last executing test programs: 50.144006338s ago: executing program 3 (id=1915): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x1411, 0x9, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}}, 0x4000004) 49.954856767s ago: executing program 3 (id=1918): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) 47.774975624s ago: executing program 3 (id=1922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x400000) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x2) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 47.749032545s ago: executing program 2 (id=1923): r0 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$sierra_net(0x4, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x8, 0xcbf, 0x4, 0x6, 0x6, 0x3, 0x8, 0x7, 0x2, 0x1000, 0x7f, 0x5a14}}, &(0x7f0000000540)={0x20, 0x85, 0x4, 0x1a}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000600)={0x0, 0x1b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x20, 0x85, 0x3, "6fabb6"}}) r1 = syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf30, 0x111, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150095ff0904a10109e981008c0508950129309102c0"], 0x0}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x9, &(0x7f0000000400)="020000000000000000") syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000100)={0x20, 0x23, 0x16, {0x16, 0x6, "1230f45fcc8327f92d2b539571da598d85325d70"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}, &(0x7f0000000180)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, 0x0, 0x0}, 0x0) 47.005553144s ago: executing program 3 (id=1924): r0 = syz_open_dev$loop(0x0, 0x3, 0x189083) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) syz_open_dev$tty1(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x140) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) futex(0x0, 0x5, 0x10000, 0x0, 0x0, 0x3000000) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0x3, 0x9032, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x15, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x30000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80080000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa85}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 46.310731272s ago: executing program 0 (id=1927): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) 46.232775697s ago: executing program 0 (id=1928): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x48, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012100) 46.087354471s ago: executing program 0 (id=1929): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x182, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, 0x0, 0x0) 45.296452225s ago: executing program 4 (id=1930): unshare(0x26020480) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents64(r0, &(0x7f0000000000)=""/36, 0x24) 45.212053826s ago: executing program 4 (id=1931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) read$FUSE(0xffffffffffffffff, &(0x7f000000a280)={0x2020}, 0x2020) 43.572286882s ago: executing program 4 (id=1933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r1, &(0x7f0000000240)="c6", 0x1, 0x8040, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="492b00014011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast2}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 43.571859659s ago: executing program 0 (id=1934): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf0300000009058202"], 0x0) r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a00)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x81, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xc7, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x2, 0x1, 0x85, 0x50, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xc16}, {0xd, 0x24, 0xf, 0x1, 0xb, 0xf, 0x8, 0x5b}, {0x6, 0x24, 0x1a, 0x40, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x8000, 0x222a, 0xfb, 0x0, 0x94c, 0xe}, @dmm={0x7, 0x24, 0x14, 0x400, 0xa5}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0xe, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0xa7, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x69, 0x2, 0x4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0xff, 0xff, 0x8, 0xff, 0xf}, 0xfb, &(0x7f0000000140)={0x5, 0xf, 0xfb, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0xec, 0x8000}, @generic={0xda, 0x10, 0xa, "47ee63818de7b25600d66ad94549d0f4db0093ad3a28207af8c435ed9bbf72f16491d13ddc1a507b3886b88ccff1320a1d7a0e5426875ff35268b6432d5c8234775d292fcc7ae0e8ebac4ff814a66f8c76666faaf4ddf1fa320388cb660a376d601e62170a2a398eb5a980b7d1b4d1b5c78c08ec48fe45759c849d8ad4c00866c58b92192d631d052e3f7cb14306d34945e374f104eee3463abfe66d99b9f2abf6f9b921c7dae150465a34dc321590fa35ba5904ccc7747844bdfe3a85e05aa344f19254d49badb91c14b4d94fdfb0825d643a39830e5d"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0xb, 0xfe, 0x8, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x6, 0x2}]}, 0x4, [{0x0, 0x0}, {0x66, &(0x7f0000000280)=@string={0x66, 0x3, "bae4527845d14b8b5fd0f4cc68b1ea0e16bf89a0ca267037fe221af97307239ceda3c0ce4553a5c2c015f0f5e6242f9e15875a9a301cbc2adae9508fd92b313a5d0b4cc4cd3b7e0b49d4a01bd4dd20a112fdbabdf705f4208c5cd37949564d8a50d0d778"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1809}}, {0xe0, &(0x7f00000003c0)=ANY=[@ANYBLOB="e00392b0be875e83160bd69ad534f61935b9748cd3bbecd56290c1f4a22896de4a6b8aae7562ae4fb6584925ea35928e6789d01d8329f3a5ba85b404096c3ab01982074c6425813fb4c3963bd9ba2c9268a8d0432181f04f294d1a45df8a33f973147698ce48feb2a9a4dc30ea26f9b2717a0a52e74d587a0ca72cc4cd6450c178e01403624c8e35e10f7107945a31d5263ebd5bed5187af6873"]}]}) syz_usb_disconnect(r1) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c6888240da0b7f3127a0010203010902"], 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x1a, 0xeb, 0x99, 0x40, 0x10b8, 0x1ef0, 0x52b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf0, 0xb1, 0x0, 0x3, "", [{{0x9, 0x4, 0xdb, 0x8, 0x0, 0xd5, 0xed, 0x92, 0x5}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000003900)={0x24, 0x0, &(0x7f00000037c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) 43.49086139s ago: executing program 2 (id=1935): r0 = syz_usb_connect$uac2(0x4, 0xdb, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0x4d, 0x0, 0x3, {0x8, 0xb, 0x0, 0x0, 0x1, 0x5, 0x20, 0xb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0xff, 0x33, 0xc}, [@sample_rate={0x9, 0x24, 0xd, 0x4, 0x0, 0x6, [0x1]}, @extension_unit={0x8, 0x24, 0x9, 0x1, 0x7ff, 0x9, ')'}, @input_terminal={0x10, 0x24, 0x2, 0x3, 0x403, 0x3, 0xa0, 0x8, 0x4, 0xb1, 0x9, 0x2}, @effect_unit={0x9, 0x24, 0x7, 0x2, 0x2, 0x1, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0xfa, {0x8, 0x25, 0x1, 0x2, 0x3f, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x89, 0x8, "9b"}, @as_header={0x10, 0x24, 0x1, 0x5, 0xb2, 0x3, 0x1, 0x5, 0x6, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xffff, 0x8, 0x3, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x82dc, 0x0, 0xef}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0x9, 0x2, "", 'A'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x1, 0x8, {0x8, 0x25, 0x1, 0x81, 0x3f, 0xc, 0x8}}}}}}}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f", @ANYRES8=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYRES16=r0], 0x0) syz_usb_connect$uac3(0x6, 0x116, &(0x7f0000000a80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x104, 0x3, 0x1, 0x5, 0x0, 0x80, {0x8, 0xb, 0x1, 0x1, 0x1, 0x1, 0x30, 0x10}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x3c, 0x7}, [@source_unit={0xc, 0x24, 0xb, 0xf, 0x1, 0xd01, 0x1, 0x1ff}, @multiply_unit={0xb, 0x24, 0xd, 0x9, 0xf, 0x400, 0x4}, @processing_unit={0x15, 0x24, 0x9, 0x4, 0x3, [0x2, 0x1, 0x1, 0x0]}, @cluster_info_segment={0x6, 0x20, 0xff, 0x22, 0x84}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x7, 0xf0}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x2, 0x7, 0x10}, @as_header={0x17, 0x24, 0x1, 0x3, 0x8, 0x3, 0xb98aefface545c21, 0xb, 0xb, 0x852, 0xe}, @as_header={0x17, 0x24, 0x1, 0x4, 0x7, 0x14f6, 0x3, 0x7d, 0x3, 0xe8c, 0x1}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x1, 0x8, 0x2, "ee2c3f5df5d115"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xfe, 0x6, {0xa, 0x25, 0x25, 0x8ae6, 0x0, 0xa5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x17, 0x7, 0x7, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x3, 0x1, 0x8, "3009ee"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x40, 0x7, 0x5, {0xa, 0x25, 0x25, 0x2, 0x0, 0x4}}}}}}}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x310, 0x1, 0xa, 0x9, 0x10, 0x3}, 0x5, &(0x7f0000000c00)={0x5, 0xf, 0x5}, 0x8, [{0x1e, &(0x7f0000000c40)=@string={0x1e, 0x3, "9aa7fb3fa2a1891fc008ae87863098131e309648bec4efe6b9a2d350"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x80a}}, {0x6e, &(0x7f0000000cc0)=@string={0x6e, 0x3, "af797d1d9472b2e653ee4ce3fb2f1c972d2ae3736d6fb1214171d248c83b64e64b8b2226c366498aba5069c5a1c87c3f80fd9b65367634b0bec983b81cb97a15b0c2727adff134588eb386c54d6d17d3506e5193a2a8059e677f4e5c4d63acbde775421271059fbaa4cafe01"}}, {0x2, &(0x7f0000000d40)=@string={0x2}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x424}}, {0xc2, &(0x7f0000000e40)=@string={0xc2, 0x3, "89ea439c23d8370e0044bd1463413bb31c1a87a2067a30dc76dc1835452f8f4a9b9de15f51561004dd00e86477376d34ffbaae9d74f5a67fd35b1ea931b950560a3de3613c0f38b7c4232eecaa0d8a5eb434c2a57bfdf7dc7cdaa5b606d9808435d947765554064c824a3b0ac557d371daaca64e4c5d2551edbb9d4225a17f7a0c8a7536d729209a22ee036069c1427ed5fc2b1f28a9829d9173b656acda9abeaadcb9046320680fb918f07dc2a52ddd426406a0ff3594f6b619709170374837"}}, {0x67, &(0x7f0000000f40)=@string={0x67, 0x3, "6df0497fc454e48776d775c3a699925c473c4eea794fe83f29201dd33b447cec8a4016e24b37b832297e49844ee552c4d13b7127a2c7f47274848f0016f0c1191e0a9fc757a7654ef26620d0ec89472e4929a3a26f6d30082b2c3e034163e18175c8392199"}}]}) syz_usb_ep_read(r0, 0x7, 0x1e, &(0x7f0000000a40)=""/30) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000100)=ANY=[], 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0x40015b0b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0xa9, &(0x7f00000004c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x2, 0x1, 0x1, 0xe0, 0x80, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "a9a59458"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xc1, 0x7, 0x9}, {0x6, 0x24, 0x1a, 0x0, 0x20}, [@obex={0x5, 0x24, 0x15, 0xb}, @network_terminal={0x7, 0x24, 0xa, 0x16, 0x1, 0xd0, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x40}, @mdlm={0x15, 0x24, 0x12, 0xffe8}, @dmm={0x7, 0x24, 0x14, 0x3ff, 0x8}, @country_functional={0xa, 0x24, 0x7, 0x56, 0x8001, [0x6, 0x2]}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xa5, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x6, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x98, 0x7, 0x4}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x310, 0x3, 0x2, 0x6, 0xff, 0x4}, 0x69, &(0x7f00000005c0)={0x5, 0xf, 0x69, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x89, "3f6b3fa02e8078f741fafde36adb66e1"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x98, 0x6, 0x8, 0x3c0, 0x3}, @ssp_cap={0x14, 0x10, 0xa, 0xc, 0x2, 0x6, 0xff00, 0x1ff, [0xc000, 0x0]}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x7fffff8, 0x0, 0x9, [0x7f7fff, 0x30]}, @generic={0x1d, 0x10, 0x2, "8c8473283c911243b905e3cb0169f20c4967ea4337ac923e238c"}]}, 0x6, [{0x0, 0x0}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x8b, &(0x7f0000000800)=@string={0x8b, 0x3, "06d9b9afb88fb096d9adf133ee8b1174a7d2f88aac71a392e6aa66926b2bb3f778916caf165da302eae861fffef971cb9243feb0bd7ccddc2b4c624ea79439feade0063849097ba5a3a73d6306c205724989af3cee0b51b9648adedae637b543bbf30fa34af4aa09ef9419c62d2650523f49a0af88b681ff8c141efb8022c341a2f4a3cbba09884324"}}, {0x3, &(0x7f00000008c0)=@string={0x3, 0x3, 'E'}}]}) r5 = syz_open_dev$hiddev(&(0x7f0000000980), 0xd61, 0x202000) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f00000009c0)={0x1, 0x1, 0xc, 0x200, 0xb57d, 0x7}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x48d, 0xce50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x22, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x6, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x4, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 43.314076932s ago: executing program 3 (id=1936): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0xccd02, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x75) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000006580)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000580)=0xe8) getresgid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={r1, r5, r6}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(0x0, 0x80800) r7 = dup(0xffffffffffffffff) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000640)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r7}}) chdir(&(0x7f0000000040)='./file0\x00') symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') connect$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shutdown(r4, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x41, 0x1, 0x0, 0x0, &(0x7f0000006680)) listen(0xffffffffffffffff, 0x0) 42.4104427s ago: executing program 1 (id=1937): r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f00000000c0)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080003000000000008000500640000000c000700e803ffe400", 0x65, 0x0, 0x0, 0x0) 42.382467003s ago: executing program 4 (id=1938): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x1b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 42.307374702s ago: executing program 0 (id=1939): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f00000c8000/0x3000)=nil, 0x3000, 0x1000005, 0x8010, 0xffffffffffffffff, 0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 42.064832218s ago: executing program 3 (id=1940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x34, r1, 0x3, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x4}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x8044) 41.08480583s ago: executing program 0 (id=1941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x400000) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x2) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) close(0xffffffffffffffff) 41.065935715s ago: executing program 1 (id=1942): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000013c0)={{0x40, 0x5}, {0x40, 0x7}, 0x6, 0x1, 0xb}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4010) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r4, &(0x7f00000000c0)=@other={'lock', ' ', 'none'}, 0xa) 41.055838719s ago: executing program 4 (id=1943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) read$FUSE(0xffffffffffffffff, &(0x7f000000a280)={0x2020}, 0x2020) 40.028133354s ago: executing program 4 (id=1944): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b"], 0x44}, 0x1, 0x2000000000000000}, 0x0) 39.787011074s ago: executing program 2 (id=1945): ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000180)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) process_vm_readv(r0, &(0x7f0000000900)=[{&(0x7f0000000200)=""/80, 0x50}], 0x1, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r4 = fsmount(r2, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r6 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000340)=""/101, 0x65) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003b80)={0x2020}, 0x2020) 37.626156796s ago: executing program 1 (id=1946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'connbytes\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x1c, 0x3, "0000000000000000e80300"/24}]}}}]}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 35.245155593s ago: executing program 2 (id=1947): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) 34.155194659s ago: executing program 1 (id=1948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r1, &(0x7f0000000240)="c6", 0x1, 0x8040, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="492b00014011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast2}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 31.802233187s ago: executing program 2 (id=1949): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdirat(0xffffffffffffff9c, 0x0, 0x187) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='rt1719', 0x6) 30.814215395s ago: executing program 1 (id=1950): close(0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fef7ff7a0af0fff80000ff79a4f0ff00000000b7060000efffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ba23008500000098000000b70000000000000095000000000000006f88300eaa171100756695acf0af839ec5300a584fe44c80de0b061417e9ade22cecede5d5be6ab3d7828ee094518a5800000082c81ddfe3960a29ea15fa7e26f0f3e51416b698f6da6fe8af496d22585ffab3af24974fae00d824313ffef788c6983945dd3663f79f67e78a48b24a4bcdc33b38c5f86e96111199f0f0af9f42099a0f54041889b971cf394bd43473a5ac2acab9768cbc52ff7f000000000000711727c4a32a6b7ecdae05d2b3fed4572eb0d88976d2adda68000010000000c47b18cf93996a43e2e080f57fadf535d8b3078ebe16b10160fad64474a7b558f7a56f41022feec18e013abd8fda2b96779e534d0675fbcc13ba9f9eb96319fd5b49521d5cb2ced401d7b6fce658f203a9c2da91116d986730da1be85b0000829512099df32814820fbf7be91cd13b77f4e4e599f8bbca388247856073472312a9ff4273b9cd08000000000000616e888cda842c661577818c2069cb41a73b4b7fc28882cad315db3fffc5183deca7a32838ec0ad70d4f55382c1879b71ec504d2f3e3883428ee350123a5cad346f6d517f6fcea5b6bc4fcffffffffffff03f419a6e45fd98e77da4a8202ebbdafe6b2e38c9d7e506f5da2958cf7f0d9b31ca3275e64e29d39d158cebe43308cf8760588001172e19685e9a334aec76530861b772a1da96f0a227514bd0bc26df2b50a45e4eceae1ddfe88d58879d12afdb295ce2edecb253e0471714fa124211203000000000000001f502b6c760655ffb20ae13a1a94f7ae229fbf5da7cae4f994ee82fc98c864c3e352ad16f98208cf1469dd6c1212582a3687f7dbdf708929643f3f0f4e947c40742452685ec044fc71eaca9abc92145677e14054331801b1412b39049ed782742f9a1b6aca9123b243c1a68c047f2db79701b62c8cc0d2f608c7f62d107ebc68df9f8d296721c9d465dad604bc0dc500000000000000000000000000000000000000000568a4997dd54fa83aacd2d209f66de2e26dc2fd862a0b8ee149c148197176745fc8ff1dd5bd6611daa882298a37b041b34668d4662ea8fbe2e787dfc4c8bef2124f0439b2d18ec83361da5cc732f365b0a528db31b90bc1405b6d5301c34319ccae29b1d6034b665c79baeeeac5e71d24e2e3b6ffc5bc2dcb600e645c0048b45e286a49e888d21abfc817085d9c00e08525207e33505226fdda16e6da6dd31f7a1736029b87e8d6a05bcb356298d7dccd7de2af0885bd4939ff96ab74da3871b077e4058c8752ba4994eafed8b239d781638fa339fa0f7dd135af3f80e40f4b885770cf27d205a45d4702f97b8b7c57b180c50b2b370dfb35dc895e8f05d6e71829f36150b2cde31469c4aea0c64850eb3f3e0dc35f8cdd76bdde2018366c3201307c370433762676f72e68c962430a0000000000000000000000000000e737dc2e1a3fdebbb510c663d24f72b954965201f775b3739c14dd4832647c028be09f2809fd396fa26532a30a37737e95f0f41dd024b7bf8a6bf807c9fd9b8c7a39717729339dc3054117cb95693bdd61edcc2860b66545e194a961bdc5457d76ae1a87050e12ead896f3337d5a000000000000000000400000602bfd2f1ace65f2e74dc99cb73a37f40362b7904e8a0ea8d2d9805c924f9985d22972031a1223afa1288af3f48c93fcdb11963d0b748287448f722dc180e87637b662b11effabf45beda2e3a7e1adf8f94b619fa152b33440f2358a745848caf7000eb305c936d26964a2a85e133d01368b8d228d02f96064de261cf02c9632a0eb4ab259e8f4dd63d8b6d2d6b2a0c29fbab7d04d73a381c296af344655b64e12f216fbc646cc6bd60ca773d187f2fd317f6cb2309d1a13526a44b7d9b2bf93947dc3ac3340a7a114051d33d152310574f0d784910dc1a8f5bbf3610c544437626236458f285196161496389b02ba46a72da0149b4ddfdd4ef7862a07395752a37cb0244e94e1310e0c0a148a9a48b149bf2f345f3f89813c9eb05160f63f0b363deee5cb77ea6e951857e1942e5c56d72d724af7aa24a8aadb512f3302972c53b0eb7a693e0b0c775b21aed72995cfe9e9347a07d43ce3db9f22d461e86416ffff6f2e4e36306630052a2b03ee36ec52af0d684fabd5f38adffaa6c5a7a8100d1aefaf8576b363690b76e2eb96b07ab790cf63cfc334b7469b5b5b397c622f7c3ee064f9272443bcb928b6f7a2450cd33550a42843b0b5ac9e37134c81bd56b72e1030b05a5b3ac47b5af22a9dff0700004adacc71db2b15b4ffd98e30224763382ade45d164be76b2e9a674448f3ee2cd29707484df87ea6e8e6333b5fcb1b8b43a7c005ea800000000000000000000010000000000387592adc78ccfe479549e6f4efc14c4a5cfe845e6157d6fe70b278147edf0e25065ec6b17f8022493d105c9c31121e7957aeec5f7f2af0446d128778c8bf15b87a0eec6f4c75966b5f0e06744bda63134223416102aea1254d57c390e1f84ec7d5c3a758ce59c9e2c4ce1f28b6783661e272bf1cb5c8ac177aa9c6ccbead9a96b22394afb840247e5d69473b836f070dc0bf9302e33b03d4e07395c82e33667726b51ff24b0bbea730702835159e3517ffb3da0d01833589fec3bdab629b21e5d9e87c3c58d962ff5e75c81f583c64b7d5a643674801e18b06ca98b49d9e28d004c7ebccf076c64ef71421f672b0948b18ab5af448ca9446e71ba6dd4bd15a12553066de7cb767a121d56d9d26ce27fdbe6721191f2ed1cc3f9c5e3d5cba447c4793165b3cbf51c7d0cf9edf823641e1bc7db7803b60dc8b21e49a33a73ac00337067dfd3ecaf4e6dceee1048f300000000000000000000000000000000000000000000007958a50896df65337581398793d0a9abe75251908c07d2957ca70ad7ac31aae536294d6a944cd35f46cb554d8aecae5a72cb24596d896ff9ad83473567b6cb9d032c395a1459399cea31ebafc1e77649b55af527ca0f1ac972ee72a78391473c1b9e0000000000000000004076eac7e605f8de6f0ce5702af52c5d78bac0097d92f078a3a98229ebf281c3c876d2614109b69967871fea621fb2a29a77a1516b51d9b1c3c5ef1436f50fad4a1cd92a211fec61d37c8b410a20fbdeb642228d6cfeb8cda8eea3a7f343fcaa0459b9d916abb668d4799534307084ee7d854dd0850000000000000000000000002f40c3e24f9c0a56edf543425058c35febda26a43bdab770212186b84421d8b841cf9181d47c08cb392e414c1efba9978a97769e65ae443644dbdb32a50cdc717a34d1aa9ced37820a6d1cd0920a9a07e36a85e967bfa7f2caf1c9b52c06f4d178fbb91a169e9533e401819e57cab814761819b0fc517239a6777dbb92a7462538dbd8a4b82f87df7982b44b160a598c75bafa5a9b388a44303dbebc83ac2ad2da3ae80c851bc2fdb8d444597fdac4538aa33bb9204ffe534b15a1878be30157d0815d38fc2effeb7b87d6bd15e21c7b7c7d1ad7b3fd69b4bd06716a203e82f4c0413719eae0967fc70f03570375c2d0986b0200897e505afb87b878f3e13187001bba6a401bd56f3f8eb5384e33"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="b70200000a0000007b2ac0ff00000000632ac8ff00000000b70200000001010abfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 28.253719723s ago: executing program 2 (id=1951): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x3, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 26.814136154s ago: executing program 1 (id=1952): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f00000c8000/0x3000)=nil, 0x3000, 0x1000005, 0x8010, 0xffffffffffffffff, 0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.389896576s ago: executing program 32 (id=1940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x34, r1, 0x3, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x4}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x8044) 7.271942823s ago: executing program 33 (id=1941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x400000) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x2) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) close(0xffffffffffffffff) 4.375197211s ago: executing program 34 (id=1952): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f00000c8000/0x3000)=nil, 0x3000, 0x1000005, 0x8010, 0xffffffffffffffff, 0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.11163148s ago: executing program 35 (id=1951): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x3, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 0s ago: executing program 36 (id=1944): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b"], 0x44}, 0x1, 0x2000000000000000}, 0x0) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 571.497729][ T9840] cgroup: Unknown subsys name 'cpuset' [ 571.742574][ T30] usb 5-1: USB disconnect, device number 67 [ 571.804228][ T5608] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 572.261866][ T30] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 572.425696][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 572.427905][ T30] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 572.430945][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.430965][ T30] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 572.430979][ T30] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 572.430992][ T30] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 572.432376][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 572.432398][ T30] usb 5-1: SerialNumber: syz [ 574.142877][ T31] audit: type=1400 audit(1789185227.956:643): avc: denied { create } for pid=9865 comm="syz.0.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 574.158904][ T31] audit: type=1400 audit(1789185227.966:644): avc: denied { write } for pid=9865 comm="syz.0.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 574.922828][ T5740] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 575.074773][ T5740] usb 2-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 575.080099][ T7121] usb 5-1: USB disconnect, device number 68 [ 575.109582][ T5740] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.109608][ T5740] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 575.109643][ T5740] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.747244][ T9886] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 575.801963][ T9867] infiniband syz1: set active [ 575.801984][ T9867] infiniband syz1: added team0 [ 575.971115][ T9867] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 575.971141][ T9867] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 575.971165][ T9867] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 577.148426][ T9867] RDS/IB: syz1: added [ 577.148813][ T9867] smc: adding ib device syz1 with port count 1 [ 577.148912][ T9867] smc: ib device syz1 port 1 has no pnetid [ 578.022188][ T1216] usb 2-1: USB disconnect, device number 80 [ 578.283075][ T9904] openvswitch: netlink: VLAN attribute unexpected. [ 581.041236][ T31] audit: type=1400 audit(1789185234.846:645): avc: denied { create } for pid=9909 comm="syz.4.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 581.524795][ T9920] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 581.906203][ T9930] netlink: zone id is out of range [ 581.907115][ T9930] netlink: zone id is out of range [ 581.908654][ T9930] netlink: zone id is out of range [ 581.909867][ T9930] netlink: zone id is out of range [ 581.911556][ T9930] netlink: zone id is out of range [ 581.912332][ T9930] netlink: zone id is out of range [ 581.912536][ T9930] netlink: zone id is out of range [ 581.913709][ T9930] netlink: zone id is out of range [ 581.914198][ T9930] netlink: zone id is out of range [ 584.565639][ T9957] net_ratelimit: 11 callbacks suppressed [ 584.565655][ T9957] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 584.565671][ T9957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.311234][ T9963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.313099][ T9963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.021928][ T9983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.022322][ T9983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.551822][ T987] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 589.752497][ T987] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 589.754586][ T987] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 589.757517][ T987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.757532][ T987] usb 2-1: Product: syz [ 589.757540][ T987] usb 2-1: Manufacturer: syz [ 589.757548][ T987] usb 2-1: SerialNumber: syz [ 590.236519][T10026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.236921][T10026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.311829][ T5723] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 590.461791][ T5723] usb 3-1: Using ep0 maxpacket: 16 [ 590.462382][ T5723] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 590.463431][ T5723] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.463450][ T5723] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 590.463464][ T5723] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 590.463477][ T5723] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 590.464427][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 590.464446][ T5723] usb 3-1: SerialNumber: syz [ 591.543089][T10037] netlink: zone id is out of range [ 591.543276][T10037] netlink: zone id is out of range [ 591.543590][T10037] netlink: zone id is out of range [ 591.543825][T10037] netlink: zone id is out of range [ 591.544183][T10037] netlink: zone id is out of range [ 591.544332][T10037] netlink: zone id is out of range [ 591.544365][T10037] netlink: zone id is out of range [ 591.544608][T10037] netlink: zone id is out of range [ 591.544708][T10037] netlink: zone id is out of range [ 591.544877][T10037] netlink: zone id is out of range [ 591.563480][ T5608] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 592.874050][ T5723] usb 2-1: USB disconnect, device number 81 [ 593.058398][ T1216] usb 3-1: USB disconnect, device number 83 [ 593.281834][ T5740] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 593.323064][ T5723] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 593.501834][ T5740] usb 5-1: Using ep0 maxpacket: 16 [ 593.503632][ T5740] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 593.504573][ T5740] usb 5-1: config 0 interface 0 has no altsetting 0 [ 593.504606][ T5740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.631997][ T1216] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 593.841885][ T5723] usb 2-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 593.847533][ T5723] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.847576][ T5723] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 593.849258][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.849272][ T5723] usb 2-1: Product: syz [ 593.849281][ T5723] usb 2-1: Manufacturer: syz [ 593.849289][ T5723] usb 2-1: SerialNumber: syz [ 593.934390][ T1216] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 593.937125][ T1216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.937148][ T1216] usb 3-1: Product: syz [ 593.937161][ T1216] usb 3-1: Manufacturer: syz [ 593.937184][ T1216] usb 3-1: SerialNumber: syz [ 594.262470][T10067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.264591][T10067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.275574][T10067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.275922][T10067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.482604][T10067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.482832][T10067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.222903][T10072] cgroup: Unknown subsys name 'cpuset' [ 596.058876][ T30] usb 2-1: USB disconnect, device number 82 [ 596.077665][ T5723] usb 5-1: USB disconnect, device number 69 [ 596.745496][T10076] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 596.751095][T10078] syzkaller1: entered promiscuous mode [ 596.751113][T10078] syzkaller1: entered allmulticast mode [ 596.830803][ T30] usb 3-1: USB disconnect, device number 84 [ 597.087360][ T31] audit: type=1400 audit(1789185250.896:646): avc: denied { bind } for pid=10086 comm="syz.1.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 597.090402][ T31] audit: type=1400 audit(1789185250.896:647): avc: denied { map } for pid=10086 comm="syz.1.1341" path="socket:[20824]" dev="sockfs" ino=20824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 597.090446][ T31] audit: type=1400 audit(1789185250.896:648): avc: denied { read write } for pid=10086 comm="syz.1.1341" path="socket:[20824]" dev="sockfs" ino=20824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 597.171823][ T5723] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 597.231841][ T30] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 597.322092][ T5723] usb 5-1: Using ep0 maxpacket: 16 [ 597.323023][ T5723] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 597.326995][ T5723] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.327026][ T5723] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 597.327050][ T5723] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 597.327074][ T5723] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 597.331007][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 597.331031][ T5723] usb 5-1: SerialNumber: syz [ 597.415445][ T30] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 597.431227][ T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.431271][ T30] usb 3-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 597.431299][ T30] usb 3-1: config 0 interface 0 has no altsetting 0 [ 597.541137][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.583277][T10103] net_ratelimit: 10 callbacks suppressed [ 599.583299][T10103] netlink: zone id is out of range [ 599.583482][T10103] netlink: zone id is out of range [ 599.583771][T10103] netlink: zone id is out of range [ 599.584008][T10103] netlink: zone id is out of range [ 599.584402][T10103] netlink: zone id is out of range [ 599.584548][T10103] netlink: zone id is out of range [ 599.584581][T10103] netlink: zone id is out of range [ 599.584816][T10103] netlink: zone id is out of range [ 599.584925][T10103] netlink: zone id is out of range [ 599.585127][T10103] netlink: zone id is out of range [ 599.959684][ T1216] usb 5-1: USB disconnect, device number 70 [ 599.975941][ T5723] usb 3-1: USB disconnect, device number 85 [ 600.048673][T10107] netlink: 'syz.2.1347': attribute type 12 has an invalid length. [ 600.048693][T10107] netlink: 'syz.2.1347': attribute type 29 has an invalid length. [ 600.048707][T10107] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1347'. [ 600.260646][T10109] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 600.603338][ T5723] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 600.604325][T10111] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 600.723458][T10119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.725433][T10119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.750679][T10119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.751494][T10119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.762322][ T5740] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 600.777788][ T5723] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 600.791435][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.791459][ T5723] usb 3-1: Product: syz [ 600.791473][ T5723] usb 3-1: Manufacturer: syz [ 600.791488][ T5723] usb 3-1: SerialNumber: syz [ 600.912013][ T5740] usb 2-1: Using ep0 maxpacket: 8 [ 600.912521][ T5740] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 600.914536][ T5740] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 600.914558][ T5740] usb 2-1: config 0 has no interface number 0 [ 600.914603][ T5740] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 600.914631][ T5740] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.981271][T10119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.981668][T10119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.163466][ T5608] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 603.282555][T10137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.283486][T10137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.372446][T10139] netlink: 'syz.3.1358': attribute type 12 has an invalid length. [ 603.372467][T10139] netlink: 'syz.3.1358': attribute type 29 has an invalid length. [ 603.372480][T10139] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1358'. [ 603.384631][ T5740] usb 3-1: USB disconnect, device number 86 [ 603.541827][ T5723] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 603.547568][ T987] usb 2-1: USB disconnect, device number 83 [ 603.743899][T10146] cgroup: Unknown subsys name 'cpuset' [ 604.354080][ T5723] usb 5-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 604.355770][ T5723] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.355808][ T5723] usb 5-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 604.355824][ T5723] usb 5-1: config 0 interface 0 has no altsetting 0 [ 604.355842][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.034800][T10157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 605.039653][T10157] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.039850][T10157] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.667673][ T987] usb 5-1: USB disconnect, device number 71 [ 608.801955][ T987] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 608.961841][ T987] usb 5-1: Using ep0 maxpacket: 8 [ 608.972056][ T987] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 608.988467][ T987] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 608.988494][ T987] usb 5-1: config 0 has no