last executing test programs: 5.231806695s ago: executing program 2 (id=3898): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x810000, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wf', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000,nodevmap,cache=mmap']) 5.114239449s ago: executing program 0 (id=3899): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtaction={0x5c, 0x31, 0x53b, 0x1, 0x0, {0x9}, [{0x48, 0x1, [@m_sample={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x15, 0x6, "011d3d20cabdac13710effcf2b1a4a4c7e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x20000000) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8"], 0x250}}, 0x2000c000) 5.113396289s ago: executing program 1 (id=3900): socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000ad0000000080000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x4, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000300), &(0x7f0000000280)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x8000, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xdd86, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x2, {0x0, 0x3}}}}}}}}, 0x0) 4.934043173s ago: executing program 2 (id=3901): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf", @ANYRES32=r3], 0x1c}}, 0x4008054) close(r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x2b, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4.933242393s ago: executing program 1 (id=3902): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00') 4.792283377s ago: executing program 0 (id=3903): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0xba01, 0x0, 0x6000000}, 0x0) 4.756834608s ago: executing program 2 (id=3904): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0), 0x0) r1 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0) 4.756330028s ago: executing program 3 (id=3905): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000000)=0x3ff, 0x4) 4.6788732s ago: executing program 1 (id=3906): r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x2020) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000028f6100000001000000002000000040000000000000e04000000000000000000"], 0x0, 0x2a}, 0x28) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) eventfd(0x5f0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) ioctl$KDSKBENT(r6, 0x4b47, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 4.637386121s ago: executing program 2 (id=3907): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000005d80)=[{0x0}, {&(0x7f0000003900)="3e8763bec454303ed2d5d33304c8ed979114aa14746bba60f41e397438462ff044357d0d1c445fa5b81b", 0x2a}, {0x0}, {&(0x7f0000003b00)="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", 0x1000}, {&(0x7f0000005b00)="7d00d91cb96d6a2f3195e0de459126fd9490fea1693752ba971ebcecff24a5cb6533ff1ec23e3cf5e8fd289ef5d2350adad50417e70adfd15bca52724d2b027b31c3aebc740699c71b8af9b8cf119276d1f923b77a8b43e6af2f34ad1212039af395beb47d67cc514d38a61fceb6f2fec99c2a3af7f99c845801472dcdbd603defa73e9213fa9080a684dec6d0ec4c29f6eb514735bae8fbec260590a4dba5805dc52854b3e703f54ead52515a4e77c5ec9427969a0b4ca2ab3ba957ea8d8e8b814694a4e9e6b85948ad448f73bba9e9bfc0d11704e4d60592edcb6d10b8949029", 0xe1}, {&(0x7f0000005c40)="830bfa831f16d9ee2fd4ac02a22ebae3c20301055d361b7f4eceb95528a782", 0x1f}, {0x0}], 0x7, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x1b8, 0x12, 0x600, 0x3b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x4000000, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040085}, 0x8890) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000100)=""/76, 0x4c, 0x40, 0x0, 0x0) listen(0xffffffffffffffff, 0x80) r5 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r5, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) r8 = openat$iommufd(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r9, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r6, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000001c0)={0x28, 0x2, r7, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000000)={0x10, 0x1, r10}) 4.081449355s ago: executing program 3 (id=3908): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003b2000/0x4000)=nil) socket(0x40000000015, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) lseek(r1, 0x800, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000001c0)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x4000002, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0xfffffffe, 0x0, 0xd, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000003, 0x0, 0x7f, 0xe, 0x8, 0x8000806f, 0x100007, 0x200, 0x1, 0x9, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0xffffffff, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c8, 0x9, 0xfffffffc, 0x8, 0x0, 0x4, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x86, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x3, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0xf, 0x8020, 0x1, 0xfe000000, 0xffff, 0x3, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x1, 0x5, 0x9, 0xffffff80, 0x4, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x800, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0x3, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ef, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x3, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x5, 0xc8, 0x2001, 0xfffff000, 0x2, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d683, 0xa1f, 0xf40, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xffffffff, 0x200, 0xffff3441, 0x401]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.935203359s ago: executing program 1 (id=3909): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='file drivers/hid/hid-core.c line 2088 +', 0x27) 3.747742773s ago: executing program 1 (id=3910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40600, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="020027bd7000fddbdf254b00000008000300", @ANYRES32=r2, @ANYBLOB="0c009900f1a20d51420000000400091a020000000400ec0006009800f9ff00003c002c8008000000070000000800000005000000080000000000000008000000020000000000008008000000000008007700070000000400ff0000002ef84db2f00ff0c21a10d1cd41b577d7e5a299adadc2da471818c17ba31e6de5f2a0494a3b1831276dd9f72f3b73b2811eea2351fb99a116ef13cc19a06ec9daba5966ad2c7fff8c89f14b7ef1033e149b9b4498b5d66abfcd89acf7415c030f"], 0x88}, 0x1, 0x0, 0x0, 0x4040}, 0x80) mq_open(&(0x7f0000000300)='3\\m\xcd\xef\xf2%D\xc2\xd8\x1b\x15y]\x0e\x1f\xd9\x16\x94\xf4\f\x12z_\xce\xf6\\\xaaz\x99PZ\xc3.\xce\xdc\xd1{\xb9\xb5\x96\xea\xab\x8eR\xff\xd3H\"B\xa0\x89\x94\x1a\x9e\x16\x04\x19\x8a&\xc1\x88y\x12\xba\xac\x9c\xdb\x12%\xcbbY\xd1\xe4o\xbb \x05\x00\x00\x00\x00\x00\x00\x00\xd5Gf\xc4\xb1G\xd4\xa4k\x1d\x15{\xe6\x86\x95\xa0\xd7?\x99\xa1\x88t\xaf`N\xfe<\xb9\xbd\xc1\xd1\x06\xac\xe2\xa9z\xd1\x00\xad\xa7\xe0\xc3Y#\xf1\a\xef\xc5\x05D{\xc5\xf1U=!\x8f\n*\xe1\xd2@\x15\xff \xe7\xca\xa07\xeft\xc4I\xa1\xb8\x9bUW\xceX\xd0\xf69MK\x11\xa1\x8c\xa5.`\xfd\xbek\xa4\xca\x80\xaf\x10\x9e\xc9\xeb6\xaf;\x1f\xa8\xf1\x95\x9b\x11:\xe5\xc9\vM[y\xcb#z\x99)\x02\xeeQ\x85N\xdb\xcb\xffl\'\x1dC\xfe3\xb4\v\xd3r\xa8\x7f\x82\xaa[\xf9\x19L\x8f\xaa\xd3a\x95\x9d\xe0\xae\xaf\x8f\x05\xb3\xcd\x8e\x17\xb7\xebK\xe5P\x16\xe3\xc0\xfc\xbe\xc8\xc2', 0x40, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r3 = syz_open_dev$I2C(&(0x7f00000003c0), 0x1, 0x2603) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000080)={&(0x7f0000000800)}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000", @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x2, 0xb0e, 0x45, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, 0x8000, 0x0, 0x0, 0x9}}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x8) 3.529500409s ago: executing program 0 (id=3911): syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) 3.330194604s ago: executing program 0 (id=3912): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2040400) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x373}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xffffffff, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2000400, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x40000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r6, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(0xffffffffffffffff) 3.1235637s ago: executing program 3 (id=3913): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 2.945509864s ago: executing program 1 (id=3914): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) listen(0xffffffffffffffff, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) 2.887696146s ago: executing program 3 (id=3915): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0), 0x0) r1 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a80000000c0a01010000000000000000070000090900020073797a31000000000900010073797a30000000007c0003807800008008000340000000026c000b80200001800a00010071756f7461000000100002800c0001400000020000000000340001800a0001006c696d6974000000240002800c00024000000000000000000c0001400000000000000003"], 0x12c}}, 0x0) 2.675353821s ago: executing program 3 (id=3916): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000740)='-2', 0x2) 2.32384046s ago: executing program 2 (id=3917): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x2020) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000028f6100000001000000002000000040000000000000e04000000000000000000"], 0x0, 0x2a}, 0x28) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) eventfd(0x5f0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) ioctl$KDSKBENT(r6, 0x4b47, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 2.284290282s ago: executing program 0 (id=3918): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="00008000000000001800348005"], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r6 = syz_pidfd_open(r2, 0x0) setns(r6, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8e, 0x0, 0x100000}, 0x20) syz_clone(0xb21e8000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.243417223s ago: executing program 3 (id=3919): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0xba01, 0x0, 0x6000000}, 0x0) 1.041455923s ago: executing program 2 (id=3920): syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 0s ago: executing program 0 (id=3921): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003b2000/0x4000)=nil) socket(0x40000000015, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) lseek(r1, 0x800, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000001c0)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x4000002, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0xfffffffe, 0x0, 0xd, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000003, 0x0, 0x7f, 0xe, 0x8, 0x8000806f, 0x100007, 0x200, 0x1, 0x9, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0xffffffff, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c8, 0x9, 0xfffffffc, 0x8, 0x0, 0x4, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x86, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x3, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0xf, 0x8020, 0x1, 0xfe000000, 0xffff, 0x3, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x1, 0x5, 0x9, 0xffffff80, 0x4, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x800, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0x3, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ef, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x3, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x5, 0xc8, 0x2001, 0xfffff000, 0x2, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d683, 0xa1f, 0xf40, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xffffffff, 0x200, 0xffff3441, 0x401]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): st mode [ 1260.338309][T15784] bridge_slave_0: left promiscuous mode [ 1260.349276][T15784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.828392][T15810] binder: 15807:15810 ioctl c00c6211 0 returned -14 [ 1267.780430][ T5765] IPVS: starting estimator thread 0... [ 1267.920237][T15828] ieee802154 phy0 wpan0: encryption failed: -22 [ 1267.952022][T15826] IPVS: using max 18 ests per chain, 43200 per kthread [ 1268.254709][T15830] jffs2: notice: (15830) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1269.956103][T15840] virtio-fs: tag not found [ 1274.267058][T15863] binder: 15860:15863 ioctl c00c6211 0 returned -14 [ 1274.355332][T15441] hsr_slave_0: left promiscuous mode [ 1274.409716][T15441] hsr_slave_1: left promiscuous mode [ 1274.510152][T15441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1274.602647][T15441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1274.668170][T15441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1274.700412][T15441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1274.753049][T15441] bridge_slave_1: left allmulticast mode [ 1274.769052][T15441] bridge_slave_1: left promiscuous mode [ 1274.790181][T15441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.814440][T15441] bridge_slave_0: left allmulticast mode [ 1274.830227][T15441] bridge_slave_0: left promiscuous mode [ 1274.855769][T15441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.037764][T15441] veth1_macvtap: left promiscuous mode [ 1275.047920][T15441] veth0_macvtap: left promiscuous mode [ 1275.068249][T15441] veth1_vlan: left promiscuous mode [ 1275.081932][T15441] veth0_vlan: left promiscuous mode [ 1277.048757][T15441] team0 (unregistering): Port device team_slave_1 removed [ 1277.118906][T15441] team0 (unregistering): Port device team_slave_0 removed [ 1277.197620][T15441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1277.571571][T15441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1278.117541][T15889] ieee802154 phy0 wpan0: encryption failed: -22 [ 1278.285467][T15441] bond0 (unregistering): Released all slaves [ 1281.050611][ T5818] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1281.363062][ T5818] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1281.488964][ T5818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1281.766876][ T5818] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1281.835313][T15688] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1281.976973][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.125126][T15688] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1283.145523][ T5818] usb 3-1: Product: syz [ 1283.149809][ T5818] usb 3-1: Manufacturer: syz [ 1283.172141][ T5818] usb 3-1: SerialNumber: syz [ 1283.499495][ T5818] usb 3-1: config 0 descriptor?? [ 1283.520265][ T5818] usb 3-1: can't set config #0, error -71 [ 1283.532677][ T5818] usb 3-1: USB disconnect, device number 36 [ 1283.559618][T15688] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1283.567402][T15441] IPVS: stop unused estimator thread 0... [ 1283.592633][T15688] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1283.608410][T15910] netlink: 'syz.0.2548': attribute type 1 has an invalid length. [ 1283.655692][T15910] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1283.987904][T15688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1284.636695][T15688] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.735410][T15620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.742655][T15620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.827229][T15620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.834453][T15620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.885355][T15928] ieee802154 phy0 wpan0: encryption failed: -22 [ 1286.833160][T15946] binder: 15945:15946 ioctl c00c6211 0 returned -14 [ 1287.653456][T15688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1287.755947][T15960] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1290.145082][T15968] NILFS (nullb0): couldn't find nilfs on the device [ 1291.681251][T15688] veth0_vlan: entered promiscuous mode [ 1291.789042][T15688] veth1_vlan: entered promiscuous mode [ 1291.820458][ T5765] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1291.949598][T15688] veth0_macvtap: entered promiscuous mode [ 1292.100673][T15688] veth1_macvtap: entered promiscuous mode [ 1292.131515][T15688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1292.147853][T15688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.167132][ T5765] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1292.873025][T15688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1292.898802][ T5765] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1292.925704][T15688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.939641][T15688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1292.964903][T15688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.986271][T15979] ieee802154 phy0 wpan0: encryption failed: -22 [ 1293.002529][T15688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1293.046229][T15688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1293.120458][ T5765] usb 4-1: string descriptor 0 read error: -71 [ 1293.128063][ T5765] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1293.137333][ T5765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.146437][T15688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.166778][ T5765] usb 4-1: config 0 descriptor?? [ 1293.173392][T15688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1293.184637][ T5765] usb 4-1: can't set config #0, error -71 [ 1293.192207][ T5765] usb 4-1: USB disconnect, device number 35 [ 1293.199272][T15688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.211977][T15688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1293.222656][T15688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.252849][T15688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1293.286071][T15688] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.312163][T15688] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.350904][T15688] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.375870][T15688] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.781531][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1293.790424][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1293.798283][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1293.817041][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.930549][ T23] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1295.010464][ T5816] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1295.162069][ T23] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1295.190508][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.224787][ T5816] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1295.240608][ T23] usb 2-1: Product: syz [ 1295.250129][ T5816] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1295.279850][ T23] usb 2-1: Manufacturer: syz [ 1295.285796][ T23] usb 2-1: SerialNumber: syz [ 1295.309639][ T5816] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1295.330853][ T23] usb 2-1: config 0 descriptor?? [ 1295.344809][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.376729][ T5816] usb 4-1: Product: syz [ 1295.396340][ T5816] usb 4-1: Manufacturer: syz [ 1295.413526][ T5816] usb 4-1: SerialNumber: syz [ 1295.441565][ T5816] usb 4-1: config 0 descriptor?? [ 1295.605414][ T23] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 1295.660602][ T23] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 1295.713963][ T23] usb 2-1: USB disconnect, device number 26 [ 1297.172395][ T5816] mos7840 4-1:0.0: required endpoints missing [ 1297.220551][ T5816] usb 4-1: USB disconnect, device number 36 [ 1298.681079][T16040] NILFS (nullb0): couldn't find nilfs on the device [ 1298.710645][T16040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.722572][T16040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.353730][T16042] overlayfs: missing 'lowerdir' [ 1300.335763][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.342335][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.402140][T16082] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1303.484404][T16082] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1304.630717][ T23] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1304.894898][ T23] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1304.903697][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1304.916463][ T23] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1304.926258][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.934669][ T23] usb 3-1: Product: syz [ 1304.938855][ T23] usb 3-1: Manufacturer: syz [ 1304.943649][ T23] usb 3-1: SerialNumber: syz [ 1304.954616][ T23] usb 3-1: config 0 descriptor?? [ 1305.106805][T16100] xt_hashlimit: size too large, truncated to 1048576 [ 1306.204135][ T23] mos7840 3-1:0.0: required endpoints missing [ 1306.238284][ T23] usb 3-1: USB disconnect, device number 37 [ 1309.167982][T16125] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1309.200387][T16125] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1310.532007][T16133] No such timeout policy "syz1" [ 1310.621760][T16134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2596'. [ 1312.600654][T12210] Bluetooth: hci0: command 0x0406 tx timeout [ 1314.710874][T16155] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in; [ 1314.710874][T16155] program syz.0.2604 not setting count and/or reply_len properly [ 1315.234470][T16162] netlink: 'syz.2.2605': attribute type 1 has an invalid length. [ 1315.755159][T16162] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1317.001032][T16167] syz.2.2607 (16167): drop_caches: 2 [ 1317.143207][T16173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.190994][T16173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.946485][T16186] ieee802154 phy0 wpan0: encryption failed: -22 [ 1323.314217][T16201] xt_hashlimit: size too large, truncated to 1048576 [ 1325.649232][T16208] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1325.670961][T16208] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1325.700622][T16208] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1325.710966][T16208] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1325.750100][T16208] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1325.769566][T16208] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1325.833849][T16221] ieee802154 phy0 wpan0: encryption failed: -22 [ 1326.614629][T16208] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1326.739155][T16223] vivid-001: disconnect [ 1326.861556][T16220] vivid-001: reconnect [ 1327.524072][T16230] No source specified [ 1327.610545][T15519] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1327.639009][T16231] input: syz1 as /devices/virtual/input/input28 [ 1328.486607][T12210] Bluetooth: hci0: command 0x0406 tx timeout [ 1328.487233][ T5787] Bluetooth: hci2: command 0x041b tx timeout [ 1328.498847][T12435] Bluetooth: hci4: command 0x041b tx timeout [ 1328.504903][T12435] Bluetooth: hci3: command 0x0c1a tx timeout [ 1328.734279][T15519] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1328.745185][T15519] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1328.757195][T12434] Bluetooth: hci1: command 0xfc11 tx timeout [ 1328.763690][ T5781] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1328.833933][T15519] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1330.590440][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 1330.602365][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1330.861820][T15519] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.885654][T15519] usb 3-1: Product: syz [ 1330.897932][T16238] virtio-fs: tag not found [ 1330.972867][T15519] usb 3-1: Manufacturer: syz [ 1331.035401][T16240] xt_hashlimit: size too large, truncated to 1048576 [ 1331.090227][T15519] usb 3-1: SerialNumber: syz [ 1331.164883][T15519] usb 3-1: config 0 descriptor?? [ 1331.173957][T15519] usb 3-1: can't set config #0, error -71 [ 1331.181985][T15519] usb 3-1: USB disconnect, device number 38 [ 1333.062805][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1334.454459][T16264] vivid-004: disconnect [ 1334.577459][T16259] vivid-004: reconnect [ 1335.645190][T16274] virtio-fs: tag not found [ 1336.677069][ T5781] Bluetooth: hci4: command 0x041b tx timeout [ 1336.690463][T16267] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1336.740787][T16267] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1336.748774][T16267] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1336.776176][T16267] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1338.826469][T12434] Bluetooth: hci0: command 0x0406 tx timeout [ 1338.832604][T12434] Bluetooth: hci2: command 0x041b tx timeout [ 1338.838613][T12434] Bluetooth: hci3: command 0x0c1a tx timeout [ 1338.910449][T12210] Bluetooth: hci1: command 0xfc11 tx timeout [ 1338.920698][ T5781] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1345.756291][T16332] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1345.820994][T16332] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1345.840510][T16332] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1345.846648][T16332] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1346.961296][T16348] No such timeout policy "syz1" [ 1348.493014][ T5781] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1348.515596][ T5781] Bluetooth: hci4: command 0x041b tx timeout [ 1348.520709][T12210] Bluetooth: hci3: command 0x0c1a tx timeout [ 1348.521831][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 1348.527604][T12210] Bluetooth: hci2: command 0x041b tx timeout [ 1349.104968][T16366] autofs4:pid:16366:validate_dev_ioctl: invalid path supplied for cmd(0xc0189371) [ 1349.770574][ T5819] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1349.975356][ T5819] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1350.005874][ T5819] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1350.065337][ T5819] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1350.094295][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.135390][ T5819] usb 2-1: Product: syz [ 1350.139670][ T5819] usb 2-1: Manufacturer: syz [ 1350.175000][ T5819] usb 2-1: SerialNumber: syz [ 1350.201391][ T5819] usb 2-1: config 0 descriptor?? [ 1353.113670][ T5819] mos7840 2-1:0.0: required endpoints missing [ 1353.134478][ T5819] usb 2-1: USB disconnect, device number 27 [ 1353.158203][T16384] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1354.512481][T16393] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1354.540569][T16393] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1354.553255][T16393] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1354.559272][T16393] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1354.596668][T15618] Bluetooth: hci1: Frame reassembly failed (-84) [ 1355.205360][T16406] NILFS (nullb0): couldn't find nilfs on the device [ 1355.396900][T16410] syz.2.2673: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1355.418376][T16410] CPU: 0 PID: 16410 Comm: syz.2.2673 Not tainted syzkaller #0 [ 1355.426032][T16410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1355.436132][T16410] Call Trace: [ 1355.439445][T16410] [ 1355.442397][T16410] dump_stack_lvl+0x18c/0x250 [ 1355.447115][T16410] ? show_regs_print_info+0x20/0x20 [ 1355.452366][T16410] ? load_image+0x420/0x420 [ 1355.456938][T16410] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1355.463458][T16410] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1355.470016][T16410] warn_alloc+0x246/0x340 [ 1355.474392][T16410] ? stack_trace_save+0xaa/0x100 [ 1355.479382][T16410] ? zone_watermark_ok_safe+0x230/0x230 [ 1355.485074][T16410] ? kasan_set_track+0x5f/0x70 [ 1355.489886][T16410] ? kasan_set_track+0x4e/0x70 [ 1355.494689][T16410] ? __kasan_kmalloc+0x8f/0xa0 [ 1355.499477][T16410] ? xsk_init_queue+0xad/0x100 [ 1355.504296][T16410] ? xsk_setsockopt+0x413/0x750 [ 1355.509234][T16410] ? do_sock_setsockopt+0x175/0x1a0 [ 1355.514493][T16410] ? __x64_sys_setsockopt+0x182/0x200 [ 1355.519926][T16410] __vmalloc_node_range+0x129/0x1320 [ 1355.525278][T16410] ? free_vm_area+0x50/0x50 [ 1355.529819][T16410] vmalloc_user+0x74/0x80 [ 1355.534182][T16410] ? xskq_create+0xbf/0x170 [ 1355.538716][T16410] xskq_create+0xbf/0x170 [ 1355.543089][T16410] xsk_init_queue+0xad/0x100 [ 1355.547717][T16410] xsk_setsockopt+0x413/0x750 [ 1355.552588][T16410] ? xsk_poll+0x670/0x670 [ 1355.556942][T16410] ? __fget_files+0x28/0x460 [ 1355.561557][T16410] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1355.567125][T16410] ? security_socket_setsockopt+0x7e/0xa0 [ 1355.572858][T16410] ? xsk_poll+0x670/0x670 [ 1355.577211][T16410] do_sock_setsockopt+0x175/0x1a0 [ 1355.582247][T16410] ? __fdget+0x180/0x210 [ 1355.586511][T16410] __x64_sys_setsockopt+0x182/0x200 [ 1355.591728][T16410] do_syscall_64+0x55/0xb0 [ 1355.596159][T16410] ? clear_bhb_loop+0x40/0x90 [ 1355.600848][T16410] ? clear_bhb_loop+0x40/0x90 [ 1355.605548][T16410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1355.611454][T16410] RIP: 0033:0x7fc7a459e0d9 [ 1355.615887][T16410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.635508][T16410] RSP: 002b:00007fc7a27f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1355.643950][T16410] RAX: ffffffffffffffda RBX: 00007fc7a4825fa0 RCX: 00007fc7a459e0d9 [ 1355.651950][T16410] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 1355.659936][T16410] RBP: 00007fc7a4635024 R08: 0000000000000029 R09: 0000000000000000 [ 1355.667931][T16410] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1355.675920][T16410] R13: 00007fc7a4826038 R14: 00007fc7a4825fa0 R15: 00007ffda568b408 [ 1355.683931][T16410] [ 1355.706189][T10824] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1355.729501][T16410] Mem-Info: [ 1355.737901][T16410] active_anon:14770 inactive_anon:0 isolated_anon:0 [ 1355.737901][T16410] active_file:18509 inactive_file:40490 isolated_file:0 [ 1355.737901][T16410] unevictable:768 dirty:86 writeback:0 [ 1355.737901][T16410] slab_reclaimable:10946 slab_unreclaimable:92676 [ 1355.737901][T16410] mapped:34578 shmem:10446 pagetables:620 [ 1355.737901][T16410] sec_pagetables:0 bounce:0 [ 1355.737901][T16410] kernel_misc_reclaimable:0 [ 1355.737901][T16410] free:1338001 free_pcp:4442 free_cma:0 [ 1355.907591][T16410] Node 0 active_anon:63404kB inactive_anon:0kB active_file:74036kB inactive_file:161760kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130264kB dirty:356kB writeback:0kB shmem:44616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10880kB pagetables:2424kB sec_pagetables:0kB all_unreclaimable? no [ 1355.971945][T10824] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1355.986410][T10824] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1355.998279][T16410] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1356.032687][T10824] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1356.044273][T10824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.053813][T16410] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1356.086572][T10824] usb 4-1: Product: syz [ 1356.089370][T16415] binder: 16414:16415 ioctl c0306201 0 returned -14 [ 1356.090878][T10824] usb 4-1: Manufacturer: syz [ 1356.090896][T10824] usb 4-1: SerialNumber: syz [ 1356.093730][T16410] lowmem_reserve[]: [ 1356.110264][T10824] usb 4-1: config 0 descriptor?? [ 1356.126744][T16410] 0 2521 2522 2522 2522 [ 1356.131959][T16410] Node 0 DMA32 free:1429484kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:64804kB inactive_anon:0kB active_file:74036kB inactive_file:160936kB unevictable:1536kB writepending:404kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:4296kB local_pcp:920kB free_cma:0kB [ 1356.165279][T16410] lowmem_reserve[]: 0 0 0 0 0 [ 1356.215830][T16410] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1356.308045][T16410] lowmem_reserve[]: 0 0 0 0 0 [ 1356.318184][T16410] Node 1 Normal free:3901356kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14292kB local_pcp:2880kB free_cma:0kB [ 1356.455548][T16410] lowmem_reserve[]: 0 0 0 0 0 [ 1356.473950][T16410] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1356.527398][T16410] Node 0 DMA32: 1104*4kB (U) 632*8kB (U) 118*16kB (UE) 406*32kB (UM) 492*64kB (UM) 136*128kB (UME) 76*256kB (UME) 38*512kB (UM) 17*1024kB (UM) 7*2048kB (UM) 311*4096kB (UM) = 1417760kB [ 1356.555140][T16410] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1356.567392][T16410] Node 1 Normal: 225*4kB (UME) 55*8kB (UME) 43*16kB (UME) 194*32kB (UME) 40*64kB (UME) 9*128kB (UE) 1*256kB (E) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3901356kB [ 1356.585685][T16410] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1356.597724][T16410] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1356.604850][T12434] Bluetooth: hci0: command 0x0406 tx timeout [ 1356.608235][T12210] Bluetooth: hci3: command 0x0c1a tx timeout [ 1356.614773][ T5787] Bluetooth: hci2: command 0x041b tx timeout [ 1356.619635][T12210] Bluetooth: hci4: command 0x041b tx timeout [ 1356.643856][T16410] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1356.655645][T16410] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1356.669466][T16410] 73954 total pagecache pages [ 1356.674557][T16410] 0 pages in swap cache [ 1356.679953][T16410] Free swap = 124724kB [ 1356.680650][ T5781] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1356.687855][T12210] Bluetooth: hci1: command 0xfc11 tx timeout [ 1356.700136][T16410] Total swap = 124996kB [ 1356.705050][T16410] 2097051 pages RAM [ 1356.709028][T16410] 0 pages HighMem/MovableOnly [ 1356.714202][T16410] 416955 pages reserved [ 1356.719409][T16410] 0 pages cma reserved [ 1357.114767][T16423] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1359.854313][T10824] mos7840 4-1:0.0: required endpoints missing [ 1359.936550][T10824] usb 4-1: USB disconnect, device number 37 [ 