last executing test programs: 4.403652488s ago: executing program 3 (id=1477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r2, 0x0, 0x0) 4.387712239s ago: executing program 3 (id=1478): socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) bind(0xffffffffffffffff, 0x0, 0x0) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d232100000000000000000010000"], 0x4a) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x6) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x405, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 3.403561844s ago: executing program 4 (id=1491): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xe, 0x7f, 0x800, 0x5}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.243466848s ago: executing program 3 (id=1494): unshare(0x60000000) io_uring_setup(0x1159, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 3.13730895s ago: executing program 4 (id=1497): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600884800000c00030008000c0004"]}, 0x58}}, 0x0) 3.068052243s ago: executing program 4 (id=1500): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000fc0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0xfff, 0x10001, 0x1f, 0x9, 0x8, 0x4}}]}}]}, 0x14c}}, 0x0) 3.043582123s ago: executing program 3 (id=1502): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000200)={0x2}, 0x8, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x228, 0x0, 0xffffffff, 0x0, 0x2c8, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x22}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x75b1817ec7c0652, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x854, 0x20c0}, 0x80, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xa, @remote, @empty, @port=0x4e22, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0xffffffffffffffff, 0x4, 0x3}, 0x3, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e21, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @gre_key=0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r6, &(0x7f0000000040)="3c5c413ecd45036a2762bb626c65640a", 0x10) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) listen(r0, 0x5) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xda4, @private2, 0x80000000}], 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x99ff, 0x7, "8003e3ffff072000"}) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 1.952049811s ago: executing program 4 (id=1505): openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/108, 0x6c}], 0x1, 0x1, 0x6) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x20000) 1.948519721s ago: executing program 3 (id=1506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) 1.933482791s ago: executing program 1 (id=1507): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x34}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) accept4$inet(r0, 0x0, &(0x7f00000002c0), 0x80000) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x400000) 1.880738702s ago: executing program 2 (id=1508): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x9) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 1.464821163s ago: executing program 1 (id=1511): r0 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) 1.464585953s ago: executing program 2 (id=1512): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000980)="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", 0x1e5}, {&(0x7f0000000f00)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="3da39b2ad5defd21d90486407e56e26daf1a5c6f937e2b330e7f2a369d4e1d7d075b45ee8b8b533ce21787a34cc98008199ec62730423ed278abd4e2bb8877d253d1c697ecb90b33871b36094c4147ad2fee445105fc4e7c5c81085705792d8826b0ac7cd3b3a9cb56b879719d2f4eb8993d039207f46b2c6a38bbf20456", 0x7e}, {&(0x7f0000000780)="1d603f8414984774e404cec66360f9d4d4892eb91e3c91a2c4020ef536748012bc2f2f78eba95703840dad561da3bf32b3e6e4459419af41b845483434f66105e4192fe71b", 0x45}], 0x2}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000880)="53c4", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000c80)="89bb5c3c1f8e0d6c6a88223b5e33fa6fc673cbd5927f5b375158f5a7d2c654d432f8fa8db3a06523ddb3ea11e9", 0x2d}, {&(0x7f0000000cc0)="afe479e37e1803c251ba7e744584b8e642da7c8110769ddc2bce862f53a6415f50938a05119d00f80afd221b3ae10661c6142cb5546290a8426b4ece86ac07781e0c2ded9b69c2b23ca29cc3588f7651333e5fbdcc15652375a93269e7ce01a3c3e2d9892d0a49cd7a165881a2f1a9b64b03c8b06968640b3129cfc850091099f87eaeabca814cd9b05fcab5ddf106d5ba91994157400d3fc163c2121a2c8925c1c7cf7fe960f572d1291792ae3ca11ed4543d09cace5fa3784d98b2b2d1110648c3416b14f3a7808b1eaf84ef4a4c894ebb6ad28f85cb27ddcf91901d23cd5229b2d0ac5cdef025631ee1b3e41b", 0xee}, {&(0x7f00000020c0)="d9dd1a955d40718af425d35b", 0xc}], 0x3}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x10b) 1.462608663s ago: executing program 1 (id=1513): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) r1 = getpid() capset(&(0x7f0000000080)={0x20080522, r1}, &(0x7f0000000040)={0x200, 0x200800, 0x401, 0x0, 0x1000002, 0x400}) socket(0x10, 0x3, 0x0) 1.449878924s ago: executing program 2 (id=1514): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x4, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffe}, @generic={0x45, 0xa, 0x5, 0x4, 0x80}], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff, 0xf}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 1.435592334s ago: executing program 1 (id=1515): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a", 0x8}], 0x1) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B'], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4080, 0x61}], 0x1}, 0x2000) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r1], 0xfe33) 1.321326257s ago: executing program 2 (id=1516): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x8924, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.320961257s ago: executing program 0 (id=1517): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000200)={0x2}, 0x8, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x228, 0x0, 0xffffffff, 0x0, 0x2c8, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x22}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x75b1817ec7c0652, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x854, 0x20c0}, 0x80, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xa, @remote, @empty, @port=0x4e22, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0xffffffffffffffff, 0x4, 0x3}, 0x3, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e21, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @gre_key=0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r6, &(0x7f0000000040)="3c5c413ecd45036a2762bb626c65640a", 0x10) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) listen(r0, 0x5) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xda4, @private2, 0x80000000}], 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x99ff, 0x7, "8003e3ffff072000"}) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 1.309029827s ago: executing program 1 (id=1518): socket$inet6_tcp(0xa, 0x1, 0x0) gettimeofday(&(0x7f0000000040), &(0x7f0000000080)) listen(0xffffffffffffffff, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r3, 0xda8d) accept$inet(r3, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) 716.213922ms ago: executing program 4 (id=1519): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000000)="97", 0xfdef}], 0x1}}], 0x1, 0x4000800) 665.658873ms ago: executing program 4 (id=1520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() r1 = getpid() ioprio_get$pid(0x0, r1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x4, 0x3, 0x12, "c12400"}, 0x3, 0x2, {0x0}, 0x96000}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x0) 665.214693ms ago: executing program 3 (id=1521): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/drivers/usbip-host\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000100)='match_busid\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040d80402c000000000000109022200010100803209040000010300000009211101000122350007058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022350000000600ff0901a10185110902150026ff00a4089502810285210903150026ff0062089501810285910904150026ff00750895019102c0"], 0x0}, 0x0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="1201100127aa18080204025683490102030109021200010000500f0904"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_usb_control_io$uac1(r3, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0x2) write(r1, &(0x7f0000000180)='del 1', 0x5) 259.834023ms ago: executing program 1 (id=1522): socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) close(r1) 251.255054ms ago: executing program 0 (id=1523): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4b4d, &(0x7f00000000c0)) 180.722796ms ago: executing program 0 (id=1524): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x140d, 0x800, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 180.492576ms ago: executing program 0 (id=1525): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000980)="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", 0x1e5}, {&(0x7f0000000f00)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="3da39b2ad5defd21d90486407e56e26daf1a5c6f937e2b330e7f2a369d4e1d7d075b45ee8b8b533ce21787a34cc98008199ec62730423ed278abd4e2bb8877d253d1c697ecb90b33871b36094c4147ad2fee445105fc4e7c5c81085705792d8826b0ac7cd3b3a9cb56b879719d2f4eb8993d039207f46b2c6a38bbf20456", 0x7e}, {&(0x7f0000000780)="1d603f8414984774e404cec66360f9d4d4892eb91e3c91a2c4020ef536748012bc2f2f78eba95703840dad561da3bf32b3e6e4459419af41b845483434f66105e4192fe71b", 0x45}], 0x2}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000880)="53c4", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000c80)="89bb5c3c1f8e0d6c6a88223b5e33fa6fc673cbd5927f5b375158f5a7d2c654d432f8fa8db3a06523ddb3ea11e9", 0x2d}, {&(0x7f0000000cc0)="afe479e37e1803c251ba7e744584b8e642da7c8110769ddc2bce862f53a6415f50938a05119d00f80afd221b3ae10661c6142cb5546290a8426b4ece86ac07781e0c2ded9b69c2b23ca29cc3588f7651333e5fbdcc15652375a93269e7ce01a3c3e2d9892d0a49cd7a165881a2f1a9b64b03c8b06968640b3129cfc850091099f87eaeabca814cd9b05fcab5ddf106d5ba91994157400d3fc163c2121a2c8925c1c7cf7fe960f572d1291792ae3ca11ed4543d09cace5fa3784d98b2b2d1110648c3416b14f3a7808b1eaf84ef4a4c894ebb6ad28f85cb27ddcf91901d23cd5229b2d0ac5cdef025631ee1b3e41b", 0xee}, {&(0x7f00000020c0)="d9dd1a955d40718a", 0x8}], 0x3}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef1", 0x10b) 174.478316ms ago: executing program 0 (id=1526): sched_setattr(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) r1 = fanotify_init(0x200, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000040)=""/131, 0x83}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 52.309509ms ago: executing program 2 (id=1527): r0 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0x2, 0x0, 0x42474752, 0x0, 0x0, 0x1, 0x6, 0xfeedcafe, 0x3, 0x0, 0x1, 0x5}}) 322.221µs ago: executing program 2 (id=1528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000000206010300000000000000000500000014000780080008000000004008000640000000060900020073797a32000000000500040000000000050005000a000000050001000700000011000300686173683a6970"], 0x60}}, 0x4000) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0xfdfdffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='R\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c0007000000000000000000080009000000000008000800000000000800060073697000"], 0x4c}}, 0x0) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc005}, 0x4000000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r5, 0x2) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080002e22698001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e74703010093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40a85323, &(0x7f0000000040)={{0x37, 0x8}, 'port1\x00', 0x40, 0x0, 0x6, 0x4, 0xfffffffb, 0x2, 0x1, 0x0, 0x4, 0x4}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x2040400) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000ff0900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x8e2b00) ioctl$EVIOCGKEYCODE_V2(r9, 0x80284504, 0x0) 0s ago: executing program 0 (id=1529): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=@setlink={0x4c, 0x13, 0x5, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40601}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x4c}}, 0x48000) kernel console output (not intermixed with test programs): ady exists on: batadv_slave_1 [ 33.711129][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.714949][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.717454][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.720213][ T4343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.727196][ T4343] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.728968][ T4343] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.730386][ T4343] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.732051][ T4343] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.739034][ T4433] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 33.752049][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.753804][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.837203][ T326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.838748][ T326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.851754][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.870254][ T4428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.872717][ T4428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.874162][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.080627][ T4447] futex_wake_op: syz.4.5 tries to shift op by 144; fix this program [ 34.261469][ T4346] Bluetooth: hci2: command 0x041b tx timeout [ 34.263032][ T4346] Bluetooth: hci1: command 0x041b tx timeout [ 34.264294][ T4346] Bluetooth: hci4: command 0x041b tx timeout [ 34.265634][ T4346] Bluetooth: hci3: command 0x041b tx timeout [ 34.266802][ T4346] Bluetooth: hci0: command 0x041b tx timeout [ 34.630991][ T4452] loop1: detected capacity change from 0 to 4096 [ 34.665033][ T4452] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 35.096158][ T4455] ntfs3: loop1: failed to convert "0000" to iso8859-2 [ 35.107009][ T4455] ntfs3: loop1: failed to convert name for inode 1e. [ 36.144906][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.321631][ T4348] Bluetooth: hci0: command 0x040f tx timeout [ 36.322960][ T4346] Bluetooth: hci3: command 0x040f tx timeout [ 36.324258][ T4348] Bluetooth: hci4: command 0x040f tx timeout [ 36.325431][ T4346] Bluetooth: hci1: command 0x040f tx timeout [ 36.326553][ T4346] Bluetooth: hci2: command 0x040f tx timeout [ 36.341566][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 36.346674][ T22] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 36.350390][ T22] usb 1-1: config 0 has no interface number 0 [ 36.352676][ T22] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 36.355108][ T22] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 36.357162][ T22] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 36.359703][ T22] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 36.361827][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.401882][ T4471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.403551][ T4471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.527632][ T4477] gadgetfs expected dummy_udc controller not usbip-vudc [ 36.529272][ T4477] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 36.532509][ T4477] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 36.626623][ T22] usb 1-1: config 0 descriptor?? [ 36.636389][ T22] ldusb 1-1:0.55: Interrupt in endpoint not found [ 36.854554][ T4485] SET target dimension over the limit! [ 37.115928][ T4383] usb 1-1: USB disconnect, device number 3 [ 37.138459][ T4487] loop1: detected capacity change from 0 to 256 [ 37.145771][ T4487] ======================================================= [ 37.145771][ T4487] WARNING: The mand mount option has been deprecated and [ 37.145771][ T4487] and is ignored by this kernel. Remove the mand [ 37.145771][ T4487] option from the mount to silence this warning. [ 37.145771][ T4487] ======================================================= [ 37.240462][ T4497] loop3: detected capacity change from 0 to 4096 [ 37.271347][ T4497] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 38.379514][ T4516] gadgetfs: bound to dummy_udc driver [ 38.401701][ T4331] Bluetooth: hci2: command 0x0419 tx timeout [ 38.402857][ T4331] Bluetooth: hci4: command 0x0419 tx timeout [ 38.403895][ T4331] Bluetooth: hci1: command 0x0419 tx timeout [ 38.404930][ T4331] Bluetooth: hci3: command 0x0419 tx timeout [ 38.405951][ T4331] Bluetooth: hci0: command 0x0419 tx timeout [ 38.450856][ T4523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.453807][ T4523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.475478][ T4525] loop1: detected capacity change from 0 to 256 [ 38.651528][ T22] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.653946][ C1] gadgetfs: connected [ 38.656925][ T22] gadgetfs: disconnected [ 39.311518][ T4559] SET target dimension over the limit! [ 39.314509][ T4557] SET target dimension over the limit! [ 39.657709][ T4569] SET target dimension over the limit! [ 39.938166][ T4572] loop0: detected capacity change from 0 to 256 [ 39.982692][ T4582] gadgetfs: bound to dummy_udc driver [ 40.021873][ T4586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.023510][ T4586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.271570][ T4442] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 40.273195][ C0] gadgetfs: connected [ 40.274036][ T4442] gadgetfs: disconnected [ 40.386414][ T4597] netlink: 36 bytes leftover after parsing attributes in process `syz.3.57'. [ 40.706908][ T4605] SET target dimension over the limit! [ 40.712476][ T4608] SET target dimension over the limit! [ 40.846829][ T4611] loop4: detected capacity change from 0 to 256 [ 41.167598][ T4631] SET target dimension over the limit! [ 41.444262][ T4636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.449033][ T4636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.535573][ T4645] loop0: detected capacity change from 0 to 256 [ 41.874072][ T4668] SET target dimension over the limit! [ 42.281572][ T4674] SET target dimension over the limit! [ 42.899802][ T4704] SET target dimension over the limit! [ 43.711573][ T4716] input: syz1 as /devices/virtual/input/input2 [ 45.107546][ T4738] gadgetfs: bound to dummy_udc driver [ 45.381510][ T3902] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 45.384074][ C0] gadgetfs: connected [ 45.384900][ T3902] gadgetfs: disconnected [ 45.588903][ T4683] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 50.838734][ T4754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 50.993221][ T4780] gadgetfs: bound to dummy_udc driver [ 51.015646][ T4789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.017310][ T4789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.094873][ T4800] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 51.261489][ T14] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 51.263426][ C0] gadgetfs: connected [ 51.264329][ T14] gadgetfs: disconnected [ 51.329096][ T4810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.330786][ T4810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.540581][ T4815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 51.704008][ T4832] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 51.865046][ T4836] gadgetfs: bound to dummy_udc driver [ 52.067202][ T4846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.069255][ T4846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.246216][ T4848] FAULT_INJECTION: forcing a failure. [ 52.246216][ T4848] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.248797][ T4848] CPU: 0 PID: 4848 Comm: syz.4.137 Not tainted syzkaller #0 [ 52.250054][ T4848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 52.252154][ T4848] Call trace: [ 52.252887][ T4848] dump_backtrace+0x1c4/0x1f0 [ 52.253830][ T4848] show_stack+0x2c/0x3c [ 52.254581][ T4848] __dump_stack+0x30/0x40 [ 52.255365][ T4848] dump_stack_lvl+0xf4/0x15c [ 52.256151][ T4848] dump_stack+0x1c/0x5c [ 52.256905][ T4848] should_fail_ex+0x3cc/0x524 [ 52.257728][ T4848] should_fail+0x14/0x24 [ 52.258466][ T4848] should_fail_usercopy+0x20/0x30 [ 52.259306][ T4848] set_fd_set+0x48/0xac [ 52.260062][ T4848] core_sys_select+0x688/0x718 [ 52.260919][ T4848] __arm64_sys_pselect6+0x4b0/0x590 [ 52.261856][ T4848] invoke_syscall+0x98/0x290 [ 52.262689][ T4848] el0_svc_common+0x13c/0x258 [ 52.263507][ T4848] do_el0_svc+0x5c/0x134 [ 52.264263][ T4848] el0_svc+0x58/0x128 [ 52.265006][ T4848] el0t_64_sync_handler+0x84/0xf0 [ 52.265890][ T4848] el0t_64_sync+0x18c/0x190 [ 52.404872][ C0] gadgetfs: connected [ 52.407729][ T14] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 52.448105][ T4852] SET target dimension over the limit! [ 52.460051][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.558664][ C0] gadgetfs: configuration #1 [ 52.651151][ T4835] gadgetfs: suspended from state 4 [ 52.652477][ T14] usb 1-1: can't set config #1, error -71 [ 52.655651][ T14] usb 1-1: USB disconnect, device number 7 [ 52.658681][ T4835] gadgetfs: disconnected [ 53.320192][ T4880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 53.644615][ T4885] gadgetfs: bound to dummy_udc driver [ 53.906363][ T4896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.908054][ T4896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.911755][ T4442] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 53.913386][ C0] gadgetfs: connected [ 53.914309][ T4442] gadgetfs: disconnected [ 53.999635][ T4782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 54.140925][ T4913] netlink: 40 bytes leftover after parsing attributes in process `syz.4.161'. [ 54.197206][ T4917] SET target dimension over the limit! [ 54.421104][ T4918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.161'. [ 54.444873][ T4913] input: syz1 as /devices/virtual/input/input3 [ 54.448662][ T4921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.450258][ T4921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.605742][ T4931] gadgetfs: bound to dummy_udc driver [ 55.051645][ C0] gadgetfs: connected [ 55.052957][ T4442] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 55.053277][ T4930] gadgetfs: suspended from state 3 [ 55.054576][ T4442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.055542][ T4930] gadgetfs: disconnected [ 55.073360][ T4442] usb 1-1: can't set config #1, error -71 [ 55.078289][ T4442] usb 1-1: USB disconnect, device number 8 [ 55.107872][ T4953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 55.124920][ T4957] i2c i2c-0: new_device: Missing parameters [ 55.136089][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 55.650038][ T4965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.655225][ T4965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.107292][ T4978] SET target dimension over the limit! [ 56.383333][ T4981] gadgetfs: bound to dummy_udc driver [ 56.651551][ T4383] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 56.653460][ C0] gadgetfs: connected [ 56.654708][ T4980] gadgetfs: suspended from state 3 [ 56.655706][ T4980] gadgetfs: disconnected [ 56.937058][ T4996] device syzkaller0 entered promiscuous mode [ 57.604640][ T5000] SET target dimension over the limit! [ 57.684517][ T5005] Zero length message leads to an empty skb [ 57.686199][ T5005] netlink: 84 bytes leftover after parsing attributes in process `syz.2.193'. [ 57.688259][ T5005] netlink: 'syz.2.193': attribute type 1 has an invalid length. [ 57.857386][ T4943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 57.887210][ T5006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'. [ 58.186962][ T5028] SET target dimension over the limit! [ 58.326524][ T5030] SET target dimension over the limit! [ 58.589639][ T5039] loop4: detected capacity change from 0 to 256 [ 58.664455][ T5043] tipc: Started in network mode [ 58.670722][ T5043] tipc: Node identity 3a81ca5b96d8, cluster identity 4711 [ 58.675205][ T5043] tipc: Enabled bearer , priority 0 [ 58.677639][ T5043] device syzkaller0 entered promiscuous mode [ 58.689000][ T5042] tipc: Resetting bearer [ 58.705677][ T5045] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 58.743418][ T5042] tipc: Disabling bearer [ 58.758443][ T5049] netlink: 84 bytes leftover after parsing attributes in process `syz.4.211'. [ 58.760521][ T5049] netlink: 'syz.4.211': attribute type 1 has an invalid length. [ 58.771764][ T22] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 58.942308][ T5063] loop3: detected capacity change from 0 to 256 [ 58.961615][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 58.968009][ T22] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 58.969942][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.971376][ T22] usb 1-1: Product: syz [ 58.972164][ T22] usb 1-1: Manufacturer: syz [ 58.972945][ T22] usb 1-1: SerialNumber: syz [ 58.975087][ T22] usb 1-1: config 0 descriptor?? [ 58.981323][ T22] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 59.067715][ T5071] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 59.070846][ T5073] netlink: 32 bytes leftover after parsing attributes in process `syz.1.222'. [ 59.155774][ T4348] block nbd2: Receive control failed (result -32) [ 59.166607][ T5078] tipc: Enabled bearer , priority 0 [ 59.168147][ T5078] device syzkaller0 entered promiscuous mode [ 59.177902][ T4916] block nbd2: shutting down sockets [ 59.201958][ T5075] tipc: Resetting bearer [ 59.323973][ T5075] tipc: Disabling bearer [ 59.402998][ T5087] SET target dimension over the limit! [ 59.503008][ T22] ssu100: probe of 1-1:0.0 failed with error -110 [ 59.764234][ T5089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.765987][ T5089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.819989][ T5089] loop4: detected capacity change from 0 to 4096 [ 60.238093][ T112] cfg80211: failed to load regulatory.db [ 60.315532][ T5102] netlink: 84 bytes leftover after parsing attributes in process `syz.2.232'. [ 60.317787][ T5102] netlink: 'syz.2.232': attribute type 1 has an invalid length. [ 60.463857][ T5105] SET target dimension over the limit! [ 60.749759][ T5110] loop4: detected capacity change from 0 to 256 [ 60.794372][ T5112] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 60.829813][ T5114] netlink: 32 bytes leftover after parsing attributes in process `syz.4.236'. [ 60.881500][ T5120] tipc: Started in network mode [ 60.882627][ T5120] tipc: Node identity f2ccb9343477, cluster identity 4711 [ 60.884027][ T5120] tipc: Enabled bearer , priority 0 [ 60.886276][ T5120] device syzkaller0 entered promiscuous mode [ 60.889511][ T5119] tipc: Resetting bearer [ 60.932840][ T5119] tipc: Disabling bearer [ 61.005465][ T5124] SET target dimension over the limit! [ 61.451755][ T5139] SET target dimension over the limit! [ 61.659905][ T5140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.662663][ T5140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.685071][ T5137] loop4: detected capacity change from 0 to 4096 [ 61.765880][ T5144] qfq: no options [ 61.767347][ T5144] netlink: 84 bytes leftover after parsing attributes in process `syz.1.246'. [ 61.769429][ T5144] netlink: 'syz.1.246': attribute type 1 has an invalid length. [ 61.807279][ T5146] loop2: detected capacity change from 0 to 256 [ 61.854532][ T5148] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 62.054220][ T5155] netlink: 32 bytes leftover after parsing attributes in process `syz.1.250'. [ 62.159698][ T5164] tipc: Started in network mode [ 62.160736][ T5164] tipc: Node identity 76fd0c58c23a, cluster identity 4711 [ 62.162611][ T5164] tipc: Enabled bearer , priority 0 [ 62.164186][ T5164] device syzkaller0 entered promiscuous mode [ 62.167184][ T5163] tipc: Resetting bearer [ 62.232843][ T5163] tipc: Disabling bearer [ 62.237835][ T5170] device syzkaller0 entered promiscuous mode [ 62.321654][ T5171] SET target dimension over the limit! [ 62.559731][ T4383] usb 1-1: USB disconnect, device number 10 [ 62.679539][ T5177] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 62.689560][ T5175] loop0: detected capacity change from 0 to 32768 [ 62.758472][ T5183] SET target dimension over the limit! [ 63.034193][ T5175] XFS (loop0): Mounting V5 Filesystem [ 63.067318][ T5198] qrtr: Invalid version 0 [ 63.175955][ T5175] XFS (loop0): Ending clean mount [ 63.285618][ T5207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.287959][ T5207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.615790][ T4334] XFS (loop0): Unmounting Filesystem [ 63.648962][ T5207] loop2: detected capacity change from 0 to 4096 [ 63.652845][ T5216] tipc: Enabled bearer , priority 0 [ 63.658355][ T5216] device syzkaller0 entered promiscuous mode [ 63.673673][ T5215] tipc: Resetting bearer [ 63.696716][ T5218] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 63.742616][ T5215] tipc: Disabling bearer [ 63.826689][ T5228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.828393][ T5228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.921130][ T5232] SET target dimension over the limit! [ 64.179215][ T27] audit: type=1800 audit(64.160:2): pid=5222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.272" name="/newroot/46" dev="tmpfs" ino=254 res=0 errno=0 [ 64.532107][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.533937][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.634708][ T5245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.636308][ T5245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.018435][ T5253] loop2: detected capacity change from 0 