interface number 0 [ 608.988530][ T987] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 608.988568][ T987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.121820][ T5723] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 610.362912][T10193] cgroup: Unknown subsys name 'cpuset' [ 610.946463][ T987] usb 5-1: USB disconnect, device number 72 [ 610.972131][ T5723] usb 2-1: Using ep0 maxpacket: 8 [ 610.976491][ T5723] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 610.979695][ T5723] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 610.979730][ T5723] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 610.979746][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 610.979765][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 610.979826][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 610.979853][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 59391, setting to 1024 [ 610.979879][ T5723] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.990366][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.990389][ T5723] usb 2-1: Product: syz [ 610.990404][ T5723] usb 2-1: Manufacturer: syz [ 610.990419][ T5723] usb 2-1: SerialNumber: syz [ 611.817523][T10184] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 613.285265][ T5740] usb 2-1: USB disconnect, device number 84 [ 614.401876][ T30] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 614.565973][ T30] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 614.581204][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.581220][ T30] usb 3-1: Product: syz [ 614.581228][ T30] usb 3-1: Manufacturer: syz [ 614.581237][ T30] usb 3-1: SerialNumber: syz [ 616.448146][T10230] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 616.794948][T10233] cgroup: Unknown subsys name 'cpuset' [ 617.391320][ T5740] usb 3-1: USB disconnect, device number 87 [ 617.801941][ T5723] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 617.961862][ T5723] usb 2-1: Using ep0 maxpacket: 16 [ 617.970888][ T5723] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 617.982339][ T5723] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.982371][ T5723] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 617.982397][ T5723] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 617.982420][ T5723] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 617.983317][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 617.983339][ T5723] usb 2-1: SerialNumber: syz [ 618.055670][T10246] net_ratelimit: 11 callbacks suppressed [ 618.055690][T10246] openvswitch: netlink: Duplicate key (type 0). [ 618.412686][T10249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.412922][T10249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.461868][T10249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.462275][T10249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.469006][T10249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.469395][T10249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.474211][T10249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.474588][T10249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.493123][T10266] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 620.567987][ T5723] usb 2-1: USB disconnect, device number 85 [ 620.616189][T10268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.616419][T10268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.332222][ T5723] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 622.452438][ T5723] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 622.462372][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.462397][ T5723] usb 2-1: Product: syz [ 622.462411][ T5723] usb 2-1: Manufacturer: syz [ 622.462426][ T5723] usb 2-1: SerialNumber: syz [ 622.704601][T10284] openvswitch: netlink: Duplicate key (type 0). [ 623.833664][ T1216] usb 2-1: USB disconnect, device number 86 [ 623.864383][ T5763] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 624.011795][ T5763] usb 5-1: Using ep0 maxpacket: 8 [ 624.012537][ T5763] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 624.013441][ T5763] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 624.013464][ T5763] usb 5-1: config 0 has no interface number 0 [ 624.013499][ T5763] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 624.013538][ T5763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.054205][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.054255][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.261931][ T1216] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 624.420682][T10298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.421095][T10298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.439206][ T1216] usb 2-1: Using ep0 maxpacket: 8 [ 624.439736][ T1216] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 624.440787][ T1216] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 624.440818][ T1216] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 624.440834][ T1216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 624.440849][ T1216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 624.440864][ T1216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 624.440878][ T1216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 59391, setting to 1024 [ 624.440892][ T1216] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 624.468558][T10298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.468921][T10298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.502194][ T1216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.502221][ T1216] usb 2-1: Product: syz [ 624.502238][ T1216] usb 2-1: Manufacturer: syz [ 624.502253][ T1216] usb 2-1: SerialNumber: syz [ 624.673600][T10298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.674511][T10298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.887461][ T5763] usb 5-1: USB disconnect, device number 73 [ 627.069272][ T1216] usb 2-1: USB disconnect, device number 87 [ 627.800049][ T1216] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 628.382288][ T1216] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 628.505427][ T1216] usb 2-1: config 0 interface 0 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 628.505457][ T1216] usb 2-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 628.505484][ T1216] usb 2-1: config 0 interface 0 has no altsetting 0 [ 628.505515][ T1216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.625084][ T5740] usb 2-1: USB disconnect, device number 88 [ 632.304320][ T30] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 632.469386][ T30] usb 5-1: unable to get BOS descriptor or descriptor too short [ 632.469432][ T30] usb 5-1: New USB device found, idVendor=1740, idProduct=9707, bcdDevice=34.de [ 632.469962][ T30] usb 5-1: config 0 has no interfaces? [ 632.498902][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.498927][ T30] usb 5-1: Product: syz [ 632.498942][ T30] usb 5-1: Manufacturer: syz [ 632.498956][ T30] usb 5-1: SerialNumber: syz [ 634.655388][T10385] openvswitch: netlink: Duplicate key (type 0). [ 634.744760][T10387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.748006][T10387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.983857][ T30] usb 5-1: USB disconnect, device number 74 [ 635.810499][ T5608] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 636.042029][ T30] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 636.098490][T10402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.098718][T10402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.191809][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 636.192574][ T30] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 636.193508][ T30] usb 5-1: config 0 interface 0 has no altsetting 0 [ 636.193542][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.425792][T10402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.446938][T10402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.504964][T10402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.540302][T10402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.212612][ T987] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 637.552584][ T987] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 637.552626][ T987] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 637.553511][ T987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.553524][ T987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 637.553555][ T987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 637.559453][ T987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.559476][ T987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 637.559509][ T987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 637.563274][ T987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.563294][ T987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 637.563326][ T987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 637.566502][ T987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.566570][ T987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 637.566600][ T987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 637.567437][ T987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.567457][ T987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 637.567485][ T987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 637.581188][ T987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.581211][ T987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 637.581241][ T987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 637.596089][ T987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.596115][ T987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 637.596145][ T987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 637.611867][ T987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.611890][ T987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 637.611923][ T987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 637.632267][ T987] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 637.632292][ T987] usb 3-1: Product: syz [ 637.632308][ T987] usb 3-1: Manufacturer: syz [ 637.632322][ T987] usb 3-1: SerialNumber: syz [ 638.114553][ T1216] usb 5-1: USB disconnect, device number 75 [ 639.071215][ T987] usb 3-1: USB disconnect, device number 88 [ 639.128389][T10420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.128625][T10420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.425917][T10427] netlink: zone id is out of range [ 639.426089][T10427] netlink: zone id is out of range [ 639.426369][T10427] netlink: zone id is out of range [ 639.426748][T10427] netlink: zone id is out of range [ 639.427088][T10427] netlink: zone id is out of range [ 639.427253][T10427] netlink: zone id is out of range [ 639.427285][T10427] netlink: zone id is out of range [ 639.427512][T10427] netlink: zone id is out of range [ 639.427611][T10427] netlink: zone id is out of range [ 639.576129][ T31] audit: type=1400 audit(1789185293.386:649): avc: denied { ioctl } for pid=10429 comm="syz.4.1455" path="socket:[21826]" dev="sockfs" ino=21826 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 639.759250][T10439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.759645][T10439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.921883][ T5740] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 640.072498][ T5740] usb 3-1: Using ep0 maxpacket: 16 [ 640.072974][ T5740] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 640.074690][ T5740] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.074720][ T5740] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 640.074745][ T5740] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 640.074762][ T5740] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 640.151563][ T5740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 640.151590][ T5740] usb 3-1: SerialNumber: syz [ 640.381181][T10443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.381422][T10443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.506411][ T7121] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 640.707705][ T7121] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 640.711857][ T7121] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 640.740830][ T7121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.740848][ T7121] usb 2-1: Product: syz [ 640.740857][ T7121] usb 2-1: Manufacturer: syz [ 640.740866][ T7121] usb 2-1: SerialNumber: syz [ 642.361939][T10457] net_ratelimit: 11 callbacks suppressed [ 642.361954][T10457] openvswitch: netlink: Duplicate key (type 0). [ 642.729816][ T1216] usb 3-1: USB disconnect, device number 89 [ 642.841832][ T5608] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 643.958893][T10473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.961066][T10473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.976242][ T31] audit: type=1107 audit(1789185298.266:650): pid=10474 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 644.980269][ T5740] usb 2-1: USB disconnect, device number 89 [ 645.521901][ T1216] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 645.586177][T10487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.586587][T10487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.685829][ T1216] usb 2-1: unable to get BOS descriptor or descriptor too short [ 645.685879][ T1216] usb 2-1: New USB device found, idVendor=1740, idProduct=9707, bcdDevice=34.de [ 645.686428][ T1216] usb 2-1: config 0 has no interfaces? [ 645.688101][ T1216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.688115][ T1216] usb 2-1: Product: syz [ 645.688123][ T1216] usb 2-1: Manufacturer: syz [ 645.688132][ T1216] usb 2-1: SerialNumber: syz [ 648.308393][ T5723] usb 2-1: USB disconnect, device number 90 [ 648.411814][ T987] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 648.551861][ T987] usb 3-1: device descriptor read/64, error -71 [ 648.762009][ T5723] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 648.791858][ T987] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 648.924798][ T5723] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 648.925749][ T5723] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.925781][ T5723] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.925803][ T5723] usb 2-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 648.925828][ T5723] usb 2-1: config 0 interface 0 has no altsetting 0 [ 648.925856][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.926525][ T987] usb 3-1: device descriptor read/64, error -71 [ 649.032066][ T987] usb usb3-port1: attempt power cycle [ 649.371825][ T987] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 649.394637][ T987] usb 3-1: device descriptor read/8, error -71 [ 649.632923][ T987] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 649.652798][ T987] usb 3-1: device descriptor read/8, error -71 [ 649.762216][ T987] usb usb3-port1: unable to enumerate USB device [ 649.978064][T10524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.978692][T10524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.011941][ T5723] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 650.181820][ T5723] usb 5-1: Using ep0 maxpacket: 16 [ 650.182334][ T5723] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 650.183367][ T5723] usb 5-1: config 0 interface 0 has no altsetting 0 [ 650.183388][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.451592][ T987] usb 2-1: USB disconnect, device number 91 [ 651.605203][ T31] audit: type=1400 audit(1789185305.416:651): avc: denied { setopt } for pid=10536 comm="syz.2.