last executing test programs: 7.313899924s ago: executing program 1 (id=1759): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x60) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x0, 0x1, 0x5, 0x7fff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0x5f780000}) 7.070468541s ago: executing program 1 (id=1762): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff09", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 4.119684281s ago: executing program 2 (id=1779): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1d0100001e61e410b1134200557b010203010902"], 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') inotify_init1(0x0) syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x2007, @fd_index=0xa, 0x0, 0x0, 0x0, 0x22}) io_uring_enter(0xffffffffffffffff, 0x3f70, 0x0, 0x0, 0x0, 0x0) 4.025882261s ago: executing program 1 (id=1781): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0xf, &(0x7f0000000280)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) sendmsg(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) 2.975968146s ago: executing program 1 (id=1789): gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)="fd", 0x1}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000002e80)={&(0x7f0000002d40)={0x2, 0x0, @local}, 0x10, &(0x7f0000002dc0)=[{&(0x7f0000002d80)='.', 0x34000}], 0x1, 0x0, 0x0, 0x1f000004}, 0x0) 2.80484492s ago: executing program 0 (id=1791): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x0, 0x0, 0x4}, {0x0, 0x0, 0xfd}, {}, {0x0, 0xff}, {0xfffe}, {0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x420000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 2.611086438s ago: executing program 2 (id=1792): r0 = syz_io_uring_setup(0xd19, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a40)=""/252, 0xfc}], 0x1}}], 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 2.582187725s ago: executing program 0 (id=1793): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x29, 0x0, 0x40000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.460842782s ago: executing program 0 (id=1794): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000bc0)=ANY=[], 0x0, 0x5, 0xda, &(0x7f0000000340)=""/218, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @local}]}, 0x28}}, 0x0) 1.776092028s ago: executing program 3 (id=1795): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000022032a3420f537000000352800000005000000000000160000000000003489d6d9e40e5ca5f2caf099a0d9953501000000d42a099f24e4f1cd074f2e61c3296e03a8cf7f6268775750246231c5c5854735212ddaac78848659cfb7327f9022c82b"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66bb0280000788", 0x14}], 0x1}, 0x0) 1.757018846s ago: executing program 1 (id=1796): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x2) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 1.608874106s ago: executing program 2 (id=1798): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcff7ffa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67e6ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4510555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cace339f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d000000009682e24b92533ac2a997d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f18215523167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3037ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cb8846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966f08294cd6f496e5dee734fe7da3770845cf442d488afd80e170000000000000000000000000000000000000000000000000000052007563885a1105000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb9aaa57a8abef8b64237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2c09000000bfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07000000ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbcbf2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00a40e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2add58ffb25f339297729a7a51810134d3dfbf71f651600eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47547f164391c673b6079e65d7295eed164ca63e4ea26d65f6b3ce0f6591d80dfb8f386bb74b5589829b6b067903000000000000003d9950d48c774eaa35b24fce696af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c80c57ed04dbc574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff559973c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511732f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a8340000000000000008029be3788dd8422b1ab7b4c9d5b7d8682fd750947109c713108e1386f5843a9ee29af30ecbeb26ff81f0921be501ade32a81aa175f4f8f117fc23b2adb38200f0f360e213534e14fae98502f92017d32f29777b6890ad5a103352dd80f036db18220932a2d26e0f9f807c4eb9ae9ba0b77c54bcf501873ce30286cdd633346bc11ed2259ab31f0bc2630a23738a646833b4d03f0028835f71cee1a5bafec9de0cfe4b5f0197fa9c7f5bcac99dbd85fb924db68d7384d4c5ab1087e4464592f278036d2b81e02a3be90a6b8757ece967569d66c8399796825e80f4dc6b3920ed9813a259de560000000000000000000000000000aeecc3447c907474d2129496fc6f6bc804965f8caaac7e2ef733f77708d618dbeae5352a5bc32d826a1b62cd698b4cfdc74ba5e8f18e808783fd5f32ef793a3069ac0906609aa9ca7dca982d6e903aea749f60beb35e2bee8eb43b8c65f4526c61281d6517f1f6e9741365acdaf8ae916575459f7d14087f826f97c94b09cd1275e576d17f76b39a6ac9e33030d67262209a52012dd9c9c60e45c51dd06ee7ba3d0c53a16070536d583ab8639d4fafe62997819033338a5ea4a5d2b61d05de4d5ad4c8dd0de3b98a1f4d6142851571b8d61715c7cb557373854f7eaf2f4e4bfd3dcb6c1d2e7b0bcb4d896092e90f95a61df4ffeeb64dee29de77fba312943bc53efb61138a5a82f7a828c04faf679edf2fa31cdfc57a2cb7ce03f3cdc40a1a20e82e54d10ce35579d7e065a8840abf4ce792ced89bd4288c8d427000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe0c, 0xffe0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847fe803500121100632f77fbac14141dac1414", 0x0, 0x71, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.573285954s ago: executing program 2 (id=1799): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0xf, &(0x7f0000000280)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) sendmsg(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) 1.556760033s ago: executing program 3 (id=1800): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0], 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_NMI(r3, 0xae9a) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x400}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.444842266s ago: executing program 1 (id=1802): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1d0100001e61e410b1134200557b010203010902"], 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f00000003c0), &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') inotify_init1(0x0) syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x2007, @fd_index=0xa, 0x0, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 1.404195019s ago: executing program 4 (id=1803): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x10}, {0x18, 0x84, 0x5, "10"}], 0x28}, 0x24048800) 1.352572818s ago: executing program 4 (id=1804): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000040000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.307027339s ago: executing program 3 (id=1805): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x82, &(0x7f0000000180), 0x127) 1.274260187s ago: executing program 0 (id=1806): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="796100180000000000007e"], 0x1c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000365858db111e2e2867ff61a7766b439abd9d00"/50, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0xffff, @mcast1}}}}}}, 0x0) inotify_init1(0x0) close_range(r9, 0xffffffffffffffff, 0x0) 1.220911869s ago: executing program 4 (id=1807): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0xb, 0x15}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="27030200590200000600002fb96dbcf706e10500000088a8", 0x18}], 0x1}, 0x0) 1.176714482s ago: executing program 3 (id=1808): r0 = syz_io_uring_setup(0xd19, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a40)=""/252, 0xfc}], 0x1}}], 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 1.037302593s ago: executing program 3 (id=1809): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x80) 912.759456ms ago: executing program 4 (id=1810): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022, 0x0, 0x0, 0x3}], 0x10, 0x0, @void, @value}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd201400006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 287.353154ms ago: executing program 2 (id=1811): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 166.577583ms ago: executing program 0 (id=1812): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 166.431328ms ago: executing program 3 (id=1813): syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010100, @local}, "aae91c5fc9dd52b15f75d9a524035f7f"}}}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224000100000000090400000103010000092100000001220100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000001400)=ANY=[@ANYBLOB="6022ab"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f00000002c0)="b9425b44651dd23241") 46.154985ms ago: executing program 4 (id=1814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 45.945102ms ago: executing program 0 (id=1815): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0], 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_NMI(r3, 0xae9a) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x400}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 45.660663ms ago: executing program 2 (id=1816): socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 4 (id=1817): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000bc0)=ANY=[], 0x0, 0x5, 0xda, &(0x7f0000000340)=""/218, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @local}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): T10181] team0 (unregistering): Port device team_slave_0 removed [ 1059.354964][T11487] Bluetooth: hci4: command tx timeout [ 1059.549349][T11633] team0: Port device team_slave_1 added [ 1059.607762][T11633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.614839][T11633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1059.641796][T11633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1059.674359][T11599] hsr_slave_0: entered promiscuous mode [ 1059.688202][T11599] hsr_slave_1: entered promiscuous mode [ 1059.702624][T11633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.715222][T11633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1059.741734][T11633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1059.843414][T11633] hsr_slave_0: entered promiscuous mode [ 1059.858072][T11633] hsr_slave_1: entered promiscuous mode [ 1059.864097][T11633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1059.871763][T11633] Cannot create hsr debugfs directory [ 1059.883646][T11542] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1059.942913][T11542] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1060.003813][T11542] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1060.045145][T11542] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1060.139883][T11520] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1060.209720][T11520] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1060.223162][T11520] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1060.287900][T11520] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1060.483539][T11520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.577718][T11520] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.592093][T11542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.626163][ T8831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.633287][ T8831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.645791][ T8831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.652917][ T8831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.682737][T11542] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.709331][T11599] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1060.719617][T11599] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1060.738814][T11599] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1060.762602][T11599] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1060.828080][ T8831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.835253][ T8831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.845936][ T8831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.853064][ T8831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.025099][T11633] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1061.056732][T11633] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1061.194012][T11633] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1061.236834][T11633] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1061.370559][T11558] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1061.406436][T11558] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1061.465934][T11558] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1061.503093][T11558] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1061.626779][T11520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.740896][T11599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.761394][T11542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.834052][T11520] veth0_vlan: entered promiscuous mode [ 1061.910080][T11599] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.933852][T11520] veth1_vlan: entered promiscuous mode [ 1062.003618][T11558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.030619][T10187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.037723][T10187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.060983][T10187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.068153][T10187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.093939][T11542] veth0_vlan: entered promiscuous mode [ 1062.124512][T11633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.190606][T11558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.210169][T11542] veth1_vlan: entered promiscuous mode [ 1062.250057][T10188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.257212][T10188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.280097][T11520] veth0_macvtap: entered promiscuous mode [ 1062.329289][T11520] veth1_macvtap: entered promiscuous mode [ 1062.344454][T10181] bridge_slave_1: left allmulticast mode [ 1062.350380][T10181] bridge_slave_1: left promiscuous mode [ 1062.357798][T10181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.372815][T10181] bridge_slave_0: left allmulticast mode [ 1062.378873][T10181] bridge_slave_0: left promiscuous mode [ 1062.384581][T10181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.406062][T10181] bridge_slave_1: left allmulticast mode [ 1062.411759][T10181] bridge_slave_1: left promiscuous mode [ 1062.419020][T10181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.430439][T10181] bridge_slave_0: left allmulticast mode [ 1062.444588][T10181] bridge_slave_0: left promiscuous mode [ 1062.467602][T10181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.487169][T10181] bridge_slave_1: left allmulticast mode [ 1062.492849][T10181] bridge_slave_1: left promiscuous mode [ 1062.505048][T10181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.523562][T10181] bridge_slave_0: left allmulticast mode [ 1062.532750][T10181] bridge_slave_0: left promiscuous mode [ 1062.553313][T10181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.983035][T10181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1063.005444][T10181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1063.038106][T10181] bond0 (unregistering): Released all slaves [ 1063.054657][T10181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1063.076783][T10181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1063.100462][T10181] bond0 (unregistering): Released all slaves [ 1063.115896][T10181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1063.136253][T10181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1063.158154][T10181] bond0 (unregistering): Released all slaves [ 1063.198834][T11633] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.214244][T10188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.221418][T10188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.312640][T10188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.319817][T10188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.364322][T11542] veth0_macvtap: entered promiscuous mode [ 1063.420610][T10181] hsr_slave_0: left promiscuous mode [ 1063.446768][T10181] hsr_slave_1: left promiscuous mode [ 1063.452809][T10181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1063.473770][T10181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1063.506027][T10181] hsr_slave_0: left promiscuous mode [ 1063.512153][T10181] hsr_slave_1: left promiscuous mode [ 1063.518560][T10181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1063.526650][T10181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1063.536141][T10181] hsr_slave_0: left promiscuous mode [ 1063.542063][T10181] hsr_slave_1: left promiscuous mode [ 1063.548233][T10181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1063.557088][T10181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1063.870196][T10181] team0 (unregistering): Port device team_slave_1 removed [ 1063.935451][T10181] team0 (unregistering): Port device team_slave_0 removed [ 1064.459428][T10181] team0 (unregistering): Port device team_slave_1 removed [ 1064.498118][T10181] team0 (unregistering): Port device team_slave_0 removed [ 1064.821455][T10181] team0 (unregistering): Port device team_slave_1 removed [ 1064.854250][T10181] team0 (unregistering): Port device team_slave_0 removed [ 1065.210804][T10188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.217982][T10188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1065.264386][T11542] veth1_macvtap: entered promiscuous mode [ 1065.278103][T11520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1065.298133][T11520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1065.336387][T11520] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.355117][T11520] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.363840][T11520] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.380999][T11520] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.443279][T11558] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1065.490869][T11558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1065.539392][T11542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.576951][T11542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.606089][T11542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1065.620320][T11542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.631777][T11542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.643382][T11542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1065.689871][T11542] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.704619][T11542] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.714830][T11542] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.723567][T11542] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.802050][T11599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1065.941034][T11558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.042182][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.061267][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.169416][T11558] veth0_vlan: entered promiscuous mode [ 1066.184294][T10188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.196597][T11599] veth0_vlan: entered promiscuous mode [ 1066.204456][T10188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.248131][T11633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.318435][T11599] veth1_vlan: entered promiscuous mode [ 1066.329178][T11558] veth1_vlan: entered promiscuous mode [ 1066.354058][T10190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.382628][T10183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.395596][T10190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.411247][T10183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.466174][T11558] veth0_macvtap: entered promiscuous mode [ 1066.501554][T11599] veth0_macvtap: entered promiscuous mode [ 1066.521751][T11558] veth1_macvtap: entered promiscuous mode [ 1066.539042][T11599] veth1_macvtap: entered promiscuous mode [ 1066.594619][T11599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.610670][T11599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.649545][T11599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.660798][T11599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.683635][T11599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1066.697919][T11558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.732115][T11558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.754130][T11558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.771514][T11558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.782352][T11558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.812674][T11558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.832395][T11558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1066.877151][T11599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.891521][T11599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.903388][T11599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.914160][T11599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.080507][T11599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1067.202007][T11599] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.291180][T11599] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.399719][T11599] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.502166][T11599] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.531390][T11558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.557750][T11558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.590846][T11558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.622080][T11558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.649809][T11558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.660357][T11558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.671791][T11558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1067.682718][T11558] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.692269][T11558] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.701097][T11558] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.709867][T11558] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.783359][T11633] veth0_vlan: entered promiscuous mode [ 1067.814045][T11633] veth1_vlan: entered promiscuous mode [ 1067.961199][T11633] veth0_macvtap: entered promiscuous mode [ 1068.067666][T11633] veth1_macvtap: entered promiscuous mode [ 1068.207638][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.221252][T10183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.233915][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.247441][T10183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.259616][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.273082][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.290619][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.304668][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.322754][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.340845][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.353066][T11633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1068.504992][ T5268] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1068.546721][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.558542][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.569060][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.580814][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.591911][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.603004][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.613555][T11633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.642495][T11633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.659544][ T5268] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.670940][ T5268] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1068.681698][T11633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1068.689124][ T5268] usb 1-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 1068.703312][T10183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.715758][T10187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.719004][T10183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.723696][T10187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.759134][T11633] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.768869][ T5268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.779790][T11633] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.800091][ T5268] usb 1-1: config 0 descriptor?? [ 