1360.042039][T16426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.094840][T16426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.716473][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.161554][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.588885][T16435] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1366.135255][T16451] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.980658][T16453] No such timeout policy "syz1" [ 1368.871192][T16459] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1368.890670][T16459] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1368.956604][T16459] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1368.965633][T16459] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1369.032586][T16464] CIFS: Attempting to mount //127.0.0.1/share [ 1370.910454][T12210] Bluetooth: hci2: command 0x041b tx timeout [ 1370.910507][T12434] Bluetooth: hci4: command 0x041b tx timeout [ 1370.990640][ T5781] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1371.000137][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1371.120366][T12434] Bluetooth: hci0: command 0x0406 tx timeout [ 1371.334641][T16464] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 1371.373097][T16464] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1371.504230][T16481] jffs2: notice: (16481) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1371.639661][T16484] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1373.085132][T16498] No such timeout policy "syz1" [ 1374.180506][ T5765] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1374.441998][ T5765] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.564032][ T5765] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1374.588122][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.916067][T16511] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1374.930933][T16511] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1374.939675][T16511] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1374.946561][ T5765] usb 2-1: Product: syz [ 1374.950852][ T5765] usb 2-1: Manufacturer: syz [ 1374.960788][T16511] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1374.967569][ T5765] usb 2-1: SerialNumber: syz [ 1374.978801][ T5765] usb 2-1: config 0 descriptor?? [ 1374.990096][ T5765] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1375.005253][ T5765] dvb-usb: bulk message failed: -22 (3/0) [ 1375.523491][ T5765] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1375.610617][ T5765] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1375.684598][ T5765] usb 2-1: media controller created [ 1375.730818][ T5765] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1375.797549][T16515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.826765][ T5765] dvb-usb: bulk message failed: -22 (6/0) [ 1375.849904][ T5765] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1375.867071][T16515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.914142][ T5765] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input29 [ 1375.968471][ T5765] dvb-usb: schedule remote query interval to 150 msecs. [ 1375.985888][ T5765] dvb-usb: bulk message failed: -22 (3/0) [ 1376.045505][ T5765] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1376.088325][ T5765] usb 2-1: USB disconnect, device number 28 [ 1376.750604][T12434] Bluetooth: hci4: command 0x041b tx timeout [ 1376.990420][T12434] Bluetooth: hci3: command 0x0c1a tx timeout [ 1376.991417][T12210] Bluetooth: hci0: command 0x0406 tx timeout [ 1376.996812][T12434] Bluetooth: hci2: command 0x041b tx timeout [ 1377.033874][ T5765] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1377.072379][ T5781] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1377.591424][T16527] jffs2: notice: (16527) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1378.031398][T16534] No such timeout policy "syz1" [ 1379.473089][T16540] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1383.614695][ T5818] kernel read not supported for file /dsp (pid: 5818 comm: kworker/0:5) [ 1384.197983][T16564] jffs2: notice: (16564) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1384.216370][T16557] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1384.243103][T16557] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1384.260915][T16557] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1384.276025][T16557] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1384.325137][T16560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.351060][T16560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.725293][T16574] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1384.754150][T16574] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1385.751576][T16579] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1386.360474][ T5781] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1386.372127][ T5781] Bluetooth: hci4: command 0x041b tx timeout [ 1386.754387][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout [ 1386.754387][T12210] Bluetooth: hci2: command 0x041b tx timeout [ 1386.754492][T12434] Bluetooth: hci0: command 0x0406 tx timeout [ 1386.950547][ T5819] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1387.617443][ T5819] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1387.773074][ T5819] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1387.991786][ T5819] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1388.108485][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.203152][ T5819] usb 4-1: Product: syz [ 1388.242113][ T5819] usb 4-1: Manufacturer: syz [ 1388.300079][ T5819] usb 4-1: SerialNumber: syz [ 1389.025447][ T5819] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1389.053793][ T5819] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1389.255088][ T5819] usb 4-1: USB disconnect, device number 38 [ 1389.524836][T16584] syz.0.2724 (16584): drop_caches: 2 [ 1389.930834][T10822] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1390.313573][T10822] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1390.420034][T10822] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1390.596676][T16603] xt_hashlimit: size too large, truncated to 1048576 [ 1390.653641][T10822] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1390.682647][T10822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.742351][T10822] usb 3-1: Product: syz [ 1390.747400][T10822] usb 3-1: Manufacturer: syz [ 1390.755526][T10822] usb 3-1: SerialNumber: syz [ 1390.762800][T10822] usb 3-1: config 0 descriptor?? [ 1392.996928][T10822] mos7840 3-1:0.0: required endpoints missing [ 1393.169166][T10822] usb 3-1: USB disconnect, device number 39 [ 1394.821773][T16624] syz.0.2736 (16624): drop_caches: 2 [ 1394.920473][ T5765] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1395.125868][T16637] xt_hashlimit: size too large, truncated to 1048576 [ 1395.996966][ T5765] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1396.030381][ T5765] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1396.039462][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.111332][ T5765] usb 2-1: config 0 descriptor?? [ 1396.883152][ T5765] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 1396.953656][ T5765] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0003/input/input30 [ 1397.162774][ T5765] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1397.231865][ T5765] usb 2-1: USB disconnect, device number 29 [ 1397.397687][T16658] fido_id[16658]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1397.832269][T16665] syz.0.2749 (16665): drop_caches: 2 [ 1398.370380][ T5765] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1398.906725][T16676] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1398.922664][ T5765] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1398.973677][ T5765] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1399.040373][ T5765] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1399.070582][ T5765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.078617][ T5765] usb 4-1: Product: syz [ 1399.103271][ T5765] usb 4-1: Manufacturer: syz [ 1399.108001][ T5765] usb 4-1: SerialNumber: syz [ 1399.129546][ T5765] usb 4-1: config 0 descriptor?? [ 1401.962635][ T5765] mos7840 4-1:0.0: required endpoints missing [ 1401.973181][ T5765] usb 4-1: USB disconnect, device number 39 [ 1402.193085][T16700] syz.1.2761 (16700): drop_caches: 2 [ 1403.365990][T16713] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1405.463703][T16719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.477292][T16719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.419548][T16724] 9pnet_fd: Insufficient options for proto=fd [ 1406.513034][T16726] syz.1.2772 (16726): drop_caches: 2 [ 1406.656776][T16733] No such timeout policy "syz1" [ 1409.196353][T16746] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1409.287353][T16749] syz.0.2778: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1409.550736][T16749] CPU: 1 PID: 16749 Comm: syz.0.2778 Not tainted syzkaller #0 [ 1409.558353][T16749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1409.568455][T16749] Call Trace: [ 1409.571754][T16749] [ 1409.574703][T16749] dump_stack_lvl+0x18c/0x250 [ 1409.579414][T16749] ? show_regs_print_info+0x20/0x20 [ 1409.584662][T16749] ? load_image+0x420/0x420 [ 1409.589204][T16749] ? __rcu_read_unlock+0x7c/0xd0 [ 1409.594174][T16749] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1409.600642][T16749] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1409.607197][T16749] warn_alloc+0x246/0x340 [ 1409.611554][T16749] ? stack_trace_save+0xaa/0x100 [ 1409.616531][T16749] ? zone_watermark_ok_safe+0x230/0x230 [ 1409.622112][T16749] ? kasan_set_track+0x5f/0x70 [ 1409.627104][T16749] ? kasan_set_track+0x4e/0x70 [ 1409.631901][T16749] ? __kasan_kmalloc+0x8f/0xa0 [ 1409.636787][T16749] ? xsk_init_queue+0xad/0x100 [ 1409.641585][T16749] ? xsk_setsockopt+0x413/0x750 [ 1409.646472][T16749] ? do_sock_setsockopt+0x175/0x1a0 [ 1409.651701][T16749] ? __x64_sys_setsockopt+0x182/0x200 [ 1409.657111][T16749] __vmalloc_node_range+0x129/0x1320 [ 1409.662455][T16749] ? free_vm_area+0x50/0x50 [ 1409.667089][T16749] vmalloc_user+0x74/0x80 [ 1409.671547][T16749] ? xskq_create+0xbf/0x170 [ 1409.676182][T16749] xskq_create+0xbf/0x170 [ 1409.680553][T16749] xsk_init_queue+0xad/0x100 [ 1409.685277][T16749] xsk_setsockopt+0x413/0x750 [ 1409.690012][T16749] ? xsk_poll+0x670/0x670 [ 1409.694389][T16749] ? __fget_files+0x28/0x460 [ 1409.699026][T16749] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1409.704610][T16749] ? security_socket_setsockopt+0x7e/0xa0 [ 1409.710369][T16749] ? xsk_poll+0x670/0x670 [ 1409.714743][T16749] do_sock_setsockopt+0x175/0x1a0 [ 1409.719801][T16749] ? __fdget+0x180/0x210 [ 1409.724086][T16749] __x64_sys_setsockopt+0x182/0x200 [ 1409.729326][T16749] do_syscall_64+0x55/0xb0 [ 1409.733807][T16749] ? clear_bhb_loop+0x40/0x90 [ 1409.738527][T16749] ? clear_bhb_loop+0x40/0x90 [ 1409.743238][T16749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1409.749172][T16749] RIP: 0033:0x7f4716d9e0d9 [ 1409.753632][T16749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1409.773271][T16749] RSP: 002b:00007f4717bd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1409.781712][T16749] RAX: ffffffffffffffda RBX: 00007f4717025fa0 RCX: 00007f4716d9e0d9 [ 1409.789715][T16749] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 1409.797719][T16749] RBP: 00007f4716e35024 R08: 0000000000000029 R09: 0000000000000000 [ 1409.805726][T16749] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1409.813731][T16749] R13: 00007f4717026038 R14: 00007f4717025fa0 R15: 00007ffce9673038 [ 1409.821752][T16749] [ 1410.455966][ T5819] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1411.472424][T16749] Mem-Info: [ 1411.475660][T16749] active_anon:8666 inactive_anon:0 isolated_anon:0 [ 1411.475660][T16749] active_file:18509 inactive_file:40511 isolated_file:0 [ 1411.475660][T16749] unevictable:768 dirty:214 writeback:0 [ 1411.475660][T16749] slab_reclaimable:10671 slab_unreclaimable:90375 [ 1411.475660][T16749] mapped:28839 shmem:4232 pagetables:629 [ 1411.475660][T16749] sec_pagetables:0 bounce:0 [ 1411.475660][T16749] kernel_misc_reclaimable:0 [ 1411.475660][T16749] free:1342576 free_pcp:7436 free_cma:0 [ 1411.521995][T16749] Node 0 active_anon:34664kB inactive_anon:0kB active_file:74036kB inactive_file:161840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115356kB dirty:856kB writeback:0kB shmem:15392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10724kB pagetables:2516kB sec_pagetables:0kB all_unreclaimable? no [ 1411.555794][T16749] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1411.586546][T16749] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1411.614104][T16749] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1411.619986][T16749] Node 0 DMA32 free:1453580kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:34624kB inactive_anon:0kB active_file:74036kB inactive_file:161016kB unevictable:1536kB writepending:856kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:15356kB local_pcp:2536kB free_cma:0kB [ 1411.659310][T16749] lowmem_reserve[]: 0 0 0 0 0 [ 1411.664472][T16749] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1411.696196][T16749] lowmem_reserve[]: 0 0 0 0 0 [ 1411.701333][T16749] Node 1 Normal free:3901356kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14324kB local_pcp:11444kB free_cma:0kB [ 1411.756462][T16758] 9pnet_fd: Insufficient options for proto=fd [ 1411.772946][T16749] lowmem_reserve[]: 0 0 0 0 0 [ 1411.779260][T16749] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1411.817637][T16749] Node 0 DMA32: 2*4kB (UE) 609*8kB (UM) 1036*16kB (UME) 1040*32kB (UME) 503*64kB (UME) 197*128kB (UME) 79*256kB (UME) 48*512kB (UM) 18*1024kB (UM) 6*2048kB (UM) 309*4096kB (UM) = 1453328kB [ 1411.856905][T16749] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1411.870077][T16749] Node 1 Normal: 225*4kB (UME) 55*8kB (UME) 43*16kB (UME) 194*32kB (UME) 40*64kB (UME) 9*128kB (UE) 1*256kB (E) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3901356kB [ 1411.889905][T16749] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1411.900378][T16749] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1411.909697][T16749] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1412.194757][T16749] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1412.289543][T16749] 63251 total pagecache pages [ 1412.294554][T16749] 0 pages in swap cache [ 1412.298837][T16749] Free swap = 124420kB [ 1412.303540][T16749] Total swap = 124996kB [ 1412.307854][T16749] 2097051 pages RAM [ 1412.312023][T16749] 0 pages HighMem/MovableOnly [ 1412.316801][T16749] 416955 pages reserved [ 1412.321144][T16749] 0 pages cma reserved [ 1412.585374][T16770] NILFS (nullb0): couldn't find nilfs on the device [ 1412.980522][ T5819] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1413.096532][T16775] ieee802154 phy0 wpan0: encryption failed: -22 [ 1413.173272][ T5819] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1413.209664][ T5819] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1413.232627][ T5819] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1413.243252][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.251725][ T5819] usb 2-1: Product: syz [ 1413.256017][ T5819] usb 2-1: Manufacturer: syz [ 1413.260771][ T5819] usb 2-1: SerialNumber: syz [ 1413.270135][ T5819] usb 2-1: config 0 descriptor?? [ 1414.071976][T16789] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1415.593825][ T5819] mos7840 2-1:0.0: required endpoints missing [ 1415.607022][ T5819] usb 2-1: USB disconnect, device number 30 [ 1415.867685][T16795] No such timeout policy "syz1" [ 1417.014657][T16805] ieee802154 phy0 wpan0: encryption failed: -22 [ 1418.210336][ T5819] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1418.233508][T16820] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1419.622647][T16823] binder: 16822:16823 ioctl c00c6211 0 returned -14 [ 1421.227938][T16827] No such timeout policy "syz1" [ 1423.162572][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.168957][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.188365][T16841] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.013881][T16852] binder: 16851:16852 ioctl c00c6211 0 returned -14 [ 1424.800676][T16862] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1424.823477][T16862] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1427.850200][T16877] ieee802154 phy0 wpan0: encryption failed: -22 [ 1429.569069][T16894] NILFS (nullb0): couldn't find nilfs on the device [ 1429.850501][T15519] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1429.851107][T16896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.014814][T16896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.063800][T15519] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1430.085212][T15519] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1430.113573][T15519] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1430.137488][T15519] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.164817][T15519] usb 