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 651.609373][T10537] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 652.050753][T10545] openvswitch: netlink: Duplicate key (type 0). [ 652.423343][ T5723] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 652.592026][ T5723] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 652.593910][ T5723] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 652.601338][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.622485][ T5723] usb 3-1: Product: syz [ 652.622498][ T5723] usb 3-1: Manufacturer: syz [ 652.622507][ T5723] usb 3-1: SerialNumber: syz [ 652.787356][ T5723] usb 5-1: USB disconnect, device number 76 [ 653.213845][T10558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.215439][T10558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.234157][T10558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.234523][T10558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.263270][ T5723] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 653.281774][ T1216] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 653.434345][ T5723] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 653.434387][ T5723] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 653.437635][ T5723] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 653.437675][ T5723] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 653.437689][ T5723] usb 5-1: config 0 interface 0 has no altsetting 0 [ 653.451075][ T5723] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 653.451107][ T5723] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 653.451121][ T5723] usb 5-1: config 0 interface 0 has no altsetting 0 [ 653.454690][T10558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.455068][T10558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.471038][ T1216] usb 2-1: Using ep0 maxpacket: 16 [ 653.490568][ T1216] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 653.501464][T10558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.501686][T10558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.539562][ T5723] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 653.539594][ T5723] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 653.539607][ T5723] usb 5-1: config 0 interface 0 has no altsetting 0 [ 653.555704][ T1216] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.555725][ T1216] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 653.555755][ T1216] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 653.555768][ T1216] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 653.555864][ T5723] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 653.555896][ T5723] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 653.555909][ T5723] usb 5-1: config 0 interface 0 has no altsetting 0 [ 653.565524][ T5723] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 653.565552][ T5723] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 653.565565][ T5723] usb 5-1: config 0 interface 0 has no altsetting 0 [ 653.584020][ T1216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 653.584043][ T1216] usb 2-1: SerialNumber: syz [ 653.650630][ T5723] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 653.650667][ T5723] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 653.650680][ T5723] usb 5-1: config 0 interface 0 has no altsetting 0 [ 653.691379][ T5723] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 653.691422][ T5723] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 653.691435][ T5723] usb 5-1: config 0 interface 0 has no altsetting 0 [ 653.718246][ T5723] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 653.718280][ T5723] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 653.718294][ T5723] usb 5-1: config 0 interface 0 has no altsetting 0 [ 653.806311][ T5723] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 653.806339][ T5723] usb 5-1: Product: syz [ 653.806352][ T5723] usb 5-1: Manufacturer: syz [ 653.806366][ T5723] usb 5-1: SerialNumber: syz [ 654.129062][T10562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.141483][T10562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.954807][ T31] audit: type=1400 audit(1789185308.766:652): avc: denied { listen } for pid=10569 comm="syz.0.1509" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 655.798276][ T30] usb 3-1: USB disconnect, device number 94 [ 655.986115][ T1216] usb 5-1: USB disconnect, device number 77 [ 656.099964][ T30] usb 2-1: USB disconnect, device number 92 [ 656.422639][T10583] netlink: zone id is out of range [ 656.422827][T10583] netlink: zone id is out of range [ 656.423118][T10583] netlink: zone id is out of range [ 656.423372][T10583] netlink: zone id is out of range [ 656.423726][T10583] netlink: zone id is out of range [ 656.423873][T10583] netlink: zone id is out of range [ 656.423905][T10583] netlink: zone id is out of range [ 656.424152][T10583] netlink: zone id is out of range [ 656.424249][T10583] netlink: zone id is out of range [ 656.570063][T10586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.586449][T10586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.620032][T10586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.671967][T10586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.062491][ T987] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 658.787101][ T987] usb 2-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 658.788045][ T987] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.788085][ T987] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 658.788123][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.148643][T10595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.149040][T10595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.368690][T10595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.369096][T10595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.389294][T10595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.389877][T10595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.591006][T10599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1521'. [ 659.591033][T10599] net_ratelimit: 11 callbacks suppressed [ 659.591045][T10599] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 660.069141][T10607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.070054][T10607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.027075][ T1216] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 661.069282][ T5763] usb 2-1: USB disconnect, device number 93 [ 662.177298][ T1216] usb 5-1: Using ep0 maxpacket: 16 [ 662.177844][ T1216] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 662.197129][ T1216] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.197163][ T1216] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 662.197186][ T1216] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 662.197206][ T1216] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 662.244220][ T1216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 662.244247][ T1216] usb 5-1: SerialNumber: syz [ 662.344781][T10627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1532'. [ 662.344799][T10627] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 662.411370][T10629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.420263][T10629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.175301][T10629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.177185][T10629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.181201][T10629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.188645][T10629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.238452][ T5763] usb 5-1: USB disconnect, device number 78 [ 663.535185][ T31] audit: type=1400 audit(1789185317.346:653): avc: denied { read } for pid=10634 comm="syz.4.1536" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 665.006692][T10655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1543'. [ 665.006716][T10655] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 665.171858][ T9] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 665.328419][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 665.328466][ T9] usb 2-1: New USB device found, idVendor=1740, idProduct=9707, bcdDevice=34.de [ 665.331269][ T9] usb 2-1: config 0 has no interfaces? [ 665.337897][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.337921][ T9] usb 2-1: Product: syz [ 665.337936][ T9] usb 2-1: Manufacturer: syz [ 665.337951][ T9] usb 2-1: SerialNumber: syz [ 665.363018][ T987] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 666.417769][ T31] audit: type=1107 audit(1789185319.696:654): pid=10664 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 666.431808][ T987] usb 5-1: Using ep0 maxpacket: 16 [ 666.432470][ T987] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 666.433406][ T987] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.433437][ T987] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 666.433463][ T987] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 666.433487][ T987] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 666.434413][ T987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 666.434436][ T987] usb 5-1: SerialNumber: syz [ 666.541880][ T5763] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 666.691995][ T5763] usb 3-1: Using ep0 maxpacket: 16 [ 666.692493][ T5763] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 666.693504][ T5763] usb 3-1: config 0 interface 0 has no altsetting 0 [ 666.693535][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.860180][T10671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.860551][T10671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.064337][T10673] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10673 comm=syz.3.1549 [ 667.064632][T10673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10673 comm=syz.3.1549 [ 667.067056][T10671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.070217][T10671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.071501][T10671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.073740][T10671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.647177][ T987] usb 3-1: USB disconnect, device number 95 [ 668.651602][ T9] usb 2-1: USB disconnect, device number 94 [ 668.664432][ T5763] usb 5-1: USB disconnect, device number 79 [ 668.807491][T10692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1555'. [ 668.807516][T10692] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 668.964405][T10697] netlink: 592 bytes leftover after parsing attributes in process `syz.4.1560'. [ 670.282419][ T5723] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 670.310348][ T31] audit: type=1400 audit(1789185324.116:655): avc: denied { bind } for pid=10710 comm="syz.2.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 670.432701][ T5723] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 670.433639][ T5723] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 670.435965][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.435989][ T5723] usb 2-1: Product: syz [ 670.436011][ T5723] usb 2-1: Manufacturer: syz [ 670.436025][ T5723] usb 2-1: SerialNumber: syz [ 670.581558][T10719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.582500][T10719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.811827][ T5604] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 670.951822][ T5723] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 670.963749][ T5604] usb 3-1: unable to get BOS descriptor or descriptor too short [ 670.963793][ T5604] usb 3-1: New USB device found, idVendor=1740, idProduct=9707, bcdDevice=34.de [ 670.964265][ T5604] usb 3-1: config 0 has no interfaces? [ 670.965997][ T5604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.966019][ T5604] usb 3-1: Product: syz [ 670.966033][ T5604] usb 3-1: Manufacturer: syz [ 670.966047][ T5604] usb 3-1: SerialNumber: syz [ 671.103896][ T5723] usb 5-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 671.106076][ T5723] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.106110][ T5723] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.106133][ T5723] usb 5-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 671.106161][ T5723] usb 5-1: config 0 interface 0 has no altsetting 0 [ 671.106191][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.250957][T10729] netlink: 592 bytes leftover after parsing attributes in process `syz.3.1574'. [ 671.581446][T10734] xt_CT: You must specify a L4 protocol and not use inversions on it [ 672.260887][ T987] usb 2-1: USB disconnect, device number 95 [ 672.563427][T10748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.563812][T10748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.180534][T10759] openvswitch: netlink: Actions may not be safe on all matching packets [ 673.391834][ T5723] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 674.426436][T10769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.426669][T10769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.492105][ T5723] usb 2-1: Using ep0 maxpacket: 16 [ 674.494660][ T987] usb 5-1: USB disconnect, device number 80 [ 674.502219][ T30] usb 3-1: USB disconnect, device number 96 [ 674.503560][ T5723] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 674.508202][ T5723] usb 2-1: config 0 interface 0 has no altsetting 0 [ 674.508236][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.757925][T10777] xt_CT: You must specify a L4 protocol and not use inversions on it [ 675.198993][T10780] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 676.313142][ T31] audit: type=1107 audit(1789185329.596:656): pid=10781 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 676.366604][ T30] usb 2-1: USB disconnect, device number 96 [ 676.649138][ T5723] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 676.663827][T10790] netlink: zone id is out of range [ 676.664014][T10790] netlink: zone id is out of range [ 676.664315][T10790] netlink: zone id is out of range [ 676.664565][T10790] netlink: zone id is out of range [ 676.664909][T10790] netlink: zone id is out of range [ 676.665058][T10790] netlink: zone id is out of range [ 676.665091][T10790] netlink: zone id is out of range [ 676.665345][T10790] netlink: zone id is out of range [ 676.793842][ T5723] usb 3-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 676.801909][ T5723] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.801955][ T5723] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 676.801993][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.346261][ T987] usb 3-1: USB disconnect, device number 97 [ 679.164172][T10819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.164417][T10819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.235033][T10820] xt_CT: You must specify a L4 protocol and not use inversions on it [ 679.812985][T10819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.813341][T10819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.819272][T10819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.819493][T10819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.969771][T10844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.985531][T10844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.265793][T10855] netlink: 592 bytes leftover after parsing attributes in process `syz.0.1617'. [ 684.940982][T10860] net_ratelimit: 12 callbacks suppressed [ 684.940997][T10860] ip_tables: iptables: counters copy to user failed while replacing table [ 685.069695][T10862] netlink: NAT attribute has 8 unknown bytes [ 685.069725][T10862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.483766][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.483836][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.903656][T10898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1630'. [ 691.537536][T10938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1643'. [ 691.642058][ T1216] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 692.564412][ T1216] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 692.571115][ T1216] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 692.571227][ T1216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 692.571286][ T1216] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 692.677627][ T1216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.677711][ T1216] usb 3-1: Product: syz [ 692.677762][ T1216] usb 3-1: Manufacturer: syz [ 692.677814][ T1216] usb 3-1: SerialNumber: syz [ 692.712119][ T5604] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 692.876289][ T5604] usb 5-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 692.883146][ T5604] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 692.883190][ T5604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.480822][T10946] syz.0.1640 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 693.480869][T10946] CPU: 1 UID: 0 PID: 10946 Comm: syz.0.1640 Tainted: G L syzkaller #0 PREEMPT(full) [ 693.480900][T10946] Tainted: [L]=SOFTLOCKUP [ 693.480908][T10946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 693.480920][T10946] Call Trace: [ 693.480927][T10946] [ 693.480936][T10946] dump_stack_lvl+0x100/0x190 [ 693.480972][T10946] dump_header+0xfb/0x606 [ 693.480998][T10946] oom_kill_process.cold+0xd/0x380 [ 693.481024][T10946] out_of_memory+0x340/0x14f0 [ 693.481056][T10946] ? __pfx_out_of_memory+0x10/0x10 [ 693.481099][T10946] mem_cgroup_out_of_memory+0xc6/0x130 [ 693.481123][T10946] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 693.481145][T10946] ? find_held_lock+0x2b/0x80 [ 693.481180][T10946] ? do_raw_spin_unlock+0x145/0x1e0 [ 693.481205][T10946] ? _raw_spin_unlock+0x28/0x50 [ 693.481233][T10946] try_charge_memcg+0x783/0xf60 [ 693.481270][T10946] ? __pfx_try_charge_memcg+0x10/0x10 [ 693.481298][T10946] ? find_held_lock+0x2b/0x80 [ 693.481325][T10946] ? rcu_read_unlock+0x17/0x60 [ 693.481353][T10946] ? rcu_read_unlock+0x17/0x60 [ 693.481392][T10946] obj_cgroup_charge_pages+0x22/0x1d0 [ 693.481423][T10946] __memcg_kmem_charge_page+0x1c4/0x4d0 [ 693.481453][T10946] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 693.481488][T10946] __alloc_frozen_pages_noprof+0x534/0x3300 [ 693.481528][T10946] ? __lock_acquire+0x5c0/0x1f40 [ 693.481556][T10946] ? __lock_acquire+0x5c0/0x1f40 [ 693.481577][T10946] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 693.481606][T10946] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 693.481638][T10946] ? unwind_next_frame+0xbd/0x2090 [ 693.481672][T10946] ? lock_acquire+0x1d1/0x380 [ 693.481692][T10946] ? is_bpf_text_address+0x25/0x1a0 [ 693.481719][T10946] ? find_held_lock+0x2b/0x80 [ 693.481742][T10946] ? is_bpf_text_address+0x8a/0x1a0 [ 693.481767][T10946] ? __lock_acquire+0x5c0/0x1f40 [ 693.481786][T10946] ? __css_rstat_updated+0x1ce/0x590 [ 693.481813][T10946] ? __lock_acquire+0x5c0/0x1f40 [ 693.481834][T10946] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 693.481858][T10946] ? policy_nodemask+0xed/0x4f0 [ 693.481885][T10946] alloc_pages_mpol+0x201/0x550 [ 693.481911][T10946] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 693.481938][T10946] ? find_held_lock+0x2b/0x80 [ 693.481964][T10946] ? __pud_alloc+0x4f6/0x690 [ 693.481987][T10946] ? __pud_alloc+0x4f6/0x690 [ 693.482014][T10946] alloc_pages_noprof+0x1a/0x160 [ 693.482044][T10946] __pmd_alloc+0x3b/0x950 [ 693.482066][T10946] ? __pud_alloc+0x4fb/0x690 [ 693.482099][T10946] copy_page_range+0x3e98/0x57c0 [ 693.482153][T10946] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 693.482185][T10946] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 693.482209][T10946] ? __pfx_copy_page_range+0x10/0x10 [ 693.482235][T10946] ? mas_wr_store_entry+0xa4/0x1d50 [ 693.482275][T10946] ? mas_store+0x745/0xe20 [ 693.482317][T10946] ? __pfx___vma_start_write+0x10/0x10 [ 693.482354][T10946] dup_mmap+0x1230/0x2370 [ 693.482392][T10946] ? __pfx_dup_mmap+0x10/0x10 [ 693.482416][T10946] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 693.482442][T10946] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 693.482468][T10946] ? __lock_acquire+0x5c0/0x1f40 [ 693.482502][T10946] ? lock_acquire+0x1d1/0x380 [ 693.482522][T10946] ? copy_process+0x4806/0x8370 [ 693.482558][T10946] copy_process+0x4811/0x8370 [ 693.482598][T10946] ? __pfx_copy_process+0x10/0x10 [ 693.482621][T10946] ? futex_wake+0x4ea/0x5e0 [ 693.482664][T10946] kernel_clone+0x176/0x9d0 [ 693.482688][T10946] ? __pfx_kernel_clone+0x10/0x10 [ 693.482731][T10946] __do_sys_clone+0xd9/0x120 [ 693.482755][T10946] ? __pfx___do_sys_clone+0x10/0x10 [ 