] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 111.637332][ T6164] obj_cgroup_charge+0x36e/0x630 [ 111.642325][ T6164] ? get_obj_cgroup_from_current+0xd4/0x280 [ 111.648285][ T6164] ? obj_cgroup_charge+0xed/0x630 [ 111.653375][ T6164] ? mod_objcg_mlstate+0x320/0x320 [ 111.658532][ T6164] ? percpu_ref_tryget+0x15/0x180 [ 111.663636][ T6164] ? percpu_ref_tryget+0x15/0x180 [ 111.668730][ T6164] ? get_obj_cgroup_from_current+0xd4/0x280 [ 111.674742][ T6164] slab_pre_alloc_hook+0x2e2/0x300 [ 111.679948][ T6164] kmem_cache_alloc+0x5a/0x2c0 [ 111.684781][ T6164] ? __anon_vma_prepare+0x68/0x440 [ 111.689944][ T6164] __anon_vma_prepare+0x68/0x440 [ 111.694934][ T6164] ? __pte_alloc+0x113/0x2a0 [ 111.699642][ T6164] handle_mm_fault+0x3ded/0x4a50 [ 111.704644][ T6164] ? handle_mm_fault+0xe6/0x4a50 [ 111.709657][ T6164] ? numa_migrate_prep+0x350/0x350 [ 111.714886][ T6164] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 111.720239][ T6164] do_user_addr_fault+0x736/0x12d0 [ 111.725454][ T6164] exc_page_fault+0x64/0x100 [ 111.730102][ T6164] ? clear_bhb_loop+0x40/0x90 [ 111.734860][ T6164] asm_exc_page_fault+0x26/0x30 [ 111.739781][ T6164] RIP: 0033:0x7ffa17d60002 [ 111.744258][ T6164] Code: 8d 15 41 19 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 b8 2d 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 111.764059][ T6164] RSP: 002b:00007ffa18c0bd20 EFLAGS: 00010286 [ 111.770233][ T6164] RAX: ffffffffffffffff RBX: 00007ffa10000000 RCX: 00007ffa17d9ded7 [ 111.778254][ T6164] RDX: 00007ffa17e5191f RSI: 0000000000021000 RDI: 00007ffa10000000 [ 111.786299][ T6164] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 111.794356][ T6164] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 111.802376][ T6164] R13: 0000000000001000 R14: 00007ffa14000000 R15: 0000000002009000 [ 111.810409][ T6164] [ 111.849073][ T6164] memory: usage 8kB, limit 8kB, failcnt 25 [ 111.891873][ T6164] memory+swap: usage 12kB, limit 9007199254740988kB, failcnt 0 [ 112.091017][ T6164] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 112.140880][ T6164] Memory cgroup stats for /syz3/test: [ 112.141065][ T6164] cache 0 [ 112.207268][ T6164] rss 0 [ 112.210129][ T6164] rss_huge 0 [ 112.213370][ T6164] shmem 0 [ 112.267308][ T6164] mapped_file 0 [ 112.270871][ T6164] dirty 0 [ 112.273853][ T6164] writeback 0 [ 112.305031][ T6164] workingset_refault_anon 0 [ 112.309661][ T6164] workingset_refault_file 0 [ 112.314213][ T6164] swap 4096 [ 112.358371][ T5814] usb 1-1: unable to get BOS descriptor or descriptor too short [ 112.402237][ T5814] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 112.425679][ T6164] pgpgin 1 [ 112.428813][ T6164] pgpgout 1 [ 112.432055][ T6164] pgfault 4 [ 112.445551][ T5814] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 112.453266][ T5814] usb 1-1: can't read configurations, error -71 [ 112.460126][ T6164] pgmajfault 0 [ 112.463562][ T6164] inactive_anon 0 [ 112.493414][ T6164] active_anon 0 [ 112.515165][ T6164] inactive_file 0 [ 112.518893][ T6164] active_file 0 [ 112.522394][ T6164] unevictable 0 [ 112.576753][ T6164] hierarchical_memory_limit 8192 [ 112.581786][ T6164] hierarchical_memsw_limit 9223372036854771712 [ 112.621164][ T6164] total_cache 0 [ 112.624720][ T6164] total_rss 0 [ 112.669483][ T6164] total_rss_huge 0 [ 112.673318][ T6164] total_shmem 0 [ 112.712893][ T6164] total_mapped_file 0 [ 112.719349][ T6164] total_dirty 0 [ 112.722917][ T6164] total_writeback 0 [ 112.742236][ T6164] total_workingset_refault_anon 0 [ 112.757903][ T6164] total_workingset_refault_file 0 [ 112.763024][ T6164] total_swap 4096 [ 112.800363][ T6164] total_pgpgin 1 [ 112.804017][ T6164] total_pgpgout 1 [ 112.834368][ T6164] total_pgfault 4 [ 112.844532][ T6164] total_pgmajfault 0 [ 112.854664][ T6164] total_inactive_anon 0 [ 112.863164][ T27] usbhid 2-1:0.0: can't add hid device: -71 [ 112.875073][ T6164] total_active_anon 0 [ 112.897289][ T6164] total_inactive_file 0 [ 112.901532][ T6164] total_active_file 0 [ 112.903241][ T27] usbhid: probe of 2-1:0.0 failed with error -71 [ 112.928049][ T6164] total_unevictable 0 [ 112.932129][ T6164] anon_cost 0 [ 112.937836][ T27] usb 2-1: USB disconnect, device number 4 [ 112.959329][ T6164] file_cost 0 [ 112.962717][ T6164] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.114,pid=6163,uid=0 [ 113.035172][ T6164] Memory cgroup out of memory: Killed process 6163 (syz.3.114) total-vm:169756kB, anon-rss:1368kB, file-rss:22912kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 113.225262][ T2133] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.622473][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.749823][ T6194] program syz.0.125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.792017][ T6191] xt_socket: unknown flags 0xc [ 114.815276][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 114.827328][ T6191] syz.1.126 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 114.849170][ T9] usb 4-1: config 0 has no interfaces? [ 114.860468][ T9] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 114.876504][ T6191] CPU: 0 PID: 6191 Comm: syz.1.126 Not tainted syzkaller #0 [ 114.883876][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.894005][ T6191] Call Trace: [ 114.897333][ T6191] [ 114.900371][ T6191] dump_stack_lvl+0x18c/0x250 [ 114.905112][ T6191] ? show_regs_print_info+0x20/0x20 [ 114.910370][ T6191] ? load_image+0x420/0x420 [ 114.914968][ T6191] ? ___ratelimit+0x478/0x610 [ 114.919712][ T6191] ? radix_tree_cpu_dead+0x160/0x160 [ 114.925073][ T6191] dump_header+0xd8/0x820 [ 114.929481][ T6191] oom_kill_process+0x390/0x580 [ 114.934397][ T6191] out_of_memory+0xe0e/0x1200 [ 114.939141][ T6191] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 114.944857][ T6191] ? mutex_lock_nested+0x20/0x20 [ 114.949916][ T6191] ? unregister_oom_notifier+0x20/0x20 [ 114.955466][ T6191] mem_cgroup_out_of_memory+0x2c2/0x390 [ 114.961082][ T6191] ? try_charge_memcg+0xc91/0x17c0 [ 114.966267][ T6191] ? drain_local_stock+0x630/0x630 [ 114.971448][ T6191] ? do_raw_spin_unlock+0x121/0x230 [ 114.976715][ T6191] try_charge_memcg+0xca1/0x17c0 [ 114.981733][ T6191] ? verify_lock_unused+0x140/0x140 [ 114.986996][ T6191] ? folio_flags+0x120/0x120 [ 114.991667][ T6191] ? percpu_ref_tryget+0x15/0x180 [ 114.996748][ T6191] ? get_mem_cgroup_from_mm+0x38/0x290 [ 115.002271][ T6191] charge_memcg+0x11b/0x3b0 [ 115.006837][ T6191] ? __mem_cgroup_charge+0x80/0x80 [ 115.012005][ T6191] ? get_mem_cgroup_from_mm+0x38/0x290 [ 115.017515][ T6191] ? get_mem_cgroup_from_mm+0x38/0x290 [ 115.023031][ T6191] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 115.028633][ T6191] __mem_cgroup_charge+0x25/0x80 [ 115.033632][ T6191] handle_mm_fault+0x1b00/0x4a50 [ 115.038626][ T6191] ? handle_mm_fault+0xe6/0x4a50 [ 115.043635][ T6191] ? lock_vma_under_rcu+0x52c/0x660 [ 115.048896][ T6191] ? numa_migrate_prep+0x350/0x350 [ 115.054059][ T6191] ? lock_vma_under_rcu+0xe5/0x660 [ 115.059251][ T6191] ? do_user_addr_fault+0x1cb/0x12d0 [ 115.064626][ T6191] do_user_addr_fault+0xad2/0x12d0 [ 115.069813][ T6191] ? rcu_is_watching+0x15/0xb0 [ 115.074654][ T6191] exc_page_fault+0x64/0x100 [ 115.079312][ T6191] asm_exc_page_fault+0x26/0x30 [ 115.084222][ T6191] RIP: 0033:0x7f79ab05f6cb [ 115.088685][ T6191] Code: 00 00 00 48 8d 3d 2d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 61 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 115.108356][ T6191] RSP: 002b:00007f79abf9efa0 EFLAGS: 00010206 [ 115.114490][ T6191] RAX: 0000000000000000 RBX: 00007f79ab425fa0 RCX: 0000000000000000 [ 115.122519][ T6191] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 00002000000006c0 [ 115.130546][ T6191] RBP: 00007f79ab235024 R08: 0000000000000000 R09: 0000000000000000 [ 115.138576][ T6191] R10: 00002000000006c0 R11: 0000000000000000 R12: 0000000000000000 [ 115.146602][ T6191] R13: 00007f79ab426038 R14: 00007f79ab425fa0 R15: 00007ffce77d0868 [ 115.154653][ T6191] [ 115.159490][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.167817][ T9] usb 4-1: Product: syz [ 115.172037][ T9] usb 4-1: Manufacturer: syz [ 115.176711][ T9] usb 4-1: SerialNumber: syz [ 115.194216][ T9] usb 4-1: config 0 descriptor?? [ 115.317575][ T6191] memory: usage 8kB, limit 8kB, failcnt 84 [ 115.323493][ T6191] memory+swap: usage 12kB, limit 9007199254740988kB, failcnt 0 [ 115.334724][ T6191] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 115.389595][ T6191] Memory cgroup stats for /syz1/test: [ 115.389889][ T6191] cache 0 [ 115.418598][ T6191] rss 0 [ 115.426210][ T6191] rss_huge 0 [ 115.429492][ T6191] shmem 0 [ 115.442691][ T6191] mapped_file 0 [ 115.495082][ T6191] dirty 0 [ 115.498119][ T6191] writeback 0 [ 115.501449][ T6191] workingset_refault_anon 0 [ 115.506284][ T6191] workingset_refault_file 0 [ 115.510842][ T6191] swap 4096 [ 115.513999][ T6191] pgpgin 1 [ 115.517170][ T6191] pgpgout 1 [ 115.520334][ T6191] pgfault 25 [ 115.523572][ T6191] pgmajfault 0 [ 115.527181][ T6191] inactive_anon 0 [ 115.530859][ T6191] active_anon 0 [ 115.534365][ T6191] inactive_file 0 [ 115.538180][ T6191] active_file 0 [ 115.541683][ T6191] unevictable 0 [ 115.545268][ T6191] hierarchical_memory_limit 8192 [ 115.550251][ T6191] hierarchical_memsw_limit 9223372036854771712 [ 115.557174][ T6191] total_cache 0 [ 115.560691][ T6191] total_rss 0 [ 115.564040][ T6191] total_rss_huge 0 [ 115.567873][ T6191] total_shmem 0 [ 115.571381][ T6191] total_mapped_file 0 [ 115.575458][ T6191] total_dirty 0 [ 115.578957][ T6191] total_writeback 0 [ 115.582807][ T6191] total_workingset_refault_anon 0 [ 115.587952][ T6191] total_workingset_refault_file 0 [ 115.593025][ T6191] total_swap 4096 [ 115.596738][ T6191] total_pgpgin 1 [ 115.600332][ T6191] total_pgpgout 1 [ 115.604002][ T6191] total_pgfault 25 [ 115.607848][ T6191] total_pgmajfault 0 [ 115.611804][ T6191] total_inactive_anon 0 [ 115.616040][ T6191] total_active_anon 0 [ 115.620075][ T6191] total_inactive_file 0 [ 115.624272][ T6191] total_active_file 0 [ 115.628357][ T6191] total_unevictable 0 [ 115.632375][ T6191] anon_cost 0 [ 115.635768][ T6191] file_cost 0 [ 115.639133][ T6191] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.126,pid=6190,uid=0 [ 115.656363][ T6191] Memory cgroup out of memory: Killed process 6190 (syz.1.126) total-vm:104484kB, anon-rss:1368kB, file-rss:23808kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 116.043137][ T6184] kvm: kvm [6183]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 116.070769][ T6184] kvm: kvm [6183]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 116.966061][ T6208] syz.0.128 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 117.011166][ T6208] CPU: 1 PID: 6208 Comm: syz.0.128 Not tainted syzkaller #0 [ 117.018583][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.028725][ T6208] Call Trace: [ 117.032064][ T6208] [ 117.035048][ T6208] dump_stack_lvl+0x18c/0x250 [ 117.039787][ T6208] ? show_regs_print_info+0x20/0x20 [ 117.045056][ T6208] ? load_image+0x420/0x420 [ 117.049610][ T6208] ? ___ratelimit+0x478/0x610 [ 117.054364][ T6208] ? radix_tree_cpu_dead+0x160/0x160 [ 117.059737][ T6208] dump_header+0xd8/0x820 [ 117.064145][ T6208] oom_kill_process+0x390/0x580 [ 117.069068][ T6208] out_of_memory+0xe0e/0x1200 [ 117.073821][ T6208] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 117.079517][ T6208] ? print_unlock_imbalance_bug+0x160/0x160 [ 117.085472][ T6208] ? mutex_lock_nested+0x20/0x20 [ 117.090483][ T6208] ? unregister_oom_notifier+0x20/0x20 [ 117.095997][ T6208] mem_cgroup_out_of_memory+0x2c2/0x390 [ 117.101584][ T6208] ? try_charge_memcg+0xc91/0x17c0 [ 117.106751][ T6208] ? drain_local_stock+0x630/0x630 [ 117.111956][ T6208] ? do_raw_spin_unlock+0x121/0x230 [ 117.117223][ T6208] try_charge_memcg+0xca1/0x17c0 [ 117.122226][ T6208] ? folio_flags+0x120/0x120 [ 117.126878][ T6208] ? percpu_ref_tryget+0x15/0x180 [ 117.131937][ T6208] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 117.137691][ T6208] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 117.143704][ T6208] ? percpu_ref_tryget+0x15/0x180 [ 117.148754][ T6208] ? percpu_ref_tryget+0x15/0x180 [ 117.153813][ T6208] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 117.159561][ T6208] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 117.165331][ T6208] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 