last executing test programs: 8.792616964s ago: executing program 3 (id=4251): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x2020) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x2a}, 0x28) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) eventfd(0x5f0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$KDSKBENT(r6, 0x4b47, 0x0) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 8.55779051s ago: executing program 0 (id=4252): prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02000000"], 0x4) 8.548689251s ago: executing program 3 (id=4253): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000018c0)={0x34, r0, 0x809, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x7, 0x2}, {0x4, 0x3}, {0xbc}, {0x3, 0x2}, {0xdc, 0x3}], "6171610cb4c61b4c"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000090}, 0x24080888) 8.367593415s ago: executing program 0 (id=4255): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x6f1022e4, 0x101) r0 = fsopen(&(0x7f0000000000)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 8.325262046s ago: executing program 3 (id=4257): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x68040000) 6.718743458s ago: executing program 0 (id=4260): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000005d80)=[{0x0}, {&(0x7f0000003900)="3e8763bec454303ed2d5d33304c8ed979114aa14746bba60f41e397438462ff044357d0d1c445fa5b81b", 0x2a}, {0x0}, {&(0x7f0000003b00)="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", 0x1000}, {&(0x7f0000005b00)="7d00d91cb96d6a2f3195e0de459126fd9490fea1693752ba971ebcecff24a5cb6533ff1ec23e3cf5e8fd289ef5d2350adad50417e70adfd15bca52724d2b027b31c3aebc740699c71b8af9b8cf119276d1f923b77a8b43e6af2f34ad1212039af395beb47d67cc514d38a61fceb6f2fec99c2a3af7f99c845801472dcdbd603defa73e9213fa9080a684dec6d0ec4c29f6eb514735bae8fbec260590a4dba5805dc52854b3e703f54ead52515a4e77c5ec9427969a0b4ca2ab3ba957ea8d8e8b814694a4e9e6b85948ad448f73bba9e9bfc0d11704e4d60592edcb6d10b8949029", 0xe1}, {&(0x7f0000005c40)}, {0x0}], 0x7, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x1b8, 0x12, 0x600, 0x3b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x4000000, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040085}, 0x8890) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000100)=""/76, 0x4c, 0x40, 0x0, 0x0) listen(0xffffffffffffffff, 0x80) r5 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r5, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) r7 = openat$iommufd(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r8, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r6, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4}) 5.649276595s ago: executing program 0 (id=4262): syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) ioctl$XFS_IOC_GETBMAPA(0xffffffffffffffff, 0xc020582c, 0x0) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r0 = fsopen(&(0x7f0000000080)='virtiofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x68040000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) io_setup(0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x33, 0x2, @tid=0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001}}, './file0\x00'}) 5.382167172s ago: executing program 3 (id=4264): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000080)=[{0x6, 0xc0, 0x0, 0x6}]}) bind$alg(0xffffffffffffffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.072073056s ago: executing program 2 (id=4268): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda6", 0x38}, {0x0}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.941691219s ago: executing program 2 (id=4270): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000005d80)=[{0x0}, {&(0x7f0000003900)="3e8763bec454303ed2d5d33304c8ed979114aa14746bba60f41e397438462ff044357d0d1c445fa5b81b", 0x2a}, {0x0}, {&(0x7f0000003b00)="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", 0x1000}, {&(0x7f0000005b00)="7d00d91cb96d6a2f3195e0de459126fd9490fea1693752ba971ebcecff24a5cb6533ff1ec23e3cf5e8fd289ef5d2350adad50417e70adfd15bca52724d2b027b31c3aebc740699c71b8af9b8cf119276d1f923b77a8b43e6af2f34ad1212039af395beb47d67cc514d38a61fceb6f2fec99c2a3af7f99c845801472dcdbd603defa73e9213fa9080a684dec6d0ec4c29f6eb514735bae8fbec260590a4dba5805dc52854b3e703f54ead52515a4e77c5ec9427969a0b4ca2ab3ba957ea8d8e8b814694a4e9e6b85948ad448f73bba9e9bfc0d11704e4d60592edcb6d10b8949029", 0xe1}, {&(0x7f0000005c40)}, {0x0}], 0x7, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x1b8, 0x12, 0x600, 0x3b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x4000000, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040085}, 0x8890) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000100)=""/76, 0x4c, 0x40, 0x0, 0x0) listen(0xffffffffffffffff, 0x80) r5 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r5, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) r7 = openat$iommufd(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r8, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r6, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4}) 2.699287991s ago: executing program 2 (id=4272): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) 2.649943822s ago: executing program 1 (id=4273): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001e008d2af6ffffff0000", @ANYRES32], 0x24}}, 0x24004054) 2.443399138s ago: executing program 0 (id=4274): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000018c0)={0x34, r0, 0x809, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x4, 0x6}, {0x4, 0x3}, {0xbc}, {0x3, 0x2}, {0xdc, 0x3}], "6171610cb4c61b4c"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000090}, 0x24080888) 2.433495367s ago: executing program 2 (id=4275): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x2020) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x2a}, 0x28) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) eventfd(0x5f0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$KDSKBENT(r6, 0x4b47, 0x0) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 2.36162617s ago: executing program 1 (id=4276): userfaultfd(0x80001) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8442, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x10, 0x803, 0x0) syz_ublk_setup_io_uring(0x786, &(0x7f0000000740)={0x0, 0x903f, 0x0, 0x3, 0x24d, 0x0, r0}, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) pipe2(0x0, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080), 0x56}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 2.35333323s ago: executing program 2 (id=4277): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sync() sync() sync() sync() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a5c000000060a09040000000000000000020000000900010073797a30000000000900010073797a3000000000300014cb200001800b0001006f626a7265660000100002800900020073797a31000000000c000180080001006475700014000000110001005a000000000000000000000a05290d2421649b459d0911e9166c22a7d6c74523296ac62a3d20d4ef5cb21e716232098cbfdf420fb31d911bbfe3d1a47c9880220e22e49c759456d3392c17b3392084c232341ba6bc7028dc3874ddf593e4c0c86df1a53f886de919e62d6fe410d2eb5ec8bc513cd9"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) 2.192101014s ago: executing program 1 (id=4278): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda6", 0x38}, {0x0}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.171217124s ago: executing program 1 (id=4279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) rt_sigpending(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x7b35, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) 1.208424899s ago: executing program 1 (id=4280): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000005d80)=[{0x0}, {&(0x7f0000003900)="3e8763bec454303ed2d5d33304c8ed979114aa14746bba60f41e397438462ff044357d0d1c445fa5b81b", 0x2a}, {0x0}, {&(0x7f0000003b00)="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", 0x1000}, {&(0x7f0000005b00)="7d00d91cb96d6a2f3195e0de459126fd9490fea1693752ba971ebcecff24a5cb6533ff1ec23e3cf5e8fd289ef5d2350adad50417e70adfd15bca52724d2b027b31c3aebc740699c71b8af9b8cf119276d1f923b77a8b43e6af2f34ad1212039af395beb47d67cc514d38a61fceb6f2fec99c2a3af7f99c845801472dcdbd603defa73e9213fa9080a684dec6d0ec4c29f6eb514735bae8fbec260590a4dba5805dc52854b3e703f54ead52515a4e77c5ec9427969a0b4ca2ab3ba957ea8d8e8b814694a4e9e6b85948ad448f73bba9e9bfc0d11704e4d60592edcb6d10b8949029", 0xe1}, {&(0x7f0000005c40)}, {0x0}], 0x7, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x1b8, 0x12, 0x600, 0x3b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x4000000, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040085}, 0x8890) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000100)=""/76, 0x4c, 0x40, 0x0, 0x0) listen(0xffffffffffffffff, 0x80) r5 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r5, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) r7 = openat$iommufd(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r8, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r6, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4}) 1.143297641s ago: executing program 3 (id=4281): socket$inet6(0xa, 0x1, 0x84) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x38, 0x0, 0x0, 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) socket$l2tp6(0xa, 0x2, 0x73) socket(0x2, 0x80805, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084) 108.174347ms ago: executing program 1 (id=4282): syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) ioctl$XFS_IOC_GETBMAPA(0xffffffffffffffff, 0xc020582c, 0x0) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r0 = fsopen(&(0x7f0000000080)='virtiofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x68040000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) io_setup(0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x33, 0x2, @tid=0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001}}, './file0\x00'}) 62.995979ms ago: executing program 0 (id=4283): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) 47.350139ms ago: executing program 2 (id=4284): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)="030000001b0000000800000001000000000b000000010004000000", 0x1b) inotify_add_watch(r0, &(0x7f0000000140)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='e:my_read_msr1 msr/read_msr\n', 0x1c) 0s ago: executing program 3 (id=4285): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x2020) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x2a}, 0x28) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) eventfd(0x5f0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$KDSKBENT(r6, 0x4b47, 0x0) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) kernel console output (not intermixed with test programs): ce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1535.345698][T18129] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1535.351872][T18129] Node 0 DMA32 free:1464264kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21584kB inactive_anon:0kB active_file:70432kB inactive_file:162216kB unevictable:1536kB writepending:196kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:21748kB local_pcp:12668kB free_cma:0kB [ 1535.385317][T18129] lowmem_reserve[]: 0 0 0 0 0 [ 1535.392865][T18129] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1535.422597][T18129] lowmem_reserve[]: 0 0 0 0 0 [ 1535.427413][T18129] Node 1 Normal free:3905712kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12568kB local_pcp:456kB free_cma:0kB [ 1535.476884][T18129] lowmem_reserve[]: 0 0 0 0 0 [ 1535.482068][T18129] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1535.495202][T18129] Node 0 DMA32: 1*4kB (E) 1217*8kB (UME) 1094*16kB (UME) 735*32kB (UME) 492*64kB (UME) 155*128kB (UME) 118*256kB (UME) 41*512kB (UME) 26*1024kB (UME) 9*2048kB (M) 309*4096kB (UM) = 1464012kB [ 1535.517745][T18129] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1535.535107][T18129] Node 1 Normal: 254*4kB (UME) 55*8kB (UME) 44*16kB (UME) 192*32kB (UME) 55*64kB (UME) 11*128kB (UE) 3*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3905712kB [ 1535.564602][T18129] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1535.580059][T18129] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1535.591774][T18129] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1535.602341][T18129] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1535.613072][T18129] 59801 total pagecache pages [ 1535.618163][T18129] 2 pages in swap cache [ 1535.624860][T18129] Free swap = 124736kB [ 1535.632692][T18129] Total swap = 124996kB [ 1535.637113][T18129] 2097051 pages RAM [ 1535.662320][T18129] 0 pages HighMem/MovableOnly [ 1535.668184][T18129] 416955 pages reserved [ 1535.678694][T18129] 0 pages cma reserved [ 1539.489416][T11353] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1539.539700][T18164] syz.0.3127 (18164): drop_caches: 2 [ 1539.699976][T11353] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1539.743675][T11353] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1539.755472][T11353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.779072][T11353] spcp8x5 3-1:1.0: required endpoints missing [ 1540.587493][T18182] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1542.787890][ T1835] usb 3-1: USB disconnect, device number 53 [ 1544.055595][T18210] warn_alloc: 1 callbacks suppressed [ 1544.055610][T18210] syz.0.3139: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1544.083854][T18210] CPU: 0 PID: 18210 Comm: syz.0.3139 Not tainted syzkaller #0 [ 1544.091401][T18210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1544.101473][T18210] Call Trace: [ 1544.104769][T18210] [ 1544.107717][T18210] dump_stack_lvl+0x18c/0x250 [ 1544.112425][T18210] ? show_regs_print_info+0x20/0x20 [ 1544.117649][T18210] ? load_image+0x420/0x420 [ 1544.122190][T18210] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1544.128639][T18210] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1544.135168][T18210] warn_alloc+0x246/0x340 [ 1544.139515][T18210] ? stack_trace_save+0xaa/0x100 [ 1544.144477][T18210] ? zone_watermark_ok_safe+0x230/0x230 [ 1544.150075][T18210] ? kasan_set_track+0x5f/0x70 [ 1544.154875][T18210] ? kasan_set_track+0x4e/0x70 [ 1544.159646][T18210] ? __kasan_kmalloc+0x8f/0xa0 [ 1544.164421][T18210] ? xsk_init_queue+0xad/0x100 [ 1544.169210][T18210] ? xsk_setsockopt+0x413/0x750 [ 1544.174077][T18210] ? do_sock_setsockopt+0x175/0x1a0 [ 1544.179285][T18210] ? __x64_sys_setsockopt+0x182/0x200 [ 1544.184683][T18210] __vmalloc_node_range+0x129/0x1320 [ 1544.190024][T18210] ? free_vm_area+0x50/0x50 [ 1544.194598][T18210] vmalloc_user+0x74/0x80 [ 1544.199126][T18210] ? xskq_create+0xbf/0x170 [ 1544.203654][T18210] xskq_create+0xbf/0x170 [ 1544.208019][T18210] xsk_init_queue+0xad/0x100 [ 1544.212644][T18210] xsk_setsockopt+0x413/0x750 [ 1544.217361][T18210] ? xsk_poll+0x670/0x670 [ 1544.221725][T18210] ? __fget_files+0x28/0x460 [ 1544.226362][T18210] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1544.231943][T18210] ? security_socket_setsockopt+0x7e/0xa0 [ 1544.237688][T18210] ? xsk_poll+0x670/0x670 [ 1544.242048][T18210] do_sock_setsockopt+0x175/0x1a0 [ 1544.247106][T18210] ? __fdget+0x180/0x210 [ 1544.251377][T18210] __x64_sys_setsockopt+0x182/0x200 [ 1544.256599][T18210] do_syscall_64+0x55/0xb0 [ 1544.261035][T18210] ? clear_bhb_loop+0x40/0x90 [ 1544.265722][T18210] ? clear_bhb_loop+0x40/0x90 [ 1544.270417][T18210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1544.276337][T18210] RIP: 0033:0x7fe1e279e0d9 [ 1544.280796][T18210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1544.300540][T18210] RSP: 002b:00007fe1e35b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1544.308992][T18210] RAX: ffffffffffffffda RBX: 00007fe1e2a25fa0 RCX: 00007fe1e279e0d9 [ 1544.316982][T18210] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 1544.324975][T18210] RBP: 00007fe1e2835024 R08: 0000000000000029 R09: 0000000000000000 [ 1544.332962][T18210] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1544.340945][T18210] R13: 00007fe1e2a26038 R14: 00007fe1e2a25fa0 R15: 00007ffdd0a84448 [ 1544.348942][T18210] [ 1544.352100][ C0] vkms_vblank_simulate: vblank timer overrun [ 1544.361937][T18210] Mem-Info: [ 1544.365194][T18210] active_anon:5409 inactive_anon:0 isolated_anon:0 [ 1544.365194][T18210] active_file:17608 inactive_file:40817 isolated_file:0 [ 1544.365194][T18210] unevictable:768 dirty:17 writeback:0 [ 1544.365194][T18210] slab_reclaimable:6192 