last executing test programs: 5m33.555863505s ago: executing program 1 (id=266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000050) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 5m32.073422573s ago: executing program 1 (id=270): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000540)=[{r2, 0x8289}], 0x1, 0xc3cb) close_range(r0, r2, 0x0) 5m28.151888756s ago: executing program 1 (id=280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000050) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 5m26.277245305s ago: executing program 1 (id=284): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x44040) r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) syz_open_pts(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x50, 0xd, 0xffffffffffffffff) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d", @ANYRES16], 0x0) 5m26.148179039s ago: executing program 3 (id=285): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001000390400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01980400419a04001800128008000100677470000c00028008000100", @ANYRES32], 0x38}}, 0x0) sendto$packet(r0, &(0x7f0000000540)="05d98ea95e04c0d35bb5f75deff207fb646788c5", 0x14, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @random="ae639550b3be"}, 0x14) 5m24.013349527s ago: executing program 3 (id=287): r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 5m23.25414005s ago: executing program 3 (id=288): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x118}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) 5m22.79415023s ago: executing program 1 (id=290): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000540)=[{r2, 0x8289}], 0x1, 0xc3cb) close_range(r0, r2, 0x0) 5m18.901148619s ago: executing program 1 (id=298): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000031401002abd7000ffdbdf00090002007379873100000000080041007278650014003300626f6e643000"/55], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 5m14.29504452s ago: executing program 3 (id=311): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0xfe61}}, 0x880) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) open(0x0, 0x10d2fe, 0x20) 5m12.170800069s ago: executing program 3 (id=315): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 5m11.45568107s ago: executing program 3 (id=319): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x0, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000}], 0xa0000) unshare(0x62040200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x54) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000042}, 0x90) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffffff, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x14) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x8, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 5m3.393214552s ago: executing program 32 (id=298): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000031401002abd7000ffdbdf00090002007379873100000000080041007278650014003300626f6e643000"/55], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 4m55.512414068s ago: executing program 33 (id=319): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x0, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000}], 0xa0000) unshare(0x62040200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x54) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000042}, 0x90) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffffff, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x14) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x8, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 4m43.084964534s ago: executing program 2 (id=353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m42.145504421s ago: executing program 2 (id=354): r0 = dup(0xffffffffffffffff) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000003c0)={0x1, r0}) 4m41.389539682s ago: executing program 2 (id=356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 4m39.731149718s ago: executing program 2 (id=359): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0xb211, 0x13580, 0x0, 0x1d7}, 0x0, &(0x7f0000000280)) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = eventfd(0x80) ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r4}) 4m32.847156196s ago: executing program 2 (id=366): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0x1, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0x6100083a, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60841, 0xb3836f6d7a15f29) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 4m32.350311941s ago: executing program 2 (id=369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x4004190) 4m16.418634186s ago: executing program 34 (id=369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x4004190) 57.550159912s ago: executing program 7 (id=780): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x25, &(0x7f0000000080)=@gcm_256={{0x303}, '\x00', "4867f60c9366f8caca55097828d9173185df9cd607089de85deb98049bc3b01e", "71856135", 'N_3\t\x00\x00\x008'}, 0x38) 56.85524027s ago: executing program 7 (id=782): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x14, 0x6, "001329bf77d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f00000032c0)={0xc, &(0x7f0000003200)={0x40, 0x5, 0x5, {0x5, 0xa, "921920"}}, 0x0}, 0x0) 52.882910743s ago: executing program 7 (id=792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x6, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0x12, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x9, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x7, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x2, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x3, r6, 0x1, 0xd8}, 0x14) 51.050640714s ago: executing program 7 (id=794): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x8, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000200)="b92809bb0243e3b0276725edacae04ef0b1449096b70d14acfcd7bd8eba37a334a0f255b757cd34f21d1c863c100a31a024a83446779ef0da4e7eabe5955296bc55c8edd9e05a7d71d12fd11b991286ad6687b3386006c9a291adc440a19c051c7", 0x61, 0x48050, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x7}, @window={0x3, 0xa, 0x7}, @timestamp, @window={0x3, 0x8, 0x6}, @timestamp, @mss={0x2, 0xca1a}, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 49.982222179s ago: executing program 7 (id=797): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) 49.096479171s ago: executing program 7 (id=800): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x4e21, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@fadd={0x58, 0x114, 0x6, {{0x2, 0x1}, &(0x7f0000000580)=0x2, 0x0, 0xc03c, 0x2, 0x2, 0x8, 0x7b, 0x5}}], 0x58}, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 33.351028391s ago: executing program 35 (id=800): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x4e21, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@fadd={0x58, 0x114, 0x6, {{0x2, 0x1}, &(0x7f0000000580)=0x2, 0x0, 0xc03c, 0x2, 0x2, 0x8, 0x7b, 0x5}}], 0x58}, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 10.436099357s ago: executing program 5 (id=872): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r1, &(0x7f00000000c0)="0400ff000000", 0x6, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @multicast}, 0x14) 9.657985778s ago: executing program 4 (id=874): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r4}) close_range(r1, r4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.470674235s ago: executing program 4 (id=876): syz_open_dev$tty1(0xc, 0x4, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x140) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000000)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) r2 = open(0x0, 0x15da7e, 0x20) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) 8.088774207s ago: executing program 5 (id=877): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x4844) 7.830216017s ago: executing program 4 (id=879): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x83c}}, './file1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 7.038058131s ago: executing program 0 (id=880): set_mempolicy(0x1, &(0x7f0000000000)=0x9, 0x4) 6.965606049s ago: executing program 5 (id=881): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x880) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) close(r0) open(0x0, 0x10d2fe, 0x20) 6.482784101s ago: executing program 6 (id=882): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509", @ANYRESOCT=r0], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RLCREATE(r1, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x8, 0x1, 0x2}, 0x4}}, 0x18) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.340182188s ago: executing program 4 (id=883): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 6.043331327s ago: executing program 0 (id=884): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 5.691710746s ago: executing program 4 (id=885): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r2, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x880) 4.31879562s ago: executing program 0 (id=886): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/39, 0x27}], 0x1) write$ppp(r0, &(0x7f0000000240)="a21549ac", 0x4) 4.084315099s ago: executing program 5 (id=887): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000006cc9a3016b0111bbfa1aa2fbac5e650456d72d8055d2148e8bba48e9852a490d2cff3fa0944d067de663e8dd5be259e5ea7f369d91a5c29c4156a2a884d07d6f4599732851fb6042d3b8d306a87e42648237c78273e08d1ac8030bdcbe585592bc815cbb3b7d862a862da6823d3c9dd34b2567a0576f19ed98526979"], &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r0, 0x0, 0x25, 0x8, @void}, 0x10) 3.875412106s ago: executing program 6 (id=888): r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, 0x0) 3.159527395s ago: executing program 6 (id=889): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000180)="8f851aad", 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x3, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) 3.058940759s ago: executing program 5 (id=890): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000001c00)="11", 0x1}], 0x1}}], 0x1, 0x20000800) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.877791026s ago: executing program 0 (id=891): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x8004, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 2.582973115s ago: executing program 6 (id=892): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x83c}}, './file1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.993612949s ago: executing program 5 (id=893): set_mempolicy(0x1, &(0x7f0000000000)=0x9, 0x4) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xb7a4801a4c230f4a, 0x2, 0x3ff, 0x3, 0x3, 0x3}, {0x9, 0x5, 0x80, 0x2, 0x200, 0x80, 0x1, 0x9}, {0x9, 0x5, 0xd, 0x3, 0x40, 0x7, 0xe}}}}}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 1.407921137s ago: executing program 0 (id=894): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x8000) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = fsmount(r0, 0x0, 0x84) openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000190c0)='syscall\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000480)) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @multicast1}, {0x2, 0x4624, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x2, 0x4e24, @rand_addr=0x64010102}, 0x221, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd1, 0xc}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20004044}, 0x24040804) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) 937.427762ms ago: executing program 6 (id=895): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 596.670278ms ago: executing program 4 (id=896): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x880) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) close(r0) open(0x0, 0x10d2fe, 0x20) 24.586558ms ago: executing program 6 (id=897): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) mount$fuse(0x0, &(0x7f00000001c0)='./file0/file1/file0\x00', &(0x7f0000000200), 0x10088, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x7, 0x3, 0x8000dc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=898): shmctl$IPC_STAT(0x0, 0x2, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f00001c6000/0x3000)=nil, 0x3000, 0x3000008, 0x8031, r0, 0xa9f48000) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="0436d26c541b04c57fd132785ac79a9c12a4"], 0x7) kernel console output (not intermixed with test programs): 64kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20956kB inactive_anon:0kB active_file:3888kB inactive_file:69268kB unevictable:1536kB writepending:232kB zspages:0kB present:1048580kB managed:320852kB mlocked:0kB bounce:0kB free_pcp:14564kB local_pcp:6480kB free_cma:0kB [ 326.225943][ T6922] lowmem_reserve[]: 0 0 0 0 0 [ 326.233779][ T6922] Node 1 Normal free:909372kB boost:0kB min:40088kB low:50108kB high:60128kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:986000kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 326.356366][ T6922] lowmem_reserve[]: 0 0 0 0 0 [ 326.373891][ T6922] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 326.417187][ T6922] Node 0 DMA32: 1*4kB (U) 1*8kB (E) 2*16kB (ME) 1*32kB (M) 2*64kB (UM) 1*128kB (E) 2*256kB (UM) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 121*4096kB (M) = 504140kB [ 326.473533][ T6922] Node 0 Normal: 67*4kB (UM) 10*8kB (UME) 0*16kB 5*32kB (ME) 2*64kB (ME) 2*128kB (UM) 2*256kB (ME) 5*512kB (UE) 0*1024kB 2*2048kB (UE) 2*4096kB (M) = 16252kB [ 326.523037][ T6922] Node 1 Normal: 1*4kB (M) 1*8kB (M) 3*16kB (U) 6*32kB (UM) 5*64kB (UM) 6*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 220*4096kB (M) = 909372kB [ 326.582843][ T6922] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 326.648981][ T6922] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 326.705800][ T6922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 326.774637][ T6922] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 326.795772][ T6922] 44808 total pagecache pages [ 326.885219][ T6922] 0 pages in swap cache [ 326.890100][ T6922] Free swap = 124996kB [ 326.908016][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.915490][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.962603][ T6922] Total swap = 124996kB [ 326.966978][ T6922] 2097051 pages RAM [ 326.970960][ T6922] 0 pages HighMem/MovableOnly [ 327.022936][ T6922] 1531880 pages reserved [ 327.053913][ T6922] 0 pages cma reserved [ 327.995299][ T5775] Bluetooth: hci5: command tx timeout [ 329.370256][ T6899] chnl_net:caif_netlink_parms(): no params data found [ 329.831777][ T5780] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 329.843849][ T5780] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 329.853960][ T5780] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 329.878751][ T5780] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 329.895283][ T5780] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 330.075521][ T5775] Bluetooth: hci5: command tx timeout [ 331.763791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 332.013564][ T5775] Bluetooth: hci6: command tx timeout [ 333.064185][ T6899] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.071802][ T6899] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.165281][ T6899] bridge_slave_0: entered allmulticast mode [ 333.191638][ T6899] bridge_slave_0: entered promiscuous mode [ 333.820457][ T6899] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.893291][ T6899] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.010388][ T6899] bridge_slave_1: entered allmulticast mode [ 334.038792][ T6899] bridge_slave_1: entered promiscuous