117.171197][ T6208] obj_cgroup_charge+0x36e/0x630 [ 117.176185][ T6208] ? get_obj_cgroup_from_current+0xd4/0x280 [ 117.182117][ T6208] ? obj_cgroup_charge+0xed/0x630 [ 117.187188][ T6208] ? mod_objcg_mlstate+0x320/0x320 [ 117.192341][ T6208] ? percpu_ref_tryget+0x15/0x180 [ 117.197403][ T6208] ? percpu_ref_tryget+0x15/0x180 [ 117.202483][ T6208] ? get_obj_cgroup_from_current+0xd4/0x280 [ 117.208416][ T6208] slab_pre_alloc_hook+0x2e2/0x300 [ 117.213571][ T6208] kmem_cache_alloc+0x5a/0x2c0 [ 117.218383][ T6208] ? __anon_vma_prepare+0x68/0x440 [ 117.223531][ T6208] __anon_vma_prepare+0x68/0x440 [ 117.228497][ T6208] ? __pte_alloc+0x113/0x2a0 [ 117.233126][ T6208] handle_mm_fault+0x3ded/0x4a50 [ 117.238097][ T6208] ? handle_mm_fault+0xe6/0x4a50 [ 117.243073][ T6208] ? numa_migrate_prep+0x350/0x350 [ 117.248229][ T6208] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 117.253540][ T6208] do_user_addr_fault+0x736/0x12d0 [ 117.258699][ T6208] exc_page_fault+0x64/0x100 [ 117.263327][ T6208] ? clear_bhb_loop+0x40/0x90 [ 117.268038][ T6208] asm_exc_page_fault+0x26/0x30 [ 117.272937][ T6208] RIP: 0033:0x7f092f560002 [ 117.277385][ T6208] Code: 8d 15 41 19 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 b8 2d 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 117.297020][ T6208] RSP: 002b:00007f0930520d20 EFLAGS: 00010286 [ 117.303132][ T6208] RAX: ffffffffffffffff RBX: 00007f0928000000 RCX: 00007f092f59ded7 [ 117.311139][ T6208] RDX: 00007f092f65191f RSI: 0000000000021000 RDI: 00007f0928000000 [ 117.319143][ T6208] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 117.327139][ T6208] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 117.335132][ T6208] R13: 0000000000001000 R14: 00007f092c000000 R15: 0000000002809000 [ 117.343146][ T6208] [ 117.393158][ T6208] memory: usage 8kB, limit 8kB, failcnt 25 [ 117.432743][ T6208] memory+swap: usage 12kB, limit 9007199254740988kB, failcnt 0 [ 117.515721][ T174] usb 4-1: USB disconnect, device number 5 [ 117.555241][ T6208] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 117.584047][ T6208] Memory cgroup stats for /syz0/test: [ 117.584183][ T6208] cache 0 [ 117.608573][ T6208] rss 0 [ 117.615235][ T6208] rss_huge 0 [ 117.622230][ T6208] shmem 0 [ 117.628859][ T6208] mapped_file 0 [ 117.646199][ T6208] dirty 0 [ 117.658736][ T6208] writeback 0 [ 117.668999][ T6208] workingset_refault_anon 0 [ 117.686962][ T6208] workingset_refault_file 0 [ 117.702568][ T6208] swap 4096 [ 117.726310][ T6208] pgpgin 1 [ 117.732642][ T6208] pgpgout 1 [ 117.745334][ T6208] pgfault 4 [ 117.748504][ T6208] pgmajfault 0 [ 117.758091][ T6208] inactive_anon 0 [ 117.761809][ T6208] active_anon 0 [ 117.784049][ T6208] inactive_file 0 [ 117.802123][ T6208] active_file 0 [ 117.860530][ T6208] unevictable 0 [ 117.864083][ T6208] hierarchical_memory_limit 8192 [ 117.899530][ T6208] hierarchical_memsw_limit 9223372036854771712 [ 117.926660][ T6208] total_cache 0 [ 117.941532][ T6208] total_rss 0 [ 117.962309][ T6208] total_rss_huge 0 [ 117.976944][ T6208] total_shmem 0 [ 117.990854][ T6208] total_mapped_file 0 [ 118.038757][ T6208] total_dirty 0 [ 118.089327][ T6208] total_writeback 0 [ 118.125827][ T6208] total_workingset_refault_anon 0 [ 118.169781][ T6208] total_workingset_refault_file 0 [ 118.210534][ T6208] total_swap 4096 [ 118.229836][ T6208] total_pgpgin 1 [ 118.247708][ T6208] total_pgpgout 1 [ 118.274586][ T6208] total_pgfault 4 [ 118.287189][ T6208] total_pgmajfault 0 [ 118.316814][ T6208] total_inactive_anon 0 [ 118.352827][ T6208] total_active_anon 0 [ 118.361770][ T6208] total_inactive_file 0 [ 118.373242][ T6208] total_active_file 0 [ 118.393493][ T6208] total_unevictable 0 [ 118.422532][ T6208] anon_cost 0 [ 118.445915][ T6208] file_cost 0 [ 118.461970][ T6208] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.128,pid=6206,uid=0 [ 118.553920][ T6208] Memory cgroup out of memory: Killed process 6208 (syz.0.128) total-vm:169756kB, anon-rss:1344kB, file-rss:22912kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 118.596075][ T6223] xt_socket: unknown flags 0xc [ 118.630195][ T6223] syz.3.136 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 118.679662][ T6223] CPU: 1 PID: 6223 Comm: syz.3.136 Not tainted syzkaller #0 [ 118.687056][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.697167][ T6223] Call Trace: [ 118.700498][ T6223] [ 118.703528][ T6223] dump_stack_lvl+0x18c/0x250 [ 118.708275][ T6223] ? show_regs_print_info+0x20/0x20 [ 118.713542][ T6223] ? load_image+0x420/0x420 [ 118.718135][ T6223] dump_header+0xd8/0x820 [ 118.722541][ T6223] out_of_memory+0xe83/0x1200 [ 118.727325][ T6223] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 118.733026][ T6223] ? print_unlock_imbalance_bug+0x160/0x160 [ 118.738998][ T6223] ? mutex_lock_nested+0x20/0x20 [ 118.744014][ T6223] ? unregister_oom_notifier+0x20/0x20 [ 118.749551][ T6223] mem_cgroup_out_of_memory+0x2c2/0x390 [ 118.755175][ T6223] ? try_charge_memcg+0xc91/0x17c0 [ 118.760345][ T6223] ? drain_local_stock+0x630/0x630 [ 118.765511][ T6223] ? do_raw_spin_unlock+0x121/0x230 [ 118.770751][ T6223] try_charge_memcg+0xca1/0x17c0 [ 118.775738][ T6223] ? verify_lock_unused+0x140/0x140 [ 118.780975][ T6223] ? folio_flags+0x120/0x120 [ 118.785608][ T6223] ? __next_zones_zonelist+0x9d/0x130 [ 118.791038][ T6223] charge_memcg+0x11b/0x3b0 [ 118.795581][ T6223] ? __mem_cgroup_charge+0x80/0x80 [ 118.800728][ T6223] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 118.806925][ T6223] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 118.813027][ T6223] __read_swap_cache_async+0x3f4/0x9c0 [ 118.818562][ T6223] swap_cluster_readahead+0x385/0x670 [ 118.824023][ T6223] ? read_swap_cache_async+0x90/0x90 [ 118.829374][ T6223] ? xas_load+0x12b/0x140 [ 118.833748][ T6223] ? filemap_get_entry+0xce/0x3f0 [ 118.838818][ T6223] ? filemap_get_entry+0xce/0x3f0 [ 118.843884][ T6223] ? filemap_get_entry+0x375/0x3f0 [ 118.849028][ T6223] swapin_readahead+0x108/0xa60 [ 118.853956][ T6223] ? get_swap_device+0x96/0x3f0 [ 118.858864][ T6223] ? exit_swap_address_space+0x290/0x290 [ 118.864553][ T6223] ? __filemap_get_folio+0x939/0xbe0 [ 118.869877][ T6223] ? swap_cache_get_folio+0xad/0x590 [ 118.875207][ T6223] ? get_swap_device+0x26e/0x3f0 [ 118.880177][ T6223] do_swap_page+0x435/0x3f50 [ 118.884799][ T6223] ? print_unlock_imbalance_bug+0x160/0x160 [ 118.890737][ T6223] ? do_swap_page+0xcf/0x3f50 [ 118.895441][ T6223] ? pte_offset_map_nolock+0xb9/0x130 [ 118.900842][ T6223] ? handle_mm_fault+0xe6/0x4a50 [ 118.905810][ T6223] handle_mm_fault+0x10a6/0x4a50 [ 118.910781][ T6223] ? handle_mm_fault+0xe6/0x4a50 [ 118.915754][ T6223] ? lock_vma_under_rcu+0x52c/0x660 [ 118.920982][ T6223] ? numa_migrate_prep+0x350/0x350 [ 118.926123][ T6223] ? lock_vma_under_rcu+0xe5/0x660 [ 118.931273][ T6223] ? do_user_addr_fault+0x1cb/0x12d0 [ 118.936606][ T6223] do_user_addr_fault+0xad2/0x12d0 [ 118.941761][ T6223] ? rcu_is_watching+0x15/0xb0 [ 118.946604][ T6223] exc_page_fault+0x64/0x100 [ 118.951232][ T6223] ? clear_bhb_loop+0x40/0x90 [ 118.955944][ T6223] asm_exc_page_fault+0x26/0x30 [ 118.960828][ T6223] RIP: 0033:0x7ffa17d9df0f [ 118.965276][ T6223] Code: ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 118.984916][ T6223] RSP: 002b:00007ffa18bead18 EFLAGS: 00010217 [ 118.991015][ T6223] RAX: 0000000000000000 RBX: 00007ffa10000000 RCX: 00007ffa17d9df07 [ 118.999016][ T6223] RDX: 0000000000000000 RSI: 0000000002009000 RDI: 00007ffa0dff7000 [ 119.007045][ T6223] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 119.015045][ T6223] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 119.023045][ T6223] R13: 0000000000001000 R14: 00007ffa14000000 R15: 0000000002009000 [ 119.031065][ T6223] [ 119.090890][ T6223] memory: usage 0kB, limit 8kB, failcnt 61 [ 119.105094][ T6223] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 119.131146][ T6223] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 119.146362][ T6223] Memory cgroup stats for /syz0/test: [ 119.146568][ T6223] cache 0 [ 119.165276][ T6223] rss 0 [ 119.168146][ T6223] rss_huge 0 [ 119.171394][ T6223] shmem 0 [ 119.174412][ T6223] mapped_file 0 [ 119.235727][ T6223] dirty 0 [ 119.273262][ T6223] writeback 0 [ 119.278130][ T6223] workingset_refault_anon 0 [ 119.282704][ T6223] workingset_refault_file 0 [ 119.322234][ T6223] swap 4096 [ 119.335033][ T6223] pgpgin 1 [ 119.338149][ T6223] pgpgout 1 [ 119.341305][ T6223] pgfault 21 [ 119.365954][ T6223] pgmajfault 0 [ 119.369447][ T6223] inactive_anon 0 [ 119.402583][ T6223] active_anon 0 [ 119.410464][ T6223] inactive_file 0 [ 119.414230][ T6223] active_file 0 [ 119.430136][ T6223] unevictable 0 [ 119.433692][ T6223] hierarchical_memory_limit 8192 [ 119.475044][ T6223] hierarchical_memsw_limit 9223372036854771712 [ 119.485704][ T6223] total_cache 0 [ 119.505894][ T6223] total_rss 0 [ 119.513777][ T6223] total_rss_huge 0 [ 119.535018][ T6223] total_shmem 0 [ 119.538576][ T6223] total_mapped_file 0 [ 119.567506][ T6223] total_dirty 0 [ 119.582293][ T6223] total_writeback 0 [ 119.604397][ T6223] total_workingset_refault_anon 0 [ 119.673347][ T6223] total_workingset_refault_file 0 [ 119.700958][ T6223] total_swap 4096 [ 119.718890][ T6223] total_pgpgin 1 [ 119.724775][ T6223] total_pgpgout 1 [ 119.732947][ T6223] total_pgfault 21 [ 119.749462][ T6223] total_pgmajfault 0 [ 119.758204][ T6223] total_inactive_anon 0 [ 119.765299][ T6223] total_active_anon 0 [ 119.774161][ T6223] total_inactive_file 0 [ 119.798359][ T6223] total_active_file 0 [ 119.810059][ T6223] total_unevictable 0 [ 119.820276][ T6223] anon_cost 0 [ 119.828590][ T6223] file_cost 0 [ 119.852827][ T6223] Out of memory and no killable processes... [ 119.880788][ T6221] syz.3.136 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 119.915294][ T5834] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 119.938016][ T6221] CPU: 0 PID: 6221 Comm: syz.3.136 Not tainted syzkaller #0 [ 119.945368][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.955473][ T6221] Call Trace: [ 119.958769][ T6221] [ 119.961738][ T6221] dump_stack_lvl+0x18c/0x250 [ 119.966471][ T6221] ? show_regs_print_info+0x20/0x20 [ 119.971689][ T6221] ? load_image+0x420/0x420 [ 119.976214][ T6221] ? ___ratelimit+0x478/0x610 [ 119.980918][ T6221] ? radix_tree_cpu_dead+0x160/0x160 [ 119.986227][ T6221] dump_header+0xd8/0x820 [ 119.990585][ T6221] oom_kill_process+0x390/0x580 [ 119.995459][ T6221] out_of_memory+0xe0e/0x1200 [ 120.000158][ T6221] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 120.005815][ T6221] ? mutex_lock_nested+0x20/0x20 [ 120.010773][ T6221] ? unregister_oom_notifier+0x20/0x20 [ 120.016254][ T6221] mem_cgroup_out_of_memory+0x2c2/0x390 [ 120.021820][ T6221] ? try_charge_memcg+0xc91/0x17c0 [ 120.026953][ T6221] ? drain_local_stock+0x630/0x630 [ 120.032117][ T6221] ? do_raw_spin_unlock+0x121/0x230 [ 120.037334][ T6221] try_charge_memcg+0xca1/0x17c0 [ 120.042307][ T6221] ? folio_flags+0x120/0x120 [ 120.046913][ T6221] ? percpu_ref_tryget+0x15/0x180 [ 120.051953][ T6221] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 120.057694][ T6221] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 120.063724][ T6221] ? percpu_ref_tryget+0x15/0x180 [ 120.068790][ T6221] ? percpu_ref_tryget+0x15/0x180 [ 120.073834][ T6221] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 120.079573][ T6221] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 120.085327][ T6221] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 120.091173][ T6221] obj_cgroup_charge+0x36e/0x630 [ 120.096128][ T6221] ? get_obj_cgroup_from_current+0xd4/0x280 [ 120.102037][ T6221] ? obj_cgroup_charge+0xed/0x630 [ 120.107082][ T6221] ? mod_objcg_mlstate+0x320/0x320 [ 120.112213][ T6221] ? percpu_ref_tryget+0x15/0x180 [ 120.117256][ T6221] ? get_obj_cgroup_from_current+0xd4/0x280 [ 120.123168][ T6221] slab_pre_alloc_hook+0x2e2/0x300 [ 120.128301][ T6221] ? kvmalloc_node+0x70/0x180 [ 120.133012][ T6221] ? kvmalloc_node+0x70/0x180 [ 120.137726][ T6221] __kmem_cache_alloc_node+0x53/0x250 [ 120.143135][ T6221] ? kvmalloc_node+0x70/0x180 [ 120.147837][ T6221] __kmalloc_node+0xa6/0x240 [ 120.152473][ T6221] kvmalloc_node+0x70/0x180 [ 120.157028][ T6221] alloc_fdtable+0x106/0x2c0 [ 120.161662][ T6221] dup_fd+0x747/0xa20 [ 120.165702][ T6221] __close_range+0x19d/0x690 [ 120.170363][ T6221] ? pick_file+0x1e0/0x1e0 [ 120.174941][ T6221] __x64_sys_close_range+0x7a/0x90 [ 120.180150][ T6221] do_syscall_64+0x55/0xb0 [ 120.184607][ T6221] ? clear_bhb_loop+0x40/0x90 [ 120.189309][ T6221] ? clear_bhb_loop+0x40/0x90 [ 120.194012][ T6221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.199926][ T6221] RIP: 0033:0x7ffa17d9e0d9 [ 120.204359][ T6221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.223990][ T6221] RSP: 002b:00007ffa18c0d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 120.232447][ T6221] RAX: ffffffffffffffda RBX: 00007ffa18025fa0 RCX: 00007ffa17d9e0d9 [ 120.240441][ T6221] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 120.248450][ T6221] RBP: 00007ffa17e35024 R08: 0000000000000000 R09: 0000000000000000 [ 120.256444][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.264445][ T6221] R13: 00007ffa18026038 R14: 00007ffa18025fa0 R15: 00007ffc3c7d8628 [ 120.272472][ T6221] [ 120.335180][ T6221] memory: usage 4kB, limit 8kB, failcnt 256 [ 120.341173][ T6221] memory+swap: usage 20kB, limit 9007199254740988kB, failcnt 0 [ 120.375813][ T6221] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 120.382843][ T6221] Memory cgroup stats for /syz3/test: [ 120.383137][ T6221] cache 0 [ 120.402379][ T6221] rss 0 [ 120.406217][ T6221] rss_huge 0 [ 120.409593][ T6221] shmem 0 [ 120.412717][ T6221] mapped_file 0 [ 120.417711][ T6221] dirty 0 [ 120.421364][ T6221] writeback 0 [ 120.424815][ T6221] workingset_refault_anon 13 [ 120.434366][ T6221] workingset_refault_file 0 [ 120.440015][ T6221] swap 16384 [ 120.443483][ T6221] pgpgin 17 [ 120.447285][ T6221] pgpgout 17 [ 120.450643][ T6221] pgfault 28 [ 120.454046][ T6221] pgmajfault 10 [ 120.460484][ T6221] inactive_anon 0 [ 120.464268][ T6221] active_anon 0 [ 120.470366][ T6221] inactive_file 0 [ 120.481115][ T6221] active_file 0 [ 120.497372][ T5834] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 120.521691][ T5834] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 120.541696][ T5834] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.570745][ T6221] unevictable 0 [ 120.586437][ T6221] hierarchical_memory_limit 8192 [ 120.587298][ T5834] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 120.614348][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 120.629906][ T5834] usb 2-1: Product: syz [ 120.638871][ T5834] usb 2-1: Manufacturer: syz [ 120.650989][ T6221] hierarchical_memsw_limit 9223372036854771712 [ 120.652104][ T5834] usb 2-1: SerialNumber: syz [ 120.704405][ T6221] total_cache 0 [ 120.713379][ T6221] total_rss 0 [ 120.723175][ T6221] total_rss_huge 0 [ 120.741325][ T6221] total_shmem 0 [ 120.761646][ T6221] total_mapped_file 0 [ 120.771852][ T6221] total_dirty 0 [ 120.795041][ T6221] total_writeback 0 [ 120.798952][ T6221] total_workingset_refault_anon 13 [ 120.807695][ T6221] total_workingset_refault_file 0 [ 120.812808][ T6221] total_swap 16384 [ 120.826010][ T6221] total_pgpgin 17 [ 120.845079][ T6221] total_pgpgout 17 [ 120.848928][ T6221] total_pgfault 28 [ 120.852699][ T6221] total_pgmajfault 10 [ 120.873304][ T6221] total_inactive_anon 0 [ 120.884111][ T6221] total_active_anon 0 [ 120.893008][ T6221] total_inactive_file 0 [ 120.903039][ T6221] total_active_file 0 [ 120.907447][ T6221] total_unevictable 0 [ 120.911495][ T6221] anon_cost 0 [ 120.935060][ T6221] file_cost 0 [ 120.955145][ T6221] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.136,pid=6220,uid=0 [ 121.024807][ T6221] Memory cgroup out of memory: Killed process 6220 (syz.3.136) total-vm:170020kB, anon-rss:1368kB, file-rss:23552kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 121.362598][ T6260] syz.2.149 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 121.385185][ T6260] CPU: 1 PID: 6260 Comm: syz.2.149 Not tainted syzkaller #0 [ 121.392583][ T6260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.402680][ T6260] Call Trace: [ 121.405982][ T6260] [ 121.408943][ T6260] dump_stack_lvl+0x18c/0x250 [ 121.413658][ T6260] ? show_regs_print_info+0x20/0x20 [ 121.418878][ T6260] ? load_image+0x420/0x420 [ 121.423419][ T6260] ? ___ratelimit+0x478/0x610 [ 121.428160][ T6260] ? radix_tree_cpu_dead+0x160/0x160 [ 121.433501][ T6260] dump_header+0xd8/0x820 [ 121.437893][ T6260] oom_kill_process+0x390/0x580 [ 121.442778][ T6260] out_of_memory+0xe0e/0x1200 [ 121.447494][ T6260] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 121.453156][ T6260] ? print_unlock_imbalance_bug+0x160/0x160 [ 121.459078][ T6260] ? mutex_lock_nested+0x20/0x20 [ 121.464047][ T6260] ? unregister_oom_notifier+0x20/0x20 [ 121.469537][ T6260] mem_cgroup_out_of_memory+0x2c2/0x390 [ 121.475123][ T6260] ? try_charge_memcg+0xc91/0x17c0 [ 121.480292][ T6260] ? drain_local_stock+0x630/0x630 [ 121.485428][ T6260] ? do_raw_spin_unlock+0x121/0x230 [ 121.490669][ T6260] try_charge_memcg+0xca1/0x17c0 [ 121.495666][ T6260] ? folio_flags+0x120/0x120 [ 121.500298][ T6260] ? percpu_ref_tryget+0x15/0x180 [ 121.505342][ T6260] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 121.511095][ T6260] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 121.517112][ T6260] ? percpu_ref_tryget+0x15/0x180 [ 121.522164][ T6260] ? percpu_ref_tryget+0x15/0x180 [ 121.527232][ T6260] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 121.532974][ T6260] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 121.538715][ T6260] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 121.544538][ T6260] obj_cgroup_charge+0x36e/0x630 [ 121.549510][ T6260] ? get_obj_cgroup_from_current+0xd4/0x280 [ 121.555456][ T6260] ? obj_cgroup_charge+0xed/0x630 [ 121.560518][ T6260] ? mod_objcg_mlstate+0x320/0x320 [ 121.565669][ T6260] ? percpu_ref_tryget+0x15/0x180 [ 121.570709][ T6260] ? percpu_ref_tryget+0x15/0x180 [ 121.575772][ T6260] ? get_obj_cgroup_from_current+0xd4/0x280 [ 121.581705][ T6260] slab_pre_alloc_hook+0x2e2/0x300 [ 121.586851][ T6260] kmem_cache_alloc+0x5a/0x2c0 [ 121.591636][ T6260] ? __anon_vma_prepare+0x68/0x440 [ 121.596763][ T6260] __anon_vma_prepare+0x68/0x440 [ 121.601742][ T6260] ? __pte_alloc+0x113/0x2a0 [ 121.606377][ T6260] handle_mm_fault+0x3ded/0x4a50 [ 121.611362][ T6260] ? handle_mm_fault+0xe6/0x4a50 [ 121.616330][ T6260] ? numa_migrate_prep+0x350/0x350 [ 121.621469][ T6260] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 121.626861][ T6260] do_user_addr_fault+0x736/0x12d0 [ 121.632003][ T6260] exc_page_fault+0x64/0x100 [ 121.636620][ T6260] ? clear_bhb_loop+0x40/0x90 [ 121.641321][ T6260] asm_exc_page_fault+0x26/0x30 [ 121.646192][ T6260] RIP: 0033:0x7f1326760002 [ 121.650623][ T6260] Code: 8d 15 41 19 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 b8 2d 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 121.670281][ T6260] RSP: 002b:00007f1327612d20 EFLAGS: 00010286 [ 121.676401][ T6260] RAX: ffffffffffffffff RBX: 00007f1320000000 RCX: 00007f132679ded7 [ 121.684387][ T6260] RDX: 00007f132685191f RSI: 0000000000021000 RDI: 00007f1320000000 [ 121.692368][ T6260] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 121.700379][ T6260] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 121.708397][ T6260] R13: 0000000000001000 R14: 00007f1324000000 R15: 0000000003609000 [ 121.716402][ T6260] [ 121.842101][ T6260] memory: usage 8kB, limit 8kB, failcnt 161 [ 121.848305][ T6260] memory+swap: usage 20kB, limit 9007199254740988kB, failcnt 0 [ 121.920038][ T6260] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 121.927653][ T6260] Memory cgroup stats for /syz2/test: [ 121.927816][ T6260] cache 0 [ 121.997446][ T6260] rss 0 [ 122.012972][ T6260] rss_huge 0 [ 122.023479][ T6260] shmem 0 [ 122.031060][ T6260] mapped_file 0 [ 122.119541][ T6260] dirty 0 [ 122.132809][ T6260] writeback 0 [ 122.150621][ T6260] workingset_refault_anon 1 [ 122.160759][ T6260] workingset_refault_file 0 [ 122.175119][ T6260] swap 12288 [ 122.178410][ T6260] pgpgin 4 [ 122.181480][ T6260] pgpgout 4 [ 122.184627][ T6260] pgfault 22 [ 122.194536][ T6268] netlink: 'syz.0.151': attribute type 21 has an invalid length. [ 122.216252][ T6260] pgmajfault 2 [ 122.219713][ T6260] inactive_anon 0 [ 122.221508][ T6268] IPv6: NLM_F_CREATE should be specified when creating new route [ 122.233789][ T6260] active_anon 0 [ 122.240317][ T6260] inactive_file 0 [ 122.248861][ T6260] active_file 0 [ 122.252473][ T6260] unevictable 0 [ 122.262908][ T6268] netlink: 'syz.0.151': attribute type 1 has an invalid length. [ 122.270223][ T6260] hierarchical_memory_limit 8192 [ 122.298514][ T6260] hierarchical_memsw_limit 9223372036854771712 [ 122.304752][ T6260] total_cache 0 [ 122.335219][ T6260] total_rss 0 [ 122.348095][ T6260] total_rss_huge 0 [ 122.351939][ T6260] total_shmem 0 [ 122.368490][ T6260] total_mapped_file 0 [ 122.372566][ T6260] total_dirty 0 [ 122.485713][ T6260] total_writeback 0 [ 122.489764][ T6260] total_workingset_refault_anon 1 [ 122.494873][ T6260] total_workingset_refault_file 0 [ 122.501664][ T6260] total_swap 12288 [ 122.515645][ T6260] total_pgpgin 4 [ 122.522505][ T6260] total_pgpgout 4 [ 122.532001][ T6260] total_pgfault 22 [ 122.535949][ T6260] total_pgmajfault 2 [ 122.555157][ T6260] total_inactive_anon 0 [ 122.559447][ T6260] total_active_anon 0 [ 122.563531][ T6260] total_inactive_file 0 [ 122.573176][ T6260] total_active_file 0 [ 122.577400][ T6260] total_unevictable 0 [ 122.582297][ T6260] anon_cost 0 [ 122.595079][ T6260] file_cost 0 [ 122.599543][ T6260] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.149,pid=6258,uid=0 [ 122.635211][ T6260] Memory cgroup out of memory: Killed process 6260 (syz.2.149) total-vm:167780kB, anon-rss:1324kB, file-rss:22912kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 124.235511][ T5834] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 124.303284][ T5834] usb 2-1: USB disconnect, device number 5 [ 124.324889][ T5834] usblp0: removed [ 124.619530][ T6297] syz.2.161 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 124.698749][ T6300] macvlan2: entered allmulticast mode [ 124.708258][ T6300] bond_slave_0: entered promiscuous mode [ 124.714256][ T6300] bond_slave_1: entered promiscuous mode [ 124.722647][ T6297] CPU: 1 PID: 6297 Comm: syz.2.161 Not tainted syzkaller #0 [ 124.730018][ T6297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.740132][ T6297] Call Trace: [ 124.743429][ T6297] [ 124.746379][ T6297] dump_stack_lvl+0x18c/0x250 [ 124.751073][ T6297] ? show_regs_print_info+0x20/0x20 [ 124.756287][ T6297] ? load_image+0x420/0x420 [ 124.760810][ T6297] ? ___ratelimit+0x478/0x610 [ 124.765508][ T6297] ? radix_tree_cpu_dead+0x160/0x160 [ 124.770837][ T6297] dump_header+0xd8/0x820 [ 124.775219][ T6297] oom_kill_process+0x390/0x580 [ 124.780124][ T6297] out_of_memory+0xe0e/0x1200 [ 124.784830][ T6297] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 124.790482][ T6297] ? print_unlock_imbalance_bug+0x160/0x160 [ 124.796408][ T6297] ? mutex_lock_nested+0x20/0x20 [ 124.801384][ T6297] ? unregister_oom_notifier+0x20/0x20 [ 124.806908][ T6297] mem_cgroup_out_of_memory+0x2c2/0x390 [ 124.812478][ T6297] ? try_charge_memcg+0xc91/0x17c0 [ 124.817673][ T6297] ? drain_local_stock+0x630/0x630 [ 124.822832][ T6297] ? do_raw_spin_unlock+0x121/0x230 [ 124.828070][ T6297] try_charge_memcg+0xca1/0x17c0 [ 124.833048][ T6297] ? folio_flags+0x120/0x120 [ 124.837659][ T6297] ? percpu_ref_tryget+0x15/0x180 [ 124.842706][ T6297] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 124.848452][ T6297] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 124.854452][ T6297] ? percpu_ref_tryget+0x15/0x180 [ 124.859492][ T6297] ? percpu_ref_tryget+0x15/0x180 [ 124.864536][ T6297] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 124.870270][ T6297] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 124.876020][ T6297] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 124.881895][ T6297] obj_cgroup_charge+0x36e/0x630 [ 124.886899][ T6297] ? get_obj_cgroup_from_current+0xd4/0x280 [ 124.892859][ T6297] ? obj_cgroup_charge+0xed/0x630 [ 124.897945][ T6297] ? mod_objcg_mlstate+0x320/0x320 [ 124.903115][ T6297] ? percpu_ref_tryget+0x15/0x180 [ 124.908202][ T6297] ? percpu_ref_tryget+0x15/0x180 [ 124.913293][ T6297] ? get_obj_cgroup_from_current+0xd4/0x280 [ 124.919252][ T6297] slab_pre_alloc_hook+0x2e2/0x300 [ 124.924444][ T6297] kmem_cache_alloc+0x5a/0x2c0 [ 