last executing test programs: 2.660482429s ago: executing program 1 (id=44): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$I2C_SMBUS(r0, 0x720, 0x0) 2.490308751s ago: executing program 1 (id=47): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x20581, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1, 0x0, 0x29, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'dt282x\x00', [0x3, 0x80008000, 0x9, 0x2, 0x0, 0x0, 0x0, 0xc1, 0xffe, 0x1, 0x7, 0x1, 0x1006, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x3, 0x3ff, 0x10000, 0x800, 0xe2df, 0x2, 0xfffffffd, 0x1, 0x3, 0x7, 0x5, 0x5]}) syz_open_dev$video4linux(0x0, 0x0, 0x80000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.312147825s ago: executing program 3 (id=62): capget(&(0x7f0000000080)={0x19980330}, &(0x7f0000000180)={0x0, 0x11, 0x0, 0x80000000, 0x0, 0x4}) 1.28728179s ago: executing program 2 (id=63): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x40000) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80880) tee(r1, r0, 0xd2, 0xa) 1.158137121s ago: executing program 3 (id=64): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) bind$can_j1939(r0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.096179643s ago: executing program 2 (id=65): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0xffff, 0x0) 1.022188338s ago: executing program 2 (id=66): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x2b, &(0x7f0000000000), 0x27}, 0x44085) 1.016780814s ago: executing program 3 (id=67): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x2, 0x440000) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900013000000000400004803c0001800b00010065787468647200002c000280080007400000000005000200000000000800034000"], 0x94}}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000080)={0x13}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 812.234507ms ago: executing program 2 (id=68): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003900)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r1) close(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x14, r3, 0x1}, 0x14}}, 0x0) 652.193541ms ago: executing program 0 (id=69): r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00') 651.950328ms ago: executing program 2 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x800001, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x80, 0x400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r2, r3, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@file={0x1, './file0/file3\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x1, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x9) 651.857154ms ago: executing program 3 (id=71): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x2, 0x440000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000080)={0x13}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 574.504608ms ago: executing program 0 (id=72): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d1}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 420.068496ms ago: executing program 0 (id=73): mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000001300)=0x7fffffffffffffff, 0x5, 0x6) 419.834959ms ago: executing program 1 (id=74): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000200), 0x4) 392.586425ms ago: executing program 0 (id=75): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) 372.981534ms ago: executing program 3 (id=76): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) io_setup(0x3fc, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40c00) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000001) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) 309.853787ms ago: executing program 1 (id=77): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4c23, @local}, {0x2, 0x4e61, @remote}, 0x54, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x5, 0x28}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e22, @broadcast}, 0x20c, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0xbc2f0b7, 0x7}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4c23, @local}, {0x2, 0x4e61, @remote}, 0x54, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1, 0x5, 0x28}) 308.691584ms ago: executing program 2 (id=78): syz_open_dev$sg(0x0, 0x0, 0x8002) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r2, 0x0, 0x0) 184.106174ms ago: executing program 3 (id=79): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x1b, 0x200, &(0x7f0000000880)="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"}) 183.917836ms ago: executing program 0 (id=80): fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_access\x00') 174.322532ms ago: executing program 1 (id=81): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x2, 0x2, 0xd7, 0x500, 0x7ff, 0x80000}) 70.234967ms ago: executing program 0 (id=82): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x2301) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) 0s ago: executing program 1 (id=83): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91cf43c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e935ad8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb97136d7cb400c1d0ed4ed9b83090abb113aa4e926069", 0xa5}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39811b58bc14", 