693.482778][T10946] ? fdget+0x18b/0x210 [ 693.482827][T10946] do_syscall_64+0x123/0x790 [ 693.482857][T10946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.482878][T10946] RIP: 0033:0x7fa9dc79e159 [ 693.482896][T10946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.482914][T10946] RSP: 002b:00007fa9dd693fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 693.482935][T10946] RAX: ffffffffffffffda RBX: 00007fa9dca26090 RCX: 00007fa9dc79e159 [ 693.482949][T10946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 693.482962][T10946] RBP: 00007fa9dc83503b R08: 0000000000000000 R09: 0000000000000000 [ 693.482975][T10946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.482987][T10946] R13: 00007fa9dca26128 R14: 00007fa9dca26090 R15: 00007fffa02d86a8 [ 693.483017][T10946] [ 693.609015][T10946] memory: usage 96kB, limit 96kB, failcnt 138 [ 693.609033][T10946] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 693.609047][T10946] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 693.609060][T10946] Memory cgroup stats for /syz0/test: [ 693.609182][T10946] cache 0 [ 693.609190][T10946] rss 0 [ 693.609197][T10946] rss_huge 0 [ 693.609204][T10946] shmem 0 [ 693.609210][T10946] mapped_file 0 [ 693.609218][T10946] dirty 0 [ 693.609224][T10946] writeback 0 [ 693.609231][T10946] workingset_refault_anon 0 [ 693.609239][T10946] workingset_refault_file 0 [ 693.609246][T10946] swap 0 [ 693.609253][T10946] swapcached 0 [ 693.609260][T10946] pgpgin 535 [ 693.609266][T10946] pgpgout 535 [ 693.609273][T10946] pgfault 66 [ 693.609281][T10946] pgmajfault 0 [ 693.609288][T10946] inactive_anon 0 [ 693.609296][T10946] active_anon 0 [ 693.609303][T10946] inactive_file 0 [ 693.609310][T10946] active_file 0 [ 693.609317][T10946] unevictable 0 [ 693.609325][T10946] hierarchical_memory_limit 98304 [ 693.609334][T10946] hierarchical_memsw_limit 9223372036854771712 [ 693.609344][T10946] total_cache 0 [ 693.609351][T10946] total_rss 0 [ 693.609357][T10946] total_rss_huge 0 [ 693.609364][T10946] total_shmem 0 [ 693.609371][T10946] total_mapped_file 0 [ 693.609378][T10946] total_dirty 0 [ 693.609385][T10946] total_writeback 0 [ 693.609393][T10946] total_workingset_refault_anon 0 [ 693.609400][T10946] total_workingset_refault_file 0 [ 693.609409][T10946] total_swap 0 [ 693.609415][T10946] total_swapcached 0 [ 693.609422][T10946] total_pgpgin 535 [ 693.609430][T10946] total_pgpgout 535 [ 693.609437][T10946] total_pgfault 66 [ 693.609443][T10946] total_pgmajfault 0 [ 693.609450][T10946] total_inactive_anon 0 [ 693.609458][T10946] total_active_anon 0 [ 693.609465][T10946] total_inactive_file 0 [ 693.609472][T10946] total_active_file 0 [ 693.609480][T10946] total_unevictable 0 [ 693.609487][T10946] anon_cost 0 [ 693.609493][T10946] file_cost 0 [ 693.609501][T10946] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.1640,pid=10944,uid=0 [ 693.611257][T10946] Memory cgroup out of memory: Killed process 10944 (syz.0.1640) total-vm:102384kB, anon-rss:1464kB, file-rss:22800kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 693.851800][T10960] macvlan0: entered promiscuous mode [ 694.274154][ T5604] usb 5-1: USB disconnect, device number 81 [ 694.474678][ T5740] usb 3-1: USB disconnect, device number 98 [ 694.479936][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1655'. [ 694.479958][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1655'. [ 695.202946][T10984] netlink: zone id is out of range [ 695.203861][T10984] netlink: zone id is out of range [ 695.205305][T10984] netlink: zone id is out of range [ 695.206462][T10984] netlink: zone id is out of range [ 695.208292][T10984] netlink: zone id is out of range [ 695.208929][T10984] netlink: zone id is out of range [ 695.209099][T10984] netlink: zone id is out of range [ 695.210247][T10984] netlink: zone id is out of range [ 695.210761][T10984] netlink: zone id is out of range [ 695.211712][T10984] netlink: zone id is out of range [ 695.884964][ T31] audit: type=1400 audit(1789185349.696:657): avc: denied { create } for pid=10991 comm="syz.2.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 695.896606][T10992] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1660'. [ 695.912034][ T31] audit: type=1400 audit(1789185349.706:658): avc: denied { getopt } for pid=10991 comm="syz.2.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 695.998028][ T31] audit: type=1400 audit(1789185349.806:659): avc: denied { create } for pid=10991 comm="syz.2.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 696.001117][ T31] audit: type=1400 audit(1789185349.806:660): avc: denied { setopt } for pid=10991 comm="syz.2.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 696.042094][ T31] audit: type=1400 audit(1789185349.816:661): avc: denied { bind } for pid=10991 comm="syz.2.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 696.042136][ T31] audit: type=1400 audit(1789185349.816:662): avc: denied { connect } for pid=10991 comm="syz.2.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 696.042164][ T31] audit: type=1400 audit(1789185349.816:663): avc: denied { write } for pid=10991 comm="syz.2.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 696.145471][T10998] syz.0.1662 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 696.145512][T10998] CPU: 0 UID: 0 PID: 10998 Comm: syz.0.1662 Tainted: G L syzkaller #0 PREEMPT(full) [ 696.145542][T10998] Tainted: [L]=SOFTLOCKUP [ 696.145552][T10998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 696.145564][T10998] Call Trace: [ 696.145571][T10998] [ 696.145579][T10998] dump_stack_lvl+0x100/0x190 [ 696.145620][T10998] dump_header+0xfb/0x606 [ 696.145646][T10998] oom_kill_process.cold+0xd/0x380 [ 696.145672][T10998] out_of_memory+0x340/0x14f0 [ 696.145705][T10998] ? __pfx_out_of_memory+0x10/0x10 [ 696.145739][T10998] mem_cgroup_out_of_memory+0xc6/0x130 [ 696.145763][T10998] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 696.145783][T10998] ? find_held_lock+0x2b/0x80 [ 696.145817][T10998] ? do_raw_spin_unlock+0x145/0x1e0 [ 696.145853][T10998] ? _raw_spin_unlock+0x28/0x50 [ 696.145879][T10998] try_charge_memcg+0x783/0xf60 [ 696.145914][T10998] ? __pfx_try_charge_memcg+0x10/0x10 [ 696.145942][T10998] ? find_held_lock+0x2b/0x80 [ 696.145968][T10998] ? rcu_read_unlock+0x17/0x60 [ 696.145995][T10998] ? rcu_read_unlock+0x17/0x60 [ 696.146032][T10998] obj_cgroup_charge_pages+0x22/0x1d0 [ 696.146063][T10998] __memcg_kmem_charge_page+0x1c4/0x4d0 [ 696.146090][T10998] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 696.146121][T10998] __alloc_frozen_pages_noprof+0x534/0x3300 [ 696.146160][T10998] ? __lock_acquire+0x5c0/0x1f40 [ 696.146189][T10998] ? __lock_acquire+0x5c0/0x1f40 [ 696.146210][T10998] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 696.146240][T10998] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 696.146274][T10998] ? unwind_next_frame+0xbd/0x2090 [ 696.146307][T10998] ? lock_acquire+0x1d1/0x380 [ 696.146327][T10998] ? is_bpf_text_address+0x25/0x1a0 [ 696.146354][T10998] ? find_held_lock+0x2b/0x80 [ 696.146381][T10998] ? is_bpf_text_address+0x8a/0x1a0 [ 696.146408][T10998] ? __lock_acquire+0x5c0/0x1f40 [ 696.146428][T10998] ? __css_rstat_updated+0x1ce/0x590 [ 696.146456][T10998] ? __lock_acquire+0x5c0/0x1f40 [ 696.146477][T10998] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 696.146504][T10998] ? policy_nodemask+0xed/0x4f0 [ 696.146532][T10998] alloc_pages_mpol+0x201/0x550 [ 696.146575][T10998] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 696.146604][T10998] ? find_held_lock+0x2b/0x80 [ 696.146632][T10998] ? __pud_alloc+0x4f6/0x690 [ 696.146656][T10998] ? __pud_alloc+0x4f6/0x690 [ 696.146682][T10998] alloc_pages_noprof+0x1a/0x160 [ 696.146710][T10998] __pmd_alloc+0x3b/0x950 [ 696.146733][T10998] ? __pud_alloc+0x4fb/0x690 [ 696.146757][T10998] copy_page_range+0x3e98/0x57c0 [ 696.146807][T10998] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 696.146845][T10998] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 696.146870][T10998] ? __pfx_copy_page_range+0x10/0x10 [ 696.146898][T10998] ? mas_wr_store_entry+0xa4/0x1d50 [ 696.146938][T10998] ? mas_store+0x745/0xe20 [ 696.146978][T10998] ? __pfx___vma_start_write+0x10/0x10 [ 696.147014][T10998] dup_mmap+0x1230/0x2370 [ 696.147052][T10998] ? __pfx_dup_mmap+0x10/0x10 [ 696.147074][T10998] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 696.147099][T10998] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 696.147126][T10998] ? __lock_acquire+0x5c0/0x1f40 [ 696.147160][T10998] ? lock_acquire+0x1d1/0x380 [ 696.147181][T10998] ? copy_process+0x4806/0x8370 [ 696.147215][T10998] copy_process+0x4811/0x8370 [ 696.147255][T10998] ? __pfx_copy_process+0x10/0x10 [ 696.147279][T10998] ? futex_wake+0x4ea/0x5e0 [ 696.147322][T10998] kernel_clone+0x176/0x9d0 [ 696.147347][T10998] ? __pfx_kernel_clone+0x10/0x10 [ 696.147388][T10998] __do_sys_clone+0xd9/0x120 [ 696.147411][T10998] ? __pfx___do_sys_clone+0x10/0x10 [ 696.147435][T10998] ? fdget+0x18b/0x210 [ 696.147486][T10998] do_syscall_64+0x123/0x790 [ 696.147516][T10998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.147538][T10998] RIP: 0033:0x7fa9dc79e159 [ 696.147557][T10998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.147575][T10998] RSP: 002b:00007fa9dd693fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 696.147596][T10998] RAX: ffffffffffffffda RBX: 00007fa9dca26090 RCX: 00007fa9dc79e159 [ 696.147609][T10998] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 696.147621][T10998] RBP: 00007fa9dc83503b R08: 0000000000000000 R09: 0000000000000000 [ 696.147632][T10998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.147643][T10998] R13: 00007fa9dca26128 R14: 00007fa9dca26090 R15: 00007fffa02d86a8 [ 696.147674][T10998] [ 696.150634][T10998] memory: usage 96kB, limit 96kB, failcnt 175 [ 696.150652][T10998] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 696.155572][T10998] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 696.155588][T10998] Memory cgroup stats for /syz0/test: [ 696.155710][T10998] cache 0 [ 696.157380][T10998] rss 0 [ 696.157388][T10998] rss_huge 0 [ 696.157395][T10998] shmem 0 [ 696.157402][T10998] mapped_file 0 [ 696.157409][T10998] dirty 0 [ 696.157416][T10998] writeback 0 [ 696.157424][T10998] workingset_refault_anon 0 [ 696.157433][T10998] workingset_refault_file 0 [ 696.157442][T10998] swap 0 [ 696.157449][T10998] swapcached 4096 [ 696.157456][T10998] pgpgin 536 [ 696.157464][T10998] pgpgout 536 [ 696.157471][T10998] pgfault 69 [ 696.157479][T10998] pgmajfault 0 [ 696.157486][T10998] inactive_anon 0 [ 696.157494][T10998] active_anon 0 [ 696.157501][T10998] inactive_file 0 [ 696.157508][T10998] active_file 0 [ 696.157515][T10998] unevictable 0 [ 696.157523][T10998] hierarchical_memory_limit 98304 [ 696.157531][T10998] hierarchical_memsw_limit 9223372036854771712 [ 696.157541][T10998] total_cache 0 [ 696.157549][T10998] total_rss 0 [ 696.157555][T10998] total_rss_huge 0 [ 696.157562][T10998] total_shmem 0 [ 696.157569][T10998] total_mapped_file 0 [ 696.157576][T10998] total_dirty 0 [ 696.157583][T10998] total_writeback 0 [ 696.157590][T10998] total_workingset_refault_anon 0 [ 696.157598][T10998] total_workingset_refault_file 0 [ 696.157606][T10998] total_swap 0 [ 696.157614][T10998] total_swapcached 4096 [ 696.157621][T10998] total_pgpgin 536 [ 696.157628][T10998] total_pgpgout 536 [ 696.157635][T10998] total_pgfault 69 [ 696.157642][T10998] total_pgmajfault 0 [ 696.157649][T10998] total_inactive_anon 0 [ 696.157656][T10998] total_active_anon 0 [ 696.157664][T10998] total_inactive_file 0 [ 696.157671][T10998] total_active_file 0 [ 696.157678][T10998] total_unevictable 0 [ 696.157686][T10998] anon_cost 0 [ 696.157692][T10998] file_cost 0 [ 696.157700][T10998] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.1662,pid=10993,uid=0 [ 696.159682][T10998] Memory cgroup out of memory: Killed process 10993 (syz.0.1662) total-vm:102384kB, anon-rss:1464kB, file-rss:22800kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 696.409567][T11004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.409962][T11004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.803877][ T5740] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 697.382994][ T5740] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 697.384105][ T5740] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 697.384134][ T5740] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 697.384157][ T5740] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 697.388934][ T5740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.388958][ T5740] usb 2-1: Product: syz [ 697.388973][ T5740] usb 2-1: Manufacturer: syz [ 697.388989][ T5740] usb 2-1: SerialNumber: syz [ 697.965450][T11032] syz.2.1674 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 697.965492][T11032] CPU: 0 UID: 0 PID: 11032 Comm: syz.2.1674 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.965524][T11032] Tainted: [L]=SOFTLOCKUP [ 697.965532][T11032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 697.965545][T11032] Call Trace: [ 697.965553][T11032] [ 697.965562][T11032] dump_stack_lvl+0x100/0x190 [ 697.965597][T11032] dump_header+0xfb/0x606 [ 697.965633][T11032] oom_kill_process.cold+0xd/0x380 [ 697.965662][T11032] out_of_memory+0x340/0x14f0 [ 697.965698][T11032] ? __pfx_out_of_memory+0x10/0x10 [ 697.965734][T11032] mem_cgroup_out_of_memory+0xc6/0x130 [ 697.965758][T11032] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 697.965780][T11032] ? find_held_lock+0x2b/0x80 [ 697.965814][T11032] ? do_raw_spin_unlock+0x145/0x1e0 [ 697.965841][T11032] ? _raw_spin_unlock+0x28/0x50 [ 697.965868][T11032] try_charge_memcg+0x783/0xf60 [ 697.965903][T11032] ? __pfx_try_charge_memcg+0x10/0x10 [ 697.965930][T11032] ? find_held_lock+0x2b/0x80 [ 697.965955][T11032] ? rcu_read_unlock+0x17/0x60 [ 697.965983][T11032] ? rcu_read_unlock+0x17/0x60 [ 697.966022][T11032] obj_cgroup_charge_pages+0x22/0x1d0 [ 697.966054][T11032] __memcg_kmem_charge_page+0x1c4/0x4d0 [ 697.966084][T11032] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 697.966116][T11032] __alloc_frozen_pages_noprof+0x534/0x3300 [ 697.966158][T11032] ? __lock_acquire+0x5c0/0x1f40 [ 697.966187][T11032] ? __lock_acquire+0x5c0/0x1f40 [ 697.966209][T11032] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 697.966239][T11032] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 697.966273][T11032] ? unwind_next_frame+0xbd/0x2090 [ 697.966310][T11032] ? lock_acquire+0x1d1/0x380 [ 697.966332][T11032] ? is_bpf_text_address+0x25/0x1a0 [ 697.966376][T11032] ? find_held_lock+0x2b/0x80 [ 697.966405][T11032] ? is_bpf_text_address+0x8a/0x1a0 [ 697.966436][T11032] ? __lock_acquire+0x5c0/0x1f40 [ 697.966459][T11032] ? __css_rstat_updated+0x1ce/0x590 [ 697.966488][T11032] ? __lock_acquire+0x5c0/0x1f40 [ 697.966510][T11032] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 697.966536][T11032] ? policy_nodemask+0xed/0x4f0 [ 697.966565][T11032] alloc_pages_mpol+0x201/0x550 [ 697.966594][T11032] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 697.966628][T11032] ? find_held_lock+0x2b/0x80 [ 697.966657][T11032] ? __pud_alloc+0x4f6/0x690 [ 697.966683][T11032] ? __pud_alloc+0x4f6/0x690 [ 697.966713][T11032] alloc_pages_noprof+0x1a/0x160 [ 697.966745][T11032] __pmd_alloc+0x3b/0x950 [ 697.966769][T11032] ? __pud_alloc+0x4fb/0x690 [ 697.966796][T11032] copy_page_range+0x3e98/0x57c0 [ 697.966850][T11032] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 697.966880][T11032] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 697.966904][T11032] ? __pfx_copy_page_range+0x10/0x10 [ 697.966931][T11032] ? mas_wr_store_entry+0xa4/0x1d50 [ 697.966968][T11032] ? mas_store+0x745/0xe20 [ 697.967009][T11032] ? __pfx___vma_start_write+0x10/0x10 [ 697.967045][T11032] dup_mmap+0x1230/0x2370 [ 697.967083][T11032] ? __pfx_dup_mmap+0x10/0x10 [ 697.967107][T11032] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 697.967133][T11032] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 697.967162][T11032] ? __lock_acquire+0x5c0/0x1f40 [ 697.967197][T11032] ? lock_acquire+0x1d1/0x380 [ 697.967218][T11032] ? copy_process+0x4806/0x8370 [ 697.967255][T11032] copy_process+0x4811/0x8370 [ 697.967296][T11032] ? __pfx_copy_process+0x10/0x10 [ 697.967320][T11032] ? futex_wake+0x4ea/0x5e0 [ 697.967363][T11032] kernel_clone+0x176/0x9d0 [ 697.967389][T11032] ? __pfx_kernel_clone+0x10/0x10 [ 697.967431][T11032] __do_sys_clone+0xd9/0x120 [ 697.967454][T11032] ? __pfx___do_sys_clone+0x10/0x10 [ 697.967477][T11032] ? fdget+0x18b/0x210 [ 697.967526][T11032] do_syscall_64+0x123/0x790 [ 697.967556][T11032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.967578][T11032] RIP: 0033:0x7f0d0499e159 [ 697.967596][T11032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.967622][T11032] RSP: 002b:00007f0d057bbfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 697.967644][T11032] RAX: ffffffffffffffda RBX: 00007f0d04c26090 RCX: 00007f0d0499e159 [ 697.967658][T11032] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 697.967671][T11032] RBP: 00007f0d04a3503b R08: 0000000000000000 R09: 0000000000000000 [ 697.967685][T11032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.967698][T11032] R13: 00007f0d04c26128 R14: 00007f0d04c26090 R15: 00007ffd4caa5b38 [ 697.967729][T11032] [ 697.970126][T11032] memory: usage 96kB, limit 96kB, failcnt 44 [ 697.970143][T11032] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 697.970157][T11032] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 697.970169][T11032] Memory cgroup stats for /syz2/test: [ 697.970291][T11032] cache 0 [ 697.970300][T11032] rss 0 [ 697.970306][T11032] rss_huge 0 [ 697.970314][T11032] shmem 0 [ 697.970320][T11032] mapped_file 0 [ 697.970327][T11032] dirty 0 [ 697.970334][T11032] writeback 0 [ 697.970341][T11032] workingset_refault_anon 0 [ 697.970348][T11032] workingset_refault_file 0 [ 697.970356][T11032] swap 0 [ 697.970363][T11032] swapcached 0 [ 697.970370][T11032] pgpgin 48 [ 697.970377][T11032] pgpgout 48 [ 697.970384][T11032] pgfault 61 [ 697.970391][T11032] pgmajfault 0 [ 