124.929292][ T6297] ? __anon_vma_prepare+0x68/0x440 [ 124.934502][ T6297] __anon_vma_prepare+0x68/0x440 [ 124.939514][ T6297] ? __pte_alloc+0x113/0x2a0 [ 124.944194][ T6297] handle_mm_fault+0x3ded/0x4a50 [ 124.949197][ T6297] ? handle_mm_fault+0xe6/0x4a50 [ 124.954217][ T6297] ? numa_migrate_prep+0x350/0x350 [ 124.959466][ T6297] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 124.964816][ T6297] do_user_addr_fault+0x736/0x12d0 [ 124.970014][ T6297] exc_page_fault+0x64/0x100 [ 124.974675][ T6297] ? clear_bhb_loop+0x40/0x90 [ 124.979431][ T6297] asm_exc_page_fault+0x26/0x30 [ 124.984345][ T6297] RIP: 0033:0x7f1326760002 [ 124.988813][ T6297] Code: 8d 15 41 19 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 b8 2d 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 125.008479][ T6297] RSP: 002b:00007f1327612d20 EFLAGS: 00010286 [ 125.014626][ T6297] RAX: ffffffffffffffff RBX: 00007f1320000000 RCX: 00007f132679ded7 [ 125.022663][ T6297] RDX: 00007f132685191f RSI: 0000000000021000 RDI: 00007f1320000000 [ 125.030712][ T6297] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 125.038751][ T6297] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 125.046782][ T6297] R13: 0000000000001000 R14: 00007f1324000000 R15: 0000000003609000 [ 125.054835][ T6297] [ 125.060821][ T6300] bond0: entered allmulticast mode [ 125.066463][ T6300] bond_slave_0: entered allmulticast mode [ 125.072270][ T6300] bond_slave_1: entered allmulticast mode [ 125.083346][ T6300] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 125.092946][ T6300] team0: Port device macvlan2 added [ 125.099129][ T6297] memory: usage 8kB, limit 8kB, failcnt 210 [ 125.105379][ T6297] memory+swap: usage 28kB, limit 9007199254740988kB, failcnt 0 [ 125.113284][ T6297] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 125.120446][ T6297] Memory cgroup stats for /syz2/test: [ 125.120606][ T6297] cache 0 [ 125.136776][ T6297] rss 0 [ 125.139704][ T6297] rss_huge 0 [ 125.143094][ T6297] shmem 0 [ 125.146309][ T6297] mapped_file 0 [ 125.149974][ T6297] dirty 0 [ 125.153017][ T6297] writeback 0 [ 125.156562][ T6297] workingset_refault_anon 2 [ 125.161234][ T6297] workingset_refault_file 0 [ 125.198724][ T6297] swap 20480 [ 125.215095][ T6297] pgpgin 7 [ 125.229492][ T6297] pgpgout 7 [ 125.244449][ T6297] pgfault 41 [ 125.277298][ T6297] pgmajfault 3 [ 125.309731][ T6297] inactive_anon 0 [ 125.410712][ T6297] active_anon 0 [ 125.414273][ T6297] inactive_file 0 [ 125.475482][ T6297] active_file 0 [ 125.479031][ T6297] unevictable 0 [ 125.482525][ T6297] hierarchical_memory_limit 8192 [ 125.515124][ T6297] hierarchical_memsw_limit 9223372036854771712 [ 125.521375][ T6297] total_cache 0 [ 125.524877][ T6297] total_rss 0 [ 125.545050][ T6297] total_rss_huge 0 [ 125.548879][ T6297] total_shmem 0 [ 125.554053][ T6297] total_mapped_file 0 [ 125.563161][ T6297] total_dirty 0 [ 125.570339][ T6297] total_writeback 0 [ 125.574305][ T6297] total_workingset_refault_anon 2 [ 125.582079][ T6297] total_workingset_refault_file 0 [ 125.589770][ T6297] total_swap 20480 [ 125.597887][ T6297] total_pgpgin 7 [ 125.601500][ T6297] total_pgpgout 7 [ 125.613180][ T6297] total_pgfault 41 [ 125.617453][ T6297] total_pgmajfault 3 [ 125.621703][ T6297] total_inactive_anon 0 [ 125.630145][ T6297] total_active_anon 0 [ 125.636023][ T6297] total_inactive_file 0 [ 125.640252][ T6297] total_active_file 0 [ 125.644273][ T6297] total_unevictable 0 [ 125.651484][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 125.661031][ T6297] anon_cost 0 [ 125.664361][ T6297] file_cost 0 [ 125.668347][ T6297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.161,pid=6296,uid=0 [ 125.702033][ T6306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.163'. [ 125.724320][ T6297] Memory cgroup out of memory: Killed process 6297 (syz.2.161) total-vm:167780kB, anon-rss:1372kB, file-rss:22784kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 126.585173][ T2133] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.859021][ T2133] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 126.975726][ T2133] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 127.094885][ T2133] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.184085][ T6332] xt_socket: unknown flags 0xc [ 127.196735][ T6332] syz.0.174 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 127.225134][ T6332] CPU: 0 PID: 6332 Comm: syz.0.174 Not tainted syzkaller #0 [ 127.232563][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.242698][ T6332] Call Trace: [ 127.245995][ T6332] [ 127.248939][ T6332] dump_stack_lvl+0x18c/0x250 [ 127.253654][ T6332] ? show_regs_print_info+0x20/0x20 [ 127.258867][ T6332] ? load_image+0x420/0x420 [ 127.263392][ T6332] ? ___ratelimit+0x478/0x610 [ 127.268091][ T6332] ? radix_tree_cpu_dead+0x160/0x160 [ 127.273403][ T6332] dump_header+0xd8/0x820 [ 127.277801][ T6332] oom_kill_process+0x390/0x580 [ 127.282676][ T6332] out_of_memory+0xe0e/0x1200 [ 127.287387][ T6332] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 127.293034][ T6332] ? print_unlock_imbalance_bug+0x160/0x160 [ 127.298949][ T6332] ? mutex_lock_nested+0x20/0x20 [ 127.303910][ T6332] ? unregister_oom_notifier+0x20/0x20 [ 127.309402][ T6332] mem_cgroup_out_of_memory+0x2c2/0x390 [ 127.314989][ T6332] ? try_charge_memcg+0xc91/0x17c0 [ 127.320144][ T6332] ? drain_local_stock+0x630/0x630 [ 127.325300][ T6332] ? do_raw_spin_unlock+0x121/0x230 [ 127.330566][ T6332] try_charge_memcg+0xca1/0x17c0 [ 127.335539][ T6332] ? verify_lock_unused+0x140/0x140 [ 127.340764][ T6332] ? folio_flags+0x120/0x120 [ 127.345385][ T6332] ? percpu_ref_tryget+0x15/0x180 [ 127.350426][ T6332] ? get_mem_cgroup_from_mm+0x38/0x290 [ 127.355904][ T6332] charge_memcg+0x11b/0x3b0 [ 127.360426][ T6332] ? __mem_cgroup_charge+0x80/0x80 [ 127.365552][ T6332] ? get_mem_cgroup_from_mm+0x38/0x290 [ 127.371027][ T6332] ? get_mem_cgroup_from_mm+0x38/0x290 [ 127.376519][ T6332] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 127.382084][ T6332] __mem_cgroup_charge+0x25/0x80 [ 127.387055][ T6332] handle_mm_fault+0x1b00/0x4a50 [ 127.392007][ T6332] ? handle_mm_fault+0xe6/0x4a50 [ 127.396962][ T6332] ? lock_vma_under_rcu+0x52c/0x660 [ 127.402171][ T6332] ? numa_migrate_prep+0x350/0x350 [ 127.407293][ T6332] ? lock_vma_under_rcu+0xe5/0x660 [ 127.412429][ T6332] ? do_user_addr_fault+0x1cb/0x12d0 [ 127.417732][ T6332] do_user_addr_fault+0xad2/0x12d0 [ 127.422864][ T6332] ? rcu_is_watching+0x15/0xb0 [ 127.427646][ T6332] exc_page_fault+0x64/0x100 [ 127.432254][ T6332] asm_exc_page_fault+0x26/0x30 [ 127.437135][ T6332] RIP: 0033:0x7f092f45f6cb [ 127.441599][ T6332] Code: 00 00 00 48 8d 3d 2d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 61 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 127.461257][ T6332] RSP: 002b:00007f0930520fa0 EFLAGS: 00010206 [ 127.467341][ T6332] RAX: 0000000000000000 RBX: 00007f092f825fa0 RCX: 0000000000000000 [ 127.475335][ T6332] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 00002000000006c0 [ 127.483329][ T6332] RBP: 00007f092f635024 R08: 0000000000000000 R09: 0000000000000000 [ 127.491321][ T6332] R10: 00002000000006c0 R11: 0000000000000000 R12: 0000000000000000 [ 127.499319][ T6332] R13: 00007f092f826038 R14: 00007f092f825fa0 R15: 00007ffc76141768 [ 127.507356][ T6332] [ 127.635193][ T6332] memory: usage 8kB, limit 8kB, failcnt 101 [ 127.641943][ T6332] memory+swap: usage 12kB, limit 9007199254740988kB, failcnt 0 [ 127.669318][ T6332] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 127.677450][ T6332] Memory cgroup stats for /syz0/test: [ 127.677681][ T6332] cache 0 [ 127.715135][ T6332] rss 0 [ 127.718189][ T2133] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 127.746561][ T6332] rss_huge 0 [ 127.746579][ T2133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 127.749819][ T6332] shmem 0 [ 127.781409][ T2133] usb 3-1: Product: syz [ 127.805237][ T2133] usb 3-1: Manufacturer: syz [ 127.806114][ T6332] mapped_file 0 [ 127.811088][ T2133] usb 3-1: SerialNumber: syz [ 127.813379][ T6332] dirty 0 [ 127.813391][ T6332] writeback 0 [ 127.813400][ T6332] workingset_refault_anon 0 [ 127.813409][ T6332] workingset_refault_file 0 [ 127.813418][ T6332] swap 4096 [ 127.813426][ T6332] pgpgin 1 [ 127.813435][ T6332] pgpgout 1 [ 127.813443][ T6332] pgfault 27 [ 127.813452][ T6332] pgmajfault 0 [ 127.813460][ T6332] inactive_anon 0 [ 127.813469][ T6332] active_anon 0 [ 127.813477][ T6332] inactive_file 0 [ 127.813486][ T6332] active_file 0 [ 127.813495][ T6332] unevictable 0 [ 127.813504][ T6332] hierarchical_memory_limit 8192 [ 127.813513][ T6332] hierarchical_memsw_limit 9223372036854771712 [ 127.813523][ T6332] total_cache 0 [ 127.813531][ T6332] total_rss 0 [ 127.813538][ T6332] total_rss_huge 0 [ 127.813546][ T6332] total_shmem 0 [ 127.813554][ T6332] total_mapped_file 0 [ 127.925297][ T6332] total_dirty 0 [ 127.938029][ T6332] total_writeback 0 [ 127.944124][ T6332] total_workingset_refault_anon 0 [ 127.964152][ T6332] total_workingset_refault_file 0 [ 127.982098][ T6332] total_swap 4096 [ 127.991125][ T6332] total_pgpgin 1 [ 128.003500][ T6332] total_pgpgout 1 [ 128.008206][ T6332] total_pgfault 27 [ 128.011968][ T6332] total_pgmajfault 0 [ 128.031469][ T6332] total_inactive_anon 0 [ 128.040485][ T6332] total_active_anon 0 [ 128.077847][ T6332] total_inactive_file 0 [ 128.082067][ T6332] total_active_file 0 [ 128.105224][ T6332] total_unevictable 0 [ 128.114889][ T6332] anon_cost 0 [ 128.119069][ T6332] file_cost 0 [ 128.148923][ T6332] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.174,pid=6330,uid=0 [ 128.190223][ T6332] Memory cgroup out of memory: Killed process 6330 (syz.0.174) total-vm:104424kB, anon-rss:1372kB, file-rss:23424kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 130.203727][ T28] audit: type=1326 audit(1786294593.182:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6363 comm="syz.3.188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa17d9e0d9 code=0x7ffc0000 [ 130.311279][ T28] audit: type=1326 audit(1786294593.192:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6363 comm="syz.3.188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa17d9e0d9 code=0x7ffc0000 [ 130.450782][ T28] audit: type=1326 audit(1786294593.192:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6363 comm="syz.3.188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffa17d9e0d9 code=0x7ffc0000 [ 130.551479][ T28] audit: type=1326 audit(1786294593.192:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6363 comm="syz.3.188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa17d9e0d9 code=0x7ffc0000 [ 130.667362][ T28] audit: type=1326 audit(1786294593.192:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6363 comm="syz.3.188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa17d9e0d9 code=0x7ffc0000 [ 130.750809][ T28] audit: type=1326 audit(1786294593.202:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6363 comm="syz.3.188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ffa17d9e0d9 code=0x7ffc0000 [ 130.823368][ T28] audit: type=1326 audit(1786294593.202:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6363 comm="syz.3.188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa17d9e0d9 code=0x7ffc0000 [ 131.009509][ T28] audit: type=1326 audit(1786294593.202:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6363 comm="syz.3.188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa17d9e0d9 code=0x7ffc0000 [ 131.121486][ T28] audit: type=1326 audit(1786294593.202:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6363 comm="syz.3.188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ffa17d9e0d9 code=0x7ffc0000 [ 131.238130][ T28] audit: type=1326 audit(1786294593.202:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6363 comm="syz.3.188" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa17d9e0d9 code=0x7ffc0000 [ 131.801157][ T2133] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 131.889705][ T2133] usb 3-1: USB disconnect, device number 5 [ 131.945923][ T2133] usblp0: removed [ 133.135919][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.151772][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.718749][ T6411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'. [ 134.002907][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.204'. [ 