1068.806237][T11633] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.822337][T11633] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.872948][T10187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.942556][T10187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.235296][ T8831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.291249][ T8831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.555014][ T5272] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1069.715018][ T5272] usb 4-1: Using ep0 maxpacket: 32 [ 1069.760730][ T5272] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1069.941388][ T5272] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1069.976267][T10187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.989186][T10187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.997609][ T5272] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1070.026114][ T5272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1070.072032][ T5272] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1070.085529][ T5272] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1070.098702][ T5272] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1070.107867][ T5272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.128131][ T5272] usb 4-1: config 0 descriptor?? [ 1070.618408][T11817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.640713][ T5272] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1070.777601][T11817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.614815][ T5343] usb 1-1: USB disconnect, device number 20 [ 1074.398173][T11855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.405720][T11855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.476147][T11833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1223'. [ 1074.533135][T11858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.540673][T11858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.550057][T11859] bridge_slave_1: left allmulticast mode [ 1074.556136][T11859] bridge_slave_1: left promiscuous mode [ 1074.561853][T11859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.570848][T11859] bridge_slave_0: left allmulticast mode [ 1074.576889][T11859] bridge_slave_0: left promiscuous mode [ 1074.583882][T11859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.764951][T11861] bridge_slave_1: left allmulticast mode [ 1074.805973][T11861] bridge_slave_1: left promiscuous mode [ 1074.811872][T11861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.270687][T11861] bridge_slave_0: left allmulticast mode [ 1075.300034][T11861] bridge_slave_0: left promiscuous mode [ 1075.381076][T11861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.698955][ T5268] usb 4-1: USB disconnect, device number 30 [ 1075.742255][ T5268] usblp0: removed [ 1076.381640][T11877] tipc: Started in network mode [ 1076.386861][T11877] tipc: Node identity ac1414aa, cluster identity 4711 [ 1076.395766][T11877] tipc: New replicast peer: 100.1.1.1 [ 1076.403037][T11877] tipc: Enabled bearer , priority 10 [ 1077.572412][ T5343] tipc: Node number set to 2886997162 [ 1078.475037][ T5272] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1078.658648][ T5272] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.675505][ T5272] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1078.686665][ T5272] usb 2-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 1078.764162][T11896] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1079.433105][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.449080][ T5272] usb 2-1: config 0 descriptor?? [ 1081.612595][T11914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.620106][T11914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.666989][T11915] bridge_slave_1: left allmulticast mode [ 1081.672679][T11915] bridge_slave_1: left promiscuous mode [ 1081.678457][T11915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.729588][T11915] bridge_slave_0: left allmulticast mode [ 1081.735519][T11915] bridge_slave_0: left promiscuous mode [ 1081.741275][T11915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.424070][ T937] usb 2-1: USB disconnect, device number 41 [ 1082.796986][T11917] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1243'. [ 1084.227092][T11934] tipc: Started in network mode [ 1084.232031][T11934] tipc: Node identity ac1414aa, cluster identity 4711 [ 1084.240416][T11934] tipc: New replicast peer: 100.1.1.1 [ 1084.246023][T11934] tipc: Enabled bearer , priority 10 [ 1085.594907][ T6576] tipc: Node number set to 2886997162 [ 1087.524272][ T5272] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1087.548151][ T5272] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1088.518345][ T937] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1088.815824][ T937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.835294][ T937] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1088.844303][ T937] usb 3-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 1088.901657][T11976] netlink: 'syz.1.1256': attribute type 1 has an invalid length. [ 1088.909566][T11976] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1256'. [ 1089.659438][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.685810][ T937] usb 3-1: config 0 descriptor?? [ 1090.719358][T11985] tipc: Enabled bearer , priority 10 [ 1090.731653][T11987] tipc: Started in network mode [ 1090.736749][T11987] tipc: Node identity ac1414aa, cluster identity 4711 [ 1090.743899][T11987] tipc: New replicast peer: 100.1.1.1 [ 1090.750539][T11987] tipc: Enabled bearer , priority 10 [ 1091.943802][ T937] tipc: Node number set to 2886997162 [ 1091.979583][ T5272] usb 3-1: USB disconnect, device number 24 [ 1094.100958][T12012] kvm: kvm [12011]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa00000000 [ 1094.845672][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1268'. [ 1095.440135][T12038] tipc: Enabling of bearer rejected, already enabled [ 1095.440354][T12018] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1095.457823][T12018] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1095.510476][T12047] tipc: Enabling of bearer rejected, already enabled [ 1095.853986][ T5272] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1095.873426][ T5272] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1095.974869][ T6576] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1096.148469][ T6576] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.160358][ T6576] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1096.195102][ T6576] usb 3-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 1096.224570][ T6576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.265300][ T6576] usb 3-1: config 0 descriptor?? [ 1098.256311][ T5270] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1098.475317][ T5270] usb 5-1: Using ep0 maxpacket: 8 [ 1098.511523][ T5270] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.817047][ T5272] usb 3-1: USB disconnect, device number 25 [ 1098.843538][ T5270] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.902434][ T5270] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1098.993843][ T5270] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1099.005771][ T5270] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1099.165636][ T5270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.177752][ T5270] usb 5-1: config 0 descriptor?? [ 1099.431282][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1283'. [ 1099.448538][T12084] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1099.458242][T12084] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1100.386170][ T5270] usbhid 5-1:0.0: can't add hid device: -71 [ 1100.392266][ T5270] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1100.426608][ T5270] usb 5-1: USB disconnect, device number 33 [ 1101.607557][ T6576] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1101.635550][ T6576] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1102.465341][T12098] kvm: kvm [12097]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa00000000 [ 1102.865695][ T6576] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1104.315899][ T6576] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.339591][ T6576] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1104.372754][ T6576] usb 1-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 1104.405728][ T6576] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.607086][ T6576] usb 1-1: config 0 descriptor?? [ 1104.757805][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'. [ 1104.771406][T12125] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1104.781066][T12125] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1106.394934][ T5270] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1106.594918][ T5270] usb 5-1: Using ep0 maxpacket: 16 [ 1106.749700][ T5270] usb 5-1: config 0 has no interfaces? [ 1106.858152][ T5270] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1106.868699][ T5270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.876918][ T5270] usb 5-1: Product: syz [ 1106.887382][ T5270] usb 5-1: Manufacturer: syz [ 1106.892696][ T5270] usb 5-1: SerialNumber: syz [ 1106.977064][ T5270] usb 5-1: config 0 descriptor?? [ 1107.272597][ T6576] usb 5-1: USB disconnect, device number 34 [ 1107.524811][ T937] usb 1-1: USB disconnect, device number 21 [ 1109.996541][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.020408][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.033323][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.051081][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.060513][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.093573][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.111330][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.121135][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.130218][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.138883][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.146604][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.164394][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.172125][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.180270][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.188573][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.196834][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.204254][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.212156][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.221069][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.228922][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.237002][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.245030][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.245744][ T46] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1110.252425][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.252459][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.260106][ T5270] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1110.268792][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.304290][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.311968][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.320155][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.328494][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.336596][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.344188][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.351674][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.359125][ T5257] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1110.368186][ T5257] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1110.386746][ T6576] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1111.194917][ T46] usb 1-1: device descriptor read/64, error -71 [ 1111.214806][ T5270] usb 4-1: Using ep0 maxpacket: 32 [ 1111.226517][ T5270] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1111.238476][ T5270] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1111.248000][ T5270] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1111.257213][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1111.501611][ T5270] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1111.511480][ T5270] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1111.524572][ T5270] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1111.534328][ T5270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.550756][ T5270] usb 4-1: config 0 descriptor?? [ 1111.591409][ T6576] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.603028][ T6576] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1111.612346][ T6576] usb 3-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 1111.621618][ T6576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.631868][ T46] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1111.643044][ T6576] usb 3-1: config 0 descriptor?? [ 1111.763767][T12169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.773267][ T5270] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1111.784780][T12169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.786488][ T46] usb 1-1: device descriptor read/64, error -71 [ 1111.935194][ T46] usb usb1-port1: attempt power cycle [ 1113.773113][ T6576] usb 4-1: USB disconnect, device number 31 [ 1113.831794][ T46] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1113.844286][ T6576] usblp0: removed [ 1114.344946][ T5268] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1114.401838][ T46] usb 1-1: device not accepting address 24, error -71 [ 1115.050860][ T6576] usb 3-1: USB disconnect, device number 26 [ 1115.098421][T12202] syz.4.1322: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1115.189072][ T5268] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1115.226270][T12202] CPU: 0 UID: 0 PID: 12202 Comm: syz.4.1322 Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 1115.237096][T12202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1115.247178][T12202] Call Trace: [ 1115.250477][T12202] [ 1115.253438][T12202] dump_stack_lvl+0x16c/0x1f0 [ 1115.258159][T12202] warn_alloc+0x24d/0x3a0 [ 1115.262537][T12202] ? __pfx_warn_alloc+0x10/0x10 [ 1115.267438][T12202] ? __get_vm_area_node+0x190/0x2d0 [ 1115.272770][T12202] ? __get_vm_area_node+0x1bc/0x2d0 [ 1115.278029][T12202] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 1115.284055][T12202] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 1115.289212][T12202] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1115.295596][T12202] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 1115.300748][T12202] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1115.306240][T12202] vmalloc_user_noprof+0x6b/0x90 [ 1115.311230][T12202] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 1115.316378][T12202] vb2_vmalloc_alloc+0x11e/0x3d0 [ 1115.321356][T12202] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1115.326846][T12202] __vb2_queue_alloc+0x896/0x1230 [ 1115.331918][T12202] vb2_core_reqbufs+0xa73/0xfb0 [ 1115.336809][T12202] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1115.342221][T12202] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1115.348148][T12202] ? rcu_is_watching+0x12/0xc0 [ 1115.352927][T12202] ? trace_contention_end+0xea/0x140 [ 1115.358222][T12202] vb2_reqbufs+0x1a5/0x1f0 [ 1115.362653][T12202] ? __video_do_ioctl+0x4a2/0xf00 [ 1115.367692][T12202] ? __pfx_vb2_reqbufs+0x10/0x10 [ 1115.372668][T12202] ? __pfx___mutex_lock+0x10/0x10 [ 1115.377708][T12202] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1115.383623][T12202] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 1115.388931][T12202] v4l_reqbufs+0x14c/0x1e0 [ 1115.393365][T12202] __video_do_ioctl+0xaf0/0xf00 [ 1115.398235][T12202] ? __pfx___video_do_ioctl+0x10/0x10 [ 1115.403635][T12202] video_usercopy+0x4ce/0x1600 [ 1115.408418][T12202] ? __pfx___video_do_ioctl+0x10/0x10 [ 1115.413804][T12202] ? __pfx_video_usercopy+0x10/0x10 [ 1115.419036][T12202] v4l2_ioctl+0x1ba/0x250 [ 1115.423376][T12202] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1115.428240][T12202] __x64_sys_ioctl+0x18f/0x220 [ 1115.433017][T12202] do_syscall_64+0xcd/0x250 [ 1115.437542][T12202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.443460][T12202] RIP: 0033:0x7f656397dff9 [ 1115.447883][T12202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1115.467508][T12202] RSP: 002b:00007f6564837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1115.475931][T12202] RAX: ffffffffffffffda RBX: 00007f6563b35f80 RCX: 00007f656397dff9 [ 1115.483903][T12202] RDX: 00000000200000c0 RSI: 00000000c0145608 RDI: 0000000000000007 [ 1115.491882][T12202] RBP: 00007f65639f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1115.499855][T12202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1115.507827][T12202] R13: 0000000000000000 R14: 00007f6563b35f80 R15: 00007fffb7b08408 [ 1115.515815][T12202] [ 1115.526109][ T5268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.534150][ T5268] usb 2-1: Product: syz [ 1115.550958][ T5268] usb 2-1: Manufacturer: syz [ 1115.561066][T12202] Mem-Info: [ 1115.564005][ T5268] usb 2-1: SerialNumber: syz [ 1115.564285][T12202] active_anon:5017 inactive_anon:0 isolated_anon:0 [ 1115.564285][T12202] active_file:14915 inactive_file:39447 isolated_file:0 [ 1115.564285][T12202] unevictable:768 dirty:67 writeback:0 [ 1115.564285][T12202] slab_reclaimable:10312 slab_unreclaimable:99544 [ 1115.564285][T12202] mapped:21409 shmem:1289 pagetables:813 [ 1115.564285][T12202] sec_pagetables:0 bounce:0 [ 1115.564285][T12202] kernel_misc_reclaimable:0 [ 1115.564285][T12202] free:1333821 free_pcp:2222 free_cma:0 [ 1115.623815][ T5268] usb 2-1: config 0 descriptor?? [ 1115.626733][T12202] Node 0 active_anon:20268kB inactive_anon:0kB active_file:59660kB inactive_file:157716kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:85736kB dirty:268kB writeback:0kB shmem:3620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10820kB pagetables:3452kB sec_pagetables:0kB all_unreclaimable? no [ 1115.733375][T12202] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1115.776058][T12202] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1115.812179][T12202] lowmem_reserve[]: 0 2461 2461 0 0 [ 1115.818284][T12202] Node 0 DMA32 free:1400972kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:22736kB inactive_anon:0kB active_file:59660kB inactive_file:157408kB unevictable:1536kB writepending:268kB present:3129332kB managed:2549172kB mlocked:0kB bounce:0kB free_pcp:392kB local_pcp:268kB free_cma:0kB [ 1115.871029][ T5268] hso 2-1:0.0: Failed to find INT IN ep [ 1115.925733][ T5268] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1115.953144][T12202] lowmem_reserve[]: 0 0 0 0 0 [ 1115.963436][T12202] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 1116.003094][T12202] lowmem_reserve[]: 0 0 0 0 0 [ 1116.032102][T12202] Node 1 Normal free:3923968kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1116.062325][T12202] lowmem_reserve[]: 0 0 0 0 0 [ 1116.072774][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.079841][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.087648][T12202] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1116.100660][T12202] Node 0 DMA32: 29*4kB (UM) 25*8kB (UE) 1288*16kB (UME) 1113*32kB (UME) 1420*64kB (UME) 724*128kB (UME) 216*256kB (UME) 53*512kB (UM) 22*1024kB (UME) 12*2048kB (UM) 249*4096kB (UM) = 1389532kB [ 1116.180956][ T5268] usb 2-1: USB disconnect, device number 42 [ 1116.255150][T12202] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1116.314527][T12202] Node 1 Normal: 168*4kB (UME) 54*8kB (UME) 45*16kB (UME) 197*32kB (UME) 85*64kB (UME) 36*128kB (UE) 15*256kB (UME) 7*512kB (UM) 3*1024kB (UME) 4*2048kB (UE) 949*4096kB (M) = 3923968kB [ 1116.348655][T12202] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1116.358632][T12202] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1116.368970][T12202] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1116.378701][T12202] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1116.388279][T12202] 61474 total pagecache pages [ 1116.393142][T12202] 0 pages in swap cache [ 1116.397410][T12202] Free swap = 124524kB [ 1116.401649][T12202] Total swap = 124996kB [ 1116.405934][T12202] 2097051 pages RAM [ 1116.413564][T12202] 0 pages HighMem/MovableOnly [ 1116.423985][T12202] 428036 pages reserved [ 1116.431745][T12202] 0 pages cma reserved [ 1116.723796][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1116.734592][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1116.745158][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1116.753062][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1116.760696][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1116.768503][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1116.779368][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1116.786961][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1116.794431][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1116.802038][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1116.812518][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1116.830761][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1116.838567][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1116.846692][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1116.854540][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1116.865308][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1116.874123][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1116.893335][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1117.675226][ T6395] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1117.692419][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1117.699986][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1117.707448][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1117.714977][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1117.722388][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1117.729852][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1117.737306][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1117.745135][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1117.752553][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1117.760300][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1117.767905][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1117.775699][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1117.783126][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1117.790886][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1117.799267][ T46] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1117.816060][ T46] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1118.104991][ T6395] usb 1-1: device descriptor read/64, error -71 [ 1118.355124][ T6395] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1118.507334][ T6395] usb 1-1: device descriptor read/64, error -71 [ 1118.698838][ T6395] usb usb1-port1: attempt power cycle [ 1118.827613][ T5257] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1118.884868][ T5268] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1119.182137][ T6395] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1119.275851][ T6395] usb 1-1: device descriptor read/8, error -71 [ 1119.517720][ T6395] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1119.534851][ T5257] usb 4-1: Using ep0 maxpacket: 16 [ 1119.542699][ T5257] usb 4-1: config 0 has no interfaces? [ 1119.548393][ T5268] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.566222][ T5268] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1119.578378][ T5268] usb 5-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 1119.588612][ T5268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.598097][ T5257] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1119.607381][ T5257] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.615552][ T5257] usb 4-1: Product: syz [ 1119.622004][ T5268] usb 5-1: config 0 descriptor?? [ 1119.628006][ T5257] usb 4-1: Manufacturer: syz [ 1119.633831][ T5257] usb 4-1: SerialNumber: syz [ 1119.653900][ T5257] usb 4-1: config 0 descriptor?? [ 1119.815122][ T6395] usb 1-1: device descriptor read/8, error -71 [ 1120.078073][T12260] tipc: Enabling of bearer rejected, already enabled [ 1120.092188][ T6395] usb usb1-port1: unable to enumerate USB device [ 1120.885490][ T5257] usb 4-1: USB disconnect, device number 32 [ 1122.275617][ T5257] usb 5-1: USB disconnect, device number 35 [ 1124.705236][ T5257] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1124.809576][ T29] audit: type=1400 audit(1728232303.748:370): avc: denied { map } for pid=12314 comm="syz.0.1356" path="/dev/nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1124.834843][ T29] audit: type=1400 audit(1728232303.748:371): avc: denied { execute } for pid=12314 comm="syz.0.1356" path="/dev/nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1125.017671][ T29] audit: type=1400 audit(1728232303.968:372): avc: denied { append } for pid=12314 comm="syz.0.1356" name="nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1125.140395][ T5257] usb 5-1: Using ep0 maxpacket: 16 [ 1125.341530][ T5257] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1125.350423][ T5257] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.371336][ T5257] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1125.380384][ T5257] usb 5-1: config 1 has no interface number 1 [ 1125.386781][ T5257] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1125.399700][ T5257] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1125.762387][ T5257] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1125.771714][ T5257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.782575][ T5257] usb 5-1: Product: syz [ 1125.786921][ T5257] usb 5-1: Manufacturer: syz [ 1125.791672][ T5257] usb 5-1: SerialNumber: syz [ 1125.796739][ T29] audit: type=1400 audit(1728232304.748:373): avc: denied { name_bind } for pid=12329 comm="syz.1.1358" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1125.965116][ T5257] usb 5-1: USB disconnect, device number 36 [ 1126.299933][T11785] udevd[11785]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1126.939480][T12343] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1361'. [ 1127.374899][ T5268] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1127.540902][ T5268] usb 3-1: Using ep0 maxpacket: 8 [ 1127.591408][ T5268] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.604792][ T5268] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.604829][ T5268] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1127.604867][ T5268] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1127.604907][ T5268] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1127.604937][ T5268] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.637421][ T5268] usb 3-1: config 0 descriptor?? [ 1128.334932][ T6395] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1128.853005][ T5268] usbhid 3-1:0.0: can't add hid device: -71 [ 1128.861020][ T5268] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1128.876339][ T5268] usb 3-1: USB disconnect, device number 27 [ 1128.955103][ T6395] usb 5-1: Using ep0 maxpacket: 16 [ 1128.964158][ T6395] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1128.966340][T12360] block nbd0: shutting down sockets [ 1128.994801][ T6395] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.005807][ T6395] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1129.033180][ T6395] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1129.043130][ T6395] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1129.098385][ T6395] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1129.107790][ T6395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1129.115955][ T6395] usb 5-1: SerialNumber: syz [ 1129.258430][T12355] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1129.373647][T12364] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1130.166439][ T46] usb 5-1: USB disconnect, device number 37 [ 1130.200415][ T29] audit: type=1400 audit(1728232309.148:374): avc: denied { create } for pid=12368 comm="syz.1.