slab_unreclaimable:95687 [ 1544.365194][T18210] mapped:25036 shmem:1360 pagetables:596 [ 1544.365194][T18210] sec_pagetables:0 bounce:0 [ 1544.365194][T18210] kernel_misc_reclaimable:0 [ 1544.365194][T18210] free:1342887 free_pcp:11610 free_cma:0 [ 1544.414248][T18210] Node 0 active_anon:21636kB inactive_anon:0kB active_file:70432kB inactive_file:163064kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100144kB dirty:68kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12236kB pagetables:2384kB sec_pagetables:0kB all_unreclaimable? no [ 1544.478073][T18210] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1544.556922][T18210] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1544.711812][T18210] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1545.245982][T18210] Node 0 DMA32 free:1449956kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21676kB inactive_anon:0kB active_file:70432kB inactive_file:162240kB unevictable:1536kB writepending:92kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:33688kB local_pcp:20112kB free_cma:0kB [ 1545.277179][T18210] lowmem_reserve[]: 0 0 0 0 0 [ 1545.281979][T18210] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1545.309171][T18210] lowmem_reserve[]: 0 0 0 0 0 [ 1545.315431][T18210] Node 1 Normal free:3905712kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12568kB local_pcp:12112kB free_cma:0kB [ 1545.412364][T18210] lowmem_reserve[]: 0 0 0 0 0 [ 1545.417176][T18210] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1545.457005][T18210] Node 0 DMA32: 51*4kB (ME) 415*8kB (UME) 758*16kB (UME) 658*32kB (UME) 491*64kB (UME) 155*128kB (UME) 118*256kB (UME) 41*512kB (UME) 26*1024kB (UME) 9*2048kB (M) 309*4096kB (UM) = 1449892kB [ 1545.508877][T18210] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1545.541453][T18210] Node 1 Normal: 254*4kB (UME) 55*8kB (UME) 44*16kB (UME) 192*32kB (UME) 55*64kB (UME) 11*128kB (UE) 3*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3905712kB [ 1545.569001][T18210] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1545.579197][T18210] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1545.593394][T18210] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1545.605266][T18210] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1545.618509][T18210] 59787 total pagecache pages [ 1545.624900][T18210] 2 pages in swap cache [ 1545.629280][T18210] Free swap = 124480kB [ 1545.637094][T18210] Total swap = 124996kB [ 1545.645575][T18210] 2097051 pages RAM [ 1545.650360][T18210] 0 pages HighMem/MovableOnly [ 1545.655222][T18210] 416955 pages reserved [ 1545.659685][T18210] 0 pages cma reserved [ 1545.867929][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.874700][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.917193][T18228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1545.935095][T18228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1549.920926][ T28] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1550.278190][ T28] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1550.296279][ T28] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1550.308372][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.395604][T18291] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1551.506580][ T28] spcp8x5 3-1:1.0: required endpoints missing [ 1552.531981][T18299] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1552.554537][T18299] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1552.561330][T18299] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1552.592104][T18299] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1552.625564][ T9396] Bluetooth: hci1: sending frame failed (-49) [ 1552.634071][T15901] Bluetooth: hci1: Entering manufacturer mode failed (-49) [ 1553.716932][T16393] usb 3-1: USB disconnect, device number 54 [ 1554.582167][T15901] Bluetooth: hci0: command 0x040f tx timeout [ 1554.604610][T15901] Bluetooth: hci3: command 0x0c1a tx timeout [ 1554.611101][ T9396] Bluetooth: hci2: command 0x040f tx timeout [ 1554.617239][ T5781] Bluetooth: hci4: command 0x040f tx timeout [ 1554.758557][T18323] warn_alloc: 2 callbacks suppressed [ 1554.758573][T18323] syz.0.3174: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1554.877875][T18323] CPU: 1 PID: 18323 Comm: syz.0.3174 Not tainted syzkaller #0 [ 1554.885424][T18323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1554.895515][T18323] Call Trace: [ 1554.898826][T18323] [ 1554.901794][T18323] dump_stack_lvl+0x18c/0x250 [ 1554.906511][T18323] ? show_regs_print_info+0x20/0x20 [ 1554.911774][T18323] ? load_image+0x420/0x420 [ 1554.916349][T18323] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1554.922824][T18323] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1554.929418][T18323] warn_alloc+0x246/0x340 [ 1554.933803][T18323] ? stack_trace_save+0xaa/0x100 [ 1554.938813][T18323] ? zone_watermark_ok_safe+0x230/0x230 [ 1554.944435][T18323] ? kasan_set_track+0x5f/0x70 [ 1554.949262][T18323] ? kasan_set_track+0x4e/0x70 [ 1554.954084][T18323] ? __kasan_kmalloc+0x8f/0xa0 [ 1554.958903][T18323] ? xsk_init_queue+0xad/0x100 [ 1554.963758][T18323] ? xsk_setsockopt+0x413/0x750 [ 1554.968686][T18323] ? do_sock_setsockopt+0x175/0x1a0 [ 1554.973923][T18323] ? __x64_sys_setsockopt+0x182/0x200 [ 1554.979353][T18323] __vmalloc_node_range+0x129/0x1320 [ 1554.984720][T18323] ? free_vm_area+0x50/0x50 [ 1554.989307][T18323] vmalloc_user+0x74/0x80 [ 1554.993681][T18323] ? xskq_create+0xbf/0x170 [ 1554.998328][T18323] xskq_create+0xbf/0x170 [ 1555.002709][T18323] xsk_init_queue+0xad/0x100 [ 1555.007460][T18323] xsk_setsockopt+0x413/0x750 [ 1555.012195][T18323] ? xsk_poll+0x670/0x670 [ 1555.016577][T18323] ? __fget_files+0x28/0x460 [ 1555.021221][T18323] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1555.026822][T18323] ? security_socket_setsockopt+0x7e/0xa0 [ 1555.032589][T18323] ? xsk_poll+0x670/0x670 [ 1555.036974][T18323] do_sock_setsockopt+0x175/0x1a0 [ 1555.042053][T18323] ? __fdget+0x180/0x210 [ 1555.046449][T18323] __x64_sys_setsockopt+0x182/0x200 [ 1555.051703][T18323] do_syscall_64+0x55/0xb0 [ 1555.056163][T18323] ? clear_bhb_loop+0x40/0x90 [ 1555.060893][T18323] ? clear_bhb_loop+0x40/0x90 [ 1555.065618][T18323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1555.071547][T18323] RIP: 0033:0x7fe1e279e0d9 [ 1555.076004][T18323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1555.095648][T18323] RSP: 002b:00007fe1e35b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1555.104121][T18323] RAX: ffffffffffffffda RBX: 00007fe1e2a25fa0 RCX: 00007fe1e279e0d9 [ 1555.112131][T18323] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 1555.120139][T18323] RBP: 00007fe1e2835024 R08: 0000000000000029 R09: 0000000000000000 [ 1555.128156][T18323] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1555.136176][T18323] R13: 00007fe1e2a26038 R14: 00007fe1e2a25fa0 R15: 00007ffdd0a84448 [ 1555.144470][T18323] [ 1555.271008][T18332] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1555.295826][T18332] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1555.765737][T18330] No such timeout policy "syz1" [ 1555.943835][T18323] Mem-Info: [ 1556.026605][T18323] active_anon:5552 inactive_anon:0 isolated_anon:0 [ 1556.026605][T18323] active_file:17608 inactive_file:40822 isolated_file:0 [ 1556.026605][T18323] unevictable:2680 dirty:93 writeback:0 [ 1556.026605][T18323] slab_reclaimable:6181 slab_unreclaimable:96625 [ 1556.026605][T18323] mapped:25020 shmem:1380 pagetables:595 [ 1556.026605][T18323] sec_pagetables:0 bounce:0 [ 1556.026605][T18323] kernel_misc_reclaimable:0 [ 1556.026605][T18323] free:1338194 free_pcp:12583 free_cma:0 [ 1558.211672][T18323] Node 0 active_anon:27908kB inactive_anon:0kB active_file:70432kB inactive_file:163084kB unevictable:1584kB isolated(anon):0kB isolated(file):0kB mapped:100080kB dirty:384kB writeback:0kB shmem:3984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12324kB pagetables:2380kB sec_pagetables:0kB all_unreclaimable? no [ 1558.244843][T18323] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1558.275141][T18323] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1558.304118][T18323] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1558.312776][T18323] Node 0 DMA32 free:1431728kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:27900kB inactive_anon:0kB active_file:70432kB inactive_file:162256kB unevictable:1536kB writepending:384kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:37944kB local_pcp:18112kB free_cma:0kB [ 1558.343443][T18323] lowmem_reserve[]: 0 0 0 0 0 [ 1558.349314][T18323] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1558.444648][T18323] lowmem_reserve[]: 0 0 0 0 0 [ 1558.834674][T18323] Node 1 Normal free:3905712kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12568kB local_pcp:456kB free_cma:0kB [ 1558.865863][T18338] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1558.880086][T18323] lowmem_reserve[]: 0 0 0 0 0 [ 1558.884867][T18323] Node 0 DMA: 0*4kB 0*8kB 0*16kB [ 1558.901973][T18338] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1558.914356][T18323] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1558.954867][T18338] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1558.974787][T18323] Node 0 DMA32: 550*4kB (UME) 476*8kB (UME) 419*16kB (UME) 509*32kB (UME) 483*64kB (UME) 151*128kB (ME) 107*256kB (UME) 41*512kB (UME) 26*1024kB (UME) 9*2048kB (M) 309*4096kB (UM) = 1438344kB [ 1559.029282][T18338] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1559.068116][T18323] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1559.092549][T18323] Node 1 Normal: 254*4kB (UME) 55*8kB (UME) 44*16kB (UME) 192*32kB (UME) 55*64kB (UME) 11*128kB (UE) 3*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3905712kB [ 1559.110912][T18323] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1559.125087][T18323] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1559.135079][T18323] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1559.144838][T18323] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1559.154263][T18323] 59791 total pagecache pages [ 1559.158979][T18323] 2 pages in swap cache [ 1559.164024][T18323] Free swap = 124480kB [ 1559.168322][T18323] Total swap = 124996kB [ 1559.172645][T18323] 2097051 pages RAM [ 1559.176493][T18323] 0 pages HighMem/MovableOnly [ 1559.189519][T18323] 416955 pages reserved [ 1559.199458][T18323] 0 pages cma reserved [ 1559.758612][T18352] netlink: 'syz.0.3182': attribute type 1 has an invalid length. [ 1560.241963][T18352] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1560.789095][T18362] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1561.120367][ T9396] Bluetooth: hci4: command 0x040f tx timeout [ 1561.126618][ T9396] Bluetooth: hci3: command 0x0c1a tx timeout [ 1561.134058][ T9396] Bluetooth: hci2: command 0x040f tx timeout [ 1561.140754][ T5781] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1561.155997][ T5781] Bluetooth: hci0: command 0x040f tx timeout [ 1562.032330][T18369] No such timeout policy "syz1" [ 1563.517812][T18389] netlink: 'syz.3.3192': attribute type 1 has an invalid length. [ 1563.695957][T18389] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1564.239840][T18397] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1565.570013][T18409] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1566.190380][T18413] warn_alloc: 2 callbacks suppressed [ 1566.190395][T18413] syz.0.3200: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1566.250135][T18413] CPU: 1 PID: 18413 Comm: syz.0.3200 Not tainted syzkaller #0 [ 1566.257663][T18413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1566.267763][T18413] Call Trace: [ 1566.271098][T18413] [ 1566.274062][T18413] dump_stack_lvl+0x18c/0x250 [ 1566.278792][T18413] ? show_regs_print_info+0x20/0x20 [ 1566.284028][T18413] ? load_image+0x420/0x420 [ 1566.288590][T18413] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1566.295053][T18413] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1566.301606][T18413] warn_alloc+0x246/0x340 [ 1566.305966][T18413] ? stack_trace_save+0xaa/0x100 [ 1566.310947][T18413] ? zone_watermark_ok_safe+0x230/0x230 [ 1566.316538][T18413] ? kasan_set_track+0x5f/0x70 [ 1566.321336][T18413] ? kasan_set_track+0x4e/0x70 [ 1566.326148][T18413] ? __kasan_kmalloc+0x8f/0xa0 [ 1566.330948][T18413] ? xsk_init_queue+0xad/0x100 [ 1566.335762][T18413] ? xsk_setsockopt+0x413/0x750 [ 1566.340660][T18413] ? do_sock_setsockopt+0x175/0x1a0 [ 1566.345890][T18413] ? __x64_sys_setsockopt+0x182/0x200 [ 1566.351301][T18413] __vmalloc_node_range+0x129/0x1320 [ 1566.356661][T18413] ? free_vm_area+0x50/0x50 [ 1566.361253][T18413] vmalloc_user+0x74/0x80 [ 1566.365660][T18413] ? xskq_create+0xbf/0x170 [ 1566.370216][T18413] xskq_create+0xbf/0x170 [ 1566.374594][T18413] xsk_init_queue+0xad/0x100 [ 1566.379230][T18413] xsk_setsockopt+0x413/0x750 [ 1566.383955][T18413] ? xsk_poll+0x670/0x670 [ 1566.388336][T18413] ? __fget_files+0x28/0x460 [ 1566.392982][T18413] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1566.398566][T18413] ? security_socket_setsockopt+0x7e/0xa0 [ 1566.404326][T18413] ? xsk_poll+0x670/0x670 [ 1566.408710][T18413] do_sock_setsockopt+0x175/0x1a0 [ 1566.413781][T18413] ? __fdget+0x180/0x210 [ 1566.418115][T18413] __x64_sys_setsockopt+0x182/0x200 [ 1566.423365][T18413] do_syscall_64+0x55/0xb0 [ 1566.427846][T18413] ? clear_bhb_loop+0x40/0x90 [ 1566.432572][T18413] ? clear_bhb_loop+0x40/0x90 [ 1566.437322][T18413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1566.443259][T18413] RIP: 0033:0x7fe1e279e0d9 [ 1566.447717][T18413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1566.467368][T18413] RSP: 002b:00007fe1e35b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1566.475859][T18413] RAX: ffffffffffffffda RBX: 00007fe1e2a25fa0 RCX: 00007fe1e279e0d9 [ 1566.483877][T18413] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 1566.491886][T18413] RBP: 00007fe1e2835024 R08: 0000000000000029 R09: 0000000000000000 [ 1566.499891][T18413] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1566.507892][T18413] R13: 00007fe1e2a26038 R14: 00007fe1e2a25fa0 R15: 00007ffdd0a84448 [ 1566.515928][T18413] [ 1567.115446][T18413] Mem-Info: [ 1567.118749][T18413] active_anon:6055 inactive_anon:0 isolated_anon:0 [ 1567.118749][T18413] active_file:17608 inactive_file:40830 isolated_file:0 [ 1567.118749][T18413] unevictable:768 dirty:47 writeback:0 [ 1567.118749][T18413] slab_reclaimable:6161 slab_unreclaimable:96338 [ 1567.118749][T18413] mapped:25655 shmem:1975 pagetables:589 [ 1567.118749][T18413] sec_pagetables:0 bounce:0 [ 1567.118749][T18413] kernel_misc_reclaimable:0 [ 1567.118749][T18413] free:1341978 free_pcp:10853 free_cma:0 [ 1567.165729][T18413] Node 0 active_anon:24220kB inactive_anon:0kB active_file:70432kB inactive_file:163116kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102620kB dirty:188kB writeback:0kB shmem:6364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12296kB pagetables:2356kB sec_pagetables:0kB all_unreclaimable? no [ 1567.198199][T18413] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1567.465653][T18413] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1567.824439][T18421] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1567.831000][T18413] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1567.836928][T18413] Node 0 DMA32 free:1446832kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:25220kB inactive_anon:0kB active_file:70432kB inactive_file:162288kB unevictable:1536kB writepending:232kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:30040kB local_pcp:17504kB free_cma:0kB [ 1567.876066][T18421] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1567.894245][T18421] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1567.912407][T18421] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1567.921784][T18413] lowmem_reserve[]: 0 0 0 0 0 [ 1567.945939][T18413] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1568.007005][T18413] lowmem_reserve[]: 0 0 0 0 0 [ 1568.011928][T18413] Node 1 Normal free:3905712kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12568kB local_pcp:12112kB free_cma:0kB [ 1568.041803][T18413] lowmem_reserve[]: 0 0 0 0 0 [ 1568.047803][T18413] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1568.060691][T18413] Node 0 DMA32: 