697.970398][T11032] inactive_anon 0 [ 697.970405][T11032] active_anon 0 [ 697.970411][T11032] inactive_file 0 [ 697.970418][T11032] active_file 0 [ 697.970425][T11032] unevictable 0 [ 697.970432][T11032] hierarchical_memory_limit 98304 [ 697.970439][T11032] hierarchical_memsw_limit 9223372036854771712 [ 697.970448][T11032] total_cache 0 [ 697.970455][T11032] total_rss 0 [ 697.970461][T11032] total_rss_huge 0 [ 697.970468][T11032] total_shmem 0 [ 697.970476][T11032] total_mapped_file 0 [ 697.970483][T11032] total_dirty 0 [ 697.970490][T11032] total_writeback 0 [ 697.970497][T11032] total_workingset_refault_anon 0 [ 697.970504][T11032] total_workingset_refault_file 0 [ 697.970511][T11032] total_swap 0 [ 697.970518][T11032] total_swapcached 0 [ 697.970525][T11032] total_pgpgin 48 [ 697.970532][T11032] total_pgpgout 48 [ 697.970539][T11032] total_pgfault 61 [ 697.970546][T11032] total_pgmajfault 0 [ 697.970553][T11032] total_inactive_anon 0 [ 697.970560][T11032] total_active_anon 0 [ 697.970567][T11032] total_inactive_file 0 [ 697.970574][T11032] total_active_file 0 [ 697.970581][T11032] total_unevictable 0 [ 697.970588][T11032] anon_cost 0 [ 697.970594][T11032] file_cost 0 [ 697.970602][T11032] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.1674,pid=11026,uid=0 [ 697.970726][T11032] Memory cgroup out of memory: Killed process 11026 (syz.2.1674) total-vm:102384kB, anon-rss:1444kB, file-rss:22800kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 699.585728][T11064] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 699.634464][ T5604] usb 2-1: USB disconnect, device number 97 [ 700.497726][T11073] net_ratelimit: 31 callbacks suppressed [ 700.497745][T11073] openvswitch: netlink: Unknown key attributes 20 [ 700.871637][ T31] audit: type=1107 audit(1789185354.446:664): pid=11065 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 700.921196][T11076] smc: removing ib device syz1 [ 701.086624][T11079] syzkaller0: entered promiscuous mode [ 701.086639][T11079] syzkaller0: entered allmulticast mode [ 701.192749][T11076] smbdirect: ib_dev[syz1] removed [ 702.231823][ T30] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 702.382865][ T30] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 702.383819][ T30] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.383849][ T30] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.383871][ T30] usb 2-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 702.383898][ T30] usb 2-1: config 0 interface 0 has no altsetting 0 [ 702.383927][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.201837][ T5604] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 704.302466][ T5604] usb 3-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 704.303434][ T5604] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.303477][ T5604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.042160][ T30] usb 2-1: USB disconnect, device number 98 [ 705.048436][T11111] netlink: 75 bytes leftover after parsing attributes in process `syz.0.1704'. [ 705.690308][ T31] audit: type=1107 audit(1789185359.496:665): pid=11106 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 705.911144][ T30] usb 3-1: USB disconnect, device number 99 [ 710.132655][ T987] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 710.285668][ T987] usb 2-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 710.288069][ T987] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.288100][ T987] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.288135][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.455231][ T25] usb 2-1: USB disconnect, device number 99 [ 713.456180][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1728'. [ 713.638181][T11166] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 714.784554][T11190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1732'. [ 718.071692][T11213] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 718.170899][T11222] batman_adv: batadv0: Adding interface: syzkaller0 [ 718.170924][T11222] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.170941][T11222] batman_adv: batadv0: Interface activated: syzkaller0 [ 718.206835][T11220] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 718.295093][T11220] batman_adv: batadv0: Removing interface: syzkaller0 [ 719.246069][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1750'. [ 719.626383][T11248] netlink: zone id is out of range [ 719.627275][T11248] netlink: zone id is out of range [ 719.628816][T11248] netlink: zone id is out of range [ 719.630075][T11248] netlink: zone id is out of range [ 719.631652][T11248] netlink: zone id is out of range [ 719.632274][T11248] netlink: zone id is out of range [ 719.632407][T11248] netlink: zone id is out of range [ 719.633658][T11248] netlink: zone id is out of range [ 719.634150][T11248] netlink: zone id is out of range [ 719.635009][T11248] netlink: zone id is out of range [ 720.065074][ T31] audit: type=1400 audit(1789185373.876:666): avc: denied { node_bind } for pid=11252 comm="syz.1.1756" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 721.655578][T11251] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 724.187407][ T31] audit: type=1400 audit(1789185377.996:667): avc: denied { ioctl } for pid=11290 comm="syz.4.1773" path="socket:[24002]" dev="sockfs" ino=24002 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 725.770054][T11330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1777'. [ 726.617235][T11333] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 728.919320][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1791'. [ 728.956155][T11359] netlink: 'syz.0.1791': attribute type 8 has an invalid length. [ 729.031870][ T987] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 729.743143][T11365] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 729.822543][ T987] usb 2-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 729.823677][ T987] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.823707][ T987] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.823742][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.883491][T11369] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1793'. [ 729.887782][T11369] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1793'. [ 729.888401][T11369] netlink: 'syz.3.1793': attribute type 32 has an invalid length. [ 729.888418][T11369] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1793'. [ 732.257409][ T25] usb 2-1: USB disconnect, device number 100 [ 733.852893][ T31] audit: type=1400 audit(1789185387.656:668): avc: denied { name_connect } for pid=11412 comm="syz.0.1794" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 734.870720][T11428] syz_tun: entered allmulticast mode [ 734.886572][T11427] syz_tun: left allmulticast mode [ 735.002107][ T25] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 735.162565][ T25] usb 2-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 735.164082][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.164113][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.164148][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.076866][T11445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1820'. [ 736.312062][ T31] audit: type=1400 audit(1789185390.116:669): avc: denied { execmod } for pid=11447 comm="syz.4.1822" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 736.879118][T11452] syz.2.1823 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 736.879156][T11452] CPU: 1 UID: 0 PID: 11452 Comm: syz.2.1823 Tainted: G L syzkaller #0 PREEMPT(full) [ 736.879182][T11452] Tainted: [L]=SOFTLOCKUP [ 736.879189][T11452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 736.879202][T11452] Call Trace: [ 736.879208][T11452] [ 736.879215][T11452] dump_stack_lvl+0x100/0x190 [ 736.879252][T11452] dump_header+0xfb/0x606 [ 736.879278][T11452] oom_kill_process.cold+0xd/0x380 [ 736.879305][T11452] out_of_memory+0x340/0x14f0 [ 736.879338][T11452] ? __pfx_out_of_memory+0x10/0x10 [ 736.879372][T11452] mem_cgroup_out_of_memory+0xc6/0x130 [ 736.879397][T11452] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 736.879418][T11452] ? find_held_lock+0x2b/0x80 [ 736.879452][T11452] ? do_raw_spin_unlock+0x145/0x1e0 [ 736.879479][T11452] ? _raw_spin_unlock+0x28/0x50 [ 736.879506][T11452] try_charge_memcg+0x783/0xf60 [ 736.879541][T11452] ? __pfx_try_charge_memcg+0x10/0x10 [ 736.879568][T11452] ? find_held_lock+0x2b/0x80 [ 736.879601][T11452] ? rcu_read_unlock+0x17/0x60 [ 736.879629][T11452] ? rcu_read_unlock+0x17/0x60 [ 736.879666][T11452] obj_cgroup_charge_pages+0x22/0x1d0 [ 736.879698][T11452] __memcg_kmem_charge_page+0x1c4/0x4d0 [ 736.879726][T11452] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 736.879756][T11452] __alloc_frozen_pages_noprof+0x534/0x3300 [ 736.879794][T11452] ? __lock_acquire+0x5c0/0x1f40 [ 736.879824][T11452] ? __lock_acquire+0x5c0/0x1f40 [ 736.879846][T11452] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 736.879876][T11452] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 736.879910][T11452] ? unwind_next_frame+0xbd/0x2090 [ 736.879943][T11452] ? lock_acquire+0x1d1/0x380 [ 736.879963][T11452] ? is_bpf_text_address+0x25/0x1a0 [ 736.879990][T11452] ? find_held_lock+0x2b/0x80 [ 736.880016][T11452] ? is_bpf_text_address+0x8a/0x1a0 [ 736.880047][T11452] ? __lock_acquire+0x5c0/0x1f40 [ 736.880068][T11452] ? __css_rstat_updated+0x1ce/0x590 [ 736.880095][T11452] ? __lock_acquire+0x5c0/0x1f40 [ 736.880115][T11452] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 736.880140][T11452] ? policy_nodemask+0xed/0x4f0 [ 736.880169][T11452] alloc_pages_mpol+0x201/0x550 [ 736.880197][T11452] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 736.880223][T11452] ? find_held_lock+0x2b/0x80 [ 736.880251][T11452] ? __pud_alloc+0x4f6/0x690 [ 736.880275][T11452] ? __pud_alloc+0x4f6/0x690 [ 736.880301][T11452] alloc_pages_noprof+0x1a/0x160 [ 736.880331][T11452] __pmd_alloc+0x3b/0x950 [ 736.880353][T11452] ? __pud_alloc+0x4fb/0x690 [ 736.880380][T11452] copy_page_range+0x3e98/0x57c0 [ 736.880431][T11452] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 736.880459][T11452] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 736.880480][T11452] ? __pfx_copy_page_range+0x10/0x10 [ 736.880505][T11452] ? mas_wr_store_entry+0xa4/0x1d50 [ 736.880546][T11452] ? mas_store+0x745/0xe20 [ 736.880592][T11452] ? __pfx___vma_start_write+0x10/0x10 [ 736.880629][T11452] dup_mmap+0x1230/0x2370 [ 736.880670][T11452] ? __pfx_dup_mmap+0x10/0x10 [ 736.880693][T11452] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 736.880718][T11452] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 736.880746][T11452] ? __lock_acquire+0x5c0/0x1f40 [ 736.880781][T11452] ? lock_acquire+0x1d1/0x380 [ 736.880802][T11452] ? copy_process+0x4806/0x8370 [ 736.880838][T11452] copy_process+0x4811/0x8370 [ 736.880878][T11452] ? __pfx_copy_process+0x10/0x10 [ 736.880902][T11452] ? futex_wake+0x4ea/0x5e0 [ 736.880941][T11452] kernel_clone+0x176/0x9d0 [ 736.880965][T11452] ? __pfx_kernel_clone+0x10/0x10 [ 736.881002][T11452] __do_sys_clone+0xd9/0x120 [ 736.881026][T11452] ? __pfx___do_sys_clone+0x10/0x10 [ 736.881048][T11452] ? fdget+0x18b/0x210 [ 736.881086][T11452] do_syscall_64+0x123/0x790 [ 736.881104][T11452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.881117][T11452] RIP: 0033:0x7f0d0499e159 [ 736.881128][T11452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.881138][T11452] RSP: 002b:00007f0d057bbfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 736.881151][T11452] RAX: ffffffffffffffda RBX: 00007f0d04c26090 RCX: 00007f0d0499e159 [ 736.881159][T11452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 736.881166][T11452] RBP: 00007f0d04a3503b R08: 0000000000000000 R09: 0000000000000000 [ 736.881173][T11452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.881180][T11452] R13: 00007f0d04c26128 R14: 00007f0d04c26090 R15: 00007ffd4caa5b38 [ 736.881196][T11452] [ 737.775536][T11452] memory: usage 96kB, limit 96kB, failcnt 114 [ 737.775555][T11452] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 737.775569][T11452] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 737.775582][T11452] Memory cgroup stats for /syz2/test: [ 737.775698][T11452] cache 0 [ 737.775707][T11452] rss 0 [ 737.775714][T11452] rss_huge 0 [ 737.775720][T11452] shmem 0 [ 737.775726][T11452] mapped_file 0 [ 737.775734][T11452] dirty 0 [ 737.775741][T11452] writeback 0 [ 737.775747][T11452] workingset_refault_anon 0 [ 737.775756][T11452] workingset_refault_file 0 [ 737.775763][T11452] swap 4096 [ 737.775770][T11452] swapcached 8192 [ 737.775778][T11452] pgpgin 50 [ 737.775785][T11452] pgpgout 50 [ 737.775792][T11452] pgfault 67 [ 737.775798][T11452] pgmajfault 0 [ 737.775805][T11452] inactive_anon 0 [ 737.775812][T11452] active_anon 0 [ 737.775819][T11452] inactive_file 0 [ 737.775826][T11452] active_file 0 [ 737.775833][T11452] unevictable 0 [ 737.775840][T11452] hierarchical_memory_limit 98304 [ 737.775848][T11452] hierarchical_memsw_limit 9223372036854771712 [ 737.775857][T11452] total_cache 0 [ 737.775864][T11452] total_rss 0 [ 737.775870][T11452] total_rss_huge 0 [ 737.775877][T11452] total_shmem 0 [ 737.775885][T11452] total_mapped_file 0 [ 737.775892][T11452] total_dirty 0 [ 737.775898][T11452] total_writeback 0 [ 737.775906][T11452] total_workingset_refault_anon 0 [ 737.775914][T11452] total_workingset_refault_file 0 [ 737.775922][T11452] total_swap 4096 [ 737.775929][T11452] total_swapcached 8192 [ 737.775936][T11452] total_pgpgin 50 [ 737.775943][T11452] total_pgpgout 50 [ 737.775950][T11452] total_pgfault 67 [ 737.775957][T11452] total_pgmajfault 0 [ 737.775964][T11452] total_inactive_anon 0 [ 737.775972][T11452] total_active_anon 0 [ 737.775979][T11452] total_inactive_file 0 [ 737.775986][T11452] total_active_file 0 [ 737.775993][T11452] total_unevictable 0 [ 737.776000][T11452] anon_cost 0 [ 737.776007][T11452] file_cost 0 [ 737.776014][T11452] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.1823,pid=11449,uid=0 [ 737.776139][T11452] Memory cgroup out of memory: Killed process 11449 (syz.2.1823) total-vm:102384kB, anon-rss:1444kB, file-rss:22864kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 737.791924][ T5604] usb 2-1: USB disconnect, device number 101 [ 740.353564][ T5604] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 740.355028][ T33] oom_reaper: reaped process 11449 (syz.2.1823), now anon-rss:0kB, file-rss:21704kB, shmem-rss:0kB [ 740.502374][ T5604] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 740.503381][ T5604] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.503405][ T5604] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 740.503439][ T5604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.659143][ T30] usb 2-1: USB disconnect, device number 102 [ 742.842705][ T31] audit: type=1400 audit(1789185396.656:670): avc: denied { read } for pid=11512 comm="syz.2.1842" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 744.897255][ T987] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 745.045512][ T987] usb 5-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 745.049503][ T987] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.049534][ T987] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.049568][ T987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.270977][T11546] netlink: 'syz.3.1854': attribute type 29 has an invalid length. [ 746.287138][T11546] netlink: 'syz.3.1854': attribute type 29 has an invalid length. [ 746.321043][ T5763] usb 5-1: USB disconnect, device number 82 [ 746.933570][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.933638][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.435096][T11563] net_ratelimit: 11 callbacks suppressed [ 747.435115][T11563] netlink: zone id is out of range [ 747.435286][T11563] netlink: zone id is out of range [ 747.435595][T11563] netlink: zone id is out of range [ 747.435865][T11563] netlink: zone id is out of range [ 747.436202][T11563] netlink: zone id is out of range [ 747.436372][T11563] netlink: zone id is out of range [ 747.436403][T11563] netlink: zone id is out of range [ 747.436647][T11563] netlink: zone id is out of range [ 747.436748][T11563] netlink: zone id is out of range [ 747.436919][T11563] netlink: zone id is out of range [ 748.404467][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1862'. [ 752.438862][T11621] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 753.751074][T11639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.751479][T11639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.896333][T11643] netlink: 'syz.3.1877': attribute type 29 has an invalid length. [ 753.897217][T11643] netlink: 'syz.3.1877': attribute type 29 has an invalid length. [ 755.640342][T11658] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 755.871173][ T31] audit: type=1400 audit(1789185409.676:671): avc: denied { write } for pid=11668 comm="syz.2.1893" path="socket:[24857]" dev="sockfs" ino=24857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 755.888415][T11674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1893'. [ 756.304758][T11684] infiniband syz1: set active [ 756.304778][T11684] infiniband syz1: added team0 [ 756.319804][T11684] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 756.319839][T11684] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 756.319879][T11684] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 756.338298][T11684] RDS/IB: syz1: added [ 756.338362][T11684] smc: adding ib device syz1 with port count 1 [ 756.338379][T11684] smc: ib device syz1 port 1 has no pnetid [ 756.724990][T11689] syzkaller0: entered promiscuous mode [ 756.725019][T11689] syzkaller0: entered allmulticast mode [ 759.454033][T11699] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 760.194005][T11720] syzkaller0: entered promiscuous mode [ 760.194025][T11720] syzkaller0: entered allmulticast mode [ 