to 32768 [ 65.097138][ T5257] SET target dimension over the limit! [ 65.359534][ T5253] XFS (loop2): Mounting V5 Filesystem [ 65.398929][ T5253] XFS (loop2): Ending clean mount [ 65.490202][ T5275] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 65.518452][ T5273] tipc: Started in network mode [ 65.521569][ T5273] tipc: Node identity 925bf07d299a, cluster identity 4711 [ 65.523042][ T5273] tipc: Enabled bearer , priority 0 [ 65.845504][ T4335] XFS (loop2): Unmounting Filesystem [ 65.855709][ T5272] tipc: Disabling bearer [ 65.913616][ T5285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.915731][ T5285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.919662][ T5292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'. [ 65.955229][ T5285] loop1: detected capacity change from 0 to 4096 [ 66.544598][ T5313] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 66.682757][ T5318] loop4: detected capacity change from 0 to 32768 [ 66.692008][ T5319] SET target dimension over the limit! [ 66.831983][ T5322] SET target dimension over the limit! [ 67.014869][ T5318] XFS (loop4): Mounting V5 Filesystem [ 67.042654][ T5318] XFS (loop4): Ending clean mount [ 67.140156][ T5343] netlink: 'syz.0.303': attribute type 10 has an invalid length. [ 67.473137][ T4343] XFS (loop4): Unmounting Filesystem [ 67.548035][ T5351] tipc: Enabled bearer , priority 0 [ 67.556785][ T5351] tipc: Resetting bearer [ 67.558875][ T5355] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 67.562591][ T5350] tipc: Disabling bearer [ 67.803476][ T5366] loop3: detected capacity change from 0 to 4096 [ 67.821403][ T5374] loop2: detected capacity change from 0 to 32768 [ 67.884205][ T5379] SET target dimension over the limit! [ 68.106968][ T5374] XFS (loop2): Mounting V5 Filesystem [ 68.153979][ T5374] XFS (loop2): Ending clean mount [ 68.597732][ T5396] SET target dimension over the limit! [ 68.884046][ T4335] XFS (loop2): Unmounting Filesystem [ 68.905636][ T5400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.911937][ T5400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.149141][ T5413] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 69.171207][ T5415] tipc: Started in network mode [ 69.173862][ T5415] tipc: Node identity e2735ce68bde, cluster identity 4711 [ 69.175293][ T5415] tipc: Enabled bearer , priority 0 [ 69.198512][ T5415] tipc: Resetting bearer [ 69.201354][ T5414] tipc: Disabling bearer [ 69.382385][ T5426] gadgetfs: bound to dummy_udc driver [ 69.479491][ T5434] SET target dimension over the limit! [ 70.021931][ T4379] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 70.023827][ C1] gadgetfs: connected [ 70.024880][ T4379] gadgetfs: disconnected [ 70.092017][ T5454] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 70.279069][ T5466] loop4: detected capacity change from 0 to 4096 [ 70.435915][ T5484] gadgetfs: bound to dummy_udc driver [ 70.627450][ T5490] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 71.015722][ C1] gadgetfs: connected [ 71.017973][ T4379] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 71.019774][ T4379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.053014][ C1] gadgetfs: configuration #1 [ 71.185989][ T5498] loop3: detected capacity change from 0 to 32768 [ 71.202180][ T5482] gadgetfs: suspended from state 4 [ 71.204275][ T4379] usb 1-1: can't set config #1, error -71 [ 71.212448][ T4379] usb 1-1: USB disconnect, device number 11 [ 71.221708][ T5482] gadgetfs: disconnected [ 71.252835][ T5498] XFS (loop3): Mounting V5 Filesystem [ 71.551222][ T5498] XFS (loop3): Ending clean mount [ 72.010714][ T4330] XFS (loop3): Unmounting Filesystem [ 72.335132][ T5552] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 72.363165][ T5554] loop4: detected capacity change from 0 to 256 [ 72.425129][ T5563] gadgetfs: bound to dummy_udc driver [ 73.191994][ T3902] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 73.195710][ C0] gadgetfs: connected [ 73.196899][ T3902] gadgetfs: disconnected [ 73.343054][ T5595] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 73.485199][ T5609] loop3: detected capacity change from 0 to 256 [ 73.614040][ T5619] gadgetfs expected dummy_udc controller not usbip-vudc [ 73.615623][ T5619] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 73.618387][ T5619] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 73.923643][ T3902] usb 1-1: unable to get BOS descriptor or descriptor too short [ 73.925895][ T3902] usb 1-1: config 4 interface 0 has no altsetting 0 [ 73.929526][ T3902] usb 1-1: string descriptor 0 read error: -22 [ 73.930621][ T3902] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 73.932787][ T3902] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 73.940960][ T3902] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 74.228504][ T3902] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 74.230325][ T3902] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 74.231795][ T3902] usb 1-1: media controller created [ 74.236035][ T3902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 74.335622][ T5633] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 74.820999][ T5654] loop3: detected capacity change from 0 to 256 [ 74.909883][ T5663] gadgetfs expected dummy_udc controller not usbip-vudc [ 74.915342][ T5663] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 74.919823][ T5663] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 74.942799][ T5667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 75.230727][ T5678] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 75.287188][ T3902] zl10353_read_register: readreg error (reg=127, ret==0) [ 75.304995][ T5681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.315112][ T3902] usb 1-1: USB disconnect, device number 12 [ 75.316317][ T5681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.193359][ T5701] gadgetfs: bound to dummy_udc driver [ 76.194029][ T5695] loop4: detected capacity change from 0 to 256 [ 76.351316][ T5713] device bridge1 entered promiscuous mode [ 78.025918][ T5701] gadgetfs: suspended from state 2 [ 78.050136][ T5722] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 78.091961][ T4383] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 78.526466][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.528243][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.581579][ T4383] usb 1-1: device descriptor read/64, error -71 [ 78.851703][ T4383] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 79.016089][ T5750] loop1: detected capacity change from 0 to 256 [ 79.032781][ T4383] usb 1-1: config index 0 descriptor too short (expected 71, got 53) [ 79.036027][ T4383] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 79.037526][ T4383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.038923][ T4383] usb 1-1: Product: syz [ 79.039692][ T4383] usb 1-1: Manufacturer: syz [ 79.040692][ T4383] usb 1-1: SerialNumber: syz [ 79.065035][ T5730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.084328][ T5759] dlm: plock device version mismatch: kernel (1.2.0), user (1.43520.0) [ 79.137035][ T5730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.215518][ T5764] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 79.334583][ T5734] mos7720 1-1:1.0: Moschip 2 port adapter converter detected [ 79.654694][ T5777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.657316][ T5777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.696674][ T5734] usb 1-1: mos7720: usb_control_msg() failed: -71 [ 79.696784][ T1969] usb 1-1: USB disconnect, device number 14 [ 79.698041][ C0] usb 1-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 79.712167][ T5734] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 79.719178][ T5734] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 79.736068][ T1969] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 79.740708][ T1969] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 79.747379][ T1969] mos7720 1-1:1.0: device disconnected [ 79.809249][ T5730] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.810955][ T5730] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.812648][ T5730] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.814132][ T5730] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.143269][ T5785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.145834][ T5785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.189908][ T5787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.429'. [ 80.243535][ T5795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 80.245167][ T5795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 80.321624][ T1969] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 80.461555][ T4348] Bluetooth: hci4: command 0x0405 tx timeout [ 80.636332][ T1969] usb 1-1: config 1 has an invalid descriptor of length 170, skipping remainder of the config [ 80.638465][ T1969] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 80.640309][ T1969] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 80.643213][ T1969] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 80.644971][ T1969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.649762][ T1969] cxacru 1-1:1.0: cxacru_bind: interface has incorrect endpoints [ 80.651155][ T1969] cxacru 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 81.124631][ T5813] loop4: detected capacity change from 0 to 256 [ 81.652827][ T5834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.443'. [ 81.684611][ T5836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.687815][ T5836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.877270][ T4379] usb 1-1: USB disconnect, device number 15 [ 82.149900][ T5849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.154336][ T5849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.155554][ T5848] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 82.288640][ T5861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.452'. [ 82.290658][ T5861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.452'. [ 82.469347][ T5863] device syzkaller0 entered promiscuous mode [ 82.706863][ T5874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.455'. [ 82.936036][ T5882] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 82.998366][ T5887] loop1: detected capacity change from 0 to 256 [ 83.341658][ T4383] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 83.396670][ T5910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.404127][ T5910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.618429][ T5918] device syzkaller0 entered promiscuous mode [ 83.641480][ T4383] usb 1-1: device descriptor read/64, error -71 [ 83.739218][ T5928] netlink: 20 bytes leftover after parsing attributes in process `syz.4.471'. [ 83.771312][ T5934] netlink: 32 bytes leftover after parsing attributes in process `syz.4.474'. [ 83.911552][ T4383] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 84.061586][ T4383] usb 1-1: device descriptor read/64, error -71 [ 84.099186][ T5966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.485'. [ 84.310625][ T4383] usb usb1-port1: attempt power cycle [ 84.503466][ T5991] device syzkaller0 entered promiscuous mode [ 84.685745][ T6003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.687840][ T6003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.721570][ T4383] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 84.754110][ T4383] usb 1-1: device descriptor read/8, error -71 [ 85.080313][ T4383] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 85.675924][ T4383] usb 1-1: device descriptor read/8, error -71 [ 85.831318][ T6031] device syzkaller0 entered promiscuous mode [ 86.171108][ T4383] usb usb1-port1: unable to enumerate USB device [ 86.236883][ T6042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.238553][ T6042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.303153][ T6051] __nla_validate_parse: 3 callbacks suppressed [ 86.303161][ T6051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.515'. [ 86.305796][ T6051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.515'. [ 86.588558][ T6067] loop4: detected capacity change from 0 to 256 [ 86.842259][ T6089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.844299][ T6089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.065554][ T6091] device syzkaller0 entered promiscuous mode [ 87.191002][ T6095] loop3: detected capacity change from 0 to 256 [ 88.063673][ T6139] loop1: detected capacity change from 0 to 256 [ 88.360381][ T6155] netlink: 15143 bytes leftover after parsing attributes in process `syz.0.551'. [ 88.516565][ T6163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.519568][ T6163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.597978][ T6169] loop4: detected capacity change from 0 to 256 [ 88.919190][ T6185] capability: warning: `syz.0.560' uses deprecated v2 capabilities in a way that may be insecure [ 89.123617][ T6193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.125730][ T6193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.358479][ T6211] gadgetfs: bound to dummy_udc driver [ 89.632594][ T4380] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 89.637351][ C1] gadgetfs: connected [ 89.638534][ T6210] gadgetfs: suspended from state 3 [ 89.639588][ T6210] gadgetfs: disconnected [ 89.798377][ T6222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.799968][ T6222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.809361][ T6222] random: crng reseeded on system resumption [ 90.036736][ T6220] loop3: detected capacity change from 0 to 32768 [ 90.087129][ T6220] XFS (loop3): Mounting V5 Filesystem [ 90.114856][ T6220] XFS (loop3): Ending clean mount [ 90.518170][ T6248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.530115][ T6248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.566961][ T6253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.569007][ T6253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.611246][ T6259] netlink: 32 bytes leftover after parsing attributes in process `syz.0.581'. [ 90.613637][ T6253] loop1: detected capacity change from 0 to 4096 [ 90.873195][ T6276] SET target dimension over the limit! [ 91.192113][ T4330] XFS (loop3): Unmounting Filesystem [ 91.471084][ T6294] device syzkaller0 entered promiscuous mode [ 92.057022][ T6309] netlink: 'syz.1.595': attribute type 1 has an invalid length. [ 92.059189][ T6309] netlink: 'syz.1.595': attribute type 1 has an invalid length. [ 92.345510][ T6315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.347866][ T6315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.646680][ T6323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.649658][ T6323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.670010][ T6323] loop1: detected capacity change from 0 to 4096 [ 92.876335][ T6333] SET target dimension over the limit! [ 93.105640][ T6317] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 93.147187][ T6317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.171641][ T4383] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 93.355323][ T4383] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.357362][ T4383] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 93.360894][ T4383] usb 1-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 93.364057][ T4383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.393611][ T4383] usb 1-1: Product: syz [ 93.414750][ T4383] usb 1-1: Manufacturer: syz [ 93.416812][ T4383] usb 1-1: SerialNumber: syz [ 93.781646][ T6344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.783744][ T6344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.219905][ T6360] netlink: 'syz.4.610': attribute type 3 has an invalid length. [ 95.249397][ T6362] netlink: 'syz.4.611': attribute type 1 has an invalid length. [ 95.253847][ T6362] netlink: 'syz.4.611': attribute type 1 has an invalid length. [ 95.615697][ T22] usb 1-1: USB disconnect, device number 21 [ 95.891123][ T6374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.905404][ T6374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.177730][ T6376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.180028][ T6376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.318774][ T6376] loop4: detected capacity change from 0 to 4096 [ 96.742358][ T6381] SET target dimension over the limit! [ 97.736689][ T6397] netlink: 'syz.1.624': attribute type 1 has an invalid length. [ 97.740984][ T6397] netlink: 'syz.1.624': attribute type 1 has an invalid length. [ 97.915072][ T6404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.918266][ T6404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.329028][ T6418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.333081][ T6418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.461524][ T3902] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 98.628788][ T6430] SET target dimension over the limit! [ 98.874344][ T6432] netlink: 'syz.1.638': attribute type 1 has an invalid length. [ 98.876738][ T6432] netlink: 'syz.1.638': attribute type 1 has an invalid length. [ 98.882625][ T3902] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 98.884311][ T3902] usb 1-1: config 0 has no interface number 0 [ 98.885531][ T3902] usb 1-1: config 0 interface 41 has no altsetting 0 [ 98.888936][ T3902] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 98.890758][ T3902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.892346][ T3902] usb 1-1: Product: syz [ 98.893056][ T3902] usb 1-1: Manufacturer: syz [ 98.893967][ T3902] usb 1-1: SerialNumber: syz [ 98.895768][ T3902] usb 1-1: config 0 descriptor?? [ 99.489454][ T6455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.492738][ T6455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.506438][ T6450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.509076][ T6450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.531292][ T6450] loop3: detected capacity change from 0 to 4096 [ 99.591533][ T3902] CoreChips: probe of 1-1:0.41 failed with error -71 [ 99.625077][ T3902] usb 1-1: USB disconnect, device number 22 [ 100.307191][ T6472] netlink: 'syz.3.653': attribute type 1 has an invalid length. [ 100.309325][ T6472] netlink: 'syz.3.653': attribute type 1 has an invalid length. [ 100.544434][ T6483] SET target dimension over the limit! [ 101.247081][ T6496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.250075][ T6496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.451908][ T6504] SET target dimension over the limit! [ 102.499634][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.672'. [ 103.397562][ T6556] SET target dimension over the limit! [ 103.671623][ T22] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 103.882261][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.885756][ T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.913564][ T22] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 104.004913][ T22] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 104.013850][ T22] usb 1-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 104.017370][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.018817][ T22] usb 1-1: Product: syz [ 104.019720][ T22] usb 1-1: Manufacturer: syz [ 104.020758][ T22] usb 1-1: SerialNumber: syz [ 104.027439][ T22] kaweth 1-1:1.0: couldn't find required endpoints [ 104.114129][ T6571] device syzkaller0 entered promiscuous mode [ 104.256454][ T6568] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.260496][ T6568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.262230][ T6568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.271134][ T6568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.273344][ T6568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.275122][ T6568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.276984][ T6568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.278789][ T6568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.280869][ T6568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.284895][ T6568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.286894][ T6568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.289020][ T6568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.291245][ T6568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.294891][ T6568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.296678][ T6568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.307399][ T6575] netlink: 32 bytes leftover after parsing attributes in process `syz.3.687'. [ 104.339037][ T6577] i2c i2c-0: new_device: Missing parameters [ 104.344393][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.688'. [ 105.396046][ T6600] netlink: 16 bytes leftover after parsing attributes in process `syz.3.695'. [ 105.670514][ T6607] SET target dimension over the limit! [ 105.985769][ T6614] netlink: 32 bytes leftover after parsing attributes in process `syz.1.699'. [ 106.830765][ T24] usb 1-1: USB disconnect, device number 23 [ 106.879435][ T6630] FAULT_INJECTION: forcing a failure. [ 106.879435][ T6630] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 106.890710][ T6630] CPU: 1 PID: 6630 Comm: syz.4.705 Not tainted syzkaller #0 [ 106.892132][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 106.893960][ T6630] Call trace: [ 106.894562][ T6630] dump_backtrace+0x1c4/0x1f0 [ 106.895406][ T6630] show_stack+0x2c/0x3c [ 106.896183][ T6630] __dump_stack+0x30/0x40 [ 106.896981][ T6630] dump_stack_lvl+0xf4/0x15c [ 106.897827][ T6630] dump_stack+0x1c/0x5c [ 106.898591][ T6630] should_fail_ex+0x3cc/0x524 [ 106.899467][ T6630] should_fail_alloc_page+0x74/0xb8 [ 106.900377][ T6630] prepare_alloc_pages+0x1b8/0x4f0 [ 106.901373][ T6630] __alloc_pages+0x134/0x544 [ 106.902192][ T6630] alloc_pages+0x434/0x6fc [ 106.902976][ T6630] __get_free_pages+0x18/0x84 [ 106.903813][ T6630] kasan_populate_vmalloc_pte+0x40/0xe8 [ 106.904746][ T6630] __apply_to_page_range+0x83c/0xbf4 [ 106.905668][ T6630] apply_to_page_range+0x4c/0x64 [ 106.906567][ T6630] kasan_populate_vmalloc+0x5c/0x6c [ 106.907452][ T6630] alloc_vmap_area+0x155c/0x169c [ 106.908276][ T6630] __get_vm_area_node+0x178/0x31c [ 106.909137][ T6630] __vmalloc_node_range+0x1d4/0xe70 [ 106.910102][ T6630] kvmalloc_node+0x160/0x1d4 [ 106.910943][ T6630] xt_alloc_entry_offsets+0x50/0x60 [ 106.911916][ T6630] translate_table+0x160/0x19d0 [ 106.912813][ T6630] do_arpt_set_ctl+0x80c/0xd28 [ 106.913701][ T6630] nf_setsockopt+0x260/0x280 [ 106.914499][ T6630] ip_setsockopt+0x124/0x134 [ 106.915320][ T6630] udp_setsockopt+0xa4/0xbc [ 106.916129][ T6630] sock_common_setsockopt+0xb0/0xcc [ 106.917052][ T6630] __sys_setsockopt+0x2fc/0x50c [ 106.917907][ T6630] __arm64_sys_setsockopt+0xc0/0xdc [ 106.918813][ T6630] invoke_syscall+0x98/0x290 [ 106.919634][ T6630] el0_svc_common+0x13c/0x258 [ 106.920470][ T6630] do_el0_svc+0x5c/0x134 [ 106.921231][ T6630] el0_svc+0x58/0x128 [ 106.921974][ T6630] el0t_64_sync_handler+0x84/0xf0 [ 106.922890][ T6630] el0t_64_sync+0x18c/0x190 [ 106.997415][ T6630] syz.4.705: vmalloc error: size 7566732, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 107.000261][ T6630] CPU: 0 PID: 6630 Comm: syz.4.705 Not tainted syzkaller #0 [ 107.001550][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 107.003392][ T6630] Call trace: [ 107.004012][ T6630] dump_backtrace+0x1c4/0x1f0 [ 107.004903][ T6630] show_stack+0x2c/0x3c [ 107.005646][ T6630] __dump_stack+0x30/0x40 [ 107.006431][ T6630] dump_stack_lvl+0xf4/0x15c [ 107.007242][ T6630] dump_stack+0x1c/0x5c [ 107.008005][ T6630] warn_alloc+0x214/0x324 [ 107.008782][ T6630] __vmalloc_node_range+0x24c/0xe70 [ 107.009751][ T6630] kvmalloc_node+0x160/0x1d4 [ 107.010601][ T6630] xt_alloc_entry_offsets+0x50/0x60 [ 107.011558][ T6630] translate_table+0x160/0x19d0 [ 107.012457][ T6630] do_arpt_set_ctl+0x80c/0xd28 [ 107.013297][ T6630] nf_setsockopt+0x260/0x280 [ 107.014157][ T6630] ip_setsockopt+0x124/0x134 [ 107.014980][ T6630] udp_setsockopt+0xa4/0xbc [ 107.015807][ T6630] sock_common_setsockopt+0xb0/0xcc [ 107.016755][ T6630] __sys_setsockopt+0x2fc/0x50c [ 107.017660][ T6630] __arm64_sys_setsockopt+0xc0/0xdc [ 107.018629][ T6630] invoke_syscall+0x98/0x290 [ 107.019430][ T6630] el0_svc_common+0x13c/0x258 [ 107.020270][ T6630] do_el0_svc+0x5c/0x134 [ 107.021082][ T6630] el0_svc+0x58/0x128 [ 107.021830][ T6630] el0t_64_sync_handler+0x84/0xf0 [ 107.022769][ T6630] el0t_64_sync+0x18c/0x190 [ 107.103433][ T6642] zram0: detected capacity change from 0 to 8 [ 107.297153][ T6630] Mem-Info: [ 107.297862][ T6630] active_anon:21602 inactive_anon:0 isolated_anon:0 [ 107.297862][ T6630] active_file:17478 inactive_file:2123 isolated_file:0 [ 107.297862][ T6630] unevictable:768 dirty:220 writeback:0 [ 107.297862][ T6630] slab_reclaimable:26370 slab_unreclaimable:84689 [ 107.297862][ T6630] mapped:32632 shmem:17326 pagetables:685 [ 107.297862][ T6630] sec_pagetables:0 bounce:0 [ 107.297862][ T6630] kernel_misc_reclaimable:0 [ 107.297862][ T6630] free:1414770 free_pcp:6158 free_cma:7360 [ 107.308594][ T6630] Node 0 active_anon:86408kB inactive_anon:0kB active_file:69912kB inactive_file:8492kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:130528kB dirty:880kB writeback:0kB shmem:69304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:8632kB pagetables:2740kB sec_pagetables:0kB all_unreclaimable? no [ 107.321198][ T6630] Node 0 DMA free:3076864kB boost:0kB min:20660kB low:25824kB high:30988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 107.331323][ T6630] lowmem_reserve[]: 0 0 3550 3550 3550 [ 107.333072][ T6630] Node 0 Normal free:2581744kB boost:0kB min:24392kB low:30488kB high:36584kB reserved_highatomic:0KB active_anon:86608kB inactive_anon:0kB active_file:69912kB inactive_file:8492kB unevictable:3072kB writepending:880kB present:5242880kB managed:3639812kB mlocked:0kB bounce:0kB free_pcp:26776kB local_pcp:15060kB free_cma:0kB [ 107.341582][ T6630] lowmem_reserve[]: 0 0 0 0 0 [ 107.342789][ T6630] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 107.345419][ T6630] Node 0 Normal: 604*4kB (UME) 1010*8kB (UME) 284*16kB (UME) 596*32kB (UME) 366*64kB (UME) 151*128kB (UME) 31*256kB (UME) 11*512kB (UME) 5*1024kB (UM) 1*2048kB (E) 610*4096kB (UM) = 2596160kB [ 107.349967][ T6630] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.352259][ T6630] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 107.354416][ T6630] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 107.357531][ T6630] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 107.360550][ T6651] netlink: 32 bytes leftover after parsing attributes in process `syz.2.713'. [ 107.371517][ T6630] 37515 total pagecache pages [ 107.372505][ T6630] 0 pages in swap cache [ 107.373242][ T6630] Free swap = 124996kB [ 107.374188][ T6630] Total swap = 124996kB [ 107.375388][ T6630] 2097152 pages RAM [ 107.376087][ T6630] 0 pages HighMem/MovableOnly [ 107.377116][ T6630] 417151 pages reserved [ 107.377835][ T6630] 8192 pages cma reserved [ 107.378758][ T6630] 0 pages hwpoisoned [ 107.444245][ T6656] netlink: 'syz.4.716': attribute type 1 has an invalid length. [ 107.446520][ T6656] qfq: no options [ 107.447540][ T6656] netlink: 'syz.4.716': attribute type 1 has an invalid length. [ 107.454320][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'. [ 107.458854][ T6660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.460514][ T6660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.120943][ T6681] netlink: 32 bytes leftover after parsing attributes in process `syz.4.726'. [ 109.271700][ T6708] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.735'. [ 109.323159][ T27] audit: type=1326 audit(109.310:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.4.736" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff845792a8 code=0x0 [ 109.493542][ T6713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.495234][ T6713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.565178][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.567047][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.571384][ T6714] Mount JFS Failure: -22 [ 109.573630][ T6714] jfs_mount failed w/return code = -22 [ 110.937699][ T6735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.939371][ T6735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.009226][ T6740] netlink: 32 bytes leftover after parsing attributes in process `syz.1.746'. [ 112.064573][ T6765] netlink: 'syz.3.755': attribute type 1 has an invalid length. [ 112.067016][ T6765] netlink: 84 bytes leftover after parsing attributes in process `syz.3.755'. [ 112.325541][ T6773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.328339][ T6773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.358017][ T6773] loop3: detected capacity change from 0 to 4096 [ 113.548280][ T6811] SET target dimension over the limit! [ 113.956651][ T6819] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.775'. [ 114.718271][ T6845] netlink: 32 bytes leftover after parsing attributes in process `syz.3.786'. [ 114.851527][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 114.867257][ T6851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.868998][ T6851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.922137][ T6851] loop4: detected capacity change from 0 to 4096 [ 115.043701][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 115.046520][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 115.048773][ T24] usb 1-1: config 4 interface 0 has no altsetting 0 [ 115.052460][ T24] usb 1-1: string descriptor 0 read error: -22 [ 115.053456][ T24] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 115.054880][ T24] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 115.060889][ T24] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 115.072098][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 115.073811][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 115.075029][ T24] usb 1-1: media controller created [ 115.089169][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.282768][ T6856] SET target dimension over the limit! [ 115.491201][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 115.514314][ T24] usb 1-1: USB disconnect, device number 24 [ 115.654792][ T6864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.656746][ T6864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.904964][ T6874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.906878][ T6874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.771245][ T6886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.774391][ T6886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.793541][ T6888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.799389][ T6888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.836217][ T6886] loop4: detected capacity change from 0 to 4096 [ 117.211591][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 117.392674][ T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.394876][ T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x3 has an invalid bInterval 242, changing to 11 [ 117.397058][ T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 117.399184][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 117.400852][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.486052][ T6904] device syzkaller0 entered promiscuous mode [ 117.657245][ T6908] SET target dimension over the limit! [ 117.873207][ T24] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 117.876027][ T24] usb 1-1: USB disconnect, device number 25 [ 119.119987][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.124634][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.668493][ T6937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.671034][ T6937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.688778][ T6937] loop3: detected capacity change from 0 to 4096 [ 121.341195][ T6953] SET target dimension over the limit! [ 125.921974][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 129.379320][ T6925] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.816'. [ 129.387851][ T6960] tipc: Enabled bearer , priority 0 [ 129.390786][ T6963] tipc: Disabling bearer [ 130.561560][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.839'. [ 130.563115][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.839'. [ 130.654219][ T7000] SET target dimension over the limit! [ 131.311865][ T7008] netlink: 5 bytes leftover after parsing attributes in process `syz.0.838'. [ 131.328849][ T7008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.351763][ T7023] tipc: Enabled bearer , priority 0 [ 132.354462][ T7023] device syzkaller0 entered promiscuous mode [ 132.368454][ T7023] tipc: Resetting bearer [ 132.371537][ T7023] syzkaller0: tun_net_xmit 90 [ 132.378616][ T7022] tipc: Resetting bearer [ 132.483455][ T7022] tipc: Disabling bearer [ 132.496856][ T7030] device syzkaller0 entered promiscuous mode [ 133.174638][ T7048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.178679][ T7048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.003596][ T7064] ubi0: attaching mtd0 [ 134.007554][ T7064] ubi0: scanning is finished [ 134.008542][ T7064] ubi0: empty MTD device detected [ 134.193717][ T7064] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 134.195009][ T7064] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 134.196275][ T7064] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 134.197355][ T7064] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 134.198554][ T7064] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 134.199608][ T7064] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 134.200876][ T7064] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1578741261 [ 134.202840][ T7064] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 134.226890][ T7065] ubi0: background thread "ubi_bgt0d" started, PID 7065 [ 134.267511][ T7067] tipc: Enabled bearer , priority 0 [ 134.269099][ T7067] device syzkaller0 entered promiscuous mode [ 134.287774][ T7067] tipc: Resetting bearer [ 134.288844][ T7067] syzkaller0: tun_net_xmit 90 [ 134.290535][ T7066] tipc: Resetting bearer [ 134.332255][ T7066] tipc: Disabling bearer [ 135.185016][ T7097] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 135.198137][ T7097] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 135.441175][ T7107] tipc: Enabled bearer , priority 0 [ 135.444776][ T7107] device syzkaller0 entered promiscuous mode [ 135.571458][ C0] syzkaller0: tun_net_xmit 90 [ 135.711539][ C0] syzkaller0: tun_net_xmit 90 [ 135.754952][ T7107] tipc: Resetting bearer [ 135.756116][ T7107] syzkaller0: tun_net_xmit 90 [ 135.757968][ T7106] tipc: Resetting bearer [ 135.812035][ T7106] tipc: Disabling bearer [ 136.108311][ T7127] SET target dimension over the limit! [ 136.979227][ T7153] loop1: detected capacity change from 0 to 256 [ 137.153756][ T7181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.156628][ T7181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.660298][ T7191] netlink: 'syz.0.901': attribute type 3 has an invalid length. [ 139.041460][ T14] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 139.253977][ T14] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 139.256012][ T14] usb 1-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 139.260089][ T14] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 139.262017][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.263703][ T14] usb 1-1: Product: syz [ 139.264443][ T14] usb 1-1: Manufacturer: syz [ 139.265401][ T14] usb 1-1: SerialNumber: syz [ 139.553023][ T14] usb 1-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -2 [ 139.554612][ T14] usb 1-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 139.978309][ T7153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.111325][ T7228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.121192][ T7228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.690188][ T7240] SET target dimension over the limit! [ 141.397786][ T7248] loop4: detected capacity change from 0 to 4096 [ 141.791266][ T112] usb 1-1: USB disconnect, device number 26 [ 142.169355][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.928'. [ 142.694222][ T7291] SET target dimension over the limit! [ 143.176409][ T7311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.180734][ T7311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.273823][ T7315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.941'. [ 143.367506][ T7319] tipc: Enabling of bearer rejected, failed to enable media [ 143.585670][ T7330] loop3: detected capacity change from 0 to 256 [ 143.851055][ T7345] SET target dimension over the limit! [ 144.173561][ T7349] [U] t[*?1+s{DUEex0f'iѠ [ 144.175487][ T7348] [U] d [ 144.229605][ T7353] device syzkaller0 entered promiscuous mode [ 144.560420][ T7362] x_tables: ip6_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 40 [ 146.559771][ T7330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.611739][ T4331] Bluetooth: hci3: command 0x0406 tx timeout [ 153.612928][ T4331] Bluetooth: hci1: command 0x0406 tx timeout [ 153.613942][ T4331] Bluetooth: hci2: command 0x0406 tx timeout [ 153.614956][ T4331] Bluetooth: hci0: command 0x0406 tx timeout [ 153.615995][ T4331] Bluetooth: hci4: command 0x0406 tx timeout [ 155.339770][ T7377] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.961'. [ 155.732226][ T7412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.734354][ T7412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.850081][ T7411] FAULT_INJECTION: forcing a failure. [ 155.850081][ T7411] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 155.852641][ T7411] CPU: 1 PID: 7411 Comm: syz.3.971 Not tainted syzkaller #0 [ 155.853944][ T7411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 155.855654][ T7411] Call trace: [ 155.856215][ T7411] dump_backtrace+0x1c4/0x1f0 [ 155.857121][ T7411] show_stack+0x2c/0x3c [ 155.857956][ T7411] __dump_stack+0x30/0x40 [ 155.858731][ T7411] dump_stack_lvl+0xf4/0x15c [ 155.859545][ T7411] dump_stack+0x1c/0x5c [ 155.860358][ T7411] should_fail_ex+0x3cc/0x524 [ 155.861180][ T7411] should_fail_alloc_page+0x74/0xb8 [ 155.862199][ T7411] prepare_alloc_pages+0x1b8/0x4f0 [ 155.863114][ T7411] __alloc_pages+0x134/0x544 [ 155.863935][ T7411] alloc_pages+0x434/0x6fc [ 155.864719][ T7411] append_pipe+0x1f4/0x51c [ 155.865521][ T7411] pipe_zero+0xbc/0x1a8 [ 155.866301][ T7411] iov_iter_zero+0x2dc/0xea8 [ 155.867078][ T7411] shmem_file_read_iter+0x540/0x954 [ 155.867977][ T7411] generic_file_splice_read+0x180/0x454 [ 155.868937][ T7411] splice_direct_to_actor+0x33c/0x9e4 [ 155.869866][ T7411] do_splice_direct+0x168/0x25c [ 155.870693][ T7411] do_sendfile+0x460/0xc8c [ 155.871455][ T7411] __arm64_sys_sendfile64+0x138/0x374 [ 155.872403][ T7411] invoke_syscall+0x98/0x290 [ 155.873193][ T7411] el0_svc_common+0x13c/0x258 [ 155.874025][ T7411] do_el0_svc+0x5c/0x134 [ 155.874782][ T7411] el0_svc+0x58/0x128 [ 155.875505][ T7411] el0t_64_sync_handler+0x84/0xf0 [ 155.876405][ T7411] el0t_64_sync+0x18c/0x190 [ 156.007515][ T7416] loop3: detected capacity change from 0 to 256 [ 156.660135][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 156.662694][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 156.664729][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x195e instead [ 156.666979][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x3ded instead [ 156.669139][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 156.671153][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 156.673065][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 156.674976][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 156.676875][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 156.678799][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 156.680877][ T7430] jffs2: Further such events for this erase block will not be printed [ 156.682984][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 156.685664][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 156.687616][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x195e instead [ 156.689433][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x3ded instead [ 156.692200][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 156.694315][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 156.696231][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 156.698474][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 156.700744][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 156.703064][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 156.705345][ T7430] jffs2: Further such events for this erase block will not be printed [ 156.707151][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 156.709133][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 156.711402][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x195e instead [ 156.713538][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x3ded instead [ 156.715476][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 156.717394][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 156.719289][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x195e instead [ 156.721153][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x3ded instead [ 156.723240][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 156.725076][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 156.726988][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x195e instead [ 156.728756][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x3ded instead [ 156.730638][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 156.733344][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 156.735407][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x195e instead [ 156.737631][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x3ded instead [ 156.739879][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 156.743137][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 156.745026][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x195e instead [ 156.747061][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x3ded instead [ 156.748946][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 156.750752][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 156.752598][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x195e instead [ 156.755434][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x3ded instead [ 156.757465][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 156.759684][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 156.761938][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x195e instead [ 156.764166][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x3ded instead [ 156.766407][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 156.768618][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 156.770613][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x195e instead [ 156.772864][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x3ded instead [ 156.775094][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 156.777317][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 156.779381][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x195e instead [ 156.781596][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x3ded instead [ 156.783739][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 156.785582][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 156.788001][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x195e instead [ 156.789813][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x3ded instead [ 156.791590][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 156.793503][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 156.795736][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x195e instead [ 156.797862][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x3ded instead [ 156.799912][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 156.802110][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 156.803835][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x195e instead [ 156.805799][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x3ded instead [ 156.807610][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 156.809506][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 156.811343][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x195e instead [ 156.813318][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x3ded instead [ 