2*4kB (UM) 281*8kB (UME) 700*16kB (UME) 613*32kB (UME) 483*64kB (UME) 152*128kB (ME) 108*256kB (UME) 41*512kB (UME) 26*1024kB (UME) 11*2048kB (M) 309*4096kB (UM) = 1446896kB [ 1568.110183][T18413] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1568.130096][T18413] Node 1 Normal: 254*4kB (UME) 55*8kB (UME) 44*16kB (UME) 192*32kB (UME) 55*64kB (UME) 11*128kB (UE) 3*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3905712kB [ 1568.173450][T18413] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1568.190006][T18413] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1568.212449][T18413] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1569.225427][T18413] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1569.353457][T18413] 82416 total pagecache pages [ 1569.358203][T18413] 2 pages in swap cache [ 1569.387288][ T9396] Bluetooth: hci4: command 0x040f tx timeout [ 1569.414008][T18413] Free swap = 124480kB [ 1569.418788][T18432] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1569.467439][T18413] Total swap = 124996kB [ 1569.506023][T18413] 2097051 pages RAM [ 1569.516422][T18413] 0 pages HighMem/MovableOnly [ 1569.560125][T18413] 416955 pages reserved [ 1569.564368][T18413] 0 pages cma reserved [ 1569.940195][ T9396] Bluetooth: hci0: command 0x040f tx timeout [ 1569.940233][ T5781] Bluetooth: hci2: command 0x040f tx timeout [ 1569.971619][T15901] Bluetooth: hci3: command 0x0c1a tx timeout [ 1570.743554][T18443] netlink: 'syz.0.3206': attribute type 1 has an invalid length. [ 1570.961752][T18443] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1572.181339][T18456] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1572.205795][T18456] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1572.245782][T18456] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1572.264847][T18456] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1572.517327][T18464] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1574.018323][T18472] netlink: 'syz.1.3219': attribute type 1 has an invalid length. [ 1574.141311][T15901] Bluetooth: hci4: command 0x040f tx timeout [ 1574.150942][T18472] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1574.264914][T15901] Bluetooth: hci2: command 0x040f tx timeout [ 1574.274787][ T9396] Bluetooth: hci3: command 0x0c1a tx timeout [ 1574.341611][T15901] Bluetooth: hci1: command 0xfc11 tx timeout [ 1574.349318][ T9396] Bluetooth: hci0: command 0x040f tx timeout [ 1574.355951][ T5781] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1576.101465][T18503] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1578.760384][T18515] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1579.040695][T18515] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1579.101695][T18515] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1579.124357][T18515] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1579.568630][T18524] warn_alloc: 5 callbacks suppressed [ 1579.568646][T18524] syz.2.3234: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1579.625982][T18524] CPU: 1 PID: 18524 Comm: syz.2.3234 Not tainted syzkaller #0 [ 1579.633489][T18524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1579.643580][T18524] Call Trace: [ 1579.646893][T18524] [ 1579.649842][T18524] dump_stack_lvl+0x18c/0x250 [ 1579.654541][T18524] ? show_regs_print_info+0x20/0x20 [ 1579.659752][T18524] ? load_image+0x420/0x420 [ 1579.664284][T18524] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1579.670737][T18524] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1579.677282][T18524] warn_alloc+0x246/0x340 [ 1579.681634][T18524] ? stack_trace_save+0xaa/0x100 [ 1579.686603][T18524] ? zone_watermark_ok_safe+0x230/0x230 [ 1579.692179][T18524] ? kasan_set_track+0x5f/0x70 [ 1579.696960][T18524] ? kasan_set_track+0x4e/0x70 [ 1579.701739][T18524] ? __kasan_kmalloc+0x8f/0xa0 [ 1579.706554][T18524] ? xsk_init_queue+0xad/0x100 [ 1579.711350][T18524] ? xsk_setsockopt+0x413/0x750 [ 1579.716225][T18524] ? do_sock_setsockopt+0x175/0x1a0 [ 1579.721459][T18524] ? __x64_sys_setsockopt+0x182/0x200 [ 1579.726857][T18524] __vmalloc_node_range+0x129/0x1320 [ 1579.732190][T18524] ? free_vm_area+0x50/0x50 [ 1579.736738][T18524] vmalloc_user+0x74/0x80 [ 1579.741096][T18524] ? xskq_create+0xbf/0x170 [ 1579.745666][T18524] xskq_create+0xbf/0x170 [ 1579.750036][T18524] xsk_init_queue+0xad/0x100 [ 1579.754654][T18524] xsk_setsockopt+0x413/0x750 [ 1579.759348][T18524] ? xsk_poll+0x670/0x670 [ 1579.763704][T18524] ? __fget_files+0x28/0x460 [ 1579.768322][T18524] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1579.773879][T18524] ? security_socket_setsockopt+0x7e/0xa0 [ 1579.779605][T18524] ? xsk_poll+0x670/0x670 [ 1579.783956][T18524] do_sock_setsockopt+0x175/0x1a0 [ 1579.789011][T18524] ? __fdget+0x180/0x210 [ 1579.793287][T18524] __x64_sys_setsockopt+0x182/0x200 [ 1579.798505][T18524] do_syscall_64+0x55/0xb0 [ 1579.802943][T18524] ? clear_bhb_loop+0x40/0x90 [ 1579.807654][T18524] ? clear_bhb_loop+0x40/0x90 [ 1579.812377][T18524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1579.818303][T18524] RIP: 0033:0x7fad5499e0d9 [ 1579.822738][T18524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1579.842371][T18524] RSP: 002b:00007fad55869028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1579.850816][T18524] RAX: ffffffffffffffda RBX: 00007fad54c25fa0 RCX: 00007fad5499e0d9 [ 1579.858824][T18524] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 1579.866834][T18524] RBP: 00007fad54a35024 R08: 0000000000000029 R09: 0000000000000000 [ 1579.874836][T18524] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1579.882821][T18524] R13: 00007fad54c26038 R14: 00007fad54c25fa0 R15: 00007ffc1464ef88 [ 1579.890821][T18524] [ 1579.992426][T18524] Mem-Info: [ 1579.995612][T18524] active_anon:5552 inactive_anon:0 isolated_anon:0 [ 1579.995612][T18524] active_file:17608 inactive_file:40839 isolated_file:0 [ 1579.995612][T18524] unevictable:768 dirty:44 writeback:0 [ 1579.995612][T18524] slab_reclaimable:6143 slab_unreclaimable:96050 [ 1579.995612][T18524] mapped:25148 shmem:1485 pagetables:583 [ 1579.995612][T18524] sec_pagetables:0 bounce:0 [ 1579.995612][T18524] kernel_misc_reclaimable:0 [ 1579.995612][T18524] free:1343020 free_pcp:12165 free_cma:0 [ 1580.056104][T18524] Node 0 active_anon:24108kB inactive_anon:0kB active_file:70432kB inactive_file:163152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102592kB dirty:176kB writeback:0kB shmem:6304kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12276kB pagetables:2332kB sec_pagetables:0kB all_unreclaimable? no [ 1580.115136][T18524] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1580.201893][T18524] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1580.273859][T18524] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1580.280589][T18524] Node 0 DMA32 free:1443692kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:35272kB inactive_anon:0kB active_file:70432kB inactive_file:162324kB unevictable:1536kB writepending:176kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:30184kB local_pcp:11660kB free_cma:0kB [ 1580.311160][ C0] vkms_vblank_simulate: vblank timer overrun [ 1580.317357][T18524] lowmem_reserve[]: 0 0 0 0 0 [ 1580.322196][T18524] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1580.348916][ C0] vkms_vblank_simulate: vblank timer overrun [ 1580.385329][T18536] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1580.491147][T18524] lowmem_reserve[]: 0 0 0 0 0 [ 1580.496420][T18524] Node 1 Normal free:3905712kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12568kB local_pcp:456kB free_cma:0kB [ 1580.674362][T18524] lowmem_reserve[]: 0 0 0 0 0 [ 1580.767019][T18524] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1580.832743][T15901] Bluetooth: hci4: command 0x040f tx timeout [ 1580.872572][T18524] Node 0 DMA32: 1*4kB (E) 343*8kB (UME) 1007*16kB (UME) 672*32kB (UME) 476*64kB (UME) 150*128kB (ME) 84*256kB (UME) 42*512kB (UME) 26*1024kB (UME) 9*2048kB (M) 309*4096kB (UM) = 1443756kB [ 1580.921137][T18524] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1580.947645][T18524] Node 1 Normal: 254*4kB (UME) 55*8kB (UME) 44*16kB (UME) 192*32kB (UME) 55*64kB (UME) 11*128kB (UE) 3*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3905712kB [ 1581.009617][T18524] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1581.030143][T18524] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1581.054294][T18524] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1581.064011][T15901] Bluetooth: hci2: command 0x040f tx timeout [ 1581.082554][T18524] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1581.092219][T18524] 61890 total pagecache pages [ 1581.096935][T18524] 2 pages in swap cache [ 1581.101607][T18524] Free swap = 124480kB [ 1581.105782][T18524] Total swap = 124996kB [ 1581.110013][T18524] 2097051 pages RAM [ 1581.113841][T18524] 0 pages HighMem/MovableOnly [ 1581.118540][T18524] 416955 pages reserved [ 1581.122757][T18524] 0 pages cma reserved [ 1581.140014][T15901] Bluetooth: hci0: command 0x040f tx timeout [ 1581.146057][T15901] Bluetooth: hci3: command 0x0c1a tx timeout [ 1581.513211][T18545] (null): rxe_set_mtu: Set mtu to 4096 [ 1581.521791][T18545] lo speed is unknown, defaulting to 1000 [ 1581.531315][T18545] lo speed is unknown, defaulting to 1000 [ 1581.539766][T18545] lo speed is unknown, defaulting to 1000 [ 1581.704611][T18545] infiniband syz2: set active [ 1581.709811][T18545] infiniband syz2: added lo [ 1582.388123][ T5781] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1582.392964][ T9396] Bluetooth: hci1: command 0xfc11 tx timeout [ 1582.409175][ T1835] lo speed is unknown, defaulting to 1000 [ 1582.456776][T18545] RDS/IB: syz2: added [ 1582.461588][T18545] smc: adding ib device syz2 with port count 1 [ 1582.467907][T18545] smc: ib device syz2 port 1 has pnetid [ 1582.490967][T18545] lo speed is unknown, defaulting to 1000 [ 1582.606408][T18545] lo speed is unknown, defaulting to 1000 [ 1582.721275][T18545] lo speed is unknown, defaulting to 1000 [ 1582.835617][T18545] lo speed is unknown, defaulting to 1000 [ 1582.976935][ T9] lo speed is unknown, defaulting to 1000 [ 1586.232690][T18566] lo speed is unknown, defaulting to 1000 [ 1588.085651][T18577] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1590.273673][T18590] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1590.311276][T18590] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1590.351488][T18590] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1590.357946][T18590] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1591.567932][ T9396] Bluetooth: hci4: command 0x040f tx timeout [ 1591.876971][T18603] warn_alloc: 3 callbacks suppressed [ 1591.876987][T18603] syz.1.3255: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1591.898305][T18603] CPU: 1 PID: 18603 Comm: syz.1.3255 Not tainted syzkaller #0 [ 1591.905814][T18603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1591.915905][T18603] Call Trace: [ 1591.919233][T18603] [ 1591.922221][T18603] dump_stack_lvl+0x18c/0x250 [ 1591.927733][T18603] ? show_regs_print_info+0x20/0x20 [ 1591.932991][T18603] ? load_image+0x420/0x420 [ 1591.937553][T18603] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1591.944127][T18603] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1591.950684][T18603] warn_alloc+0x246/0x340 [ 1591.955056][T18603] ? stack_trace_save+0xaa/0x100 [ 1591.960037][T18603] ? zone_watermark_ok_safe+0x230/0x230 [ 1591.965667][T18603] ? kasan_set_track+0x5f/0x70 [ 1591.970474][T18603] ? kasan_set_track+0x4e/0x70 [ 1591.975277][T18603] ? __kasan_kmalloc+0x8f/0xa0 [ 1591.980100][T18603] ? xsk_init_queue+0xad/0x100 [ 1591.984916][T18603] ? xsk_setsockopt+0x413/0x750 [ 1591.989819][T18603] ? do_sock_setsockopt+0x175/0x1a0 [ 1591.995051][T18603] ? __x64_sys_setsockopt+0x182/0x200 [ 1592.000460][T18603] __vmalloc_node_range+0x129/0x1320 [ 1592.005835][T18603] ? free_vm_area+0x50/0x50 [ 1592.010400][T18603] vmalloc_user+0x74/0x80 [ 1592.014776][T18603] ? xskq_create+0xbf/0x170 [ 1592.019330][T18603] xskq_create+0xbf/0x170 [ 1592.023713][T18603] xsk_init_queue+0xad/0x100 [ 1592.028350][T18603] xsk_setsockopt+0x413/0x750 [ 1592.033072][T18603] ? xsk_poll+0x670/0x670 [ 1592.037468][T18603] ? __fget_files+0x28/0x460 [ 1592.042125][T18603] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1592.047722][T18603] ? security_socket_setsockopt+0x7e/0xa0 [ 1592.053484][T18603] ? xsk_poll+0x670/0x670 [ 1592.057867][T18603] do_sock_setsockopt+0x175/0x1a0 [ 1592.062939][T18603] ? __fdget+0x180/0x210 [ 1592.067238][T18603] __x64_sys_setsockopt+0x182/0x200 [ 1592.072503][T18603] do_syscall_64+0x55/0xb0 [ 1592.076973][T18603] ? clear_bhb_loop+0x40/0x90 [ 1592.081824][T18603] ? clear_bhb_loop+0x40/0x90 [ 1592.086548][T18603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1592.092490][T18603] RIP: 0033:0x7fdaba99e0d9 [ 1592.096945][T18603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1592.116599][T18603] RSP: 002b:00007fdabb8d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1592.125069][T18603] RAX: ffffffffffffffda RBX: 00007fdabac25fa0 RCX: 00007fdaba99e0d9 [ 1592.133087][T18603] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 1592.141107][T18603] RBP: 00007fdabaa35024 R08: 0000000000000029 R09: 0000000000000000 [ 1592.149115][T18603] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1592.157126][T18603] R13: 00007fdabac26038 R14: 00007fdabac25fa0 R15: 00007ffd1c66bf08 [ 1592.165157][T18603] [ 1592.198385][T18603] Mem-Info: [ 1592.206182][T18603] active_anon:15153 inactive_anon:0 isolated_anon:0 [ 1592.206182][T18603] active_file:17608 inactive_file:40841 isolated_file:0 [ 1592.206182][T18603] unevictable:768 dirty:90 writeback:0 [ 1592.206182][T18603] slab_reclaimable:6259 slab_unreclaimable:97855 [ 1592.206182][T18603] mapped:27501 shmem:11107 pagetables:570 [ 1592.206182][T18603] sec_pagetables:0 bounce:0 [ 1592.206182][T18603] kernel_misc_reclaimable:0 [ 1592.206182][T18603] free:1339430 free_pcp:4054 free_cma:0 [ 1592.257202][T18603] Node 0 active_anon:62012kB inactive_anon:0kB active_file:70432kB inactive_file:163160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111404kB dirty:360kB writeback:0kB shmem:44192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12260kB pagetables:2280kB sec_pagetables:0kB all_unreclaimable? no [ 1592.289625][ C0] vkms_vblank_simulate: vblank timer overrun [ 1592.295992][T18603] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1592.326218][ C0] vkms_vblank_simulate: vblank timer overrun [ 1592.336199][T18603] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1592.350321][ T9396] Bluetooth: hci3: command 0x0c1a tx timeout [ 1592.372341][ T9396] Bluetooth: hci2: command 0x040f tx timeout [ 1592.378466][T18603] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1592.384538][T18603] Node 0 DMA32 free:1435128kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:58976kB inactive_anon:0kB active_file:70432kB inactive_file:162332kB unevictable:1536kB writepending:360kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:6920kB local_pcp:1268kB free_cma:0kB [ 1592.414901][ C0] vkms_vblank_simulate: vblank timer overrun [ 1592.425601][T18603] lowmem_reserve[]: 0 0 0 0 0 [ 1592.430758][T15901] Bluetooth: hci0: command 0x040f tx timeout [ 1592.436951][T18603] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1592.513834][ T5781] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1592.522030][T15901] Bluetooth: hci1: command 0xfc11 tx timeout [ 1592.540062][T18603] lowmem_reserve[]: 0 0 0 0 0 [ 1592.613069][T18603] Node 1 Normal free:3905712kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12568kB local_pcp:12112kB free_cma:0kB [ 1592.642804][ C0] vkms_vblank_simulate: vblank timer overrun [ 1592.740084][T18603] lowmem_reserve[]: 0 0 0 0 0 [ 1592.755302][T18603] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1592.807761][T18603] Node 0 DMA32: 1159*4kB (UME) 1692*8kB (UME) 1080*16kB (UME) 637*32kB (UME) 177*64kB (UME) 91*128kB (UME) 91*256kB (UME) 41*512kB (UME) 27*1024kB (UME) 12*2048kB (M) 309*4096kB (UM) = 1440988kB [ 1592.881703][T18603] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1592.901538][T18603] Node 1 Normal: 254*4kB (UME) 55*8kB (UME) 44*16kB (UME) 192*32kB (UME) 55*64kB (UME) 11*128kB (UE) 3*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3905712kB [ 1592.940009][T18603] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1592.949620][T18603] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1592.979977][T18603] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1592.989634][T18603] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1593.020141][T18603] 64260 total pagecache pages [ 1593.024857][T18603] 2 pages in swap cache [ 1593.029199][T18603] Free swap = 124468kB [ 1593.039952][T18603] Total swap = 124996kB [ 1593.050065][T18603] 2097051 pages RAM [ 1593.053914][T18603] 0 pages HighMem/MovableOnly [ 1593.069997][T18603] 416955 pages reserved [ 1593.074247][T18603] 0 pages cma reserved [ 1595.176192][T18635] tipc: Started in network mode [ 1595.195041][T18635] tipc: Node identity 2ab62b3da33f, cluster identity 4711 [ 1595.431898][T18635] tipc: Enabled bearer , priority 1 [ 1595.621344][T18637] tipc: Resetting bearer [ 1596.389789][T18637] tipc: Disabling bearer [ 1596.653899][T18645] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1596.912189][T18649] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1597.697983][T18656] serio: Serial port pts0 [ 1597.840947][T18661] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1599.968766][T18665] IPv6: sit1: Disabled Multicast RS [ 1600.206484][T18665] sit1: entered allmulticast mode [ 1600.410954][T18670] NILFS (nullb0): couldn't find nilfs on the device [ 1600.550105][T18670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1600.558847][T18670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1602.745827][T18683] warn_alloc: 3 callbacks suppressed [ 1602.745845][T18683] syz.3.3276: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1602.804024][T18683] CPU: 1 PID: 18683 Comm: syz.3.3276 Not tainted syzkaller #0 [ 1602.811572][T18683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1602.821662][T18683] Call Trace: [ 1602.824985][T18683] [ 1602.827974][T18683] dump_stack_lvl+0x18c/0x250 [ 1602.832727][T18683] ? show_regs_print_info+0x20/0x20 [ 1602.837987][T18683] ? load_image+0x420/0x420 [ 1602.842552][T18683] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1602.849016][T18683] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1602.855569][T18683] warn_alloc+0x246/0x340 [ 1602.859935][T18683] ? stack_trace_save+0xaa/0x100 [ 1602.864945][T18683] ? zone_watermark_ok_safe+0x230/0x230 [ 1602.870568][T18683] ? kasan_set_track+0x5f/0x70 [ 1602.875416][T18683] ? kasan_set_track+0x4e/0x70 [ 1602.880228][T18683] ? __kasan_kmalloc+0x8f/0xa0 [ 1602.885045][T18683] ? xsk_init_queue+0xad/0x100 [ 1602.889864][T18683] ? xsk_setsockopt+0x413/0x750 [ 1602.894766][T18683] ? do_sock_setsockopt+0x175/0x1a0 [ 1602.900017][T18683] ? __x64_sys_setsockopt+0x182/0x200 [ 1602.905742][T18683] __vmalloc_node_range+0x129/0x1320 [ 1602.911159][T18683] ? free_vm_area+0x50/0x50 [ 1602.915738][T18683] vmalloc_user+0x74/0x80 [ 1602.920122][T18683] ? xskq_create+0xbf/0x170 [ 1602.924676][T18683] xskq_create+0xbf/0x170 [ 1602.929041][T18683] xsk_init_queue+0xad/0x100 [ 1602.933668][T18683] xsk_setsockopt+0x413/0x750 [ 1602.938384][T18683] ? xsk_poll+0x670/0x670 [ 1602.942764][T18683] ? __fget_files+0x28/0x460 [ 1602.947404][T18683] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1602.953098][T18683] ? security_socket_setsockopt+0x7e/0xa0 [ 1602.958852][T18683] ? xsk_poll+0x670/0x670 [ 1602.963222][T18683] do_sock_setsockopt+0x175/0x1a0 [ 1602.968289][T18683] ? __fdget+0x180/0x210 [ 1602.972585][T18683] __x64_sys_setsockopt+0x182/0x200 [ 1602.977826][T18683] do_syscall_64+0x55/0xb0 [ 1602.982268][T18683] ? clear_bhb_loop+0x40/0x90 [ 1602.986958][T18683] ? clear_bhb_loop+0x40/0x90 [ 1602.991664][T18683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1602.997589][T18683] RIP: 0033:0x7f35e7b9e0d9 [ 1603.002047][T18683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1603.021690][T18683] RSP: 002b:00007f35e89c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1603.030122][T18683] RAX: ffffffffffffffda RBX: 00007f35e7e25fa0 RCX: 00007f35e7b9e0d9 [ 1603.038113][T18683] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 1603.046098][T18683] RBP: 00007f35e7c35024 R08: 0000000000000029 R09: 0000000000000000 [ 1603.054113][T18683] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1603.062128][T18683] R13: 00007f35e7e26038 R14: 00007f35e7e25fa0 R15: 00007ffe132068f8 [ 1603.070135][T18683] [ 1603.090155][T18683] Mem-Info: [ 1603.093855][T18683] active_anon:12321 inactive_anon:383 isolated_anon:0 [ 1603.093855][T18683] active_file:17608 inactive_file:40845 isolated_file:0 [ 1603.093855][T18683] unevictable:768 dirty:148 writeback:0 [ 1603.093855][T18683] slab_reclaimable:6255 slab_unreclaimable:98070 [ 1603.093855][T18683] mapped:30636 shmem:6986 pagetables:625 [ 1603.093855][T18683] sec_pagetables:0 bounce:0 [ 1603.093855][T18683] kernel_misc_reclaimable:0 [ 1603.093855][T18683] free:1336312 free_pcp:9229 free_cma:0 [ 1603.209788][T18683] Node 0 active_anon:44344kB inactive_anon:32kB active_file:70432kB inactive_file:163176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122644kB dirty:592kB writeback:0kB shmem:26508kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12280kB pagetables:2500kB sec_pagetables:0kB all_unreclaimable? no [ 1603.364675][T18683] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1603.469330][T18683] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1603.536193][T18683] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1603.542248][T18683] Node 0 DMA32 free:1422456kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:56176kB inactive_anon:0kB active_file:70432kB inactive_file:162352kB unevictable:1536kB writepending:592kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:20092kB local_pcp:13688kB free_cma:0kB [ 1603.602572][T18683] lowmem_reserve[]: 0 0 0 0 0 [ 1603.612262][T18683] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1603.679043][T18689] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1604.417469][T18683] lowmem_reserve[]: 0 0 0 0 0 [ 1604.461345][T18683] Node 1 Normal free:3905712kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12568kB local_pcp:456kB free_cma:0kB [ 1604.657049][T18683] lowmem_reserve[]: 0 0 0 0 0 [ 1604.669356][T18683] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1604.682350][T18683] Node 0 DMA32: 589*4kB (ME) 1375*8kB (UME) 1111*16kB (UME) 632*32kB (UME) 277*64kB (UME) 113*128kB (UME) 94*256kB (UME) 41*512kB (UME) 27*1024kB (UME) 4*2048kB (M) 309*4096kB (UM) = 1430108kB [ 1604.701747][T18683] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1604.713830][T18683] Node 1 Normal: 254*4kB (UME) 55*8kB (UME) 44*16kB (UME) 192*32kB (UME) 55*64kB (UME) 11*128kB (UE) 3*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3905712kB [ 1604.740051][T18683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1604.749712][T18683] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1604.759149][T18683] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1604.768924][T18683] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1604.778314][T18683] 66255 total pagecache pages [ 1604.783150][T18683] 2 pages in swap cache [ 1604.787342][T18683] Free swap = 124712kB [ 1604.791653][T18683] Total swap = 124996kB [ 1604.795902][T18683] 2097051 pages RAM [ 1604.799745][T18683] 0 pages HighMem/MovableOnly [ 1604.804842][T18683] 416955 pages reserved [ 1604.809125][T18683] 0 pages cma reserved [ 1605.195542][T18700] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1607.467862][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.474309][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.309066][T18709] IPv6: sit1: Disabled Multicast RS [ 1608.564923][T18709] sit1: entered allmulticast mode [ 1608.891416][T18721] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1612.325259][T18751] NILFS (nullb0): couldn't find nilfs on the device [ 1612.580496][T18748] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1612.586825][T18748] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1612.593508][T18748] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1612.606515][T18748] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1612.759973][T18751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1612.768662][T18751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1612.810750][T18753] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1613.940065][T15901] Bluetooth: hci4: command 0x040f tx timeout [ 1614.660072][T15901] Bluetooth: hci0: command 0x040f tx timeout [ 1614.661051][ T9396] Bluetooth: hci3: command 0x0c1a tx timeout [ 1614.668002][ T5088] Bluetooth: hci2: command 0x040f tx timeout [ 1614.680987][T18766] warn_alloc: 3 callbacks suppressed [ 1614.680996][T18766] syz.0.3300: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1614.800116][T18766] CPU: 1 PID: 18766 Comm: syz.0.3300 Not tainted syzkaller #0 [ 1614.807637][T18766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1614.817726][T18766] Call Trace: [ 1614.820450][ T5781] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1614.821013][T18766] [ 1614.821025][T18766] dump_stack_lvl+0x18c/0x250 [ 1614.821056][T18766] ? show_regs_print_info+0x20/0x20 [ 1614.841493][T18766] ? load_image+0x420/0x420 [ 1614.846059][T18766] ? __rcu_read_unlock+0x7c/0xd0 [ 1614.851031][T18766] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1614.857484][T18766] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1614.864023][T18766] warn_alloc+0x246/0x340 [ 1614.868389][T18766] ? stack_trace_save+0xaa/0x100 [ 1614.873402][T18766] ? zone_watermark_ok_safe+0x230/0x230 [ 1614.878970][T18766] ? kasan_set_track+0x5f/0x70 [ 1614.883764][T18766] ? kasan_set_track+0x4e/0x70 [ 1614.888556][T18766] ? __kasan_kmalloc+0x8f/0xa0 [ 1614.893351][T18766] ? xsk_init_queue+0xad/0x100 [ 1614.898169][T18766] ? xsk_setsockopt+0x413/0x750 [ 1614.903068][T18766] ? do_sock_setsockopt+0x175/0x1a0 [ 1614.908328][T18766] ? __x64_sys_setsockopt+0x182/0x200 [ 1614.913724][T18766] __vmalloc_node_range+0x129/0x1320 [ 1614.919069][T18766] ? free_vm_area+0x50/0x50 [ 1614.923621][T18766] vmalloc_user+0x74/0x80 [ 1614.927987][T18766] ? xskq_create+0xbf/0x170 [ 1614.932517][T18766] xskq_create+0xbf/0x170 [ 1614.936886][T18766] xsk_init_queue+0xad/0x100 [ 1614.941503][T18766] xsk_setsockopt+0x413/0x750 [ 1614.946210][T18766] ? xsk_poll+0x670/0x670 [ 1614.950578][T18766] ? __fget_files+0x28/0x460 [ 1614.955193][T18766] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1614.960770][T18766] ? security_socket_setsockopt+0x7e/0xa0 [ 1614.966523][T18766] ? xsk_poll+0x670/0x670 [ 1614.970910][T18766] do_sock_setsockopt+0x175/0x1a0 [ 1614.975968][T18766] ? __fdget+0x180/0x210 [ 1614.980247][T18766] __x64_sys_setsockopt+0x182/0x200 [ 1614.985489][T18766] do_syscall_64+0x55/0xb0 [ 1614.989941][T18766] ? clear_bhb_loop+0x40/0x90 [ 1614.994653][T18766] ? clear_bhb_loop+0x40/0x90 [ 1614.999361][T18766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1615.005279][T18766] RIP: 0033:0x7fe1e279e0d9 [ 1615.009718][T18766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1615.029695][T18766] RSP: 002b:00007fe1e35b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1615.038133][T18766] RAX: ffffffffffffffda RBX: 00007fe1e2a25fa0 RCX: 00007fe1e279e0d9 [ 1615.046148][T18766] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 1615.054161][T18766] RBP: 00007fe1e2835024 R08: 0000000000000029 R09: 0000000000000000 [ 1615.062256][T18766] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1615.070242][T18766] R13: 00007fe1e2a26038 R14: 00007fe1e2a25fa0 R15: 00007ffdd0a84448 [ 1615.078247][T18766] [ 1615.096546][T18766] Mem-Info: [ 1615.099826][T18766] active_anon:5439 inactive_anon:0 isolated_anon:0 [ 1615.099826][T18766] active_file:17608 inactive_file:40850 isolated_file:0 [ 1615.099826][T18766] unevictable:768 dirty:88 writeback:0 [ 1615.099826][T18766] slab_reclaimable:6248 slab_unreclaimable:98597 [ 1615.099826][T18766] mapped:25026 shmem:1360 pagetables:591 [ 1615.099826][T18766] sec_pagetables:0 bounce:0 [ 1615.099826][T18766] kernel_misc_reclaimable:0 [ 1615.099826][T18766] free:1345329 free_pcp:6874 free_cma:0 [ 1615.158021][T18766] Node 0 active_anon:21756kB inactive_anon:0kB active_file:70432kB inactive_file:163196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100104kB dirty:352kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12272kB pagetables:2364kB sec_pagetables:0kB all_unreclaimable? no [ 1615.240910][T18766] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1615.399008][T18766] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1615.529119][T18766] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1615.558203][T18766] Node 0 DMA32 free:1459760kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21724kB inactive_anon:0kB active_file:70432kB inactive_file:162368kB unevictable:1536kB writepending:352kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:16124kB local_pcp:14096kB free_cma:0kB [ 1615.602897][T18766] lowmem_reserve[]: 0 0 0 0 0 [ 1615.627032][T18766] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1615.784062][T18766] lowmem_reserve[]: 0 0 0 0 0 [ 1615.795464][T18766] Node 1 Normal free:3905712kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12568kB local_pcp:456kB free_cma:0kB [ 1616.892087][T18780] lo speed is unknown, defaulting to 1000 [ 1617.329001][T18766] lowmem_reserve[]: 0 0 0 0 0 [ 1617.337962][T18766] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1617.360136][T18766] Node 0 DMA32: 0*4kB 71*8kB (ME) 117*16kB (UE) 190*32kB (UME) 68*64kB (UME) 142*128kB (UME) 94*256kB (UME) 41*512kB (UME) 27*1024kB (UME) 11*2048kB (M) 309*4096kB (UM) = 1391944kB [ 1617.381261][T18766] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1617.393264][T18766] Node 1 Normal: 254*4kB (UME) 55*8kB (UME) 44*16kB (UME) 192*32kB (UME) 55*64kB (UME) 11*128kB (UE) 3*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3905712kB [ 1617.414950][T18766] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1617.424665][T18766] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1617.434804][T18766] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1617.444485][T18766] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1617.454034][T18766] 76244 total pagecache pages [ 1617.458775][T18766] 2 pages in swap cache [ 1617.463085][T18766] Free swap = 124444kB [ 1617.467394][T18766] Total swap = 124996kB [ 1617.475385][T18766] 2097051 pages RAM [ 1617.479434][T18766] 0 pages HighMem/MovableOnly [ 1617.484729][T18766] 416955 pages reserved [ 1617.488930][T18766] 0 pages cma reserved [ 1618.552831][T18787] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1621.191680][T18804] syz.3.3312 (18804) used greatest stack depth: 18824 bytes left [ 1624.089454][T18827] lo speed is unknown, defaulting to 1000 [ 1624.872769][T18834] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1625.988195][T12671] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1626.350211][T12671] usb 3-1: Using ep0 maxpacket: 8 [ 1626.422305][T12671] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1626.450454][T12671] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 1626.471642][T12671] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1626.482214][T12671] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.531578][T18845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1629.628517][ T5814] usb 3-1: USB disconnect, device number 55 [ 1632.511219][T18884] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1632.876067][T18891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3333'. [ 1636.474537][T18919] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1636.639217][T18919] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1636.658522][T18919] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1636.676356][T18919] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1636.770312][T18929] NILFS (nullb0): couldn't find nilfs on the device [ 1636.871778][T18920] lo speed is unknown, defaulting to 1000 [ 1637.400170][T16393] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1637.546998][T18938] No such timeout policy "syz1" [ 1637.860057][ T9396] Bluetooth: hci4: command 0x040f tx timeout [ 1638.175310][T16393] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1638.224991][T16393] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1638.416687][T16393] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1638.460108][T16393] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.472716][T16393] usb 