last executing test programs: 7.07359484s ago: executing program 0 (id=2361): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='neigh_create\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 6.894538593s ago: executing program 3 (id=2362): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000a80)={0x1, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000007c0)={0x1, 0x0, 0x0, 0x0, 'syz0\x00'}) 6.823585453s ago: executing program 0 (id=2363): r0 = socket$packet(0x11, 0x3, 0x300) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x0, 0x0) mmap(&(0x7f0000143000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0x950ca000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, 0x0, 0x0, 0xa0c4, &(0x7f0000000540)={0xa, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.567617685s ago: executing program 3 (id=2367): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00'}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) 5.98003357s ago: executing program 4 (id=2370): r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) unshare(0x20040600) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) 5.82987211s ago: executing program 3 (id=2372): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[], 0xff2e) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 5.603659312s ago: executing program 0 (id=2373): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001840)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='neigh_create\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 5.294684723s ago: executing program 4 (id=2375): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x40d}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x5}]}}}]}, 0x40}}, 0x0) 5.243892413s ago: executing program 0 (id=2376): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000240)={0x2}, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) 4.051814823s ago: executing program 0 (id=2379): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197686019880890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000140)={0x2}) 3.980039555s ago: executing program 2 (id=2381): r0 = socket$kcm(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000bff7f000000000000", 0xf}], 0x1}, 0x0) 3.831200932s ago: executing program 4 (id=2383): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1, 0x0) vmsplice(r0, &(0x7f0000000940)=[{&(0x7f0000000640)="f5", 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3.797120192s ago: executing program 2 (id=2384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0x9, 0x0, 0x0, 0x0, 0xd, {[@window={0xe, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x2}]}}}}}}, 0x46) 3.666606075s ago: executing program 1 (id=2385): socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000), 0x10) r1 = syz_io_uring_setup(0x22e, &(0x7f0000000140)={0x0, 0x0, 0x10500}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="99", 0x1}], 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 3.336173303s ago: executing program 2 (id=2386): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001840)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='neigh_create\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 3.241865813s ago: executing program 1 (id=2387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000100)={0x32, 0x1, 0x0, "3a649f5edf27acce030e1f60ae2726d20fb09634b50b865066c27811ca55e21f"}) 2.95964455s ago: executing program 2 (id=2388): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) open(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x1) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x50009405, &(0x7f0000000180)) 2.091047058s ago: executing program 4 (id=2389): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000700)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11}, 0x24}}, 0x0) 1.764604168s ago: executing program 3 (id=2390): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 1.741919121s ago: executing program 1 (id=2391): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x12, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 1.079689509s ago: executing program 3 (id=2392): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000060018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.078913703s ago: executing program 4 (id=2393): socket$inet6_udp(0xa, 0x2, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000c00000095"], &(0x7f0000000240)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0x7ffff024}, {0x6}]}, 0x10) r6 = dup(r4) sendmsg$nl_route_sched(r6, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000002480)=@newchain={0x438, 0x64, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x40c, 0x2, [@TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}]}]}}]}, 0x438}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="88000000", @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="6b00330080000000ffffffffffff080211000000505050505050000000000000f7ffffffffffffff0006"], 