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1130.523555][ T29] audit: type=1400 audit(1728232309.468:375): avc: denied { bind } for pid=12378 comm="syz.2.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1130.544557][ T29] audit: type=1400 audit(1728232309.478:376): avc: denied { write } for pid=12378 comm="syz.2.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1131.474957][ T5257] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1131.707586][ T5257] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.746583][ T5257] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1131.790188][ T5257] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1131.820979][ T5257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1131.863734][ T5257] usb 2-1: SerialNumber: syz [ 1132.121630][ T5257] usb 2-1: 0:2 : does not exist [ 1132.154811][ T5257] usb 2-1: unit 5 not found! [ 1132.208421][ T5257] usb 2-1: USB disconnect, device number 43 [ 1132.297658][T11785] udevd[11785]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1132.400084][T12400] tipc: Started in network mode [ 1132.405042][T12400] tipc: Node identity ac1414aa, cluster identity 4711 [ 1132.412054][T12400] tipc: New replicast peer: 100.1.1.1 [ 1132.417727][T12400] tipc: Enabled bearer , priority 10 [ 1133.534803][ T46] tipc: Node number set to 2886997162 [ 1133.654888][ T937] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1133.854903][ T937] usb 3-1: config 0 has an invalid interface number: 112 but max is 0 [ 1133.883647][ T937] usb 3-1: config 0 has no interface number 0 [ 1133.893789][ T937] usb 3-1: config 0 interface 112 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1133.980968][ T937] usb 3-1: config 0 interface 112 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1134.009767][ T937] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 1134.059475][ T937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.091181][ T937] usb 3-1: Product: syz [ 1134.114568][ T937] usb 3-1: Manufacturer: syz [ 1134.148922][ T937] usb 3-1: SerialNumber: syz [ 1134.181070][ T937] usb 3-1: config 0 descriptor?? [ 1134.211684][T12423] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1134.260722][ T937] mvusb_mdio 3-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 1135.227699][ T5257] usb 3-1: USB disconnect, device number 28 [ 1136.892195][T12463] tipc: Enabling of bearer rejected, already enabled [ 1139.582370][T12495] tipc: Started in network mode [ 1139.587397][T12495] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1139.594634][T12495] tipc: Enabled bearer , priority 10 [ 1140.249245][T12500] kvm: kvm [12499]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 1140.275216][T12500] kvm: kvm [12499]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 1140.284785][ T6395] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1140.352095][T12507] tipc: Enabling of bearer rejected, already enabled [ 1140.594878][ T6576] tipc: Node number set to 10136234 [ 1140.616899][ T6395] usb 1-1: Using ep0 maxpacket: 8 [ 1140.669504][ T6395] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.788049][ T6395] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.897386][ T6395] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1140.957116][ T6395] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1141.050408][ T6395] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1141.084838][ T6395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.403695][ T6395] usb 1-1: config 0 descriptor?? [ 1142.096689][ T6395] usbhid 1-1:0.0: can't add hid device: -71 [ 1142.102743][ T6395] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1142.112845][ T6395] usb 1-1: USB disconnect, device number 30 [ 1143.467183][T12529] netlink: 'syz.3.1422': attribute type 1 has an invalid length. [ 1143.475147][T12529] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1422'. [ 1144.816998][T12544] tipc: Enabling of bearer rejected, already enabled [ 1145.315462][T12545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1428'. [ 1145.998619][ T46] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 1146.344844][ T5257] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1146.402221][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1146.425245][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.444802][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1146.453988][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.486435][ T46] usb 5-1: config 0 descriptor?? [ 1146.518012][ T5257] usb 3-1: Using ep0 maxpacket: 8 [ 1146.537991][ T5257] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.557437][ T5257] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.598529][ T5257] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1146.611582][ T46] hub 5-1:0.0: USB hub found [ 1146.714889][ T5257] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1146.764919][ T5257] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1146.910368][ T46] hub 5-1:0.0: 1 port detected [ 1147.026403][ T5257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.037543][ T5257] usb 3-1: config 0 descriptor?? [ 1147.039906][ T46] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1147.088579][ T46] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1147.309752][T12571] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1437'. [ 1148.440000][ T5257] usbhid 3-1:0.0: can't add hid device: -71 [ 1148.446189][ T5257] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1148.689456][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 1148.704892][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1148.738672][ T5257] usb 3-1: USB disconnect, device number 29 [ 1148.740659][ T46] usb 5-1: USB disconnect, device number 38 [ 1149.021303][ T5257] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1149.318769][ T5257] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1153.205401][T12600] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1153.961323][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 1153.971005][T12618] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1153.980649][T12618] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1154.499471][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1154.506994][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1154.514416][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1154.525872][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1154.533337][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1154.542854][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1154.551988][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1154.566923][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1154.576783][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1154.584285][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1154.643718][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1154.668772][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1154.700552][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1154.744149][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1154.762787][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1154.770661][ T937] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1154.800639][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1154.815957][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1154.832341][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1154.847915][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1154.857890][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1154.867046][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1154.874612][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1154.882657][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1155.027201][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1155.034869][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1155.048681][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1155.065669][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1155.179801][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1155.188814][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1155.196505][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1155.204019][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1155.211600][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1155.219320][ T5257] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1155.561824][ T5257] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1155.919296][ T937] usb 1-1: no configurations [ 1155.926243][ T937] usb 1-1: can't read configurations, error -22 [ 1156.224896][ T937] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1156.402467][ T937] usb 1-1: no configurations [ 1156.408081][ T937] usb 1-1: can't read configurations, error -22 [ 1156.431853][ T937] usb usb1-port1: attempt power cycle [ 1157.167535][ T5272] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1157.334826][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.370965][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.412727][ T5272] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1157.519269][ T5272] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1157.534803][ T937] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1157.554511][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.565081][ T937] usb 1-1: device descriptor read/8, error -71 [ 1157.572182][ T5272] usb 2-1: config 0 descriptor?? [ 1158.044242][ T5272] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.000D/input/input7 [ 1158.389864][ T5272] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.000D/input/input8 [ 1158.885494][ T5272] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.000D/input/input9 [ 1158.948267][ T5272] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.000D/input/input10 [ 1159.024894][ T5257] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1159.188703][ T5272] hid-udraw 0003:20D6:CB17.000D: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.1-1/input0 [ 1159.247856][ T5257] usb 4-1: Using ep0 maxpacket: 8 [ 1159.309797][ T5257] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.331164][ T5257] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1159.344018][ T5257] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1159.357359][ T5257] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1159.364216][ T5257] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1160.093011][ T5257] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.118034][ T5257] usb 4-1: config 0 descriptor?? [ 1160.133220][ T5272] usb 2-1: USB disconnect, device number 44 [ 1160.237761][ T6395] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1160.656819][ T6395] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1160.664451][ T6395] usb 1-1: can't read configurations, error -61 [ 1160.805092][ T6395] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1161.046459][ T6395] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1161.368909][ T5257] usbhid 4-1:0.0: can't add hid device: -71 [ 1161.375029][ T5257] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1161.385307][ T5257] usb 4-1: USB disconnect, device number 33 [ 1161.414867][ T6395] usb 1-1: can't read configurations, error -61 [ 1161.416514][T12707] afs: Unknown parameter 'ob{8user' [ 1161.458730][ T6395] usb usb1-port1: attempt power cycle [ 1161.984901][ T5257] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 1162.033899][ T6395] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1162.081770][ T6395] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1162.092269][ T6395] usb 1-1: can't read configurations, error -61 [ 1162.159822][ T5257] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 1162.168838][ T5257] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1162.185888][ T5257] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1162.205969][ T5257] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1162.246584][ T5257] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9B, changing to 0x8B [ 1162.280461][ T5257] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt [ 1162.312134][ T5257] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1162.363473][ T5257] usb 4-1: string descriptor 0 read error: -22 [ 1162.370581][ T5257] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1162.521625][ T5257] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.544198][ T5257] usb 4-1: config 0 descriptor?? [ 1162.575470][T12713] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1162.586796][ T5257] hub 4-1:0.0: bad descriptor, ignoring hub [ 1162.592762][ T5257] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1162.654975][ T5257] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 1162.888661][T12728] netlink: 'syz.4.1488': attribute type 1 has an invalid length. [ 1162.896664][T12728] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1488'. [ 1163.172723][ T29] audit: type=1400 audit(1728232342.108:377): avc: denied { map } for pid=12727 comm="syz.2.1487" path="socket:[55171]" dev="sockfs" ino=55171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1163.521018][ T5270] usb 4-1: USB disconnect, device number 34 [ 1163.654558][ T29] audit: type=1400 audit(1728232342.108:378): avc: denied { read } for pid=12727 comm="syz.2.1487" path="socket:[55171]" dev="sockfs" ino=55171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1163.752508][ T29] audit: type=1400 audit(1728232342.168:379): avc: denied { read append } for pid=12712 comm="syz.3.1482" name="mice" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1163.787190][ T29] audit: type=1400 audit(1728232342.168:380): avc: denied { ioctl open } for pid=12712 comm="syz.3.1482" path="/dev/input/mice" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1163.837637][ T29] audit: type=1400 audit(1728232342.198:381): avc: denied { append } for pid=12731 comm="syz.4.1489" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1163.870252][ T29] audit: type=1400 audit(1728232342.298:382): avc: denied { map } for pid=12731 comm="syz.4.1489" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1163.937253][ T29] audit: type=1400 audit(1728232342.388:383): avc: denied { write execute } for pid=12731 comm="syz.4.1489" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1164.164874][ T5257] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1164.497210][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1164.504950][ T5257] usb 1-1: Using ep0 maxpacket: 32 [ 1164.513669][ T5257] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1164.524360][ T5257] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1164.566446][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1164.593589][ T5257] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1164.615663][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1164.641223][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1164.657063][ T5257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1164.669736][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1164.675026][T12755] misc userio: No port type given on /dev/userio [ 1164.677969][ T5257] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1164.687114][T12755] misc userio: The device must be registered before sending interrupts [ 1164.707353][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1164.716684][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1164.725147][ T5257] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1164.738661][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1164.748179][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1164.756524][ T5257] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1164.766014][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1164.773628][ T5257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.802676][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1164.825847][ T5257] usb 1-1: config 0 descriptor?? [ 1164.839458][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1164.847111][ T5268] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1164.870377][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1164.883704][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1164.892603][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1164.917480][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1164.937274][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1164.949866][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1164.958733][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1164.967468][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1164.985302][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1165.495134][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1165.502860][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1165.505741][T12741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.512899][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1165.526365][ T5257] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1165.541326][ T5268] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1165.554790][ T5268] usb 4-1: can't read configurations, error -61 [ 1165.566641][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1165.580715][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1165.589420][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1165.597693][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1165.605170][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1165.612585][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1165.626144][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1165.638983][T12741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.639964][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1165.661853][ T937] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1165.692297][ T937] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1165.702098][ T5268] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1165.861776][T12769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1503'. [ 1165.883399][T12769] syz_tun: entered promiscuous mode [ 1165.976832][T12769] macvtap1: entered promiscuous mode [ 1165.982330][T12769] macvtap1: entered allmulticast mode [ 1165.996698][T12769] syz_tun: entered allmulticast mode [ 1166.136461][ T5268] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1166.144190][ T5268] usb 4-1: can't read configurations, error -61 [ 1166.151065][ T5268] usb usb4-port1: attempt power cycle [ 1166.184840][ T5257] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1166.336923][ T5257] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.361157][ T5257] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.401774][ T5257] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1166.448927][ T5257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.496120][ T5268] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1166.513409][ T5257] usb 3-1: config 0 descriptor?? [ 1166.576957][ T5268] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1166.667183][T12778] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1167.309281][ T5268] usb 4-1: can't read configurations, error -61 [ 1167.327243][ T5257] pyra 0003:1E7D:2CF6.000F: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 1167.444835][ T5268] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1167.800267][ T5257] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device [ 1167.808720][ T5257] pyra 0003:1E7D:2CF6.000F: couldn't install mouse [ 1167.891230][ T5268] usb 4-1: device descriptor read/8, error -71 [ 1167.925451][ T5257] pyra 0003:1E7D:2CF6.000F: probe with driver pyra failed with error -32 [ 1167.960323][ T5257] usb 3-1: USB disconnect, device number 30 [ 1168.005076][ T5268] usb usb4-port1: unable to enumerate USB device [ 1169.275014][ T5343] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1169.304358][T12804] afs: Unknown parameter 'ob{8user' [ 1169.309899][ T5270] usb 1-1: USB disconnect, device number 39 [ 1169.320467][ T5270] usblp0: removed [ 1169.349199][ T5221] Bluetooth: hci3: command 0x0406 tx timeout [ 1169.354869][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 1169.355280][ T5227] Bluetooth: hci2: command 0x0406 tx timeout [ 1169.557685][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.574255][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.581794][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.589296][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.596885][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.604299][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.612453][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.620584][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.628068][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.635598][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.643002][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.650461][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.658035][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.665531][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.672934][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.680458][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.688223][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.695703][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.703108][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.711226][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.719508][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.726963][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.734364][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.741905][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.746548][ T5343] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1169.750644][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.766602][ T5343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1169.772153][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.780460][ T5343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1169.786871][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.804223][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.812941][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.820447][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.828184][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.835769][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.843303][ T5257] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1169.875105][ T46] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1169.925837][ T5343] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1169.939470][ T5343] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1169.948848][ T5343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.067578][ T5343] usb 5-1: config 0 descriptor?? [ 1170.144818][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 1170.178289][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.442730][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.478414][ T46] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1170.505262][ T5257] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1170.547337][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1170.554046][ T46] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1170.572699][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.754854][ T5268] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1170.811361][ T46] usb 2-1: config 0 descriptor?? [ 1170.829037][ T5343] plantronics 0003:047F:FFFF.0011: ignoring exceeding usage max [ 1170.843928][ T5343] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 1170.858077][ T5343] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1170.873292][T12830] tipc: Enabling of bearer rejected, already enabled [ 1170.907162][ T5268] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1170.916057][ T5268] usb 3-1: can't read configurations, error -61 [ 1171.054960][ T5268] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1171.217366][ T5268] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1171.226294][ T5268] usb 3-1: can't read configurations, error -61 [ 1171.237269][ T5268] usb usb3-port1: attempt power cycle [ 1171.438322][ T46] usbhid 2-1:0.0: can't add hid device: -71 [ 1171.444527][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1171.478416][ T46] usb 2-1: USB disconnect, device number 45 [ 1171.574865][ T5268] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1171.665240][ T5268] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1171.689745][ T5268] usb 3-1: can't read configurations, error -61 [ 1172.477923][ T5343] usb 5-1: reset high-speed USB device number 39 using dummy_hcd [ 1172.511460][ T5268] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1172.645459][ T5268] usb 3-1: device descriptor read/8, error -71 [ 1172.655966][T12846] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1528'. [ 1172.856259][ T5268] usb usb3-port1: unable to enumerate USB device [ 1172.995629][ T5257] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1173.444964][ T46] usb 5-1: USB disconnect, device number 39 [ 1173.545044][ T5268] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1173.566587][ T5257] usb 2-1: Using ep0 maxpacket: 32 [ 1173.574235][ T5257] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1173.591278][ T5257] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1173.617923][ T5257] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1173.649524][ T5257] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1173.684868][ T937] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1173.695130][ T5257] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1173.717477][ T5268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1173.742610][ T5257] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1173.761486][ T5268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1173.773800][ T5268] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1173.775205][T12865] netlink: 'syz.4.1535': attribute type 1 has an invalid length. [ 1173.796213][ T5257] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1173.808169][ T5257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.410002][T12865] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1174.465150][ T5221] Bluetooth: hci1: command 0x0406 tx timeout [ 1174.472377][T11487] Bluetooth: hci4: command 0x0406 tx timeout [ 1174.555233][ T5268] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1174.564333][ T5268] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.572831][ T937] usb 4-1: Using ep0 maxpacket: 32 [ 1174.586986][ T5257] usb 2-1: config 0 descriptor?? [ 1174.593437][ T937] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1174.602808][ T937] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1174.644823][ T937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.658169][ T5268] usb 3-1: config 0 descriptor?? [ 1174.665275][T12848] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1174.703252][ T937] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1174.754924][ T937] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1174.795188][ T937] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1174.833882][T12843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.842801][ T5257] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1174.871298][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.093072][T12878] tipc: New replicast peer: 100.1.1.1 [ 1175.099740][T12878] tipc: Enabled bearer , priority 10 [ 1175.889019][ T937] usb 4-1: config 0 descriptor?? [ 1176.274547][T12843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.703331][T11805] usb 2-1: USB disconnect, device number 46 [ 1176.726446][T11805] usblp0: removed [ 1176.736415][ T937] usb 4-1: USB disconnect, device number 39 [ 1176.746462][ T5268] usbhid 3-1:0.0: can't add hid device: -71 [ 1176.752479][ T5268] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1176.780023][ T5268] usb 3-1: USB disconnect, device number 35 [ 1176.788286][T12884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1539'. [ 1176.954914][ T29] audit: type=1400 audit(1728232355.868:384): avc: denied { getopt } for pid=12893 comm="syz.3.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1177.054146][T12901] netlink: 'syz.0.1547': attribute type 1 has an invalid length. [ 1177.539422][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.546132][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.464780][T12906] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1179.354945][ T5268] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1179.505199][ T5268] usb 5-1: Using ep0 maxpacket: 32 [ 1179.521099][ T5268] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1179.559434][ T5268] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1179.581725][ T5268] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1179.593361][ T5268] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1179.611378][ T5268] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1179.622109][ T5268] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1179.645695][ T5268] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1179.662244][ T5268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.683357][ T5268] usb 5-1: config 0 descriptor?? [ 1179.912968][T12922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.922475][ T5268] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1180.021313][T12922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1180.269886][ T29] audit: type=1400 audit(1728232359.218:385): avc: denied { watch } for pid=12940 comm="syz.1.1559" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1180.318502][ T5268] usb 5-1: USB disconnect, device number 40 [ 1180.383584][ T5268] usblp0: removed [ 1180.694836][ T5257] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1181.596685][ T5257] usb 1-1: config 0 has an invalid interface number: 18 but max is 0 [ 1181.604971][ T5257] usb 1-1: config 0 has no interface number 0 [ 1181.611140][ T5257] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.640936][ T5257] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1181.652492][ T5257] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 1181.662027][ T5257] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1181.683039][ T5257] usb 1-1: Manufacturer: syz [ 1181.701960][ T5257] usb 1-1: config 0 descriptor?? [ 1182.306950][ T5257] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.18/0003:054C:03D5.0012/input/input12 [ 1182.372316][ T5257] sony 0003:054C:03D5.0012: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.0-1/input18 [ 1182.475651][ T5257] usb 1-1: USB disconnect, device number 40 [ 1182.774914][ T937] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1183.464791][ T937] usb 5-1: Using ep0 maxpacket: 8 [ 1183.481536][ T937] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.507348][ T937] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.540525][ T937] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1183.605187][ T937] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1183.619327][ T937] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1183.631401][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.644946][ T937] usb 5-1: config 0 descriptor?? [ 1183.647662][T12988] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1575'. [ 1184.193335][T11805] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1184.904831][ T5257] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1184.975117][T11805] usb 2-1: Using ep0 maxpacket: 32 [ 1184.985605][ T937] usbhid 5-1:0.0: can't add hid device: -71 [ 1184.989162][T11805] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1184.991676][ T937] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1185.027180][ T937] usb 5-1: USB disconnect, device number 41 [ 1185.058280][T11805] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1185.065023][ T5257] usb 1-1: device descriptor read/64, error -71 [ 1185.121445][T11805] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1185.141615][T11805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1185.151971][T11805] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1185.168967][T11805] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1185.189984][T11805] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1185.201679][T11805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.222185][T11805] usb 2-1: config 0 descriptor?? [ 1185.304936][ T5257] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1185.454877][ T5257] usb 1-1: device descriptor read/64, error -71 [ 1185.490171][T12984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.537049][T12984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.575824][ T5257] usb usb1-port1: attempt power cycle [ 1185.584318][T11805] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1185.863784][ T5269] usb 2-1: USB disconnect, device number 47 [ 1185.903207][ T5269] usblp0: removed [ 1185.956185][ T5257] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1186.005204][ T5257] usb 1-1: device descriptor read/8, error -71 [ 1186.254857][ T5257] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1186.335058][T13022] overlayfs: missing 'lowerdir' [ 1187.156555][ T5257] usb 1-1: device descriptor read/8, error -71 [ 1187.267633][ T5257] usb usb1-port1: unable to enumerate USB device [ 1187.454846][ T5269] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1187.616641][ T5269] usb 2-1: Using ep0 maxpacket: 8 [ 1187.649444][ T5269] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1187.682394][ T5269] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 1187.701702][ T5269] usb 2-1: config 8 has no interface number 0 [ 1187.708593][ T5269] usb 2-1: config 8 interface 255 has no altsetting 0 [ 1187.721747][ T5269] usb 2-1: string descriptor 0 read error: -22 [ 1187.728666][ T5269] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1187.757351][ T5269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.246900][ T5269] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.1-1, 00:00:00:00:00:00. [ 1189.378338][ T5269] usb 2-1: USB disconnect, device number 48 [ 1190.890482][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1601'. [ 1190.943359][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1601'. [ 1190.985668][T13079] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1602'. [ 1191.125073][T13085] overlayfs: missing 'lowerdir' [ 1191.855739][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1191.863183][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1191.880650][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1191.890856][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1191.933601][T13098] Bluetooth: MGMT ver 1.23 [ 1192.173181][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1192.181975][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1192.189992][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1192.198072][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1192.206072][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1192.213731][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1192.224878][ T46] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1193.061219][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1193.133892][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1193.160560][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1193.187305][ T46] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1193.195206][ T46] usb 2-1: can't read configurations, error -61 [ 1193.426461][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1193.433909][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1193.445469][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1193.453072][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1193.460726][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1193.469184][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1194.129429][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1194.150921][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1194.169462][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1194.189749][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1194.422793][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1194.430818][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1194.438885][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1194.446366][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1194.453782][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1194.461256][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1194.468728][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1194.476230][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1194.483640][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1194.491771][ T5343] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1194.546985][T13142] overlayfs: missing 'lowerdir' [ 1195.062115][ T46] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1195.256967][ T5343] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1195.476977][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 1195.658897][T13147] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1619'. [ 1196.515201][T13147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1619'. [ 1196.525505][T13147] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1619'. [ 1196.547477][T13147] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1619'. [ 1198.269268][T10225] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1198.276597][ T46] usb 2-1: device descriptor read/64, error -71 [ 1198.285637][T10225] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1198.293652][T10225] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1198.385032][ T46] usb usb2-port1: attempt power cycle [ 1198.411171][T10225] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1198.418857][T10225] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1198.429813][T10225] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1198.554782][ T5268] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1199.575285][T13189] overlayfs: missing 'lowerdir' [ 1199.818388][ T5268] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice= 0.00 [ 1199.827595][ T5268] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.838388][ T5268] usb 3-1: config 0 descriptor?? [ 1200.515296][T10225] Bluetooth: hci5: command tx timeout [ 1200.746053][T13174] chnl_net:caif_netlink_parms(): no params data found [ 1200.761035][ T5268] gs_usb 3-1:0.0: Configuring for 136 interfaces [ 1200.794955][ T5268] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 1200.835498][ T5268] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 1200.890094][T13039] syz_tun (unregistering): left allmulticast mode [ 1200.997306][ T5268] usb 3-1: USB disconnect, device number 36 [ 1201.182895][ T29] audit: type=1400 audit(1728232380.128:386): avc: denied { getopt } for pid=13196 comm="syz.3.1632" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1201.238439][T13174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.241754][T13200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1632'. [ 1201.256893][T13174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.282273][T13174] bridge_slave_0: entered allmulticast mode [ 1201.289661][T13174] bridge_slave_0: entered promiscuous mode [ 1201.298202][T13174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.305613][T13174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.312953][T13174] bridge_slave_1: entered allmulticast mode [ 1201.322107][T13174] bridge_slave_1: entered promiscuous mode [ 1201.427012][T13174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1201.492138][T13174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.168438][T10188] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.366097][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'. [ 1202.525023][T13174] team0: Port device team_slave_0 added [ 1202.555074][T10225] Bluetooth: hci5: command tx timeout [ 1202.812168][T10188] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.836068][T13174] team0: Port device team_slave_1 added [ 1203.603515][T13225] afs: Unknown parameter 'ob{8user' [ 1204.632606][T10225] Bluetooth: hci5: command tx timeout [ 1204.782560][ T29] audit: type=1326 audit(1728232383.728:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13248 comm="syz.0.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9217dff9 code=0x7ffc0000 [ 1204.904869][ T29] audit: type=1326 audit(1728232383.728:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13248 comm="syz.0.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9217dff9 code=0x7ffc0000 [ 1204.942483][T10188] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.006354][T13174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1205.031541][T13174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1205.225041][ T29] audit: type=1326 audit(1728232383.728:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13248 comm="syz.0.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe9217dff9 code=0x7ffc0000 [ 1205.249278][ T29] audit: type=1326 audit(1728232383.728:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13248 comm="syz.0.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9217dff9 code=0x7ffc0000 [ 1205.273866][ T29] audit: type=1326 audit(1728232383.728:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13248 comm="syz.0.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9217dff9 code=0x7ffc0000 [ 1205.297993][ T29] audit: type=1326 audit(1728232383.758:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13248 comm="syz.0.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe9217dff9 code=0x7ffc0000 [ 1205.321802][ T29] audit: type=1326 audit(1728232383.758:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13248 comm="syz.0.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9217dff9 code=0x7ffc0000 [ 1205.346033][ T29] audit: type=1326 audit(1728232383.758:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13248 comm="syz.0.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9217dff9 code=0x7ffc0000 [ 1205.370155][ T29] audit: type=1326 audit(1728232383.758:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13248 comm="syz.0.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe9217dff9 code=0x7ffc0000 [ 1205.567747][T13174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1205.582495][T13174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1205.589591][T13174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1205.618743][T13174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1205.712334][T10188] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.885650][T13174] hsr_slave_0: entered promiscuous mode [ 1205.993439][T13174] hsr_slave_1: entered promiscuous mode [ 1206.036046][T13174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1206.043661][T13174] Cannot create hsr debugfs directory [ 1206.716941][T10225] Bluetooth: hci5: command tx timeout [ 1207.010178][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.028809][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.041129][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.065023][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.131512][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.181681][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.222132][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.235836][T10188] bridge_slave_1: left allmulticast mode [ 1207.241516][T10188] bridge_slave_1: left promiscuous mode [ 1207.247909][T10188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.249397][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.272201][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.279829][ T5257] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1207.289161][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.289983][T10188] bridge_slave_0: left allmulticast mode [ 1207.298549][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.315153][ T6576] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1207.323996][T10188] bridge_slave_0: left promiscuous mode [ 1207.330621][T10188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.334512][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.375012][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.382639][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.390657][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.402349][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.412439][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.422956][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.437343][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.446567][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.454018][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.466835][ T5257] usb 1-1: config 0 has no interfaces? [ 1207.469127][ T6576] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1207.474556][ T5257] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1207.498230][ T6576] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1207.503127][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.528465][ T6576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.532620][ T5257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.545102][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.552385][ T6576] usb 4-1: config 0 descriptor?? [ 1207.565838][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.573267][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.587197][ T5257] usb 1-1: config 0 descriptor?? [ 1207.637851][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.664912][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.674260][T10188] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1207.682637][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.682674][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.682704][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.682735][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.682766][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.682796][ T5268] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.690691][ T5268] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1207.821189][ T5269] usb 1-1: USB disconnect, device number 45 [ 1208.000252][ T6576] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 1208.027803][ T6576] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0015/input/input13 [ 1208.143071][ T6576] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1208.553555][ T46] usb 4-1: USB disconnect, device number 40 [ 1208.868679][T10188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1208.896906][T10188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1208.949524][T10188] bond0 (unregistering): Released all slaves [ 1208.980541][T10188] bond1 (unregistering): Released all slaves [ 1209.195092][T10188] tipc: Disabling bearer [ 1209.213224][T10188] tipc: Left network mode [ 1209.621516][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1661'. [ 1210.264064][T13302] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1210.273863][T13302] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1210.371892][T13309] netlink: 'syz.3.1664': attribute type 1 has an invalid length. [ 1210.891051][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1210.891070][ T29] audit: type=1400 audit(1728232389.838:403): avc: denied { ioctl } for pid=13323 comm="syz.3.1667" path="socket:[57282]" dev="sockfs" ino=57282 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1211.222498][T10188] hsr_slave_0: left promiscuous mode [ 1211.302673][T10188] hsr_slave_1: left promiscuous mode [ 1211.311318][T10188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1211.334977][T10188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1211.485678][T10188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1211.496060][T10188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1211.573727][T10188] veth1_macvtap: left promiscuous mode [ 1211.603107][T10188] veth0_macvtap: left promiscuous mode [ 1211.636278][T10188] veth1_vlan: left promiscuous mode [ 1211.835166][T10188] veth0_vlan: left promiscuous mode [ 1213.208532][T10188] team0 (unregistering): Port device team_slave_1 removed [ 1213.266666][T10188] team0 (unregistering): Port device team_slave_0 removed [ 1213.691747][T13342] tipc: Enabling of bearer rejected, already enabled [ 1213.892398][T13174] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1213.945262][T13358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1674'. [ 1214.054653][T13174] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1214.066336][T13174] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1214.095643][T13174] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1214.304372][T13373] netlink: 'syz.3.1677': attribute type 1 has an invalid length. [ 1214.616836][T13174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.711117][T13174] 8021q: adding VLAN 0 to HW filter on device team0 [ 1214.745962][T10181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.753127][T10181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1214.782829][T13390] loop7: detected capacity change from 0 to 16384 [ 1214.816368][T10181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.823509][T10181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1214.908810][T13395] misc userio: Invalid payload size [ 1214.914992][T13394] Invalid logical block size (1) [ 1214.930533][T13395] misc userio: No port type given on /dev/userio [ 1214.951981][T13395] misc userio: The device must be registered before sending interrupts [ 1215.654779][ T5343] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1215.729747][T13174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1215.826523][ T5272] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1215.847674][ T5343] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice= 0.00 [ 1215.847930][T13417] netlink: 'syz.0.1691': attribute type 1 has an invalid length. [ 1215.864849][ T5343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.972440][ T5343] usb 4-1: config 0 descriptor?? [ 1215.985302][ T5272] usb 2-1: Using ep0 maxpacket: 32 [ 1216.015046][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.027262][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.037687][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1216.050522][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1216.070223][ T5272] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1216.084089][ T5272] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1216.144289][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.202275][ T5272] usb 2-1: config 0 descriptor?? [ 1216.213701][T13174] veth0_vlan: entered promiscuous mode [ 1216.241710][T13174] veth1_vlan: entered promiscuous mode [ 1216.312165][T13174] veth0_macvtap: entered promiscuous mode [ 1216.373880][T13174] veth1_macvtap: entered promiscuous mode [ 1216.448590][T13174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.508860][T13174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.545868][T13174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.578247][ T5343] gs_usb 4-1:0.0: Couldn't get device config: (err=-71) [ 1216.585384][ T5343] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 1216.595250][T13174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.596880][ T5343] usb 4-1: USB disconnect, device number 41 [ 1216.618358][T13174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.631440][T13174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.644953][T13174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.656544][T13174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.964959][T11805] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1217.166103][T13174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.228842][T11805] usb 3-1: device descriptor read/64, error -71 [ 1217.317928][ T5272] ntrig 0003:1B96:000A.0016: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 1217.338158][ T5272] usb 2-1: USB disconnect, device number 52 [ 1217.371040][T13174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.410152][T13174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.424306][T13174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.436518][T13174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.447131][T13174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.458416][T13174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.468420][T13174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.479098][T13174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.490372][T13174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1217.517673][T13174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.540518][T13174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.558349][T13174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.568559][T13174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.585571][T11805] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1217.687493][T10188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.700203][T10188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.725992][T10184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.733914][T10184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.742302][T11805] usb 3-1: device descriptor read/64, error -71 [ 1217.913509][ T5268] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1218.032815][T11805] usb usb3-port1: attempt power cycle [ 1218.484870][T11805] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1218.507063][T11805] usb 3-1: device descriptor read/8, error -71 [ 1218.542122][ T5268] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.676272][ T5268] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1218.688202][ T5268] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1218.697414][ T5268] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1218.886429][ T5268] usb 4-1: SerialNumber: syz [ 1218.924939][T11805] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1219.050357][T13458] netlink: 'syz.4.1704': attribute type 1 has an invalid length. [ 1219.102115][ T5268] usb 4-1: 0:2 : does not exist [ 1219.181771][ T5268] usb 4-1: USB disconnect, device number 42 [ 1219.196048][T11805] usb 3-1: device descriptor read/8, error -71 [ 1219.316010][T11805] usb usb3-port1: unable to enumerate USB device [ 1219.668601][T11785] udevd[11785]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1221.436054][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1718'. [ 1222.155537][T11805] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1222.938632][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1715'. [ 1222.948533][T13484] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1222.959441][T13484] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1223.219363][T11805] usb 3-1: device descriptor read/64, error -71 [ 1223.474868][T11805] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1223.616119][T11805] usb 3-1: device descriptor read/64, error -71 [ 1223.738102][T11805] usb usb3-port1: attempt power cycle [ 1223.889493][ T5343] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 1224.106686][T11805] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1224.136707][T11805] usb 3-1: device descriptor read/8, error -71 [ 1224.205663][ T5343] usb 5-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1224.221916][ T5343] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1224.254382][ T5343] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1224.285254][ T5343] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1224.305712][ T5343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.144827][ T5343] usb 5-1: string descriptor 0 read error: -71 [ 1225.167872][ T5343] hub 5-1:32.0: USB hub found [ 1225.185961][ T5343] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 1225.240891][T13531] ALSA: seq fatal error: cannot create timer (-22) [ 1225.285979][ T5343] usb 5-1: USB disconnect, device number 42 [ 1225.499623][T13536] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1732'. [ 1225.884236][T13537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1733'. [ 1226.578072][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1737'. [ 1226.592105][T13555] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1226.601718][T13555] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1226.744882][ T29] audit: type=1400 audit(1728232405.398:404): avc: denied { name_bind } for pid=13549 comm="syz.1.1736" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1227.179377][T13560] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1739'. [ 1228.365759][T13563] afs: Unknown parameter 'ob{8user' [ 1231.644877][ T6576] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1232.015654][ T6576] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.025836][ T6576] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1232.036194][ T6576] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1232.054755][ T6576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1232.062788][ T6576] usb 2-1: SerialNumber: syz [ 1232.883213][ T29] audit: type=1400 audit(1728232411.808:405): avc: denied { ioctl } for pid=13641 comm="syz.4.1772" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1232.927776][ T6576] usb 2-1: 0:2 : does not exist [ 1232.960041][ T6576] usb 2-1: USB disconnect, device number 53 [ 1232.994820][T11785] udevd[11785]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1233.096732][T10494] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1233.446891][T10494] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1233.456203][T10494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.467191][T10494] usb 1-1: config 0 descriptor?? [ 1233.514827][T10494] cp210x 1-1:0.0: cp210x converter detected [ 1233.588441][T13659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1778'. [ 1233.611685][T13659] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1233.621916][T13659] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1234.409698][T10494] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1234.525760][ T29] audit: type=1400 audit(1728232413.478:406): avc: denied { create } for pid=13667 comm="syz.3.1782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1234.549102][T13668] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1234.555290][ T5268] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1234.557160][T13668] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1234.644417][T10494] usb 1-1: USB disconnect, device number 46 [ 1234.680220][T10494] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1234.711208][T10494] cp210x 1-1:0.0: device disconnected [ 1234.725170][ T5268] usb 3-1: Using ep0 maxpacket: 16 [ 1234.736948][T13669] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1777'. [ 1234.756742][ T5268] usb 3-1: config 0 has no interfaces? [ 1234.775476][ T5268] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1234.796365][ T5268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.804393][ T5268] usb 3-1: Product: syz [ 1234.829117][ T5268] usb 3-1: Manufacturer: syz [ 1234.838804][ T5268] usb 3-1: SerialNumber: syz [ 1234.856326][ T5268] usb 3-1: config 0 descriptor?? [ 1235.081839][ T5268] usb 3-1: USB disconnect, device number 45 [ 1235.879886][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1790'. [ 1235.893865][T13696] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1235.903545][T13696] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1236.654270][T13703] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1236.660874][T13703] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1236.839252][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1801'. [ 1236.957538][T13723] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1804'. [ 1237.094879][ T5272] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1237.254960][ T5272] usb 2-1: Using ep0 maxpacket: 16 [ 1237.275229][ T5272] usb 2-1: config 0 has no interfaces? [ 1237.291334][ T5272] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1237.307522][ T5272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.315695][ T5272] usb 2-1: Product: syz [ 1237.319884][ T5272] usb 2-1: Manufacturer: syz [ 1237.324501][ T5272] usb 2-1: SerialNumber: syz [ 1237.336390][ T5272] usb 2-1: config 0 descriptor?? [ 1237.450724][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1806'. [ 1237.464973][T13733] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1237.474571][T13733] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1237.968548][ T29] audit: type=1400 audit(1728232416.918:407): avc: denied { write } for pid=13736 comm="syz.3.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1238.073636][ T5268] usb 2-1: USB disconnect, device number 54 [ 1238.187555][T13738] syz.4.1810 (13738) used greatest stack depth: 20592 bytes left [ 1238.347409][T13751] BUG: Bad page state in process syz.2.1816 pfn:794a9 [ 1238.354486][T13751] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880794a90d8 pfn:0x794a9 [ 1238.364632][T13751] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1238.371811][T13751] raw: 00fff00000000000 dead000000000040 ffff888029328000 0000000000000000 [ 1238.380453][T13751] raw: ffff8880794a90d8 0000000000000001 00000000ffffffff 0000000000000000 [ 1238.389084][T13751] page dumped because: page_pool leak [ 1238.394480][T13751] page_owner tracks the page as allocated [ 1238.400251][T13751] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13751, tgid 13748 (syz.2.1816), ts 1238328377594, free_ts 1238195014940 [ 1238.417704][T13751] post_alloc_hook+0x2d1/0x350 [ 1238.422521][T13751] get_page_from_freelist+0x101e/0x3070 [ 1238.428142][T13751] __alloc_pages_noprof+0x223/0x25c0 [ 1238.433451][T13751] alloc_pages_bulk_noprof+0x77c/0x1110 [ 1238.439052][T13751] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1238.445020][T13751] page_pool_alloc_netmem+0xc4/0x160 [ 1238.450334][T13751] page_pool_alloc_pages+0x1a/0x60 [ 1238.455505][T13751] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 1238.461682][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1238.467012][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1238.472407][T13751] __sys_bpf+0xfc6/0x49a0 [ 1238.476807][T13751] __x64_sys_bpf+0x78/0xc0 [ 1238.481256][T13751] do_syscall_64+0xcd/0x250 [ 1238.485809][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.491737][T13751] page last free pid 13743 tgid 13743 stack trace: [ 1238.498304][T13751] free_unref_folios+0x956/0x1310 [ 1238.503355][T13751] folios_put_refs+0x551/0x750 [ 1238.508184][T13751] free_pages_and_swap_cache+0x36d/0x510 [ 1238.513834][T13751] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1238.519871][T13751] tlb_finish_mmu+0x168/0x7b0 [ 1238.524587][T13751] exit_mmap+0x3df/0xb30 [ 1238.528884][T13751] __mmput+0x12a/0x480 [ 1238.532973][T13751] mmput+0x62/0x70 [ 1238.536751][T13751] do_exit+0x9bf/0x2d70 [ 1238.540946][T13751] do_group_exit+0xd3/0x2a0 [ 1238.545514][T13751] __x64_sys_exit_group+0x3e/0x50 [ 1238.550576][T13751] x64_sys_call+0x14a9/0x16a0 [ 1238.555326][T13751] do_syscall_64+0xcd/0x250 [ 1238.559867][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.565833][T13751] Modules linked in: [ 1238.569764][T13751] CPU: 1 UID: 0 PID: 13751 Comm: syz.2.1816 Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 1238.580551][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1238.590619][T13751] Call Trace: [ 1238.593889][T13751] [ 1238.596825][T13751] dump_stack_lvl+0x16c/0x1f0 [ 1238.601529][T13751] bad_page+0xb3/0x1f0 [ 1238.605611][T13751] ? __pfx_bad_page+0x10/0x10 [ 1238.610314][T13751] ? page_bad_reason+0x9d/0x1e0 [ 1238.615180][T13751] free_unref_page+0x657/0xdc0 [ 1238.619965][T13751] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1238.627094][T13751] ? __phys_addr+0xc6/0x150 [ 1238.631638][T13751] skb_free_head+0xa0/0x1d0 [ 1238.636171][T13751] skb_release_data+0x560/0x730 [ 1238.641064][T13751] ? packet_rcv+0x16c/0x15a0 [ 1238.645685][T13751] ? rcu_is_watching+0x12/0xc0 [ 1238.650492][T13751] sk_skb_reason_drop+0x129/0x1a0 [ 1238.655535][T13751] packet_rcv+0x16c/0x15a0 [ 1238.659973][T13751] ? __pfx_packet_rcv+0x10/0x10 [ 1238.664834][T13751] __netif_receive_skb_list_core+0x41e/0x950 [ 1238.670868][T13751] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1238.677375][T13751] ? trace_lock_acquire+0x14a/0x1d0 [ 1238.682588][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1238.688933][T13751] ? lock_acquire+0x2f/0xb0 [ 1238.693440][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1238.699802][T13751] netif_receive_skb_list_internal+0x753/0xdb0 [ 1238.705974][T13751] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1238.712669][T13751] ? __pfx_eth_type_trans+0x10/0x10 [ 1238.717874][T13751] ? __build_skb_around+0x278/0x3b0 [ 1238.723090][T13751] netif_receive_skb_list+0x4f/0x4a0 [ 1238.728386][T13751] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 1238.734654][T13751] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 1238.741271][T13751] ? bpf_test_timer_continue+0x150/0x3d0 [ 1238.746917][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1238.752214][T13751] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1238.758034][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1238.763937][T13751] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1238.769858][T13751] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1238.775689][T13751] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1238.780982][T13751] ? 0xffffffffa0003b40 [ 1238.785139][T13751] ? 0xffffffffa0003b40 [ 1238.789295][T13751] ? 0xffffffffa0003b40 [ 1238.793448][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1238.799350][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1238.804747][T13751] ? lock_acquire+0x2f/0xb0 [ 1238.809258][T13751] ? __fget_files+0x40/0x3f0 [ 1238.813862][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1238.819684][T13751] ? fput+0x30/0x390 [ 1238.823589][T13751] ? __bpf_prog_get+0xa0/0x290 [ 1238.828364][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1238.834180][T13751] __sys_bpf+0xfc6/0x49a0 [ 1238.838523][T13751] ? __pfx___sys_bpf+0x10/0x10 [ 1238.843296][T13751] ? __schedule+0xefd/0x5750 [ 1238.847898][T13751] ? __fget_files+0x23a/0x3f0 [ 1238.852592][T13751] ? do_futex+0x123/0x350 [ 1238.856934][T13751] ? __pfx_do_futex+0x10/0x10 [ 1238.861631][T13751] ? xfd_validate_state+0x5d/0x180 [ 1238.866751][T13751] ? rcu_is_watching+0x12/0xc0 [ 1238.871526][T13751] __x64_sys_bpf+0x78/0xc0 [ 1238.875949][T13751] ? lockdep_hardirqs_on+0x7c/0x110 [ 1238.881154][T13751] do_syscall_64+0xcd/0x250 [ 1238.885667][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.891569][T13751] RIP: 0033:0x7f599957dff9 [ 1238.895985][T13751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1238.915598][T13751] RSP: 002b:00007f599a360038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1238.924014][T13751] RAX: ffffffffffffffda RBX: 00007f5999735f80 RCX: 00007f599957dff9 [ 1238.931994][T13751] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 1238.939979][T13751] RBP: 00007f59995f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1238.947964][T13751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1238.955948][T13751] R13: 0000000000000000 R14: 00007f5999735f80 R15: 00007ffccf4ff5e8 [ 1238.963958][T13751] [ 1238.967054][T13751] Disabling lock debugging due to kernel taint [ 1238.973226][T13751] BUG: Bad page state in process syz.2.1816 pfn:7fce1 [ 1238.980110][T13751] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x211 pfn:0x7fce1 [ 1238.989094][T13751] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1238.996428][T13751] raw: 00fff00000000000 dead000000000040 ffff888029328000 0000000000000000 [ 1239.005055][T13751] raw: 0000000000000211 0000000000000001 00000000ffffffff 0000000000000000 [ 1239.013647][T13751] page dumped because: page_pool leak [ 1239.019063][T13751] page_owner tracks the page as allocated [ 1239.024802][T13751] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13751, tgid 13748 (syz.2.1816), ts 1238328365582, free_ts 1238195022947 [ 1239.042222][T13751] post_alloc_hook+0x2d1/0x350 [ 1239.047028][T13751] get_page_from_freelist+0x101e/0x3070 [ 1239.048211][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.052581][T13751] __alloc_pages_noprof+0x223/0x25c0 [ 1239.052613][T13751] alloc_pages_bulk_noprof+0x77c/0x1110 [ 1239.059017][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.064100][T13751] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1239.081878][T13751] page_pool_alloc_netmem+0xc4/0x160 [ 1239.087217][T13751] page_pool_alloc_pages+0x1a/0x60 [ 1239.092355][T13751] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 1239.098553][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1239.103868][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1239.109289][T13751] __sys_bpf+0xfc6/0x49a0 [ 1239.113634][T13751] __x64_sys_bpf+0x78/0xc0 [ 1239.118064][T13751] do_syscall_64+0xcd/0x250 [ 1239.122563][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.128504][T13751] page last free pid 13743 tgid 13743 stack trace: [ 1239.135029][T13751] free_unref_folios+0x956/0x1310 [ 1239.140086][T13751] folios_put_refs+0x551/0x750 [ 1239.144884][T13751] free_pages_and_swap_cache+0x36d/0x510 [ 1239.150538][T13751] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1239.156550][T13751] tlb_finish_mmu+0x168/0x7b0 [ 1239.161220][T13751] exit_mmap+0x3df/0xb30 [ 1239.165483][T13751] __mmput+0x12a/0x480 [ 1239.169571][T13751] mmput+0x62/0x70 [ 1239.173289][T13751] do_exit+0x9bf/0x2d70 [ 1239.177453][T13751] do_group_exit+0xd3/0x2a0 [ 1239.181948][T13751] __x64_sys_exit_group+0x3e/0x50 [ 1239.187033][T13751] x64_sys_call+0x14a9/0x16a0 [ 1239.191729][T13751] do_syscall_64+0xcd/0x250 [ 1239.196259][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.202175][T13751] Modules linked in: [ 1239.206096][T13751] CPU: 1 UID: 0 PID: 13751 Comm: syz.2.1816 Tainted: G B 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 1239.218350][T13751] Tainted: [B]=BAD_PAGE [ 1239.222496][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1239.232537][T13751] Call Trace: [ 1239.235804][T13751] [ 1239.238724][T13751] dump_stack_lvl+0x16c/0x1f0 [ 1239.243593][T13751] bad_page+0xb3/0x1f0 [ 1239.247684][T13751] ? __pfx_bad_page+0x10/0x10 [ 1239.252358][T13751] ? page_bad_reason+0x9d/0x1e0 [ 1239.257204][T13751] free_unref_page+0x657/0xdc0 [ 1239.261980][T13751] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 1239.267961][T13751] ? __phys_addr+0xc6/0x150 [ 1239.272469][T13751] skb_free_head+0xa0/0x1d0 [ 1239.276968][T13751] skb_release_data+0x560/0x730 [ 1239.281816][T13751] ? packet_rcv+0x16c/0x15a0 [ 1239.286396][T13751] ? rcu_is_watching+0x12/0xc0 [ 1239.291151][T13751] sk_skb_reason_drop+0x129/0x1a0 [ 1239.296175][T13751] packet_rcv+0x16c/0x15a0 [ 1239.300598][T13751] ? __pfx_packet_rcv+0x10/0x10 [ 1239.305449][T13751] __netif_receive_skb_list_core+0x41e/0x950 [ 1239.311469][T13751] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1239.317991][T13751] ? trace_lock_acquire+0x14a/0x1d0 [ 1239.323198][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1239.329534][T13751] ? lock_acquire+0x2f/0xb0 [ 1239.334036][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1239.340368][T13751] netif_receive_skb_list_internal+0x753/0xdb0 [ 1239.346532][T13751] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1239.353302][T13751] ? __pfx_eth_type_trans+0x10/0x10 [ 1239.358505][T13751] ? __build_skb_around+0x278/0x3b0 [ 1239.363714][T13751] netif_receive_skb_list+0x4f/0x4a0 [ 1239.369095][T13751] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 1239.375356][T13751] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 1239.381956][T13751] ? bpf_test_timer_continue+0x150/0x3d0 [ 1239.387591][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1239.392885][T13751] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1239.398703][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1239.404599][T13751] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1239.410493][T13751] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1239.416311][T13751] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1239.421598][T13751] ? 