156.815253][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 156.817359][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 156.819391][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x195e instead [ 156.821232][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x3ded instead [ 156.823191][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 156.825141][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 156.827000][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x195e instead [ 156.829219][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x3ded instead [ 156.831576][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 156.833616][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 156.835730][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x195e instead [ 156.837769][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x3ded instead [ 156.839617][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 156.841392][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 156.843510][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x195e instead [ 156.845494][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x3ded instead [ 156.847706][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 156.849873][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 156.852179][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x195e instead [ 156.854089][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x3ded instead [ 156.855900][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 156.857753][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 156.859535][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x195e instead [ 156.861381][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x3ded instead [ 156.863651][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 156.865549][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 156.867441][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x195e instead [ 156.869369][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x3ded instead [ 156.871272][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 156.873429][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 156.875313][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x195e instead [ 156.877146][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x3ded instead [ 156.879010][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 156.881225][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 156.883594][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x195e instead [ 156.885880][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x3ded instead [ 156.887928][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 156.890128][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 156.892457][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x195e instead [ 156.894691][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x3ded instead [ 156.896809][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 156.899019][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 156.901056][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x195e instead [ 156.903177][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x3ded instead [ 156.905455][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 156.907639][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 156.909754][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x195e instead [ 156.911853][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x3ded instead [ 156.913856][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 156.915836][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 156.917778][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x195e instead [ 156.919594][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x3ded instead [ 156.921377][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 156.923231][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 156.925056][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x195e instead [ 156.926877][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x3ded instead [ 156.928726][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 156.930943][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 156.932916][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x195e instead [ 156.934969][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x3ded instead [ 156.936969][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 156.938964][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 156.940972][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x195e instead [ 156.943071][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x3ded instead [ 156.945242][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 156.947381][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 156.949351][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x195e instead [ 156.951630][ T7430] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x3ded instead [ 156.953800][ T7430] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 156.955702][ T7430] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 156.989252][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.992772][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.510478][ T7455] netlink: 40 bytes leftover after parsing attributes in process `syz.1.982'. [ 159.008431][ T7416] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.057465][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 159.059430][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 159.061407][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x195e instead [ 159.065181][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x3ded instead [ 159.067164][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 159.068965][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 159.070820][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 159.074205][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 159.076411][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 159.078479][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 159.080482][ T7465] jffs2: Further such events for this erase block will not be printed [ 159.083360][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 159.085385][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 159.087492][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x195e instead [ 159.089462][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x3ded instead [ 159.091338][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 159.094164][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 159.096248][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 159.098177][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 159.100453][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 159.103133][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 159.105133][ T7465] jffs2: Further such events for this erase block will not be printed [ 159.106944][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 159.109151][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 159.111376][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x195e instead [ 159.113971][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x3ded instead [ 159.116099][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 159.118133][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 159.120395][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x195e instead [ 159.123232][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x3ded instead [ 159.125074][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 159.127191][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 159.129270][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x195e instead [ 159.131309][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x3ded instead [ 159.134395][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 159.136218][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 159.139202][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x195e instead [ 159.141363][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x3ded instead [ 159.143771][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 159.145832][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 159.147774][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x195e instead [ 159.150056][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x3ded instead [ 159.153128][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 159.155195][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 159.157216][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x195e instead [ 159.159217][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x3ded instead [ 159.162612][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 159.164577][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 159.166873][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x195e instead [ 159.169198][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x3ded instead [ 159.171803][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 159.173855][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 159.175931][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x195e instead [ 159.178189][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x3ded instead [ 159.180618][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 159.183296][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 159.185244][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x195e instead [ 159.187109][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x3ded instead [ 159.188946][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 159.190929][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 159.193195][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x195e instead [ 159.195017][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x3ded instead [ 159.196994][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 159.199089][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 159.201707][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x195e instead [ 159.203824][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x3ded instead [ 159.206025][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 159.207875][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 159.209860][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x195e instead [ 159.212385][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x3ded instead [ 159.214442][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 159.216372][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 159.218280][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x195e instead [ 159.220562][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x3ded instead [ 159.223418][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 159.225337][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 159.227624][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x195e instead [ 159.229697][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x3ded instead [ 159.232068][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 159.234143][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 159.236149][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x195e instead [ 159.238146][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x3ded instead [ 159.240418][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 159.242818][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 159.245119][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x195e instead [ 159.247207][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x3ded instead [ 159.249443][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 159.251762][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 159.253773][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x195e instead [ 159.255789][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x3ded instead [ 159.257938][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 159.260096][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 159.262317][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x195e instead [ 159.264501][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x3ded instead [ 159.266537][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 159.268315][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 159.270458][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x195e instead [ 159.272715][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x3ded instead [ 159.274762][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 159.277056][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 159.279279][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x195e instead [ 159.281478][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x3ded instead [ 159.283810][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 159.285901][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 159.288051][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x195e instead [ 159.290224][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x3ded instead [ 159.292567][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 159.294632][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 159.296624][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x195e instead [ 159.298506][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x3ded instead [ 159.300328][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 159.302287][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 159.304479][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x195e instead [ 159.306385][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x3ded instead [ 159.308245][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 159.310300][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 159.315009][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x195e instead [ 159.316758][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x3ded instead [ 159.318667][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 159.320727][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 159.323222][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x195e instead [ 159.325346][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x3ded instead [ 159.327403][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 159.329257][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 159.331964][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x195e instead [ 159.334038][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x3ded instead [ 159.344296][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 159.346965][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 159.348847][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x195e