0x88}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r11}, 0x10) socket$inet(0x2, 0x2, 0x0) 1.039322076s ago: executing program 1 (id=2394): r0 = socket$kcm(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000bff7f000000000000", 0xf}], 0x1}, 0x0) 949.704067ms ago: executing program 0 (id=2395): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x730, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_HE_BSS_COLOR={0x10, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x20}]}, @NL80211_ATTR_HE_OBSS_PD={0x64, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x10}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x11}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "dbc664a68095ac70"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x9}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x7}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x14}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xf}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x12}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8521}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0xa4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x9f, 0x3, "68982f9c25efcb8782f177d21f1966e6577813a0237652f63d062b57a03bb63b7d52f807bb811ff85d4ae0e626871d7720031be25b59e5f26560627654387aeaa5c47252b26eabf42dd9cb40e06da2b1a3db6abb3c94be1434533b2f4989ecf0ddf8de27aee706079c9ef48a0793308130b2f6bb997709fef1490ba1a8bb94139c3e37592e7628d3012cb94768eddca8800a24883f867ed312e02e"}]}, @NL80211_ATTR_BEACON_TAIL={0x4a, 0xf, [@mesh_chsw={0x76, 0x6, {0x7a, 0x81, 0x41, 0x1}}, @chsw_timing={0x68, 0x4, {0xaf0, 0x90}}, @perr={0x84, 0x1c, {0xde, 0x2, [{}, {}]}}, @cf={0x4, 0x6, {0x9, 0x1, 0xfff7, 0x9}}, @mic={0x8c, 0x10, {0xce7, "7e23ec1a47b7", @short="7d43ce2415c51b23"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x274, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xa2, 0x2, "15844d2118112f84919e6455887919db52f577acbb39de32169154665ea589073f55ddc2477bf58023482f3e0e7d8b0dce1a5d7a5e60aef246b19329efa1503d24386c60b4eb7ee71812d54cc83cdd09bc8b754b0aabf9e209799e39c5a733c5ba9822ddf8ad8bb5bf288fa3d919985488ce63071e1566a603d8ad3140f3d3b0598839a4abb3ce92e12bcc40baf9313743cea1620551adc9e66d277ea6a1"}, @NL80211_FTM_RESP_ATTR_LCI={0xc6, 0x2, "b41765091a3da40ff88665a528f2a19cd3278dca69f84a402346428f8314cc51f48783a1d806f988fa29933de0087d909b4980de200e0674077dafb0e4b7ec4315e43eb1789ee11d2ca1d6659b7a497717da829b866c5239fdfc4b091397bfdbdcb1e369810e91a5b2504bb0ebadfb92f964a5744394ca1e853dbc72b2edd34364a853f0f066dac90b4bd237aed158782be0ab91a51213b6c1fff55d2ce88044d2d7744f16bc038966f6cda8dd5fefa7de06e486a39a31ceaa121dc43043a9ec6c0d"}, @NL80211_FTM_RESP_ATTR_LCI={0x102, 0x2, "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"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x2cd, 0x7f, [@tim={0x5, 0xfb, {0x2, 0xa7, 0x8, "15b62744faccbc0b9c680328f39478a1dcda6c7662fdc4d6087eef28aa54ad7ff6eed80a63bc5cf03f749bc85713218bdae7ffa95ab4458a04fe26c75f96ad380a61d6e947ed577d3d7ab81411c21e808f27bd7b6b5e81cd0bef2675f604369f5d8deb530d7a3a3144485cd4090860dc1b5870e03b3309e355394e2ee2f7baec9b74d644a7e9a90283d600287e305eafb22a0d222ff9862f4639e5bf0c2d7e93eef1a18e179568d8b342933762d84dce5a0bb5596518c8123cbc4b04f17483aebfec86c8e6dfa568e78577864b4029adb271c2479dd08dbccac154631a12852e7e1bd5cb7de213f2023134e9f2390e4771435c9e5928d793"}}, @ssid={0x0, 0x8, @random="24930db4e08072b1"}, @preq={0x82, 0x1a}, @chsw_timing={0x68, 0x4, {0x9, 0x3f}}, @random_vendor={0xdd, 0xd1, "ca7290433734520c6afe851aceafe0fe9990f968fe64add8a18a3fcab4d11f9c99d2076a5be7a80adf31a3189215e597779613138ada3432c72fb970ab3636f32d83f99d383cde56c7d95773d66a7dffc9618f224cc610673dd1a35ceeaaa99f4d60b127764031bcfc23d3a678dfa90ddb3c1d936413f69ad847297b95d3dfbb641e7dbdcee2a124a3581733f6f49a6d028ca7a107f147ec54880337bf5a60134c6192ed0e80d2cde0f53759ce061520cad3faf7f552065c8087a71ac0f1d863b862cefffe3db060bf14ccc604b84a66f5"}, @random_vendor={0xdd, 0xa6, "9b3a0d8aa3b6815e402f2eb701206b45ef9cac3b086dfda12fff651deeeb1cad4f359fcdebc1861f2efb94384cc8737355c9e1a33725f861793853c81e1f0f39260d5d70275a7559434aa855adb28543e563563256cfcacfb2f7e6fc307f4074bcbd9152cc8920560dcdfaa83ab494a3b297af9d26b1877b9b5cace932ba99fac5273164411389b81ec65209d2c26b3da536f0a271da86b227f9d882441a9ec2eb167563e5cc"}, @rann={0x7e, 0x15, {{0x0, 0x63}, 0x4, 0x2, @broadcast, 0x7, 0xfc}}, @chsw_timing={0x68, 0x4, {0x800, 0xf9c2}}, @gcr_ga={0xbd, 0x6, @broadcast}]}], @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}]}]]}, 0x730}, 0x1, 0x0, 0x0, 0x24008851}, 0x20044001) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0x4}}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x43e}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)={0x2c, r11, 0x18fe2a01ed25d92f, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}}, 0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x2e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0) sendfile(r12, r12, 