mode [ 334.079628][ T5775] Bluetooth: hci6: command tx timeout [ 334.712276][ T6899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.841794][ T6899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.093022][ T5845] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 335.287706][ T5845] usb 1-1: Using ep0 maxpacket: 16 [ 335.327557][ T5845] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 335.380853][ T5845] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 335.426058][ T5845] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 335.455633][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.487175][ T5845] usb 1-1: Product: syz [ 335.502176][ T5845] usb 1-1: Manufacturer: syz [ 335.515818][ T5845] usb 1-1: SerialNumber: syz [ 335.770545][ T5845] usb 1-1: 0:2 : does not exist [ 335.853885][ T6899] team0: Port device team_slave_0 added [ 336.158786][ T5775] Bluetooth: hci6: command tx timeout [ 336.269155][ T6899] team0: Port device team_slave_1 added [ 336.434694][ T5845] usb 1-1: USB disconnect, device number 7 [ 336.847111][ T6981] udevd[6981]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 336.928583][ T6899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.994381][ T6899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.202110][ T6899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.288914][ T6899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.322614][ T6899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.428629][ T6899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.904808][ T6986] syzkaller0: entered promiscuous mode [ 337.910796][ T6986] syzkaller0: entered allmulticast mode [ 338.247278][ T5775] Bluetooth: hci6: command tx timeout [ 339.232927][ T6899] hsr_slave_0: entered promiscuous mode [ 339.255801][ T6899] hsr_slave_1: entered promiscuous mode [ 339.277583][ T6899] debugfs: 'hsr0' already exists in 'hsr' [ 339.292822][ T6899] Cannot create hsr debugfs directory [ 340.633270][ T6945] chnl_net:caif_netlink_parms(): no params data found [ 341.876360][ T1013] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.180497][ T1013] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.625004][ T1013] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.934451][ T1013] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.500626][ T6945] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.542907][ T6945] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.550795][ T6945] bridge_slave_0: entered allmulticast mode [ 343.610229][ T6945] bridge_slave_0: entered promiscuous mode [ 343.683301][ T6945] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.697559][ T6945] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.723509][ T6945] bridge_slave_1: entered allmulticast mode [ 343.739210][ T6945] bridge_slave_1: entered promiscuous mode [ 344.272856][ T6945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.543840][ T6945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.065398][ T6945] team0: Port device team_slave_0 added [ 345.081047][ T6899] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 345.151427][ T1013] bridge_slave_1: left allmulticast mode [ 345.167858][ T1013] bridge_slave_1: left promiscuous mode [ 345.205062][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.252130][ T1013] bridge_slave_0: left allmulticast mode [ 345.272116][ T1013] bridge_slave_0: left promiscuous mode [ 345.301160][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.382833][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.459364][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.491470][ T1013] bond0 (unregistering): Released all slaves [ 346.548691][ T6945] team0: Port device team_slave_1 added [ 346.580031][ T6899] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 346.678580][ T6899] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 346.782258][ T6899] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 347.294681][ T6945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.303639][ T6945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.344604][ T6945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.456835][ T6945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.464400][ T6945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.492641][ T6945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.423703][ T6945] hsr_slave_0: entered promiscuous mode [ 348.475234][ T6945] hsr_slave_1: entered promiscuous mode [ 348.714352][ T6945] debugfs: 'hsr0' already exists in 'hsr' [ 348.720210][ T6945] Cannot create hsr debugfs directory [ 349.553481][ T1013] hsr_slave_0: left promiscuous mode [ 349.585295][ T1013] hsr_slave_1: left promiscuous mode [ 349.621335][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.642708][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.675314][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.693159][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.846009][ T1013] veth1_macvtap: left promiscuous mode [ 349.851787][ T1013] veth0_macvtap: left promiscuous mode [ 349.878683][ T1013] veth1_vlan: left promiscuous mode [ 351.745616][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 351.814913][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 354.273151][ T6899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.507854][ T6945] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 354.657832][ T6899] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.694768][ T6945] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 354.778494][ T6945] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 354.933872][ T433] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.941591][ T433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.002687][ T6945] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 355.250884][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.258572][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.077772][ T6945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.460349][ T6945] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.701973][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.709785][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.909370][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.917204][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.351905][ T6899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.826449][ T6945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.450500][ T6899] veth0_vlan: entered promiscuous mode [ 363.635781][ T6899] veth1_vlan: entered promiscuous mode [ 364.189321][ T6899] veth0_macvtap: entered promiscuous mode [ 364.380828][ T6899] veth1_macvtap: entered promiscuous mode [ 364.750790][ T6899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.897515][ T6899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.157090][ T433] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.258396][ T1013] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.287617][ T1013] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.472646][ T1013] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.321829][ T6945] veth0_vlan: entered promiscuous mode [ 366.703553][ T6945] veth1_vlan: entered promiscuous mode [ 367.325023][ T6945] veth0_macvtap: entered promiscuous mode [ 367.435983][ T6945] veth1_macvtap: entered promiscuous mode [ 367.711598][ T6945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.804952][ T6945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.293017][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.344204][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.404255][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.446592][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 368.465827][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.493747][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 368.517001][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 368.554044][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 368.575442][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.715696][ T5780] Bluetooth: hci3: command tx timeout [ 371.223743][ T7206] syzkaller0: entered promiscuous mode [ 371.229487][ T7206] syzkaller0: entered allmulticast mode [ 372.797650][ T5780] Bluetooth: hci3: command tx timeout [ 373.824312][ T7182] chnl_net:caif_netlink_parms(): no params data found [ 374.875232][ T5780] Bluetooth: hci3: command tx timeout [ 375.082884][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.091151][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.738752][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.794084][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.943412][ T7182] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.974569][ T5780] Bluetooth: hci3: command tx timeout [ 376.978491][ T7182] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.135125][ T7182] bridge_slave_0: entered allmulticast mode [ 377.201787][ T7182] bridge_slave_0: entered promiscuous mode [ 377.334598][ T7182] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.394826][ T7182] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.462945][ T7182] bridge_slave_1: entered allmulticast mode [ 377.531273][ T7182] bridge_slave_1: entered promiscuous mode [ 378.282774][ T7182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.453094][ T7182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.141301][ T7182] team0: Port device team_slave_0 added [ 379.256984][ T7182] team0: Port device team_slave_1 added [ 379.411135][ T433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.562844][ T433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.775353][ T7182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.825913][ T7182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.932614][ T7182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.959471][ T7182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.007819][ T7182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.089690][ T7182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.245907][ T7282] syzkaller0: entered promiscuous mode [ 381.275266][ T7282] syzkaller0: entered allmulticast mode [ 382.049790][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.313003][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.520765][ T7182] hsr_slave_0: entered promiscuous mode [ 382.629334][ T7182] hsr_slave_1: entered promiscuous mode [ 382.649566][ T7182] debugfs: 'hsr0' already exists in 'hsr' [ 382.682697][ T7182] Cannot create hsr debugfs directory [ 385.634940][ T7312] netlink: 'syz.0.402': attribute type 10 has an invalid length. [ 385.688956][ T7312] netlink: 40 bytes leftover after parsing attributes in process `syz.0.402'. [ 385.775080][ T7314] netlink: 84 bytes leftover after parsing attributes in process `syz.5.403'. [ 385.878426][ T7312] batadv0: entered promiscuous mode [ 385.903291][ T7312] batadv0: entered allmulticast mode [ 385.970474][ T7312] bridge0: port 1(batadv0) entered blocking state [ 385.989411][ T7312] bridge0: port 1(batadv0) entered disabled state [ 386.096027][ T7312] bridge0: port 1(batadv0) entered blocking state [ 386.103455][ T7312] bridge0: port 1(batadv0) entered forwarding state [ 386.280385][ T433] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 386.290438][ T433] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 386.722192][ T7182] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 387.172767][ T7182] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 387.370697][ T5780] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 387.382743][ T5780] Bluetooth: hci5: Injecting HCI hardware error event [ 387.386524][ T7182] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 387.390786][ T5780] Bluetooth: hci5: hardware error 0x00 [ 387.713574][ T7182] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 388.386363][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.393996][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.525118][ T7351] warn_alloc: 1 callbacks suppressed [ 389.525199][ T7351] syz.6.411: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 389.674885][ T5780] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 389.691105][ T7351] CPU: 0 UID: 0 PID: 7351 Comm: syz.6.411 Not tainted syzkaller #0 PREEMPT(full) [ 389.691267][ T7351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 389.691360][ T7351] Call Trace: [ 389.691418][ T7351] [ 389.691474][ T7351] __dump_stack+0x26/0x30 [ 389.691677][ T7351] dump_stack_lvl+0x14c/0x1c0 [ 389.691871][ T7351] dump_stack+0x1e/0x25 [ 389.692039][ T7351] warn_alloc+0x46f/0x6a0 [ 389.692260][ T7351] ? kmsan_get_metadata+0xf1/0x160 [ 389.692510][ T7351] __vmalloc_node_range_noprof+0x142/0x2d80 [ 389.692725][ T7351] ? should_fail_ex+0x45/0x8c0 [ 389.692901][ T7351] ? kmsan_get_metadata+0xf1/0x160 [ 389.693122][ T7351] ? kmsan_get_metadata+0xf1/0x160 [ 389.693341][ T7351] ? kmsan_get_metadata+0xf1/0x160 [ 389.693577][ T7351] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 389.693813][ T7351] ? __kmalloc_cache_noprof+0x3b0/0x1260 [ 389.693983][ T7351] ? kmsan_get_metadata+0xf1/0x160 [ 389.694227][ T7351] vmalloc_user_noprof+0xce/0x140 [ 389.694406][ T7351] ? xskq_create+0x11d/0x290 [ 389.694619][ T7351] xskq_create+0x11d/0x290 [ 389.694821][ T7351] xsk_init_queue+0xce/0x180 [ 389.695015][ T7351] xsk_setsockopt+0x7f6/0xfe0 [ 389.695225][ T7351] ? __pfx_xsk_setsockopt+0x10/0x10 [ 389.695427][ T7351] __sys_setsockopt+0x43e/0x580 [ 389.695642][ T7351] __ia32_sys_setsockopt+0xf3/0x1a0 [ 389.695851][ T7351] ia32_sys_call+0x34c3/0x4360 [ 389.696007][ T7351] __do_fast_syscall_32+0x17f/0x3f0 [ 389.696234][ T7351] do_fast_syscall_32+0x37/0x80 [ 389.696438][ T7351] do_SYSENTER_32+0x1f/0x30 [ 389.696639][ T7351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 389.696841][ T7351] RIP: 0023:0xf7f03f6c [ 389.696951][ T7351] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 389.697087][ T7351] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 389.697237][ T7351] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000011b [ 389.697340][ T7351] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 389.697434][ T7351] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 389.697535][ T7351] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 389.697626][ T7351] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 389.697757][ T7351] [ 389.872699][ T794] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 390.112736][ T7351] Mem-Info: [ 390.192835][ T7351] active_anon:5989 inactive_anon:0 isolated_anon:0 [ 390.192835][ T7351] active_file:3532 inactive_file:39946 isolated_file:0 [ 390.192835][ T7351] unevictable:768 dirty:53 writeback:0 [ 390.192835][ T7351] slab_reclaimable:5404 slab_unreclaimable:25361 [ 390.192835][ T7351] mapped:30826 shmem:1363 pagetables:1611 [ 390.192835][ T7351] sec_pagetables:0 bounce:0 [ 390.192835][ T7351] kernel_misc_reclaimable:0 [ 390.192835][ T7351] free:351517 free_pcp:13272 free_cma:0 [ 390.343291][ T7351] Node 0 active_anon:23860kB inactive_anon:0kB active_file:14128kB inactive_file:159572kB unevictable:1548kB isolated(anon):0kB isolated(file):0kB mapped:123304kB dirty:212kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5280kB pagetables:5952kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 390.393812][ T7182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.510114][ T7351] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16kB pagetables:392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 390.703344][ T7351] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 