instead [ 159.350723][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x3ded instead [ 159.353262][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 159.373115][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 159.375249][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x195e instead [ 159.378448][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x3ded instead [ 159.380462][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 159.382759][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 159.384756][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x195e instead [ 159.386843][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x3ded instead [ 159.389178][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 159.391176][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 159.396155][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x195e instead [ 159.398168][ T7465] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x3ded instead [ 159.400474][ T7465] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 159.403579][ T7465] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 160.621004][ T7484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.625489][ T7484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.675661][ T7504] tipc: Enabling of bearer rejected, failed to enable media [ 161.385087][ T7514] loop4: detected capacity change from 0 to 256 [ 162.071401][ T7466] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 162.640955][ T7542] tipc: Enabling of bearer rejected, failed to enable media [ 163.228311][ T7563] zram: Cannot change disksize for initialized device [ 163.776182][ T7575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.778242][ T7575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.135118][ T7589] tipc: Enabling of bearer rejected, failed to enable media [ 164.703239][ T7605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.705923][ T7605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.748667][ T7607] FAULT_INJECTION: forcing a failure. [ 164.748667][ T7607] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 164.751980][ T7607] CPU: 0 PID: 7607 Comm: syz.1.1031 Not tainted syzkaller #0 [ 164.753303][ T7607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 164.755156][ T7607] Call trace: [ 164.755760][ T7607] dump_backtrace+0x1c4/0x1f0 [ 164.756632][ T7607] show_stack+0x2c/0x3c [ 164.757320][ T7607] __dump_stack+0x30/0x40 [ 164.758088][ T7607] dump_stack_lvl+0xf4/0x15c [ 164.758937][ T7607] dump_stack+0x1c/0x5c [ 164.759676][ T7607] should_fail_ex+0x3cc/0x524 [ 164.760529][ T7607] should_fail_alloc_page+0x74/0xb8 [ 164.761456][ T7607] prepare_alloc_pages+0x1b8/0x4f0 [ 164.762350][ T7607] __alloc_pages+0x134/0x544 [ 164.763126][ T7607] alloc_pages+0x434/0x6fc [ 164.763908][ T7607] __get_free_pages+0x18/0x84 [ 164.764744][ T7607] kasan_populate_vmalloc_pte+0x40/0xe8 [ 164.765718][ T7607] __apply_to_page_range+0x83c/0xbf4 [ 164.766661][ T7607] apply_to_page_range+0x4c/0x64 [ 164.767557][ T7607] kasan_populate_vmalloc+0x5c/0x6c [ 164.768503][ T7607] alloc_vmap_area+0x155c/0x169c [ 164.769405][ T7607] __get_vm_area_node+0x178/0x31c [ 164.770330][ T7607] __vmalloc_node_range+0x1d4/0xe70 [ 164.771247][ T7607] kvmalloc_node+0x160/0x1d4 [ 164.772057][ T7607] xt_alloc_entry_offsets+0x50/0x60 [ 164.772987][ T7607] translate_table+0x160/0x19d0 [ 164.773803][ T7607] do_arpt_set_ctl+0x80c/0xd28 [ 164.774671][ T7607] nf_setsockopt+0x260/0x280 [ 164.775501][ T7607] ip_setsockopt+0x124/0x134 [ 164.776296][ T7607] udp_setsockopt+0xa4/0xbc [ 164.777070][ T7607] sock_common_setsockopt+0xb0/0xcc [ 164.777941][ T7607] __sys_setsockopt+0x2fc/0x50c [ 164.778793][ T7607] __arm64_sys_setsockopt+0xc0/0xdc [ 164.779724][ T7607] invoke_syscall+0x98/0x290 [ 164.780532][ T7607] el0_svc_common+0x13c/0x258 [ 164.781359][ T7607] do_el0_svc+0x5c/0x134 [ 164.782123][ T7607] el0_svc+0x58/0x128 [ 164.782843][ T7607] el0t_64_sync_handler+0x84/0xf0 [ 164.783730][ T7607] el0t_64_sync+0x18c/0x190 [ 164.789931][ T7607] syz.1.1031: vmalloc error: size 7566732, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 164.793059][ T7607] CPU: 0 PID: 7607 Comm: syz.1.1031 Not tainted syzkaller #0 [ 164.794388][ T7607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 164.796253][ T7607] Call trace: [ 164.796859][ T7607] dump_backtrace+0x1c4/0x1f0 [ 164.797693][ T7607] show_stack+0x2c/0x3c [ 164.798427][ T7607] __dump_stack+0x30/0x40 [ 164.799232][ T7607] dump_stack_lvl+0xf4/0x15c [ 164.800083][ T7607] dump_stack+0x1c/0x5c [ 164.800861][ T7607] warn_alloc+0x214/0x324 [ 164.801637][ T7607] __vmalloc_node_range+0x24c/0xe70 [ 164.802534][ T7607] kvmalloc_node+0x160/0x1d4 [ 164.803325][ T7607] xt_alloc_entry_offsets+0x50/0x60 [ 164.804234][ T7607] translate_table+0x160/0x19d0 [ 164.805073][ T7607] do_arpt_set_ctl+0x80c/0xd28 [ 164.805936][ T7607] nf_setsockopt+0x260/0x280 [ 164.806739][ T7607] ip_setsockopt+0x124/0x134 [ 164.807581][ T7607] udp_setsockopt+0xa4/0xbc [ 164.808411][ T7607] sock_common_setsockopt+0xb0/0xcc [ 164.809317][ T7607] __sys_setsockopt+0x2fc/0x50c [ 164.810146][ T7607] __arm64_sys_setsockopt+0xc0/0xdc [ 164.811089][ T7607] invoke_syscall+0x98/0x290 [ 164.811926][ T7607] el0_svc_common+0x13c/0x258 [ 164.812781][ T7607] do_el0_svc+0x5c/0x134 [ 164.813539][ T7607] el0_svc+0x58/0x128 [ 164.814224][ T7607] el0t_64_sync_handler+0x84/0xf0 [ 164.815110][ T7607] el0t_64_sync+0x18c/0x190 [ 164.819810][ T7607] Mem-Info: [ 164.820479][ T7607] active_anon:40679 inactive_anon:0 isolated_anon:0 [ 164.820479][ T7607] active_file:21783 inactive_file:2149 isolated_file:0 [ 164.820479][ T7607] unevictable:768 dirty:133 writeback:0 [ 164.820479][ T7607] slab_reclaimable:19182 slab_unreclaimable:90852 [ 164.820479][ T7607] mapped:51652 shmem:36484 pagetables:754 [ 164.820479][ T7607] sec_pagetables:0 bounce:0 [ 164.820479][ T7607] kernel_misc_reclaimable:0 [ 164.820479][ T7607] free:1394519 free_pcp:2258 free_cma:7360 [ 164.830015][ T7607] Node 0 active_anon:162816kB inactive_anon:0kB active_file:87132kB inactive_file:8596kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:193808kB dirty:532kB writeback:0kB shmem:146036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:8960kB pagetables:3016kB sec_pagetables:0kB all_unreclaimable? no [ 164.839135][ T7607] Node 0 DMA free:3076864kB boost:0kB min:20660kB low:25824kB high:30988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 164.845028][ T7607] lowmem_reserve[]: 0 0 3550 3550 3550 [ 164.846220][ T7607] Node 0 Normal free:2501212kB boost:0kB min:24392kB low:30488kB high:36584kB reserved_highatomic:0KB active_anon:162816kB inactive_anon:0kB active_file:87132kB inactive_file:8596kB unevictable:3072kB writepending:532kB present:5242880kB managed:3639812kB mlocked:0kB bounce:0kB free_pcp:9432kB local_pcp:7148kB free_cma:0kB [ 164.852444][ T7607] lowmem_reserve[]: 0 0 0 0 0 [ 164.853277][ T7607] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 164.856121][ T7607] Node 0 Normal: 509*4kB (UME) 597*8kB (UE) 374*16kB (UME) 185*32kB (UE) 167*64kB (UME) 165*128kB (UE) 103*256kB (UE) 55*512kB (UME) 6*1024kB (UME) 3*2048kB (UME) 582*4096kB (UM) = 2501212kB [ 164.859374][ T7607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.861031][ T7607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 164.862956][ T7607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 164.864815][ T7607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 164.866759][ T7607] 57799 total pagecache pages [ 164.867649][ T7607] 0 pages in swap cache [ 164.868562][ T7607] Free swap = 124996kB [ 164.869328][ T7607] Total swap = 124996kB [ 164.870222][ T7607] 2097152 pages RAM [ 164.870952][ T7607] 0 pages HighMem/MovableOnly [ 164.872655][ T7607] 417151 pages reserved [ 164.873351][ T7607] 8192 pages cma reserved [ 164.874255][ T7607] 0 pages hwpoisoned [ 165.136416][ T7628] tipc: Enabling of bearer rejected, failed to enable media [ 167.005706][ T27] audit: type=1326 audit(166.990:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.2.1050" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f792a8 code=0x7ffc0000 [ 167.010038][ T27] audit: type=1326 audit(166.990:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.2.1050" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f792a8 code=0x7ffc0000 [ 167.029346][ T27] audit: type=1326 audit(166.990:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.2.1050" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f792a8 code=0x7ffc0000 [ 167.037003][ T7668] tipc: Enabling of bearer rejected, failed to enable media [ 167.041748][ T27] audit: type=1326 audit(166.990:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.2.1050" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f792a8 code=0x7ffc0000 [ 167.045653][ T27] audit: type=1326 audit(166.990:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.2.1050" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffffb9f792a8 code=0x7ffc0000 [ 167.049606][ T27] audit: type=1326 audit(166.990:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.2.1050" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f792a8 code=0x7ffc0000 [ 167.061784][ T27] audit: type=1326 audit(166.990:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.2.1050" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f792a8 code=0x7ffc0000 [ 167.065953][ T27] audit: type=1326 audit(166.990:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.2.1050" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffb9f792a8 code=0x7ffc0000 [ 167.070028][ T27] audit: type=1326 audit(166.990:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.2.1050" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffb9f792a8 code=0x7ffc0000 [ 167.333748][ T7684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.336216][ T7684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.876940][ T7711] tipc: Enabling of bearer rejected, failed to enable media [ 172.154098][ T7717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.430710][ T7774] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.1084'. [ 172.470137][ T7778] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1086'. [ 172.651358][ T7793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.653498][ T7793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.692334][ T7796] tipc: Enabling of bearer rejected, failed to enable media [ 172.779690][ T7804] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.1097'. [ 172.960137][ T7819] loop4: detected capacity change from 0 to 32768 [ 173.019858][ T7819] XFS (loop4): Mounting V5 Filesystem [ 173.027678][ T7831] tipc: Enabling of bearer rejected, failed to enable media [ 173.055466][ T7819] XFS (loop4): Ending clean mount [ 173.741859][ T4343] XFS (loop4): Unmounting Filesystem [ 173.801313][ T7855] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.1111'. [ 174.159879][ T7861] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1114'. [ 174.206963][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 174.211072][ T7858] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1114'. [ 174.222329][ T7858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.224529][ T7858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.279711][ T7861] overlayfs: failed to resolve './file1': -2 [ 174.423507][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1114'. [ 174.427398][ T7871] tipc: Enabled bearer , priority 0 [ 174.430889][ T7869] tipc: Resetting bearer [ 174.435672][ T7868] tipc: Disabling bearer [ 174.665280][ T7890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.668231][ T7890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.005483][ T7895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.007850][ T7895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.270789][ T7903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.274455][ T7903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.355772][ T7907] device syzkaller0 entered promiscuous mode [ 175.800983][ T7919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.802854][ T7919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.542460][ T7937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1143'. [ 176.632759][ T7939] loop3: detected capacity change from 0 to 32768 [ 176.660585][ T7954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.675209][ T7939] XFS (loop3): Mounting V5 Filesystem [ 176.678817][ T7954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.695338][ T7939] XFS (loop3): Ending clean mount [ 176.717836][ T7960] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.1149'. [ 177.433906][ T4330] XFS (loop3): Unmounting Filesystem [ 178.233380][ T7980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.236373][ T7980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.348248][ T7991] device syzkaller0 entered promiscuous mode [ 179.212814][ T8007] tmpfs: Unknown parameter 'usrquota' [ 179.241777][ T7921] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 179.437030][ T4379] libceph: connect (1)[c::]:6789 error -101 [ 179.438629][ T4379] libceph: mon0 (1)[c::]:6789 connect error [ 179.523813][ T8007] ceph: No mds server is up or the cluster is laggy [ 179.535982][ T8020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.537747][ T8020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.588625][ T8022] loop1: detected capacity change from 0 to 4096 [ 179.618559][ T8026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.620189][ T8026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.623791][ T8059] loop1: detected capacity change from 0 to 32768 [ 180.784041][ T8059] XFS (loop1): Mounting V5 Filesystem [ 180.804796][ T8059] XFS (loop1): Ending clean mount [ 181.400037][ T4329] XFS (loop1): Unmounting Filesystem [ 183.143046][ T8048] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.220176][ T8091] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.1189'. [ 183.255281][ T8098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.256899][ T8098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.301382][ T8095] loop3: detected capacity change from 0 to 4096 [ 183.339240][ T8105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.345277][ T8105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.113023][ T8116] 9pnet_fd: Insufficient options for proto=fd [ 184.172828][ T27] audit: type=1326 audit(184.160:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8128 comm="syz.2.1202" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f792a8 code=0x7ffc0000 [ 184.178800][ T27] audit: type=1326 audit(184.160:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8128 comm="syz.2.1202" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f792a8 code=0x7ffc0000 [ 184.191931][ T27] audit: type=1326 