0x20}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="52348bf9812fc081678b5760a4c4967393fd8939aaf12a894c5424df616c4eea14fbac2dad114a75c405d89fafa5715b56abba4bbceca456d8225e3f6eb57a03287e74c7bd74e40e3fda3150f92d181e7c82cb2f8ea0416fc4c0f111161cdb9a52911925644e25f871d02f403c83214f830f93b30b874e75cab53f1ed7871f21c0d654a47fab0637868517d7e8d9915e99b4dc2dcafdcb2ef2a012ec95418a544c32181fb969e01318e00a12fd1b2a0eb57bcf7de086e320f2d4be4e1453010be849e4d7dba41558329699aacd3d1c7d97b9bf74caf8b7946647309d209558b1965ef7ea4576ec0e289b73c2089310271d0a67d88a312f4cb0194c4f28ec3c2fe269311d0cec1fe0efef17d376d183b08e392b6cb58e930e1f959dd4528ec95350fc86e5297e6d59af036b132df17833881238ba8692842a8da4d5b4a37c94915331143d9128a197495433c2f550b4455a9ae03b937305e192e861ca3a60f9b3a14288e3daeb6936593485388a4aaab39b3843ee2960d9c8728eafb904333e7b78a270480e8dd89bc4cf0b791013cff43bf314e11a44d5f9c4fdad8a2fcdb04f76de29a50a0428148f4bc3eff1e84d25ea95dabddfba6162860a3c3389ee366450b6bcf1409f920caf1be5702af0402e2cef4896d9544a26ebfab694d7a47eca55bd2f62e7d7eb1f6061f7e441df5ab31344f02179764822036ef706133ea1a6380e042f074b2b0ddcc578cb8a668a846b9d5792f8d434f8ec7b562594587c49e8e6b3450e545fc070644bd06a36106cdb63f9e8ad7ae50b5b44e47f377961f5e29392330fb40d63c911ffd13e094f0452cc5c77b0731b56211b2d8a7554f6077ae593626a54f56d6dea49058fd1d48db02a7b33d50474b58a7e14e6a4d935bfaf4865f00074d59ece4b2d5f5e768e952733ee2c34b3e4b0be230f792f8b16f872afbbd155fe5314d4f54ea7b747eb2cd2410db7464c73ecd4815cda0bcc839fb603bb3f0c04b2d233b54a78b7aa3db974e469c8788e155cc2ef39bcf8491101058093c842df8cd0ac03d29e6d6902187f31eaf960b306debf734d8d26cc34a7e62c64a98b5a8a61020d81f5213d4d5722088be5b5ea6b1ee19b148d1f8b7172cd507533360d2d668e85252463b1d61302a75a7e3dc5e8c607a1026c66c2e8a6cbd34e3e5e99890da6cf07ed1247a07f004a6b1d643e00be7c156127bd7b39326e84ea6963d0530a4538eea35cf8048440a65148f1fe6314020bbe9c9358242589360fa5b1425d24b9f59141d81c0dbdd2e802eb82849e6342a4ffd0dcf307e2c73c707f54d54a2d04f2e504cae3d1719253ea4f455ae0e5fd35c08808b1fb8c6f5a25e7a3b082cd2159b9e624b67f1ed7faf2e5a0e6cd2560e26e4eabf626b65ce42c7855512ad92bcd6849d0c73e4cf41962ae0d17d850cd598e016b1db978f7a8d7f5fd88c7952982633e7673f11f3dc1ea4363ecbd106b3f410be357a29d0ddff9cb8448f71b39c60c3e7d5fba9e6115e64e88813418614419fcc8e27c2bd13109425528e44927ff85444cc076fbebbbf5c8b5a7bb8c7c9dd61a2bb4eed88d057a7268904cdd84f5e1eb8e4800a4d0c516e33e97c83f859c5e83fcd841ec6af3eb609c50bfd4794edb29d3a4c50088821ebd1f964eb9689e75c8ba3912ef50641b12a090e8687542763ed92bf85aae23b320f36f2b6b48327d5a58c0ea4b5725b655a33ac84dcf473a4f5adc3eabb7eb8efaeb18660d4b35405dc05a752f663ceaf25975849c708d41cdc53a8b4de94a10612b3901e8fd3a4797d5e6bfb1fcafebb7ad602cac461b014549574a8bba04601d4270749b17855d6e0bf912a823f801f74716bff0c5b5b7f8b62111168277a7725a9aa4b90a728304888f60bf1ff5de292e1451e01c34e38666cbfafb5dbc2b6af55c06a4bc758dab1081685c284f6480223f08be99fe93f758780b11e019ea305dd4ae2d7998830077ffbacdf545f94df06bfe57c5aac1c235d2ec4494c57228258517c7757bba41ebbb4a91d4d7c17d56a8a4f4896f8b87105bb91339bc817f51a14e657dd76934ba125e66df998d16f0467a71a437d6d9535d442af1a96ea753074fca588ee3cea87e01c8e2c7903f3d493c1f03dc77187acd17471769286c77f8d9c740705e1dc1cc1c528959ca6437766706dae23e117ba6585204e7ff30128d4629e107a409f744e4bae6dfec03cdc53d95f5d06c82258b17e9a215dda1dd153b20d3340463efdcd86dfaafeffdc38474d08772bc53ccc6db54d981a3eb4006651e3aaa354fa41f44f2a334b228f2bdf12f2620b4031e01a0a51d1292c86de05073fedb09764ffa1619f0d9e46f7855f0e7f486d7015f329e1ce3db9481ce2584609bdea78aa4b1fdbd769e08c7500acf3fc6fac0070262b7354cc99f7624123421925f8ab73cfe334718b32eea0f9d7ed25b5ec3f87cbab72e2bf67cccadb886000d02bbd2b2954aaf1edc090bf713dbc81833b7b6726e7f8a4a0084b0d68b03a4be78a532528dbc67ab327cc9fd5f604e09b6ae3749b927cb763d79bdd462e1b038573d97d265f1b077ba3ca36bdada16701c56fee635f09ba574dad81b33d289cb362e2ddc9aba7e268c07361662b1abae1402c99e7a2ac1b80a101b37c46d710bce0a913a8b77d804c438504b6cb3ac3a3cf07fa7efabfe", 0x770}], 0x1}}], 0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. [ 74.699304][ T5832] cgroup: Unknown subsys name 'net' [ 74.871404][ T5832] cgroup: Unknown subsys name 'cpuset' [ 74.880172][ T5832] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.435362][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.880971][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.896985][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.904729][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.918377][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.929720][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.960920][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.969515][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.003275][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.010881][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.018960][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.026573][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.058706][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.078185][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.125585][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.132869][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.141161][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.148653][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.156854][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.165805][ T5165] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.175460][ T5165] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.393870][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 79.618786][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 79.643499][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.651995][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.659715][ T5841] bridge_slave_0: entered allmulticast mode [ 79.668810][ T5841] bridge_slave_0: entered promiscuous mode [ 79.702057][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.709361][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.716480][ T5841] bridge_slave_1: entered allmulticast mode [ 79.724127][ T5841] bridge_slave_1: entered promiscuous mode [ 79.774737][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 79.817648][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.856114][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.914645][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 79.943728][ T5841] team0: Port device team_slave_0 added [ 79.951819][ T5841] team0: Port device team_slave_1 added [ 79.967706][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.975076][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.983131][ T5846] bridge_slave_0: entered allmulticast mode [ 79.990315][ T5846] bridge_slave_0: entered promiscuous mode [ 79.998811][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.005925][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.013425][ T5846] bridge_slave_1: entered allmulticast mode [ 80.022258][ T5846] bridge_slave_1: entered