134.033964][ T6416] netlink: 20 bytes leftover after parsing attributes in process `syz.2.204'. [ 135.675198][ T2133] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 135.905038][ T2133] usb 4-1: Using ep0 maxpacket: 16 [ 135.912886][ T2133] usb 4-1: config 0 has no interfaces? [ 135.921443][ T2133] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 135.935480][ T2133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.957911][ T2133] usb 4-1: Product: syz [ 135.967383][ T2133] usb 4-1: Manufacturer: syz [ 135.998316][ T2133] usb 4-1: SerialNumber: syz [ 136.011323][ T2133] usb 4-1: config 0 descriptor?? [ 136.232634][ T5834] usb 4-1: USB disconnect, device number 6 [ 138.152550][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 138.170851][ T6497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.231'. [ 138.930563][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 139.214074][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.259158][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 139.283700][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.319919][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 139.350148][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 139.385255][ T9] usb 1-1: Product: syz [ 139.395557][ T9] usb 1-1: Manufacturer: syz [ 139.405538][ T9] usb 1-1: SerialNumber: syz [ 140.285071][ T5834] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 140.467914][ T5834] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 140.491185][ T5834] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.518862][ T5834] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.543232][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.569886][ T6530] netlink: 360 bytes leftover after parsing attributes in process `syz.2.242'. [ 140.593891][ T5834] usb 4-1: config 0 descriptor?? [ 140.615876][ T5834] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 140.925050][ T5834] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 141.120728][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.144340][ T5834] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 141.161923][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.180399][ T5834] usb 2-1: config 0 descriptor?? [ 141.200958][ T5834] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 141.398463][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 141.430659][ T9] usb 1-1: USB disconnect, device number 7 [ 141.444290][ T9] usblp0: removed [ 142.859721][ T6562] netlink: 360 bytes leftover after parsing attributes in process `syz.0.252'. [ 142.939482][ T6565] process 'syz.0.253' launched './file1' with NULL argv: empty string added [ 143.064137][ T5835] usb 4-1: USB disconnect, device number 7 [ 143.710424][ T6587] netlink: 360 bytes leftover after parsing attributes in process `syz.2.261'. [ 144.347313][ T5814] usb 2-1: USB disconnect, device number 6 [ 144.553084][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 144.565400][ T5815] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 144.755290][ T5835] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 144.769892][ T5815] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 144.780076][ T5815] usb 3-1: config 0 has no interface number 0 [ 144.793050][ T5815] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 144.803803][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.820131][ T5815] usb 3-1: Product: syz [ 144.824472][ T5815] usb 3-1: Manufacturer: syz [ 144.830738][ T5815] usb 3-1: SerialNumber: syz [ 144.846725][ T5815] usb 3-1: config 0 descriptor?? [ 144.859199][ T5815] usb 3-1: selecting invalid altsetting 1 [ 144.867008][ T5815] dvb_ttusb_budget: ttusb_init_controller: error [ 144.873528][ T5815] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 144.939220][ T5815] DVB: Unable to find symbol stv0299_attach() [ 144.957135][ T5835] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 144.976743][ T5835] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.006282][ T5835] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.024704][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.062425][ T5815] DVB: Unable to find symbol tda8083_attach() [ 145.074561][ T5835] usb 4-1: config 0 descriptor?? [ 145.080843][ T5815] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 145.093748][ T5835] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 145.180822][ T5814] usb 3-1: USB disconnect, device number 6 [ 145.895152][ T5814] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 146.009143][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 146.088217][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.105551][ T5814] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 146.125132][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.151188][ T5814] usb 1-1: config 0 descriptor?? [ 146.160957][ T5814] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 146.381847][ T6642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.391881][ T6642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.401791][ T6642] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:001c with DS=0x13 [ 146.420654][ T5815] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 146.615079][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 146.622279][ T5815] usb 3-1: config 123 interface 0 has no altsetting 0 [ 146.635219][ T5815] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 146.645582][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.653770][ T5815] usb 3-1: Product: syz [ 146.658323][ T5815] usb 3-1: Manufacturer: syz [ 146.663081][ T5815] usb 3-1: SerialNumber: syz [ 147.261382][ T5815] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 147.276101][ T5815] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 147.297794][ T5815] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 147.305933][ T5815] usb 3-1: media controller created [ 147.337704][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.366438][ T5815] set interface failed [ 147.367031][ T5815] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 147.381516][ T5815] error writing reg: 0xff, val: 0x00 [ 147.411258][ T5815] dvb_usb_mxl111sf: probe of 3-1:123.0 failed with error -22 [ 147.440611][ T5815] usb 3-1: USB disconnect, device number 7 [ 147.512868][ T5814] usb 4-1: USB disconnect, device number 8 [ 147.932527][ T6666] syzkaller0: entered promiscuous mode [ 147.938452][ T6666] syzkaller0: entered allmulticast mode [ 147.945108][ T5814] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 148.131583][ T5814] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.139821][ T5814] usb 4-1: config 0 has no interface number 0 [ 148.149476][ T5814] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 148.159951][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.168410][ T5814] usb 4-1: Product: syz [ 148.185112][ T5814] usb 4-1: Manufacturer: syz [ 148.189885][ T5814] usb 4-1: SerialNumber: syz [ 148.213824][ T5814] usb 4-1: config 0 descriptor?? [ 148.232181][ T5814] usb 4-1: selecting invalid altsetting 1 [ 148.259484][ T5814] dvb_ttusb_budget: ttusb_init_controller: error [ 148.285399][ T5814] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 148.449318][ T5814] DVB: Unable to find symbol stv0299_attach() [ 148.590391][ T5814] DVB: Unable to find symbol tda8083_attach() [ 148.611877][ T5814] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 148.659593][ T5814] usb 4-1: USB disconnect, device number 9 [ 148.968182][ T6684] netlink: 'syz.1.292': attribute type 10 has an invalid length. [ 148.993587][ T6684] syz_tun: entered promiscuous mode [ 149.049652][ T6684] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 149.277071][ T5815] usb 1-1: USB disconnect, device number 8 [ 150.185692][ T5834] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 150.395165][ T5834] usb 1-1: Using ep0 maxpacket: 16 [ 150.408627][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 150.423481][ T5834] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 150.448081][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.478197][ T5834] usb 1-1: config 0 descriptor?? [ 150.675052][ T5834] rc_core: IR keymap rc-xbox-dvd not found [ 150.695151][ T23] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 150.714518][ T5834] Registered IR keymap rc-empty [ 150.752751][ T5834] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 150.779971][ T5834] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 150.804590][ T5834] xbox_remote 1-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 150.817156][ T5834] input: failed to attach handler kbd to device input5, error: -5 [ 150.841153][ T5123] xbox_remote 1-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 150.854713][ T5834] usb 1-1: USB disconnect, device number 9 [ 150.855220][ T5835] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 150.957508][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 150.996189][ T23] usb 4-1: not running at top speed; connect to a high speed hub [ 151.030398][ T23] usb 4-1: config 5 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 151.055403][ T23] usb 4-1: New USB device found, idVendor=15c2, idProduct=003c, bcdDevice=8a.3e [ 151.064669][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.073710][ T23] usb 4-1: Product: syz [ 151.078394][ T23] usb 4-1: Manufacturer: syz [ 151.083050][ T23] usb 4-1: SerialNumber: syz [ 151.107181][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.133998][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.144618][ T5835] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 151.155173][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.179152][ T5835] usb 2-1: config 0 descriptor?? [ 151.353659][ T6717] SET target dimension over the limit! [ 151.404247][ T23] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 151.426939][ T23] imon 4-1:5.0: unable to initialize intf0, err -19 [ 151.433703][ T23] imon:imon_probe: failed to initialize context! [ 151.449249][ T23] imon 4-1:5.0: unable to register, err -19 [ 151.476553][ T23] usb 4-1: USB disconnect, device number 10 [ 151.606559][ T5835] usbhid 2-1:0.0: can't add hid device: -32 [ 151.621805][ T5835] usbhid: probe of 2-1:0.0 failed with error -32 [ 151.656113][ T5835] usb 2-1: USB disconnect, device number 7 [ 151.979713][ T6743] program syz.2.311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.848997][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 152.877149][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 153.323746][ T6754] fido_id[6754]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 153.709923][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 153.709935][ T28] audit: type=1326 audit(1786294616.732:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.2.323" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f132679e0d9 code=0x0 [ 153.858691][ T6771] netlink: 44 bytes leftover after parsing attributes in process `syz.1.322'. [ 153.945094][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 153.969777][ T6771] kvm_intel: kvm [6770]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xc909 [ 153.987811][ T6771] kvm: kvm [6770]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xe704 [ 154.133144][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.154864][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.170788][ T23] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 154.180480][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.194845][ T5835] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 154.217976][ T23] usb 4-1: config 0 descriptor?? [ 154.427488][ T5835] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.451449][ T5835] usb 3-1: config 0 has no interfaces? [ 154.462839][ T5835] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 154.479303][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.491072][ T5835] usb 3-1: Product: syz [ 154.502611][ T5835] usb 3-1: Manufacturer: syz [ 154.507749][ T5835] usb 3-1: SerialNumber: syz [ 154.518949][ T5835] usb 3-1: config 0 descriptor?? [ 154.650971][ T23] usbhid 4-1:0.0: can't add hid device: -32 [ 154.669938][ T23] usbhid: probe of 4-1:0.0 failed with error -32 [ 154.694113][ T23] usb 4-1: USB disconnect, device number 11 [ 