4-1: Product: syz [ 1430.175712][T15519] usb 4-1: Manufacturer: syz [ 1430.188109][T15519] usb 4-1: SerialNumber: syz [ 1430.212366][T15519] usb 4-1: config 0 descriptor?? [ 1430.886231][T16898] binder: 16897:16898 ioctl c00c6211 0 returned -14 [ 1431.256856][T16905] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1431.283841][T16905] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1432.097262][T16908] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.253459][T15519] mos7840 4-1:0.0: required endpoints missing [ 1432.306631][T15519] usb 4-1: USB disconnect, device number 40 [ 1432.998858][T16917] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1433.021318][T16917] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1433.783221][T16921] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1436.469094][T16928] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2832'. [ 1436.487744][T16928] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2832'. [ 1437.087135][T16934] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1437.108171][T16934] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1438.500162][T16946] ieee802154 phy0 wpan0: encryption failed: -22 [ 1440.126200][T16954] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1440.147727][T16954] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1441.031079][T16958] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1443.321718][T16965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.331813][T15176] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1443.350709][T16965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.530413][T15176] usb 2-1: Using ep0 maxpacket: 16 [ 1443.543330][T15176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1443.581296][T15176] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1443.600651][T15176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.609531][T15176] usb 2-1: Product: syz [ 1443.615545][T15176] usb 2-1: Manufacturer: syz [ 1443.621435][T15176] usb 2-1: SerialNumber: syz [ 1443.638330][T15176] usb 2-1: config 0 descriptor?? [ 1443.667824][T15176] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1443.721913][T15176] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1444.296932][T15176] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1445.443310][T15176] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1445.510364][T15176] em28xx 2-1:0.0: board has no eeprom [ 1445.693061][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2848'. [ 1445.702457][T16981] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2848'. [ 1445.770298][T16982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2848'. [ 1445.779258][T16982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2848'. [ 1445.943933][T15176] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1446.056692][T15176] em28xx 2-1:0.0: dvb set to bulk mode. [ 1446.490006][T10822] em28xx 2-1:0.0: Binding DVB extension [ 1446.727616][ T5816] usb 2-1: USB disconnect, device number 32 [ 1446.791599][ T5816] em28xx 2-1:0.0: Disconnecting em28xx [ 1446.801503][T16990] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1446.823949][T16990] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1447.885686][T17000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1447.895819][T17000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.661009][T10822] em28xx 2-1:0.0: Registering input extension [ 1448.690536][ T5816] em28xx 2-1:0.0: Closing input extension [ 1448.885655][ T5816] em28xx 2-1:0.0: Freeing device [ 1451.850541][ T5819] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1451.870859][T17028] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1452.764219][ T5819] usb 4-1: config 127 has an invalid interface number: 84 but max is 0 [ 1452.800341][ T5819] usb 4-1: config 127 has no interface number 0 [ 1452.848615][ T5819] usb 4-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=9c.e5 [ 1452.874040][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.896967][ T5819] usb 4-1: Product: syz [ 1452.914865][ T5819] usb 4-1: Manufacturer: syz [ 1452.919614][ T5819] usb 4-1: SerialNumber: syz [ 1454.003732][ T5819] gspca_main: spca501-2.14.0 probing 040a:0002 [ 1454.014410][ T5819] gspca_spca501: reg write: error -71 [ 1454.020927][ T5819] spca501 4-1:127.84: Reg write failed for 0x00,0xaa,0x00 [ 1454.028827][ T5819] spca501: probe of 4-1:127.84 failed with error -22 [ 1454.069737][ T5819] usb 4-1: USB disconnect, device number 41 [ 1457.008763][T17071] ieee802154 phy0 wpan0: encryption failed: -22 [ 1458.985535][T17085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.050887][T17085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.437085][T17093] NILFS (nullb0): couldn't find nilfs on the device [ 1459.606332][T17097] netlink: 'syz.1.2885': attribute type 4 has an invalid length. [ 1459.730450][T15519] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1461.708157][T15519] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1461.766468][T15519] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1461.858439][T15519] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1461.881463][T15519] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.920617][T15519] usb 4-1: Product: syz [ 1461.924857][T15519] usb 4-1: Manufacturer: syz [ 1461.929515][T15519] usb 4-1: SerialNumber: syz [ 1461.957158][T15519] usb 4-1: config 0 descriptor?? [ 1462.068752][T15519] mos7840 4-1:0.0: required endpoints missing [ 1462.131334][T15519] usb 4-1: USB disconnect, device number 42 [ 1462.363721][T17106] ieee802154 phy0 wpan0: encryption failed: -22 [ 1465.268827][T17127] genirq: Flags mismatch irq 32. 00000000 (pcmmio) vs. 00000000 (virtio1-output.0) [ 1465.560914][T17129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2895'. [ 1465.978276][T17136] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1465.998853][T17136] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1466.537715][T17135] ieee802154 phy0 wpan0: encryption failed: -22 [ 1468.354816][T17163] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1468.376732][T17163] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1469.063363][T17164] ieee802154 phy0 wpan0: encryption failed: -22 [ 1473.137808][T17187] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1473.158776][T17187] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1474.119944][T17192] ieee802154 phy0 wpan0: encryption failed: -22 [ 1475.527658][T17208] binder: 17207:17208 ioctl c00c6211 0 returned -14 [ 1475.640652][ T5816] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1475.868470][ T5816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.974216][ T5816] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1476.054623][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.226274][ T5816] usb 2-1: config 0 descriptor?? [ 1476.767149][T17221] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1476.785666][T17221] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1477.472009][ T5816] ath6kl: Failed to read usb control message: -71 [ 1477.478515][ T5816] ath6kl: Unable to read the bmi data from the device: -71 [ 1477.646332][ T5816] ath6kl: unable to read target info byte count: -71 [ 1477.665586][ T5816] ath6kl: Failed to init ath6kl core: -71 [ 1477.671978][ T5816] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 1477.686761][ T5816] usb 2-1: USB disconnect, device number 33 [ 1477.870149][T17229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.899740][T17229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1479.433332][T17243] binder: 17242:17243 ioctl c00c6211 0 returned -14 [ 1481.153279][T17264] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2940'. [ 1481.891286][ T5818] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1482.222682][ T5818] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1482.257504][ T5818] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1482.300873][T17272] binder: 17271:17272 ioctl c00c6211 0 returned -14 [ 1483.161142][ T5818] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1483.237571][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.347368][ T5818] usb 4-1: Product: syz [ 1483.355841][ T5818] usb 4-1: Manufacturer: syz [ 1483.372616][ T5818] usb 4-1: SerialNumber: syz [ 1483.400946][ T5818] usb 4-1: config 0 descriptor?? [ 1483.917094][ T5818] mos7840 4-1:0.0: required endpoints missing [ 1483.951992][ T5818] usb 4-1: USB disconnect, device number 43 [ 1484.593097][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.599570][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.151736][T17314] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2954'. [ 1485.186767][T17316] binder: 17315:17316 ioctl c00c6211 0 returned -14 [ 1487.625055][T17324] netlink: 'syz.3.2957': attribute type 1 has an invalid length. [ 1488.545554][T17324] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1489.379271][T17340] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2958'. [ 1489.437448][T17340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.449525][T17340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1490.908535][T17363] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1490.928020][T17363] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1491.854813][T17362] netlink: 'syz.1.2968': attribute type 1 has an invalid length. [ 1491.877407][T17362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1493.408379][T17398] No such timeout policy "syz1" [ 1493.925717][T17408] netlink: 'syz.1.2981': attribute type 1 has an invalid length. [ 1494.043423][T17408] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1494.531854][T17404] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1494.537998][T17404] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1494.544158][T17404] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1494.550153][T17404] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1495.251564][T17422] warn_alloc: 1 callbacks suppressed [ 1495.251580][T17422] syz.2.2985: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1495.272167][T17422] CPU: 1 PID: 17422 Comm: syz.2.2985 Not tainted syzkaller #0 [ 1495.279661][T17422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1495.289742][T17422] Call Trace: [ 1495.293039][T17422] [ 1495.295987][T17422] dump_stack_lvl+0x18c/0x250 [ 1495.300685][T17422] ? show_regs_print_info+0x20/0x20 [ 1495.305899][T17422] ? load_image+0x420/0x420 [ 1495.310439][T17422] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1495.316864][T17422] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1495.323388][T17422] warn_alloc+0x246/0x340 [ 1495.327731][T17422] ? stack_trace_save+0xaa/0x100 [ 1495.332693][T17422] ? zone_watermark_ok_safe+0x230/0x230 [ 1495.338263][T17422] ? kasan_set_track+0x5f/0x70 [ 1495.343038][T17422] ? kasan_set_track+0x4e/0x70 [ 1495.347842][T17422] ? __kasan_kmalloc+0x8f/0xa0 [ 1495.352628][T17422] ? xsk_init_queue+0xad/0x100 [ 1495.357425][T17422] ? xsk_setsockopt+0x413/0x750 [ 1495.362293][T17422] ? do_sock_setsockopt+0x175/0x1a0 [ 1495.367515][T17422] ? __x64_sys_setsockopt+0x182/0x200 [ 1495.372904][T17422] __vmalloc_node_range+0x129/0x1320 [ 1495.378237][T17422] ? free_vm_area+0x50/0x50 [ 1495.382768][T17422] vmalloc_user+0x74/0x80 [ 1495.387119][T17422] ? xskq_create+0xbf/0x170 [ 1495.391640][T17422] xskq_create+0xbf/0x170 [ 1495.396004][T17422] xsk_init_queue+0xad/0x100 [ 1495.400613][T17422] xsk_setsockopt+0x413/0x750 [ 1495.405315][T17422] ? xsk_poll+0x670/0x670 [ 1495.409670][T17422] ? __fget_files+0x28/0x460 [ 1495.414296][T17422] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1495.419870][T17422] ? security_socket_setsockopt+0x7e/0xa0 [ 1495.425689][T17422] ? xsk_poll+0x670/0x670 [ 1495.430037][T17422] do_sock_setsockopt+0x175/0x1a0 [ 1495.435076][T17422] ? __fdget+0x180/0x210 [ 1495.439333][T17422] __x64_sys_setsockopt+0x182/0x200 [ 1495.444553][T17422] do_syscall_64+0x55/0xb0 [ 1495.448985][T17422] ? clear_bhb_loop+0x40/0x90 [ 1495.453676][T17422] ? clear_bhb_loop+0x40/0x90 [ 1495.458371][T17422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1495.464282][T17422] RIP: 0033:0x7fc7a459e0d9 [ 1495.468717][T17422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1495.488330][T17422] RSP: 002b:00007fc7a27f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1495.496768][T17422] RAX: ffffffffffffffda RBX: 00007fc7a4825fa0 RCX: 00007fc7a459e0d9 [ 1495.504794][T17422] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 1495.512790][T17422] RBP: 00007fc7a4635024 R08: 0000000000000029 R09: 0000000000000000 [ 1495.520780][T17422] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1495.528763][T17422] R13: 00007fc7a4826038 R14: 00007fc7a4825fa0 R15: 00007ffda568b408 [ 1495.536767][T17422] [ 1495.715925][ T5787] Bluetooth: hci4: command 0x041b tx timeout [ 1495.733336][T17422] Mem-Info: [ 1495.737240][T17422] active_anon:11552 inactive_anon:0 isolated_anon:0 [ 1495.737240][T17422] active_file:15966 inactive_file:41240 isolated_file:0 [ 1495.737240][T17422] unevictable:768 dirty:45 writeback:0 [ 1495.737240][T17422] slab_reclaimable:6281 slab_unreclaimable:93465 [ 1495.737240][T17422] mapped:30725 shmem:7078 pagetables:608 [ 1495.737240][T17422] sec_pagetables:0 bounce:0 [ 1495.737240][T17422] kernel_misc_reclaimable:0 [ 1495.737240][T17422] free:1345237 free_pcp:5660 free_cma:0 [ 1495.782394][ C0] vkms_vblank_simulate: vblank timer overrun [ 1495.788565][T17422] Node 0 active_anon:46208kB inactive_anon:0kB active_file:63864kB inactive_file:164756kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122900kB dirty:180kB writeback:0kB shmem:26776kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10988kB pagetables:2432kB sec_pagetables:0kB all_unreclaimable? no [ 1495.821497][ C0] vkms_vblank_simulate: vblank timer overrun [ 1495.829142][T17422] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1495.896786][T17428] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1495.918600][T17428] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1495.933015][T15519] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1496.165556][T15519] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1496.181182][T17422] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1496.218865][T15519] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1496.259086][T15519] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1496.274688][T15519] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.293486][T17422] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1496.299324][T17422] Node 0 DMA32 free:1464160kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:46196kB inactive_anon:0kB active_file:63864kB inactive_file:163936kB unevictable:1536kB writepending:208kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:8304kB local_pcp:6880kB free_cma:0kB [ 1496.340441][T15519] usb 4-1: Product: syz [ 1496.354725][T15519] usb 4-1: Manufacturer: syz [ 1496.374076][T15519] usb 4-1: SerialNumber: syz [ 1496.385593][T15519] usb 4-1: config 0 descriptor?? [ 1496.428278][T17422] lowmem_reserve[]: 0 0 0 0 0 [ 1496.448905][T17422] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1496.505815][T17422] lowmem_reserve[]: 0 0 0 0 0 [ 1496.511796][T17422] Node 1 Normal free:3901356kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14324kB local_pcp:11444kB free_cma:0kB [ 1496.542104][T17422] lowmem_reserve[]: 0 0 0 0 0 [ 1496.546888][T17422] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1496.559624][T17422] Node 0 DMA32: 1392*4kB (UM) 1772*8kB (UME) 546*16kB (UME) 751*32kB (UME) 514*64kB (UME) 220*128kB (UME) 72*256kB (UME) 50*512kB (UME) 22*1024kB (UME) 7*2048kB (UM) 310*4096kB (UM) = 1464224kB [ 1496.585728][T17422] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1496.600143][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 1496.600334][T12210] Bluetooth: hci3: command 0x0c1a tx timeout [ 1496.612580][T12210] Bluetooth: hci2: command 0x041b tx timeout [ 1496.619567][T12434] Bluetooth: hci1: command 0xfc11 tx timeout [ 1496.621687][ T5781] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1496.633595][T17422] Node 1 Normal: 225*4kB (UME) 55*8kB (UME) 43*16kB (UME) 194*32kB (UME) 40*64kB (UME) 9*128kB (UE) 1*256kB (E) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3901356kB [ 1496.663551][T17422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1496.700010][T17422] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1496.739283][T17431] No such timeout policy "syz1" [ 1496.780375][T17422] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1496.790023][T17422] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1496.879118][T17422] 