760.661221][T11728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.661608][T11728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.667026][T11728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.667381][T11728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.669940][T11728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.670289][T11728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.672835][T11728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.673184][T11728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.962138][ T25] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 764.135532][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 764.135579][ T25] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 764.136535][ T25] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 764.138353][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.138377][ T25] usb 3-1: Product: syz [ 764.138392][ T25] usb 3-1: Manufacturer: syz [ 764.138407][ T25] usb 3-1: SerialNumber: syz [ 764.534486][T11758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27766 sclass=netlink_route_socket pid=11758 comm=syz.0.1928 [ 764.534600][T11758] netlink: 'syz.0.1928': attribute type 29 has an invalid length. [ 767.171552][ T25] usb 3-1: USB disconnect, device number 100 [ 767.227198][T11778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.227585][T11778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.247315][T11778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.247693][T11778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.273102][T11778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.273331][T11778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.486700][T11778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.489431][T11778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.662010][ T25] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 767.693113][T11778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.697263][T11778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.821796][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 767.822321][ T25] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 767.824173][ T25] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 767.824215][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 767.824241][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 767.824267][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 767.824294][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 767.824318][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 59391, setting to 1024 [ 767.824342][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 767.826209][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.826232][ T25] usb 3-1: Product: syz [ 767.826246][ T25] usb 3-1: Manufacturer: syz [ 767.826262][ T25] usb 3-1: SerialNumber: syz [ 768.009354][T11782] 9p: Bad value for 'rfdno' [ 770.744942][ T5763] usb 3-1: USB disconnect, device number 101 [ 808.448582][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.449141][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.361357][ T4920] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 815.382352][ T4920] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 815.389429][ T4920] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 815.428352][ T4920] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 815.469596][ T4920] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 816.333726][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 816.405203][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 816.417941][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 816.564825][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 816.601998][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 818.215282][ T5608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 818.245487][ T5608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 818.268631][ T5608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 818.313762][ T5608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 818.332976][ T5608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 818.767119][ T4920] Bluetooth: hci5: command tx timeout [ 820.370651][ T5608] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 820.393737][ T5608] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 820.403186][ T5608] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 820.442812][ T5608] Bluetooth: hci6: command tx timeout [ 820.469104][ T9482] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 820.528680][ T9482] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 820.845108][ T9482] Bluetooth: hci5: command tx timeout [ 821.925633][ T4920] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 821.951049][ T4920] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 821.977569][ T4920] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 822.048024][ T4920] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 822.092017][ T4920] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 822.533737][ T9482] Bluetooth: hci6: command tx timeout [ 822.602302][ T9482] Bluetooth: hci7: command tx timeout [ 822.932426][ T9482] Bluetooth: hci5: command tx timeout [ 824.362530][ T9482] Bluetooth: hci8: command tx timeout [ 824.612613][ T9482] Bluetooth: hci6: command tx timeout [ 824.682108][ T9482] Bluetooth: hci7: command tx timeout [ 825.011984][ T9482] Bluetooth: hci5: command tx timeout [ 825.807806][ T4920] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 825.827695][ T4920] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 825.833790][ T4920] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 825.894379][ T4920] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 825.922654][ T4920] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 826.450397][ T4920] Bluetooth: hci8: command tx timeout [ 826.693190][ T4920] Bluetooth: hci6: command tx timeout [ 826.762087][ T4920] Bluetooth: hci7: command tx timeout [ 828.132871][ T4920] Bluetooth: hci9: command tx timeout [ 828.529956][ T4920] Bluetooth: hci8: command tx timeout [ 828.842678][ T4920] Bluetooth: hci7: command tx timeout [ 830.204281][ T4920] Bluetooth: hci9: command tx timeout [ 830.621275][ T4920] Bluetooth: hci8: command tx timeout [ 832.293675][ T4920] Bluetooth: hci9: command tx timeout [ 834.369524][ T4920] Bluetooth: hci9: command tx timeout [ 850.111875][ T43] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.728068][ T43] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.743031][ T5601] syz_tun (unregistering): left allmulticast mode [ 856.233032][ T43] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.205163][ T43] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.092411][ T5597] tipc: Resetting bearer [ 859.773916][ T9482] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 859.794635][ T9482] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 859.818849][ T9482] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 859.857876][ T9482] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 859.894842][ T9482] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 859.926119][ T5597] syz_tun (unregistering): left allmulticast mode [ 860.176404][ T5597] tipc: Disabling bearer [ 861.964590][ T9482] Bluetooth: hci0: command tx timeout [ 864.055666][ T9482] Bluetooth: hci0: command tx timeout [ 866.126277][ T9482] Bluetooth: hci0: command tx timeout [ 868.218850][ T9482] Bluetooth: hci0: command tx timeout [ 868.416352][ T31] audit: type=1400 audit(1789185522.206:672): avc: denied { read } for pid=5265 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 869.620094][ T43] bridge_slave_1: left allmulticast mode [ 869.620174][ T43] bridge_slave_1: left promiscuous mode [ 869.632237][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.824786][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.825305][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.064984][ T43] bridge_slave_0: left allmulticast mode [ 870.065025][ T43] bridge_slave_0: left promiscuous mode [ 870.072407][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.352696][ T4920] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 874.363907][ T4920] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 874.387702][ T4920] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 874.427212][ T4920] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 874.453774][ T4920] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 876.524244][ T9482] Bluetooth: hci1: command tx timeout [ 877.759854][ T4920] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 877.778187][ T4920] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 877.785565][ T4920] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 877.802883][ T4920] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 877.816996][ T4920] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 878.165131][ T4920] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 878.186687][ T4920] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 878.205268][ T4920] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 878.258670][ T4920] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 878.290916][ T4920] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 878.612066][ T9482] Bluetooth: hci1: command tx timeout [ 879.882932][ T9482] Bluetooth: hci2: command tx timeout [ 880.606280][ T9482] Bluetooth: hci3: command tx timeout [ 880.683354][ T9482] Bluetooth: hci1: command tx timeout [ 881.520283][ T4920] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 881.541251][ T4920] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 881.566678][ T4920] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 881.613795][ T4920] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 881.639283][ T4920] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 881.962406][ T9482] Bluetooth: hci2: command tx timeout [ 882.691994][ T9482] Bluetooth: hci3: command tx timeout [ 882.763130][ T9482] Bluetooth: hci1: command tx timeout [ 883.258926][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 883.475409][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 883.563325][ T43] bond0 (unregistering): Released all slaves [ 883.808359][ T9482] Bluetooth: hci4: command tx timeout [ 884.049510][ T9482] Bluetooth: hci2: command tx timeout [ 884.764024][ T9482] Bluetooth: hci3: command tx timeout [ 885.882462][ T9482] Bluetooth: hci4: command tx timeout [ 886.132892][ T9482] Bluetooth: hci2: command tx timeout [ 886.855425][ T9482] Bluetooth: hci3: command tx timeout [ 887.981925][ T9482] Bluetooth: hci4: command tx timeout [ 890.047433][ T9482] Bluetooth: hci4: command tx timeout [ 907.097882][ T31] audit: type=1400 audit(1789185560.906:673): avc: denied { write } for pid=11957 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 909.269412][ T31] audit: type=1400 audit(1789185563.076:674): avc: denied { write } for pid=11979 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 911.891241][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1 [ 914.561331][ T4920] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 914.591667][ T4920] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 914.598291][ T4920] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 914.631685][ T4920] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 914.645274][ T4920] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 916.854153][ T4920] Bluetooth: hci5: command tx timeout [ 918.941964][ T4920] Bluetooth: hci5: command tx timeout [ 921.014033][ T4920] Bluetooth: hci5: command tx timeout [ 923.092003][ T4920] Bluetooth: hci5: command tx timeout [ 925.891496][ T31] audit: type=1400 audit(1789185579.696:675): avc: denied { write } for pid=11993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 928.804781][ T31] audit: type=1400 audit(1789185582.616:676): avc: denied { write } for pid=12015 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 931.274128][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.276012][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.204830][ T9482] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 932.229720][ T9482] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 932.247834][ T9482] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 932.280960][ T9482] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 932.299380][ T9482] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 932.514243][ T5265] 8021q: adding VLAN 0 to HW filter on device eth2 [ 934.454727][ T9482] Bluetooth: hci10: command tx timeout [ 936.523644][ T9482] Bluetooth: hci10: command tx timeout [ 938.382631][ T4920] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 938.393714][ T4920] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 938.405103][ T4920] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 938.440331][ T4920] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 938.470845][ T4920] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 938.603132][ T4920] Bluetooth: hci10: command tx timeout [ 940.604877][ T4920] Bluetooth: hci11: command tx timeout [ 940.694364][ T4920] Bluetooth: hci10: command tx timeout [ 941.556002][T11928] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 941.573131][T11928] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 941.580838][T11928] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 941.612360][T11928] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 941.641671][T12040] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 942.689415][ T4920] Bluetooth: hci11: command tx timeout [ 943.580137][ T4920] Bluetooth: hci6: command 0x0406 tx timeout [ 943.580356][ T4920] Bluetooth: hci7: command 0x0406 tx timeout [ 943.808029][ T4920] Bluetooth: hci12: command tx timeout [ 943.888284][ T9482] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 943.926274][ T9482] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 943.932485][ T9482] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 944.046744][ T9482] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 944.068998][ T9482] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 944.762950][T12040] Bluetooth: hci11: command tx timeout [ 945.882855][T12040] Bluetooth: hci12: command tx timeout [ 946.202769][T12040] Bluetooth: hci13: command tx timeout [ 946.864013][T12040] Bluetooth: hci11: command tx timeout [ 947.992517][T12040] Bluetooth: hci12: command tx timeout [ 948.288449][T12040] Bluetooth: hci13: command tx timeout [ 948.682566][T12040] Bluetooth: hci9: command 0x0406 tx timeout [ 948.701053][T12040] Bluetooth: hci8: command 0x0406 tx timeout [ 950.043359][ T5608] Bluetooth: hci12: command tx timeout [ 950.377262][ T5608] Bluetooth: hci13: command tx timeout [ 952.453885][ T5608] Bluetooth: hci13: command tx timeout [ 960.650288][ T31] audit: type=1400 audit(1789185614.446:677): avc: denied { write } for pid=12033 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 965.712149][ T31] audit: type=1400 audit(1789185619.516:678): avc: denied { write } for pid=12084 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 969.467583][ T5265] 8021q: adding VLAN 0 to HW filter on device eth3 [ 975.873742][ T9482] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 975.906718][ T9482] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 975.926627][ T9482] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 975.948553][ T9482] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 976.011122][ T9482] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 978.123589][ T5608] Bluetooth: hci14: command tx timeout [ 980.213385][ T5608] Bluetooth: hci14: command tx timeout [ 982.292928][ T5608] Bluetooth: hci14: command tx timeout [ 984.362805][ T5608] Bluetooth: hci14: command tx timeout [ 984.527048][ T5608] Bluetooth: hci0: command 0x0406 tx timeout [ 985.708759][ T31] audit: type=1400 audit(1789185639.506:679): avc: denied { write } for pid=12089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 989.654374][ T31] audit: type=1400 audit(1789185643.446:680): avc: denied { write } for pid=12113 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 992.704229][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.704764][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.929486][ T5265] 8021q: adding VLAN 0 to HW filter on device eth4 [ 996.088394][ T5608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 996.112244][ T5608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 996.117009][ T5608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 996.148623][ T5608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 996.177942][ T5608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 998.296142][ T5608] Bluetooth: hci6: command tx timeout [ 999.897031][ T5608] Bluetooth: hci1: command 0x0406 tx timeout [ 1000.373127][ T9482] Bluetooth: hci6: command tx timeout [ 1001.235500][ T5608] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1001.261915][ T5608] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1001.300197][ T5608] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1001.328340][ T5608] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1001.342429][ T5608] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1002.463342][ T9482] Bluetooth: hci6: command tx timeout [ 1003.290483][ T4920] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1003.305679][ T4920] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1003.320089][ T4920] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1003.406359][ T4920] Bluetooth: hci15: command tx timeout [ 1003.424081][ T4920] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1003.462952][ T4920] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1004.533532][T12039] Bluetooth: hci6: command tx timeout [ 1005.002233][T12039] Bluetooth: hci3: command 0x0406 tx timeout [ 1005.003570][ T4920] Bluetooth: hci4: command 0x0406 tx timeout [ 1005.018391][ T4920] Bluetooth: hci2: command 0x0406 tx timeout [ 1005.505840][ T9482] Bluetooth: hci15: command tx timeout [ 1005.576658][ T9482] Bluetooth: hci16: command tx timeout [ 1005.790956][ T5608] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1005.809685][ T5608] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1005.814727][ T5608] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1005.906930][ T5608] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1005.935793][ T5608] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1007.566472][ T9482] Bluetooth: hci15: command tx timeout [ 1007.648682][ T9482] Bluetooth: hci16: command tx timeout [ 1008.057454][ T9482] Bluetooth: hci17: command tx timeout [ 1009.643123][ T9482] Bluetooth: hci15: command tx timeout [ 1009.722113][ T9482] Bluetooth: hci16: command tx timeout [ 1010.131522][ T9482] Bluetooth: hci17: command tx timeout [ 1011.812499][ T9482] Bluetooth: hci16: command tx timeout [ 1012.210397][ T9482] Bluetooth: hci17: command tx timeout [ 1014.293175][ T9482] Bluetooth: hci17: command tx timeout [ 1030.961247][ T31] audit: type=1400 audit(1789185684.766:681): avc: denied { write } for pid=12170 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1034.130921][ T31] audit: type=1400 audit(1789185687.936:682): avc: denied { write } for pid=12193 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1036.465196][ T5608] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1036.477022][ T5608] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1036.481971][ T5608] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1036.500811][ T5608] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1036.512809][ T5608] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1038.602387][ T5608] Bluetooth: hci18: command tx timeout [ 1040.695084][ T5608] Bluetooth: hci18: command tx timeout [ 1040.854122][ T5608] Bluetooth: hci5: command 0x0406 tx timeout [ 1042.776440][ T9482] Bluetooth: hci18: command tx timeout [ 1044.853930][ T9482] Bluetooth: hci18: command tx timeout [ 1048.365430][ T32] INFO: task kworker/u8:2:43 blocked for more than 143 seconds. [ 1048.365472][ T32] Tainted: G L syzkaller #0 [ 1048.365501][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1048.365524][ T32] task:kworker/u8:2 state:D stack:21256 pid:43 tgid:43 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1048.365646][ T32] Workqueue: netns cleanup_net [ 1048.365712][ T32] Call Trace: [ 1048.365724][ T32] [ 1048.365821][ T32] __schedule+0x1259/0x6920 ** replaying previous printk message ** [ 1048.365821][ T32] __schedule+0x1259/0x6920 [ 1048.366329][ T32] ? kthread_data+0x53/0xc0 [ 1048.366471][ T32] ? __pfx___schedule+0x10/0x10 [ 1048.366528][ T32] ? find_held_lock+0x2b/0x80 [ 1048.366680][ T32] ? schedule+0x225/0x2c0 [ 1048.366896][ T32] schedule+0xdd/0x2c0 [ 1048.367021][ T32] schedule_preempt_disabled+0x13/0x30 [ 1048.367171][ T32] rwsem_down_write_slowpath+0x4c2/0x12a0 [ 1048.367564][ T32] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1048.368127][ T32] ? __pfx___might_resched+0x10/0x10 [ 1048.368391][ T32] down_write+0x1c0/0x1f0 [ 1048.368489][ T32] ? __pfx_down_write+0x10/0x10 [ 1048.368844][ T32] rdma_dev_exit_net+0x174/0x6b0 [ 1048.369000][ T32] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1048.369123][ T32] ? __pfx___might_resched+0x10/0x10 [ 1048.369206][ T32] ? __pfx_cfg80211_pernet_exit+0x10/0x10 [ 1048.369297][ T32] ? mutex_is_locked+0x17/0x60 [ 1048.369410][ T32] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1048.369492][ T32] ops_undo_list+0x2ee/0xab0 [ 1048.369804][ T32] ? __pfx_ops_undo_list+0x10/0x10 [ 1048.369872][ T32] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 1048.370011][ T32] ? idr_destroy+0x62/0x2e0 [ 1048.370211][ T32] cleanup_net+0x499/0x920 [ 1048.370451][ T32] ? __pfx_cleanup_net+0x10/0x10 [ 1048.370518][ T32] ? process_one_work+0xa2c/0x1b10 [ 1048.370656][ T32] ? process_one_work+0x906/0x1b10 [ 1048.370960][ T32] process_one_work+0xac7/0x1b10 [ 1048.371428][ T32] ? __pfx_process_one_work+0x10/0x10 [ 1048.371586][ T32] ? lock_acquire+0x1d1/0x380 [ 1048.373905][ T32] ? __pfx_cleanup_net+0x10/0x10 [ 1048.374065][ T32] worker_thread+0x5ef/0xe50 [ 1048.374509][ T32] ? kthread+0x13a/0x450 [ 1048.374562][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1048.374619][ T32] kthread+0x373/0x450 [ 1048.374714][ T32] ? __pfx_kthread+0x10/0x10 [ 1048.374918][ T32] ret_from_fork+0x730/0xd60 [ 1048.375017][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1048.375145][ T32] ? __switch_to+0x800/0x10f0 [ 1048.375270][ T32] ? __pfx_kthread+0x10/0x10 [ 1048.375476][ T32] ret_from_fork_asm+0x1a/0x30 [ 1048.382506][ T32] [ 1048.382709][ T32] [ 1048.382709][ T32] Showing all locks held in the system: [ 1048.382745][ T32] locks held by pr/ttyS0/16: 2, last CPU#1: [ 1048.382775][ T32] #0: ffffffff8edd8738 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 1048.382871][ T32] #1: ffffffff9bc68c78 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 1048.382982][ T32] locks held by kworker/1:1/30: 2, last CPU#1: [ 1048.383004][ T32] #0: ffff88801c059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1048.383132][ T32] #1: ffffc90000a57d08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1048.383274][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1048.383300][ T32] #0: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1048.383462][ T32] locks held by kworker/u8:2/43: 4, on CPU#1: [ 1048.383491][ T32] #0: ffff88801d2d8940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1048.383616][ T32] #1: ffffc90000b37d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1048.383746][ T32] #2: ffffffff90cb8c08 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1048.383872][ T32] #3: ffffffff908dff48 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 1048.384186][ T32] locks held by getty/5358: 2, on CPU#0: [ 1048.384215][ T32] #0: ffff888036f1b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1048.384318][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1048.384428][ T32] locks held by syz-executor/11849: 2, on CPU#0: [ 1048.384450][ T32] #0: ffffffff90cb8c08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1048.384571][ T32] #1: ffffffff908dff48 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 1048.384713][ T32] locks held by syz-executor/11853: 2, on CPU#1: [ 1048.384738][ T32] #0: ffffffff90cb8c08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1048.384895][ T32] #1: ffffffff908dff48 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 1048.385031][ T32] locks held by syz-executor/11862: 2, on CPU#1: [ 1048.385050][ T32] #0: ffffffff90cb8c08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1048.385145][ T32] #1: ffffffff908dff48 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 1048.385256][ T32] locks held by kworker/u8:11/11897: 2, on CPU#1: [ 1048.385279][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1048.385415][ T32] #1: ffffc9000325fd08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1048.385568][ T32] locks held by syz-executor/11906: 2, on CPU#0: [ 1048.385595][ T32] #0: ffffffff90cb8c08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1048.385768][ T32] #1: ffffffff908dff48 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 1048.385853][ T32] locks held by syz-executor/11921: 6, last CPU#1: [ 1048.385873][ T32] #0: ffffffff90cb8c08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1048.385979][ T32] #1: ffffffff908e01c8 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 1048.386100][ T32] #2: ffffffff908dff48 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 1048.386240][ T32] #3: ffff88807acc1020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x820 [ 1048.386399][ T32] #4: ffff88801d2c7180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x38/0xaa0 [ 1048.386545][ T32] #5: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: kernfs_root+0x23/0x2a0 [ 1048.386641][ T32] locks held by syz-executor/11925: 2, on CPU#1: [ 1048.386662][ T32] #0: ffffffff90cb8c08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1048.386782][ T32] #1: ffffffff908dff48 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 1048.386915][ T32] locks held by syz-executor/11926: 2, on CPU#0: [ 1048.386944][ T32] #0: ffffffff90cb8c08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1048.387093][ T32] #1: ffffffff908dff48 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 1048.387256][ T32] locks held by syz-executor/11935: 2, on CPU#0: [ 1048.387287][ T32] #0: ffffffff90cb8c08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1048.387374][ T32] #1: ffffffff908dff48 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 1048.387477][ T32] locks held by syz-executor/11988: 2, on CPU#1: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1048.387499][ T32] #0: ffffffff90cb8c08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1048.387622][ T32] #1: ffffffff908dff48 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 1048.387764][ T32] locks held by syz-executor/12018: 3, on CPU#0: [ 1048.387791][ T32] #0: ffffffff90cb8c08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1048.387949][ T32] #1: ffffffff908e01c8 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 1048.388075][ T32] #2: ffffffff908dff48 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 1048.388170][ T32] locks held by syz-executor/12029: 3, on CPU#1: [ 1048.388192][ T32] #0: ffffffff90cb8c08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1048.388306][ T32] #1: ffffffff908e01c8 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 1048.388435][ T32] #2: ffffffff908dff48 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 1048.388582][ T32] locks held by syz-executor/12037: 3, on CPU#1: [ 1048.388610][ T32] #0: ffffffff90cb8c08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1048.388783][ T32] #1: ffffffff908e01c8 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 1048.388867][ T32] #2: ffffffff908dff48 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 1048.388972][ T32] locks held by syz-executor/12045: 3, on CPU#0: [ 1048.388993][ T32] #0: ffffffff90cb8c08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1048.389116][ T32] #1: ffffffff908e01c8 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 1048.389253][ T32] #2: ffffffff908dff48 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 1048.389407][ T32] locks held by syz-executor/12093: 3, on CPU#1: [ 1048.389436][ T32] #0: ffffffff90cb8c08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1048.389565][ T32] #1: ffffffff908e01c8 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 1048.389659][ T32] #2: ffffffff908dff48 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 1048.389774][ T32] locks held by syz-executor/12126: 3, on CPU#1: [ 1048.389798][ T32] #0: ffffffff90cb8c08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1048.389929][ T32] #1: ffffffff908e01c8 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 1048.390088][ T32] #2: ffffffff908dff48 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 1048.390251][ T32] locks held by syz-executor/12133: 3, on CPU#1: [ 1048.390281][ T32] #0: ffffffff90cb8c08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1048.390368][ T32] #1: ffffffff908e01c8 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 1048.390470][ T32] #2: ffffffff908dff48 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 1048.390590][ T32] locks held by syz-executor/12140: 3, on CPU#0: [ 1048.390615][ T32] #0: ffffffff90cb8c08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1048.390757][ T32] #1: ffffffff908e01c8 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 1048.390912][ T32] #2: ffffffff908dff48 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 1048.391049][ T32] locks held by syz-executor/12145: 3, on CPU#0: [ 1048.391068][ T32] #0: ffffffff90cb8c08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1048.391164][ T32] #1: ffffffff908e01c8 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 1048.391274][ T32] #2: ffffffff908dff48 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 1048.391401][ T32] locks held by dhcpcd-run-hook/12217: 1, last CPU#0: [ 1048.391427][ T32] #0: ffff88807712f678 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00 [ 1048.391575][ T32] locks held by modprobe/12220: 4, last CPU#1: [ 1048.391602][ T32] #0: ffff88807352d588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 1048.408495][ T32] #1: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: do_fault+0x9a8/0x1830 [ 1048.408615][ T32] #2: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d7/0x2100 [ 1048.408750][ T32] #3: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1048.408914][ T32] [ 1048.408933][ T32] ============================================= [ 1048.408933][ T32] [ 1048.408977][ T32] NMI backtrace for cpu 0 [ 1048.409008][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1048.409049][ T32] Tainted: [L]=SOFTLOCKUP [ 1048.409071][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1048.409097][ T32] Call Trace: [ 1048.409146][ T32] [ 1048.409166][ T32] dump_stack_lvl+0x100/0x190 [ 1048.409282][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1048.409428][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1048.409539][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1048.409725][ T32] sys_info+0x141/0x190 [ 1048.409799][ T32] watchdog+0xcb1/0x1030 [ 1048.410100][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1048.410225][ T32] ? __pfx_watchdog+0x10/0x10 [ 1048.410307][ T32] ? __kthread_parkme+0x18f/0x230 [ 1048.410498][ T32] ? kthread+0x13a/0x450 [ 1048.410558][ T32] ? __pfx_watchdog+0x10/0x10 [ 1048.410616][ T32] kthread+0x373/0x450 [ 1048.410727][ T32] ? __pfx_kthread+0x10/0x10 [ 1048.410862][ T32] ret_from_fork+0x730/0xd60 [ 1048.410987][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1048.411149][ T32] ? __switch_to+0x800/0x10f0 [ 1048.411296][ T32] ? __pfx_kthread+0x10/0x10 [ 1048.411421][ T32] ret_from_fork_asm+0x1a/0x30 [ 1048.411923][ T32] [ 1048.414818][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1048.414867][ C1] NMI backtrace for cpu 1 [ 1048.414891][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1048.414926][ C1] Tainted: [L]=SOFTLOCKUP [ 1048.414943][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1048.414964][ C1] RIP: 0010:io_serial_in+0x87/0xb0 [ 1048.415018][ C1] Code: 91 5b fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 d8 cb ce fc eb a2 e8 61 cc [ 1048.415046][ C1] RSP: 0000:ffffc90000157958 EFLAGS: 00000002 [ 1048.415083][ C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 1048.415107][ C1] RDX: 00000000000003fd RSI: ffffffff85b084c0 RDI: ffffffff9bc68ca0 [ 1048.415131][ C1] RBP: ffffffff9bc68c60 R08: 0000000000000001 R09: 000000000000001f [ 1048.415155][ C1] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 [ 1048.415179][ C1] R13: 0000000000000020 R14: fffffbfff378d1e9 R15: dffffc0000000000 [ 1048.415212][ C1] FS: 0000000000000000(0000) GS:ffff888123c5c000(0000) knlGS:0000000000000000 [ 1048.415242][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1048.415267][ C1] CR2: 00007f5c6efd92d0 CR3: 0000000055874000 CR4: 00000000003526f0 [ 1048.415288][ C1] Call Trace: [ 1048.415301][ C1] [ 1048.415341][ C1] wait_for_lsr+0x13a/0x210 [ 1048.415587][ C1] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 1048.415759][ C1] __serial8250_console_fifo_write+0xa5/0x290 [ 1048.415797][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 1048.415995][ C1] serial8250_console_write+0xf46/0x1330 [ 1048.416235][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1048.416282][ C1] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 1048.416401][ C1] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 1048.416741][ C1] nbcon_emit_next_record+0x8f7/0xa70 [ 1048.416938][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1048.417036][ C1] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 1048.417126][ C1] ? do_raw_spin_lock+0xb0/0x260 [ 1048.417399][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 1048.417501][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 1048.417670][ C1] nbcon_emit_one+0x1a8/0x2b0 [ 1048.417734][ C1] ? __pfx_nbcon_emit_one+0x10/0x10 [ 1048.418076][ C1] nbcon_kthread_func+0x613/0x7d0 [ 1048.418234][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1048.418530][ C1] ? __kthread_parkme+0x18f/0x230 [ 1048.418675][ C1] ? kthread+0x13a/0x450 [ 1048.418723][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1048.418769][ C1] kthread+0x373/0x450 [ 1048.418857][ C1] ? __pfx_kthread+0x10/0x10 [ 1048.419025][ C1] ret_from_fork+0x730/0xd60 [ 1048.419106][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1048.419236][ C1] ? __switch_to+0x800/0x10f0 [ 1048.419356][ C1] ? __pfx_kthread+0x10/0x10 [ 1048.419517][ C1] ret_from_fork_asm+0x1a/0x30 [ 1048.419962][ C1] [ 1048.444321][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1049.890752][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1049.901417][ T32] Tainted: [L]=SOFTLOCKUP [ 1049.905724][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1049.915760][ T32] Call Trace: [ 1049.919034][ T32] [ 1049.921969][ T32] dump_stack_lvl+0x100/0x190 [ 1049.926747][ T32] vpanic+0x553/0x970 [ 1049.930788][ T32] ? __pfx_vpanic+0x10/0x10 [ 1049.935540][ T32] panic+0xd1/0xe0 [ 1049.939312][ T32] ? __pfx_panic+0x10/0x10 [ 1049.943926][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 1049.950103][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 1049.956255][ T32] ? watchdog.cold+0x1ec/0x234 [ 1049.961150][ T32] watchdog.cold+0x1fd/0x234 [ 1049.965938][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1049.971781][ T32] ? __pfx_watchdog+0x10/0x10 [ 1049.976553][ T32] ? __kthread_parkme+0x18f/0x230 [ 1049.981755][ T32] ? kthread+0x13a/0x450 [ 1049.986011][ T32] ? __pfx_watchdog+0x10/0x10 [ 1049.990691][ T32] kthread+0x373/0x450 [ 1049.994782][ T32] ? __pfx_kthread+0x10/0x10 [ 1049.999465][ T32] ret_from_fork+0x730/0xd60 [ 1050.004171][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1050.009360][ T32] ? __switch_to+0x800/0x10f0 [ 1050.014077][ T32] ? __pfx_kthread+0x10/0x10 [ 1050.018762][ T32] ret_from_fork_asm+0x1a/0x30 [ 1050.023934][ T32] [ 1050.027179][ T32] Kernel Offset: disabled [ 1050.031525][ T32] Rebooting in 86400 seconds..