390.784157][ T794] usb 7-1: Using ep0 maxpacket: 16 [ 390.858499][ T7351] lowmem_reserve[]: 0 927 1240 1240 1240 [ 390.879281][ T794] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 390.900732][ T7182] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.919670][ T794] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.985115][ T7351] Node 0 DMA32 free:480964kB boost:0kB min:36808kB low:46008kB high:55208kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3492kB inactive_anon:0kB active_file:10240kB inactive_file:90244kB unevictable:0kB writepending:132kB zspages:0kB present:3129332kB managed:949736kB mlocked:0kB bounce:0kB free_pcp:38964kB local_pcp:18504kB free_cma:0kB [ 391.028940][ T7351] lowmem_reserve[]: 0 0 313 313 313 [ 391.072898][ T7351] Node 0 Normal free:17452kB boost:0kB min:13044kB low:16304kB high:19564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20708kB inactive_anon:0kB active_file:3888kB inactive_file:69328kB unevictable:1548kB writepending:80kB zspages:0kB present:1048580kB managed:320852kB mlocked:12kB bounce:0kB free_pcp:11964kB local_pcp:6416kB free_cma:0kB [ 391.195063][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.202808][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.255534][ T7351] lowmem_reserve[]: 0 0 0 0 0 [ 391.284699][ T794] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 391.288982][ T7351] Node 1 Normal free:909120kB boost:0kB min:40088kB low:50108kB high:60128kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:986000kB mlocked:0kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 391.334293][ T794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.425667][ T794] usb 7-1: Product: syz [ 391.430087][ T794] usb 7-1: Manufacturer: syz [ 391.440396][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.448179][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.490715][ T794] usb 7-1: SerialNumber: syz [ 391.601755][ T7351] lowmem_reserve[]: 0 0 0 0 0 [ 391.685258][ T7351] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 391.843570][ T7351] Node 0 DMA32: 693*4kB (UM) 164*8kB (UME) 54*16kB (UM) 38*32kB (UM) 46*64kB (U) 42*128kB (U) 36*256kB (UE) 28*512kB (UME) 19*1024kB (U) 21*2048kB (UME) 94*4096kB (UM) = 485524kB [ 391.948420][ T7351] Node 0 Normal: 135*4kB (UM) 60*8kB (ME) 32*16kB (UME) 12*32kB (U) 25*64kB (UM) 12*128kB (U) 4*256kB (UE) 6*512kB (UM) 4*1024kB (UM) 2*2048kB (UE) 0*4096kB = 17340kB [ 392.099455][ T7351] Node 1 Normal: 0*4kB 0*8kB 4*16kB (UM) 4*32kB (U) 4*64kB (U) 5*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 220*4096kB (M) = 909120kB [ 392.124698][ T7351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 392.184484][ T7351] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 392.423969][ T7351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 392.714019][ T7351] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 392.962189][ T7351] 44839 total pagecache pages [ 393.036921][ T7351] 0 pages in swap cache [ 393.042551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 393.082973][ T7351] Free swap = 124996kB [ 393.164427][ T7351] Total swap = 124996kB [ 393.214915][ T7351] 2097051 pages RAM [ 393.235264][ T7351] 0 pages HighMem/MovableOnly [ 393.306430][ T7351] 1531880 pages reserved [ 393.340125][ T7351] 0 pages cma reserved [ 394.233523][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.288253][ T794] usb 7-1: 0:2 : does not exist [ 394.910121][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.315665][ T794] usb 7-1: USB disconnect, device number 2 [ 395.358937][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.818524][ T7274] udevd[7274]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.985671][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.076256][ T7382] syzkaller0: entered promiscuous mode [ 396.103573][ T7382] syzkaller0: entered allmulticast mode [ 396.916669][ T7389] netlink: 44 bytes leftover after parsing attributes in process `syz.4.420'. [ 396.984440][ T7390] netlink: 84 bytes leftover after parsing attributes in process `syz.4.420'. [ 397.114052][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'. [ 397.573836][ T56] bridge_slave_1: left allmulticast mode [ 397.579727][ T56] bridge_slave_1: left promiscuous mode [ 397.713854][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.833226][ T56] bridge_slave_0: left allmulticast mode [ 397.848624][ T56] bridge_slave_0: left promiscuous mode [ 397.905395][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.723185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 399.746142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 400.839424][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.934494][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.030629][ T56] bond0 (unregistering): Released all slaves [ 401.389633][ T7421] syz.0.427: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 401.467038][ T7421] CPU: 1 UID: 0 PID: 7421 Comm: syz.0.427 Not tainted syzkaller #0 PREEMPT(full) [ 401.467202][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 401.467287][ T7421] Call Trace: [ 401.467341][ T7421] [ 401.467397][ T7421] __dump_stack+0x26/0x30 [ 401.467578][ T7421] dump_stack_lvl+0x14c/0x1c0 [ 401.467763][ T7421] dump_stack+0x1e/0x25 [ 401.467930][ T7421] warn_alloc+0x46f/0x6a0 [ 401.468143][ T7421] ? kmsan_get_metadata+0xf1/0x160 [ 401.468505][ T7421] __vmalloc_node_range_noprof+0x142/0x2d80 [ 401.468761][ T7421] ? should_fail_ex+0x45/0x8c0 [ 401.468949][ T7421] ? kmsan_get_metadata+0xf1/0x160 [ 401.469181][ T7421] ? kmsan_get_metadata+0xf1/0x160 [ 401.469406][ T7421] ? kmsan_get_metadata+0xf1/0x160 [ 401.469645][ T7421] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 401.469887][ T7421] ? __kmalloc_cache_noprof+0x3b0/0x1260 [ 401.470055][ T7421] ? kmsan_get_metadata+0xf1/0x160 [ 401.470294][ T7421] vmalloc_user_noprof+0xce/0x140 [ 401.470476][ T7421] ? xskq_create+0x11d/0x290 [ 401.470688][ T7421] xskq_create+0x11d/0x290 [ 401.470895][ T7421] xsk_init_queue+0xce/0x180 [ 401.471103][ T7421] xsk_setsockopt+0x7f6/0xfe0 [ 401.471309][ T7421] ? __pfx_xsk_setsockopt+0x10/0x10 [ 401.471495][ T7421] __sys_setsockopt+0x43e/0x580 [ 401.471706][ T7421] __ia32_sys_setsockopt+0xf3/0x1a0 [ 401.471916][ T7421] ia32_sys_call+0x34c3/0x4360 [ 401.472071][ T7421] __do_fast_syscall_32+0x17f/0x3f0 [ 401.472294][ T7421] do_fast_syscall_32+0x37/0x80 [ 401.472492][ T7421] do_SYSENTER_32+0x1f/0x30 [ 401.472704][ T7421] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 401.472902][ T7421] RIP: 0023:0xf706ef6c [ 401.473017][ T7421] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 401.473135][ T7421] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 401.473263][ T7421] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000011b [ 401.473363][ T7421] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 401.473460][ T7421] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 401.473552][ T7421] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 401.473652][ T7421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 401.473778][ T7421] [ 401.818271][ T5827] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 401.826968][ T7421] Mem-Info: [ 401.830255][ T7421] active_anon:6102 inactive_anon:0 isolated_anon:0 [ 401.830255][ T7421] active_file:3532 inactive_file:39950 isolated_file:0 [ 401.830255][ T7421] unevictable:768 dirty:61 writeback:0 [ 401.830255][ T7421] slab_reclaimable:5410 slab_unreclaimable:25647 [ 401.830255][ T7421] mapped:29760 shmem:1367 pagetables:1625 [ 401.830255][ T7421] sec_pagetables:0 bounce:0 [ 401.830255][ T7421] kernel_misc_reclaimable:0 [ 401.830255][ T7421] free:354968 free_pcp:13600 free_cma:0 [ 401.956054][ T7421] Node 0 active_anon:24612kB inactive_anon:0kB active_file:14128kB inactive_file:159588kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119040kB dirty:240kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5296kB pagetables:6108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 401.988910][ T7421] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16kB pagetables:392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 402.027392][ T7421] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 402.143738][ T7421] lowmem_reserve[]: 0 927 1240 1240 1240 [ 402.150512][ T7421] Node 0 DMA32 free:490076kB boost:0kB min:36808kB low:46008kB high:55208kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3532kB inactive_anon:0kB active_file:10240kB inactive_file:90244kB unevictable:0kB writepending:128kB zspages:0kB present:3129332kB managed:949736kB mlocked:0kB bounce:0kB free_pcp:42492kB local_pcp:22556kB free_cma:0kB [ 402.262689][ T7421] lowmem_reserve[]: 0 0 313 313 313 [ 402.268531][ T7421] Node 0 Normal free:16328kB boost:0kB min:13044kB low:16304kB high:19564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21136kB inactive_anon:0kB active_file:3888kB inactive_file:69344kB unevictable:1536kB writepending:112kB zspages:0kB present:1048580kB managed:320852kB mlocked:0kB bounce:0kB free_pcp:11588kB local_pcp:6400kB free_cma:0kB [ 402.322759][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 402.387596][ T7182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.422657][ T7421] lowmem_reserve[]: 0 0 0 0 0 [ 402.428516][ T7421] Node 1 Normal free:909372kB boost:0kB min:40088kB low:50108kB high:60128kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:986000kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 402.513691][ T7421] lowmem_reserve[]: 0 0 0 0 0 [ 402.559471][ T7421] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 402.630736][ T5827] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 402.668842][ T5827] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 402.682487][ T7421] Node 0 DMA32: 693*4kB (UM) 163*8kB (UME) 53*16kB (UM) 37*32kB (UM) 46*64kB (U) 43*128kB (U) 37*256kB (UE) 29*512kB (UME) 19*1024kB (U) 21*2048kB (UME) 95*4096kB (UM) = 490460kB [ 402.824204][ T5827] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 402.845591][ T7421] Node 0 Normal: 0*4kB 52*8kB (ME) 31*16kB (ME) 0*32kB 24*64kB (UM) 12*128kB (U) 4*256kB (UE) 6*512kB (UM) 4*1024kB (UM) 2*2048kB (UE) 0*4096kB = 16272kB [ 402.893511][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.901781][ T5827] usb 1-1: Product: syz [ 402.946155][ T7421] Node 1 Normal: 1*4kB (M) 1*8kB (M) 3*16kB (U) 6*32kB (UM) 5*64kB (UM) 6*128kB (UM) 3*256kB (UM) 4*512kB [ 402.953201][ T5827] usb 1-1: Manufacturer: syz [ 402.956406][ T7421] (UM) [ 402.990276][ T7436] netlink: 44 bytes leftover after parsing attributes in process `syz.4.431'. [ 402.996801][ T5827] usb 1-1: SerialNumber: syz [ 403.012841][ T7421] 2*1024kB (UM) 1*2048kB (U) 220*4096kB (M) = 909372kB [ 403.056164][ T7434] syzkaller0: entered promiscuous mode [ 403.061994][ T7434] syzkaller0: entered allmulticast mode [ 403.100118][ T7421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 403.102944][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 403.145770][ T7421] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 403.206368][ T7421] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 403.248810][ T7421] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 403.338202][ T7421] 44845 total pagecache pages [ 403.353781][ T7421] 0 pages in swap cache [ 403.367741][ T7421] Free swap = 124996kB [ 403.389236][ T7421] Total swap = 124996kB [ 403.412010][ T7421] 2097051 pages RAM [ 403.498386][ T7421] 0 pages HighMem/MovableOnly [ 403.507219][ T7421] 1531880 pages reserved [ 403.512116][ T7421] 0 pages cma reserved [ 403.668383][ T5827] usb 1-1: 0:2 : does not exist [ 404.822920][ T5827] usb 1-1: USB disconnect, device number 8 [ 405.006544][ T56] hsr_slave_0: left promiscuous mode [ 405.082986][ T56] hsr_slave_1: left promiscuous mode [ 405.091473][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.211649][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.328207][ T7274] udevd[7274]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.347641][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.392991][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.524528][ T56] veth1_macvtap: left promiscuous mode [ 405.530315][ T56] veth0_macvtap: left promiscuous mode [ 405.628473][ T56] veth1_vlan: left promiscuous mode [ 405.653157][ T56] veth0_vlan: left promiscuous mode [ 407.246456][ T5345] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 407.473556][ T5345] usb 6-1: Using ep0 maxpacket: 8 [ 407.502149][ T5345] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 407.538540][ T5345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.558504][ T5345] usb 6-1: Product: syz [ 407.576237][ T56] pimreg (unregistering): left allmulticast mode [ 407.587178][ T5345] usb 6-1: Manufacturer: syz [ 407.612821][ T5345] usb 6-1: SerialNumber: syz [ 407.657595][ T5345] usb 6-1: config 0 descriptor?? [ 407.928359][ T5345] usb read operation failed. (-32) [ 408.232423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 408.386812][ T5345] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 408.494383][ T5345] usb 6-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 408.517058][ T5345] usb 6-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 409.015077][ T56] team0 (unregistering): Port device team_slave_1 removed [ 409.180158][ T56] team0 (unregistering): Port device team_slave_0 removed [ 412.281574][ T7182] veth0_vlan: entered promiscuous mode [ 412.503366][ T7182] veth1_vlan: entered promiscuous mode [ 413.128814][ T7182] veth0_macvtap: entered promiscuous mode [ 413.302437][ T7182] veth1_macvtap: entered promiscuous mode [ 413.787851][ T7182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.055900][ T7527] syz.4.445: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 414.112679][ T7182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.193026][ T7527] CPU: 1 UID: 0 PID: 7527 Comm: syz.4.445 Not tainted syzkaller #0 PREEMPT(full) [ 414.193191][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 414.193292][ T7527] Call Trace: [ 414.193348][ T7527] [ 414.193404][ T7527] __dump_stack+0x26/0x30 [ 414.193603][ T7527] dump_stack_lvl+0x14c/0x1c0 [ 414.193790][ T7527] dump_stack+0x1e/0x25 [ 414.193961][ T7527] warn_alloc+0x46f/0x6a0 [ 414.194185][ T7527] ? kmsan_get_metadata+0xf1/0x160 [ 414.194428][ T7527] __vmalloc_node_range_noprof+0x142/0x2d80 [ 414.194662][ T7527] ? should_fail_ex+0x45/0x8c0 [ 414.194846][ T7527] ? kmsan_get_metadata+0xf1/0x160 [ 414.195096][ T7527] ? kmsan_get_metadata+0xf1/0x160 [ 414.195336][ T7527] ? kmsan_get_metadata+0xf1/0x160 [ 414.195614][ T7527] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 414.195860][ T7527] ? __kmalloc_cache_noprof+0x3b0/0x1260 [ 414.196026][ T7527] ? kmsan_get_metadata+0xf1/0x160 [ 414.196324][ T7527] vmalloc_user_noprof+0xce/0x140 [ 414.196509][ T7527] ? xskq_create+0x11d/0x290 [ 414.196708][ T7527] xskq_create+0x11d/0x290 [ 414.196909][ T7527] xsk_init_queue+0xce/0x180 [ 414.197099][ T7527] xsk_setsockopt+0x7f6/0xfe0 [ 414.197311][ T7527] ? __pfx_xsk_setsockopt+0x10/0x10 [ 414.197507][ T7527] __sys_setsockopt+0x43e/0x580 [ 414.197713][ T7527] __ia32_sys_setsockopt+0xf3/0x1a0 [ 414.197917][ T7527] ia32_sys_call+0x34c3/0x4360 [ 414.198065][ T7527] __do_fast_syscall_32+0x17f/0x3f0 [ 414.198299][ T7527] do_fast_syscall_32+0x37/0x80 [ 414.198493][ T7527] do_SYSENTER_32+0x1f/0x30 [ 414.198692][ T7527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 414.198897][ T7527] RIP: 0023:0xf700ef6c [ 414.199007][ T7527] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 414.199150][ T7527] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 414.199291][ T7527] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000011b [ 414.199391][ T7527] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 414.199475][ T7527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 414.199555][ T7527] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 414.199649][ T7527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 414.199784][ T7527] [ 414.199839][ T7527] Mem-Info: [ 414.338501][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.653319][ T7527] active_anon:6659 inactive_anon:0 isolated_anon:0 [ 414.653319][ T7527] active_file:3532 inactive_file:39955 isolated_file:0 [ 414.653319][ T7527] unevictable:768 dirty:32 writeback:0 [ 414.653319][ T7527] slab_reclaimable:5414 slab_unreclaimable:25100 [ 414.653319][ T7527] mapped:31025 shmem:1367 pagetables:1708 [ 414.653319][ T7527] sec_pagetables:0 bounce:0 [ 414.653319][ T7527] kernel_misc_reclaimable:0 [ 414.653319][ T7527] free:356173 free_pcp:12043 free_cma:0 [ 414.962565][ T7527] Node 0 active_anon:26772kB inactive_anon:0kB active_file:14128kB inactive_file:159608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124100kB dirty:128kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5376kB pagetables:6372kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 414.996811][ T1151] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.133046][ T7527] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16kB pagetables:392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 415.345445][ T1151] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.354874][ T7527] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 415.355314][ T7527] lowmem_reserve[]: 0 927 1240 1240 1240 [ 415.355611][ T7527] Node 0 DMA32 free:494952kB boost:0kB min:36808kB low:46008kB high:55208kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5464kB inactive_anon:0kB active_file:10240kB inactive_file:90264kB unevictable:0kB writepending:80kB zspages:0kB present:3129332kB managed:949736kB mlocked:0kB bounce:0kB free_pcp:35700kB local_pcp:14268kB free_cma:0kB [ 415.356032][ T7527] lowmem_reserve[]: 0 0 313 313 313 [ 415.356329][ T7527] Node 0 Normal free:16272kB boost:0kB min:13044kB low:16304kB high:19564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21240kB inactive_anon:0kB active_file:3888kB inactive_file:69344kB unevictable:1536kB writepending:48kB zspages:0kB present:1048580kB managed:320852kB mlocked:0kB bounce:0kB free_pcp:12288kB local_pcp:5720kB free_cma:0kB [ 415.356747][ T7527] lowmem_reserve[]: 0 0 0 0 0 [ 415.357028][ T7527] Node 1 Normal free:909372kB boost:0kB min:40088kB low:50108kB high:60128kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:986000kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 415.593214][ T7527] lowmem_reserve[]: 0 0 0 0 0 [ 415.598605][ T7527] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 415.688146][ T1151] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.792904][ T7527] Node 0 DMA32: 694*4kB (UM) 164*8kB (UME) 53*16kB (UM) 23*32kB (UM) 47*64kB (U) 45*128kB (U) 39*256kB (UE) 27*512kB (UME) 20*1024kB (U) 21*2048kB (UME) 96*4096kB (UM) = 494952kB [ 415.904725][ T7527] Node 0 Normal: 0*4kB 52*8kB (ME) 31*16kB (ME) 0*32kB 24*64kB (UM) 12*128kB (U) 4*256kB (UE) 6*512kB (UM) 4*1024kB (UM) 2*2048kB (UE) 0*4096kB = 16272kB [ 416.043100][ T7527] Node 1 Normal: 1*4kB (M) 1*8kB (M) 3*16kB (U) 6*32kB (UM) 5*64kB (UM) 6*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 220*4096kB (M) = 909372kB [ 416.213204][ T7527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.298278][ T7527] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 416.461487][ T7527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.523162][ T7527] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 416.652802][ T7527] 44853 total pagecache pages [ 416.657702][ T7527] 0 pages in swap cache [ 416.662017][ T7527] Free swap = 124996kB [ 416.695081][ T7527] Total swap = 124996kB [ 416.699453][ T7527] 2097051 pages RAM [ 416.763033][ T7527] 0 pages HighMem/MovableOnly [ 416.813854][ T7527] 1531880 pages reserved [ 416.873013][ T7527] 0 pages cma reserved [ 419.693218][ T794] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 419.942727][ T794] usb 1-1: Using ep0 maxpacket: 8 [ 420.028505][ T794] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 420.058452][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.092022][ T794] usb 1-1: Product: syz [ 420.112868][ T794] usb 1-1: Manufacturer: syz [ 420.117710][ T794] usb 1-1: SerialNumber: syz [ 420.168517][ T794] usb 1-1: config 0 descriptor?? [ 421.046655][ T794] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 423.863017][ T5827] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 424.116865][ T5827] usb 7-1: Using ep0 maxpacket: 16 [ 424.140863][ T5827] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 424.203704][ T5827] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.300166][ T5827] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.369964][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.412715][ T5827] usb 7-1: Product: syz [ 424.443235][ T5827] usb 7-1: Manufacturer: syz [ 424.448080][ T5827] usb 7-1: SerialNumber: syz [ 424.703883][ T7625] syzkaller1: entered promiscuous mode [ 424.709587][ T7625] syzkaller1: entered allmulticast mode [ 424.878516][ T5827] usb 7-1: 0:2 : does not exist [ 425.404295][ T7629] syzkaller0: entered promiscuous mode [ 425.464074][ T7629] syzkaller0: entered allmulticast mode [ 425.736697][ T5827] usb 7-1: USB disconnect, device number 3 [ 426.587666][ T7627] udevd[7627]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.755837][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 429.786238][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 429.797222][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 429.823634][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 429.844493][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 431.912997][ T5780] Bluetooth: hci2: command tx timeout [ 433.411811][ T7680] warn_alloc: 1 callbacks suppressed [ 433.411894][ T7680] syz.6.475: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 433.627236][ T7680] CPU: 1 UID: 0 PID: 7680 Comm: syz.6.475 Not tainted syzkaller #0 PREEMPT(full) [ 433.627398][ T7680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 433.627486][ T7680] Call Trace: [ 433.627541][ T7680] [ 433.627594][ T7680] __dump_stack+0x26/0x30 [ 433.627779][ T7680] dump_stack_lvl+0x14c/0x1c0 [ 433.627963][ T7680] dump_stack+0x1e/0x25 [ 433.628136][ T7680] warn_alloc+0x46f/0x6a0 [ 433.628343][ T7680] ? kmsan_get_metadata+0xf1/0x160 [ 433.628575][ T7680] __vmalloc_node_range_noprof+0x142/0x2d80 [ 433.628786][ T7680] ? should_fail_ex+0x45/0x8c0 [ 433.628959][ T7680] ? kmsan_get_metadata+0xf1/0x160 [ 433.629179][ T7680] ? kmsan_get_metadata+0xf1/0x160 [ 433.629391][ T7680] ? kmsan_get_metadata+0xf1/0x160 [ 433.629609][ T7680] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 433.629841][ T7680] ? __kmalloc_cache_noprof+0x3b0/0x1260 [ 433.630013][ T7680] ? kmsan_get_metadata+0xf1/0x160 [ 433.630237][ T7680] vmalloc_user_noprof+0xce/0x140 [ 433.630408][ T7680] ? xskq_create+0x11d/0x290 [ 433.630601][ T7680] xskq_create+0x11d/0x290 [ 433.630795][ T7680] xsk_init_queue+0xce/0x180 [ 433.630978][ T7680] xsk_setsockopt+0x7f6/0xfe0 [ 433.631181][ T7680] ? __pfx_xsk_setsockopt+0x10/0x10 [ 433.631399][ T7680] __sys_setsockopt+0x43e/0x580 [ 433.631592][ T7680] __ia32_sys_setsockopt+0xf3/0x1a0 [ 433.631787][ T7680] ia32_sys_call+0x34c3/0x4360 [ 433.631931][ T7680] __do_fast_syscall_32+0x17f/0x3f0 [ 433.632152][ T7680] do_fast_syscall_32+0x37/0x80 [ 433.632347][ T7680] do_SYSENTER_32+0x1f/0x30 [ 433.632536][ T7680] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 433.632738][ T7680] RIP: 0023:0xf7f03f6c [ 433.632852][ T7680] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 433.632992][ T7680] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 433.633133][ T7680] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000011b [ 433.633231][ T7680] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 433.633322][ T7680] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 433.633410][ T7680] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 433.633498][ T7680] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 433.633626][ T7680] [ 434.093875][ T5780] Bluetooth: hci2: command tx timeout [ 434.232019][ T7680] Mem-Info: [ 434.270587][ T7680] active_anon:6390 inactive_anon:0 isolated_anon:0 [ 434.270587][ T7680] active_file:3532 inactive_file:39964 isolated_file:0 [ 434.270587][ T7680] unevictable:768 dirty:53 writeback:0 [ 434.270587][ T7680] slab_reclaimable:5422 slab_unreclaimable:25150 [ 434.270587][ T7680] mapped:29827 shmem:1368 pagetables:1692 [ 434.270587][ T7680] sec_pagetables:0 bounce:0 [ 434.270587][ T7680] kernel_misc_reclaimable:0 [ 434.270587][ T7680] free:362773 free_pcp:14176 free_cma:0 [ 434.327765][ T5837] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 434.375216][ T7680] Node 0 active_anon:25496kB inactive_anon:0kB active_file:14128kB inactive_file:159644kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119308kB dirty:220kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5408kB pagetables:6340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 434.419146][ T129] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.431669][ T7680] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16kB pagetables:392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 434.506277][ T7680] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 434.508354][ T5837] usb 7-1: Using ep0 maxpacket: 16 [ 434.542705][ T7680] lowmem_reserve[]: 0 927 1240 1240 1240 [ 434.586765][ T7684] syzkaller0: entered promiscuous mode [ 434.614383][ T5837] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 434.642760][ T7680] Node 0 [ 434.642742][ T5837] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 434.656914][ T7684] syzkaller0: entered allmulticast mode [ 434.693340][ T5837] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 434.703477][ T7680] DMA32 free:519868kB boost:0kB min:36808kB low:46008kB high:55208kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5320kB inactive_anon:0kB active_file:10240kB inactive_file:90288kB unevictable:0kB writepending:96kB zspages:0kB present:3129332kB managed:949736kB mlocked:0kB bounce:0kB free_pcp:44604kB local_pcp:22996kB free_cma:0kB [ 434.745395][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.793097][ T5837] usb 7-1: Product: syz [ 434.794094][ T7680] lowmem_reserve[]: [ 434.797477][ T5837] usb 7-1: Manufacturer: syz [ 434.797605][ T5837] usb 7-1: SerialNumber: syz [ 434.817893][ T7680] 0 0 313 313 313 [ 434.830571][ T7680] Node 0 Normal free:17816kB boost:0kB min:13044kB low:16304kB high:19564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20432kB inactive_anon:0kB active_file:3888kB inactive_file:69356kB unevictable:1536kB writepending:112kB zspages:0kB present:1048580kB managed:320852kB mlocked:0kB bounce:0kB free_pcp:11632kB local_pcp:6648kB free_cma:0kB [ 434.911824][ T7680] lowmem_reserve[]: 0 0 0 0 0 [ 434.917506][ T7680] Node 1 Normal free:909372kB boost:0kB min:40088kB low:50108kB high:60128kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:986000kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 434.977025][ T129] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.992872][ T7680] lowmem_reserve[]: 0 0 0 0 0 [ 435.002747][ T7680] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 435.075778][ T7680] Node 0 DMA32: 888*4kB (UM) 233*8kB (UME) 89*16kB (UME) 42*32kB (UME) 45*64kB (UME) 55*128kB (UME) 41*256kB (U) 38*512kB (UME) 27*1024kB (UM) 27*2048kB (UME) 95*4096kB (UM) = 520120kB [ 435.158858][ T7680] Node 0 Normal: 440*4kB (M) 165*8kB (UME) 67*16kB (ME) 5*32kB (M) 3*64kB (UM) 6*128kB (U) 4*256kB (UE) 6*512kB (UM) 4*1024kB (UM) 2*2048kB (UE) 0*4096kB = 17560kB [ 435.243753][ T7680] Node 1 Normal: 1*4kB (M) 1*8kB (M) 3*16kB (U) 6*32kB (UM) 5*64kB (UM) 6*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 220*4096kB (M) = 909372kB [ 435.312935][ T7680] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 435.423311][ T7680] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 435.503092][ T7680] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 435.520313][ T129] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.556264][ T7680] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 435.613123][ T7680] 44861 total pagecache pages [ 435.618272][ T7680] 0 pages in swap cache [ 435.678820][ T7680] Free swap = 124996kB [ 435.709512][ T7680] Total swap = 124996kB [ 435.728187][ T7680] 2097051 pages RAM [ 435.732192][ T7680] 0 pages HighMem/MovableOnly [ 435.813401][ T7680] 1531880 pages reserved [ 435.817858][ T7680] 0 pages cma reserved [ 435.863992][ T5837] usb 7-1: 0:2 : does not exist [ 436.111422][ T129] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.152797][ T5780] Bluetooth: hci2: command tx timeout [ 436.492009][ T5837] usb 7-1: USB disconnect, device number 4 [ 436.691126][ T7627] udevd[7627]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 437.473706][ T7710] netlink: 84 bytes leftover after parsing attributes in process `syz.0.486'. [ 437.933424][ T129] bridge_slave_1: left allmulticast mode [ 437.964080][ T129] bridge_slave_1: left promiscuous mode [ 438.009953][ T129] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.165398][ T129] bridge_slave_0: left allmulticast mode [ 438.182162][ T129] bridge_slave_0: left promiscuous mode [ 438.222742][ T129] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.233467][ T5780] Bluetooth: hci2: command tx timeout [ 440.507789][ T129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.771131][ T129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.918333][ T129] bond0 (unregistering): Released all slaves [ 441.351440][ T7657] chnl_net:caif_netlink_parms(): no params data found [ 442.952803][ T129] hsr_slave_0: left promiscuous mode [ 443.026649][ T7768] netlink: 84 bytes leftover after parsing attributes in process `syz.6.497'. [ 443.045974][ T129] hsr_slave_1: left promiscuous mode [ 443.077866][ T129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.142613][ T129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.196077][ T129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.240634][ T129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.355518][ T129] veth1_macvtap: left promiscuous mode [ 443.361347][ T129] veth0_macvtap: left promiscuous mode [ 443.463195][ T129] veth1_vlan: left promiscuous mode [ 443.494073][ T129] veth0_vlan: left promiscuous mode [ 445.741480][ T7788] warn_alloc: 1 callbacks suppressed [ 445.741555][ T7788] syz.6.505: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 445.933484][ T7788] CPU: 0 UID: 0 PID: 7788 Comm: syz.6.505 Not tainted syzkaller #0 PREEMPT(full) [ 445.933652][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 445.933744][ T7788] Call Trace: [ 445.933798][ T7788] [ 445.933854][ T7788] __dump_stack+0x26/0x30 [ 445.934056][ T7788] dump_stack_lvl+0x14c/0x1c0 [ 445.934246][ T7788] dump_stack+0x1e/0x25 [ 445.934420][ T7788] warn_alloc+0x46f/0x6a0 [ 445.934654][ T7788] ? kmsan_get_metadata+0xf1/0x160 [ 445.934894][ T7788] __vmalloc_node_range_noprof+0x142/0x2d80 [ 445.935124][ T7788] ? should_fail_ex+0x45/0x8c0 [ 445.935310][ T7788] ? kmsan_get_metadata+0xf1/0x160 [ 445.935535][ T7788] ? kmsan_get_metadata+0xf1/0x160 [ 445.935760][ T7788] ? kmsan_get_metadata+0xf1/0x160 [ 445.935989][ T7788] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 445.936239][ T7788] ? __kmalloc_cache_noprof+0x3b0/0x1260 [ 445.936406][ T7788] ? kmsan_get_metadata+0xf1/0x160 [ 445.936642][ T7788] vmalloc_user_noprof+0xce/0x140 [ 445.936824][ T7788] ? xskq_create+0x11d/0x290 [ 445.937036][ T7788] xskq_create+0x11d/0x290 [ 445.937242][ T7788] xsk_init_queue+0xce/0x180 [ 445.937435][ T7788] xsk_setsockopt+0x7f6/0xfe0 [ 445.937641][ T7788] ? __pfx_xsk_setsockopt+0x10/0x10 [ 445.937826][ T7788] __sys_setsockopt+0x43e/0x580 [ 445.938036][ T7788] __ia32_sys_setsockopt+0xf3/0x1a0 [ 445.938243][ T7788] ia32_sys_call+0x34c3/0x4360 [ 445.938394][ T7788] __do_fast_syscall_32+0x17f/0x3f0 [ 445.938620][ T7788] do_fast_syscall_32+0x37/0x80 [ 445.938818][ T7788] do_SYSENTER_32+0x1f/0x30 [ 445.939020][ T7788] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 445.939220][ T7788] RIP: 0023:0xf7f03f6c [ 445.939335][ T7788] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 445.939471][ T7788] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 445.939616][ T7788] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000011b [ 445.939720][ T7788] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 445.939816][ T7788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.939910][ T7788] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 445.940004][ T7788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.940146][ T7788] [ 445.940202][ T7788] Mem-Info: [ 446.223408][ T5829] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 446.270365][ T7788] active_anon:6926 inactive_anon:0 isolated_anon:0 [ 446.270365][ T7788] active_file:3532 inactive_file:39968 isolated_file:0 [ 446.270365][ T7788] unevictable:771 dirty:32 writeback:0 [ 446.270365][ T7788] slab_reclaimable:5424 slab_unreclaimable:25042 [ 446.270365][ T7788] mapped:30987 shmem:1371 pagetables:1713 [ 446.270365][ T7788] sec_pagetables:0 bounce:0 [ 446.270365][ T7788] kernel_misc_reclaimable:0 [ 446.270365][ T7788] free:362275 free_pcp:13927 free_cma:0 [ 446.403010][ T7788] Node 0 active_anon:27708kB inactive_anon:0kB active_file:14128kB inactive_file:159660kB unevictable:1548kB isolated(anon):0kB isolated(file):0kB mapped:123948kB dirty:124kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5392kB pagetables:6428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 446.473264][ T129] team0 (unregistering): Port device team_slave_1 removed [ 446.527457][ T5829] usb 7-1: Using ep0 maxpacket: 16 [ 446.578059][ T5829] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 446.609762][ T5829] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.612621][ T7788] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16kB pagetables:392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 446.680036][ T129] team0 (unregistering): Port device team_slave_0 removed [ 446.737289][ T7788] Node 0 [ 446.737283][ T5829] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 446.740385][ T7788] DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 446.862585][ T7788] lowmem_reserve[]: 0 927 1240 1240 1240 [ 446.868867][ T7788] Node 0 DMA32 free:519288kB boost:0kB min:36808kB low:46008kB high:55208kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5400kB inactive_anon:0kB active_file:10240kB inactive_file:90296kB unevictable:0kB writepending:68kB zspages:0kB present:3129332kB managed:949736kB mlocked:0kB bounce:0kB free_pcp:44896kB local_pcp:22456kB free_cma:0kB [ 446.933499][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.934622][ T7788] lowmem_reserve[]: [ 446.941743][ T5829] usb 7-1: Product: syz [ 446.941879][ T5829] usb 7-1: Manufacturer: syz [ 446.941989][ T5829] usb 7-1: SerialNumber: syz [ 447.011093][ T7788] 0 0 313 313 313 [ 447.073122][ T7788] Node 0 Normal free:16292kB boost:0kB min:13044kB low:16304kB high:19564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22552kB inactive_anon:0kB active_file:3888kB inactive_file:69372kB unevictable:1548kB writepending:56kB zspages:0kB present:1048580kB managed:320852kB mlocked:12kB bounce:0kB free_pcp:10616kB local_pcp:4248kB free_cma:0kB [ 447.231990][ T7788] lowmem_reserve[]: 0 0 0 0 0 [ 447.248258][ T7788] Node 1 Normal free:909372kB boost:0kB min:40088kB low:50108kB high:60128kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:986000kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 447.450548][ T7788] lowmem_reserve[]: 0 0 0 0 0 [ 447.522709][ T7788] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 447.723728][ T7788] Node 0 DMA32: 888*4kB (UM) 233*8kB (UME) 89*16kB (UME) 42*32kB (UME) 46*64kB (UME) 56*128kB (UME) 41*256kB (U) 36*512kB (UME) 27*1024kB (UM) 27*2048kB (UME) 95*4096kB (UM) = 519288kB [ 447.911476][ T7788] Node 0 Normal: 35*4kB (M) 164*8kB (ME) 67*16kB (ME) 6*32kB (UM) 4*64kB (UM) 8*128kB (U) 4*256kB (UE) 6*512kB (UM) 4*1024kB (UM) 2*2048kB (UE) 0*4096kB = 16284kB [ 448.143009][ T7788] Node 1 Normal: 1*4kB (M) 1*8kB (M) 3*16kB (U) 6*32kB (UM) 5*64kB (UM) 6*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 220*4096kB (M) = 909372kB [ 448.333474][ T7788] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 448.362841][ T7788] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 448.567611][ T7788] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 448.653190][ T7788] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 448.832709][ T7788] 44869 total pagecache pages [ 448.837615][ T7788] 0 pages in swap cache [ 448.841959][ T7788] Free swap = 124996kB [ 448.973537][ T7788] Total swap = 124996kB [ 448.977919][ T7788] 2097051 pages RAM [ 449.028003][ T7788] 0 pages HighMem/MovableOnly [ 449.083990][ T7788] 1531880 pages reserved [ 449.123056][ T7788] 0 pages cma reserved [ 449.615447][ T5829] usb 7-1: 0:2 : does not exist [ 449.796217][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.803479][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.876349][ T7812] netlink: 84 bytes leftover after parsing attributes in process `syz.4.509'. [ 450.269128][ T7657] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.342233][ T7657] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.350694][ T7657] bridge_slave_0: entered allmulticast mode [ 450.421110][ T7657] bridge_slave_0: entered promiscuous mode [ 450.522907][ T7657] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.594128][ T7657] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.598616][ T5829] usb 7-1: USB disconnect, device number 5 [ 450.601909][ T7657] bridge_slave_1: entered allmulticast mode [ 450.748926][ T7657] bridge_slave_1: entered promiscuous mode [ 451.178139][ T7219] udevd[7219]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.405646][ T7657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.525519][ T7657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.995160][ T7657] team0: Port device team_slave_0 added [ 452.080666][ T7657] team0: Port device team_slave_1 added [ 453.448714][ T7836] syzkaller0: entered promiscuous mode [ 453.492563][ T7836] syzkaller0: entered allmulticast mode [ 453.563722][ T7657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.570905][ T7657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.672645][ T7657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.287982][ T7858] netlink: 84 bytes leftover after parsing attributes in process `syz.5.522'. [ 454.549147][ T7657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.583782][ T7657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.702711][ T7657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.515818][ T7657] hsr_slave_0: entered promiscuous mode [ 455.557312][ T7657] hsr_slave_1: entered promiscuous mode [ 455.573847][ T7868] fuse: Unknown parameter '0x0000000000000003' [ 455.605978][ T7657] debugfs: 'hsr0' already exists in 'hsr' [ 455.627518][ T7657] Cannot create hsr debugfs directory [ 456.955099][ T5775] Bluetooth: hci6: command 0x0406 tx timeout [ 457.955915][ T7884] warn_alloc: 1 callbacks suppressed [ 457.956000][ T7884] syz.4.532: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 458.064126][ T7884] CPU: 1 UID: 0 PID: 7884 Comm: syz.4.532 Not tainted syzkaller #0 PREEMPT(full) [ 458.064301][ T7884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 458.064401][ T7884] Call Trace: [ 458.064457][ T7884] [ 458.064513][ T7884] __dump_stack+0x26/0x30 [ 458.064781][ T7884] dump_stack_lvl+0x14c/0x1c0 [ 458.064969][ T7884] dump_stack+0x1e/0x25 [ 458.065136][ T7884] warn_alloc+0x46f/0x6a0 [ 458.065352][ T7884] ? kmsan_get_metadata+0xf1/0x160 [ 458.065595][ T7884] __vmalloc_node_range_noprof+0x142/0x2d80 [ 458.065842][ T7884] ? should_fail_ex+0x45/0x8c0 [ 458.066030][ T7884] ? kmsan_get_metadata+0xf1/0x160 [ 458.066248][ T7884] ? kmsan_get_metadata+0xf1/0x160 [ 458.066482][ T7884] ? kmsan_get_metadata+0xf1/0x160 [ 458.066721][ T7884] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 458.066970][ T7884] ? __kmalloc_cache_noprof+0x3b0/0x1260 [ 458.067143][ T7884] ? kmsan_get_metadata+0xf1/0x160 [ 458.067384][ T7884] vmalloc_user_noprof+0xce/0x140 [ 458.067567][ T7884] ? xskq_create+0x11d/0x290 [ 458.067779][ T7884] xskq_create+0x11d/0x290 [ 458.067985][ T7884] xsk_init_queue+0xce/0x180 [ 458.068179][ T7884] xsk_setsockopt+0x7f6/0xfe0 [ 458.068388][ T7884] ? __pfx_xsk_setsockopt+0x10/0x10 [ 458.068575][ T7884] __sys_setsockopt+0x43e/0x580 [ 458.068791][ T7884] __ia32_sys_setsockopt+0xf3/0x1a0 [ 458.068994][ T7884] ia32_sys_call+0x34c3/0x4360 [ 458.069151][ T7884] __do_fast_syscall_32+0x17f/0x3f0 [ 458.069377][ T7884] do_fast_syscall_32+0x37/0x80 [ 458.069577][ T7884] do_SYSENTER_32+0x1f/0x30 [ 458.069780][ T7884] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 458.069986][ T7884] RIP: 0023:0xf700ef6c [ 458.070100][ T7884] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 458.070253][ T7884] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 458.070404][ T7884] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 458.070513][ T7884] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 458.070621][ T7884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 458.070720][ T7884] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 458.070817][ T7884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 458.070955][ T7884] [ 458.071012][ T7884] Mem-Info: [ 458.602834][ T7884] active_anon:6952 inactive_anon:0 isolated_anon:0 [ 458.602834][ T7884] active_file:3532 inactive_file:39974 isolated_file:0 [ 458.602834][ T7884] unevictable:768 dirty:37 writeback:0 [ 458.602834][ T7884] slab_reclaimable:5428 slab_unreclaimable:24951 [ 458.602834][ T7884] mapped:31016 shmem:1371 pagetables:1773 [ 458.602834][ T7884] sec_pagetables:0 bounce:0 [ 458.602834][ T7884] kernel_misc_reclaimable:0 [ 458.602834][ T7884] free:362548 free_pcp:13635 free_cma:0 [ 458.673912][ T7889] netlink: 84 bytes leftover after parsing attributes in process `syz.6.533'. [ 458.801451][ T7884] Node 0 active_anon:28012kB inactive_anon:0kB active_file:14128kB inactive_file:159684kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124064kB dirty:144kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5456kB pagetables:6700kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 458.972604][ T7884] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16kB pagetables:392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 459.303215][ T7884] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 459.512513][ T7884] lowmem_reserve[]: 0 927 1240 1240 1240 [ 459.518796][ T7884] Node 0 DMA32 free:520204kB boost:0kB min:36808kB low:46008kB high:55208kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6720kB inactive_anon:0kB active_file:10240kB inactive_file:90304kB unevictable:0kB writepending:80kB zspages:0kB present:3129332kB managed:949736kB mlocked:0kB bounce:0kB free_pcp:42792kB local_pcp:21544kB free_cma:0kB [ 459.692234][ T7884] lowmem_reserve[]: 0 0 313 313 313 [ 459.770224][ T7884] Node 0 Normal free:16268kB boost:0kB min:13044kB low:16304kB high:19564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21480kB inactive_anon:0kB active_file:3888kB inactive_file:69380kB unevictable:1536kB writepending:72kB zspages:0kB present:1048580kB managed:320852kB mlocked:0kB bounce:0kB free_pcp:11436kB local_pcp:4004kB free_cma:0kB [ 459.963862][ T7884] lowmem_reserve[]: 0 0 0 0 0 [ 459.969631][ T7884] Node 1 Normal free:909372kB boost:0kB min:40088kB low:50108kB high:60128kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:986000kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 460.092691][ T7884] lowmem_reserve[]: 0 0 0 0 0 [ 460.098019][ T7884] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 460.183388][ T7884] Node 0 DMA32: 825*4kB (UM) 233*8kB (UME) 74*16kB (UME) 28*32kB (UME) 47*64kB (UME) 56*128kB (UME) 42*256kB (U) 39*512kB (UME) 27*1024kB (UM) 27*2048kB (UME) 95*4096kB (UM) = 520204kB [ 460.303026][ T7884] Node 0 Normal: 157*4kB (UM) 203*8kB (UME) 74*16kB (UME) 7*32kB (UM) 5*64kB (UM) 8*128kB (U) 4*256kB (UE) 4*512kB (UM) 4*1024kB (UM) 2*2048kB (UE) 0*4096kB = 16268kB [ 460.482912][ T7884] Node 1 Normal: 1*4kB (M) 1*8kB (M) 3*16kB (U) 6*32kB (UM) 5*64kB (UM) 6*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 220*4096kB (M) = 909372kB [ 460.519310][ T7657] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 460.602901][ T7884] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 460.655391][ T7657] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 460.701916][ T7884] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 460.763053][ T7884] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 460.839206][ T7657] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 460.857633][ T7884] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 460.938572][ T7884] 44871 total pagecache pages [ 460.949557][ T7657] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 460.992952][ T7884] 0 pages in swap cache [ 461.013915][ T7884] Free swap = 124996kB [ 461.062882][ T7884] Total swap = 124996kB [ 461.078217][ T7884] 2097051 pages RAM [ 461.188064][ T7884] 0 pages HighMem/MovableOnly [ 461.200639][ T7884] 1531880 pages reserved [ 461.242979][ T7884] 0 pages cma reserved [ 461.770355][ T7910] fuse: Unknown parameter '0x0000000000000003' [ 463.147544][ T7657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.449626][ T7657] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.660859][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.668463][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.945902][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.953689][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.797684][ T7657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 465.490331][ T7943] fuse: Unknown parameter '0x0000000000000003' [ 467.209998][ T7657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.855772][ T7973] syzkaller0: entered promiscuous mode [ 469.861384][ T7973] syzkaller0: entered allmulticast mode [ 470.271032][ T794] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 470.279042][ T5345] usb 6-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 470.464928][ T794] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 470.507367][ T5345] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 470.592964][ T794] usb 1-1: USB disconnect, device number 9 [ 470.746725][ T5345] usb 6-1: USB disconnect, device number 2 [ 472.097311][ T7657] veth0_vlan: entered promiscuous mode [ 472.320157][ T7657] veth1_vlan: entered promiscuous mode [ 473.058824][ T7992] fuse: Unknown parameter '0x0000000000000003' [ 473.153321][ T7657] veth0_macvtap: entered promiscuous mode [ 473.287532][ T7657] veth1_macvtap: entered promiscuous mode [ 473.617887][ T7657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.906119][ T7657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.104360][ T7998] warn_alloc: 1 callbacks suppressed [ 474.104457][ T7998] syz.6.564: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 474.160605][ T7479] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.191430][ T7998] CPU: 1 UID: 0 PID: 7998 Comm: syz.6.564 Not tainted syzkaller #0 PREEMPT(full) [ 474.191604][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 474.191698][ T7998] Call Trace: [ 474.191755][ T7998] [ 474.191811][ T7998] __dump_stack+0x26/0x30 [ 474.192017][ T7998] dump_stack_lvl+0x14c/0x1c0 [ 474.192210][ T7998] dump_stack+0x1e/0x25 [ 474.192396][ T7998] warn_alloc+0x46f/0x6a0 [ 474.192622][ T7998] ? kmsan_get_metadata+0xf1/0x160 [ 474.192867][ T7998] __vmalloc_node_range_noprof+0x142/0x2d80 [ 474.193092][ T7998] ? should_fail_ex+0x45/0x8c0 [ 474.193279][ T7998] ? kmsan_get_metadata+0xf1/0x160 [ 474.193510][ T7998] ? kmsan_get_metadata+0xf1/0x160 [ 474.193738][ T7998] ? kmsan_get_metadata+0xf1/0x160 [ 474.193968][ T7998] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 474.194216][ T7998] ? __kmalloc_cache_noprof+0x3b0/0x1260 [ 474.194413][ T7998] ? kmsan_get_metadata+0xf1/0x160 [ 474.194649][ T7998] vmalloc_user_noprof+0xce/0x140 [ 474.194830][ T7998] ? xskq_create+0x11d/0x290 [ 474.195026][ T7998] xskq_create+0x11d/0x290 [ 474.195224][ T7998] xsk_init_queue+0xce/0x180 [ 474.195420][ T7998] xsk_setsockopt+0x7f6/0xfe0 [ 474.195622][ T7998] ? __pfx_xsk_setsockopt+0x10/0x10 [ 474.195805][ T7998] __sys_setsockopt+0x43e/0x580 [ 474.196007][ T7998] __ia32_sys_setsockopt+0xf3/0x1a0 [ 474.196216][ T7998] ia32_sys_call+0x34c3/0x4360 [ 474.196373][ T7998] __do_fast_syscall_32+0x17f/0x3f0 [ 474.196611][ T7998] do_fast_syscall_32+0x37/0x80 [ 474.196814][ T7998] do_SYSENTER_32+0x1f/0x30 [ 474.197006][ T7998] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 474.197211][ T7998] RIP: 0023:0xf7f03f6c [ 474.197325][ T7998] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 474.197474][ T7998] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 474.197629][ T7998] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 474.197732][ T7998] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 474.197831][ T7998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 474.197928][ T7998] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 474.198024][ T7998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 474.198158][ T7998] [ 474.268171][ T433] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.393967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 474.592870][ T7998] Mem-Info: [ 474.630351][ T7998] active_anon:7205 inactive_anon:0 isolated_anon:0 [ 474.630351][ T7998] active_file:3532 inactive_file:39980 isolated_file:0 [ 474.630351][ T7998] unevictable:768 dirty:44 writeback:0 [ 474.630351][ T7998] slab_reclaimable:5432 slab_unreclaimable:25126 [ 474.630351][ T7998] mapped:29792 shmem:1367 pagetables:1797 [ 474.630351][ T7998] sec_pagetables:0 bounce:0 [ 474.630351][ T7998] kernel_misc_reclaimable:0 [ 474.630351][ T7998] free:363432 free_pcp:12462 free_cma:0 [ 474.847377][ T5345] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 474.872735][ T7998] Node 0 active_anon:28820kB inactive_anon:0kB active_file:14128kB inactive_file:159708kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119168kB dirty:176kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5520kB pagetables:6800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 474.994608][ T433] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.015143][ T5345] usb 7-1: Using ep0 maxpacket: 16 [ 475.051436][ T7998] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16kB pagetables:392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 475.066441][ T5345] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 475.131323][ T7998] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 475.167940][ T433] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.319672][ T5345] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 475.383132][ T7998] lowmem_reserve[]: 0 927 1240 1240 1240 [ 475.389914][ T7998] Node 0 DMA32 free:523780kB boost:0kB min:36808kB low:46008kB high:55208kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6348kB inactive_anon:0kB active_file:10240kB inactive_file:90312kB unevictable:0kB writepending:84kB zspages:0kB present:3129332kB managed:949736kB mlocked:0kB bounce:0kB free_pcp:39636kB local_pcp:21192kB free_cma:0kB [ 475.444157][ T7998] lowmem_reserve[]: 0 0 313 313 313 [ 475.450949][ T7998] Node 0 Normal free:16228kB boost:0kB min:13044kB low:16304kB high:19564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22924kB inactive_anon:0kB active_file:3888kB inactive_file:69396kB unevictable:1536kB writepending:104kB zspages:0kB present:1048580kB managed:320852kB mlocked:0kB bounce:0kB free_pcp:9840kB local_pcp:6940kB free_cma:0kB [ 475.768727][ T7998] lowmem_reserve[]: 0 0 0 0 0 [ 475.857272][ T5345] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 475.872764][ T7998] Node 1 Normal free:909372kB boost:0kB min:40088kB low:50108kB high:60128kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:986000kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 475.997548][ T5345] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.078939][ T7998] lowmem_reserve[]: 0 0 0 0 0 [ 476.099940][ T5345] usb 7-1: Product: syz [ 476.117791][ T7998] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 476.122915][ T5345] usb 7-1: Manufacturer: syz [ 476.184484][ T8011] syzkaller0: entered promiscuous mode [ 476.190184][ T8011] syzkaller0: entered allmulticast mode [ 476.255234][ T7998] Node 0 DMA32: 789*4kB (UM) 256*8kB (UME) 79*16kB (UME) 28*32kB (UME) 46*64kB (UME) 56*128kB (UME) 41*256kB (U) 38*512kB (UME) 27*1024kB (UM) 25*2048kB (UME) 97*4096kB (UM) = 523588kB [ 476.305895][ T5345] usb 7-1: SerialNumber: syz [ 476.402676][ T7998] Node 0 Normal: 77*4kB (U) 102*8kB (UME) 80*16kB (UM) 10*32kB (UME) 5*64kB (UME) 9*128kB (UE) 3*256kB (U) 6*512kB (UM) 4*1024kB (UM) 2*2048kB (UE) 0*4096kB = 16228kB [ 476.522816][ T7998] Node 1 Normal: 1*4kB (M) 1*8kB (M) 3*16kB (U) 6*32kB (UM) 5*64kB (UM) 6*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 220*4096kB (M) = 909372kB [ 476.740290][ T7998] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 476.818587][ T7998] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 476.883339][ T7998] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 476.963703][ T7998] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 477.009815][ T7998] 44875 total pagecache pages [ 477.030841][ T7998] 0 pages in swap cache [ 477.088272][ T7998] Free swap = 124996kB [ 477.102936][ T7998] Total swap = 124996kB [ 477.128446][ T7998] 2097051 pages RAM [ 477.149094][ T7998] 0 pages HighMem/MovableOnly [ 477.203987][ T7998] 1531880 pages reserved [ 477.229938][ T7998] 0 pages cma reserved [ 477.356639][ T5345] usb 7-1: 0:2 : does not exist [ 477.985561][ T5345] usb 7-1: USB disconnect, device number 6 [ 478.219180][ T7274] udevd[7274]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.939014][ T8030] fuse: Unknown parameter 'fd0x0000000000000003' [ 481.533882][ T8058] syzkaller0: entered promiscuous mode [ 481.553024][ T8058] syzkaller0: entered allmulticast mode [ 484.745338][ T5827] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 484.953913][ T5827] usb 6-1: Using ep0 maxpacket: 16 [ 484.967362][ T5827] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 484.979006][ T5827] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 485.024324][ T5827] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 485.035339][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.078319][ T5827] usb 6-1: Product: syz [ 485.092920][ T5827] usb 6-1: Manufacturer: syz [ 485.098264][ T5827] usb 6-1: SerialNumber: syz [ 485.405497][ T5827] usb 6-1: 0:2 : does not exist [ 486.314194][ T5827] usb 6-1: USB disconnect, device number 3 [ 486.326435][ T7387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.410775][ T7387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.877342][ T7274] udevd[7274]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.944193][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.952150][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.359224][ T8093] syzkaller0: entered promiscuous mode [ 487.403716][ T8093] syzkaller0: entered allmulticast mode [ 488.528161][ T8098] fuse: Unknown parameter 'fd0x0000000000000003' [ 490.223321][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 490.274305][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 490.306833][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 490.336124][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 490.398171][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 491.972642][ T5827] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 492.283198][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 492.373518][ T5827] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 492.435902][ T5827] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 492.542879][ T5827] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 492.553640][ T5775] Bluetooth: hci3: command tx timeout [ 492.583061][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.601866][ T5827] usb 1-1: Product: syz [ 492.607925][ T5827] usb 1-1: Manufacturer: syz [ 492.633374][ T5827] usb 1-1: SerialNumber: syz [ 492.921230][ T5827] usb 1-1: 0:2 : does not exist [ 493.809367][ T5827] usb 1-1: USB disconnect, device number 10 [ 494.380523][ T7274] udevd[7274]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.549232][ T8145] fuse: Unknown parameter 'fd0x0000000000000003' [ 494.633491][ T5775] Bluetooth: hci3: command tx timeout [ 495.508936][ T7387] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.019008][ T7387] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.428512][ T7387] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.731747][ T5775] Bluetooth: hci3: command tx timeout [ 497.204033][ T7387] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.519262][ T5829] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 497.712866][ T5829] usb 1-1: Using ep0 maxpacket: 16 [ 497.753373][ T5829] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 497.772866][ T5829] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 497.863526][ T5829] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 497.892751][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.901017][ T5829] usb 1-1: Product: syz [ 497.905977][ T5829] usb 1-1: Manufacturer: syz [ 497.910881][ T5829] usb 1-1: SerialNumber: syz [ 498.173727][ T5829] usb 1-1: 0:2 : does not exist [ 498.797894][ T5775] Bluetooth: hci3: command tx timeout [ 498.987939][ T7387] bridge_slave_1: left allmulticast mode [ 499.018465][ T7387] bridge_slave_1: left promiscuous mode [ 499.056436][ T7387] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.233547][ T5829] usb 1-1: USB disconnect, device number 11 [ 499.307186][ T7387] bridge_slave_0: left allmulticast mode [ 499.402216][ T7387] bridge_slave_0: left promiscuous mode [ 499.454797][ T7387] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.804212][ T7274] udevd[7274]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.523460][ T7387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.613071][ T7387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.675207][ T7387] bond0 (unregistering): Released all slaves [ 501.993138][ T8111] chnl_net:caif_netlink_parms(): no params data found [ 503.857262][ T8240] syz.4.619: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 503.923027][ T8240] CPU: 0 UID: 0 PID: 8240 Comm: syz.4.619 Not tainted syzkaller #0 PREEMPT(full) [ 503.923195][ T8240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 503.923289][ T8240] Call Trace: [ 503.923342][ T8240] [ 503.923396][ T8240] __dump_stack+0x26/0x30 [ 503.923584][ T8240] dump_stack_lvl+0x14c/0x1c0 [ 503.923778][ T8240] dump_stack+0x1e/0x25 [ 503.923947][ T8240] warn_alloc+0x46f/0x6a0 [ 503.924169][ T8240] ? kmsan_get_metadata+0xf1/0x160 [ 503.924432][ T8240] __vmalloc_node_range_noprof+0x142/0x2d80 [ 503.924644][ T8240] ? should_fail_ex+0x45/0x8c0 [ 503.924828][ T8240] ? kmsan_get_metadata+0xf1/0x160 [ 503.925059][ T8240] ? kmsan_get_metadata+0xf1/0x160 [ 503.925295][ T8240] ? kmsan_get_metadata+0xf1/0x160 [ 503.925528][ T8240] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 503.925771][ T8240] ? __kmalloc_cache_noprof+0x3b0/0x1260 [ 503.925946][ T8240] ? kmsan_get_metadata+0xf1/0x160 [ 503.926184][ T8240] vmalloc_user_noprof+0xce/0x140 [ 503.926365][ T8240] ? xskq_create+0x11d/0x290 [ 503.926569][ T8240] xskq_create+0x11d/0x290 [ 503.926756][ T8240] xsk_init_queue+0xce/0x180 [ 503.926938][ T8240] xsk_setsockopt+0x7f6/0xfe0 [ 503.927136][ T8240] ? __pfx_xsk_setsockopt+0x10/0x10 [ 503.927329][ T8240] __sys_setsockopt+0x43e/0x580 [ 503.927529][ T8240] __ia32_sys_setsockopt+0xf3/0x1a0 [ 503.927735][ T8240] ia32_sys_call+0x34c3/0x4360 [ 503.927892][ T8240] __do_fast_syscall_32+0x17f/0x3f0 [ 503.928112][ T8240] do_fast_syscall_32+0x37/0x80 [ 503.928342][ T8240] do_SYSENTER_32+0x1f/0x30 [ 503.928536][ T8240] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 503.928741][ T8240] RIP: 0023:0xf700ef6c [ 503.928854][ T8240] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 503.929016][ T8240] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 503.929172][ T8240] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 503.929286][ T8240] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 503.929389][ T8240] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 503.929486][ T8240] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 503.929584][ T8240] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 503.929724][ T8240] [ 503.929782][ T8240] Mem-Info: [ 504.272176][ T8240] active_anon:6861 inactive_anon:0 isolated_anon:0 [ 504.272176][ T8240] active_file:3532 inactive_file:39993 isolated_file:0 [ 504.272176][ T8240] unevictable:768 dirty:34 writeback:0 [ 504.272176][ T8240] slab_reclaimable:5437 slab_unreclaimable:26084 [ 504.272176][ T8240] mapped:30884 shmem:1372 pagetables:1889 [ 504.272176][ T8240] sec_pagetables:0 bounce:0 [ 504.272176][ T8240] kernel_misc_reclaimable:0 [ 504.272176][ T8240] free:361924 free_pcp:13233 free_cma:0 [ 504.414834][ T8240] Node 0 active_anon:27460kB inactive_anon:0kB active_file:14128kB inactive_file:159768kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123532kB dirty:136kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5648kB pagetables:7156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 504.520097][ T8240] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16kB pagetables:392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 504.682549][ T8240] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 504.808911][ T8240] lowmem_reserve[]: 0 927 1240 1240 1240 [ 504.819939][ T8240] Node 0 DMA32 free:518404kB boost:0kB min:36808kB low:46008kB high:55208kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7108kB inactive_anon:0kB active_file:10240kB inactive_file:90372kB unevictable:0kB writepending:96kB zspages:0kB present:3129332kB managed:949736kB mlocked:0kB bounce:0kB free_pcp:39724kB local_pcp:19532kB free_cma:0kB [ 505.003533][ T8240] lowmem_reserve[]: 0 0 313 313 313 [ 505.041361][ T8240] Node 0 Normal free:16228kB boost:0kB min:13044kB low:16304kB high:19564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20896kB inactive_anon:0kB active_file:3888kB inactive_file:69396kB unevictable:1536kB writepending:40kB zspages:0kB