61440 total pagecache pages [ 1496.907697][T17422] 2 pages in swap cache [ 1496.928239][T17422] Free swap = 124464kB [ 1496.955429][T17422] Total swap = 124996kB [ 1496.979490][T17422] 2097051 pages RAM [ 1497.063299][T17422] 0 pages HighMem/MovableOnly [ 1497.068258][T17422] 416955 pages reserved [ 1497.072873][T17422] 0 pages cma reserved [ 1497.777964][T15519] mos7840 4-1:0.0: required endpoints missing [ 1497.865701][T15519] usb 4-1: USB disconnect, device number 44 [ 1499.772532][T17448] netlink: 'syz.1.2992': attribute type 1 has an invalid length. [ 1499.797210][T17448] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1502.093656][T17475] No such timeout policy "syz1" [ 1502.846148][T17484] netlink: 'syz.1.3002': attribute type 1 has an invalid length. [ 1503.008355][T17484] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1505.089012][T17508] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3007'. [ 1505.242501][ T5818] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1505.498114][ T5818] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1505.549120][ T5818] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1505.593810][ T5818] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1505.652811][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.703066][ T5818] usb 4-1: Product: syz [ 1505.736975][ T5818] usb 4-1: Manufacturer: syz [ 1505.770967][ T5818] usb 4-1: SerialNumber: syz [ 1505.829369][ T5818] usb 4-1: config 0 descriptor?? [ 1506.043296][ T5818] mos7840 4-1:0.0: required endpoints missing [ 1506.049580][T17521] No such timeout policy "syz1" [ 1506.066014][ T5818] usb 4-1: USB disconnect, device number 45 [ 1506.275105][T17522] netlink: 'syz.0.3012': attribute type 1 has an invalid length. [ 1506.813754][T17522] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1509.603239][T17558] netlink: 'syz.1.3021': attribute type 1 has an invalid length. [ 1509.854930][T17558] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1510.266134][T17563] No such timeout policy "syz1" [ 1513.203555][T17603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1513.237053][T17603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1513.417153][T17606] netlink: 'syz.1.3033': attribute type 1 has an invalid length. [ 1513.950057][T17606] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1513.998393][T17605] Bluetooth: MGMT ver 1.22 [ 1514.077378][T17609] IPv6: sit1: Disabled Multicast RS [ 1514.216183][T17609] sit1: entered allmulticast mode [ 1517.130016][T17650] netlink: 'syz.0.3043': attribute type 1 has an invalid length. [ 1517.539203][T17650] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1519.156216][T17687] NILFS (nullb0): couldn't find nilfs on the device [ 1519.194028][T17687] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3054'. [ 1519.209821][T17687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1519.219939][T17687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1519.800369][ T5816] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1520.192218][ T5816] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1520.209723][ T5816] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1520.223532][ T5816] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1520.232952][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.241108][ T5816] usb 3-1: Product: syz [ 1520.245687][ T5816] usb 3-1: Manufacturer: syz [ 1520.250712][ T5816] usb 3-1: SerialNumber: syz [ 1520.276760][ T5816] usb 3-1: config 0 descriptor?? [ 1521.504865][ T5816] mos7840 3-1:0.0: required endpoints missing [ 1521.516707][ T5816] usb 3-1: USB disconnect, device number 41 [ 1522.177899][T17705] netlink: 'syz.2.3057': attribute type 1 has an invalid length. [ 1522.580118][T17705] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1525.714791][T17732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1525.731997][T17732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1531.032569][ T5818] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1531.849227][ T5818] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1531.895753][ T5818] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1531.911363][ T5818] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1531.923137][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.935832][T17785] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1532.014145][ T5818] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1532.499414][T17797] vivid-004: disconnect [ 1533.095897][T17784] vivid-004: reconnect [ 1533.103890][T11680] usb 3-1: USB disconnect, device number 42 [ 1533.507229][T17806] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1536.215992][T17818] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1536.254475][T17819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1536.278845][T17819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1536.694692][T17823] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1539.513261][T17843] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1539.695377][T17843] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1539.710704][T17843] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1539.724025][T17843] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1540.830382][T17429] Bluetooth: hci4: command 0x041b tx timeout [ 1541.432636][T17863] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1541.786222][T17429] Bluetooth: hci2: command 0x041b tx timeout [ 1541.794597][T17429] Bluetooth: hci1: command 0xfc11 tx timeout [ 1541.803731][T17429] Bluetooth: hci3: command 0x0c1a tx timeout [ 1541.809916][T17429] Bluetooth: hci0: command 0x0406 tx timeout [ 1541.834429][ T5781] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1544.053433][T17887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1544.081260][T17887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1544.721897][T17893] netlink: 'syz.2.3112': attribute type 1 has an invalid length. [ 1544.756793][T17893] netlink: 'syz.2.3112': attribute type 2 has an invalid length. [ 1545.790799][T17901] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1545.814049][T17901] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1545.822306][T17901] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1545.828548][T17901] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1546.034809][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.041197][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.174216][T17908] No such timeout policy "syz1" [ 1546.787136][T17919] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.973310][T17922] syz.0.3121 (17922): drop_caches: 2 [ 1547.870472][T12434] Bluetooth: hci1: command 0xfc11 tx timeout [ 1547.870985][T17429] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1547.878072][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1547.891792][T12435] Bluetooth: hci0: command 0x0406 tx timeout [ 1547.897823][T12435] Bluetooth: hci2: command 0x041b tx timeout [ 1547.904022][T12435] Bluetooth: hci4: command 0x041b tx timeout [ 1549.358306][T17938] No such timeout policy "syz1" [ 1550.379321][T17942] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1550.405309][T17942] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1550.436345][T17942] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1550.458223][T17942] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1550.737328][T17951] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1551.830598][ T5818] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1552.108603][ T5818] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1552.180512][ T5818] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1552.262352][ T5818] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1552.323190][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.391214][ T5818] usb 4-1: Product: syz [ 1552.423420][ T5818] usb 4-1: Manufacturer: syz [ 1552.430543][T12434] Bluetooth: hci2: command 0x041b tx timeout [ 1552.430747][ T5781] Bluetooth: hci4: command 0x041b tx timeout [ 1552.476565][ T5818] usb 4-1: SerialNumber: syz [ 1552.510327][ T5781] Bluetooth: hci1: command 0xfc11 tx timeout [ 1552.518770][T17429] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1552.530058][T12434] Bluetooth: hci3: command 0x0c1a tx timeout [ 1552.536143][T12435] Bluetooth: hci0: command 0x0406 tx timeout [ 1552.667612][ T5818] usb 4-1: config 0 descriptor?? [ 1554.084116][ T5818] mos7840 4-1:0.0: required endpoints missing [ 1554.155409][ T5818] usb 4-1: USB disconnect, device number 46 [ 1554.334867][T17958] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1557.752820][T17964] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1557.770326][T17964] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1557.784693][T17964] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1557.806851][T17964] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1559.890401][T12434] Bluetooth: hci0: command 0x0406 tx timeout [ 1559.896690][T12434] Bluetooth: hci2: command 0x041b tx timeout [ 1559.906004][T12434] Bluetooth: hci4: command 0x041b tx timeout [ 1559.913553][T12434] Bluetooth: hci3: command 0x0c1a tx timeout [ 1560.030864][ T5781] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1560.040646][T12434] Bluetooth: hci1: command 0xfc11 tx timeout [ 1562.472991][T18003] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1566.344320][T18017] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1566.411679][T18017] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1566.418834][T18017] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1566.426566][T18017] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1566.496201][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 1566.541381][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 1567.720373][T12435] Bluetooth: hci4: command 0x041b tx timeout [ 1568.510501][ T5781] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1568.518536][T12435] Bluetooth: hci3: command 0x0c1a tx timeout [ 1568.518698][T12434] Bluetooth: hci5: command 0xfc11 tx timeout [ 1568.532067][T17429] Bluetooth: hci2: command 0x041b tx timeout [ 1568.532090][T12210] Bluetooth: hci0: command 0x0406 tx timeout [ 1569.128697][T18026] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1570.767612][T18031] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1570.776912][T18031] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1570.796688][T18031] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1570.810680][T18031] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1570.821412][T18029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1570.849010][T18029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1570.874733][T18029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1570.888645][T18029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1571.542682][T18042] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1573.553717][T12210] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1573.566495][T12434] Bluetooth: hci3: command 0x0c1a tx timeout [ 1574.910339][T12210] Bluetooth: hci0: command 0x0406 tx timeout [ 1574.916406][T12210] Bluetooth: hci2: command 0x041b tx timeout [ 1574.934324][ T5781] Bluetooth: hci4: command 0x041b tx timeout [ 1578.632712][T18061] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1581.763766][T18080] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1581.821105][T18080] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1581.827203][T18080] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1581.889172][T18080] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1583.869022][T12210] Bluetooth: hci4: command 0x041b tx timeout [ 1583.875268][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 1583.875322][T12434] Bluetooth: hci2: command 0x041b tx timeout [ 1583.964096][T12434] Bluetooth: hci3: command 0x0c1a tx timeout [ 1584.110415][ T5781] Bluetooth: hci1: command 0xfc11 tx timeout [ 1584.111277][T12435] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1584.965198][T18116] IPv6: sit1: Disabled Multicast RS [ 1584.973818][T18116] sit1: entered allmulticast mode [ 1587.495570][T18136] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1587.521827][T18136] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1587.538225][T18136] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1587.553700][T18136] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1588.388402][T18153] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1588.410535][T18153] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1589.510507][ T5781] Bluetooth: hci4: command 0x041b tx timeout [ 1589.550551][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 1589.556719][T12434] Bluetooth: hci2: command 0x041b tx timeout [ 1589.640280][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1589.647935][T12434] Bluetooth: hci1: command 0xfc11 tx timeout [ 1589.960389][T12435] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1592.043396][T18184] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1592.056420][T18184] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1592.066157][T18189] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1593.081987][T18192] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1593.240541][T18192] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1593.512211][T18203] virtio-fs: tag not found [ 1594.310403][T18192] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1594.316520][T18192] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1594.510467][T12434] Bluetooth: hci4: command 0x041b tx timeout [ 1595.313333][ T5781] Bluetooth: hci2: command 0x041b tx timeout [ 1595.319573][T12434] Bluetooth: hci0: command 0x0406 tx timeout [ 1596.350365][T12434] Bluetooth: hci3: command 0x0c1a tx timeout [ 1596.430373][T12435] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1596.715368][T18219] IPv6: sit1: Disabled Multicast RS [ 1596.723508][T18219] sit1: entered allmulticast mode [ 1596.849084][T18225] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1598.527861][T18227] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1598.548815][T18227] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1600.622259][T18240] virtio-fs: tag not found [ 1602.889827][T18252] No such timeout policy "syz1" [ 1603.973537][T18257] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1603.979667][T18257] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1603.985735][T18257] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1603.991815][T18257] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1605.710316][T12435] Bluetooth: hci4: command 0x041b tx timeout [ 1606.030327][T12210] Bluetooth: hci0: command 0x0406 tx timeout [ 1606.030447][T12434] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1606.036410][ T5781] Bluetooth: hci2: command 0x041b tx timeout [ 1606.036444][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1606.036875][T12435] Bluetooth: hci1: command 0xfc11 tx timeout [ 1606.414901][T18270] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1606.919231][T18275] virtio-fs: tag not found [ 1607.678588][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.685036][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.591498][T18292] No such timeout policy "syz1" [ 1610.374199][T18301] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1612.820544][T18307] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1612.826973][T18307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1612.833880][T18307] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1612.855483][T18310] IPv6: sit1: Disabled Multicast RS [ 1612.864084][T18307] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1612.884571][T15618] Bluetooth: hci1: Frame reassembly failed (-84) [ 1612.891588][T18310] sit1: entered allmulticast mode [ 1614.430590][T18313] virtio-fs: tag not found [ 1614.831343][T12435] Bluetooth: hci4: command 0x041b tx timeout [ 1614.837470][T12435] Bluetooth: hci2: command 0x041b tx timeout [ 1614.912191][T17429] Bluetooth: hci0: command 0x0406 tx timeout [ 1614.919690][T12435] Bluetooth: hci3: command 0x0c1a tx timeout [ 1614.925976][T12210] Bluetooth: hci1: command 0xfc11 tx timeout [ 1614.933270][T12434] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1615.918764][T18329] No such timeout policy "syz1" [ 1619.167029][T18355] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1619.810278][T18350] virtio-fs: tag not found [ 1620.111252][T18355] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1620.210456][T18355] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1620.231481][T18355] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1620.600289][T12210] Bluetooth: hci4: command 0x041b tx timeout [ 1622.233085][T12210] Bluetooth: hci0: command 0x0406 tx timeout [ 1622.239149][T12210] Bluetooth: hci2: command 0x041b tx timeout [ 1622.270827][T12210] Bluetooth: hci3: command 0x0c1a tx timeout [ 1622.520848][T12210] Bluetooth: hci1: command 0xfc11 tx timeout [ 1622.530577][T12434] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1623.860544][T18388] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1623.881877][T18388] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1626.860273][T18393] virtio-fs: tag not found [ 1627.169863][T18402] tipc: Started in network mode [ 1627.261817][T18402] tipc: Node identity 66d44eecccb9, cluster identity 4711 [ 1627.287410][T18402] tipc: Enabled bearer , priority 1 [ 1627.298597][T18405] tipc: Resetting bearer [ 1628.277709][T18405] tipc: Disabling bearer [ 1628.405911][ T5819] tipc: Node number set to 2859290348 [ 1631.233160][T18417] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1631.271264][T18417] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1631.311161][T12434] Bluetooth: hci4: command 0x041b tx timeout [ 1631.329615][T18417] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1631.350442][T18417] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1631.838457][T18427] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1631.851124][T18427] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1633.310378][T12210] Bluetooth: hci2: command 0x041b tx timeout [ 1633.390471][T12434] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1633.401890][T12434] Bluetooth: hci3: command 0x0c1a tx timeout [ 1633.407918][T12434] Bluetooth: hci0: command 0x0406 tx timeout [ 1634.945482][T18448] virtio-fs: tag not found [ 1635.240262][T15176] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1635.450537][T15176] usb 4-1: Using ep0 maxpacket: 8 [ 1635.467553][T15176] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.291449][T15176] usb 4-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 1636.303898][T15176] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1636.314006][T15176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.741870][T18462] No such timeout policy "syz1" [ 1638.860439][ T5816] usb 4-1: USB disconnect, device number 47 [ 1642.882430][T18493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3282'. [ 1643.210594][T18494] virtio-fs: tag not found [ 1643.744457][T18499] No such timeout policy "syz1" [ 1645.306158][T18513] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1645.317492][T18513] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1647.127355][T18529] No such timeout policy "syz1" [ 1648.481117][T18540] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1648.968901][T18536] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1648.996100][T18536] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1649.006905][T18536] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1649.014428][T18536] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1650.590869][T12434] Bluetooth: hci4: command 0x041b tx timeout [ 1650.985417][T18554] NILFS (nullb0): couldn't find nilfs on the device [ 1650.992156][T12434] Bluetooth: hci2: command 0x041b tx timeout [ 1651.072437][T12435] Bluetooth: hci3: command 0x0c1a tx timeout [ 1651.072470][T12434] Bluetooth: hci1: command 0xfc11 tx timeout [ 1651.078583][T12435] Bluetooth: hci0: command 0x0406 tx timeout [ 1651.092084][T12210] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1651.270285][T10822] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1651.483065][T10822] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1651.628611][T10822] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1651.726264][T10822] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1651.794345][T10822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.816602][T10822] usb 4-1: Product: syz [ 1651.824349][T10822] usb 4-1: Manufacturer: syz [ 1651.829263][T10822] usb 4-1: SerialNumber: syz [ 1651.852328][T10822] usb 4-1: config 0 descriptor?? [ 1652.027256][T10822] mos7840 4-1:0.0: required endpoints missing [ 1652.069994][T10822] usb 4-1: USB disconnect, device number 48 [ 1652.608720][T18569] No such timeout policy "syz1" [ 1653.941590][T18575] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1654.346185][T18578] virtio-fs: tag not found [ 1655.100568][T18583] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1655.685255][T18583] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1659.195035][T18609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3314'. [ 1659.588951][T18606] syz.2.3316 (18606) used greatest stack depth: 18360 bytes left [ 1659.920080][T18612] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1659.932233][T18612] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1659.989237][T18618] ÿ: renamed from dummy0 (while UP) [ 1660.344703][T18626] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1660.622033][T10822] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 1661.712855][T10822] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1661.726241][T10822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1661.733028][T10822] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1661.742185][T10822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.763158][T10822] usb 2-1: config 0 descriptor?? [ 1662.225564][T10822] koneplus 0003:1E7D:2E22.0004: unknown main item tag 0x3 [ 1662.242992][T10822] koneplus 0003:1E7D:2E22.0004: ignoring exceeding usage max [ 1662.254589][T10822] koneplus 0003:1E7D:2E22.0004: unknown main item tag 0x0 [ 1662.262815][T10822] koneplus 0003:1E7D:2E22.0004: unknown main item tag 0x0 [ 1662.271100][T10822] koneplus 0003:1E7D:2E22.0004: unknown main item tag 0x0 [ 1662.278477][T10822] koneplus 0003:1E7D:2E22.0004: unknown main item tag 0x0 [ 1662.285982][T10822] koneplus 0003:1E7D:2E22.0004: unknown main item tag 0x0 [ 1662.294572][T10822] koneplus 0003:1E7D:2E22.0004: unknown main item tag 0x0 [ 1662.304143][T10822] koneplus 0003:1E7D:2E22.0004: unknown main item tag 0x0 [ 1662.312627][T10822] koneplus 0003:1E7D:2E22.0004: unknown main item tag 0x0 [ 1662.320013][T10822] koneplus 0003:1E7D:2E22.0004: unknown main item tag 0x0 [ 1662.328294][T10822] koneplus 0003:1E7D:2E22.0004: unknown main item tag 0x0 [ 1662.336172][T10822] koneplus 0003:1E7D:2E22.0004: unknown main item tag 0x0 [ 1662.344016][T10822] koneplus 0003:1E7D:2E22.0004: unknown main item tag 0x0 [ 1662.354156][T10822] koneplus 0003:1E7D:2E22.0004: unknown main item tag 0x0 [ 1662.363511][T10822] koneplus 0003:1E7D:2E22.0004: unknown main item tag 0x0 [ 1662.371384][T10822] koneplus 0003:1E7D:2E22.0004: unknown main item tag 0x0 [ 1662.393271][T10822] koneplus 0003:1E7D:2E22.0004: hidraw0: USB HID v0.04 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 1662.507405][ T5819] usb 2-1: USB disconnect, device number 34 [ 1662.648233][T18647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3329'. [ 1662.785947][T18651] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1663.140080][T18662] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1663.359383][T18663] NILFS (nullb0): couldn't find nilfs on the device [ 1663.732890][T15176] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1663.956996][T15176] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1663.971680][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3338'. [ 1663.980927][T15176] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1663.994506][T15176] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1664.004347][T15176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.030236][T15176] usb 4-1: Product: syz [ 1664.044314][T15176] usb 4-1: Manufacturer: syz [ 1664.059159][T15176] usb 4-1: SerialNumber: syz [ 1664.067206][T15176] usb 4-1: config 0 descriptor?? [ 1665.379786][T18691] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1665.879438][T15176] mos7840 4-1:0.0: required endpoints missing [ 1667.125578][T15176] usb 4-1: USB disconnect, device number 49 [ 1667.437270][T18704] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1668.921267][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.928029][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1673.181192][T18748] No such timeout policy "syz1" [ 1675.456386][T18765] NILFS (nullb0): couldn't find nilfs on the device [ 1675.469234][T18765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1675.477942][T18765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1677.262691][T18778] "syz.1.3371" (18778) uses obsolete ecb(arc4) skcipher [ 1679.599161][T18794] No such timeout policy "syz1" [ 1680.677715][T18810] ieee802154 phy0 wpan0: encryption failed: -22 [ 1681.563263][T18811] kvm: emulating exchange as write [ 1681.926213][T18815] macvlan2: entered allmulticast mode [ 1681.932581][T18815] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1681.963369][T12210] Bluetooth: hci2: unexpected event 0x18 length: 247 > 23 [ 1688.460286][T18839] No such timeout policy "syz1" [ 1689.661529][T18846] ieee802154 phy0 wpan0: encryption failed: -22 [ 1691.251349][T18860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1691.270867][T18860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1691.420556][T18862] 9pnet_fd: Insufficient options for proto=fd [ 1693.630778][T18874] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1694.460282][T18884] No such timeout policy "syz1" [ 1694.608464][T18877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1694.690598][T18888] ieee802154 phy0 wpan0: encryption failed: -22 [ 1697.496329][T18905] No such timeout policy "syz1" [ 1698.567980][T18913] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1705.228733][T18950] No such timeout policy "syz1" [ 1705.381355][T18952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3408'. [ 1705.580193][ T28] audit: type=1326 audit(1785989831.015:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18955 comm="syz.2.3421" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7a459e0d9 code=0x0 [ 1705.692166][T18959] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1708.368967][T18972] macvlan2: entered allmulticast mode [ 1708.386262][T18972] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1708.435135][T18974] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1708.581906][T18981] No such timeout policy "syz1" [ 1708.709412][T18985] gtp0: entered promiscuous mode [ 1709.260597][T18991] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1710.561020][T18998] virtio-fs: tag not found [ 1712.582612][T19011] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1713.317138][T19010] No such timeout policy "syz1" [ 1714.463084][T19016] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1719.741055][T19032] virtio-fs: tag not found [ 1720.309108][T19027] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1721.949494][T19047] No such timeout policy "syz1" [ 1723.021598][T19063] virtio-fs: tag not found [ 1724.117607][ T5819] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1724.292820][T19059] netlink: 'syz.1.3457': attribute type 1 has an invalid length. [ 1724.321265][T19059] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1724.338329][ T5819] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1724.379814][ T5819] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1724.445162][ T5819] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1724.468342][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.496897][ T5819] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 1724.513859][ T5819] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 1724.561810][T19072] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1725.701201][T19084] No such timeout policy "syz1" [ 1726.527415][T10824] usb 4-1: USB disconnect, device number 50 [ 1726.922080][T10824] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1726.942606][T10824] spcp8x5 4-1:1.0: device disconnected [ 1728.567528][T19105] virtio-fs: tag not found [ 1729.144385][T19100] netlink: 'syz.1.3466': attribute type 1 has an invalid length. [ 1729.170004][T19100] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1730.355630][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.362379][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.850205][T19131] virtio-fs: tag not found [ 1733.195752][ T5819] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1733.402630][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1733.423029][ T5819] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1733.442569][ T5819] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1733.547462][T19136] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1734.027039][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.446976][ T5819] usb 3-1: can't set config #1, error -71 [ 1736.472451][ T5819] usb 3-1: USB disconnect, device number 43 [ 1736.553329][T19138] netlink: 'syz.2.3479': attribute type 1 has an invalid length. [ 1736.603347][T19138] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1736.832305][ T28] audit: type=1326 audit(1785989862.275:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19143 comm="syz.0.3480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4716d9e0d9 code=0x0 [ 1738.782767][T19169] virtio-fs: tag not found [ 1739.883101][T19174] netlink: 'syz.1.3489': attribute type 1 has an invalid length. [ 1739.906357][T19174] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1740.523394][T19194] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1743.540205][T19199] virtio-fs: tag not found [ 1745.096827][T19211] netlink: 'syz.1.3502': attribute type 1 has an invalid length. [ 1745.123145][T19211] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1746.592182][T19237] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1751.773541][T19261] netlink: 'syz.1.3515': attribute type 1 has an invalid length. [ 1752.360167][T19272] virtio-fs: tag not found [ 1753.258159][T19261] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1758.907555][T19313] netlink: 'syz.0.3527': attribute type 1 has an invalid length. [ 1758.928853][T19313] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1760.243142][T19325] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1761.241487][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ce45800: rx timeout, send abort [ 1761.260233][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ce45800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1762.740223][T19335] virtio-fs: tag not found [ 1764.398075][T19345] gtp0: entered promiscuous mode [ 1767.356640][T19352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3540'. [ 1770.835677][ T28] audit: type=1326 audit(1785989896.275:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19382 comm="syz.2.3546" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7a459e0d9 code=0x0 [ 1771.680198][T19387] virtio-fs: tag not found [ 1774.863205][T19408] NILFS (nullb0): couldn't find nilfs on the device [ 1775.150497][ T5816] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1775.405691][ T5816] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1775.506522][ T5816] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1775.537893][ T5816] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1775.560191][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.578615][ T5816] usb 3-1: Product: syz [ 1775.592534][ T5816] usb 3-1: Manufacturer: syz [ 1775.597172][ T5816] usb 3-1: SerialNumber: syz [ 1775.626412][ T5816] usb 3-1: config 0 descriptor?? [ 1776.641154][T19417] virtio-fs: tag not found [ 1777.659294][ T5816] mos7840 3-1:0.0: required endpoints missing [ 1777.741570][ T5816] usb 3-1: USB disconnect, device number 44 [ 1778.011580][ T28] audit: type=1326 audit(1785989903.455:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19425 comm="syz.2.3565" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7a459e0d9 code=0x0 [ 1781.540893][T19454] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1782.397477][ T28] audit: type=1326 audit(1785989907.825:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19455 comm="syz.2.3578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7a459e0d9 code=0x0 [ 1782.424282][T19457] 9pnet_virtio: no channels available for device syz [ 1786.812223][T19487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3586'. [ 1786.916190][T19491] netlink: 'syz.2.3586': attribute type 1 has an invalid length. [ 1787.092650][T19491] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1788.583600][ T28] audit: type=1326 audit(1785989914.025:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.1.3592" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e6a59e0d9 code=0x0 [ 1789.258507][T19521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3597'. [ 1789.616642][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3600'. [ 