155.109364][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'. [ 155.118677][ T6788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.328'. [ 155.531431][ T6794] netlink: 36 bytes leftover after parsing attributes in process `syz.0.339'. [ 155.761405][ T6801] netlink: 156 bytes leftover after parsing attributes in process `syz.1.333'. [ 155.957620][ T28] audit: type=1326 audit(1786294618.972:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ab19e0d9 code=0x7ffc0000 [ 155.996646][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'. [ 156.014136][ T6809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.337'. [ 156.024278][ T28] audit: type=1326 audit(1786294618.982:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ab19e0d9 code=0x7ffc0000 [ 156.089282][ T28] audit: type=1326 audit(1786294619.012:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ab19e0d9 code=0x7ffc0000 [ 156.127279][ T28] audit: type=1326 audit(1786294619.012:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ab19e0d9 code=0x7ffc0000 [ 156.233877][ T28] audit: type=1326 audit(1786294619.012:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f79ab19e0d9 code=0x7ffc0000 [ 156.295535][ T28] audit: type=1326 audit(1786294619.012:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ab19e0d9 code=0x7ffc0000 [ 156.324195][ T6815] netlink: 36 bytes leftover after parsing attributes in process `syz.3.341'. [ 156.326601][ T28] audit: type=1326 audit(1786294619.012:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f79ab19e0d9 code=0x7ffc0000 [ 156.358034][ T28] audit: type=1326 audit(1786294619.012:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f79ab19e0d9 code=0x7ffc0000 [ 156.555375][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 156.790123][ T5835] usb 3-1: USB disconnect, device number 8 [ 156.832223][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.871667][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.901160][ T23] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 156.916996][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.962978][ T23] usb 2-1: config 0 descriptor?? [ 157.428511][ T23] usbhid 2-1:0.0: can't add hid device: -32 [ 157.441970][ T23] usbhid: probe of 2-1:0.0 failed with error -32 [ 157.462134][ T23] usb 2-1: USB disconnect, device number 8 [ 158.395218][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'. [ 158.417365][ T6837] netlink: 44 bytes leftover after parsing attributes in process `syz.2.347'. [ 158.930979][ T6847] netlink: 'syz.1.352': attribute type 3 has an invalid length. [ 159.635102][ T5834] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 159.695205][ T5814] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 159.835179][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 159.856984][ T5834] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 159.905272][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.921175][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.947031][ T5834] usb 4-1: config 0 descriptor?? [ 159.954240][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.976741][ T5834] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 159.988273][ T5814] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 160.003996][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.027848][ T5814] usb 1-1: config 0 descriptor?? [ 160.187907][ T5834] usb 4-1: Detected FT232B [ 160.408844][ T5834] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 160.427063][ T5834] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 160.466648][ T5814] usbhid 1-1:0.0: can't add hid device: -32 [ 160.472752][ T5814] usbhid: probe of 1-1:0.0 failed with error -32 [ 160.482307][ T5834] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 160.502821][ T5814] usb 1-1: USB disconnect, device number 10 [ 160.519940][ T5834] usb 4-1: USB disconnect, device number 12 [ 160.539382][ T6875] __nla_validate_parse: 3 callbacks suppressed [ 160.539398][ T6875] netlink: 20 bytes leftover after parsing attributes in process `syz.2.361'. [ 160.589439][ T5834] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 160.606860][ T5834] ftdi_sio 4-1:0.0: device disconnected [ 161.346305][ T6895] netlink: 44 bytes leftover after parsing attributes in process `syz.0.366'. [ 161.686916][ T6891] kvm: kvm [6890]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x0 [ 162.482928][ T6911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.372'. [ 162.852851][ T5814] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 163.015306][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 163.067428][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.089679][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.104191][ T5814] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 163.123825][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.149259][ T5814] usb 2-1: config 0 descriptor?? [ 163.205182][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 163.223202][ T23] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 163.255332][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.279914][ T6936] netlink: 44 bytes leftover after parsing attributes in process `syz.3.381'. [ 163.301904][ T23] usb 3-1: config 0 descriptor?? [ 163.315501][ T23] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 163.412844][ T6936] kvm_intel: kvm [6935]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xc909 [ 163.424500][ T6936] kvm: kvm [6935]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xe704 [ 163.517786][ T23] usb 3-1: Detected FT232B [ 163.593113][ T5814] usbhid 2-1:0.0: can't add hid device: -32 [ 163.609710][ T5814] usbhid: probe of 2-1:0.0 failed with error -32 [ 163.705440][ T5814] usb 2-1: USB disconnect, device number 9 [ 163.718028][ T6943] netlink: 20 bytes leftover after parsing attributes in process `syz.3.383'. [ 163.836058][ T23] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 163.862750][ T23] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 163.898299][ T23] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 163.932948][ T23] usb 3-1: USB disconnect, device number 9 [ 164.018971][ T23] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 164.052729][ T23] ftdi_sio 3-1:0.0: device disconnected [ 165.235256][ T5814] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 165.426204][ T5968] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 165.444373][ T5814] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 165.454272][ T5814] usb 2-1: config 0 has no interface number 0 [ 165.486088][ T5814] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 165.504669][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.515180][ T5814] usb 2-1: Product: syz [ 165.530382][ T5814] usb 2-1: Manufacturer: syz [ 165.537312][ T5814] usb 2-1: SerialNumber: syz [ 165.552805][ T5814] usb 2-1: config 0 descriptor?? [ 165.564560][ T5814] usb 2-1: selecting invalid altsetting 1 [ 165.591572][ T5814] dvb_ttusb_budget: ttusb_init_controller: error [ 165.598177][ T5814] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 165.626983][ T5968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.658528][ T5968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.686686][ T5968] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 165.715127][ T5968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.754047][ T5968] usb 1-1: config 0 descriptor?? [ 165.824907][ T5814] DVB: Unable to find symbol stv0299_attach() [ 165.988812][ T5814] DVB: Unable to find symbol tda8083_attach() [ 166.005227][ T5814] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 166.035147][ T5814] usb 2-1: USB disconnect, device number 10 [ 166.213158][ T5968] usbhid 1-1:0.0: can't add hid device: -32 [ 166.224705][ T5968] usbhid: probe of 1-1:0.0 failed with error -32 [ 166.240550][ T5968] usb 1-1: USB disconnect, device number 11 [ 167.176936][ T7004] fuse: Bad value for 'fd' [ 167.235833][ T5835] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 167.435240][ T5835] usb 2-1: Using ep0 maxpacket: 16 [ 167.442306][ T5835] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 167.464225][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.486886][ T5835] usb 2-1: config 0 descriptor?? [ 167.499100][ T5835] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 167.703259][ T5835] usb 2-1: Detected FT232B [ 167.944204][ T5835] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 167.985942][ T5835] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 168.009382][ T2133] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 168.027731][ T5835] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 168.155641][ T5835] usb 2-1: USB disconnect, device number 11 [ 168.196143][ T5835] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 168.213005][ T2133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.241828][ T5835] ftdi_sio 2-1:0.0: device disconnected [ 168.256473][ T2133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.278766][ T2133] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 168.290615][ T2133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.322783][ T2133] usb 3-1: config 0 descriptor?? [ 168.958878][ T2133] usbhid 3-1:0.0: can't add hid device: -32 [ 168.982226][ T2133] usbhid: probe of 3-1:0.0 failed with error -32 [ 169.012981][ T2133] usb 3-1: USB disconnect, device number 10 [ 169.104292][ T7027] kvm_intel: kvm [7026]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xc909 [ 169.170500][ T7027] kvm: kvm [7026]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xe704 [ 169.475757][ T7038] fuse: Bad value for 'fd' [ 171.085128][ T2133] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 171.298203][ T2133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.309417][ T27] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 171.317315][ T2133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.328692][ T2133] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 171.340114][ T2133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.366390][ T2133] usb 2-1: config 0 descriptor?? [ 171.513281][ T27] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.554605][ T27] usb 1-1: config 0 has no interface number 0 [ 171.589745][ T27] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 171.606157][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.635212][ T27] usb 1-1: Product: syz [ 171.639618][ T27] usb 1-1: Manufacturer: syz [ 171.644354][ T27] usb 1-1: SerialNumber: syz [ 171.656492][ T27] usb 1-1: config 0 descriptor?? [ 171.678041][ T27] usb 1-1: selecting invalid altsetting 1 [ 171.692510][ T27] dvb_ttusb_budget: ttusb_init_controller: error [ 171.709325][ T27] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 171.887607][ T27] DVB: Unable to find symbol stv0299_attach() [ 171.997575][ T2133] usbhid 2-1:0.0: can't add hid device: -32 [ 172.006139][ T2133] usbhid: probe of 2-1:0.0 failed with error -32 [ 172.034152][ T27] DVB: Unable to find symbol tda8083_attach() [ 172.061087][ T27] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 172.076410][ T2133] usb 2-1: USB disconnect, device number 12 [ 172.125566][ T27] usb 1-1: USB disconnect, device number 12 [ 174.055135][ T27] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 174.306834][ T27] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.315379][ T27] usb 3-1: config 0 has no interface number 0 [ 174.365408][ T27] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 174.435758][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.481149][ T27] usb 3-1: Product: syz [ 174.500403][ T27] usb 3-1: Manufacturer: syz [ 174.507379][ T27] usb 3-1: SerialNumber: syz [ 174.568454][ T27] usb 3-1: config 0 descriptor?? [ 174.597610][ T27] usb 3-1: selecting invalid altsetting 1 [ 174.667586][ T27] dvb_ttusb_budget: ttusb_init_controller: error [ 174.674050][ T27] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 174.905136][ T5835] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 174.978678][ T27] DVB: Unable to find symbol stv0299_attach() [ 175.106757][ T27] DVB: Unable to find symbol tda8083_attach() [ 175.112904][ T27] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 175.149350][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.171233][ T27] usb 3-1: USB disconnect, device