0xffffffffa0003b40 [ 1239.425750][T13751] ? 0xffffffffa0003b40 [ 1239.429900][T13751] ? 0xffffffffa0003b40 [ 1239.434046][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1239.439943][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1239.445322][T13751] ? lock_acquire+0x2f/0xb0 [ 1239.449822][T13751] ? __fget_files+0x40/0x3f0 [ 1239.454422][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1239.460243][T13751] ? fput+0x30/0x390 [ 1239.464141][T13751] ? __bpf_prog_get+0xa0/0x290 [ 1239.468913][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1239.474722][T13751] __sys_bpf+0xfc6/0x49a0 [ 1239.479051][T13751] ? __pfx___sys_bpf+0x10/0x10 [ 1239.483816][T13751] ? __schedule+0xefd/0x5750 [ 1239.488407][T13751] ? __fget_files+0x23a/0x3f0 [ 1239.493089][T13751] ? do_futex+0x123/0x350 [ 1239.497423][T13751] ? __pfx_do_futex+0x10/0x10 [ 1239.502108][T13751] ? xfd_validate_state+0x5d/0x180 [ 1239.507217][T13751] ? rcu_is_watching+0x12/0xc0 [ 1239.511986][T13751] __x64_sys_bpf+0x78/0xc0 [ 1239.516401][T13751] ? lockdep_hardirqs_on+0x7c/0x110 [ 1239.521607][T13751] do_syscall_64+0xcd/0x250 [ 1239.526113][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.532006][T13751] RIP: 0033:0x7f599957dff9 [ 1239.536415][T13751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1239.556023][T13751] RSP: 002b:00007f599a360038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1239.564440][T13751] RAX: ffffffffffffffda RBX: 00007f5999735f80 RCX: 00007f599957dff9 [ 1239.572408][T13751] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 1239.580377][T13751] RBP: 00007f59995f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1239.588342][T13751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1239.596306][T13751] R13: 0000000000000000 R14: 00007f5999735f80 R15: 00007ffccf4ff5e8 [ 1239.604278][T13751] [ 1239.607375][T13751] BUG: Bad page state in process syz.2.1816 pfn:24d95 [ 1239.614231][T13751] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024d95000 pfn:0x24d95 [ 1239.624331][T13751] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1239.631475][T13751] raw: 00fff00000000000 dead000000000040 ffff888029328000 0000000000000000 [ 1239.640092][T13751] raw: ffff888024d95000 0000000000000001 00000000ffffffff 0000000000000000 [ 1239.648702][T13751] page dumped because: page_pool leak [ 1239.654080][T13751] page_owner tracks the page as allocated [ 1239.659844][T13751] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13751, tgid 13748 (syz.2.1816), ts 1238328353445, free_ts 1238195031029 [ 1239.677226][T13751] post_alloc_hook+0x2d1/0x350 [ 1239.682002][T13751] get_page_from_freelist+0x101e/0x3070 [ 1239.687572][T13751] __alloc_pages_noprof+0x223/0x25c0 [ 1239.692879][T13751] alloc_pages_bulk_noprof+0x77c/0x1110 [ 1239.698448][T13751] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1239.704363][T13751] page_pool_alloc_netmem+0xc4/0x160 [ 1239.709683][T13751] page_pool_alloc_pages+0x1a/0x60 [ 1239.714857][T13751] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 1239.721026][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1239.726342][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1239.731706][T13751] __sys_bpf+0xfc6/0x49a0 [ 1239.736042][T13751] __x64_sys_bpf+0x78/0xc0 [ 1239.740473][T13751] do_syscall_64+0xcd/0x250 [ 1239.745010][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.750943][T13751] page last free pid 13743 tgid 13743 stack trace: [ 1239.757469][T13751] free_unref_folios+0x956/0x1310 [ 1239.762520][T13751] folios_put_refs+0x551/0x750 [ 1239.767309][T13751] free_pages_and_swap_cache+0x36d/0x510 [ 1239.772935][T13751] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1239.778923][T13751] tlb_finish_mmu+0x168/0x7b0 [ 1239.783591][T13751] exit_mmap+0x3df/0xb30 [ 1239.787864][T13751] __mmput+0x12a/0x480 [ 1239.791926][T13751] mmput+0x62/0x70 [ 1239.795652][T13751] do_exit+0x9bf/0x2d70 [ 1239.799805][T13751] do_group_exit+0xd3/0x2a0 [ 1239.804304][T13751] __x64_sys_exit_group+0x3e/0x50 [ 1239.809372][T13751] x64_sys_call+0x14a9/0x16a0 [ 1239.814072][T13751] do_syscall_64+0xcd/0x250 [ 1239.818603][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.824531][T13751] Modules linked in: [ 1239.828446][T13751] CPU: 1 UID: 0 PID: 13751 Comm: syz.2.1816 Tainted: G B 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 1239.840696][T13751] Tainted: [B]=BAD_PAGE [ 1239.844838][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1239.854949][T13751] Call Trace: [ 1239.858225][T13751] [ 1239.861144][T13751] dump_stack_lvl+0x16c/0x1f0 [ 1239.865822][T13751] bad_page+0xb3/0x1f0 [ 1239.869903][T13751] ? __pfx_bad_page+0x10/0x10 [ 1239.874596][T13751] ? page_bad_reason+0x9d/0x1e0 [ 1239.879455][T13751] free_unref_page+0x657/0xdc0 [ 1239.884220][T13751] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 1239.890209][T13751] ? __phys_addr+0xc6/0x150 [ 1239.894722][T13751] skb_free_head+0xa0/0x1d0 [ 1239.899231][T13751] skb_release_data+0x560/0x730 [ 1239.904089][T13751] ? packet_rcv+0x16c/0x15a0 [ 1239.908688][T13751] ? rcu_is_watching+0x12/0xc0 [ 1239.913486][T13751] sk_skb_reason_drop+0x129/0x1a0 [ 1239.918513][T13751] packet_rcv+0x16c/0x15a0 [ 1239.922929][T13751] ? __pfx_packet_rcv+0x10/0x10 [ 1239.927778][T13751] __netif_receive_skb_list_core+0x41e/0x950 [ 1239.933765][T13751] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1239.940272][T13751] ? trace_lock_acquire+0x14a/0x1d0 [ 1239.945480][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1239.951814][T13751] ? lock_acquire+0x2f/0xb0 [ 1239.956316][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1239.962654][T13751] netif_receive_skb_list_internal+0x753/0xdb0 [ 1239.968826][T13751] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1239.975600][T13751] ? __pfx_eth_type_trans+0x10/0x10 [ 1239.980817][T13751] ? __build_skb_around+0x278/0x3b0 [ 1239.986033][T13751] netif_receive_skb_list+0x4f/0x4a0 [ 1239.991324][T13751] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 1239.997572][T13751] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 1240.004171][T13751] ? bpf_test_timer_continue+0x150/0x3d0 [ 1240.009811][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1240.015105][T13751] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1240.020922][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1240.026820][T13751] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1240.032728][T13751] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1240.038580][T13751] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1240.043869][T13751] ? 0xffffffffa0003b40 [ 1240.048019][T13751] ? 0xffffffffa0003b40 [ 1240.052165][T13751] ? 0xffffffffa0003b40 [ 1240.056311][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1240.062210][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1240.067589][T13751] ? lock_acquire+0x2f/0xb0 [ 1240.072088][T13751] ? __fget_files+0x40/0x3f0 [ 1240.076687][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1240.082500][T13751] ? fput+0x30/0x390 [ 1240.086401][T13751] ? __bpf_prog_get+0xa0/0x290 [ 1240.091345][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1240.097158][T13751] __sys_bpf+0xfc6/0x49a0 [ 1240.101937][T13751] ? __pfx___sys_bpf+0x10/0x10 [ 1240.106707][T13751] ? __schedule+0xefd/0x5750 [ 1240.111296][T13751] ? __fget_files+0x23a/0x3f0 [ 1240.115990][T13751] ? do_futex+0x123/0x350 [ 1240.120330][T13751] ? __pfx_do_futex+0x10/0x10 [ 1240.125018][T13751] ? xfd_validate_state+0x5d/0x180 [ 1240.130129][T13751] ? rcu_is_watching+0x12/0xc0 [ 1240.134898][T13751] __x64_sys_bpf+0x78/0xc0 [ 1240.139313][T13751] ? lockdep_hardirqs_on+0x7c/0x110 [ 1240.144516][T13751] do_syscall_64+0xcd/0x250 [ 1240.149027][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.154924][T13751] RIP: 0033:0x7f599957dff9 [ 1240.159337][T13751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1240.178951][T13751] RSP: 002b:00007f599a360038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1240.187368][T13751] RAX: ffffffffffffffda RBX: 00007f5999735f80 RCX: 00007f599957dff9 [ 1240.195336][T13751] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 1240.203304][T13751] RBP: 00007f59995f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1240.211271][T13751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1240.219237][T13751] R13: 0000000000000000 R14: 00007f5999735f80 R15: 00007ffccf4ff5e8 [ 1240.227215][T13751] [ 1240.230305][T13751] BUG: Bad page state in process syz.2.1816 pfn:4c703 [ 1240.237184][T13751] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x6c pfn:0x4c703 [ 1240.246074][T13751] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1240.253203][T13751] raw: 00fff00000000000 dead000000000040 ffff888029328000 0000000000000000 [ 1240.261830][T13751] raw: 000000000000006c 0000000000000001 00000000ffffffff 0000000000000000 [ 1240.270474][T13751] page dumped because: page_pool leak [ 1240.275873][T13751] page_owner tracks the page as allocated [ 1240.281586][T13751] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13751, tgid 13748 (syz.2.1816), ts 1238328341576, free_ts 1238195038913 [ 1240.298979][T13751] post_alloc_hook+0x2d1/0x350 [ 1240.303764][T13751] get_page_from_freelist+0x101e/0x3070 [ 1240.309331][T13751] __alloc_pages_noprof+0x223/0x25c0 [ 1240.314633][T13751] alloc_pages_bulk_noprof+0x77c/0x1110 [ 1240.320199][T13751] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1240.326141][T13751] page_pool_alloc_netmem+0xc4/0x160 [ 1240.331421][T13751] page_pool_alloc_pages+0x1a/0x60 [ 1240.336564][T13751] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 1240.342737][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1240.348041][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1240.353424][T13751] __sys_bpf+0xfc6/0x49a0 [ 1240.357776][T13751] __x64_sys_bpf+0x78/0xc0 [ 1240.362202][T13751] do_syscall_64+0xcd/0x250 [ 1240.366728][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.372635][T13751] page last free pid 13743 tgid 13743 stack trace: [ 1240.379153][T13751] free_unref_folios+0x956/0x1310 [ 1240.384191][T13751] folios_put_refs+0x551/0x750 [ 1240.388982][T13751] free_pages_and_swap_cache+0x36d/0x510 [ 1240.394634][T13751] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1240.400670][T13751] tlb_finish_mmu+0x168/0x7b0 [ 1240.405391][T13751] exit_mmap+0x3df/0xb30 [ 1240.409657][T13751] __mmput+0x12a/0x480 [ 1240.413821][T13751] mmput+0x62/0x70 [ 1240.417565][T13751] do_exit+0x9bf/0x2d70 [ 1240.421750][T13751] do_group_exit+0xd3/0x2a0 [ 1240.426277][T13751] __x64_sys_exit_group+0x3e/0x50 [ 1240.431316][T13751] x64_sys_call+0x14a9/0x16a0 [ 1240.436024][T13751] do_syscall_64+0xcd/0x250 [ 1240.440544][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.446465][T13751] Modules linked in: [ 1240.450363][T13751] CPU: 1 UID: 0 PID: 13751 Comm: syz.2.1816 Tainted: G B 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 1240.462591][T13751] Tainted: [B]=BAD_PAGE [ 1240.466726][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1240.476767][T13751] Call Trace: [ 1240.480057][T13751] [ 1240.482974][T13751] dump_stack_lvl+0x16c/0x1f0 [ 1240.487647][T13751] bad_page+0xb3/0x1f0 [ 1240.491711][T13751] ? __pfx_bad_page+0x10/0x10 [ 1240.496382][T13751] ? page_bad_reason+0x9d/0x1e0 [ 1240.501225][T13751] free_unref_page+0x657/0xdc0 [ 1240.505976][T13751] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 1240.511951][T13751] ? __phys_addr+0xc6/0x150 [ 1240.516449][T13751] skb_free_head+0xa0/0x1d0 [ 1240.520958][T13751] skb_release_data+0x560/0x730 [ 1240.525816][T13751] ? packet_rcv+0x16c/0x15a0 [ 1240.530402][T13751] ? rcu_is_watching+0x12/0xc0 [ 1240.535170][T13751] sk_skb_reason_drop+0x129/0x1a0 [ 1240.540191][T13751] packet_rcv+0x16c/0x15a0 [ 1240.544606][T13751] ? __pfx_packet_rcv+0x10/0x10 [ 1240.549458][T13751] __netif_receive_skb_list_core+0x41e/0x950 [ 1240.555446][T13751] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1240.562037][T13751] ? trace_lock_acquire+0x14a/0x1d0 [ 1240.567241][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1240.573575][T13751] ? lock_acquire+0x2f/0xb0 [ 1240.578081][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1240.584415][T13751] netif_receive_skb_list_internal+0x753/0xdb0 [ 1240.590578][T13751] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1240.597257][T13751] ? __pfx_eth_type_trans+0x10/0x10 [ 1240.602463][T13751] ? __build_skb_around+0x278/0x3b0 [ 1240.607667][T13751] netif_receive_skb_list+0x4f/0x4a0 [ 1240.612953][T13751] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 1240.619202][T13751] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 1240.625798][T13751] ? bpf_test_timer_continue+0x150/0x3d0 [ 1240.631434][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1240.636721][T13751] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1240.642530][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1240.648427][T13751] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1240.654316][T13751] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1240.660144][T13751] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1240.665426][T13751] ? 0xffffffffa0003b40 [ 1240.669575][T13751] ? 0xffffffffa0003b40 [ 1240.673722][T13751] ? 0xffffffffa0003b40 [ 1240.677870][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1240.683763][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1240.689140][T13751] ? lock_acquire+0x2f/0xb0 [ 1240.693640][T13751] ? __fget_files+0x40/0x3f0 [ 1240.698238][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1240.704047][T13751] ? fput+0x30/0x390 [ 1240.707942][T13751] ? __bpf_prog_get+0xa0/0x290 [ 1240.712714][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1240.718520][T13751] __sys_bpf+0xfc6/0x49a0 [ 1240.722855][T13751] ? __pfx___sys_bpf+0x10/0x10 [ 1240.727618][T13751] ? __schedule+0xefd/0x5750 [ 1240.732208][T13751] ? __fget_files+0x23a/0x3f0 [ 1240.736889][T13751] ? do_futex+0x123/0x350 [ 1240.741220][T13751] ? __pfx_do_futex+0x10/0x10 [ 1240.745909][T13751] ? xfd_validate_state+0x5d/0x180 [ 1240.751017][T13751] ? rcu_is_watching+0x12/0xc0 [ 1240.755784][T13751] __x64_sys_bpf+0x78/0xc0 [ 1240.760203][T13751] ? lockdep_hardirqs_on+0x7c/0x110 [ 1240.765400][T13751] do_syscall_64+0xcd/0x250 [ 1240.769995][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.775893][T13751] RIP: 0033:0x7f599957dff9 [ 1240.780305][T13751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1240.799921][T13751] RSP: 002b:00007f599a360038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1240.808346][T13751] RAX: ffffffffffffffda RBX: 00007f5999735f80 RCX: 00007f599957dff9 [ 1240.816320][T13751] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 1240.824289][T13751] RBP: 00007f59995f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1240.832264][T13751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1240.840237][T13751] R13: 0000000000000000 R14: 00007f5999735f80 R15: 00007ffccf4ff5e8 [ 1240.848220][T13751] [ 1240.851320][T13751] BUG: Bad page state in process syz.2.1816 pfn:2cdf3 [ 1240.858211][T13751] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802cdf3070 pfn:0x2cdf3 [ 1240.868322][T13751] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1240.875496][T13751] raw: 00fff00000000000 dead000000000040 ffff888029328000 0000000000000000 [ 1240.884099][T13751] raw: ffff88802cdf3070 0000000000000001 00000000ffffffff 0000000000000000 [ 1240.892728][T13751] page dumped because: page_pool leak [ 1240.898129][T13751] page_owner tracks the page as allocated [ 1240.903841][T13751] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13751, tgid 13748 (syz.2.1816), ts 1238328329388, free_ts 1238195046732 [ 1240.921231][T13751] post_alloc_hook+0x2d1/0x350 [ 1240.926042][T13751] get_page_from_freelist+0x101e/0x3070 [ 1240.931609][T13751] __alloc_pages_noprof+0x223/0x25c0 [ 1240.936915][T13751] alloc_pages_bulk_noprof+0x77c/0x1110 [ 1240.942490][T13751] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1240.948440][T13751] page_pool_alloc_netmem+0xc4/0x160 [ 1240.953753][T13751] page_pool_alloc_pages+0x1a/0x60 [ 1240.958918][T13751] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 1240.965113][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1240.970418][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1240.975836][T13751] __sys_bpf+0xfc6/0x49a0 [ 1240.980183][T13751] __x64_sys_bpf+0x78/0xc0 [ 1240.984613][T13751] do_syscall_64+0xcd/0x250 [ 1240.989145][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.995076][T13751] page last free pid 13743 tgid 13743 stack trace: [ 1241.001564][T13751] free_unref_folios+0x956/0x1310 [ 1241.006636][T13751] folios_put_refs+0x551/0x750 [ 1241.011421][T13751] free_pages_and_swap_cache+0x36d/0x510 [ 1241.017088][T13751] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1241.023085][T13751] tlb_finish_mmu+0x168/0x7b0 [ 1241.027800][T13751] exit_mmap+0x3df/0xb30 [ 1241.032056][T13751] __mmput+0x12a/0x480 [ 1241.036164][T13751] mmput+0x62/0x70 [ 1241.039898][T13751] do_exit+0x9bf/0x2d70 [ 1241.044047][T13751] do_group_exit+0xd3/0x2a0 [ 1241.048750][T13751] __x64_sys_exit_group+0x3e/0x50 [ 1241.053795][T13751] x64_sys_call+0x14a9/0x16a0 [ 1241.058521][T13751] do_syscall_64+0xcd/0x250 [ 1241.063038][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.068953][T13751] Modules linked in: [ 1241.072853][T13751] CPU: 1 UID: 0 PID: 13751 Comm: syz.2.1816 Tainted: G B 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 1241.085080][T13751] Tainted: [B]=BAD_PAGE [ 1241.089214][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1241.099252][T13751] Call Trace: [ 1241.102520][T13751] [ 1241.105437][T13751] dump_stack_lvl+0x16c/0x1f0 [ 1241.110107][T13751] bad_page+0xb3/0x1f0 [ 1241.114170][T13751] ? __pfx_bad_page+0x10/0x10 [ 1241.118844][T13751] ? page_bad_reason+0x9d/0x1e0 [ 1241.123713][T13751] free_unref_page+0x657/0xdc0 [ 1241.128477][T13751] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 1241.134475][T13751] ? __phys_addr+0xc6/0x150 [ 1241.138993][T13751] skb_free_head+0xa0/0x1d0 [ 1241.143509][T13751] skb_release_data+0x560/0x730 [ 1241.148380][T13751] ? packet_rcv+0x16c/0x15a0 [ 1241.152977][T13751] ? rcu_is_watching+0x12/0xc0 [ 1241.157756][T13751] sk_skb_reason_drop+0x129/0x1a0 [ 1241.162784][T13751] packet_rcv+0x16c/0x15a0 [ 1241.167201][T13751] ? __pfx_packet_rcv+0x10/0x10 [ 1241.172052][T13751] __netif_receive_skb_list_core+0x41e/0x950 [ 1241.178046][T13751] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1241.184561][T13751] ? trace_lock_acquire+0x14a/0x1d0 [ 1241.189774][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1241.196114][T13751] ? lock_acquire+0x2f/0xb0 [ 1241.200618][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1241.206963][T13751] netif_receive_skb_list_internal+0x753/0xdb0 [ 1241.213127][T13751] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1241.219810][T13751] ? __pfx_eth_type_trans+0x10/0x10 [ 1241.225016][T13751] ? __build_skb_around+0x278/0x3b0 [ 1241.230223][T13751] netif_receive_skb_list+0x4f/0x4a0 [ 1241.235512][T13751] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 1241.241765][T13751] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 1241.248372][T13751] ? bpf_test_timer_continue+0x150/0x3d0 [ 1241.254015][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1241.259311][T13751] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1241.265128][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1241.271024][T13751] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1241.276921][T13751] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1241.282914][T13751] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1241.288205][T13751] ? 0xffffffffa0003b40 [ 1241.292357][T13751] ? 0xffffffffa0003b40 [ 1241.296512][T13751] ? 0xffffffffa0003b40 [ 1241.300662][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1241.306579][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1241.311959][T13751] ? lock_acquire+0x2f/0xb0 [ 1241.316462][T13751] ? __fget_files+0x40/0x3f0 [ 1241.321062][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1241.326880][T13751] ? fput+0x30/0x390 [ 1241.330781][T13751] ? __bpf_prog_get+0xa0/0x290 [ 1241.335555][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1241.341366][T13751] __sys_bpf+0xfc6/0x49a0 [ 1241.345702][T13751] ? __pfx___sys_bpf+0x10/0x10 [ 1241.350479][T13751] ? __schedule+0xefd/0x5750 [ 1241.355078][T13751] ? __fget_files+0x23a/0x3f0 [ 1241.359770][T13751] ? do_futex+0x123/0x350 [ 1241.364106][T13751] ? __pfx_do_futex+0x10/0x10 [ 1241.368796][T13751] ? xfd_validate_state+0x5d/0x180 [ 1241.373911][T13751] ? rcu_is_watching+0x12/0xc0 [ 1241.378688][T13751] __x64_sys_bpf+0x78/0xc0 [ 1241.383110][T13751] ? lockdep_hardirqs_on+0x7c/0x110 [ 1241.388322][T13751] do_syscall_64+0xcd/0x250 [ 1241.392833][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.398735][T13751] RIP: 0033:0x7f599957dff9 [ 1241.403152][T13751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1241.422759][T13751] RSP: 002b:00007f599a360038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1241.431172][T13751] RAX: ffffffffffffffda RBX: 00007f5999735f80 RCX: 00007f599957dff9 [ 1241.439139][T13751] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 1241.447107][T13751] RBP: 00007f59995f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1241.455073][T13751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1241.463048][T13751] R13: 0000000000000000 R14: 00007f5999735f80 R15: 00007ffccf4ff5e8 [ 1241.471035][T13751] [ 1241.474151][T13751] BUG: Bad page state in process syz.2.1816 pfn:7fa33 [ 1241.481033][T13751] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807fa331e0 pfn:0x7fa33 [ 1241.491139][T13751] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1241.498308][T13751] raw: 00fff00000000000 dead000000000040 ffff888029328000 0000000000000000 [ 1241.506929][T13751] raw: ffff88807fa331e0 0000000000000001 00000000ffffffff 0000000000000000 [ 1241.515549][T13751] page dumped because: page_pool leak [ 1241.521013][T13751] page_owner tracks the page as allocated [ 1241.526758][T13751] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13751, tgid 13748 (syz.2.1816), ts 1238328317168, free_ts 1238195054620 [ 1241.544177][T13751] post_alloc_hook+0x2d1/0x350 [ 1241.548963][T13751] get_page_from_freelist+0x101e/0x3070 [ 1241.554541][T13751] __alloc_pages_noprof+0x223/0x25c0 [ 1241.559855][T13751] alloc_pages_bulk_noprof+0x77c/0x1110 [ 1241.565448][T13751] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1241.571406][T13751] page_pool_alloc_netmem+0xc4/0x160 [ 1241.576717][T13751] page_pool_alloc_pages+0x1a/0x60 [ 1241.581845][T13751] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 1241.588026][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1241.593321][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1241.598712][T13751] __sys_bpf+0xfc6/0x49a0 [ 1241.603070][T13751] __x64_sys_bpf+0x78/0xc0 [ 1241.607507][T13751] do_syscall_64+0xcd/0x250 [ 1241.612024][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.617936][T13751] page last free pid 13743 tgid 13743 stack trace: [ 1241.624436][T13751] free_unref_folios+0x956/0x1310 [ 1241.629492][T13751] folios_put_refs+0x551/0x750 [ 1241.634303][T13751] free_pages_and_swap_cache+0x36d/0x510 [ 1241.639983][T13751] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1241.646001][T13751] tlb_finish_mmu+0x168/0x7b0 [ 1241.650701][T13751] exit_mmap+0x3df/0xb30 [ 1241.654981][T13751] __mmput+0x12a/0x480 [ 1241.659071][T13751] mmput+0x62/0x70 [ 1241.662816][T13751] do_exit+0x9bf/0x2d70 [ 1241.667021][T13751] do_group_exit+0xd3/0x2a0 [ 1241.671551][T13751] __x64_sys_exit_group+0x3e/0x50 [ 1241.676625][T13751] x64_sys_call+0x14a9/0x16a0 [ 1241.681320][T13751] do_syscall_64+0xcd/0x250 [ 1241.685854][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.691761][T13751] Modules linked in: [ 1241.695683][T13751] CPU: 1 UID: 0 PID: 13751 Comm: syz.2.1816 Tainted: G B 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 1241.707932][T13751] Tainted: [B]=BAD_PAGE [ 1241.712071][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1241.722129][T13751] Call Trace: [ 1241.725406][T13751] [ 1241.728336][T13751] dump_stack_lvl+0x16c/0x1f0 [ 1241.733012][T13751] bad_page+0xb3/0x1f0 [ 1241.737074][T13751] ? __pfx_bad_page+0x10/0x10 [ 1241.741743][T13751] ? page_bad_reason+0x9d/0x1e0 [ 1241.746586][T13751] free_unref_page+0x657/0xdc0 [ 1241.751343][T13751] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 1241.757323][T13751] ? __phys_addr+0xc6/0x150 [ 1241.761819][T13751] skb_free_head+0xa0/0x1d0 [ 1241.766317][T13751] skb_release_data+0x560/0x730 [ 1241.771167][T13751] ? packet_rcv+0x16c/0x15a0 [ 1241.775751][T13751] ? rcu_is_watching+0x12/0xc0 [ 1241.780522][T13751] sk_skb_reason_drop+0x129/0x1a0 [ 1241.785546][T13751] packet_rcv+0x16c/0x15a0 [ 1241.789965][T13751] ? __pfx_packet_rcv+0x10/0x10 [ 1241.794819][T13751] __netif_receive_skb_list_core+0x41e/0x950 [ 1241.800810][T13751] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1241.807326][T13751] ? trace_lock_acquire+0x14a/0x1d0 [ 1241.812537][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1241.818878][T13751] ? lock_acquire+0x2f/0xb0 [ 1241.823393][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1241.829743][T13751] netif_receive_skb_list_internal+0x753/0xdb0 [ 1241.835914][T13751] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1241.842608][T13751] ? __pfx_eth_type_trans+0x10/0x10 [ 1241.847825][T13751] ? __build_skb_around+0x278/0x3b0 [ 1241.853034][T13751] netif_receive_skb_list+0x4f/0x4a0 [ 1241.858335][T13751] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 1241.864597][T13751] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 1241.871199][T13751] ? bpf_test_timer_continue+0x150/0x3d0 [ 1241.876836][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1241.882124][T13751] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1241.887932][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1241.893825][T13751] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1241.899727][T13751] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1241.905548][T13751] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1241.910854][T13751] ? 