4-1: Product: syz [ 1638.476957][T16393] usb 4-1: Manufacturer: syz [ 1638.482637][T16393] usb 4-1: SerialNumber: syz [ 1638.490820][T16393] usb 4-1: config 0 descriptor?? [ 1638.660081][ T9396] Bluetooth: hci3: command 0x0c1a tx timeout [ 1638.664331][ T5088] Bluetooth: hci2: command 0x040f tx timeout [ 1638.740076][ T5781] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1638.747918][ T9396] Bluetooth: hci0: command 0x040f tx timeout [ 1638.748120][ T5088] Bluetooth: hci1: command 0xfc11 tx timeout [ 1639.943763][T16393] mos7840 4-1:0.0: required endpoints missing [ 1640.376442][T16393] usb 4-1: USB disconnect, device number 49 [ 1640.774601][T18953] syz.0.3351: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1640.842764][T18953] CPU: 0 PID: 18953 Comm: syz.0.3351 Not tainted syzkaller #0 [ 1640.850306][T18953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1640.860600][T18953] Call Trace: [ 1640.863929][T18953] [ 1640.866901][T18953] dump_stack_lvl+0x18c/0x250 [ 1640.871661][T18953] ? show_regs_print_info+0x20/0x20 [ 1640.876927][T18953] ? load_image+0x420/0x420 [ 1640.881589][T18953] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1640.888099][T18953] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1640.894663][T18953] warn_alloc+0x246/0x340 [ 1640.899016][T18953] ? stack_trace_save+0xaa/0x100 [ 1640.903993][T18953] ? zone_watermark_ok_safe+0x230/0x230 [ 1640.909584][T18953] ? kasan_set_track+0x5f/0x70 [ 1640.914348][T18953] ? kasan_set_track+0x4e/0x70 [ 1640.919132][T18953] ? __kasan_kmalloc+0x8f/0xa0 [ 1640.923896][T18953] ? xsk_init_queue+0xad/0x100 [ 1640.928685][T18953] ? xsk_setsockopt+0x413/0x750 [ 1640.933575][T18953] ? do_sock_setsockopt+0x175/0x1a0 [ 1640.938777][T18953] ? __x64_sys_setsockopt+0x182/0x200 [ 1640.944166][T18953] __vmalloc_node_range+0x129/0x1320 [ 1640.949551][T18953] ? free_vm_area+0x50/0x50 [ 1640.954115][T18953] vmalloc_user+0x74/0x80 [ 1640.958518][T18953] ? xskq_create+0xbf/0x170 [ 1640.963059][T18953] xskq_create+0xbf/0x170 [ 1640.967437][T18953] xsk_init_queue+0xad/0x100 [ 1640.972054][T18953] xsk_setsockopt+0x413/0x750 [ 1640.976753][T18953] ? xsk_poll+0x670/0x670 [ 1640.981125][T18953] ? __fget_files+0x28/0x460 [ 1640.985760][T18953] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1640.991356][T18953] ? security_socket_setsockopt+0x7e/0xa0 [ 1640.997107][T18953] ? xsk_poll+0x670/0x670 [ 1641.001489][T18953] do_sock_setsockopt+0x175/0x1a0 [ 1641.006572][T18953] ? __fdget+0x180/0x210 [ 1641.010847][T18953] __x64_sys_setsockopt+0x182/0x200 [ 1641.016081][T18953] do_syscall_64+0x55/0xb0 [ 1641.020516][T18953] ? clear_bhb_loop+0x40/0x90 [ 1641.025228][T18953] ? clear_bhb_loop+0x40/0x90 [ 1641.029925][T18953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1641.035834][T18953] RIP: 0033:0x7fe1e279e0d9 [ 1641.040334][T18953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1641.059968][T18953] RSP: 002b:00007fe1e35b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1641.068417][T18953] RAX: ffffffffffffffda RBX: 00007fe1e2a25fa0 RCX: 00007fe1e279e0d9 [ 1641.076403][T18953] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 1641.084390][T18953] RBP: 00007fe1e2835024 R08: 0000000000000029 R09: 0000000000000000 [ 1641.092380][T18953] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1641.100383][T18953] R13: 00007fe1e2a26038 R14: 00007fe1e2a25fa0 R15: 00007ffdd0a84448 [ 1641.108399][T18953] [ 1641.140687][T18953] Mem-Info: [ 1641.143869][T18953] active_anon:26164 inactive_anon:0 isolated_anon:0 [ 1641.143869][T18953] active_file:17608 inactive_file:40864 isolated_file:0 [ 1641.143869][T18953] unevictable:2816 dirty:19 writeback:2 [ 1641.143869][T18953] slab_reclaimable:6225 slab_unreclaimable:98442 [ 1641.143869][T18953] mapped:40970 shmem:22196 pagetables:648 [ 1641.143869][T18953] sec_pagetables:0 bounce:0 [ 1641.143869][T18953] kernel_misc_reclaimable:0 [ 1641.143869][T18953] free:1322123 free_pcp:7201 free_cma:0 [ 1641.210364][T18953] Node 0 active_anon:105276kB inactive_anon:0kB active_file:70432kB inactive_file:163252kB unevictable:9728kB isolated(anon):0kB isolated(file):0kB mapped:163880kB dirty:76kB writeback:8kB shmem:87956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB writeback_tmp:0kB kernel_stack:12292kB pagetables:2592kB sec_pagetables:0kB all_unreclaimable? no [ 1641.260031][T18953] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1641.344215][T18953] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1641.377241][T18952] netlink: 'syz.2.3352': attribute type 1 has an invalid length. [ 1641.400155][T18953] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1641.410963][T18953] Node 0 DMA32 free:1367412kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:108492kB inactive_anon:0kB active_file:70432kB inactive_file:162440kB unevictable:9728kB writepending:24kB present:3129332kB managed:2586840kB mlocked:8192kB bounce:0kB free_pcp:12244kB local_pcp:5980kB free_cma:0kB [ 1641.479093][T18953] lowmem_reserve[]: 0 0 0 0 0 [ 1641.497257][T18953] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1641.585379][T18952] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1641.693628][T18953] lowmem_reserve[]: 0 0 0 0 0 [ 1641.794379][T18953] Node 1 Normal free:3905712kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12568kB local_pcp:12112kB free_cma:0kB [ 1641.889963][T18953] lowmem_reserve[]: 0 0 0 0 0 [ 1641.894767][T18953] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1641.964851][T18953] Node 0 DMA32: 2*4kB (UE) 70*8kB (UE) 108*16kB (ME) 87*32kB (E) 66*64kB (UE) 39*128kB (UE) 79*256kB (UME) 41*512kB (UME) 27*1024kB (UME) 8*2048kB (M) 309*4096kB (UM) = 1365208kB [ 1642.021815][T18953] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1642.058193][T18953] Node 1 Normal: 254*4kB (UME) 55*8kB (UME) 44*16kB (UME) 192*32kB (UME) 55*64kB (UME) 11*128kB (UE) 3*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3905712kB [ 1642.100345][T18953] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1642.122746][T18953] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1642.139941][T18953] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1642.159709][T18953] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1642.189405][T18953] 82883 total pagecache pages [ 1642.198122][T18953] 2 pages in swap cache [ 1642.205697][T18953] Free swap = 124432kB [ 1642.221152][T18953] Total swap = 124996kB [ 1642.225373][T18953] 2097051 pages RAM [ 1642.280050][T18953] 0 pages HighMem/MovableOnly [ 1642.292317][T18953] 416955 pages reserved [ 1642.333362][T18953] 0 pages cma reserved [ 1645.165025][T18992] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1645.176919][T18992] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1645.196293][T18984] netlink: 'syz.2.3361': attribute type 1 has an invalid length. [ 1645.224207][T18984] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1645.741267][T19003] "syz.2.3368" (19003) uses obsolete ecb(arc4) skcipher [ 1648.787215][T19020] netlink: 'syz.1.3374': attribute type 1 has an invalid length. [ 1648.820744][T19020] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1649.328975][T19043] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1649.347307][T19043] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1649.471745][T11353] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1649.672147][T11353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1649.683880][T11353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1649.702982][T11353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1649.772237][T11353] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1649.781569][T11353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.790511][T11353] usb 4-1: Product: syz [ 1649.794817][T11353] usb 4-1: Manufacturer: syz [ 1649.799543][T11353] usb 4-1: SerialNumber: syz [ 1649.825505][T11353] usb 4-1: config 0 descriptor?? [ 1650.141905][T11353] adutux 4-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 1650.177929][T11353] usb 4-1: USB disconnect, device number 50 [ 1652.166608][T19057] netlink: 'syz.2.3386': attribute type 1 has an invalid length. [ 1652.192571][T19057] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1652.614636][T19069] kvm: emulating exchange as write [ 1652.805593][T19078] ieee802154 phy0 wpan0: encryption failed: -22 [ 1654.593536][T19087] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1654.648896][T19087] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1654.834327][T19087] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1654.845706][T19087] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1655.966710][T19104] netlink: 'syz.1.3398': attribute type 1 has an invalid length. [ 1655.989789][T19104] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1656.021395][ T5088] Bluetooth: hci4: command 0x040f tx timeout [ 1656.193062][T19114] ÿ: renamed from dummy0 (while UP) [ 1656.540029][ T5969] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 1656.988850][ T5088] Bluetooth: hci2: command 0x040f tx timeout [ 1656.988870][ T9396] Bluetooth: hci0: command 0x040f tx timeout [ 1656.995331][ T5088] Bluetooth: hci3: command 0x0c1a tx timeout [ 1657.185317][ T5969] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1657.207757][ T5969] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1657.220362][T15901] Bluetooth: hci1: command 0xfc11 tx timeout [ 1657.239993][ T5781] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1657.266871][ T5969] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1657.294752][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.311464][ T5969] usb 2-1: config 0 descriptor?? [ 1658.476469][ T5969] koneplus 0003:1E7D:2E22.0005: unknown main item tag 0x3 [ 1659.263786][ T5969] koneplus 0003:1E7D:2E22.0005: ignoring exceeding usage max [ 1659.303271][ T5969] koneplus 0003:1E7D:2E22.0005: unknown main item tag 0x0 [ 1659.313089][ T5969] koneplus 0003:1E7D:2E22.0005: unknown main item tag 0x0 [ 1659.321346][ T5969] koneplus 0003:1E7D:2E22.0005: unknown main item tag 0x0 [ 1659.328685][ T5969] koneplus 0003:1E7D:2E22.0005: unknown main item tag 0x0 [ 1659.336286][ T5969] koneplus 0003:1E7D:2E22.0005: unknown main item tag 0x0 [ 1659.343883][ T5969] koneplus 0003:1E7D:2E22.0005: unknown main item tag 0x0 [ 1659.351377][ T5969] koneplus 0003:1E7D:2E22.0005: unknown main item tag 0x0 [ 1659.358639][ T5969] koneplus 0003:1E7D:2E22.0005: unknown main item tag 0x0 [ 1659.366248][ T5969] koneplus 0003:1E7D:2E22.0005: unknown main item tag 0x0 [ 1659.373763][ T5969] koneplus 0003:1E7D:2E22.0005: unknown main item tag 0x0 [ 1659.381385][ T5969] koneplus 0003:1E7D:2E22.0005: unknown main item tag 0x0 [ 1659.388622][ T5969] koneplus 0003:1E7D:2E22.0005: unknown main item tag 0x0 [ 1659.398755][ T5969] koneplus 0003:1E7D:2E22.0005: unknown main item tag 0x0 [ 1659.406211][ T5969] koneplus 0003:1E7D:2E22.0005: unknown main item tag 0x0 [ 1659.420028][ T5969] koneplus 0003:1E7D:2E22.0005: unknown main item tag 0x0 [ 1659.434160][ T5969] koneplus 0003:1E7D:2E22.0005: hidraw0: USB HID v0.04 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 1659.458041][ T5969] usb 2-1: USB disconnect, device number 52 [ 1660.141950][T19131] fido_id[19131]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1660.693644][T19143] netlink: 'syz.0.3409': attribute type 1 has an invalid length. [ 1660.716896][T19143] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1662.364141][T19154] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1662.423576][T19154] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1662.638131][T19154] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1663.127341][T19154] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1663.170215][ T3538] Bluetooth: hci1: Frame reassembly failed (-84) [ 1663.855517][T19168] NILFS (nullb0): couldn't find nilfs on the device [ 1664.479939][T15901] Bluetooth: hci4: command 0x040f tx timeout [ 1664.510105][T15901] Bluetooth: hci2: command 0x040f tx timeout [ 1664.659979][T15901] Bluetooth: hci3: command 0x0c1a tx timeout [ 1664.673673][ T5812] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1664.959510][ T5812] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1664.969482][ T5812] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1664.992497][ T5812] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1665.002002][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.010385][ T5812] usb 3-1: Product: syz [ 1665.014619][ T5812] usb 3-1: Manufacturer: syz [ 1665.019258][ T5812] usb 3-1: SerialNumber: syz [ 1665.030644][ T5812] usb 3-1: config 0 descriptor?? [ 1665.129517][T19183] netlink: 'syz.1.3420': attribute type 1 has an invalid length. [ 1665.162450][T19183] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1665.170227][T15901] Bluetooth: hci0: command 0x040f tx timeout [ 1665.220544][ T5781] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1666.500823][ T5812] mos7840 3-1:0.0: required endpoints missing [ 1667.045472][ T5812] usb 3-1: USB disconnect, device number 56 [ 1668.743958][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.294814][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.317799][T19221] netlink: 'syz.1.3431': attribute type 1 has an invalid length. [ 1669.351243][T19221] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1669.391704][T19225] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1669.418863][T19225] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1669.445187][T19225] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1669.458992][T19225] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1671.460120][ T5781] Bluetooth: hci0: command 0x040f tx timeout [ 1671.460139][ T5088] Bluetooth: hci3: command 0x0c1a tx timeout [ 1671.460206][ T5088] Bluetooth: hci2: command 0x040f tx timeout [ 1671.466627][ T9396] Bluetooth: hci4: command 0x040f tx timeout [ 1671.547838][T15901] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1675.690996][T19265] netlink: 'syz.3.3442': attribute type 1 has an invalid length. [ 1675.726812][T19265] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1676.867986][T19281] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1676.880111][T19281] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1678.164455][T19286] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1678.276311][T19286] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1678.455483][T19286] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1678.477233][T19286] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1679.201321][T19303] macvlan2: entered allmulticast mode [ 1679.207015][T19303] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1679.282752][ T9396] Bluetooth: hci2: unexpected event 0x18 length: 247 > 23 [ 1679.780081][ T9396] Bluetooth: hci4: command 0x040f tx timeout [ 1680.340066][ T9396] Bluetooth: hci2: command 0x040f tx timeout [ 1680.519255][T15901] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1680.536077][T15901] Bluetooth: hci0: command 0x040f tx timeout [ 1680.542493][ T9396] Bluetooth: hci3: command 0x0c1a tx timeout [ 1681.200634][T19309] netlink: 'syz.1.3454': attribute type 1 has an invalid length. [ 1681.235189][T19309] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1682.362487][T19323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1682.400246][T19323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1682.462963][T19327] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1683.352215][T19329] 9pnet_fd: Insufficient options for proto=fd [ 1684.314838][T19342] netlink: 'syz.1.3465': attribute type 1 has an invalid length. [ 1684.336747][T19342] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1684.351004][ T5812] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1684.649218][ T5812] usb 3-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.00 [ 1684.684199][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.868234][ T5812] usb 3-1: config 0 descriptor?? [ 1685.503215][ T5812] usbhid 3-1:0.0: can't add hid device: -71 [ 1685.509258][ T5812] usbhid: probe of 3-1:0.0 failed with error -71 [ 1685.584404][ T5812] usb 3-1: USB disconnect, device number 57 [ 1687.446711][T19387] netlink: 