promiscuous mode [ 80.090289][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.097306][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.123990][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.164489][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.171881][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.197798][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.221827][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.234411][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.256436][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.263936][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.271804][ T5845] bridge_slave_0: entered allmulticast mode [ 80.278877][ T5845] bridge_slave_0: entered promiscuous mode [ 80.316391][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.323933][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.331141][ T5845] bridge_slave_1: entered allmulticast mode [ 80.338340][ T5845] bridge_slave_1: entered promiscuous mode [ 80.359908][ T5846] team0: Port device team_slave_0 added [ 80.408791][ T5846] team0: Port device team_slave_1 added [ 80.432467][ T5841] hsr_slave_0: entered promiscuous mode [ 80.439350][ T5841] hsr_slave_1: entered promiscuous mode [ 80.445756][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.452981][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.460519][ T5847] bridge_slave_0: entered allmulticast mode [ 80.467914][ T5847] bridge_slave_0: entered promiscuous mode [ 80.499772][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.507018][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.514420][ T5847] bridge_slave_1: entered allmulticast mode [ 80.523615][ T5847] bridge_slave_1: entered promiscuous mode [ 80.533043][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.554109][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.561104][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.587484][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.613768][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.636022][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.643420][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.669529][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.723960][ T5845] team0: Port device team_slave_0 added [ 80.739018][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.752378][ T5845] team0: Port device team_slave_1 added [ 80.784281][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.862630][ T5847] team0: Port device team_slave_0 added [ 80.869228][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.876172][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.902746][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.923365][ T5846] hsr_slave_0: entered promiscuous mode [ 80.929960][ T5846] hsr_slave_1: entered promiscuous mode [ 80.935949][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 80.941782][ T5846] Cannot create hsr debugfs directory [ 80.950422][ T5847] team0: Port device team_slave_1 added [ 80.957497][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.964451][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.990811][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.998488][ T5165] Bluetooth: hci0: command tx timeout [ 81.094195][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.101328][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.127453][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.139731][ T5165] Bluetooth: hci2: command tx timeout [ 81.139755][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.152118][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.178048][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.216855][ T5165] Bluetooth: hci3: command tx timeout [ 81.227122][ T5165] Bluetooth: hci1: command tx timeout [ 81.234150][ T5845] hsr_slave_0: entered promiscuous mode [ 81.240500][ T5845] hsr_slave_1: entered promiscuous mode [ 81.246578][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 81.252372][ T5845] Cannot create hsr debugfs directory [ 81.385714][ T5847] hsr_slave_0: entered promiscuous mode [ 81.392200][ T5847] hsr_slave_1: entered promiscuous mode [ 81.398771][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 81.404505][ T5847] Cannot create hsr debugfs directory [ 81.577138][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.608041][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.618770][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.657539][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.740988][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.760607][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.771575][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.782469][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.894234][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.912748][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.923352][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.947079][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.026100][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.047645][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.058826][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.069824][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.092134][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.144198][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.178648][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.185890][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.195256][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.202356][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.214544][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.298337][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.322572][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.336057][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.343223][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.368156][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.375270][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.424617][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.459981][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.467182][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.511315][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.518501][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.574075][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.645788][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.703988][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.711157][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.735748][ T1348] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.742972][ T1348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.883238][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.000078][ T5841] veth0_vlan: entered promiscuous mode [ 83.034955][ T5841] veth1_vlan: entered promiscuous mode [ 83.058089][ T5165] Bluetooth: hci0: command tx timeout [ 83.143338][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.208935][ T5841] veth0_macvtap: entered promiscuous mode [ 83.223731][ T5165] Bluetooth: hci2: command tx timeout [ 83.255305][ T5841] veth1_macvtap: entered promiscuous mode [ 83.291522][ T5846] veth0_vlan: entered promiscuous mode [ 83.297502][ T5165] Bluetooth: hci1: command tx timeout [ 83.302924][ T5165] Bluetooth: hci3: command tx timeout [ 83.323104][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.347898][ T5846] veth1_vlan: entered promiscuous mode [ 83.365190][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.379474][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.405391][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.416128][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.426038][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.443613][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.489582][ T5846] veth0_macvtap: entered promiscuous mode [ 83.501945][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.517634][ T5846] veth1_macvtap: entered promiscuous mode [ 83.551069][ T5845] veth0_vlan: entered promiscuous mode [ 83.579405][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.619399][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.635926][ T5845] veth1_vlan: entered promiscuous mode [ 83.651369][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.663809][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.689081][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.727348][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.746242][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.755256][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.789247][ T5847] veth0_vlan: entered promiscuous mode [ 83.795427][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.816363][ T5845] veth0_macvtap: entered promiscuous mode [ 83.822499][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.841569][ T5847] veth1_vlan: entered promiscuous mode [ 83.880717][ T5845] veth1_macvtap: entered promiscuous mode [ 83.926524][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.945990][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.958898][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.973453][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.975205][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.073547][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.104770][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.117915][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.132109][ T5847] veth0_macvtap: entered promiscuous mode [ 84.145988][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.160092][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.169586][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.183469][ T5847] veth1_macvtap: entered promiscuous mode [ 84.275529][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.342500][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.358971][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.382239][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.399206][ T64] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.410307][ T64] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.445516][ T64] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.490370][ T64] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.559719][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.568955][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.651965][ T5943] netlink: 'syz.0.6': attribute type 4 has an invalid length. [ 84.703964][ T5947] netlink: 'syz.0.6': attribute type 4 has an invalid length. [ 84.778367][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.808630][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.885620][ T5954] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.980187][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.023352][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.136888][ T5165] Bluetooth: hci0: command tx timeout [ 85.297810][ T5165] Bluetooth: hci2: command tx timeout [ 85.384675][ T5165] Bluetooth: hci3: command tx timeout [ 85.390268][ T51] Bluetooth: hci1: command tx timeout [ 85.783779][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.990351][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.020767][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 86.040116][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.084973][ T9] usb 4-1: config 0 descriptor?? [ 86.147938][ T30] audit: type=1326 audit(1752731413.618:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abb8e929 code=0x7ffc0000 [ 86.200471][ T30] audit: type=1326 audit(1752731413.628:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abb8e929 code=0x7ffc0000 [ 86.247212][ T30] audit: type=1326 audit(1752731413.628:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f47abb8e929 code=0x7ffc0000 [ 86.270531][ T30] audit: type=1326 audit(1752731413.628:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abb8e929 code=0x7ffc0000 [ 86.293394][ T30] audit: type=1326 audit(1752731413.628:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abb8e929 