0xffffffffa0003b40 [ 1241.915006][T13751] ? 0xffffffffa0003b40 [ 1241.919157][T13751] ? 0xffffffffa0003b40 [ 1241.923301][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1241.929195][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1241.934574][T13751] ? lock_acquire+0x2f/0xb0 [ 1241.939074][T13751] ? __fget_files+0x40/0x3f0 [ 1241.943673][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1241.949489][T13751] ? fput+0x30/0x390 [ 1241.953405][T13751] ? __bpf_prog_get+0xa0/0x290 [ 1241.958184][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1241.963993][T13751] __sys_bpf+0xfc6/0x49a0 [ 1241.968336][T13751] ? __pfx___sys_bpf+0x10/0x10 [ 1241.973103][T13751] ? __schedule+0xefd/0x5750 [ 1241.977695][T13751] ? __fget_files+0x23a/0x3f0 [ 1241.982385][T13751] ? do_futex+0x123/0x350 [ 1241.986720][T13751] ? __pfx_do_futex+0x10/0x10 [ 1241.991409][T13751] ? xfd_validate_state+0x5d/0x180 [ 1241.996519][T13751] ? rcu_is_watching+0x12/0xc0 [ 1242.001294][T13751] __x64_sys_bpf+0x78/0xc0 [ 1242.005719][T13751] ? lockdep_hardirqs_on+0x7c/0x110 [ 1242.010924][T13751] do_syscall_64+0xcd/0x250 [ 1242.015445][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.021358][T13751] RIP: 0033:0x7f599957dff9 [ 1242.025771][T13751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1242.045382][T13751] RSP: 002b:00007f599a360038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1242.053795][T13751] RAX: ffffffffffffffda RBX: 00007f5999735f80 RCX: 00007f599957dff9 [ 1242.061762][T13751] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 1242.069729][T13751] RBP: 00007f59995f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1242.077700][T13751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1242.085929][T13751] R13: 0000000000000000 R14: 00007f5999735f80 R15: 00007ffccf4ff5e8 [ 1242.093904][T13751] [ 1242.096991][T13751] BUG: Bad page state in process syz.2.1816 pfn:31b6a [ 1242.103843][T13751] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031b6a000 pfn:0x31b6a [ 1242.113950][T13751] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1242.121109][T13751] raw: 00fff00000000000 dead000000000040 ffff888029328000 0000000000000000 [ 1242.129728][T13751] raw: ffff888031b6a000 0000000000000001 00000000ffffffff 0000000000000000 [ 1242.138345][T13751] page dumped because: page_pool leak [ 1242.143708][T13751] page_owner tracks the page as allocated [ 1242.149458][T13751] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13751, tgid 13748 (syz.2.1816), ts 1238328304577, free_ts 1238195062663 [ 1242.166851][T13751] post_alloc_hook+0x2d1/0x350 [ 1242.171616][T13751] get_page_from_freelist+0x101e/0x3070 [ 1242.177196][T13751] __alloc_pages_noprof+0x223/0x25c0 [ 1242.182496][T13751] alloc_pages_bulk_noprof+0x77c/0x1110 [ 1242.188060][T13751] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1242.193973][T13751] page_pool_alloc_netmem+0xc4/0x160 [ 1242.199281][T13751] page_pool_alloc_pages+0x1a/0x60 [ 1242.204409][T13751] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 1242.210623][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1242.215950][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1242.221334][T13751] __sys_bpf+0xfc6/0x49a0 [ 1242.225679][T13751] __x64_sys_bpf+0x78/0xc0 [ 1242.230108][T13751] do_syscall_64+0xcd/0x250 [ 1242.234600][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.240508][T13751] page last free pid 13743 tgid 13743 stack trace: [ 1242.247046][T13751] free_unref_folios+0x956/0x1310 [ 1242.252081][T13751] folios_put_refs+0x551/0x750 [ 1242.256864][T13751] free_pages_and_swap_cache+0x36d/0x510 [ 1242.262513][T13751] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1242.268534][T13751] tlb_finish_mmu+0x168/0x7b0 [ 1242.273234][T13751] exit_mmap+0x3df/0xb30 [ 1242.277516][T13751] __mmput+0x12a/0x480 [ 1242.281626][T13751] mmput+0x62/0x70 [ 1242.285368][T13751] do_exit+0x9bf/0x2d70 [ 1242.289539][T13751] do_group_exit+0xd3/0x2a0 [ 1242.294037][T13751] __x64_sys_exit_group+0x3e/0x50 [ 1242.299079][T13751] x64_sys_call+0x14a9/0x16a0 [ 1242.303773][T13751] do_syscall_64+0xcd/0x250 [ 1242.308301][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.314211][T13751] Modules linked in: [ 1242.318148][T13751] CPU: 1 UID: 0 PID: 13751 Comm: syz.2.1816 Tainted: G B 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 1242.330396][T13751] Tainted: [B]=BAD_PAGE [ 1242.334532][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1242.344578][T13751] Call Trace: [ 1242.347861][T13751] [ 1242.350780][T13751] dump_stack_lvl+0x16c/0x1f0 [ 1242.355464][T13751] bad_page+0xb3/0x1f0 [ 1242.359563][T13751] ? __pfx_bad_page+0x10/0x10 [ 1242.364234][T13751] ? page_bad_reason+0x9d/0x1e0 [ 1242.369075][T13751] free_unref_page+0x657/0xdc0 [ 1242.373825][T13751] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 1242.379809][T13751] ? __phys_addr+0xc6/0x150 [ 1242.384320][T13751] skb_free_head+0xa0/0x1d0 [ 1242.388837][T13751] skb_release_data+0x560/0x730 [ 1242.393700][T13751] ? packet_rcv+0x16c/0x15a0 [ 1242.398292][T13751] ? rcu_is_watching+0x12/0xc0 [ 1242.403062][T13751] sk_skb_reason_drop+0x129/0x1a0 [ 1242.408090][T13751] packet_rcv+0x16c/0x15a0 [ 1242.412508][T13751] ? __pfx_packet_rcv+0x10/0x10 [ 1242.417361][T13751] __netif_receive_skb_list_core+0x41e/0x950 [ 1242.423352][T13751] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1242.429860][T13751] ? trace_lock_acquire+0x14a/0x1d0 [ 1242.435063][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1242.441394][T13751] ? lock_acquire+0x2f/0xb0 [ 1242.445894][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1242.452226][T13751] netif_receive_skb_list_internal+0x753/0xdb0 [ 1242.458385][T13751] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1242.465066][T13751] ? __pfx_eth_type_trans+0x10/0x10 [ 1242.470273][T13751] ? __build_skb_around+0x278/0x3b0 [ 1242.475482][T13751] netif_receive_skb_list+0x4f/0x4a0 [ 1242.480769][T13751] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 1242.487022][T13751] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 1242.493620][T13751] ? bpf_test_timer_continue+0x150/0x3d0 [ 1242.499253][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1242.504543][T13751] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1242.510361][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1242.516255][T13751] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1242.522147][T13751] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1242.527965][T13751] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1242.533252][T13751] ? 0xffffffffa0003b40 [ 1242.537402][T13751] ? 0xffffffffa0003b40 [ 1242.541553][T13751] ? 0xffffffffa0003b40 [ 1242.545701][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1242.551597][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1242.556977][T13751] ? lock_acquire+0x2f/0xb0 [ 1242.561476][T13751] ? __fget_files+0x40/0x3f0 [ 1242.566074][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1242.571885][T13751] ? fput+0x30/0x390 [ 1242.575783][T13751] ? __bpf_prog_get+0xa0/0x290 [ 1242.580555][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1242.586361][T13751] __sys_bpf+0xfc6/0x49a0 [ 1242.590692][T13751] ? __pfx___sys_bpf+0x10/0x10 [ 1242.595454][T13751] ? __schedule+0xefd/0x5750 [ 1242.600042][T13751] ? __fget_files+0x23a/0x3f0 [ 1242.604727][T13751] ? do_futex+0x123/0x350 [ 1242.609061][T13751] ? __pfx_do_futex+0x10/0x10 [ 1242.613742][T13751] ? xfd_validate_state+0x5d/0x180 [ 1242.618852][T13751] ? rcu_is_watching+0x12/0xc0 [ 1242.623625][T13751] __x64_sys_bpf+0x78/0xc0 [ 1242.628044][T13751] ? lockdep_hardirqs_on+0x7c/0x110 [ 1242.633245][T13751] do_syscall_64+0xcd/0x250 [ 1242.637756][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.643650][T13751] RIP: 0033:0x7f599957dff9 [ 1242.648060][T13751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1242.667662][T13751] RSP: 002b:00007f599a360038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1242.676073][T13751] RAX: ffffffffffffffda RBX: 00007f5999735f80 RCX: 00007f599957dff9 [ 1242.684039][T13751] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 1242.692011][T13751] RBP: 00007f59995f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1242.699974][T13751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1242.707940][T13751] R13: 0000000000000000 R14: 00007f5999735f80 R15: 00007ffccf4ff5e8 [ 1242.715914][T13751] [ 1242.718993][T13751] BUG: Bad page state in process syz.2.1816 pfn:7a0ec [ 1242.725869][T13751] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807a0ece10 pfn:0x7a0ec [ 1242.736056][T13751] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1242.743186][T13751] raw: 00fff00000000000 dead000000000040 ffff888029328000 0000000000000000 [ 1242.751810][T13751] raw: ffff88807a0ece10 0000000000000001 00000000ffffffff 0000000000000000 [ 1242.760417][T13751] page dumped because: page_pool leak [ 1242.765819][T13751] page_owner tracks the page as allocated [ 1242.771534][T13751] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13751, tgid 13748 (syz.2.1816), ts 1238328292441, free_ts 1238195072143 [ 1242.789266][T13751] post_alloc_hook+0x2d1/0x350 [ 1242.794039][T13751] get_page_from_freelist+0x101e/0x3070 [ 1242.799622][T13751] __alloc_pages_noprof+0x223/0x25c0 [ 1242.804949][T13751] alloc_pages_bulk_noprof+0x77c/0x1110 [ 1242.810512][T13751] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1242.816443][T13751] page_pool_alloc_netmem+0xc4/0x160 [ 1242.821750][T13751] page_pool_alloc_pages+0x1a/0x60 [ 1242.826889][T13751] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 1242.833064][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1242.838366][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1242.843748][T13751] __sys_bpf+0xfc6/0x49a0 [ 1242.848107][T13751] __x64_sys_bpf+0x78/0xc0 [ 1242.852535][T13751] do_syscall_64+0xcd/0x250 [ 1242.857067][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.862973][T13751] page last free pid 13743 tgid 13743 stack trace: [ 1242.869483][T13751] free_unref_folios+0x956/0x1310 [ 1242.874520][T13751] folios_put_refs+0x551/0x750 [ 1242.879328][T13751] free_pages_and_swap_cache+0x36d/0x510 [ 1242.884990][T13751] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1242.890989][T13751] tlb_finish_mmu+0x168/0x7b0 [ 1242.895688][T13751] exit_mmap+0x3df/0xb30 [ 1242.899918][T13751] __mmput+0x12a/0x480 [ 1242.903973][T13751] mmput+0x62/0x70 [ 1242.907713][T13751] do_exit+0x9bf/0x2d70 [ 1242.911884][T13751] do_group_exit+0xd3/0x2a0 [ 1242.916405][T13751] __x64_sys_exit_group+0x3e/0x50 [ 1242.921442][T13751] x64_sys_call+0x14a9/0x16a0 [ 1242.926150][T13751] do_syscall_64+0xcd/0x250 [ 1242.930669][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.936582][T13751] Modules linked in: [ 1242.940484][T13751] CPU: 1 UID: 0 PID: 13751 Comm: syz.2.1816 Tainted: G B 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 1242.952705][T13751] Tainted: [B]=BAD_PAGE [ 1242.956839][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1242.966887][T13751] Call Trace: [ 1242.970151][T13751] [ 1242.973073][T13751] dump_stack_lvl+0x16c/0x1f0 [ 1242.977762][T13751] bad_page+0xb3/0x1f0 [ 1242.981824][T13751] ? __pfx_bad_page+0x10/0x10 [ 1242.986493][T13751] ? page_bad_reason+0x9d/0x1e0 [ 1242.991335][T13751] free_unref_page+0x657/0xdc0 [ 1242.996089][T13751] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 1243.002077][T13751] ? __phys_addr+0xc6/0x150 [ 1243.006582][T13751] skb_free_head+0xa0/0x1d0 [ 1243.011090][T13751] skb_release_data+0x560/0x730 [ 1243.015947][T13751] ? packet_rcv+0x16c/0x15a0 [ 1243.020539][T13751] ? rcu_is_watching+0x12/0xc0 [ 1243.025314][T13751] sk_skb_reason_drop+0x129/0x1a0 [ 1243.030337][T13751] packet_rcv+0x16c/0x15a0 [ 1243.034757][T13751] ? __pfx_packet_rcv+0x10/0x10 [ 1243.039701][T13751] __netif_receive_skb_list_core+0x41e/0x950 [ 1243.045692][T13751] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1243.052197][T13751] ? trace_lock_acquire+0x14a/0x1d0 [ 1243.057399][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1243.063731][T13751] ? lock_acquire+0x2f/0xb0 [ 1243.068230][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1243.074561][T13751] netif_receive_skb_list_internal+0x753/0xdb0 [ 1243.080719][T13751] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1243.087396][T13751] ? __pfx_eth_type_trans+0x10/0x10 [ 1243.092595][T13751] ? __build_skb_around+0x278/0x3b0 [ 1243.097802][T13751] netif_receive_skb_list+0x4f/0x4a0 [ 1243.103089][T13751] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 1243.109344][T13751] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 1243.115942][T13751] ? bpf_test_timer_continue+0x150/0x3d0 [ 1243.121574][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1243.126859][T13751] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1243.132669][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1243.138564][T13751] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1243.144456][T13751] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1243.150269][T13751] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1243.155557][T13751] ? 0xffffffffa0003b40 [ 1243.159705][T13751] ? 0xffffffffa0003b40 [ 1243.163848][T13751] ? 0xffffffffa0003b40 [ 1243.167993][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1243.173886][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1243.179262][T13751] ? lock_acquire+0x2f/0xb0 [ 1243.183763][T13751] ? __fget_files+0x40/0x3f0 [ 1243.188362][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1243.194171][T13751] ? fput+0x30/0x390 [ 1243.198065][T13751] ? __bpf_prog_get+0xa0/0x290 [ 1243.202832][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1243.208639][T13751] __sys_bpf+0xfc6/0x49a0 [ 1243.212967][T13751] ? __pfx___sys_bpf+0x10/0x10 [ 1243.217729][T13751] ? __schedule+0xefd/0x5750 [ 1243.222319][T13751] ? __fget_files+0x23a/0x3f0 [ 1243.227002][T13751] ? do_futex+0x123/0x350 [ 1243.231337][T13751] ? __pfx_do_futex+0x10/0x10 [ 1243.236025][T13751] ? xfd_validate_state+0x5d/0x180 [ 1243.241136][T13751] ? rcu_is_watching+0x12/0xc0 [ 1243.245903][T13751] __x64_sys_bpf+0x78/0xc0 [ 1243.250319][T13751] ? lockdep_hardirqs_on+0x7c/0x110 [ 1243.255521][T13751] do_syscall_64+0xcd/0x250 [ 1243.260028][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.265925][T13751] RIP: 0033:0x7f599957dff9 [ 1243.270338][T13751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1243.289943][T13751] RSP: 002b:00007f599a360038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1243.298355][T13751] RAX: ffffffffffffffda RBX: 00007f5999735f80 RCX: 00007f599957dff9 [ 1243.306321][T13751] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 1243.314286][T13751] RBP: 00007f59995f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1243.322253][T13751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1243.330220][T13751] R13: 0000000000000000 R14: 00007f5999735f80 R15: 00007ffccf4ff5e8 [ 1243.338196][T13751] [ 1243.341282][T13751] BUG: Bad page state in process syz.2.1816 pfn:44ca7 [ 1243.348161][T13751] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888044ca7dc0 pfn:0x44ca7 [ 1243.358274][T13751] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1243.365432][T13751] raw: 00fff00000000000 dead000000000040 ffff888029328000 0000000000000000 [ 1243.374029][T13751] raw: ffff888044ca7dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 1243.382669][T13751] page dumped because: page_pool leak [ 1243.388051][T13751] page_owner tracks the page as allocated [ 1243.393747][T13751] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13751, tgid 13748 (syz.2.1816), ts 1238328280575, free_ts 1238195080037 [ 1243.411142][T13751] post_alloc_hook+0x2d1/0x350 [ 1243.415949][T13751] get_page_from_freelist+0x101e/0x3070 [ 1243.421507][T13751] __alloc_pages_noprof+0x223/0x25c0 [ 1243.426815][T13751] alloc_pages_bulk_noprof+0x77c/0x1110 [ 1243.432374][T13751] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1243.438305][T13751] page_pool_alloc_netmem+0xc4/0x160 [ 1243.443609][T13751] page_pool_alloc_pages+0x1a/0x60 [ 1243.448746][T13751] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 1243.454942][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1243.460238][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1243.465633][T13751] __sys_bpf+0xfc6/0x49a0 [ 1243.469971][T13751] __x64_sys_bpf+0x78/0xc0 [ 1243.474372][T13751] do_syscall_64+0xcd/0x250 [ 1243.478894][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.484828][T13751] page last free pid 13743 tgid 13743 stack trace: [ 1243.491332][T13751] free_unref_folios+0x956/0x1310 [ 1243.496400][T13751] folios_put_refs+0x551/0x750 [ 1243.501182][T13751] free_pages_and_swap_cache+0x36d/0x510 [ 1243.506848][T13751] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1243.512836][T13751] tlb_finish_mmu+0x168/0x7b0 [ 1243.517535][T13751] exit_mmap+0x3df/0xb30 [ 1243.521791][T13751] __mmput+0x12a/0x480 [ 1243.525877][T13751] mmput+0x62/0x70 [ 1243.529603][T13751] do_exit+0x9bf/0x2d70 [ 1243.533750][T13751] do_group_exit+0xd3/0x2a0 [ 1243.538284][T13751] __x64_sys_exit_group+0x3e/0x50 [ 1243.543325][T13751] x64_sys_call+0x14a9/0x16a0 [ 1243.548022][T13751] do_syscall_64+0xcd/0x250 [ 1243.552538][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.558449][T13751] Modules linked in: [ 1243.562347][T13751] CPU: 1 UID: 0 PID: 13751 Comm: syz.2.1816 Tainted: G B 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 1243.574569][T13751] Tainted: [B]=BAD_PAGE [ 1243.578720][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1243.588758][T13751] Call Trace: [ 1243.592020][T13751] [ 1243.594946][T13751] dump_stack_lvl+0x16c/0x1f0 [ 1243.599639][T13751] bad_page+0xb3/0x1f0 [ 1243.603701][T13751] ? __pfx_bad_page+0x10/0x10 [ 1243.608366][T13751] ? page_bad_reason+0x9d/0x1e0 [ 1243.613208][T13751] free_unref_page+0x657/0xdc0 [ 1243.617984][T13751] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 1243.623974][T13751] ? __phys_addr+0xc6/0x150 [ 1243.628479][T13751] skb_free_head+0xa0/0x1d0 [ 1243.632985][T13751] skb_release_data+0x560/0x730 [ 1243.637840][T13751] ? packet_rcv+0x16c/0x15a0 [ 1243.642433][T13751] ? rcu_is_watching+0x12/0xc0 [ 1243.647210][T13751] sk_skb_reason_drop+0x129/0x1a0 [ 1243.652240][T13751] packet_rcv+0x16c/0x15a0 [ 1243.656741][T13751] ? __pfx_packet_rcv+0x10/0x10 [ 1243.661586][T13751] __netif_receive_skb_list_core+0x41e/0x950 [ 1243.667570][T13751] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1243.674071][T13751] ? trace_lock_acquire+0x14a/0x1d0 [ 1243.679271][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1243.685598][T13751] ? lock_acquire+0x2f/0xb0 [ 1243.690094][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1243.696425][T13751] netif_receive_skb_list_internal+0x753/0xdb0 [ 1243.702584][T13751] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1243.709261][T13751] ? __pfx_eth_type_trans+0x10/0x10 [ 1243.714459][T13751] ? __build_skb_around+0x278/0x3b0 [ 1243.719662][T13751] netif_receive_skb_list+0x4f/0x4a0 [ 1243.724950][T13751] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 1243.731197][T13751] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 1243.737799][T13751] ? bpf_test_timer_continue+0x150/0x3d0 [ 1243.743516][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1243.748975][T13751] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1243.754788][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1243.760688][T13751] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1243.766586][T13751] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1243.772399][T13751] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1243.777683][T13751] ? 0xffffffffa0003b40 [ 1243.781831][T13751] ? 0xffffffffa0003b40 [ 1243.785976][T13751] ? 