'syz.2.3475': attribute type 1 has an invalid length. [ 1687.944136][T19387] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1690.310549][T19409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3483'. [ 1692.803474][T19419] netlink: 'syz.1.3488': attribute type 1 has an invalid length. [ 1692.827972][T19419] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1693.836305][T19440] gtp0: entered promiscuous mode [ 1694.091338][T19448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3496'. [ 1697.040935][T19467] netlink: 'syz.3.3501': attribute type 1 has an invalid length. [ 1697.064096][T19467] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1697.563528][T19478] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1697.585497][T19478] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1700.823591][T19500] netlink: 'syz.3.3512': attribute type 1 has an invalid length. [ 1700.975019][T19500] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1707.134609][T19561] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1707.149404][T19561] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1708.621980][T19572] gtp0: entered promiscuous mode [ 1710.562413][T19595] No such timeout policy "syz1" [ 1711.529316][T19601] NILFS (nullb0): couldn't find nilfs on the device [ 1711.850043][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1712.165860][ T9] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1712.500571][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1712.608793][ T9] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1712.618572][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.648585][ T9] usb 4-1: Product: syz [ 1712.929431][ T9] usb 4-1: Manufacturer: syz [ 1713.044143][ T9] usb 4-1: SerialNumber: syz [ 1713.052301][ T9] usb 4-1: config 0 descriptor?? [ 1713.217073][T19620] gtp0: entered promiscuous mode [ 1714.275382][T19628] No such timeout policy "syz1" [ 1714.386389][ T9] mos7840 4-1:0.0: required endpoints missing [ 1714.415187][ T9] usb 4-1: USB disconnect, device number 51 [ 1714.880040][T19637] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1719.472942][T19663] NILFS (nullb0): couldn't find nilfs on the device [ 1719.749935][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1719.974655][ T9] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1719.997236][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1720.027376][ T9] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1720.050022][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.058338][ T9] usb 4-1: Product: syz [ 1720.064210][ T9] usb 4-1: Manufacturer: syz [ 1720.068944][ T9] usb 4-1: SerialNumber: syz [ 1720.084932][ T9] usb 4-1: config 0 descriptor?? [ 1720.211781][T19670] No such timeout policy "syz1" [ 1722.246298][ T9] mos7840 4-1:0.0: required endpoints missing [ 1722.454194][ T9] usb 4-1: USB disconnect, device number 52 [ 1723.259243][T19695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3565'. [ 1725.289988][T19708] syz.3.3569 (19708) used greatest stack depth: 18664 bytes left [ 1726.471109][T19723] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1730.183306][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.189692][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.455733][T19749] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1731.728668][T19753] NILFS (nullb0): couldn't find nilfs on the device [ 1731.745677][T19753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1731.754712][T19753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1735.010088][T19795] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1737.192158][T19813] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1739.201834][T19834] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1740.199028][ T27] audit: type=1326 audit(1785989884.701:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19840 comm="syz.0.3610" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1e279e0d9 code=0x0 [ 1741.245810][T19869] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1742.575204][T19876] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1743.264356][T19887] netlink: 'syz.2.3622': attribute type 1 has an invalid length. [ 1743.401973][T19887] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1746.312024][T19905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3627'. [ 1747.041806][T19919] netlink: 'syz.3.3634': attribute type 1 has an invalid length. [ 1747.242187][T19919] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1749.600468][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3641'. [ 1750.838202][T19947] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1750.884057][T19960] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1751.036143][T19967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3644'. [ 1751.076137][T19962] netlink: 'syz.1.3644': attribute type 1 has an invalid length. [ 1751.245983][T19962] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1752.815505][T19989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3650'. [ 1754.775732][T19994] lo speed is unknown, defaulting to 1000 [ 1757.272973][T20013] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1757.335086][T20013] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1757.726357][T20015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3657'. [ 1757.738444][T20015] netlink: 'syz.1.3657': attribute type 1 has an invalid length. [ 1757.911746][T20015] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1758.451656][T20031] 9pnet_virtio: no channels available for device syz [ 1760.333312][T20047] lo speed is unknown, defaulting to 1000 [ 1760.830004][T19314] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1761.037571][T19314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1761.079927][T19314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1761.103348][T19314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1761.128080][T19314] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1761.158038][T19314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.185276][T19314] usb 4-1: Product: syz [ 1761.202767][T19314] usb 4-1: Manufacturer: syz [ 1761.207425][T19314] usb 4-1: SerialNumber: syz [ 1761.322273][T19314] usb 4-1: config 0 descriptor?? [ 1761.672594][T19314] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1761.838498][T20062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3670'. [ 1761.857773][T20062] netlink: 'syz.0.3670': attribute type 1 has an invalid length. [ 1761.998641][ T9] usb 4-1: USB disconnect, device number 53 [ 1762.005800][T20062] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1762.896580][T20072] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1763.978829][T20081] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1764.890194][ T9396] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1766.456940][T20113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3685'. [ 1767.552615][T20123] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1768.305363][T20120] netlink: 'syz.2.3687': attribute type 1 has an invalid length. [ 1768.413717][T20120] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1771.931697][T20143] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1772.941171][T20148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3697'. [ 1772.978699][T20148] netlink: 'syz.1.3697': attribute type 1 has an invalid length. [ 1773.014813][T20148] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1773.877858][T20170] netlink: 'syz.3.3701': attribute type 1 has an invalid length. [ 1774.283174][T20170] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1774.560183][ T27] audit: type=1326 audit(1785989919.041:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20179 comm="syz.3.3706" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35e7b9e0d9 code=0x0 [ 1775.344356][T20185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3707'. [ 1775.411421][T20185] netlink: 'syz.1.3707': attribute type 1 has an invalid length. [ 1775.541791][T20185] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1776.684841][T20205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3712'. [ 1777.718838][T20208] netlink: 'syz.0.3714': attribute type 1 has an invalid length. [ 1777.727981][T20208] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1779.417259][T20250] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1779.728150][T20259] netlink: 'syz.2.3727': attribute type 1 has an invalid length. [ 1782.273768][T20259] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1783.971687][T20281] sctp: failed to load transform for md5: -2 [ 1784.768496][T20309] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1785.285452][T20310] netlink: 'syz.1.3738': attribute type 1 has an invalid length. [ 1785.315176][T20310] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1786.893269][T20324] netlink: 'syz.1.3742': attribute type 1 has an invalid length. [ 1786.917869][T20324] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1787.540210][T20347] netlink: 'syz.2.3750': attribute type 1 has an invalid length. [ 1787.688921][T20347] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1787.824270][T20346] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1788.285135][T20352] overlayfs: overlapping lowerdir path [ 1789.435883][T20363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3755'. [ 1790.234516][T20369] netlink: 'syz.1.3756': attribute type 1 has an invalid length. [ 1790.259537][T20369] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1790.370814][T20377] No such timeout policy "syz1" [ 1790.529253][T20386] gtp0: entered promiscuous mode [ 1791.184119][T20393] netlink: 'syz.3.3760': attribute type 1 has an invalid length. [ 1791.402168][T20393] workqueue: Failed to create a rescuer kthread for wq "bond28": -EINTR [ 1792.206364][T20403] lo speed is unknown, defaulting to 1000 [ 1793.132779][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1793.139206][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.207928][ T1835] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1793.225508][T20407] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3767'. [ 1793.412157][ T1835] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1793.423782][ T1835] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1793.439948][ T1835] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1793.453811][ T1835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.464110][ T1835] usb 3-1: Product: syz [ 1793.468431][ T1835] usb 3-1: Manufacturer: syz [ 1793.545569][ T1835] usb 3-1: SerialNumber: syz [ 1793.555312][ T1835] usb 3-1: config 0 descriptor?? [ 1793.563383][ T1835] usb 3-1: can't set config #0, error -71 [ 1793.574793][ T1835] usb 3-1: USB disconnect, device number 58 [ 1793.609044][T20416] No such timeout policy "syz1" [ 1794.142452][T20422] netlink: 'syz.2.3770': attribute type 1 has an invalid length. [ 1794.293043][T20422] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1794.799718][T20439] gadgetfs: bound to dummy_udc driver [ 1795.003489][T20442] netlink: 'syz.2.3774': attribute type 1 has an invalid length. [ 1795.134428][T20442] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1795.158026][T19314] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1795.300849][ C1] gadgetfs: connected [ 1795.307094][T19314] gadgetfs: disconnected [ 1795.486313][T20437] gadgetfs: suspended from state 2 [ 1795.802204][T19314] usb 2-1: device not accepting address 53, error -71 [ 1797.815653][T20457] lo speed is unknown, defaulting to 1000 [ 1798.695647][ T27] audit: type=1800 audit(1785989943.201:162): pid=20471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3772" name="attr_allow_any_host" dev="configfs" ino=59333 res=0 errno=0 [ 1798.738715][T20471] nvmet: adding nsid 1 to subsystem testnqn [ 1798.786128][ T27] audit: type=1800 audit(1785989943.291:163): pid=20471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3772" name="device_path" dev="configfs" ino=60020 res=0 errno=0 [ 1799.136890][ T27] audit: type=1800 audit(1785989943.381:164): pid=20471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3772" name="enable" dev="configfs" ino=60021 res=0 errno=0 [ 1799.197122][T20471] nvmet_rdma: malformed ip/port passed: 127.0.0.1: [ 1799.277095][ T27] audit: type=1800 audit(1785989943.641:165): pid=20471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3772" name="addr_trtype" dev="configfs" ino=60028 res=0 errno=0 [ 1799.318821][ T27] audit: type=1800 audit(1785989943.641:166): pid=20471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3772" name="addr_adrfam" dev="configfs" ino=60029 res=0 errno=0 [ 1799.341634][ T27] audit: type=1800 audit(1785989943.641:167): pid=20471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3772" name="addr_traddr" dev="configfs" ino=60030 res=0 errno=0 [ 1799.364086][ T27] audit: type=1800 audit(1785989943.691:168): pid=20471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3772" name="addr_trsvcid" dev="configfs" ino=60031 res=0 errno=0 [ 1799.839077][T20488] overlayfs: failed to resolve './file0': -2 [ 1799.910773][T20475] netlink: 'syz.0.3782': attribute type 1 has an invalid length. [ 1799.951557][T20475] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1800.575335][ T27] audit: type=1326 audit(1785989945.081:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20504 comm="syz.0.3790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1e279e0d9 code=0x0 [ 1800.598916][ C0] vkms_vblank_simulate: vblank timer overrun [ 1800.860389][T20513] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3792'. [ 1802.077401][T20513] team0 (unregistering): Port device team_slave_0 removed [ 1802.140775][T20513] team0 (unregistering): Port device team_slave_1 removed [ 1802.253929][T20522] netlink: 'syz.0.3795': attribute type 1 has an invalid length. [ 1802.280327][T20522] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1802.713540][T20539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3800'. [ 1802.967729][ T27] audit: type=1326 audit(1785989947.471:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20544 comm="syz.3.3803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35e7b9e0d9 code=0x0 [ 1803.397098][T20556] netlink: 'syz.2.3806': attribute type 1 has an invalid length. [ 1803.507538][T20556] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1805.148536][T20570] No such timeout policy "syz1" [ 1805.455258][ T27] audit: type=1326 audit(1785989949.961:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20585 comm="syz.3.3818" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35e7b9e0d9 code=0x0 [ 1805.536068][T20583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3815'. [ 1805.681308][T19616] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1806.094462][T19616] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1806.158387][T19616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.204239][T19616] usb 3-1: Product: syz [ 1806.229014][T19616] usb 3-1: Manufacturer: syz [ 1806.261087][T19616] usb 3-1: SerialNumber: syz [ 1806.380289][T20594] netlink: 'syz.1.3819': attribute type 1 has an invalid length. [ 1806.407078][T20594] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1806.709986][T19616] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1806.937757][T20617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3827'. [ 1807.056673][ T27] audit: type=1326 audit(1785989951.561:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20618 comm="syz.1.3828" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaba99e0d9 code=0x0 [ 1807.612079][T20626] netlink: 'syz.3.3830': attribute type 1 has an invalid length. [ 1807.799879][T20626] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1808.290039][T19616] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 1808.307985][T19616] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 1808.323124][T19616] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 1808.434842][T19616] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 1808.447637][T19616] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 1808.459972][T19616] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 1808.540081][T19616] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 1808.579576][T19616] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 