present:1048580kB managed:320852kB mlocked:0kB bounce:0kB free_pcp:12424kB local_pcp:5164kB free_cma:0kB [ 505.172768][ T8240] lowmem_reserve[]: 0 0 0 0 0 [ 505.233252][ T8240] Node 1 Normal free:909356kB boost:0kB min:40088kB low:50108kB high:60128kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:986000kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 505.357406][ T8240] lowmem_reserve[]: 0 0 0 0 0 [ 505.389805][ T8240] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 505.458285][ T8240] Node 0 DMA32: 813*4kB (UM) 276*8kB (UME) 107*16kB (UME) 60*32kB (UME) 86*64kB (UME) 85*128kB (UME) 70*256kB (U) 50*512kB (UME) 31*1024kB (UM) 26*2048kB (UME) 89*4096kB (UM) = 518532kB [ 505.493774][ T5827] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 505.583314][ T8240] Node 0 Normal: 77*4kB (U) 102*8kB (UME) 80*16kB (UM) 10*32kB (UME) 5*64kB (UME) 9*128kB (UE) 3*256kB (U) 6*512kB (UM) 4*1024kB (UM) 2*2048kB (UE) 0*4096kB = 16228kB [ 505.638602][ T8240] Node 1 Normal: 1*4kB (M) 1*8kB (M) 2*16kB (U) 6*32kB (UM) 5*64kB (UM) 6*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 220*4096kB (M) = 909356kB [ 505.839998][ T8240] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 505.862753][ T5827] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 505.871119][ T5827] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.887680][ T5827] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 505.887753][ T8240] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 505.887876][ T8240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 505.901550][ T5827] usb 1-1: config 0 interface 0 has no altsetting 0 [ 505.965164][ T5827] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 505.998117][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 505.999104][ T8240] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 506.062752][ T5827] usb 1-1: Product: syz [ 506.067171][ T5827] usb 1-1: Manufacturer: syz [ 506.071957][ T5827] usb 1-1: SerialNumber: syz [ 506.166382][ T8240] 44893 total pagecache pages [ 506.183342][ T8240] 0 pages in swap cache [ 506.195135][ T8240] Free swap = 124996kB [ 506.223363][ T8240] Total swap = 124996kB [ 506.232972][ T8240] 2097051 pages RAM [ 506.274161][ T8240] 0 pages HighMem/MovableOnly [ 506.290109][ T8240] 1531880 pages reserved [ 506.301367][ T8240] 0 pages cma reserved [ 506.318223][ T5827] usb 1-1: config 0 descriptor?? [ 506.386126][ T5827] hub 1-1:0.0: bad descriptor, ignoring hub [ 506.437471][ T5827] hub 1-1:0.0: probe with driver hub failed with error -5 [ 506.820033][ T7387] hsr_slave_0: left promiscuous mode [ 506.832634][ T7387] hsr_slave_1: left promiscuous mode [ 506.860813][ T7387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.916951][ T7387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.949931][ T7387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.003084][ T7387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.188800][ T7387] veth1_macvtap: left promiscuous mode [ 507.196632][ T7387] veth0_macvtap: left promiscuous mode [ 507.224894][ T7387] veth1_vlan: left promiscuous mode [ 507.230510][ T7387] veth0_vlan: left promiscuous mode [ 507.289196][ T5827] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 507.612671][ T5827] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 508.526529][ T5827] usb 1-1: failed to restore interface 0 altsetting 251 (error=-71) [ 508.574742][ T5827] usb 1-1: USB disconnect, device number 12 [ 508.778769][ T7274] udevd[7274]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.602748][ T5827] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 509.792554][ T5827] usb 1-1: Using ep0 maxpacket: 8 [ 509.888237][ T5827] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 509.942679][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.951051][ T5827] usb 1-1: Product: syz [ 510.032451][ T5827] usb 1-1: Manufacturer: syz [ 510.062866][ T5827] usb 1-1: SerialNumber: syz [ 510.125747][ T5827] usb 1-1: config 0 descriptor?? [ 510.494517][ T5827] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 510.985654][ T7387] team0 (unregistering): Port device team_slave_1 removed [ 511.222533][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.240528][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.347315][ T7387] team0 (unregistering): Port device team_slave_0 removed [ 511.932816][ T5827] usb write operation failed. (-71) [ 511.986120][ T5827] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 512.001010][ T5827] dvbdev: DVB: registering new adapter (Terratec H7) [ 512.032535][ T5827] usb 1-1: media controller created [ 512.070810][ T5827] usb read operation failed. (-71) [ 512.099853][ T5827] usb write operation failed. (-71) [ 512.142225][ T5827] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 512.221400][ T5827] usb 1-1: USB disconnect, device number 13 [ 512.257277][ T8111] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.276395][ T8111] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.326501][ T8111] bridge_slave_0: entered allmulticast mode [ 512.407376][ T8111] bridge_slave_0: entered promiscuous mode [ 512.837484][ T8111] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.863114][ T8111] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.870977][ T8111] bridge_slave_1: entered allmulticast mode [ 512.947046][ T8111] bridge_slave_1: entered promiscuous mode [ 513.436289][ T8111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.561804][ T8111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.080881][ T8111] team0: Port device team_slave_0 added [ 514.138096][ T8111] team0: Port device team_slave_1 added [ 514.528199][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.589617][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.679377][ T8111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.814082][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.852201][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.940270][ T8111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.481558][ T5775] Bluetooth: hci0: unexpected event for opcode 0x2011 [ 515.730307][ T8111] hsr_slave_0: entered promiscuous mode [ 515.810867][ T8111] hsr_slave_1: entered promiscuous mode [ 515.877198][ T8111] debugfs: 'hsr0' already exists in 'hsr' [ 515.892593][ T8111] Cannot create hsr debugfs directory [ 516.512603][ T5827] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 516.718952][ T5827] usb 1-1: Using ep0 maxpacket: 8 [ 516.751313][ T5827] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 516.793348][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.822547][ T5827] usb 1-1: Product: syz [ 516.837655][ T5827] usb 1-1: Manufacturer: syz [ 516.883070][ T5827] usb 1-1: SerialNumber: syz [ 516.914405][ T5827] usb 1-1: config 0 descriptor?? [ 517.226366][ T5827] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 518.670190][ T5827] usb write operation failed. (-71) [ 518.748008][ T5827] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 518.790892][ T5827] dvbdev: DVB: registering new adapter (Terratec H7) [ 518.842928][ T5827] usb 1-1: media controller created [ 518.863212][ T5827] usb read operation failed. (-71) [ 518.904595][ T5827] usb write operation failed. (-71) [ 518.954285][ T5827] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 519.031921][ T5827] usb 1-1: USB disconnect, device number 14 [ 519.778646][ T8111] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 519.827538][ T5775] Bluetooth: hci0: unexpected event for opcode 0x2031 [ 519.849786][ T8111] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 519.966446][ T8111] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 520.030767][ T8111] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 523.049785][ T8111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.303661][ T8111] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.495376][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.503066][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.884796][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.892614][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.499886][ T8428] TCP: TCP_TX_DELAY enabled [ 527.608590][ T8111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.313074][ T794] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 528.523119][ T794] usb 1-1: Using ep0 maxpacket: 8 [ 528.627232][ T794] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 528.667247][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.689916][ T794] usb 1-1: Product: syz [ 528.701177][ T794] usb 1-1: Manufacturer: syz [ 528.722760][ T794] usb 1-1: SerialNumber: syz [ 528.833185][ T794] usb 1-1: config 0 descriptor?? [ 529.096940][ T794] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 529.525361][ T8460] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.673'. [ 530.551287][ T794] usb write operation failed. (-71) [ 530.588003][ T794] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 530.641844][ T794] dvbdev: DVB: registering new adapter (Terratec H7) [ 530.658974][ T794] usb 1-1: media controller created [ 530.679526][ T794] usb read operation failed. (-71) [ 530.710018][ T794] usb write operation failed. (-71) [ 530.859516][ T794] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 531.025034][ T794] usb 1-1: USB disconnect, device number 15 [ 531.276852][ T8111] veth0_vlan: entered promiscuous mode [ 531.481000][ T8111] veth1_vlan: entered promiscuous mode [ 532.217334][ T8478] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 532.298444][ T8111] veth0_macvtap: entered promiscuous mode [ 532.401992][ T8111] veth1_macvtap: entered promiscuous mode [ 532.670585][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.913401][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.176417][ T998] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.235646][ T998] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.321540][ T998] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.344772][ T998] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.954302][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.6.684'. [ 535.643815][ T8515] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 537.891925][ T8537] Bluetooth: MGMT ver 1.23 [ 539.055624][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.703'. [ 539.154845][ T8555] team0: No ports can be present during mode change [ 539.442594][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 539.612680][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 539.714796][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 539.771446][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.787555][ T9] usb 7-1: Product: syz [ 539.812755][ T9] usb 7-1: Manufacturer: syz [ 539.817983][ T9] usb 7-1: SerialNumber: syz [ 539.873615][ T9] usb 7-1: config 0 descriptor?? [ 540.173135][ T9] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 541.006687][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.068666][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.380073][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.426776][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.611731][ T9] usb write operation failed. (-71) [ 541.666943][ T9] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 541.736071][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 541.810718][ T9] usb 7-1: media controller created [ 541.843899][ T9] usb read operation failed. (-71) [ 541.863835][ T9] usb write operation failed. (-71) [ 541.901554][ T9] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 541.955301][ T9] usb 7-1: USB disconnect, device number 7 [ 543.111703][ T8588] syzkaller0: entered promiscuous mode [ 543.149919][ T8588] syzkaller0: entered allmulticast mode [ 546.242736][ T794] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 546.469888][ T794] usb 1-1: Using ep0 maxpacket: 8 [ 546.549952][ T794] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 546.580574][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.622789][ T794] usb 1-1: Product: syz [ 546.627196][ T794] usb 1-1: Manufacturer: syz [ 546.658314][ T794] usb 1-1: SerialNumber: syz [ 546.724931][ T794] usb 1-1: config 0 descriptor?? [ 547.057944][ T794] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 548.607421][ T794] usb write operation failed. (-71) [ 548.657161][ T794] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 548.723931][ T794] dvbdev: DVB: registering new adapter (Terratec H7) [ 548.739638][ T794] usb 1-1: media controller created [ 548.762898][ T794] usb read operation failed. (-71) [ 548.771858][ T794] usb write operation failed. (-71) [ 548.875572][ T794] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 548.962908][ T794] usb 1-1: USB disconnect, device number 16 [ 550.403813][ T8643] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 550.470121][ T8643] block device autoloading is deprecated and will be removed. [ 553.593825][ T794] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 553.802785][ T794] usb 6-1: Using ep0 maxpacket: 8 [ 553.858716][ T794] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 553.894798][ T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.920441][ T794] usb 6-1: Product: syz [ 553.939499][ T794] usb 6-1: Manufacturer: syz [ 553.948710][ T794] usb 6-1: SerialNumber: syz [ 554.021864][ T794] usb 6-1: config 0 descriptor?? [ 554.310005][ T794] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 555.757838][ T794] usb write operation failed. (-71) [ 555.830543][ T794] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 555.859004][ T794] dvbdev: DVB: registering new adapter (Terratec H7) [ 555.892597][ T794] usb 6-1: media controller created [ 555.920769][ T794] usb read operation failed. (-71) [ 555.941277][ T794] usb write operation failed. (-71) [ 556.304593][ T794] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 556.403873][ T794] usb 6-1: USB disconnect, device number 4 [ 559.514134][ T8710] 9pnet_virtio: no channels available for device syz [ 563.850847][ T8739] netlink: 52 bytes leftover after parsing attributes in process `syz.6.773'. [ 565.778785][ T5775] Bluetooth: hci1: unexpected event 0x36 length: 4 < 7 [ 566.692939][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 566.917975][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 566.972637][ T9] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 566.992044][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.000559][ T9] usb 8-1: Product: syz [ 567.048632][ T9] usb 8-1: Manufacturer: syz [ 567.071441][ T9] usb 8-1: SerialNumber: syz [ 567.132958][ T9] usb 8-1: config 0 descriptor?? [ 567.412113][ T9] usb 8-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 567.899628][ T8776] netlink: 48 bytes leftover after parsing attributes in process `syz.4.787'. [ 568.132295][ C0] hrtimer: interrupt took 229719 ns [ 568.951954][ T9] usb write operation failed. (-71) [ 569.034493][ T9] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 569.166511][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 569.211109][ T9] usb 8-1: media controller created [ 569.227356][ T9] usb read operation failed. (-71) [ 569.298134][ T9] usb write operation failed. (-71) [ 569.501900][ T9] dvb_usb_az6007 8-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 569.603236][ T9] usb 8-1: USB disconnect, device number 2 [ 571.067092][ T8799] syzkaller0: entered promiscuous mode [ 571.087470][ T8799] syzkaller0: entered allmulticast mode [ 572.666466][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.675200][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.523886][ T8830] netlink: 48 bytes leftover after parsing attributes in process `syz.6.801'. [ 576.134754][ T8833] vlan2: entered allmulticast mode [ 576.159314][ T8833] bond0: entered allmulticast mode [ 576.219495][ T8833] bond_slave_0: entered allmulticast mode [ 576.291561][ T8833] bond_slave_1: entered allmulticast mode [ 578.011547][ T1013] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.513848][ T1013] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.051125][ T1013] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.540834][ T1013] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.704877][ T1013] bridge_slave_1: left allmulticast mode [ 580.711790][ T1013] bridge_slave_1: left promiscuous mode [ 580.731630][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.973586][ T1013] bridge_slave_0: left allmulticast mode [ 581.025831][ T1013] bridge_slave_0: left promiscuous mode [ 581.035811][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.441434][ T8877] netlink: 48 bytes leftover after parsing attributes in process `syz.4.813'. [ 582.579484][ T1151] smc: removing ib device sy‡1 [ 582.592991][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.655814][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.686221][ T8891] netlink: 12 bytes leftover after parsing attributes in process `syz.5.818'. [ 582.748450][ T1013] bond0 (unregistering): Released all slaves [ 584.385549][ T8895] syzkaller0: entered promiscuous mode [ 584.407206][ T8895] syzkaller0: entered allmulticast mode [ 590.670530][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.829'. [ 591.695142][ T1013] hsr_slave_0: left promiscuous mode [ 591.798338][ T1013] hsr_slave_1: left promiscuous mode [ 591.837997][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.932712][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.989211][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.059898][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 592.093897][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 592.102680][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.113785][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 592.138789][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 592.163768][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 592.361269][ T1013] veth1_macvtap: left promiscuous mode [ 592.399323][ T1013] veth0_macvtap: left promiscuous mode [ 592.423165][ T1013] veth1_vlan: left promiscuous mode [ 592.428804][ T1013] veth0_vlan: left promiscuous mode [ 594.317808][ T5780] Bluetooth: hci2: command tx timeout [ 596.090878][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 596.261830][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 596.392818][ T5780] Bluetooth: hci2: command tx timeout [ 598.309604][ T8973] syzkaller0: entered promiscuous mode [ 598.370975][ T8973] syzkaller0: entered allmulticast mode [ 598.472530][ T5780] Bluetooth: hci2: command tx timeout [ 598.930869][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'. [ 600.554078][ T5780] Bluetooth: hci2: command tx timeout [ 600.918979][ T1013] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.547069][ T1013] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.902845][ T1013] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.249472][ T1013] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.803512][ T1013] bridge_slave_1: left allmulticast mode [ 603.841491][ T1013] bridge_slave_1: left promiscuous mode [ 603.880164][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.977164][ T1013] bridge_slave_0: left allmulticast mode [ 604.009144][ T1013] bridge_slave_0: left promiscuous mode [ 604.048789][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.914720][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.024353][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.096240][ T1013] bond0 (unregistering): Released all slaves [ 606.165193][ T8938] chnl_net:caif_netlink_parms(): no params data found [ 606.910872][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.857'. [ 608.128793][ T1013] hsr_slave_0: left promiscuous mode [ 608.170059][ T1013] hsr_slave_1: left promiscuous mode [ 608.205587][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.248878][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.295047][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.347212][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.523046][ T1013] veth1_macvtap: left promiscuous mode [ 608.528850][ T1013] veth0_macvtap: left promiscuous mode [ 608.593244][ T1013] veth1_vlan: left promiscuous mode [ 608.598915][ T1013] veth0_vlan: left promiscuous mode [ 610.332600][ T5829] IPVS: starting estimator thread 0... [ 610.423056][ T9094] IPVS: using max 192 ests per chain, 9600 per kthread [ 611.280640][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 611.357803][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 612.491220][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.869'. [ 612.919100][ T8938] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.961180][ T8938] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.007007][ T8938] bridge_slave_0: entered allmulticast mode [ 613.077477][ T8938] bridge_slave_0: entered promiscuous mode [ 613.184619][ T8938] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.231491][ T8938] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.266292][ T8938] bridge_slave_1: entered allmulticast mode [ 613.307887][ T8938] bridge_slave_1: entered promiscuous mode [ 614.297445][ T5780] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 614.508045][ T9130] overlayfs: failed to clone upperpath [ 614.644930][ T8938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.779072][ T8938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.373988][ T8938] team0: Port device team_slave_0 added [ 615.431784][ T8938] team0: Port device team_slave_1 added [ 616.051854][ T8938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.137583][ T8938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.276710][ T8938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.383984][ T8938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.426585][ T8938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.592773][ T8938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.152666][ T5345] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 617.437768][ T5345] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 617.453343][ T5345] usb 7-1: config 0 interface 0 has no altsetting 0 [ 617.477770][ T5345] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 617.487628][ T5345] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 617.508432][ T5345] usb 7-1: Product: syz [ 617.513969][ T5345] usb 7-1: Manufacturer: syz [ 617.522701][ T5345] usb 7-1: SerialNumber: syz [ 617.545551][ T5345] usb 7-1: config 0 descriptor?? [ 617.618669][ T5345] usb 7-1: selecting invalid altsetting 0 [ 618.105584][ T5345] usb 7-1: USB disconnect, device number 8 [ 618.312667][ T5780] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 618.321264][ T5780] Bluetooth: hci0: Injecting HCI hardware error event [ 618.321733][ T7713] udevd[7713]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 618.329125][ T5780] Bluetooth: hci0: hardware error 0x00 [ 618.506819][ T9161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.018684][ T9161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.336969][ T8938] hsr_slave_0: entered promiscuous mode [ 619.355707][ T8938] hsr_slave_1: entered promiscuous mode [ 619.367343][ T8938] debugfs: 'hsr0' already exists in 'hsr' [ 619.374687][ T8938] Cannot create hsr debugfs directory [ 619.438349][ T9161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.704226][ T9161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.483508][ T5780] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 620.778035][ T7477] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.038622][ T7478] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.349151][ T7478] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.492897][ T5345] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 621.713414][ T5345] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 621.741080][ T5345] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.747251][ T129] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.777752][ T5345] usb 6-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 621.804753][ T5345] usb 6-1: config 0 interface 0 has no altsetting 0 [ 621.852035][ T5345] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 621.901051][ T5345] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 621.932920][ T5345] usb 6-1: Product: syz [ 621.937325][ T5345] usb 6-1: Manufacturer: syz [ 621.942131][ T5345] usb 6-1: SerialNumber: syz [ 622.007589][ T5345] usb 6-1: config 0 descriptor?? [ 622.083949][ T5345] hub 6-1:0.0: bad descriptor, ignoring hub [ 622.121557][ T5345] hub 6-1:0.0: probe with driver hub failed with error -5 [ 622.919162][ T5345] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 623.193050][ T5345] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 623.555277][ T9208] ===================================================== [ 623.563324][ T9208] BUG: KMSAN: uninit-value in fuse_dentry_revalidate+0x150/0x13d0 [ 623.571334][ T9208] fuse_dentry_revalidate+0x150/0x13d0 [ 623.579245][ T9208] __lookup_slow+0x2ea/0x770 [ 623.584349][ T9208] lookup_slow+0x6a/0xd0 [ 623.592189][ T9208] path_lookupat+0x7d1/0xdf0 [ 623.598292][ T9208] filename_lookup+0x2bc/0x800 [ 623.604201][ T9208] vfs_statx+0xcf/0x290 [ 623.608709][ T9208] __se_sys_statx+0x298/0x340 [ 623.618338][ T9208] __ia32_sys_statx+0xe2/0x150 [ 623.623695][ T9208] ia32_sys_call+0x4067/0x4360 [ 623.628797][ T9208] __do_fast_syscall_32+0x17f/0x3f0 [ 623.634715][ T9208] do_fast_syscall_32+0x37/0x80 [ 623.639945][ T9208] do_SYSENTER_32+0x1f/0x30 [ 623.644968][ T9208] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 623.651741][ T9208] [ 623.654390][ T9208] Uninit was created at: [ 623.659126][ T9208] kmem_cache_alloc_lru_noprof+0x382/0x1280 [ 623.667064][ T9208] __d_alloc+0x55/0xa00 [ 623.671718][ T9208] d_alloc_parallel+0x99/0x2740 [ 623.677068][ T9208] __lookup_slow+0x138/0x770 [ 623.681936][ T9208] lookup_slow+0x6a/0xd0 [ 623.686601][ T9208] link_path_walk+0x170f/0x2650 [ 623.694802][ T9208] path_lookupat+0x107/0xdf0 [ 623.699598][ T9208] filename_lookup+0x2bc/0x800 [ 623.706554][ T9208] user_path_at+0x94/0x330 [ 623.711356][ T9208] __se_sys_mount+0x661/0x7f0 [ 623.716581][ T9208] __ia32_sys_mount+0xe2/0x150 [ 623.721705][ T9208] ia32_sys_call+0x27fe/0x4360 [ 623.727003][ T9208] __do_fast_syscall_32+0x17f/0x3f0 [ 623.733110][ T9208] do_fast_syscall_32+0x37/0x80 [ 623.738294][ T9208] do_SYSENTER_32+0x1f/0x30 [ 623.743346][ T9208] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 623.750052][ T9208] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 623.752909][ T9208] CPU: 0 UID: 0 PID: 9208 Comm: syz.6.897 Not tainted syzkaller #0 PREEMPT(full) [ 623.762725][ T9208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 623.773271][ T9208] ===================================================== [ 623.780519][ T9208] Disabling lock debugging due to kernel taint [ 623.851664][ T7274] udevd[7274]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 623.883574][ T9208] Kernel panic - not syncing: kmsan.panic set ... [ 623.890196][ T9208] CPU: 1 UID: 0 PID: 9208 Comm: syz.6.897 Tainted: G B syzkaller #0 PREEMPT(full) [ 623.901212][ T9208] Tainted: [B]=BAD_PAGE [ 623.905477][ T9208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 623.915677][ T9208] Call Trace: [ 623.919062][ T9208] [ 623.922096][ T9208] __dump_stack+0x26/0x30 [ 623.926635][ T9208] dump_stack_lvl+0x50/0x1c0 [ 623.931431][ T9208] ? dump_stack+0x12/0x25 [ 623.935964][ T9208] dump_stack+0x1e/0x25 [ 623.940396][ T9208] vpanic+0x7b4/0x1430 [ 623.944711][ T9208] panic+0x15d/0x160 [ 623.948962][ T9208] kmsan_report+0x31a/0x320 [ 623.953712][ T9208] ? __msan_warning+0x1b/0x30 [ 623.958614][ T9208] ? fuse_dentry_revalidate+0x150/0x13d0 [ 623.964616][ T9208] ? __lookup_slow+0x2ea/0x770 [ 623.969583][ T9208] ? lookup_slow+0x6a/0xd0 [ 623.974178][ T9208] ? path_lookupat+0x7d1/0xdf0 [ 623.979121][ T9208] ? filename_lookup+0x2bc/0x800 [ 623.984236][ T9208] ? vfs_statx+0xcf/0x290 [ 623.988736][ T9208] ? __se_sys_statx+0x298/0x340 [ 623.993780][ T9208] ? __ia32_sys_statx+0xe2/0x150 [ 623.999162][ T9208] ? ia32_sys_call+0x4067/0x4360 [ 624.004282][ T9208] ? __do_fast_syscall_32+0x17f/0x3f0 [ 624.009921][ T9208] ? do_fast_syscall_32+0x37/0x80 [ 624.015246][ T9208] ? do_SYSENTER_32+0x1f/0x30 [ 624.020132][ T9208] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 624.026877][ T9208] ? kmsan_get_metadata+0xf1/0x160 [ 624.032229][ T9208] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 624.038308][ T9208] ? kmsan_get_metadata+0xf1/0x160 [ 624.043665][ T9208] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 624.050692][ T9208] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 624.057045][ T9208] ? _raw_spin_unlock+0x30/0x50 [ 624.062173][ T9208] ? __dentry_kill+0x9a8/0xb20 [ 624.067205][ T9208] ? kmsan_get_metadata+0xf1/0x160 [ 624.072604][ T9208] __msan_warning+0x1b/0x30 [ 624.077505][ T9208] fuse_dentry_revalidate+0x150/0x13d0 [ 624.083191][ T9208] ? d_alloc_parallel+0x2714/0x2740 [ 624.088735][ T9208] ? __pfx_default_wake_function+0x10/0x10 [ 624.094846][ T9208] ? lookup_noperm+0xb11/0xb90 [ 624.099873][ T9208] ? kmsan_get_metadata+0xf1/0x160 [ 624.105259][ T9208] ? __pfx_fuse_dentry_revalidate+0x10/0x10 [ 624.111477][ T9208] ? __pfx_fuse_dentry_revalidate+0x10/0x10 [ 624.117655][ T9208] __lookup_slow+0x2ea/0x770 [ 624.122489][ T9208] lookup_slow+0x6a/0xd0 [ 624.126946][ T9208] path_lookupat+0x7d1/0xdf0 [ 624.132211][ T9208] ? kmsan_get_metadata+0xf1/0x160 [ 624.137671][ T9208] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 624.143741][ T9208] filename_lookup+0x2bc/0x800 [ 624.148705][ T9208] ? filter_irq_stacks+0x13f/0x190 [ 624.154070][ T9208] ? stack_depot_save_flags+0x35/0x790 [ 624.160180][ T9208] ? kmsan_get_metadata+0xf1/0x160 [ 624.165532][ T9208] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 624.172135][ T9208] vfs_statx+0xcf/0x290 [ 624.176500][ T9208] __se_sys_statx+0x298/0x340 [ 624.181390][ T9208] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 624.187854][ T9208] ? kmsan_get_metadata+0xf1/0x160 [ 624.193246][ T9208] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 624.199836][ T9208] ? kmsan_get_metadata+0xf1/0x160 [ 624.205213][ T9208] __ia32_sys_statx+0xe2/0x150 [ 624.210207][ T9208] ia32_sys_call+0x4067/0x4360 [ 624.215150][ T9208] __do_fast_syscall_32+0x17f/0x3f0 [ 624.220596][ T9208] do_fast_syscall_32+0x37/0x80 [ 624.225671][ T9208] do_SYSENTER_32+0x1f/0x30 [ 624.230399][ T9208] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 624.236956][ T9208] RIP: 0023:0xf7f03f6c [ 624.241238][ T9208] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 624.261040][ T9208] RSP: 002b:00000000f53a550c EFLAGS: 00000206 ORIG_RAX: 000000000000017f [ 624.269646][ T9208] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000640 [ 624.277765][ T9208] RDX: 0000000000001000 RSI: 0000000000000100 RDI: 0000000000000000 [ 624.285896][ T9208] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 624.294529][ T9208] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 624.302635][ T9208] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 624.310874][ T9208] [ 624.314593][ T9208] Kernel Offset: disabled [ 624.319096][ T9208] Rebooting in 86400 seconds..