code=0x7ffc0000 [ 86.321402][ T30] audit: type=1326 audit(1752731413.708:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00cbb8e929 code=0x7ffc0000 [ 86.352526][ T30] audit: type=1326 audit(1752731413.718:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00cbb8e929 code=0x7ffc0000 [ 86.381842][ T30] audit: type=1326 audit(1752731413.718:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f00cbb8e929 code=0x7ffc0000 [ 86.422770][ T30] audit: type=1326 audit(1752731413.718:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00cbb8e929 code=0x7ffc0000 [ 86.451412][ T30] audit: type=1326 audit(1752731413.718:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00cbb8e929 code=0x7ffc0000 [ 86.571803][ T9] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 86.606956][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input5 [ 86.774374][ T9] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 87.216968][ T5165] Bluetooth: hci0: command tx timeout [ 87.377602][ T5165] Bluetooth: hci2: command tx timeout [ 87.456943][ T5165] Bluetooth: hci3: command tx timeout [ 87.462395][ T5165] Bluetooth: hci1: command tx timeout [ 88.445107][ T6043] process 'syz.1.41' launched './file0' with NULL argv: empty string added [ 88.556448][ T5852] usb 4-1: USB disconnect, device number 2 [ 88.870751][ T6058] comedi: valid board names for 8255 driver are: [ 88.893371][ T6058] 8255 [ 88.896167][ T6058] comedi: valid board names for vmk80xx driver are: [ 88.930737][ T6058] vmk80xx [ 88.933897][ T6058] comedi: valid board names for usbduxsigma driver are: [ 88.943244][ T6058] usbduxsigma [ 88.947975][ T6058] comedi: valid board names for usbduxfast driver are: [ 88.954935][ T6058] usbduxfast [ 88.961839][ T6058] comedi: valid board names for usbdux driver are: [ 89.010105][ T6058] usbdux [ 89.016489][ T6058] comedi: valid board names for ni6501 driver are: [ 89.023442][ T6058] ni6501 [ 89.026400][ T6058] comedi: valid board names for dt9812 driver are: [ 89.033732][ T6058] dt9812 [ 89.051174][ T6058] comedi: valid board names for ni_labpc_cs driver are: [ 89.067486][ T6058] ni_labpc_cs [ 89.076864][ T6058] comedi: valid board names for ni_daq_700 driver are: [ 89.083831][ T6058] ni_daq_700 [ 89.093691][ T6058] comedi: valid board names for labpc_pci driver are: [ 89.106865][ T6058] labpc_pci [ 89.110092][ T6058] comedi: valid board names for adl_pci9118 driver are: [ 89.118143][ T6058] pci9118dg [ 89.121814][ T6058] pci9118hg [ 89.125026][ T6058] pci9118hr [ 89.128711][ T6058] comedi: valid board names for 8255_pci driver are: [ 89.160563][ T6058] 8255_pci [ 89.163793][ T6058] comedi: valid board names for s526 driver are: [ 89.180883][ T6058] s526 [ 89.183756][ T6058] comedi: valid board names for multiq3 driver are: [ 89.205630][ T6058] multiq3 [ 89.219359][ T6058] comedi: valid board names for pcmuio driver are: [ 89.226285][ T6058] pcmuio48 [ 89.234096][ T6058] pcmuio96 [ 89.238675][ T6058] comedi: valid board names for pcmmio driver are: [ 89.245268][ T6058] pcmmio [ 89.248517][ T6058] comedi: valid board names for pcmda12 driver are: [ 89.255194][ T6058] pcmda12 [ 89.258908][ T6058] comedi: valid board names for pcmad driver are: [ 89.265450][ T6058] pcmad12 [ 89.272418][ T6058] pcmad16 [ 89.275778][ T6058] comedi: valid board names for ni_labpc driver are: [ 89.284876][ T6058] lab-pc-1200 [ 89.288550][ T6058] lab-pc-1200ai [ 89.315007][ T6058] lab-pc+ [ 89.334437][ T6058] comedi: valid board names for atmio16 driver are: [ 89.341382][ T6058] atmio16 [ 89.344496][ T6058] atmio16d [ 89.347962][ T6058] comedi: valid board names for ni_at_ao driver are: [ 89.354734][ T6058] at-ao-6 [ 89.358080][ T6058] at-ao-10 [ 89.361213][ T6058] comedi: valid board names for ni_at_a2150 driver are: [ 89.368581][ T6058] ni_at_a2150 [ 89.372055][ T6058] comedi: valid board names for adq12b driver are: [ 89.382549][ T6058] adq12b [ 89.385507][ T6058] comedi: valid board names for mpc624 driver are: [ 89.392958][ T6058] mpc624 [ 89.395932][ T6058] comedi: valid board names for c6xdigio driver are: [ 89.403804][ T6058] c6xdigio [ 89.407231][ T6058] comedi: valid board names for aio_iiro_16 driver are: [ 89.414279][ T6058] aio_iiro_16 [ 89.420782][ T6058] comedi: valid board names for aio_aio12_8 driver are: [ 89.428075][ T6058] aio_aio12_8 [ 89.432306][ T6058] aio_ai12_8 [ 89.436940][ T6058] aio_ao12_4 [ 89.440251][ T6058] comedi: valid board names for fl512 driver are: [ 89.478175][ T6058] fl512 [ 89.481055][ T6058] comedi: valid board names for dmm32at driver are: [ 89.502856][ T6058] dmm32at [ 89.505910][ T6058] comedi: valid board names for dt282x driver are: [ 89.557131][ T6058] dt2821 [ 89.560130][ T6058] dt2821-f [ 89.568508][ T6058] dt2821-g [ 89.578465][ T6058] dt2823 [ 89.581442][ T6058] dt2824-pgh [ 89.595338][ T6058] dt2824-pgl [ 89.608117][ T6058] dt2825 [ 89.611165][ T6058] dt2827 [ 89.626932][ T6058] dt2828 [ 89.630668][ T6058] dt2829 [ 89.633631][ T6058] dt21-ez [ 89.656781][ T6058] dt23-ez [ 89.659838][ T6058] dt24-ez [ 89.662871][ T6058] dt24-ez-pgl [ 89.676993][ T6058] comedi: valid board names for dt2817 driver are: [ 89.683516][ T6058] dt2817 [ 89.686459][ T6058] comedi: valid board names for dt2815 driver are: [ 89.736830][ T6058] dt2815 [ 89.741685][ T6058] comedi: valid board names for dt2814 driver are: [ 89.750526][ T6058] dt2814 [ 89.753486][ T6058] comedi: valid board names for dt2811 driver are: [ 89.763640][ T6058] dt2811-pgh [ 89.768753][ T6058] dt2811-pgl [ 89.772476][ T6058] comedi: valid board names for dt2801 driver are: [ 89.787291][ T6058] dt2801 [ 89.790258][ T6058] comedi: valid board names for das6402 driver are: [ 89.799541][ T6058] das6402-12 [ 89.802839][ T6058] das6402-16 [ 89.806130][ T6058] comedi: valid board names for das1800 driver are: [ 89.815441][ T6058] das-1701st [ 89.839589][ T6058] das-1701st-da [ 89.846672][ T6058] das-1702st [ 89.850477][ T6058] das-1702st-da [ 89.854051][ T6058] das-1702hr [ 89.874713][ T6058] das-1702hr-da [ 89.878533][ T6058] das-1701ao [ 89.881858][ T6058] das-1702ao [ 89.885209][ T6058] das-1801st [ 89.888955][ T6058] das-1801st-da [ 89.892517][ T6058] das-1802st [ 89.895872][ T6058] das-1802st-da [ 89.905982][ T6058] das-1802hr [ 89.914143][ T6058] das-1802hr-da [ 89.927662][ T6058] das-1801hc [ 89.930971][ T6058] das-1802hc [ 89.934266][ T6058] das-1801ao [ 89.944484][ T6058] das-1802ao [ 89.948024][ T6058] comedi: valid board names for das800 driver are: [ 89.964907][ T6058] das-800 [ 89.968527][ T6058] cio-das800 [ 89.971824][ T6058] das-801 [ 89.974854][ T6058] cio-das801 [ 89.985905][ T6093] capability: warning: `syz.3.62' uses 32-bit capabilities (legacy support in use) [ 89.996458][ T6058] das-802 [ 90.000123][ T6058] cio-das802 [ 90.003427][ T6058] cio-das802/16 [ 90.007684][ T6058] comedi: valid board names for isa-das08 driver are: [ 90.014981][ T6058] isa-das08 [ 90.020993][ T6058] das08-pgm [ 90.024281][ T6058] das08-pgh [ 90.027958][ T6058] das08-pgl [ 90.036718][ T6058] das08-aoh [ 90.040059][ T6058] das08-aol [ 90.043270][ T6058] das08-aom [ 90.046476][ T6058] das08/jr-ao [ 90.056707][ T6058] das08jr-16-ao [ 90.060283][ T6058] pc104-das08 [ 90.063665][ T6058] das08jr/16 [ 90.071062][ T6058] comedi: valid board names for das16m1 driver are: [ 90.077730][ T6058] das16m1 [ 90.097418][ T6058] comedi: valid board names for dac02 driver are: [ 90.119222][ T6058] dac02 [ 90.127135][ T6058] comedi: valid board names for rti802 driver are: [ 90.143086][ T6058] rti802 [ 90.146098][ T6058] comedi: valid board names for rti800 driver are: [ 90.157708][ T6058] rti800 [ 90.163572][ T6058] rti815 [ 90.177495][ T6058] comedi: valid board names for pcm3724 driver are: [ 90.193656][ T6058] pcm3724 [ 90.200281][ T6058] comedi: valid board names for pcl818 driver are: [ 90.210007][ T6058] pcl818l [ 90.213470][ T6058] pcl818h [ 90.219141][ T6058] pcl818hd [ 90.222349][ T6058] pcl818hg [ 90.225526][ T6058] pcl818 [ 90.228827][ T6058] pcl718 [ 90.231845][ T6058] pcm3718 [ 90.234960][ T6058] comedi: valid board names for pcl816 driver are: [ 90.243522][ T6058] pcl816 [ 90.246554][ T6058] pcl814b [ 90.265873][ T6058] comedi: valid board names for pcl812 driver are: [ 90.277694][ T6058] pcl812 [ 90.280748][ T6058] pcl812pg [ 90.283956][ T6058] acl8112pg [ 90.287966][ T6058] acl8112dg [ 90.291232][ T6058] acl8112hg [ 90.301771][ T6058] a821pgl [ 90.307930][ T6058] a821pglnda [ 90.321924][ T6058] a821pgh [ 90.328571][ T6058] a822pgl [ 90.333893][ T6058] a822pgh [ 90.341758][ T6058] a823pgl [ 90.347342][ T6058] a823pgh [ 90.356392][ T6058] pcl813 [ 90.360145][ T6058] pcl813b [ 90.363274][ T6058] acl8113 [ 90.366314][ T6058] iso813 [ 90.370600][ T6058] acl8216 [ 90.374272][ T6058] a826pg [ 90.380237][ T6058] comedi: valid board names for pcl730 driver are: [ 90.388583][ T6058] pcl730 [ 90.391601][ T6058] iso730 [ 90.394616][ T6058] acl7130 [ 90.399219][ T6058] pcm3730 [ 90.402312][ T6058] pcl725 [ 90.405325][ T6058] p8r8dio [ 90.413320][ T6058] acl7225b [ 90.423429][ T6058] p16r16dio [ 90.430147][ T6058] pcl733 [ 90.436585][ T6058] pcl734 [ 90.443946][ T6058] opmm-1616-xt [ 90.473635][ T6058] pearl-mm-p [ 90.477146][ T6058] ir104-pbf [ 90.480484][ T6058] comedi: valid board names for pcl726 driver are: [ 90.494285][ T6058] pcl726 [ 90.497897][ T6058] pcl727 [ 90.500995][ T6058] pcl728 [ 90.503943][ T6058] acl6126 [ 90.507108][ T6058] acl6128 [ 90.510291][ T6058] comedi: valid board names for pcl724 driver are: [ 90.516875][ T6058] pcl724 [ 90.519962][ T6058] pcl722 [ 90.522909][ T6058] pcl731 [ 90.526495][ T6058] acl7122 [ 90.530521][ T6058] acl7124 [ 90.533739][ T6058] pet48dio [ 90.537024][ T6058] pcmio48 [ 90.540181][ T6058] onyx-mm-dio [ 90.543561][ T6058] comedi: valid board names for pcl711 driver are: [ 90.550157][ T6058] pcl711 [ 90.553267][ T6058] pcl711b [ 90.556306][ T6058] acl8112hg [ 90.559929][ T6058] acl8112dg [ 90.563263][ T6058] comedi: valid board names for amplc_pc263 driver are: [ 90.574056][ T6058] pc263 [ 90.621694][ T6058] comedi: valid board names for amplc_pc236 driver are: [ 90.641855][ T6058] pc36at [ 90.645244][ T6058] comedi: valid board names for amplc_dio200 driver are: [ 90.674290][ T6058] pc212e [ 90.687194][ T6058] pc214e [ 90.690225][ T6058] pc215e [ 90.693171][ T6058] pc218e [ 90.703083][ T6058] pc272e [ 90.706089][ T6058] comedi: valid board names for comedi_parport driver are: [ 90.714207][ T6058] comedi_parport [ 90.720744][ T6058] comedi: valid board names for comedi_test driver are: [ 90.730654][ T6058] comedi_test [ 90.734055][ T6058] comedi: valid board names for comedi_bond driver are: [ 90.745679][ T6058] comedi_bond [ 91.267372][ T6143] ================================================================== [ 91.275488][ T6143] BUG: KASAN: slab-use-after-free in tcp_prune_ofo_queue+0x37e/0x6e0 [ 91.283586][ T6143] Read of size 4 at addr ffff888071cccbd0 by task syz.1.83/6143 [ 91.291223][ T6143] [ 91.293570][ T6143] CPU: 1 UID: 0 PID: 6143 Comm: syz.1.83 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 91.293592][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.293610][ T6143] Call Trace: [ 91.293617][ T6143] [ 91.293625][ T6143] dump_stack_lvl+0x189/0x250 [ 91.293653][ T6143] ? __virt_addr_valid+0x1c8/0x5c0 [ 91.293679][ T6143] ? rcu_is_watching+0x15/0xb0 [ 91.293702][ T6143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.293731][ T6143] ? rcu_is_watching+0x15/0xb0 [ 91.293754][ T6143] ? lock_release+0x4b/0x3e0 [ 91.293772][ T6143] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 91.293800][ T6143] ? __virt_addr_valid+0x1c8/0x5c0 [ 91.293826][ T6143] ? __virt_addr_valid+0x4a5/0x5c0 [ 91.293852][ T6143] print_report+0xca/0x230 [ 91.293870][ T6143] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 91.293897][ T6143] kasan_report+0x118/0x150 [ 91.293915][ T6143] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 91.293946][ T6143] tcp_prune_ofo_queue+0x37e/0x6e0 [ 91.293981][ T6143] tcp_try_rmem_schedule+0xb6b/0x1830 [ 91.294013][ T6143] tcp_data_queue+0x4e3/0x6380 [ 91.294049][ T6143] ? __pfx_tcp_data_queue+0x10/0x10 [ 91.294074][ T6143] ? __pfx_tcp_urg+0x10/0x10 [ 91.294098][ T6143] ? read_tsc+0x9/0x20 [ 91.294119][ T6143] tcp_rcv_established+0xf9e/0x1eb0 [ 91.294146][ T6143] ? rt_is_expired+0x1c/0x2d0 [ 91.294170][ T6143] ? __pfx_tcp_rcv_established+0x10/0x10 [ 91.294194][ T6143] ? rt_is_expired+0x1c/0x2d0 [ 91.294213][ T6143] ? rt_is_expired+0x1c/0x2d0 [ 91.294233][ T6143] ? rt_is_expired+0x250/0x2d0 [ 91.294252][ T6143] ? __pfx_ipv4_dst_check+0x10/0x10 [ 91.294273][ T6143] ? __pfx_ipv4_dst_check+0x10/0x10 [ 91.294293][ T6143] tcp_v4_do_rcv+0xa23/0xce0 [ 91.294314][ T6143] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 91.294331][ T6143] __release_sock+0x21c/0x350 [ 91.294358][ T6143] release_sock+0x5f/0x1f0 [ 91.294376][ T6143] sk_stream_wait_memory+0x724/0xf70 [ 91.294411][ T6143] ? __pfx_sk_stream_wait_memory+0x10/0x10 [ 91.294436][ T6143] ? __pfx_woken_wake_function+0x10/0x10 [ 91.294457][ T6143] ? __tcp_push_pending_frames+0xd2/0x360 [ 91.294477][ T6143] ? tcp_push+0x40f/0x660 [ 91.294502][ T6143] tcp_sendmsg_locked+0x1c62/0x56d0 [ 91.294553][ T6143] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 91.294577][ T6143] ? __local_bh_enable_ip+0x12d/0x1c0 [ 91.294600][ T6143] ? __local_bh_enable_ip+0x12d/0x1c0 [ 91.294626][ T6143] tcp_sendmsg+0x2f/0x50 [ 91.294651][ T6143] __sock_sendmsg+0x19c/0x270 [ 91.294678][ T6143] __sys_sendto+0x3bd/0x520 [ 91.294698][ T6143] ? __pfx___sys_sendto+0x10/0x10 [ 91.294721][ T6143] ? do_futex+0x395/0x420 [ 91.294761][ T6143] ? rcu_is_watching+0x15/0xb0 [ 91.294785][ T6143] __x64_sys_sendto+0xde/0x100 [ 91.294805][ T6143] do_syscall_64+0xfa/0x3b0 [ 91.294823][ T6143] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.294839][ T6143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.294856][ T6143] ? clear_bhb_loop+0x60/0xb0 [ 91.294876][ T6143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.294892][ T6143] RIP: 0033:0x7f47abb8e929 [ 91.294911][ T6143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.294925][ T6143] RSP: 002b:00007f47aca3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 91.294944][ T6143] RAX: ffffffffffffffda RBX: 00007f47abdb5fa0 RCX: 00007f47abb8e929 [ 91.294956][ T6143] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 91.294968][ T6143] RBP: 00007f47abc10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 91.294978][ T6143] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000000 [ 91.294989][ T6143] R13: 0000000000000000 R14: 00007f47abdb5fa0 R15: 00007ffd49dc8378 [ 91.295008][ T6143] [ 91.295014][ T6143] [ 91.657949][ T6143] Allocated by task 6143: [ 91.662270][ T6143] kasan_save_track+0x3e/0x80 [ 91.666957][ T6143] __kasan_slab_alloc+0x6c/0x80 [ 91.671816][ T6143] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 91.677712][ T6143] __alloc_skb+0x112/0x2d0 [ 91.682125][ T6143] tcp_stream_alloc_skb+0x3d/0x340 [ 91.687240][ T6143] tcp_write_xmit+0xeec/0x67f0 [ 91.692037][ T6143] __tcp_push_pending_frames+0x97/0x360 [ 91.697583][ T6143] tcp_rcv_established+0x1012/0x1eb0 [ 91.702883][ T6143] tcp_v4_do_rcv+0xa23/0xce0 [ 91.707472][ T6143] __release_sock+0x21c/0x350 [ 91.712144][ T6143] release_sock+0x5f/0x1f0 [ 91.716557][ T6143] tcp_sendmsg+0x39/0x50 [ 91.720810][ T6143] __sock_sendmsg+0x19c/0x270 [ 91.725490][ T6143] ____sys_sendmsg+0x52d/0x830 [ 91.730251][ T6143] ___sys_sendmsg+0x21f/0x2a0 [ 91.734935][ T6143] __sys_sendmmsg+0x227/0x430 [ 91.739609][ T6143] __x64_sys_sendmmsg+0xa0/0xc0 [ 91.744452][ T6143] do_syscall_64+0xfa/0x3b0 [ 91.748950][ T6143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.754842][ T6143] [ 91.757174][ T6143] Freed by task 6143: [ 91.761152][ T6143] kasan_save_track+0x3e/0x80 [ 91.765835][ T6143] kasan_save_free_info+0x46/0x50 [ 91.770942][ T6143] __kasan_slab_free+0x62/0x70 [ 91.775712][ T6143] kmem_cache_free+0x18f/0x400 [ 91.780473][ T6143] tcp_prune_ofo_queue+0x198/0x6e0 [ 91.785589][ T6143] tcp_try_rmem_schedule+0xb6b/0x1830 [ 91.790960][ T6143] tcp_data_queue+0x4e3/0x6380 [ 91.795726][ T6143] tcp_rcv_established+0xf9e/0x1eb0 [ 91.800928][ T6143] tcp_v4_do_rcv+0xa23/0xce0 [ 91.805530][ T6143] __release_sock+0x21c/0x350 [ 91.810205][ T6143] release_sock+0x5f/0x1f0 [ 91.814607][ T6143] sk_stream_wait_memory+0x724/0xf70 [ 91.819904][ T6143] tcp_sendmsg_locked+0x1c62/0x56d0 [ 91.825122][ T6143] tcp_sendmsg+0x2f/0x50 [ 91.829389][ T6143] __sock_sendmsg+0x19c/0x270 [ 91.834065][ T6143] __sys_sendto+0x3bd/0x520 [ 91.838570][ T6143] __x64_sys_sendto+0xde/0x100 [ 91.843326][ T6143] do_syscall_64+0xfa/0x3b0 [ 91.847818][ T6143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.853701][ T6143] [ 91.856018][ T6143] The buggy address belongs to the object at ffff888071ccca00 [ 91.856018][ T6143] which belongs to the cache skbuff_fclone_cache of size 488 [ 91.870759][ T6143] The buggy address is located 464 bytes inside of [ 91.870759][ T6143] freed 488-byte region [ffff888071ccca00, ffff888071cccbe8) [ 91.884550][ T6143] [ 91.886874][ T6143] The buggy address belongs to the physical page: [ 91.893291][ T6143] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x71ccc [ 91.902044][ T6143] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 91.910530][ T6143] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 91.918088][ T6143] page_type: f5(slab) [ 91.922069][ T6143] raw: 00fff00000000040 ffff88801eab2b40 ffffea0000aa2480 dead000000000004 [ 91.930645][ T6143] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 91.939221][ T6143] head: 00fff00000000040 ffff88801eab2b40 ffffea0000aa2480 dead000000000004 [ 91.947882][ T6143] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 91.956551][ T6143] head: 00fff00000000001 ffffea0001c73301 00000000ffffffff 00000000ffffffff [ 91.965218][ T6143] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 91.973875][ T6143] page dumped because: kasan: bad access detected [ 91.980283][ T6143] page_owner tracks the page as allocated [ 91.986016][ T6143] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5832, tgid 5832 (syz-executor), ts 77065776562, free_ts 26504129173 [ 92.007381][ T6143] post_alloc_hook+0x240/0x2a0 [ 92.012164][ T6143] get_page_from_freelist+0x21e4/0x22c0 [ 92.017703][ T6143] __alloc_frozen_pages_noprof+0x181/0x370 [ 92.023503][ T6143] alloc_pages_mpol+0x232/0x4a0 [ 92.028354][ T6143] allocate_slab+0x8a/0x370 [ 92.032851][ T6143] ___slab_alloc+0xbeb/0x1410 [ 92.037520][ T6143] kmem_cache_alloc_node_noprof+0x280/0x3c0 [ 92.043414][ T6143] __alloc_skb+0x112/0x2d0 [ 92.047821][ T6143] tcp_stream_alloc_skb+0x3d/0x340 [ 92.052933][ T6143] tcp_sendmsg_locked+0xefc/0x56d0 [ 92.058045][ T6143] tcp_sendmsg+0x2f/0x50 [ 92.062304][ T6143] __sock_sendmsg+0x19c/0x270 [ 92.066992][ T6143] sock_write_iter+0x258/0x330 [ 92.071789][ T6143] vfs_write+0x54b/0xa90 [ 92.076041][ T6143] ksys_write+0x145/0x250 [ 92.080366][ T6143] do_syscall_64+0xfa/0x3b0 [ 92.084869][ T6143] page last free pid 1 tgid 1 stack trace: [ 92.090667][ T6143] __free_frozen_pages+0xbc4/0xd30 [ 92.095775][ T6143] free_contig_range+0x1bd/0x4a0 [ 92.100710][ T6143] destroy_args+0x7e/0x5d0 [ 92.105114][ T6143] debug_vm_pgtable+0x404/0x420 [ 92.109960][ T6143] do_one_initcall+0x233/0x820 [ 92.114727][ T6143] do_initcall_level+0x137/0x1f0 [ 92.119742][ T6143] do_initcalls+0x69/0xd0 [ 92.124064][ T6143] kernel_init_freeable+0x3d9/0x590 [ 92.129254][ T6143] kernel_init+0x1d/0x1d0 [ 92.133581][ T6143] ret_from_fork+0x3f9/0x770 [ 92.138175][ T6143] ret_from_fork_asm+0x1a/0x30 [ 92.142938][ T6143] [ 92.145253][ T6143] Memory state around the buggy address: [ 92.150889][ T6143] ffff888071ccca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 92.158952][ T6143] ffff888071cccb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 92.167010][ T6143] >ffff888071cccb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 92.175070][ T6143] ^ [ 92.181744][ T6143] ffff888071cccc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 92.189795][ T6143] ffff888071cccc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 92.197840][ T6143] ================================================================== [ 92.205919][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.232797][ T6143] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 92.240024][ T6143] CPU: 0 UID: 0 PID: 6143 Comm: syz.1.83 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 92.251313][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.261371][ T6143] Call Trace: [ 92.264655][ T6143] [ 92.267592][ T6143] dump_stack_lvl+0x99/0x250 [ 92.272194][ T6143] ? __asan_memcpy+0x40/0x70 [ 92.276786][ T6143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.281991][ T6143] ? __pfx__printk+0x10/0x10 [ 92.286588][ T6143] vpanic+0x281/0x750 [ 92.290583][ T6143] ? preempt_schedule+0xae/0xc0 [ 92.295441][ T6143] ? __pfx_vpanic+0x10/0x10 [ 92.299940][ T6143] ? preempt_schedule_common+0x83/0xd0 [ 92.305398][ T6143] ? preempt_schedule+0xae/0xc0 [ 92.310247][ T6143] ? __pfx_preempt_schedule+0x10/0x10 [ 92.315623][ T6143] panic+0xb9/0xc0 [ 92.319339][ T6143] ? __pfx_panic+0x10/0x10 [ 92.323753][ T6143] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 92.329651][ T6143] ? is_module_address+0x17/0xf0 [ 92.334609][ T6143] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 92.339895][ T6143] check_panic_on_warn+0x89/0xb0 [ 92.344828][ T6143] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 92.350131][ T6143] end_report+0x78/0x160 [ 92.354368][ T6143] kasan_report+0x129/0x150 [ 92.358866][ T6143] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 92.364154][ T6143] tcp_prune_ofo_queue+0x37e/0x6e0 [ 92.369279][ T6143] tcp_try_rmem_schedule+0xb6b/0x1830 [ 92.374670][ T6143] tcp_data_queue+0x4e3/0x6380 [ 92.379445][ T6143] ? __pfx_tcp_data_queue+0x10/0x10 [ 92.384649][ T6143] ? __pfx_tcp_urg+0x10/0x10 [ 92.389238][ T6143] ? read_tsc+0x9/0x20 [ 92.393303][ T6143] tcp_rcv_established+0xf9e/0x1eb0 [ 92.398504][ T6143] ? rt_is_expired+0x1c/0x2d0 [ 92.403181][ T6143] ? __pfx_tcp_rcv_established+0x10/0x10 [ 92.408827][ T6143] ? rt_is_expired+0x1c/0x2d0 [ 92.413505][ T6143] ? rt_is_expired+0x1c/0x2d0 [ 92.418182][ T6143] ? rt_is_expired+0x250/0x2d0 [ 92.422942][ T6143] ? __pfx_ipv4_dst_check+0x10/0x10 [ 92.428135][ T6143] ? __pfx_ipv4_dst_check+0x10/0x10 [ 92.433327][ T6143] tcp_v4_do_rcv+0xa23/0xce0 [ 92.437913][ T6143] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 92.443015][ T6143] __release_sock+0x21c/0x350 [ 92.447693][ T6143] release_sock+0x5f/0x1f0 [ 92.452105][ T6143] sk_stream_wait_memory+0x724/0xf70 [ 92.457404][ T6143] ? __pfx_sk_stream_wait_memory+0x10/0x10 [ 92.463231][ T6143] ? __pfx_woken_wake_function+0x10/0x10 [ 92.468871][ T6143] ? __tcp_push_pending_frames+0xd2/0x360 [ 92.474605][ T6143] ? tcp_push+0x40f/0x660 [ 92.478942][ T6143] tcp_sendmsg_locked+0x1c62/0x56d0 [ 92.484164][ T6143] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 92.489728][ T6143] ? __local_bh_enable_ip+0x12d/0x1c0 [ 92.495100][ T6143] ? __local_bh_enable_ip+0x12d/0x1c0 [ 92.500470][ T6143] tcp_sendmsg+0x2f/0x50 [ 92.504718][ T6143] __sock_sendmsg+0x19c/0x270 [ 92.509410][ T6143] __sys_sendto+0x3bd/0x520 [ 92.513910][ T6143] ? __pfx___sys_sendto+0x10/0x10 [ 92.518926][ T6143] ? do_futex+0x395/0x420 [ 92.523266][ T6143] ? rcu_is_watching+0x15/0xb0 [ 92.528030][ T6143] __x64_sys_sendto+0xde/0x100 [ 92.532792][ T6143] do_syscall_64+0xfa/0x3b0 [ 92.537292][ T6143] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.542503][ T6143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.548563][ T6143] ? clear_bhb_loop+0x60/0xb0 [ 92.553240][ T6143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.559152][ T6143] RIP: 0033:0x7f47abb8e929 [ 92.563561][ T6143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.583166][ T6143] RSP: 002b:00007f47aca3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 92.591588][ T6143] RAX: ffffffffffffffda RBX: 00007f47abdb5fa0 RCX: 00007f47abb8e929 [ 92.599563][ T6143] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 92.607538][ T6143] RBP: 00007f47abc10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 92.615531][ T6143] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000000 [ 92.623505][ T6143] R13: 0000000000000000 R14: 00007f47abdb5fa0 R15: 00007ffd49dc8378 [ 92.631479][ T6143] [ 92.634621][ T6143] Kernel Offset: disabled [ 92.638933][ T6143] Rebooting in 86400 seconds..