1790.167657][T19541] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1790.220372][T15176] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1790.451535][T15176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1790.480372][T15176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1790.505866][T15176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1790.540942][T15176] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1790.560553][T15176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.568676][T15176] usb 3-1: Product: syz [ 1790.580352][T15176] usb 3-1: Manufacturer: syz [ 1790.598252][T15176] usb 3-1: SerialNumber: syz [ 1790.616336][T15176] usb 3-1: config 0 descriptor?? [ 1790.739161][ T28] audit: type=1326 audit(1785989916.175:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19549 comm="syz.1.3608" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e6a59e0d9 code=0x0 [ 1790.866667][T15176] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1791.096717][ T23] usb 3-1: USB disconnect, device number 45 [ 1791.433232][T19566] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1791.841090][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.847662][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.715625][T19594] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1793.780224][T19595] NILFS (nullb0): couldn't find nilfs on the device [ 1794.090770][ T5765] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1794.346283][ T5765] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1794.520893][ T5765] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1794.571905][ T5765] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1794.581089][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.589181][ T5765] usb 3-1: Product: syz [ 1794.593590][ T5765] usb 3-1: Manufacturer: syz [ 1794.598463][ T5765] usb 3-1: SerialNumber: syz [ 1794.620515][ T5765] usb 3-1: config 0 descriptor?? [ 1795.158103][T19607] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1796.613241][ T5765] mos7840 3-1:0.0: required endpoints missing [ 1796.669010][ T5765] usb 3-1: USB disconnect, device number 46 [ 1797.037907][T19637] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1798.020386][T19639] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1799.243549][T19659] macvlan2: entered allmulticast mode [ 1799.642619][T19665] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1799.970950][T19673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3653'. [ 1801.946539][T19698] macvlan2: entered allmulticast mode [ 1802.565111][T19707] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1804.415619][T19724] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1812.268392][T19820] gtp0: entered promiscuous mode [ 1812.850854][T19830] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1817.039965][T19879] syz.3.3717 (19879): drop_caches: 2 [ 1817.051484][T19880] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1817.295059][T19883] gtp0: entered promiscuous mode [ 1817.497730][T19884] virtio-fs: tag not found [ 1820.608190][T19897] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1823.240378][T19923] virtio-fs: tag not found [ 1824.597581][ T28] audit: type=1800 audit(1785989950.035:196): pid=19942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3736" name="attr_allow_any_host" dev="configfs" ino=58617 res=0 errno=0 [ 1824.642069][T19942] nvmet: adding nsid 1 to subsystem testnqn [ 1824.732866][ T28] audit: type=1800 audit(1785989950.135:197): pid=19942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3736" name="device_path" dev="configfs" ino=58619 res=0 errno=0 [ 1824.786436][T19942] nvmet_rdma: malformed ip/port passed: 127.0.0.1: [ 1824.829170][ T28] audit: type=1800 audit(1785989950.145:198): pid=19942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3736" name="enable" dev="configfs" ino=58620 res=0 errno=0 [ 1824.914044][ T28] audit: type=1800 audit(1785989950.165:199): pid=19942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3736" name="addr_trtype" dev="configfs" ino=58626 res=0 errno=0 [ 1824.980218][ T28] audit: type=1800 audit(1785989950.175:200): pid=19942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3736" name="addr_adrfam" dev="configfs" ino=58627 res=0 errno=0 [ 1825.055041][T19944] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1825.083627][ T28] audit: type=1800 audit(1785989950.175:201): pid=19942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3736" name="addr_traddr" dev="configfs" ino=58628 res=0 errno=0 [ 1825.205063][ T28] audit: type=1800 audit(1785989950.225:202): pid=19942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3736" name="addr_trsvcid" dev="configfs" ino=58629 res=0 errno=0 [ 1829.193013][T19964] overlayfs: failed to resolve './file0': -2 [ 1829.485719][T19965] virtio-fs: tag not found [ 1830.809251][T19981] netlink: 'syz.1.3748': attribute type 1 has an invalid length. [ 1830.831567][T19981] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1831.332092][T19997] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1834.200252][T20011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3756'. [ 1835.380162][T20009] virtio-fs: tag not found [ 1835.643439][T20014] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1835.775118][T20011] team0 (unregistering): Port device team_slave_0 removed [ 1835.827916][T20011] team0 (unregistering): Port device team_slave_1 removed [ 1836.655321][T20030] netlink: 'syz.0.3760': attribute type 1 has an invalid length. [ 1836.679860][T20030] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1837.948356][T20046] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1838.636644][T20050] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1840.603280][T20074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3773'. [ 1840.621545][T20074] netlink: 'syz.1.3773': attribute type 1 has an invalid length. [ 1840.643466][T20074] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1841.860169][T20073] virtio-fs: tag not found [ 1842.149942][T20094] fuse: Bad value for 'fd' [ 1842.498819][T20100] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1843.081220][T20107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3784'. [ 1843.105436][T20107] netlink: 'syz.0.3784': attribute type 1 has an invalid length. [ 1843.127132][T20107] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1844.960598][T20135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3792'. [ 1846.152132][T20141] virtio-fs: tag not found [ 1846.778153][T20148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3796'. [ 1846.796485][T20148] netlink: 'syz.2.3796': attribute type 1 has an invalid length. [ 1846.818015][T20148] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1847.324154][T20156] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1847.699805][T20158] block2mtd: error: cannot open device /dev/loop0 [ 1848.207120][T20162] netlink: 'syz.3.3800': attribute type 1 has an invalid length. [ 1848.314690][T20162] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1848.413319][T20164] bond2: (slave veth0_to_bond): making interface the new active one [ 1848.447045][T20164] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1848.955342][T20174] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1849.971203][T20184] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1850.278285][T20187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3801'. [ 1850.704328][T20194] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1851.195597][T20199] No such timeout policy "syz1" [ 1851.997054][T20210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3818'. [ 1852.155261][T20214] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1852.237815][T20219] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1852.270499][T20212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3819'. [ 1852.280707][T20212] netlink: 'syz.1.3819': attribute type 1 has an invalid length. [ 1852.305215][T20212] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1852.866917][T20228] No such timeout policy "syz1" [ 1853.322963][T20231] xt_hashlimit: size too large, truncated to 1048576 [ 1853.406762][T20236] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1854.194746][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1854.203205][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.064668][T20249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3829'. [ 1855.086327][T20259] No such timeout policy "syz1" [ 1855.101004][T20249] netlink: 'syz.3.3829': attribute type 1 has an invalid length. [ 1855.124790][T20249] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1855.778594][T20267] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1856.078400][T20274] netlink: 'syz.0.3839': attribute type 1 has an invalid length. [ 1856.162341][T20274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3839'. [ 1856.630448][ T28] audit: type=1326 audit(1785989982.055:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20283 comm="syz.0.3842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4716d9e0d9 code=0x7ffc0000 [ 1856.803766][ T28] audit: type=1326 audit(1785989982.055:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20283 comm="syz.0.3842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4716d9e0d9 code=0x7ffc0000 [ 1856.870308][ T28] audit: type=1326 audit(1785989982.055:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20283 comm="syz.0.3842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4716d9e0d9 code=0x7ffc0000 [ 1856.952907][ T28] audit: type=1326 audit(1785989982.055:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20283 comm="syz.0.3842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4716d9e0d9 code=0x7ffc0000 [ 1856.979117][ T28] audit: type=1326 audit(1785989982.065:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20283 comm="syz.0.3842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4716d9e0d9 code=0x7ffc0000 [ 1857.005611][ T28] audit: type=1326 audit(1785989982.115:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20283 comm="syz.0.3842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4716d5e90e code=0x7ffc0000 [ 1857.041187][ T28] audit: type=1326 audit(1785989982.115:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20283 comm="syz.0.3842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4716d5e90e code=0x7ffc0000 [ 1857.108835][T20294] netlink: 'syz.3.3843': attribute type 1 has an invalid length. [ 1857.130887][T20294] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1857.310588][ T28] audit: type=1326 audit(1785989982.115:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20283 comm="syz.0.3842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4716d5e90e code=0x7ffc0000 [ 1857.386478][ T28] audit: type=1326 audit(1785989982.115:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20283 comm="syz.0.3842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4716d5e90e code=0x7ffc0000 [ 1857.450281][ T28] audit: type=1326 audit(1785989982.115:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20283 comm="syz.0.3842" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4716d5e90e code=0x7ffc0000 [ 1857.639633][T20303] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1857.763565][T20300] No such timeout policy "syz1" [ 1859.630002][T20334] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1859.917403][T20338] No such timeout policy "syz1" [ 1859.964068][T20332] netlink: 'syz.1.3852': attribute type 1 has an invalid length. [ 1859.987040][T20332] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1861.710119][T20359] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1862.323203][T20365] No such timeout policy "syz1" [ 1862.548129][T20373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3868'. [ 1862.631043][T20369] netlink: 'syz.1.3867': attribute type 1 has an invalid length. [ 1862.655950][T20369] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1864.844785][T20383] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3870'. [ 1865.267683][T20391] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1866.979512][T20404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3877'. [ 1867.297294][T20408] netlink: 'syz.0.3878': attribute type 1 has an invalid length. [ 1867.320406][T20408] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1867.599067][T20418] syz.0.3880 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1867.610388][T20418] CPU: 1 PID: 20418 Comm: syz.0.3880 Not tainted syzkaller #0 [ 1867.617884][T20418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1867.627936][T20418] Call Trace: [ 1867.631217][T20418] [ 1867.634147][T20418] dump_stack_lvl+0x18c/0x250 [ 1867.638839][T20418] ? show_regs_print_info+0x20/0x20 [ 1867.644057][T20418] ? load_image+0x420/0x420 [ 1867.648569][T20418] ? ___ratelimit+0x478/0x610 [ 1867.653252][T20418] ? radix_tree_cpu_dead+0x160/0x160 [ 1867.658544][T20418] dump_header+0xd8/0x820 [ 1867.662883][T20418] oom_kill_process+0x390/0x580 [ 1867.667739][T20418] out_of_memory+0xe0e/0x1200 [ 1867.672438][T20418] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1867.678074][T20418] ? print_unlock_imbalance_bug+0x160/0x160 [ 1867.683989][T20418] ? mutex_lock_nested+0x20/0x20 [ 1867.688944][T20418] ? unregister_oom_notifier+0x20/0x20 [ 1867.694432][T20418] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1867.699992][T20418] ? try_charge_memcg+0xc91/0x17c0 [ 1867.705115][T20418] ? drain_local_stock+0x630/0x630 [ 1867.710269][T20418] ? do_raw_spin_unlock+0x121/0x230 [ 1867.715511][T20418] try_charge_memcg+0xca1/0x17c0 [ 1867.720525][T20418] ? folio_flags+0x120/0x120 [ 1867.725157][T20418] ? percpu_ref_tryget+0x15/0x180 [ 1867.730213][T20418] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1867.735967][T20418] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1867.741992][T20418] ? percpu_ref_tryget+0x15/0x180 [ 1867.747049][T20418] ? percpu_ref_tryget+0x15/0x180 [ 1867.752107][T20418] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1867.757862][T20418] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1867.763606][T20418] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1867.769447][T20418] obj_cgroup_charge+0x36e/0x630 [ 1867.774397][T20418] ? obj_cgroup_charge+0xed/0x630 [ 1867.779442][T20418] ? mod_objcg_mlstate+0x320/0x320 [ 1867.784560][T20418] ? percpu_ref_put+0x12/0x100 [ 1867.789332][T20418] ? percpu_ref_put+0x12/0x100 [ 1867.794111][T20418] slab_pre_alloc_hook+0x2e2/0x300 [ 1867.799237][T20418] ? slab_pre_alloc_hook+0xb1/0x300 [ 1867.804449][T20418] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1867.809569][T20418] ? sock_alloc_inode+0x28/0xc0 [ 1867.814429][T20418] sock_alloc_inode+0x28/0xc0 [ 1867.819126][T20418] ? sockfs_init_fs_context+0xb0/0xb0 [ 1867.824523][T20418] new_inode_pseudo+0x63/0x1d0 [ 1867.829315][T20418] __sock_create+0x12d/0x940 [ 1867.833905][T20418] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1867.839912][T20418] __sys_socket+0xd7/0x1b0 [ 1867.844335][T20418] __x64_sys_socket+0x7a/0x90 [ 1867.849015][T20418] do_syscall_64+0x55/0xb0 [ 1867.853427][T20418] ? clear_bhb_loop+0x40/0x90 [ 1867.858100][T20418] ? clear_bhb_loop+0x40/0x90 [ 1867.862772][T20418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1867.868664][T20418] RIP: 0033:0x7f4716d9e0d9 [ 1867.873078][T20418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1867.892683][T20418] RSP: 002b:00007f4717bd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1867.901098][T20418] RAX: ffffffffffffffda RBX: 00007f4717025fa0 RCX: 00007f4716d9e0d9 [ 1867.909085][T20418] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 1867.917060][T20418] RBP: 00007f4716e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1867.925029][T20418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1867.932996][T20418] R13: 00007f4717026038 R14: 00007f4717025fa0 R15: 00007ffce9673038 [ 1867.940988][T20418] [ 1868.743598][T20418] memory: usage 0kB, limit 0kB, failcnt 101 [ 1868.749586][T20418] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1868.762216][T20418] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1868.769189][T20418] Memory cgroup stats for /syz0/test: [ 1868.769313][T20418] cache 0 [ 1868.779847][T20418] rss 0 [ 1868.785810][T20421] nvmet_rdma: malformed ip/port passed: 127.0.0.1: [ 1868.792444][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 1868.792452][ T28] audit: type=1800 audit(1785989994.225:274): pid=20421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3881" name="attr_allow_any_host" dev="configfs" ino=59720 res=0 errno=0 [ 1870.030189][T20418] rss_huge 0 [ 1870.033547][T20418] shmem 0 [ 1870.036509][T20418] mapped_file 0 [ 1870.039984][T20418] dirty 0 [ 1870.093841][T20418] writeback 0 [ 1870.106316][T20418] workingset_refault_anon 0 [ 1870.126937][T20418] workingset_refault_file 