1808.625286][T19616] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 1808.637584][T19616] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1808.649191][T19616] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1808.669282][T19616] lan78xx: probe of 3-1:1.0 failed with error -71 [ 1808.686581][T19616] usb 3-1: USB disconnect, device number 59 [ 1808.842695][T20644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3836'. [ 1809.072625][ T27] audit: type=1326 audit(1785989953.571:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20648 comm="syz.1.3839" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaba99e0d9 code=0x0 [ 1810.150311][ T5814] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1810.345221][ T5814] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1810.378768][ T5814] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1810.397484][ T5814] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1810.408497][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.417529][ T5814] usb 3-1: Product: syz [ 1810.422201][ T5814] usb 3-1: Manufacturer: syz [ 1810.426847][ T5814] usb 3-1: SerialNumber: syz [ 1810.522222][ T5814] usb 3-1: config 0 descriptor?? [ 1810.966222][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3848'. [ 1812.295057][ T5814] mos7840 3-1:0.0: required endpoints missing [ 1812.319448][ T5814] usb 3-1: USB disconnect, device number 60 [ 1813.819565][T20710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3857'. [ 1814.463149][T20715] lo speed is unknown, defaulting to 1000 [ 1817.879891][ T27] audit: type=1800 audit(1785989962.371:174): pid=20733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3864" name="attr_allow_any_host" dev="configfs" ino=61626 res=0 errno=0 [ 1817.930612][T20733] nvmet_rdma: malformed ip/port passed: 127.0.0.1: [ 1817.974284][T20739] serio: Serial port pts0 [ 1818.020049][ T27] audit: type=1800 audit(1785989962.381:175): pid=20734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3864" name="device_path" dev="configfs" ino=61627 res=0 errno=0 [ 1818.069948][ T27] audit: type=1800 audit(1785989962.411:176): pid=20733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3864" name="enable" dev="configfs" ino=61628 res=0 errno=0 [ 1818.119932][ T27] audit: type=1800 audit(1785989962.411:177): pid=20733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3864" name="addr_trtype" dev="configfs" ino=61629 res=0 errno=0 [ 1818.292694][ T27] audit: type=1800 audit(1785989962.421:178): pid=20733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3864" name="addr_adrfam" dev="configfs" ino=61630 res=0 errno=0 [ 1818.342198][ T27] audit: type=1800 audit(1785989962.421:179): pid=20733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3864" name="addr_traddr" dev="configfs" ino=61631 res=0 errno=0 [ 1818.994270][T20750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3869'. [ 1819.432270][T20762] tipc: Enabled bearer , priority 10 [ 1819.535004][ T27] audit: type=1800 audit(1785989964.041:180): pid=20766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3876" name="attr_allow_any_host" dev="configfs" ino=60860 res=0 errno=0 [ 1819.558293][T20766] nvmet_rdma: malformed ip/port passed: 127.0.0.1: [ 1819.576426][ T27] audit: type=1800 audit(1785989964.041:181): pid=20766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3876" name="device_path" dev="configfs" ino=60861 res=0 errno=0 [ 1819.632861][ T27] audit: type=1800 audit(1785989964.041:182): pid=20766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3876" name="enable" dev="configfs" ino=60862 res=0 errno=0 [ 1819.677692][ T27] audit: type=1800 audit(1785989964.041:183): pid=20766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3876" name="addr_trtype" dev="configfs" ino=60863 res=0 errno=0 [ 1820.150739][T20774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3878'. [ 1820.443089][ T5814] tipc: Node number set to 2307468093 [ 1821.223190][T20794] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1821.451205][T20805] No such timeout policy "syz1" [ 1821.504489][T20801] nvmet_rdma: malformed ip/port passed: 127.0.0.1: [ 1822.290803][T20826] No such timeout policy "syz1" [ 1824.775429][T20840] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1825.018020][T20849] No such timeout policy "syz1" [ 1827.449439][T20868] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3918'. [ 1827.641703][T20877] No such timeout policy "syz1" [ 1827.710921][T20881] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1829.238936][T20887] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1829.300921][T20883] lo speed is unknown, defaulting to 1000 [ 1829.574995][T20899] netlink: 'syz.0.3928': attribute type 4 has an invalid length. [ 1829.794908][T20905] No such timeout policy "syz1" [ 1829.859452][T20907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3932'. [ 1829.892756][T20907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3932'. [ 1831.653553][T20920] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3936'. [ 1833.232758][T20937] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1833.708062][T20946] nvmet_rdma: malformed ip/port passed: 127.0.0.1: [ 1833.710113][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 1833.710148][ T27] audit: type=1800 audit(1785989978.211:191): pid=20946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3945" name="attr_allow_any_host" dev="configfs" ino=62038 res=0 errno=0 [ 1835.649975][ T27] audit: type=1800 audit(1785989978.211:192): pid=20946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3945" name="device_path" dev="configfs" ino=62039 res=0 errno=0 [ 1835.686066][ T27] audit: type=1800 audit(1785989978.211:193): pid=20946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3945" name="enable" dev="configfs" ino=62040 res=0 errno=0 [ 1836.254623][T20960] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1836.503926][T20965] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3953'. [ 1836.646125][T20971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3949'. [ 1837.936400][T20990] nvmet_rdma: malformed ip/port passed: 127.0.0.1: [ 1837.944325][T20989] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1837.961370][ T27] audit: type=1800 audit(1785989982.441:194): pid=20990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3960" name="attr_allow_any_host" dev="configfs" ino=62095 res=0 errno=0 [ 1838.090809][ T27] audit: type=1800 audit(1785989982.441:195): pid=20990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3960" name="device_path" dev="configfs" ino=62096 res=0 errno=0 [ 1838.181477][T20997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3964'. [ 1838.567249][T21009] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3968'. [ 1841.664696][T21026] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1842.060402][T21028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3974'. [ 1842.649777][ T27] audit: type=1800 audit(1785989987.151:196): pid=21037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3973" name="attr_allow_any_host" dev="configfs" ino=62160 res=0 errno=0 [ 1842.652993][T21037] nvmet_rdma: malformed ip/port passed: 127.0.0.1: [ 1843.149110][T21058] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1844.035182][T21063] lo speed is unknown, defaulting to 1000 [ 1844.905844][T21071] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1845.796045][ T27] audit: type=1800 audit(1785989990.301:197): pid=21084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3990" name="attr_allow_any_host" dev="configfs" ino=62546 res=0 errno=0 [ 1845.798970][T21084] nvmet_rdma: malformed ip/port passed: 127.0.0.1: [ 1846.350269][T21090] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1847.342073][T21104] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1847.619079][T21110] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4002'. [ 1848.024322][T21120] No such timeout policy "syz1" [ 1848.283146][T21124] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1849.722714][T21142] No such timeout policy "syz1" [ 1849.746828][T21144] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1849.838265][T21146] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4015'. [ 1851.179366][T21166] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1851.200394][T21168] No such timeout policy "syz1" [ 1851.506630][T21181] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4030'. [ 1852.510594][T21197] No such timeout policy "syz1" [ 1852.520839][T21195] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1852.908965][T21206] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1852.947025][T21210] geneve2: entered promiscuous mode [ 1852.954310][T21210] geneve2: entered allmulticast mode [ 1852.961957][T21210] batman_adv: batadv0: Adding interface: geneve2 [ 1852.968411][T21210] batman_adv: batadv0: Interface activated: geneve2 [ 1853.063883][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.070511][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.200963][T21214] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1853.280795][T21216] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4042'. [ 1853.445504][T21223] No such timeout policy "syz1" [ 1853.734896][T21227] netlink: 'syz.2.4045': attribute type 1 has an invalid length. [ 1853.760814][T21227] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1854.319917][T21240] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1855.130600][T21250] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4053'. [ 1855.911047][T21260] block2mtd: error: cannot open device /dev/loop0 [ 1855.924746][T21261] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1856.026918][T21263] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1856.807837][T21271] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1856.913097][T21273] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4062'. [ 1858.611768][T21297] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1858.730587][T21299] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1861.132184][T21315] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1861.356139][T21321] lo speed is unknown, defaulting to 1000 [ 1863.883730][T21340] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1865.378962][T21349] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1865.590416][T21352] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1866.308952][T21366] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1867.400303][T21379] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1867.600854][T21383] Set syz1 is full, maxelem 1029 reached [ 1868.524011][T21392] lo speed is unknown, defaulting to 1000 [ 1868.560833][T21395] virtio-fs: tag not found [ 1869.123581][T21394] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1869.430177][T21405] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1869.907832][T21411] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4112'. [ 1870.257987][ T27] audit: type=1326 audit(1785990014.751:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21414 comm="syz.3.4115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e7b9e0d9 code=0x7ffc0000 [ 1870.333739][ T27] audit: type=1326 audit(1785990014.751:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21414 comm="syz.3.4115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e7b9e0d9 code=0x7ffc0000 [ 1870.381125][ T27] audit: type=1326 audit(1785990014.761:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21414 comm="syz.3.4115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e7b9e0d9 code=0x7ffc0000 [ 1870.408796][ T27] audit: type=1326 audit(1785990014.761:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21414 comm="syz.3.4115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e7b9e0d9 code=0x7ffc0000 [ 1870.453753][ T27] audit: type=1326 audit(1785990014.811:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21414 comm="syz.3.4115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f35e7b9e0d9 code=0x7ffc0000 [ 1870.530258][ T27] audit: type=1326 audit(1785990014.811:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21414 comm="syz.3.4115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e7b9e0d9 code=0x7ffc0000 [ 1870.569022][ T27] audit: type=1326 audit(1785990014.811:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21414 comm="syz.3.4115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e7b9e0d9 code=0x7ffc0000 [ 1870.594612][ T27] audit: type=1326 audit(1785990014.811:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21414 comm="syz.3.4115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e7b9e0d9 code=0x7ffc0000 [ 1870.630359][T21424] fuse: Bad value for 'fd' [ 1870.664622][ T27] audit: type=1326 audit(1785990014.811:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21414 comm="syz.3.4115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e7b9e0d9 code=0x7ffc0000 [ 1870.719527][ T27] audit: type=1326 audit(1785990014.811:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21414 comm="syz.3.4115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f35e7b9e0d9 code=0x7ffc0000 [ 1871.218809][T21431] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1871.813187][T21430] lo speed is unknown, defaulting to 1000 [ 1871.850831][T21433] virtio-fs: tag not found [ 1872.797781][T21441] sctp: [Deprecated]: syz.2.4113 (pid 21441) Use of int in max_burst socket option. [ 1872.797781][T21441] Use struct sctp_assoc_value instead [ 1874.532304][T21459] lo speed is unknown, defaulting to 1000 [ 1874.975773][T21464] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1876.533964][T21476] lo speed is unknown, defaulting to 1000 [ 1876.570854][T21477] virtio-fs: tag not found [ 1877.567752][T21485] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1879.743311][T21511] lo speed is unknown, defaulting to 1000 [ 1879.780825][T21513] virtio-fs: tag not found [ 1880.888830][T21526] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1881.964552][T21536] netlink: 'syz.1.4158': attribute type 1 has an invalid length. [ 1881.994777][T21536] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1883.348382][T21553] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1883.579500][T21555] lo speed is unknown, defaulting to 1000 [ 1883.615846][T21556] virtio-fs: tag not found [ 1884.085844][T21566] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1885.100796][T21582] netlink: 'syz.2.4170': attribute type 1 has an invalid length. [ 1885.124312][T21582] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1885.207529][T21581] netlink: 'syz.3.4169': attribute type 1 has an invalid length. [ 1886.161614][T21581] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1887.063514][T21602] lo speed is unknown, defaulting to 1000 [ 1887.100821][T21603] virtio-fs: tag not found [ 1888.091003][T21612] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1889.225318][T21619] netlink: 'syz.1.4183': attribute type 1 has an invalid length. [ 1889.247978][T21619] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1889.326690][T21620] netlink: 'syz.0.4181': attribute type 1 has an invalid length. [ 1889.349003][T21620] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1890.122160][T21635] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1892.093424][T21649] lo speed is unknown, defaulting to 1000 [ 1892.130837][T21650] virtio-fs: tag not found [ 1892.756028][T21653] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4191'. [ 1892.992567][T21654] netlink: 'syz.2.4193': attribute type 1 has an invalid length. [ 1893.016610][T21654] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1893.518463][T21667] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1893.554683][T21659] netlink: 'syz.0.4195': attribute type 1 has an invalid length. [ 1893.752441][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 1893.752716][ T27] audit: type=1326 audit(1785990038.251:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21669 comm="syz.2.4198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5499e0d9 code=0x7ffc0000 [ 1893.785028][T21659] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1893.817386][ T27] audit: type=1326 audit(1785990038.251:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21669 comm="syz.2.4198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5499e0d9 