0xffffffffa0003b40 [ 1243.790119][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1243.796010][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1243.801384][T13751] ? lock_acquire+0x2f/0xb0 [ 1243.805882][T13751] ? __fget_files+0x40/0x3f0 [ 1243.810578][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1243.816410][T13751] ? fput+0x30/0x390 [ 1243.820311][T13751] ? __bpf_prog_get+0xa0/0x290 [ 1243.825090][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1243.830903][T13751] __sys_bpf+0xfc6/0x49a0 [ 1243.835240][T13751] ? __pfx___sys_bpf+0x10/0x10 [ 1243.840007][T13751] ? __schedule+0xefd/0x5750 [ 1243.844596][T13751] ? __fget_files+0x23a/0x3f0 [ 1243.849280][T13751] ? do_futex+0x123/0x350 [ 1243.853612][T13751] ? __pfx_do_futex+0x10/0x10 [ 1243.858299][T13751] ? xfd_validate_state+0x5d/0x180 [ 1243.863413][T13751] ? rcu_is_watching+0x12/0xc0 [ 1243.868180][T13751] __x64_sys_bpf+0x78/0xc0 [ 1243.872599][T13751] ? lockdep_hardirqs_on+0x7c/0x110 [ 1243.877797][T13751] do_syscall_64+0xcd/0x250 [ 1243.882304][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.888197][T13751] RIP: 0033:0x7f599957dff9 [ 1243.892607][T13751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1243.912208][T13751] RSP: 002b:00007f599a360038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1243.920618][T13751] RAX: ffffffffffffffda RBX: 00007f5999735f80 RCX: 00007f599957dff9 [ 1243.928581][T13751] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 1243.936547][T13751] RBP: 00007f59995f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1243.944513][T13751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1243.952478][T13751] R13: 0000000000000000 R14: 00007f5999735f80 R15: 00007ffccf4ff5e8 [ 1243.960452][T13751] [ 1243.963687][T13751] BUG: Bad page state in process syz.2.1816 pfn:6fa8f [ 1243.970578][T13751] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806fa8f960 pfn:0x6fa8f [ 1243.980671][T13751] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1243.987821][T13751] raw: 00fff00000000000 dead000000000040 ffff888029328000 0000000000000000 [ 1243.996442][T13751] raw: ffff88806fa8f960 0000000000000001 00000000ffffffff 0000000000000000 [ 1244.005061][T13751] page dumped because: page_pool leak [ 1244.010431][T13751] page_owner tracks the page as allocated [ 1244.016170][T13751] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13751, tgid 13748 (syz.2.1816), ts 1238328267774, free_ts 1238195087969 [ 1244.033569][T13751] post_alloc_hook+0x2d1/0x350 [ 1244.038356][T13751] get_page_from_freelist+0x101e/0x3070 [ 1244.043919][T13751] __alloc_pages_noprof+0x223/0x25c0 [ 1244.049237][T13751] alloc_pages_bulk_noprof+0x77c/0x1110 [ 1244.054821][T13751] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1244.060730][T13751] page_pool_alloc_netmem+0xc4/0x160 [ 1244.066052][T13751] page_pool_alloc_pages+0x1a/0x60 [ 1244.071196][T13751] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 1244.077831][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1244.083145][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1244.088546][T13751] __sys_bpf+0xfc6/0x49a0 [ 1244.092892][T13751] __x64_sys_bpf+0x78/0xc0 [ 1244.097348][T13751] do_syscall_64+0xcd/0x250 [ 1244.101864][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.107795][T13751] page last free pid 13743 tgid 13743 stack trace: [ 1244.114303][T13751] free_unref_folios+0x956/0x1310 [ 1244.119464][T13751] folios_put_refs+0x551/0x750 [ 1244.124243][T13751] free_pages_and_swap_cache+0x36d/0x510 [ 1244.129910][T13751] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1244.135938][T13751] tlb_finish_mmu+0x168/0x7b0 [ 1244.140634][T13751] exit_mmap+0x3df/0xb30 [ 1244.144910][T13751] __mmput+0x12a/0x480 [ 1244.148992][T13751] mmput+0x62/0x70 [ 1244.152699][T13751] do_exit+0x9bf/0x2d70 [ 1244.156878][T13751] do_group_exit+0xd3/0x2a0 [ 1244.161397][T13751] __x64_sys_exit_group+0x3e/0x50 [ 1244.166440][T13751] x64_sys_call+0x14a9/0x16a0 [ 1244.171128][T13751] do_syscall_64+0xcd/0x250 [ 1244.175662][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.181574][T13751] Modules linked in: [ 1244.185490][T13751] CPU: 1 UID: 0 PID: 13751 Comm: syz.2.1816 Tainted: G B 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 1244.197741][T13751] Tainted: [B]=BAD_PAGE [ 1244.201872][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1244.211912][T13751] Call Trace: [ 1244.215186][T13751] [ 1244.218122][T13751] dump_stack_lvl+0x16c/0x1f0 [ 1244.222792][T13751] bad_page+0xb3/0x1f0 [ 1244.226878][T13751] ? __pfx_bad_page+0x10/0x10 [ 1244.231563][T13751] ? page_bad_reason+0x9d/0x1e0 [ 1244.236418][T13751] free_unref_page+0x657/0xdc0 [ 1244.241181][T13751] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 1244.247175][T13751] ? __phys_addr+0xc6/0x150 [ 1244.251687][T13751] skb_free_head+0xa0/0x1d0 [ 1244.256195][T13751] skb_release_data+0x560/0x730 [ 1244.261059][T13751] ? packet_rcv+0x16c/0x15a0 [ 1244.265647][T13751] ? rcu_is_watching+0x12/0xc0 [ 1244.270414][T13751] sk_skb_reason_drop+0x129/0x1a0 [ 1244.275439][T13751] packet_rcv+0x16c/0x15a0 [ 1244.279856][T13751] ? __pfx_packet_rcv+0x10/0x10 [ 1244.284705][T13751] __netif_receive_skb_list_core+0x41e/0x950 [ 1244.290696][T13751] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1244.297207][T13751] ? trace_lock_acquire+0x14a/0x1d0 [ 1244.302406][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1244.308736][T13751] ? lock_acquire+0x2f/0xb0 [ 1244.313235][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1244.319568][T13751] netif_receive_skb_list_internal+0x753/0xdb0 [ 1244.325729][T13751] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1244.332404][T13751] ? __pfx_eth_type_trans+0x10/0x10 [ 1244.337605][T13751] ? __build_skb_around+0x278/0x3b0 [ 1244.342806][T13751] netif_receive_skb_list+0x4f/0x4a0 [ 1244.348091][T13751] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 1244.354336][T13751] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 1244.360929][T13751] ? bpf_test_timer_continue+0x150/0x3d0 [ 1244.366561][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1244.371844][T13751] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1244.377653][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1244.383547][T13751] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1244.389441][T13751] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1244.395253][T13751] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1244.400535][T13751] ? 0xffffffffa0003b40 [ 1244.404683][T13751] ? 0xffffffffa0003b40 [ 1244.408832][T13751] ? 0xffffffffa0003b40 [ 1244.412978][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1244.418955][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1244.424330][T13751] ? lock_acquire+0x2f/0xb0 [ 1244.428830][T13751] ? __fget_files+0x40/0x3f0 [ 1244.433425][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1244.439238][T13751] ? fput+0x30/0x390 [ 1244.443141][T13751] ? __bpf_prog_get+0xa0/0x290 [ 1244.447909][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1244.453713][T13751] __sys_bpf+0xfc6/0x49a0 [ 1244.458042][T13751] ? __pfx___sys_bpf+0x10/0x10 [ 1244.462805][T13751] ? __schedule+0xefd/0x5750 [ 1244.467396][T13751] ? __fget_files+0x23a/0x3f0 [ 1244.472080][T13751] ? do_futex+0x123/0x350 [ 1244.476419][T13751] ? __pfx_do_futex+0x10/0x10 [ 1244.481102][T13751] ? xfd_validate_state+0x5d/0x180 [ 1244.486211][T13751] ? rcu_is_watching+0x12/0xc0 [ 1244.490976][T13751] __x64_sys_bpf+0x78/0xc0 [ 1244.495390][T13751] ? lockdep_hardirqs_on+0x7c/0x110 [ 1244.500588][T13751] do_syscall_64+0xcd/0x250 [ 1244.505094][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.510990][T13751] RIP: 0033:0x7f599957dff9 [ 1244.515402][T13751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1244.535006][T13751] RSP: 002b:00007f599a360038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1244.543415][T13751] RAX: ffffffffffffffda RBX: 00007f5999735f80 RCX: 00007f599957dff9 [ 1244.551468][T13751] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 1244.559435][T13751] RBP: 00007f59995f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1244.567403][T13751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1244.575369][T13751] R13: 0000000000000000 R14: 00007f5999735f80 R15: 00007ffccf4ff5e8 [ 1244.583344][T13751] [ 1244.586425][T13751] BUG: Bad page state in process syz.2.1816 pfn:6fc27 [ 1244.593282][T13751] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806fc27b40 pfn:0x6fc27 [ 1244.603380][T13751] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1244.610529][T13751] raw: 00fff00000000000 dead000000000040 ffff888029328000 0000000000000000 [ 1244.619155][T13751] raw: ffff88806fc27b40 0000000000000001 00000000ffffffff 0000000000000000 [ 1244.627745][T13751] page dumped because: page_pool leak [ 1244.633115][T13751] page_owner tracks the page as allocated [ 1244.638848][T13751] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13751, tgid 13748 (syz.2.1816), ts 1238328255712, free_ts 1238195095812 [ 1244.656216][T13751] post_alloc_hook+0x2d1/0x350 [ 1244.660992][T13751] get_page_from_freelist+0x101e/0x3070 [ 1244.666557][T13751] __alloc_pages_noprof+0x223/0x25c0 [ 1244.671868][T13751] alloc_pages_bulk_noprof+0x77c/0x1110 [ 1244.677473][T13751] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1244.683400][T13751] page_pool_alloc_netmem+0xc4/0x160 [ 1244.688744][T13751] page_pool_alloc_pages+0x1a/0x60 [ 1244.693889][T13751] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 1244.700119][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1244.705454][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1244.710852][T13751] __sys_bpf+0xfc6/0x49a0 [ 1244.715231][T13751] __x64_sys_bpf+0x78/0xc0 [ 1244.719671][T13751] do_syscall_64+0xcd/0x250 [ 1244.724198][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.730143][T13751] page last free pid 13743 tgid 13743 stack trace: [ 1244.736669][T13751] free_unref_folios+0x956/0x1310 [ 1244.741705][T13751] folios_put_refs+0x551/0x750 [ 1244.746496][T13751] free_pages_and_swap_cache+0x36d/0x510 [ 1244.752152][T13751] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1244.758193][T13751] tlb_finish_mmu+0x168/0x7b0 [ 1244.762900][T13751] exit_mmap+0x3df/0xb30 [ 1244.767237][T13751] __mmput+0x12a/0x480 [ 1244.771325][T13751] mmput+0x62/0x70 [ 1244.775085][T13751] do_exit+0x9bf/0x2d70 [ 1244.779259][T13751] do_group_exit+0xd3/0x2a0 [ 1244.783762][T13751] __x64_sys_exit_group+0x3e/0x50 [ 1244.788813][T13751] x64_sys_call+0x14a9/0x16a0 [ 1244.793510][T13751] do_syscall_64+0xcd/0x250 [ 1244.798039][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.803950][T13751] Modules linked in: [ 1244.807864][T13751] CPU: 1 UID: 0 PID: 13751 Comm: syz.2.1816 Tainted: G B 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 1244.820116][T13751] Tainted: [B]=BAD_PAGE [ 1244.824251][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1244.834314][T13751] Call Trace: [ 1244.837581][T13751] [ 1244.840499][T13751] dump_stack_lvl+0x16c/0x1f0 [ 1244.845178][T13751] bad_page+0xb3/0x1f0 [ 1244.849256][T13751] ? __pfx_bad_page+0x10/0x10 [ 1244.853939][T13751] ? page_bad_reason+0x9d/0x1e0 [ 1244.858796][T13751] free_unref_page+0x657/0xdc0 [ 1244.863562][T13751] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 1244.869562][T13751] ? __phys_addr+0xc6/0x150 [ 1244.874078][T13751] skb_free_head+0xa0/0x1d0 [ 1244.878596][T13751] skb_release_data+0x560/0x730 [ 1244.883470][T13751] ? packet_rcv+0x16c/0x15a0 [ 1244.888068][T13751] ? rcu_is_watching+0x12/0xc0 [ 1244.892837][T13751] sk_skb_reason_drop+0x129/0x1a0 [ 1244.897865][T13751] packet_rcv+0x16c/0x15a0 [ 1244.902300][T13751] ? __pfx_packet_rcv+0x10/0x10 [ 1244.907155][T13751] __netif_receive_skb_list_core+0x41e/0x950 [ 1244.913158][T13751] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1244.919668][T13751] ? trace_lock_acquire+0x14a/0x1d0 [ 1244.924878][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1244.931223][T13751] ? lock_acquire+0x2f/0xb0 [ 1244.935729][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1244.942066][T13751] netif_receive_skb_list_internal+0x753/0xdb0 [ 1244.948226][T13751] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1244.954908][T13751] ? __pfx_eth_type_trans+0x10/0x10 [ 1244.960112][T13751] ? __build_skb_around+0x278/0x3b0 [ 1244.965317][T13751] netif_receive_skb_list+0x4f/0x4a0 [ 1244.970608][T13751] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 1244.976860][T13751] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 1244.983460][T13751] ? bpf_test_timer_continue+0x150/0x3d0 [ 1244.989098][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1244.994388][T13751] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1245.000233][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1245.006145][T13751] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1245.012041][T13751] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1245.017857][T13751] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1245.023160][T13751] ? 0xffffffffa0003b40 [ 1245.027322][T13751] ? 0xffffffffa0003b40 [ 1245.031485][T13751] ? 0xffffffffa0003b40 [ 1245.035637][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1245.041536][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1245.046917][T13751] ? lock_acquire+0x2f/0xb0 [ 1245.051420][T13751] ? __fget_files+0x40/0x3f0 [ 1245.056018][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1245.061838][T13751] ? fput+0x30/0x390 [ 1245.065734][T13751] ? __bpf_prog_get+0xa0/0x290 [ 1245.070506][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1245.076315][T13751] __sys_bpf+0xfc6/0x49a0 [ 1245.080646][T13751] ? __pfx___sys_bpf+0x10/0x10 [ 1245.085458][T13751] ? __schedule+0xefd/0x5750 [ 1245.090070][T13751] ? __fget_files+0x23a/0x3f0 [ 1245.094768][T13751] ? do_futex+0x123/0x350 [ 1245.099112][T13751] ? __pfx_do_futex+0x10/0x10 [ 1245.103800][T13751] ? xfd_validate_state+0x5d/0x180 [ 1245.108916][T13751] ? rcu_is_watching+0x12/0xc0 [ 1245.113688][T13751] __x64_sys_bpf+0x78/0xc0 [ 1245.118112][T13751] ? lockdep_hardirqs_on+0x7c/0x110 [ 1245.123317][T13751] do_syscall_64+0xcd/0x250 [ 1245.130432][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.136328][T13751] RIP: 0033:0x7f599957dff9 [ 1245.140738][T13751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1245.160351][T13751] RSP: 002b:00007f599a360038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1245.168766][T13751] RAX: ffffffffffffffda RBX: 00007f5999735f80 RCX: 00007f599957dff9 [ 1245.176732][T13751] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 1245.184704][T13751] RBP: 00007f59995f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1245.192676][T13751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1245.200642][T13751] R13: 0000000000000000 R14: 00007f5999735f80 R15: 00007ffccf4ff5e8 [ 1245.208617][T13751] [ 1245.211706][T13751] BUG: Bad page state in process syz.2.1816 pfn:6e1b7 [ 1245.218592][T13751] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806e1b7f00 pfn:0x6e1b7 [ 1245.228692][T13751] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1245.235843][T13751] raw: 00fff00000000000 dead000000000040 ffff888029328000 0000000000000000 [ 1245.244439][T13751] raw: ffff88806e1b7f00 0000000000000001 00000000ffffffff 0000000000000000 [ 1245.253045][T13751] page dumped because: page_pool leak [ 1245.258440][T13751] page_owner tracks the page as allocated [ 1245.264149][T13751] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13751, tgid 13748 (syz.2.1816), ts 1238328243709, free_ts 1238195104147 [ 1245.281685][T13751] post_alloc_hook+0x2d1/0x350 [ 1245.286568][T13751] get_page_from_freelist+0x101e/0x3070 [ 1245.292107][T13751] __alloc_pages_noprof+0x223/0x25c0 [ 1245.297396][T13751] alloc_pages_bulk_noprof+0x77c/0x1110 [ 1245.302932][T13751] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1245.308852][T13751] page_pool_alloc_netmem+0xc4/0x160 [ 1245.314161][T13751] page_pool_alloc_pages+0x1a/0x60 [ 1245.319301][T13751] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 1245.325585][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1245.330880][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1245.336284][T13751] __sys_bpf+0xfc6/0x49a0 [ 1245.340638][T13751] __x64_sys_bpf+0x78/0xc0 [ 1245.345090][T13751] do_syscall_64+0xcd/0x250 [ 1245.349633][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.355547][T13751] page last free pid 13743 tgid 13743 stack trace: [ 1245.362067][T13751] free_unref_folios+0x956/0x1310 [ 1245.367129][T13751] folios_put_refs+0x551/0x750 [ 1245.371911][T13751] free_pages_and_swap_cache+0x36d/0x510 [ 1245.377572][T13751] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1245.383575][T13751] tlb_finish_mmu+0x168/0x7b0 [ 1245.388306][T13751] exit_mmap+0x3df/0xb30 [ 1245.392557][T13751] __mmput+0x12a/0x480 [ 1245.396674][T13751] mmput+0x62/0x70 [ 1245.400404][T13751] do_exit+0x9bf/0x2d70 [ 1245.404577][T13751] do_group_exit+0xd3/0x2a0 [ 1245.409108][T13751] __x64_sys_exit_group+0x3e/0x50 [ 1245.414150][T13751] x64_sys_call+0x14a9/0x16a0 [ 1245.418849][T13751] do_syscall_64+0xcd/0x250 [ 1245.423369][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.429313][T13751] Modules linked in: [ 1245.433213][T13751] CPU: 1 UID: 0 PID: 13751 Comm: syz.2.1816 Tainted: G B 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 1245.445443][T13751] Tainted: [B]=BAD_PAGE [ 1245.449577][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1245.459619][T13751] Call Trace: [ 1245.462889][T13751] [ 1245.465808][T13751] dump_stack_lvl+0x16c/0x1f0 [ 1245.470482][T13751] bad_page+0xb3/0x1f0 [ 1245.474565][T13751] ? __pfx_bad_page+0x10/0x10 [ 1245.479233][T13751] ? page_bad_reason+0x9d/0x1e0 [ 1245.484078][T13751] free_unref_page+0x657/0xdc0 [ 1245.488837][T13751] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 1245.494832][T13751] ? __phys_addr+0xc6/0x150 [ 1245.499340][T13751] skb_free_head+0xa0/0x1d0 [ 1245.503846][T13751] skb_release_data+0x560/0x730 [ 1245.508706][T13751] ? packet_rcv+0x16c/0x15a0 [ 1245.513295][T13751] ? rcu_is_watching+0x12/0xc0 [ 1245.518063][T13751] sk_skb_reason_drop+0x129/0x1a0 [ 1245.523088][T13751] packet_rcv+0x16c/0x15a0 [ 1245.527502][T13751] ? __pfx_packet_rcv+0x10/0x10 [ 1245.532348][T13751] __netif_receive_skb_list_core+0x41e/0x950 [ 1245.538348][T13751] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1245.544851][T13751] ? trace_lock_acquire+0x14a/0x1d0 [ 1245.550052][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1245.556382][T13751] ? lock_acquire+0x2f/0xb0 [ 1245.560880][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1245.567213][T13751] netif_receive_skb_list_internal+0x753/0xdb0 [ 1245.573373][T13751] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1245.580399][T13751] ? __pfx_eth_type_trans+0x10/0x10 [ 1245.585601][T13751] ? __build_skb_around+0x278/0x3b0 [ 1245.590807][T13751] netif_receive_skb_list+0x4f/0x4a0 [ 1245.596098][T13751] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 1245.602349][T13751] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 1245.608943][T13751] ? bpf_test_timer_continue+0x150/0x3d0 [ 1245.614578][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1245.619867][T13751] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1245.625764][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1245.631658][T13751] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1245.637549][T13751] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1245.643365][T13751] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1245.648651][T13751] ? 0xffffffffa0003b40 [ 1245.652799][T13751] ? 0xffffffffa0003b40 [ 1245.656946][T13751] ? 0xffffffffa0003b40 [ 1245.661095][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1245.666993][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1245.672396][T13751] ? lock_acquire+0x2f/0xb0 [ 1245.676903][T13751] ? __fget_files+0x40/0x3f0 [ 1245.681500][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1245.687312][T13751] ? fput+0x30/0x390 [ 1245.691209][T13751] ? __bpf_prog_get+0xa0/0x290 [ 1245.695987][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1245.701800][T13751] __sys_bpf+0xfc6/0x49a0 [ 1245.706129][T13751] ? __pfx___sys_bpf+0x10/0x10 [ 1245.710893][T13751] ? __schedule+0xefd/0x5750 [ 1245.715482][T13751] ? __fget_files+0x23a/0x3f0 [ 1245.720165][T13751] ? do_futex+0x123/0x350 [ 1245.724584][T13751] ? __pfx_do_futex+0x10/0x10 [ 1245.729270][T13751] ? xfd_validate_state+0x5d/0x180 [ 1245.734379][T13751] ? rcu_is_watching+0x12/0xc0 [ 1245.739148][T13751] __x64_sys_bpf+0x78/0xc0 [ 1245.743564][T13751] ? lockdep_hardirqs_on+0x7c/0x110 [ 1245.748765][T13751] do_syscall_64+0xcd/0x250 [ 1245.753273][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.759167][T13751] RIP: 0033:0x7f599957dff9 [ 1245.763584][T13751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1245.783626][T13751] RSP: 002b:00007f599a360038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1245.792051][T13751] RAX: ffffffffffffffda RBX: 00007f5999735f80 RCX: 00007f599957dff9 [ 1245.800043][T13751] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 1245.808029][T13751] RBP: 00007f59995f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1245.815999][T13751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1245.823975][T13751] R13: 0000000000000000 R14: 00007f5999735f80 R15: 00007ffccf4ff5e8 [ 1245.831957][T13751] [ 1245.835048][T13751] BUG: Bad page state in process syz.2.1816 pfn:6e80a [ 1245.841907][T13751] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806e80adc0 pfn:0x6e80a [ 1245.852005][T13751] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1245.859170][T13751] raw: 00fff00000000000 dead000000000040 ffff888029328000 0000000000000000 [ 1245.867808][T13751] raw: ffff88806e80adc0 0000000000000001 00000000ffffffff 0000000000000000 [ 1245.876408][T13751] page dumped because: page_pool leak [ 1245.881771][T13751] page_owner tracks the page as allocated [ 1245.887499][T13751] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13751, tgid 13748 (syz.2.1816), ts 1238328231276, free_ts 1238195112069 [ 1245.904865][T13751] post_alloc_hook+0x2d1/0x350 [ 1245.909620][T13751] get_page_from_freelist+0x101e/0x3070 [ 1245.915185][T13751] __alloc_pages_noprof+0x223/0x25c0 [ 1245.920507][T13751] alloc_pages_bulk_noprof+0x77c/0x1110 [ 1245.926079][T13751] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1245.931979][T13751] page_pool_alloc_netmem+0xc4/0x160 [ 1245.937272][T13751] page_pool_alloc_pages+0x1a/0x60 [ 1245.942380][T13751] xdp_test_run_batch.constprop.0+0x3a8/0x1960 [ 1245.948560][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1245.953845][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1245.959223][T13751] __sys_bpf+0xfc6/0x49a0 [ 1245.963542][T13751] __x64_sys_bpf+0x78/0xc0 [ 1245.967978][T13751] do_syscall_64+0xcd/0x250 [ 1245.972521][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.978471][T13751] page last free pid 13743 tgid 13743 stack trace: [ 1245.985012][T13751] free_unref_folios+0x956/0x1310 [ 1245.990074][T13751] folios_put_refs+0x551/0x750 [ 1245.994874][T13751] free_pages_and_swap_cache+0x36d/0x510 [ 1246.000514][T13751] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1246.006521][T13751] tlb_finish_mmu+0x168/0x7b0 [ 1246.011209][T13751] exit_mmap+0x3df/0xb30 [ 1246.015480][T13751] __mmput+0x12a/0x480 [ 1246.019564][T13751] mmput+0x62/0x70 [ 1246.023291][T13751] do_exit+0x9bf/0x2d70 [ 1246.027465][T13751] do_group_exit+0xd3/0x2a0 [ 1246.031984][T13751] __x64_sys_exit_group+0x3e/0x50 [ 1246.037039][T13751] x64_sys_call+0x14a9/0x16a0 [ 1246.041740][T13751] do_syscall_64+0xcd/0x250 [ 1246.046278][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.052184][T13751] Modules linked in: [ 1246.056115][T13751] CPU: 1 UID: 0 PID: 13751 Comm: syz.2.1816 Tainted: G B 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 1246.068367][T13751] Tainted: [B]=BAD_PAGE [ 1246.072501][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1246.082541][T13751] Call Trace: [ 1246.085807][T13751] [ 1246.088727][T13751] dump_stack_lvl+0x16c/0x1f0 [ 1246.093396][T13751] bad_page+0xb3/0x1f0 [ 1246.097458][T13751] ? __pfx_bad_page+0x10/0x10 [ 1246.102131][T13751] ? page_bad_reason+0x9d/0x1e0 [ 1246.106981][T13751] free_unref_page+0x657/0xdc0 [ 1246.111754][T13751] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 1246.117748][T13751] ? __phys_addr+0xc6/0x150 [ 1246.122345][T13751] skb_free_head+0xa0/0x1d0 [ 1246.126857][T13751] skb_release_data+0x560/0x730 [ 1246.131714][T13751] ? packet_rcv+0x16c/0x15a0 [ 1246.136304][T13751] ? rcu_is_watching+0x12/0xc0 [ 1246.141076][T13751] sk_skb_reason_drop+0x129/0x1a0 [ 1246.146101][T13751] packet_rcv+0x16c/0x15a0 [ 1246.150518][T13751] ? __pfx_packet_rcv+0x10/0x10 [ 1246.155369][T13751] __netif_receive_skb_list_core+0x41e/0x950 [ 1246.161359][T13751] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1246.167867][T13751] ? trace_lock_acquire+0x14a/0x1d0 [ 1246.173068][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1246.179402][T13751] ? lock_acquire+0x2f/0xb0 [ 1246.183902][T13751] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 1246.190234][T13751] netif_receive_skb_list_internal+0x753/0xdb0 [ 1246.196396][T13751] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1246.203077][T13751] ? __pfx_eth_type_trans+0x10/0x10 [ 1246.208283][T13751] ? __build_skb_around+0x278/0x3b0 [ 1246.213488][T13751] netif_receive_skb_list+0x4f/0x4a0 [ 1246.218778][T13751] xdp_test_run_batch.constprop.0+0x138d/0x1960 [ 1246.225030][T13751] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 1246.231624][T13751] ? bpf_test_timer_continue+0x150/0x3d0 [ 1246.237258][T13751] bpf_test_run_xdp_live+0x365/0x500 [ 1246.242545][T13751] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1246.248353][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1246.254251][T13751] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1246.260142][T13751] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1246.265955][T13751] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1246.271239][T13751] ? 0xffffffffa0003b40 [ 1246.275391][T13751] ? 0xffffffffa0003b40 [ 1246.279536][T13751] ? 0xffffffffa0003b40 [ 1246.283682][T13751] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1246.289575][T13751] bpf_prog_test_run_xdp+0x827/0x1580 [ 1246.294952][T13751] ? lock_acquire+0x2f/0xb0 [ 1246.299453][T13751] ? __fget_files+0x40/0x3f0 [ 1246.304048][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1246.309861][T13751] ? fput+0x30/0x390 [ 1246.313766][T13751] ? __bpf_prog_get+0xa0/0x290 [ 1246.318537][T13751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1246.324345][T13751] __sys_bpf+0xfc6/0x49a0 [ 1246.328674][T13751] ? __pfx___sys_bpf+0x10/0x10 [ 1246.333434][T13751] ? __schedule+0xefd/0x5750 [ 1246.338041][T13751] ? __fget_files+0x23a/0x3f0 [ 1246.342723][T13751] ? do_futex+0x123/0x350 [ 1246.347056][T13751] ? __pfx_do_futex+0x10/0x10 [ 1246.351739][T13751] ? xfd_validate_state+0x5d/0x180 [ 1246.356848][T13751] ? rcu_is_watching+0x12/0xc0 [ 1246.361618][T13751] __x64_sys_bpf+0x78/0xc0 [ 1246.366037][T13751] ? lockdep_hardirqs_on+0x7c/0x110 [ 1246.371322][T13751] do_syscall_64+0xcd/0x250 [ 1246.375829][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.381724][T13751] RIP: 0033:0x7f599957dff9 [ 1246.386134][T13751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1246.405739][T13751] RSP: 002b:00007f599a360038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1246.414152][T13751] RAX: ffffffffffffffda RBX: 00007f5999735f80 RCX: 00007f599957dff9 [ 1246.422121][T13751] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 1246.430088][T13751] RBP: 00007f59995f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1246.438053][T13751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1246.446019][T13751] R13: 0000000000000000 R14: 00007f5999735f80 R15: 00007ffccf4ff5e8 [ 1246.453996][T13751]