0 [ 1870.141050][T20418] swap 0 [ 1870.143949][T20418] pgpgin 0 [ 1870.147002][T20418] pgpgout 0 [ 1870.160589][T20418] pgfault 3 [ 1870.163838][T20418] pgmajfault 0 [ 1870.180478][T20418] inactive_anon 0 [ 1870.184172][T20418] active_anon 0 [ 1870.187670][T20418] inactive_file 0 [ 1870.200559][T20418] active_file 0 [ 1870.204074][T20418] unevictable 0 [ 1870.218942][T20418] hierarchical_memory_limit 0 [ 1870.227861][T20418] hierarchical_memsw_limit 9223372036854771712 [ 1870.258225][T20418] total_cache 0 [ 1870.268327][T20418] total_rss 0 [ 1870.272085][T20418] total_rss_huge 0 [ 1870.278002][T20418] total_shmem 0 [ 1870.300093][T20418] total_mapped_file 0 [ 1870.304120][T20418] total_dirty 0 [ 1870.317788][T20418] total_writeback 0 [ 1870.328160][T20418] total_workingset_refault_anon 0 [ 1870.363276][T20418] total_workingset_refault_file 0 [ 1870.384553][T20418] total_swap 0 [ 1870.399049][T20418] total_pgpgin 0 [ 1870.419269][T20418] total_pgpgout 0 [ 1870.429582][T20418] total_pgfault 3 [ 1870.439689][T20418] total_pgmajfault 0 [ 1870.459771][T20418] total_inactive_anon 0 [ 1870.472687][T20418] total_active_anon 0 [ 1870.476728][T20418] total_inactive_file 0 [ 1870.481925][T20418] total_active_file 0 [ 1870.485948][T20418] total_unevictable 0 [ 1870.489959][T20418] anon_cost 0 [ 1870.494000][T20418] file_cost 0 [ 1870.497405][T20418] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.3880,pid=20417,uid=0 [ 1870.518519][T20418] Memory cgroup out of memory: Killed process 20417 (syz.0.3880) total-vm:102376kB, anon-rss:1376kB, file-rss:22400kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1870.539442][T20418] socket: no more sockets [ 1870.850026][T20433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3886'. [ 1871.515180][T20442] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1871.615781][T20440] netlink: 'syz.2.3888': attribute type 1 has an invalid length. [ 1871.639105][T20440] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1874.376887][T20454] nvmet_rdma: malformed ip/port passed: 127.0.0.1: [ 1874.567899][T20460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3895'. [ 1875.741102][T20478] netlink: 308 bytes leftover after parsing attributes in process `syz.0.3899'. [ 1875.783188][T20478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3899'. [ 1875.920767][T20482] nvmet_rdma: malformed ip/port passed: 127.0.0.1: [ 1876.012971][T20486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3904'. [ 1876.037990][T20485] syz.0.3903 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1876.067866][T20485] CPU: 1 PID: 20485 Comm: syz.0.3903 Not tainted syzkaller #0 [ 1876.075386][T20485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1876.085475][T20485] Call Trace: [ 1876.088784][T20485] [ 1876.091739][T20485] dump_stack_lvl+0x18c/0x250 [ 1876.096453][T20485] ? show_regs_print_info+0x20/0x20 [ 1876.101687][T20485] ? load_image+0x420/0x420 [ 1876.106235][T20485] ? ___ratelimit+0x478/0x610 [ 1876.110969][T20485] ? radix_tree_cpu_dead+0x160/0x160 [ 1876.116301][T20485] dump_header+0xd8/0x820 [ 1876.120668][T20485] oom_kill_process+0x390/0x580 [ 1876.125554][T20485] out_of_memory+0xe0e/0x1200 [ 1876.130256][T20485] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1876.135905][T20485] ? print_unlock_imbalance_bug+0x160/0x160 [ 1876.141817][T20485] ? mutex_lock_nested+0x20/0x20 [ 1876.146842][T20485] ? unregister_oom_notifier+0x20/0x20 [ 1876.152330][T20485] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1876.157899][T20485] ? try_charge_memcg+0xc91/0x17c0 [ 1876.163058][T20485] ? drain_local_stock+0x630/0x630 [ 1876.168213][T20485] ? do_raw_spin_unlock+0x121/0x230 [ 1876.173435][T20485] try_charge_memcg+0xca1/0x17c0 [ 1876.178406][T20485] ? folio_flags+0x120/0x120 [ 1876.183015][T20485] ? percpu_ref_tryget+0x15/0x180 [ 1876.188050][T20485] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1876.193795][T20485] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1876.199826][T20485] ? percpu_ref_tryget+0x15/0x180 [ 1876.204878][T20485] ? percpu_ref_tryget+0x15/0x180 [ 1876.209933][T20485] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1876.215677][T20485] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1876.221443][T20485] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1876.227269][T20485] obj_cgroup_charge+0x36e/0x630 [ 1876.232232][T20485] ? obj_cgroup_charge+0xed/0x630 [ 1876.237268][T20485] ? mod_objcg_mlstate+0x320/0x320 [ 1876.242394][T20485] ? percpu_ref_put+0x12/0x100 [ 1876.247195][T20485] ? percpu_ref_put+0x12/0x100 [ 1876.252000][T20485] slab_pre_alloc_hook+0x2e2/0x300 [ 1876.257127][T20485] ? slab_pre_alloc_hook+0xb1/0x300 [ 1876.262347][T20485] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1876.267483][T20485] ? sock_alloc_inode+0x28/0xc0 [ 1876.272353][T20485] sock_alloc_inode+0x28/0xc0 [ 1876.277045][T20485] ? sockfs_init_fs_context+0xb0/0xb0 [ 1876.282437][T20485] new_inode_pseudo+0x63/0x1d0 [ 1876.287229][T20485] __sock_create+0x12d/0x940 [ 1876.292001][T20485] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1876.298027][T20485] __sys_socket+0xd7/0x1b0 [ 1876.302456][T20485] __x64_sys_socket+0x7a/0x90 [ 1876.307154][T20485] do_syscall_64+0x55/0xb0 [ 1876.311583][T20485] ? clear_bhb_loop+0x40/0x90 [ 1876.316280][T20485] ? clear_bhb_loop+0x40/0x90 [ 1876.320984][T20485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1876.326894][T20485] RIP: 0033:0x7f4716d9e0d9 [ 1876.331352][T20485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1876.350972][T20485] RSP: 002b:00007f4717bd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1876.359407][T20485] RAX: ffffffffffffffda RBX: 00007f4717025fa0 RCX: 00007f4716d9e0d9 [ 1876.367439][T20485] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 1876.375440][T20485] RBP: 00007f4716e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1876.383419][T20485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1876.391398][T20485] R13: 00007f4717026038 R14: 00007f4717025fa0 R15: 00007ffce9673038 [ 1876.399427][T20485] [ 1876.409622][T20485] memory: usage 0kB, limit 0kB, failcnt 163 [ 1876.430178][T20485] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1876.437687][T20485] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1876.469158][T20485] Memory cgroup stats for /syz0/test: [ 1876.469286][T20485] cache 0 [ 1876.494717][T20485] rss 0 [ 1876.497549][T20485] rss_huge 0 [ 1876.503077][T20485] shmem 0 [ 1876.506046][T20485] mapped_file 0 [ 1876.509522][T20485] dirty 0 [ 1876.515493][T20485] writeback 0 [ 1876.518815][T20485] workingset_refault_anon 0 [ 1876.528348][T20485] workingset_refault_file 0 [ 1876.539985][T20485] swap 0 [ 1876.546131][T20485] pgpgin 0 [ 1876.549190][T20485] pgpgout 0 [ 1876.554720][T20485] pgfault 5 [ 1876.557874][T20485] pgmajfault 0 [ 1876.564432][T20485] inactive_anon 0 [ 1876.568111][T20485] active_anon 0 [ 1876.582523][T20485] inactive_file 0 [ 1876.680221][T20485] active_file 0 [ 1876.683767][T20485] unevictable 0 [ 1876.687249][T20485] hierarchical_memory_limit 0 [ 1876.691999][T20485] hierarchical_memsw_limit 9223372036854771712 [ 1876.698194][T20485] total_cache 0 [ 1876.701794][T20485] total_rss 0 [ 1876.705107][T20485] total_rss_huge 0 [ 1876.708866][T20485] total_shmem 0 [ 1876.716778][T20485] total_mapped_file 0 [ 1876.727319][T20485] total_dirty 0 [ 1876.740139][T20485] total_writeback 0 [ 1876.743997][T20485] total_workingset_refault_anon 0 [ 1876.749045][T20485] total_workingset_refault_file 0 [ 1876.773002][T20485] total_swap 0 [ 1876.776387][T20485] total_pgpgin 0 [ 1876.791136][T20485] total_pgpgout 0 [ 1876.794814][T20485] total_pgfault 5 [ 1876.798481][T20485] total_pgmajfault 0 [ 1876.824272][T20485] total_inactive_anon 0 [ 1876.828495][T20485] total_active_anon 0 [ 1876.849647][T20499] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1876.853393][T20485] total_inactive_file 0 [ 1876.880969][T20485] total_active_file 0 [ 1876.894622][T20485] total_unevictable 0 [ 1876.907414][T20485] anon_cost 0 [ 1876.917965][T20485] file_cost 0 [ 1876.928188][T20485] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.3903,pid=20484,uid=0 [ 1876.980715][T20485] Memory cgroup out of memory: Killed process 20484 (syz.0.3903) total-vm:102376kB, anon-rss:1376kB, file-rss:22400kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1877.053186][T20485] socket: no more sockets [ 1877.933629][T20517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3915'. [ 1881.360930][T20547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3924'. [ 1881.886382][T20565] No such timeout policy "syz1" [ 1881.947184][T20562] Set syz1 is full, maxelem 1029 reached [ 1883.469447][ T5436] veth0_vlan: left promiscuous mode [ 1883.493107][ T5436] veth0_vlan: entered promiscuous mode [ 1914.672614][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.678965][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1973.150667][ C1] [ 1973.153042][ C1] ================================ [ 1973.158147][ C1] WARNING: inconsistent lock state [ 1973.163252][ C1] syzkaller #0 Not tainted [ 1973.167654][ C1] -------------------------------- [ 1973.172745][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 1973.179573][ C1] ksoftirqd/1/22 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 1973.185803][ C1] ffff888025108130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 1973.195176][ C1] {SOFTIRQ-ON-W} state was registered at: [ 1973.200877][ C1] lock_acquire+0x19e/0x420 [ 1973.205459][ C1] lock_sock_nested+0x48/0x100 [ 1973.210307][ C1] x25_listen+0x47/0x180 [ 1973.214695][ C1] __sys_listen+0x1a4/0x220 [ 1973.219281][ C1] __x64_sys_listen+0x5a/0x70 [ 1973.224037][ C1] do_syscall_64+0x55/0xb0 [ 1973.228541][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1973.234527][ C1] irq event stamp: 3669576 [ 1973.238947][ C1] hardirqs last enabled at (3669576): [] __local_bh_enable_ip+0x13a/0x1c0 [ 1973.249102][ C1] hardirqs last disabled at (3669575): [] __local_bh_enable_ip+0xdb/0x1c0 [ 1973.259168][ C1] softirqs last enabled at (3669498): [] run_ksoftirqd+0xa8/0x100 [ 1973.268627][ C1] softirqs last disabled at (3669503): [] run_ksoftirqd+0xa8/0x100 [ 1973.278080][ C1] [ 1973.278080][ C1] other info that might help us debug this: [ 1973.286138][ C1] Possible unsafe locking scenario: [ 1973.286138][ C1] [ 1973.293598][ C1] CPU0 [ 1973.296872][ C1] ---- [ 1973.300141][ C1] lock(sk_lock-AF_X25); [ 1973.304471][ C1] [ 1973.307915][ C1] lock(sk_lock-AF_X25); [ 1973.312420][ C1] [ 1973.312420][ C1] *** DEADLOCK *** [ 1973.312420][ C1] [ 1973.320674][ C1] 1 lock held by ksoftirqd/1/22: [ 1973.325628][ C1] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb_core+0x34/0x230 [ 1973.335723][ C1] [ 1973.335723][ C1] stack backtrace: [ 1973.341620][ C1] CPU: 1 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 1973.348895][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1973.358941][ C1] Call Trace: [ 1973.362227][ C1] [ 1973.365167][ C1] dump_stack_lvl+0x18c/0x250 [ 1973.369842][ C1] ? show_regs_print_info+0x20/0x20 [ 1973.375032][ C1] ? ret_from_fork_asm+0x11/0x20 [ 1973.379970][ C1] valid_state+0x13b/0x1d0 [ 1973.384384][ C1] mark_lock_irq+0xad/0x900 [ 1973.388912][ C1] ? stack_trace_save+0xaa/0x100 [ 1973.393864][ C1] ? save_trace+0xcd0/0xcd0 [ 1973.398397][ C1] ? mark_lock+0x94/0x320 [ 1973.402735][ C1] ? save_trace+0x5d/0xcd0 [ 1973.407147][ C1] mark_lock+0x208/0x320 [ 1973.411414][ C1] __lock_acquire+0xcfc/0x7d80 [ 1973.416256][ C1] ? verify_lock_unused+0x140/0x140 [ 1973.421493][ C1] ? verify_lock_unused+0x140/0x140 [ 1973.426686][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1973.432685][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 1973.437700][ C1] ? lock_chain_count+0x20/0x20 [ 1973.442542][ C1] lock_acquire+0x19e/0x420 [ 1973.447049][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 1973.452175][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1973.457558][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1973.462946][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1973.468188][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1973.473579][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1973.478426][ C1] lock_sock_nested+0x48/0x100 [ 1973.483272][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 1973.488393][ C1] x25_kill_by_neigh+0x10d/0x250 [ 1973.493343][ C1] x25_lapb_receive_frame+0x1a7/0xef0 [ 1973.498712][ C1] ? netif_receive_skb_core+0x34/0x230 [ 1973.504181][ C1] ? netif_receive_skb_core+0x34/0x230 [ 1973.509645][ C1] ? x25_device_event+0x280/0x280 [ 1973.514666][ C1] netif_receive_skb_core+0x16a/0x230 [ 1973.520064][ C1] lapbeth_napi_poll+0x42/0x80 [ 1973.524864][ C1] __napi_poll+0xbb/0x460 [ 1973.529274][ C1] net_rx_action+0x65f/0xcc0 [ 1973.533896][ C1] ? net_tx_action+0x950/0x950 [ 1973.538660][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1973.544641][ C1] ? __bpf_trace_tasklet+0x160/0x160 [ 1973.549942][ C1] ? lock_chain_count+0x20/0x20 [ 1973.554799][ C1] handle_softirqs+0x27d/0x820 [ 1973.559578][ C1] ? run_ksoftirqd+0xa8/0x100 [ 1973.564268][ C1] ? do_softirq+0x1a0/0x1a0 [ 1973.568797][ C1] run_ksoftirqd+0xa8/0x100 [ 1973.573295][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1973.578485][ C1] ? takeover_tasklets+0x770/0x770 [ 1973.583589][ C1] ? takeover_tasklets+0x770/0x770 [ 1973.588692][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1973.593891][ C1] smpboot_thread_fn+0x651/0x9f0 [ 1973.598845][ C1] ? smpboot_thread_fn+0x4d/0x9f0 [ 1973.603900][ C1] kthread+0x2fa/0x390 [ 1973.607973][ C1] ? smpboot_unregister_percpu_thread+0x2a0/0x2a0 [ 1973.614413][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1973.619039][ C1] ret_from_fork+0x48/0x80 [ 1973.623565][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1973.628152][ C1] ret_from_fork_asm+0x11/0x20 [ 1973.632935][ C1] [ 1973.636000][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3546 [ 1973.644810][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 22, name: ksoftirqd/1 [ 1973.653829][ C1] preempt_count: 100, expected: 0 [ 1973.658902][ C1] RCU nest depth: 1, expected: 0 [ 1973.663916][ C1] INFO: lockdep is turned off. [ 1973.668701][ C1] Preemption disabled at: [ 1973.668711][ C1] [] handle_softirqs+0x101/0x820 [ 1973.679689][ C1] CPU: 1 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 1973.686996][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1973.697073][ C1] Call Trace: [ 1973.700392][ C1] [ 1973.703350][ C1] dump_stack_lvl+0x18c/0x250 [ 1973.708062][ C1] ? show_regs_print_info+0x20/0x20 [ 1973.713383][ C1] ? load_image+0x420/0x420 [ 1973.717929][ C1] ? handle_softirqs+0x101/0x820 [ 1973.722896][ C1] __might_resched+0x48d/0x5f0 [ 1973.727732][ C1] ? handle_softirqs+0x101/0x820 [ 1973.732694][ C1] ? __might_sleep+0xe0/0xe0 [ 1973.737316][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1973.742736][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1973.748130][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1973.753360][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1973.758762][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1973.763657][ C1] lock_sock_nested+0x5d/0x100 [ 1973.768474][ C1] x25_kill_by_neigh+0x10d/0x250 [ 1973.773443][ C1] x25_lapb_receive_frame+0x1a7/0xef0 [ 1973.778847][ C1] ? netif_receive_skb_core+0x34/0x230 [ 1973.784346][ C1] ? netif_receive_skb_core+0x34/0x230 [ 1973.789858][ C1] ? x25_device_event+0x280/0x280 [ 1973.794995][ C1] netif_receive_skb_core+0x16a/0x230 [ 1973.800412][ C1] lapbeth_napi_poll+0x42/0x80 [ 1973.805206][ C1] __napi_poll+0xbb/0x460 [ 1973.809574][ C1] net_rx_action+0x65f/0xcc0 [ 1973.814203][ C1] ? net_tx_action+0x950/0x950 [ 1973.819012][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1973.825027][ C1] ? __bpf_trace_tasklet+0x160/0x160 [ 1973.830336][ C1] ? lock_chain_count+0x20/0x20 [ 1973.835246][ C1] handle_softirqs+0x27d/0x820 [ 1973.840052][ C1] ? run_ksoftirqd+0xa8/0x100 [ 1973.844797][ C1] ? do_softirq+0x1a0/0x1a0 [ 1973.849377][ C1] run_ksoftirqd+0xa8/0x100 [ 1973.853915][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1973.859151][ C1] ? takeover_tasklets+0x770/0x770 [ 1973.864295][ C1] ? takeover_tasklets+0x770/0x770 [ 1973.869445][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1973.874678][ C1] smpboot_thread_fn+0x651/0x9f0 [ 1973.879668][ C1] ? smpboot_thread_fn+0x4d/0x9f0 [ 1973.884732][ C1] kthread+0x2fa/0x390 [ 1973.888855][ C1] ? smpboot_unregister_percpu_thread+0x2a0/0x2a0 [ 1973.895305][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1973.899938][ C1] ret_from_fork+0x48/0x80 [ 1973.904395][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1973.909022][ C1] ret_from_fork_asm+0x11/0x20 [ 1973.913835][ C1] [ 1976.112675][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.119037][ T1288] ieee802154 phy1 wpan1: encryption failed: -22