code=0x7ffc0000 [ 1893.841805][ T27] audit: type=1326 audit(1785990038.261:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21669 comm="syz.2.4198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5499e0d9 code=0x7ffc0000 [ 1893.868128][ T27] audit: type=1326 audit(1785990038.301:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21669 comm="syz.2.4198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5499e0d9 code=0x7ffc0000 [ 1893.892425][ T27] audit: type=1326 audit(1785990038.291:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21669 comm="syz.2.4198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad5499e0d9 code=0x7ffc0000 [ 1893.936649][ T27] audit: type=1326 audit(1785990038.301:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21669 comm="syz.2.4198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5499e0d9 code=0x7ffc0000 [ 1894.209480][ T27] audit: type=1326 audit(1785990038.301:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21669 comm="syz.2.4198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5499e0d9 code=0x7ffc0000 [ 1894.277285][ T27] audit: type=1326 audit(1785990038.301:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21669 comm="syz.2.4198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5499e0d9 code=0x7ffc0000 [ 1894.355745][ T27] audit: type=1326 audit(1785990038.301:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21669 comm="syz.2.4198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fad5499e0d9 code=0x7ffc0000 [ 1894.580438][ T27] audit: type=1326 audit(1785990038.301:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21669 comm="syz.2.4198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5499e0d9 code=0x7ffc0000 [ 1894.696765][T21680] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4203'. [ 1895.707637][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 1895.736874][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 1895.770258][T21696] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1895.795162][T21693] ceph: No mds server is up or the cluster is laggy [ 1896.291502][T21706] lo speed is unknown, defaulting to 1000 [ 1896.328824][T21707] virtio-fs: tag not found [ 1897.309409][T21713] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4213'. [ 1897.335846][T21704] netlink: 'syz.3.4204': attribute type 1 has an invalid length. [ 1897.363524][T21704] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1897.669098][T21722] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1898.513137][T21724] bond_slave_0: entered promiscuous mode [ 1898.519364][T21724] bond_slave_1: entered promiscuous mode [ 1898.526007][T21724] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1898.692780][T21724] bond22: (slave macvlan2): making interface the new active one [ 1898.771849][T21724] bond22: (slave macvlan2): Enslaving as an active interface with an up link [ 1899.140516][T21737] netlink: 'syz.2.4223': attribute type 1 has an invalid length. [ 1899.162511][T21737] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1899.315116][T21742] netlink: 332 bytes leftover after parsing attributes in process `syz.3.4224'. [ 1899.602896][T21748] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1900.333142][T21752] lo speed is unknown, defaulting to 1000 [ 1900.370813][T21753] virtio-fs: tag not found [ 1901.441149][T21768] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4234'. [ 1901.599100][T21769] netlink: 'syz.3.4233': attribute type 1 has an invalid length. [ 1901.622711][T21769] 8021q: adding VLAN 0 to HW filter on device bond31 [ 1902.065591][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1902.065608][ T27] audit: type=1326 audit(1785990046.571:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21773 comm="syz.3.4237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35e7b9e0d9 code=0x0 [ 1902.240942][T21779] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1902.985666][T21784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4240'. [ 1903.300978][T21791] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4243'. [ 1904.002803][T21795] lo speed is unknown, defaulting to 1000 [ 1904.040818][T21796] virtio-fs: tag not found [ 1904.727036][T21793] netlink: 'syz.0.4245': attribute type 1 has an invalid length. [ 1904.751548][T21793] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1905.116407][ T27] audit: type=1326 audit(1785990049.621:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21810 comm="syz.2.4249" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad5499e0d9 code=0x0 [ 1905.201979][T21814] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1905.927790][ T9396] Bluetooth: hci0: ACL packet too small [ 1906.744170][T21825] lo speed is unknown, defaulting to 1000 [ 1907.293591][T21827] netlink: 'syz.2.4256': attribute type 1 has an invalid length. [ 1907.321157][T21827] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1907.581708][T21837] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4259'. [ 1908.090956][T21845] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1909.393373][T21847] lo speed is unknown, defaulting to 1000 [ 1909.430832][T21848] virtio-fs: tag not found [ 1910.248655][T21856] netlink: 'syz.1.4266': attribute type 1 has an invalid length. [ 1910.285204][T21856] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1911.057201][T21870] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1911.800248][ T27] audit: type=1326 audit(1785990056.311:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21875 comm="syz.3.4264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35e7b9e0d9 code=0x0 [ 1913.161068][T21885] netlink: 'syz.2.4277': attribute type 1 has an invalid length. [ 1913.245103][T21885] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1913.534564][T21899] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1914.225850][T21897] syz.3.4281 (21897): drop_caches: 2 [ 1914.420233][ C0] [ 1914.422632][ C0] ================================ [ 1914.427792][ C0] WARNING: inconsistent lock state [ 1914.432970][ C0] syzkaller #0 Not tainted [ 1914.437428][ C0] -------------------------------- [ 1914.442563][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 1914.449454][ C0] swapper/0/0 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 1914.455490][ C0] ffff88801d392130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 1914.464954][ C0] {SOFTIRQ-ON-W} state was registered at: [ 1914.470685][ C0] lock_acquire+0x19e/0x420 [ 1914.475318][ C0] lock_sock_nested+0x48/0x100 [ 1914.480213][ C0] x25_bind+0x20a/0x460 [ 1914.484480][ C0] __sys_bind+0x2f0/0x3f0 [ 1914.488918][ C0] __x64_sys_bind+0x7a/0x90 [ 1914.493558][ C0] do_syscall_64+0x55/0xb0 [ 1914.498102][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1914.504127][ C0] irq event stamp: 64359948 [ 1914.508641][ C0] hardirqs last enabled at (64359948): [] __local_bh_enable_ip+0x13a/0x1c0 [ 1914.518910][ C0] hardirqs last disabled at (64359947): [] __local_bh_enable_ip+0xdb/0x1c0 [ 1914.529130][ C0] softirqs last enabled at (64359816): [] __irq_exit_rcu+0xd3/0x190 [ 1914.538814][ C0] softirqs last disabled at (64359833): [] __irq_exit_rcu+0xd3/0x190 [ 1914.548481][ C0] [ 1914.548481][ C0] other info that might help us debug this: [ 1914.556561][ C0] Possible unsafe locking scenario: [ 1914.556561][ C0] [ 1914.564032][ C0] CPU0 [ 1914.567334][ C0] ---- [ 1914.570638][ C0] lock(sk_lock-AF_X25); [ 1914.574997][ C0] [ 1914.578490][ C0] lock(sk_lock-AF_X25); [ 1914.583021][ C0] [ 1914.583021][ C0] *** DEADLOCK *** [ 1914.583021][ C0] [ 1914.591188][ C0] 1 lock held by swapper/0/0: [ 1914.595879][ C0] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb_core+0x34/0x230 [ 1914.606013][ C0] [ 1914.606013][ C0] stack backtrace: [ 1914.611913][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 1914.619043][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1914.629116][ C0] Call Trace: [ 1914.632422][ C0] [ 1914.635290][ C0] dump_stack_lvl+0x18c/0x250 [ 1914.640016][ C0] ? show_regs_print_info+0x20/0x20 [ 1914.645239][ C0] ? secondary_startup_64_no_verify+0x179/0x17b [ 1914.651489][ C0] valid_state+0x13b/0x1d0 [ 1914.655912][ C0] mark_lock_irq+0xad/0x900 [ 1914.660421][ C0] ? stack_trace_save+0xaa/0x100 [ 1914.665355][ C0] ? save_trace+0xcd0/0xcd0 [ 1914.669857][ C0] ? mark_lock+0x94/0x320 [ 1914.674206][ C0] ? save_trace+0x5d/0xcd0 [ 1914.678642][ C0] mark_lock+0x208/0x320 [ 1914.682906][ C0] __lock_acquire+0xcfc/0x7d80 [ 1914.687698][ C0] ? verify_lock_unused+0x140/0x140 [ 1914.692926][ C0] ? verify_lock_unused+0x140/0x140 [ 1914.698138][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1914.704128][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1914.709164][ C0] ? lock_chain_count+0x20/0x20 [ 1914.714025][ C0] lock_acquire+0x19e/0x420 [ 1914.718538][ C0] ? x25_kill_by_neigh+0x10d/0x250 [ 1914.723663][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1914.729046][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1914.734429][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1914.739636][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1914.745010][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1914.749870][ C0] lock_sock_nested+0x48/0x100 [ 1914.754639][ C0] ? x25_kill_by_neigh+0x10d/0x250 [ 1914.759791][ C0] x25_kill_by_neigh+0x10d/0x250 [ 1914.764773][ C0] x25_lapb_receive_frame+0x1a7/0xef0 [ 1914.770224][ C0] ? netif_receive_skb_core+0x34/0x230 [ 1914.775690][ C0] ? netif_receive_skb_core+0x34/0x230 [ 1914.781154][ C0] ? x25_device_event+0x280/0x280 [ 1914.786177][ C0] netif_receive_skb_core+0x16a/0x230 [ 1914.791580][ C0] lapbeth_napi_poll+0x42/0x80 [ 1914.796346][ C0] __napi_poll+0xbb/0x460 [ 1914.800768][ C0] net_rx_action+0x65f/0xcc0 [ 1914.805367][ C0] ? net_tx_action+0x950/0x950 [ 1914.810171][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1914.816162][ C0] ? rebalance_domains+0x880/0x9d0 [ 1914.821271][ C0] ? lock_chain_count+0x20/0x20 [ 1914.826120][ C0] handle_softirqs+0x27d/0x820 [ 1914.830882][ C0] ? read_tsc+0x9/0x20 [ 1914.834952][ C0] ? ktime_get+0x24b/0x280 [ 1914.839444][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1914.844207][ C0] ? do_softirq+0x1a0/0x1a0 [ 1914.848736][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1914.853937][ C0] __irq_exit_rcu+0xd3/0x190 [ 1914.858520][ C0] ? irq_exit_rcu+0x20/0x20 [ 1914.863022][ C0] irq_exit_rcu+0x9/0x20 [ 1914.867292][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1914.872936][ C0] [ 1914.875880][ C0] [ 1914.878805][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1914.884791][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1914.890442][ C0] Code: 4e 1c 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d a3 5a 3b 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 1914.910046][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c2 [ 1914.916108][ C0] RAX: 2ab09cf5554d8100 RBX: ffffffff81630d54 RCX: 2ab09cf5554d8100 [ 1914.924078][ C0] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0ca0 [ 1914.932044][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36bab R09: 1ffff110171c6d75 [ 1914.940015][ C0] R10: dffffc0000000000 R11: ffffed10171c6d76 R12: 1ffffffff19c0fbc [ 1914.947991][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 1914.955974][ C0] ? do_idle+0x334/0x5c0 [ 1914.960230][ C0] default_idle+0x13/0x20 [ 1914.964579][ C0] default_idle_call+0x6c/0xa0 [ 1914.969387][ C0] do_idle+0x334/0x5c0 [ 1914.973465][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1914.979122][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1914.984321][ C0] ? do_idle+0x5/0x5c0 [ 1914.988403][ C0] cpu_startup_entry+0x43/0x60 [ 1914.993186][ C0] rest_init+0x2e2/0x300 [ 1914.997529][ C0] ? time_init+0x40/0x40 [ 1915.001809][ C0] arch_call_rest_init+0xe/0x10 [ 1915.006714][ C0] start_kernel+0x461/0x4e0 [ 1915.011233][ C0] x86_64_start_reservations+0x2a/0x30 [ 1915.016693][ C0] x86_64_start_kernel+0x60/0x60 [ 1915.021627][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1915.027703][ C0] [ 1915.030772][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3546 [ 1915.039522][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/0 [ 1915.048229][ C0] preempt_count: 101, expected: 0 [ 1915.053263][ C0] RCU nest depth: 1, expected: 0 [ 1915.058202][ C0] INFO: lockdep is turned off. [ 1915.062973][ C0] Preemption disabled at: [ 1915.062979][ C0] [] schedule_preempt_disabled+0x1d/0x20 [ 1915.074565][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 1915.081579][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1915.091628][ C0] Call Trace: [ 1915.094902][ C0] [ 1915.097747][ C0] dump_stack_lvl+0x18c/0x250 [ 1915.102488][ C0] ? show_regs_print_info+0x20/0x20 [ 1915.107697][ C0] ? load_image+0x420/0x420 [ 1915.112211][ C0] ? schedule_preempt_disabled+0x1d/0x20 [ 1915.117875][ C0] __might_resched+0x48d/0x5f0 [ 1915.122644][ C0] ? schedule_preempt_disabled+0x1d/0x20 [ 1915.128296][ C0] ? __might_sleep+0xe0/0xe0 [ 1915.132918][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1915.138295][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1915.143665][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1915.148859][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1915.154313][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1915.159162][ C0] lock_sock_nested+0x5d/0x100 [ 1915.163945][ C0] x25_kill_by_neigh+0x10d/0x250 [ 1915.168887][ C0] x25_lapb_receive_frame+0x1a7/0xef0 [ 1915.174256][ C0] ? netif_receive_skb_core+0x34/0x230 [ 1915.179714][ C0] ? netif_receive_skb_core+0x34/0x230 [ 1915.185188][ C0] ? x25_device_event+0x280/0x280 [ 1915.190208][ C0] netif_receive_skb_core+0x16a/0x230 [ 1915.195584][ C0] lapbeth_napi_poll+0x42/0x80 [ 1915.200368][ C0] __napi_poll+0xbb/0x460 [ 1915.204717][ C0] net_rx_action+0x65f/0xcc0 [ 1915.209310][ C0] ? net_tx_action+0x950/0x950 [ 1915.214080][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1915.220082][ C0] ? rebalance_domains+0x880/0x9d0 [ 1915.225188][ C0] ? lock_chain_count+0x20/0x20 [ 1915.230045][ C0] handle_softirqs+0x27d/0x820 [ 1915.234826][ C0] ? read_tsc+0x9/0x20 [ 1915.238898][ C0] ? ktime_get+0x24b/0x280 [ 1915.243325][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1915.248094][ C0] ? do_softirq+0x1a0/0x1a0 [ 1915.252604][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1915.257868][ C0] __irq_exit_rcu+0xd3/0x190 [ 1915.262475][ C0] ? irq_exit_rcu+0x20/0x20 [ 1915.266986][ C0] irq_exit_rcu+0x9/0x20 [ 1915.271223][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1915.276857][ C0] [ 1915.279800][ C0] [ 1915.282751][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1915.288725][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1915.294359][ C0] Code: 4e 1c 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d a3 5a 3b 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 1915.313984][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c2 [ 1915.320059][ C0] RAX: 2ab09cf5554d8100 RBX: ffffffff81630d54 RCX: 2ab09cf5554d8100 [ 1915.328052][ C0] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0ca0 [ 1915.336037][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36bab R09: 1ffff110171c6d75 [ 1915.344021][ C0] R10: dffffc0000000000 R11: ffffed10171c6d76 R12: 1ffffffff19c0fbc [ 1915.352007][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 1915.359978][ C0] ? do_idle+0x334/0x5c0 [ 1915.364223][ C0] default_idle+0x13/0x20 [ 1915.368554][ C0] default_idle_call+0x6c/0xa0 [ 1915.373334][ C0] do_idle+0x334/0x5c0 [ 1915.377411][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1915.383066][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1915.388269][ C0] ? do_idle+0x5/0x5c0 [ 1915.392350][ C0] cpu_startup_entry+0x43/0x60 [ 1915.397119][ C0] rest_init+0x2e2/0x300 [ 1915.401370][ C0] ? time_init+0x40/0x40 [ 1915.405611][ C0] arch_call_rest_init+0xe/0x10 [ 1915.410464][ C0] start_kernel+0x461/0x4e0 [ 1915.414977][ C0] x86_64_start_reservations+0x2a/0x30 [ 1915.420466][ C0] x86_64_start_kernel+0x60/0x60 [ 1915.425401][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1915.431492][ C0] [ 1915.985995][T21903] lo speed is unknown, defaulting to 1000 [ 1916.026495][T21909] virtio-fs: tag not found [ 1916.160218][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1916.166548][ T1292] ieee802154 phy1 wpan1: encryption failed: -22