number 11 [ 175.185960][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.221957][ T5835] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 175.239338][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.276034][ T5835] usb 4-1: config 0 descriptor?? [ 175.909295][ T5835] usbhid 4-1:0.0: can't add hid device: -32 [ 175.938891][ T5835] usbhid: probe of 4-1:0.0 failed with error -32 [ 175.956414][ T5835] usb 4-1: USB disconnect, device number 13 [ 176.571330][ T7174] loop4: detected capacity change from 0 to 7 [ 176.610005][ T7174] loop4: [ 176.623717][ T7174] loop4: partition table partially beyond EOD, truncated [ 176.757698][ T5138] loop4: [ 176.769650][ T5138] loop4: partition table partially beyond EOD, truncated [ 178.324540][ T28] audit: type=1400 audit(1786294641.332:23): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=27AF5B5B40 pid=7203 comm="syz.3.467" [ 178.361726][ T28] audit: type=1400 audit(1786294641.342:24): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7203 comm="syz.3.467" [ 178.585287][ T27] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 178.794275][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.806789][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.816830][ T27] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 178.826034][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.843319][ T27] usb 2-1: config 0 descriptor?? [ 178.865042][ T5968] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 179.078462][ T7208] netlink: 36 bytes leftover after parsing attributes in process `syz.3.469'. [ 179.111163][ T5968] usb 4-1: unable to get BOS descriptor or descriptor too short [ 179.122490][ T5968] usb 4-1: no configurations [ 179.134189][ T5968] usb 4-1: can't read configurations, error -22 [ 179.508099][ T27] usbhid 2-1:0.0: can't add hid device: -32 [ 179.524099][ T27] usbhid: probe of 2-1:0.0 failed with error -32 [ 179.557252][ T27] usb 2-1: USB disconnect, device number 13 [ 179.765288][ T7224] loop4: detected capacity change from 0 to 7 [ 179.789679][ T7224] loop4: [ 179.800073][ T7224] loop4: partition table partially beyond EOD, truncated [ 181.385120][ T9] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 181.485185][ T27] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 181.609170][ T7263] loop4: detected capacity change from 0 to 7 [ 181.620933][ T7263] Dev loop4: unable to read RDB block 7 [ 181.632707][ T7263] loop4: unable to read partition table [ 181.639760][ T7263] loop4: partition table beyond EOD, truncated [ 181.648409][ T7263] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 181.654016][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 181.675394][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.687169][ T9] usb 1-1: config 0 has no interface number 0 [ 181.695865][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.712465][ T27] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 181.718035][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 181.731098][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.742646][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.753790][ T9] usb 1-1: Product: syz [ 181.762822][ T9] usb 1-1: Manufacturer: syz [ 181.772610][ T9] usb 1-1: SerialNumber: syz [ 181.777727][ T27] usb 2-1: config 0 descriptor?? [ 181.795247][ T9] usb 1-1: config 0 descriptor?? [ 181.828717][ T9] usb 1-1: selecting invalid altsetting 1 [ 181.849757][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 181.871758][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 181.991749][ T9] DVB: Unable to find symbol stv0299_attach() [ 182.108274][ T9] DVB: Unable to find symbol tda8083_attach() [ 182.131009][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 182.143412][ T9] usb 1-1: USB disconnect, device number 13 [ 182.433330][ T27] usbhid 2-1:0.0: can't add hid device: -32 [ 182.441732][ T27] usbhid: probe of 2-1:0.0 failed with error -32 [ 182.461528][ T27] usb 2-1: USB disconnect, device number 14 [ 183.221050][ T7294] loop4: detected capacity change from 0 to 7 [ 183.239125][ T7294] Dev loop4: unable to read RDB block 7 [ 183.246560][ T7294] loop4: unable to read partition table [ 183.252554][ T7294] loop4: partition table beyond EOD, truncated [ 183.259457][ T7294] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 183.282587][ T5138] Dev loop4: unable to read RDB block 7 [ 183.288739][ T5138] loop4: unable to read partition table [ 183.294665][ T5138] loop4: partition table beyond EOD, truncated [ 183.394360][ T7296] netlink: 48 bytes leftover after parsing attributes in process `syz.3.503'. [ 183.905058][ T27] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 183.955053][ T5835] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 184.098538][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.131987][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.143364][ T27] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 184.157594][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.166448][ T5835] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 184.166478][ T5835] usb 2-1: config 0 has no interface number 0 [ 184.192963][ T5835] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 184.208076][ T27] usb 1-1: config 0 descriptor?? [ 184.242791][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.271503][ T5835] usb 2-1: Product: syz [ 184.282855][ T5835] usb 2-1: Manufacturer: syz [ 184.292517][ T5835] usb 2-1: SerialNumber: syz [ 184.311383][ T5835] usb 2-1: config 0 descriptor?? [ 184.334359][ T5835] usb 2-1: selecting invalid altsetting 1 [ 184.373202][ T5835] dvb_ttusb_budget: ttusb_init_controller: error [ 184.381092][ T5835] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 184.463411][ T5835] DVB: Unable to find symbol stv0299_attach() [ 184.538241][ T5835] DVB: Unable to find symbol tda8083_attach() [ 184.606616][ T5835] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 184.632450][ T5835] usb 2-1: USB disconnect, device number 15 [ 184.949731][ T27] usbhid 1-1:0.0: can't add hid device: -32 [ 184.966391][ T27] usbhid: probe of 1-1:0.0 failed with error -32 [ 185.004849][ T27] usb 1-1: USB disconnect, device number 14 [ 185.282950][ T7331] loop4: detected capacity change from 0 to 7 [ 185.294184][ T7331] Dev loop4: unable to read RDB block 7 [ 185.300084][ T7331] loop4: unable to read partition table [ 185.306386][ T7331] loop4: partition table beyond EOD, truncated [ 185.312620][ T7331] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 186.655640][ T27] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 186.882161][ T27] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 186.898498][ T27] usb 2-1: config 0 has no interface number 0 [ 186.918192][ T27] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 186.927635][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.966365][ T27] usb 2-1: Product: syz [ 186.971376][ T27] usb 2-1: Manufacturer: syz [ 186.987746][ T27] usb 2-1: SerialNumber: syz [ 187.035898][ T27] usb 2-1: config 0 descriptor?? [ 187.081147][ T27] usb 2-1: selecting invalid altsetting 1 [ 187.112330][ T27] dvb_ttusb_budget: ttusb_init_controller: error [ 187.132495][ T27] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 187.447052][ T27] DVB: Unable to find symbol stv0299_attach() [ 187.610086][ T27] DVB: Unable to find symbol tda8083_attach() [ 187.638198][ T27] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 187.711738][ T27] usb 2-1: USB disconnect, device number 16 [ 188.495606][ T27] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 188.707371][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.735666][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.765145][ T27] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 188.774276][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.796239][ T27] usb 2-1: config 0 descriptor?? [ 188.975802][ T7408] fuse: Bad value for 'fd' [ 189.395041][ T9] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 189.425143][ T27] usbhid 2-1:0.0: can't add hid device: -32 [ 189.431239][ T27] usbhid: probe of 2-1:0.0 failed with error -32 [ 189.479937][ T27] usb 2-1: USB disconnect, device number 17 [ 189.618773][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.635102][ T9] usb 4-1: config 0 has no interface number 0 [ 189.649211][ T9] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 189.665045][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.683946][ T9] usb 4-1: Product: syz [ 189.695993][ T9] usb 4-1: Manufacturer: syz [ 189.707254][ T9] usb 4-1: SerialNumber: syz [ 189.727924][ T9] usb 4-1: config 0 descriptor?? [ 189.748731][ T9] usb 4-1: selecting invalid altsetting 1 [ 189.760721][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 189.815388][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 190.123146][ T9] DVB: Unable to find symbol stv0299_attach() [ 190.331634][ T9] DVB: Unable to find symbol tda8083_attach() [ 190.346733][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 190.379971][ T9] usb 4-1: USB disconnect, device number 16 [ 191.945301][ T7475] loop4: detected capacity change from 0 to 7 [ 191.963948][ T7475] loop4: [ 191.973122][ T7475] loop4: partition table partially beyond EOD, truncated [ 192.565135][ T9] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 192.771487][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 192.788986][ T9] usb 1-1: config 0 has no interface number 0 [ 192.843296][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 192.857496][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.895154][ T9] usb 1-1: Product: syz [ 192.899809][ T9] usb 1-1: Manufacturer: syz [ 192.924257][ T9] usb 1-1: SerialNumber: syz [ 192.950666][ T9] usb 1-1: config 0 descriptor?? [ 192.977322][ T9] usb 1-1: selecting invalid altsetting 1 [ 193.056182][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 193.101944][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 193.356063][ T9] DVB: Unable to find symbol stv0299_attach() [ 193.553734][ T9] DVB: Unable to find symbol tda8083_attach() [ 193.573860][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 193.637842][ T9] usb 1-1: USB disconnect, device number 15 [ 194.050330][ T28] audit: type=1400 audit(1786294657.072:25): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=27AF5B5B40 pid=7523 comm="syz.2.557" [ 194.125675][ T28] audit: type=1400 audit(1786294657.102:26): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7523 comm="syz.2.557" [ 194.570694][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.595113][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.501659][ T28] audit: type=1400 audit(1786294658.522:27): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=27AF5B5B40 pid=7561 comm="syz.2.568" [ 195.568777][ T28] audit: type=1400 audit(1786294658.522:28): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7561 comm="syz.2.568" [ 196.255047][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 196.487793][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 196.504043][ T9] usb 1-1: config 0 has no interfaces? [ 196.516641][ T9] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 196.536265][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.613461][ T9] usb 1-1: Product: syz [ 196.626785][ T9] usb 1-1: Manufacturer: syz [ 196.688588][ T9] usb 1-1: SerialNumber: syz [ 196.702650][ T9] usb 1-1: config 0 descriptor?? [ 197.465440][ T28] audit: type=1400 audit(1786294660.492:29): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=27AF5B5B40 pid=7602 comm="syz.1.582" [ 197.538531][ T28] audit: type=1400 audit(1786294660.542:30): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7602 comm="syz.1.582" [ 199.012275][ T5968] usb 1-1: USB disconnect, device number 16 [ 199.585200][ T5968] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 199.797634][ T5968] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.856673][ T5968] usb 1-1: config 0 has no interface number 0 [ 199.886194][ T5968] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 199.911174][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.949988][ T5968] usb 1-1: Product: syz [ 199.954343][ T5968] usb 1-1: Manufacturer: syz [ 199.987475][ T5968] usb 1-1: SerialNumber: syz [ 200.003181][ T5968] usb 1-1: config 0 