audit(184.160:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8128 comm="syz.2.1202" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f792a8 code=0x7ffc0000 [ 184.196193][ T27] audit: type=1326 audit(184.160:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8128 comm="syz.2.1202" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffffb9f792a8 code=0x7ffc0000 [ 184.200675][ T27] audit: type=1326 audit(184.160:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8128 comm="syz.2.1202" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f792a8 code=0x7ffc0000 [ 184.210746][ T27] audit: type=1326 audit(184.160:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8128 comm="syz.2.1202" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f792a8 code=0x7ffc0000 [ 184.217308][ T27] audit: type=1326 audit(184.160:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8128 comm="syz.2.1202" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f792a8 code=0x7ffc0000 [ 184.221742][ T27] audit: type=1326 audit(184.160:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8128 comm="syz.2.1202" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f792a8 code=0x7ffc0000 [ 184.226158][ T27] audit: type=1326 audit(184.170:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8128 comm="syz.2.1202" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb9f5c16c code=0x7ffc0000 [ 184.240426][ T27] audit: type=1326 audit(184.170:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8128 comm="syz.2.1202" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f792a8 code=0x7ffc0000 [ 184.412563][ T8140] SET target dimension over the limit! [ 185.087441][ T8148] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1211'. [ 185.089323][ T8148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.127640][ T8154] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1212'. [ 185.308285][ T8163] device syzkaller0 entered promiscuous mode [ 185.804410][ T8184] tmpfs: Unknown parameter 'usrquota' [ 186.010304][ T4379] libceph: connect (1)[c::]:6789 error -101 [ 186.011623][ T4379] libceph: mon0 (1)[c::]:6789 connect error [ 186.190473][ T8194] SET target dimension over the limit! [ 186.457563][ T8184] ceph: No mds server is up or the cluster is laggy [ 186.777160][ T1969] libceph: connect (1)[c::]:6789 error -101 [ 186.784760][ T1969] libceph: mon0 (1)[c::]:6789 connect error [ 186.920030][ T4348] Bluetooth: hci0: unexpected subevent 0x19 length: 25 < 28 [ 186.945597][ T8213] device syzkaller0 entered promiscuous mode [ 187.007627][ T8217] device vlan2 entered promiscuous mode [ 187.010603][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1233'. [ 187.013136][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1233'. [ 187.015114][ T8217] device hsr_slave_0 left promiscuous mode [ 187.066460][ T8223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.069052][ T8223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.114875][ T8225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.116727][ T8225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.370497][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.526243][ T8259] tmpfs: Unknown parameter 'usrquota' [ 188.782894][ T4442] libceph: connect (1)[c::]:6789 error -101 [ 188.784110][ T4442] libceph: mon0 (1)[c::]:6789 connect error [ 189.042221][ T4442] libceph: connect (1)[c::]:6789 error -101 [ 189.043461][ T4442] libceph: mon0 (1)[c::]:6789 connect error [ 189.328728][ T8259] ceph: No mds server is up or the cluster is laggy [ 189.725576][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1258'. [ 189.727475][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1258'. [ 190.912659][ T8316] device syzkaller0 entered promiscuous mode [ 190.919627][ T8320] device syzkaller0 entered promiscuous mode [ 192.229575][ T8358] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1287'. [ 192.236276][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'. [ 192.246044][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'. [ 192.291075][ T8364] device syzkaller0 entered promiscuous mode [ 193.267201][ T8376] tmpfs: Unknown parameter 'usrquota' [ 193.563628][ T8389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.565336][ T8389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.584911][ T8386] SET target dimension over the limit! [ 193.604866][ T8392] input: syz1 as /devices/virtual/input/input8 [ 194.123163][ T8398] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1292'. [ 194.293511][ T8406] FAULT_INJECTION: forcing a failure. [ 194.293511][ T8406] name failslab, interval 1, probability 0, space 0, times 1 [ 194.296112][ T8406] CPU: 1 PID: 8406 Comm: syz.3.1294 Not tainted syzkaller #0 [ 194.297459][ T8406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 194.299334][ T8406] Call trace: [ 194.299960][ T8406] dump_backtrace+0x1c4/0x1f0 [ 194.300842][ T8406] show_stack+0x2c/0x3c [ 194.301630][ T8406] __dump_stack+0x30/0x40 [ 194.302454][ T8406] dump_stack_lvl+0xf4/0x15c [ 194.303337][ T8406] dump_stack+0x1c/0x5c [ 194.304118][ T8406] should_fail_ex+0x3cc/0x524 [ 194.305016][ T8406] __should_failslab+0xc0/0x11c [ 194.305962][ T8406] should_failslab+0x10/0x28 [ 194.306836][ T8406] slab_pre_alloc_hook+0x6c/0x31c [ 194.307816][ T8406] kmem_cache_alloc_lru+0x60/0x284 [ 194.308765][ T8406] sock_alloc_inode+0x2c/0xcc [ 194.309642][ T8406] new_inode_pseudo+0x68/0x1cc [ 194.310551][ T8406] __sock_create+0x138/0x8a8 [ 194.311398][ T8406] __sys_socket+0xc0/0x1b0 [ 194.312231][ T8406] __arm64_sys_socket+0x7c/0x94 [ 194.313153][ T8406] invoke_syscall+0x98/0x290 [ 194.313988][ T8406] el0_svc_common+0x13c/0x258 [ 194.314835][ T8406] do_el0_svc+0x5c/0x134 [ 194.315611][ T8406] el0_svc+0x58/0x128 [ 194.316341][ T8406] el0t_64_sync_handler+0x84/0xf0 [ 194.317227][ T8406] el0t_64_sync+0x18c/0x190 [ 194.325983][ T8406] socket: no more sockets [ 194.948029][ T8419] device syzkaller0 entered promiscuous mode [ 195.070013][ T8429] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1303'. [ 195.116987][ T8434] device syzkaller0 entered promiscuous mode [ 195.123307][ T8431] loop1: detected capacity change from 0 to 4096 [ 202.722377][ T14] usb 1-1: Direct firmware load for htc_9271.fw failed with error -2 [ 202.723869][ T14] usb 1-1: Falling back to sysfs fallback for: htc_9271.fw [ 206.764056][ T8441] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.1306'. [ 206.772001][ T8478] device syzkaller0 entered promiscuous mode [ 207.429966][ T8535] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1327'. [ 207.502730][ T8542] netlink: 'syz.0.1329': attribute type 1 has an invalid length. [ 207.506883][ T8542] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1329'. [ 207.510082][ T8542] netlink: 'syz.0.1329': attribute type 1 has an invalid length. [ 207.532742][ T8543] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.1328'. [ 207.543076][ T8545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.545498][ T8545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.620390][ T8573] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1339'. [ 209.108762][ T8584] ubi: mtd0 is already attached to ubi0 [ 209.944951][ T8615] input: syz0 as /devices/virtual/input/input9 [ 210.391938][ T8634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.400666][ T8634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.405600][ T8634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.413682][ T8634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.001341][ T8655] Bluetooth: MGMT ver 1.22 [ 211.559355][ T8684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1377'. [ 211.604926][ T8689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.606611][ T8689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.651024][ T4348] Bluetooth: hci4: unexpected cc 0x080c length: 1 < 5 [ 212.374206][ T8730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1395'. [ 212.434160][ T8734] nvme_rdma: malformed address passed: 1:4420 [ 214.667263][ T8793] loop8: detected capacity change from 0 to 7 [ 214.761820][ T8793] Dev loop8: unable to read RDB block 7 [ 214.763581][ T8793] loop8: unable to read partition table [ 214.772548][ T8790] loop1: detected capacity change from 0 to 32768 [ 214.781797][ T8793] loop8: partition table beyond EOD, truncated [ 214.782981][ T8793] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 215.262525][ T8790] XFS (loop1): Mounting V5 Filesystem [ 215.278393][ T8790] XFS (loop1): Ending clean mount [ 215.766068][ T4329] XFS (loop1): Unmounting Filesystem [ 215.782044][ T8827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1426'. [ 215.808497][ T8824] device syzkaller0 entered promiscuous mode [ 215.933292][ T8835] SET target dimension over the limit! [ 216.241100][ T8846] loop8: detected capacity change from 0 to 7 [ 216.244239][ T8846] Dev loop8: unable to read RDB block 7 [ 216.245295][ T8846] loop8: unable to read partition table [ 216.246275][ T8846] loop8: partition table beyond EOD, truncated [ 216.247593][ T8846] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 216.391597][ T8850] loop4: detected capacity change from 0 to 32768 [ 216.463861][ T8850] XFS (loop4): Mounting V5 Filesystem [ 217.729654][ T8850] XFS (loop4): Ending clean mount [ 217.827046][ T8880] SET target dimension over the limit! [ 218.198278][ T4343] XFS (loop4): Unmounting Filesystem [ 218.287808][ T8896] netlink: 'syz.3.1446': attribute type 1 has an invalid length. [ 218.289221][ T8896] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1446'. [ 219.097678][ T8910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.114452][ T8910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.154780][ T8910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.160831][ T8910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.175309][ T4428] tipc: Subscription rejected, illegal request [ 220.640479][ T8933] loop4: detected capacity change from 0 to 32768 [ 220.676798][ T8933] XFS (loop4): Mounting V5 Filesystem [ 220.699093][ T8940] device syzkaller0 entered promiscuous mode [ 220.712339][ T8933] XFS (loop4): Ending clean mount [ 222.350070][ T4343] XFS (loop4): Unmounting Filesystem [ 222.630891][ T8991] device syzkaller0 entered promiscuous mode [ 223.273128][ T9003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.628030][ T9030] netlink: 15143 bytes leftover after parsing attributes in process `syz.1.1484'. [ 223.728763][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1485'. [ 223.753411][ T9033] bridge1: port 1(dummy0) entered blocking state [ 223.754948][ T9033] bridge1: port 1(dummy0) entered disabled state [ 223.758959][ T9033] device dummy0 entered promiscuous mode [ 223.765009][ T9033] netlink: 'syz.1.1485': attribute type 10 has an invalid length. [ 223.766490][ T9033] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1485'. [ 223.775488][ T9033] bridge1: port 1(dummy0) entered blocking state [ 223.776761][ T9033] bridge1: port 1(dummy0) entered forwarding state [ 223.782847][ T9033] bridge1: port 1(dummy0) entered disabled state [ 224.028930][ T9047] device syzkaller0 entered promiscuous mode [ 224.462504][ T9071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1501'. [ 225.276321][ T9077] SET target dimension over the limit! [ 225.637617][ T9096] ubi: mtd0 is already attached to ubi0 [ 225.891373][ T9098] netlink: 'syz.0.1510': attribute type 1 has an invalid length. [ 225.909211][ T9098] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.946689][ T9098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.948265][ T9098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.956464][ T9098] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.957959][ T9098] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.968030][ T9098] bond1: (slave geneve2): making interface the new active one [ 225.974122][ T9098] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 225.977332][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 226.027607][ T9110] netlink: 15143 bytes leftover after parsing attributes in process `syz.1.1515'. [ 226.280768][ T9119] SET target dimension over the limit! [ 227.190214][ T9138] ip_tables: iptables: counters copy to user failed while replacing table [ 227.403078][ T9149] ------------[ cut here ]------------ [ 227.404135][ T9149] WARNING: CPU: 0 PID: 9149 at net/netfilter/nft_socket.c:220 nft_socket_init+0x2a4/0x360 [ 227.405852][ T9149] Modules linked in: [ 227.406563][ T9149] CPU: 0 PID: 9149 Comm: syz.2.1528 Not tainted syzkaller #0 [ 227.407926][ T9149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 227.409684][ T9149] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 227.411106][ T9149] pc : nft_socket_init+0x2a4/0x360 [ 227.412086][ T9149] lr : nft_socket_init+0x2a4/0x360 [ 227.413051][ T9149] sp : ffff800021357190 [ 227.413761][ T9149] x29: ffff800021357190 x28: ffff6000201f1000 x27: dfff800000000000 [ 227.415144][ T9149] x26: ffff0000ca053f22 x25: 1fffe000201f1004 x24: dfff800000000000 [ 227.416585][ T9149] x23: 0000000000000001 x22: 0000000000000100 x21: ffff000100f88020 [ 227.417943][ T9149] x20: ffff0000ca053f18 x19: ffff8000213572e0 x18: 0000000000000000 [ 227.419367][ T9149] x17: 00000000ffff0000 x16: ffff800011b9ea98 x15: 0000000000000002 [ 227.420834][ T9149] x14: 0000000000000001 x13: 1ffff00002a72071 x12: 0000000000080000 [ 227.422282][ T9149] x11: 0000000000001382 x10: ffff800027419000 x9 : ffff8000103e4954 [ 227.423628][ T9149] x8 : 0000000000001383 x7 : ffff8000103e5848 x6 : 0000000000000000 [ 227.425038][ T9149] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 227.426413][ T9149] x2 : 0000000000000008 x1 : 0000000000000100 x0 : 00000000000000ff [ 227.427729][ T9149] Call trace: [ 227.428294][ T9149] nft_socket_init+0x2a4/0x360 [ 227.429128][ T9149] nf_tables_newrule+0x11b8/0x1be4 [ 227.430024][ T9149] nfnetlink_rcv+0xc7c/0x1c54 [ 227.430840][ T9149] netlink_unicast+0x5fc/0x80c [ 227.431709][ T9149] netlink_sendmsg+0x6f0/0x9d8 [ 227.432583][ T9149] ____sys_sendmsg+0x588/0x90c [ 227.433416][ T9149] __sys_sendmsg+0x288/0x374 [ 227.434191][ T9149] __arm64_sys_sendmsg+0x80/0x94 [ 227.435133][ T9149] invoke_syscall+0x98/0x290 [ 227.435988][ T9149] el0_svc_common+0x13c/0x258 [ 227.436882][ T9149] do_el0_svc+0x5c/0x134 [ 227.437664][ T9149] el0_svc+0x58/0x128 [ 227.438373][ T9149] el0t_64_sync_handler+0x84/0xf0 [ 227.439284][ T9149] el0t_64_sync+0x18c/0x190 [ 227.440070][ T9149] irq event stamp: 2232 [ 227.440792][ T9149] hardirqs last enabled at (2231): [] _raw_spin_unlock_irq+0x3c/0x90 [ 227.442533][ T9149] hardirqs last disabled at (2232): [] el1_dbg+0x24/0x80 [ 227.444086][ T9149] softirqs last enabled at (2220): [] local_bh_enable+0x10/0x34 [ 227.445792][ T9149] softirqs last disabled at (2214): [] local_bh_disable+0x10/0x34 [ 227.447506][ T9149] ---[ end trace 0000000000000000 ]---