descriptor?? [ 200.027480][ T5968] usb 1-1: selecting invalid altsetting 1 [ 200.043113][ T5968] dvb_ttusb_budget: ttusb_init_controller: error [ 200.063400][ T5968] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 200.300632][ T5968] DVB: Unable to find symbol stv0299_attach() [ 200.391658][ T5968] DVB: Unable to find symbol tda8083_attach() [ 200.406860][ T5968] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 200.443063][ T5968] usb 1-1: USB disconnect, device number 17 [ 200.498461][ T7652] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 200.551636][ T7652] syzkaller0: entered promiscuous mode [ 200.561087][ T7652] syzkaller0: entered allmulticast mode [ 200.574440][ T7652] tipc: Enabled bearer , priority 0 [ 200.965129][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 201.165771][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 201.178713][ T9] usb 2-1: config 0 has no interfaces? [ 201.198477][ T9] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 201.215178][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.265010][ T9] usb 2-1: Product: syz [ 201.274484][ T9] usb 2-1: Manufacturer: syz [ 201.283592][ T9] usb 2-1: SerialNumber: syz [ 201.297945][ T9] usb 2-1: config 0 descriptor?? [ 202.495084][ T9] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 202.700028][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 202.715138][ T9] usb 1-1: config 0 has no interface number 0 [ 202.735550][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 202.758196][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.768570][ T9] usb 1-1: Product: syz [ 202.775130][ T9] usb 1-1: Manufacturer: syz [ 202.780063][ T9] usb 1-1: SerialNumber: syz [ 202.808604][ T9] usb 1-1: config 0 descriptor?? [ 202.819319][ T9] usb 1-1: selecting invalid altsetting 1 [ 202.830087][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 202.837286][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 202.923148][ T9] DVB: Unable to find symbol stv0299_attach() [ 202.972880][ T9] DVB: Unable to find symbol tda8083_attach() [ 202.979388][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 203.032244][ T27] usb 1-1: USB disconnect, device number 18 [ 203.141046][ T7701] netlink: 44 bytes leftover after parsing attributes in process `syz.2.617'. [ 203.151337][ T7701] ------------[ cut here ]------------ [ 203.157058][ T7701] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 203.171118][ T7701] WARNING: CPU: 1 PID: 7701 at net/sched/cls_u32.c:855 u32_change+0x1ce8/0x2690 [ 203.180339][ T7701] Modules linked in: [ 203.184301][ T7701] CPU: 1 PID: 7701 Comm: syz.2.617 Not tainted syzkaller #0 [ 203.191900][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.202146][ T7701] RIP: 0010:u32_change+0x1ce8/0x2690 [ 203.207763][ T7701] Code: f8 eb 59 e8 0a 71 d1 f8 c6 05 34 03 c1 05 01 b9 10 00 00 00 48 c7 c7 e0 2d c8 8b 4c 89 fe 48 c7 c2 60 2e c8 8b e8 98 3e 9b f8 <0f> 0b e9 1f f0 ff ff e8 dc 70 d1 f8 eb 24 e8 d5 70 d1 f8 c6 05 b9 [ 203.227575][ T7701] RSP: 0018:ffffc900049bed60 EFLAGS: 00010246 [ 203.233714][ T7701] RAX: 70dce5e3d96d4300 RBX: ffff88805c797800 RCX: 0000000000080000 [ 203.241833][ T7701] RDX: ffffc9000cbaa000 RSI: 0000000000005b04 RDI: 0000000000005b05 [ 203.249975][ T7701] RBP: ffffc900049beef8 R08: ffffc900049be967 R09: 1ffff92000937d2c [ 203.258353][ T7701] R10: dffffc0000000000 R11: fffff52000937d2d R12: 1ffff92000937dbc [ 203.266559][ T7701] R13: ffff88805c7954e8 R14: ffff888075ca0000 R15: 0000000000000020 [ 203.274594][ T7701] FS: 00007f13276146c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 203.283630][ T7701] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.290368][ T7701] CR2: 0000200000006040 CR3: 000000007fdf3000 CR4: 00000000003506e0 [ 203.298485][ T7701] Call Trace: [ 203.301824][ T7701] [ 203.304818][ T7701] ? u32_get+0x370/0x370 [ 203.309312][ T7701] tc_new_tfilter+0x1109/0x1820 [ 203.314279][ T7701] ? tcf_proto_signal_destroying+0x240/0x240 [ 203.320431][ T7701] ? rcu_read_unlock+0x8c/0xa0 [ 203.325361][ T7701] ? tcf_proto_signal_destroying+0x240/0x240 [ 203.331423][ T7701] ? tcf_proto_signal_destroying+0x240/0x240 [ 203.337565][ T7701] rtnetlink_rcv_msg+0x892/0xf90 [ 203.342575][ T7701] ? rtnetlink_rcv_msg+0x220/0xf90 [ 203.347847][ T7701] ? rtnetlink_bind+0x80/0x80 [ 203.352597][ T7701] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 203.358727][ T7701] ? lock_chain_count+0x20/0x20 [ 203.363645][ T7701] ? __local_bh_enable_ip+0x13a/0x1c0 [ 203.369486][ T7701] ? lockdep_hardirqs_on+0x98/0x150 [ 203.374761][ T7701] ? __local_bh_enable_ip+0x13a/0x1c0 [ 203.380329][ T7701] ? _local_bh_enable+0xa0/0xa0 [ 203.385341][ T7701] ? __dev_queue_xmit+0x275/0x3630 [ 203.390526][ T7701] ? __dev_queue_xmit+0x1bc2/0x3630 [ 203.395881][ T7701] ? __dev_queue_xmit+0x275/0x3630 [ 203.401083][ T7701] ? ref_tracker_free+0x686/0x830 [ 203.406269][ T7701] netlink_rcv_skb+0x235/0x4c0 [ 203.411115][ T7701] ? rtnetlink_bind+0x80/0x80 [ 203.415957][ T7701] ? netlink_ack+0x1160/0x1160 [ 203.420798][ T7701] ? __lock_acquire+0x7d80/0x7d80 [ 203.425988][ T7701] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.431257][ T7701] netlink_unicast+0x7b1/0x930 [ 203.436159][ T7701] netlink_sendmsg+0x8d0/0xbf0 [ 203.440991][ T7701] ? netlink_getsockopt+0x590/0x590 [ 203.446436][ T7701] ? apparmor_socket_sendmsg+0x8e/0x330 [ 203.452048][ T7701] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 203.457474][ T7701] ? security_socket_sendmsg+0x80/0xa0 [ 203.462994][ T7701] ? netlink_getsockopt+0x590/0x590 [ 203.468325][ T7701] ____sys_sendmsg+0x61b/0x980 [ 203.473163][ T7701] ? __asan_memset+0x22/0x40 [ 203.477865][ T7701] ? __sys_sendmsg_sock+0x30/0x30 [ 203.482942][ T7701] ? __import_iovec+0x5f2/0x850 [ 203.487927][ T7701] ? import_iovec+0x73/0xa0 [ 203.492505][ T7701] ___sys_sendmsg+0x2a6/0x360 [ 203.497370][ T7701] ? __sys_sendmsg+0x2b0/0x2b0 [ 203.502229][ T7701] ? futex_setup_timer+0xc0/0xc0 [ 203.507385][ T7701] __sys_sendmmsg+0x2ca/0x510 [ 203.512139][ T7701] ? __ia32_sys_sendmsg+0x90/0x90 [ 203.517370][ T7701] ? __ia32_sys_get_robust_list+0x110/0x110 [ 203.523351][ T7701] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 203.529531][ T7701] ? lock_chain_count+0x20/0x20 [ 203.534460][ T7701] __x64_sys_sendmmsg+0xa0/0xb0 [ 203.539463][ T7701] do_syscall_64+0x55/0xb0 [ 203.543949][ T7701] ? clear_bhb_loop+0x40/0x90 [ 203.548811][ T7701] ? clear_bhb_loop+0x40/0x90 [ 203.553553][ T7701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.559585][ T7701] RIP: 0033:0x7f132679e0d9 [ 203.564054][ T7701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.583895][ T7701] RSP: 002b:00007f1327614028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 203.592430][ T7701] RAX: ffffffffffffffda RBX: 00007f1326a25fa0 RCX: 00007f132679e0d9 [ 203.600570][ T7701] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 203.608815][ T7701] RBP: 00007f1326835024 R08: 0000000000000000 R09: 0000000000000000 [ 203.616961][ T7701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.625035][ T7701] R13: 00007f1326a26038 R14: 00007f1326a25fa0 R15: 00007ffd41895928 [ 203.633106][ T7701] [ 203.636287][ T7701] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 203.643609][ T7701] CPU: 1 PID: 7701 Comm: syz.2.617 Not tainted syzkaller #0 [ 203.650935][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.661034][ T7701] Call Trace: [ 203.664356][ T7701] [ 203.667331][ T7701] dump_stack_lvl+0x18c/0x250 [ 203.672067][ T7701] ? show_regs_print_info+0x20/0x20 [ 203.677340][ T7701] ? load_image+0x420/0x420 [ 203.681913][ T7701] panic+0x2ca/0x720 [ 203.685874][ T7701] ? bpf_jit_dump+0xd0/0xd0 [ 203.690473][ T7701] __warn+0x2e0/0x470 [ 203.694509][ T7701] ? u32_change+0x1ce8/0x2690 [ 203.699245][ T7701] ? u32_change+0x1ce8/0x2690 [ 203.703986][ T7701] report_bug+0x2be/0x4f0 [ 203.708385][ T7701] ? u32_change+0x1ce8/0x2690 [ 203.713147][ T7701] ? u32_change+0x1ce8/0x2690 [ 203.717898][ T7701] ? u32_change+0x1cea/0x2690 [ 203.722660][ T7701] handle_bug+0xcf/0x120 [ 203.726971][ T7701] exc_invalid_op+0x1a/0x50 [ 203.731632][ T7701] asm_exc_invalid_op+0x1a/0x20 [ 203.736573][ T7701] RIP: 0010:u32_change+0x1ce8/0x2690 [ 203.741928][ T7701] Code: f8 eb 59 e8 0a 71 d1 f8 c6 05 34 03 c1 05 01 b9 10 00 00 00 48 c7 c7 e0 2d c8 8b 4c 89 fe 48 c7 c2 60 2e c8 8b e8 98 3e 9b f8 <0f> 0b e9 1f f0 ff ff e8 dc 70 d1 f8 eb 24 e8 d5 70 d1 f8 c6 05 b9 [ 203.761610][ T7701] RSP: 0018:ffffc900049bed60 EFLAGS: 00010246 [ 203.767751][ T7701] RAX: 70dce5e3d96d4300 RBX: ffff88805c797800 RCX: 0000000000080000 [ 203.775827][ T7701] RDX: ffffc9000cbaa000 RSI: 0000000000005b04 RDI: 0000000000005b05 [ 203.783861][ T7701] RBP: ffffc900049beef8 R08: ffffc900049be967 R09: 1ffff92000937d2c [ 203.791907][ T7701] R10: dffffc0000000000 R11: fffff52000937d2d R12: 1ffff92000937dbc [ 203.799959][ T7701] R13: ffff88805c7954e8 R14: ffff888075ca0000 R15: 0000000000000020 [ 203.808024][ T7701] ? u32_get+0x370/0x370 [ 203.812336][ T7701] tc_new_tfilter+0x1109/0x1820 [ 203.817250][ T7701] ? tcf_proto_signal_destroying+0x240/0x240 [ 203.823280][ T7701] ? rcu_read_unlock+0x8c/0xa0 [ 203.828094][ T7701] ? tcf_proto_signal_destroying+0x240/0x240 [ 203.834118][ T7701] ? tcf_proto_signal_destroying+0x240/0x240 [ 203.840154][ T7701] rtnetlink_rcv_msg+0x892/0xf90 [ 203.845142][ T7701] ? rtnetlink_rcv_msg+0x220/0xf90 [ 203.850304][ T7701] ? rtnetlink_bind+0x80/0x80 [ 203.855023][ T7701] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 203.861029][ T7701] ? lock_chain_count+0x20/0x20 [ 203.865904][ T7701] ? __local_bh_enable_ip+0x13a/0x1c0 [ 203.871298][ T7701] ? lockdep_hardirqs_on+0x98/0x150 [ 203.876526][ T7701] ? __local_bh_enable_ip+0x13a/0x1c0 [ 203.881956][ T7701] ? _local_bh_enable+0xa0/0xa0 [ 203.886882][ T7701] ? __dev_queue_xmit+0x275/0x3630 [ 203.892050][ T7701] ? __dev_queue_xmit+0x1bc2/0x3630 [ 203.897291][ T7701] ? __dev_queue_xmit+0x275/0x3630 [ 203.902447][ T7701] ? ref_tracker_free+0x686/0x830 [ 203.907507][ T7701] netlink_rcv_skb+0x235/0x4c0 [ 203.912336][ T7701] ? rtnetlink_bind+0x80/0x80 [ 203.917058][ T7701] ? netlink_ack+0x1160/0x1160 [ 203.921857][ T7701] ? __lock_acquire+0x7d80/0x7d80 [ 203.926917][ T7701] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.932141][ T7701] netlink_unicast+0x7b1/0x930 [ 203.936977][ T7701] netlink_sendmsg+0x8d0/0xbf0 [ 203.941774][ T7701] ? netlink_getsockopt+0x590/0x590 [ 203.946999][ T7701] ? apparmor_socket_sendmsg+0x8e/0x330 [ 203.952576][ T7701] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 203.957893][ T7701] ? security_socket_sendmsg+0x80/0xa0 [ 203.963378][ T7701] ? netlink_getsockopt+0x590/0x590 [ 203.968609][ T7701] ____sys_sendmsg+0x61b/0x980 [ 203.973421][ T7701] ? __asan_memset+0x22/0x40 [ 203.978042][ T7701] ? __sys_sendmsg_sock+0x30/0x30 [ 203.983098][ T7701] ? __import_iovec+0x5f2/0x850 [ 203.987988][ T7701] ? import_iovec+0x73/0xa0 [ 203.992525][ T7701] ___sys_sendmsg+0x2a6/0x360 [ 203.997238][ T7701] ? __sys_sendmsg+0x2b0/0x2b0 [ 204.002043][ T7701] ? futex_setup_timer+0xc0/0xc0 [ 204.007025][ T7701] __sys_sendmmsg+0x2ca/0x510 [ 204.011730][ T7701] ? __ia32_sys_sendmsg+0x90/0x90 [ 204.016799][ T7701] ? __ia32_sys_get_robust_list+0x110/0x110 [ 204.022726][ T7701] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 204.028752][ T7701] ? lock_chain_count+0x20/0x20 [ 204.033656][ T7701] __x64_sys_sendmmsg+0xa0/0xb0 [ 204.038538][ T7701] do_syscall_64+0x55/0xb0 [ 204.042983][ T7701] ? clear_bhb_loop+0x40/0x90 [ 204.047695][ T7701] ? clear_bhb_loop+0x40/0x90 [ 204.052406][ T7701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.058332][ T7701] RIP: 0033:0x7f132679e0d9 [ 204.062778][ T7701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.082409][ T7701] RSP: 002b:00007f1327614028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 204.090859][ T7701] RAX: ffffffffffffffda RBX: 00007f1326a25fa0 RCX: 00007f132679e0d9 [ 204.098870][ T7701] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 204.106873][ T7701] RBP: 00007f1326835024 R08: 0000000000000000 R09: 0000000000000000 [ 204.114875][ T7701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.122870][ T7701] R13: 00007f1326a26038 R14: 00007f1326a25fa0 R15: 00007ffd41895928 [ 204.130889][ T7701] [ 204.134529][ T7701] Kernel Offset: disabled [ 204.138874][ T7701] Rebooting in 86400 seconds..