0x0, 0xc3) 763.93282ms ago: executing program 2 (id=2396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0x9, 0x0, 0x0, 0x0, 0xd, {[@window={0xe, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x2}]}}}}}}, 0x46) 621.372965ms ago: executing program 3 (id=2397): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x2, 0x1000, 0x9d, &(0x7f00000000c0)="868caa3aee61ecbf9d1431de84ba8a679edb285785e4166a354ace8573133ed06703c660d8236198e60609e507b707b17db785297b448875f72f40106d3344e6b1b8f338cb8ec40a529bce09700a83c1fc720c6fcf5a0930d7188849c1e9aa1919c203fd63e8743819f445c28a2dc932db997c4bbe71765fa364ad20c9b8fba3142a676d2f0f93691808428670fa2f718d996d71a5547810316c62ca43", 0x5, 0x0, &(0x7f0000000000)="109d3361a3"}) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000340)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "910000000000006f00"}]}}}}}}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fsync(0xffffffffffffffff) 620.603265ms ago: executing program 1 (id=2398): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001840)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='neigh_create\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 327.622175ms ago: executing program 1 (id=2399): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1, 0x0) vmsplice(r0, &(0x7f0000000940)=[{&(0x7f0000000640)="f5", 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 204.236975ms ago: executing program 4 (id=2400): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[], 0xff2e) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 0s ago: executing program 2 (id=2401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000100)={0x32, 0x1, 0x0, "3a649f5edf27acce030e1f60ae2726d20fb09634b50b865066c27811ca55e21f"}) kernel console output (not intermixed with test programs): .774200][ T5178] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 624.785774][T10750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.800918][T10750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.812031][ T5178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.816782][T10750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.854370][ T5138] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 624.859968][ T5178] usb 1-1: config 0 descriptor?? [ 624.868285][T10787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.882569][T10787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.891563][T10787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.916147][T10787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.945523][T10750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.956352][T10750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.969030][T10750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.980324][T10750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.990900][T10750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.001683][T10750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.017240][T10750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.029723][T10750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.042298][T10750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.059257][ T5138] usb 3-1: No LPM exit latency info found, disabling LPM. [ 625.084757][ T5138] usb 3-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 625.090206][T10750] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.107751][T10750] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.113193][ T5138] usb 3-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 625.123039][T10750] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.138749][T10750] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.161533][ T5138] usb 3-1: config 1 interface 0 has no altsetting 0 [ 625.183132][ T5138] usb 3-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 625.198404][ T5138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.207420][ T5138] usb 3-1: Product: 毻낍᧌籎袚弹緍릢ꃶㄺ賑﷓뱕鵀ங཯‭ᜣ暟⯗雤귻兿靵ᕛ䁼娸㫓쐠ΰ鞽礎ꞔ는춎蔼ᱮ灏赫礁쬧쫋഻菳꼊뫬ﰢղ賧雞ỷ騋跭컀ꅎ契ឧ䮇郢 [ 625.238100][ T5138] usb 3-1: SerialNumber: Ъ [ 625.251371][T10968] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 625.268315][T10968] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 625.453179][ T7774] usb 1-1: USB disconnect, device number 43 [ 625.590050][ T9527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.616792][ T9527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.706910][ T9527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.712925][T10967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=10967 comm=syz.2.1698 [ 625.744077][ T9527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.782880][ T5138] usbhid 3-1:1.0: can't add hid device: -71 [ 625.794343][ T5138] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 625.809678][ T5138] usb 3-1: USB disconnect, device number 33 [ 625.851907][ T2428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.878017][ T2428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.016248][ T2466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.060327][ T2466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.466786][T10980] Cannot find add_set index 0 as target [ 627.282705][ T29] audit: type=1400 audit(1720189630.465:601): avc: denied { read } for pid=11003 comm="syz.0.1708" name="mouse0" dev="devtmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 627.312686][ T29] audit: type=1400 audit(1720189630.465:602): avc: denied { open } for pid=11003 comm="syz.0.1708" path="/dev/input/mouse0" dev="devtmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 627.519516][ T29] audit: type=1326 audit(1720189630.685:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10985 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124bd75bd9 code=0x7fc00000 [ 627.559218][ T29] audit: type=1326 audit(1720189630.685:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10985 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f124bd75bd9 code=0x7fc00000 [ 627.605345][ T29] audit: type=1326 audit(1720189630.685:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10985 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124bd75bd9 code=0x7fc00000 [ 627.641903][ T29] audit: type=1326 audit(1720189630.685:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10985 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124bd75bd9 code=0x7fc00000 [ 627.668549][ T29] audit: type=1326 audit(1720189630.685:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10985 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124bd75bd9 code=0x7fc00000 [ 627.724758][ T29] audit: type=1326 audit(1720189630.685:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10985 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124bd75bd9 code=0x7fc00000 [ 627.771212][ T29] audit: type=1326 audit(1720189630.685:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10985 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124bd75bd9 code=0x7fc00000 [ 627.840237][ T29] audit: type=1326 audit(1720189630.685:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10985 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124bd75bd9 code=0x7fc00000 [ 628.543490][T11018] netlink: 'syz.0.1710': attribute type 4 has an invalid length. [ 629.026405][T11020] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 629.237941][ T7774] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 629.474522][ T7774] usb 2-1: No LPM exit latency info found, disabling LPM. [ 629.509989][ T7774] usb 2-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 629.550288][ T7774] usb 2-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 629.568924][ T7774] usb 2-1: config 1 interface 0 has no altsetting 0 [ 629.588792][ T7774] usb 2-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 629.605420][ T7774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.618331][ T7774] usb 2-1: Product: 毻낍᧌籎袚弹緍릢ꃶㄺ賑﷓뱕鵀ங཯‭ᜣ暟⯗雤귻兿靵ᕛ䁼娸㫓쐠ΰ鞽礎ꞔ는춎蔼ᱮ灏赫礁쬧쫋഻菳꼊뫬ﰢղ賧雞ỷ騋跭컀ꅎ契ឧ䮇郢 [ 629.658469][ T7774] usb 2-1: SerialNumber: Ъ [ 629.674693][T11022] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 629.682271][T11022] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 630.128176][T11022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=11022 comm=syz.1.1714 [ 630.135146][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.150390][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.236115][ T7774] usbhid 2-1:1.0: can't add hid device: -71 [ 630.275874][ T7774] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 630.323587][ T7774] usb 2-1: USB disconnect, device number 35 [ 631.455725][T11057] capability: warning: `syz.0.1723' uses deprecated v2 capabilities in a way that may be insecure [ 633.474763][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1732'. [ 637.322831][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 637.348190][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 637.358439][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 637.371205][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 637.389390][ T5096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 637.397571][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 637.701686][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.977962][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.061194][T11126] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1747'. [ 638.279634][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.263378][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.486010][ T53] Bluetooth: hci0: command tx timeout [ 640.318078][ T12] bridge_slave_1: left allmulticast mode [ 640.323905][ T12] bridge_slave_1: left promiscuous mode [ 640.363944][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.590361][ T12] bridge_slave_0: left allmulticast mode [ 640.616069][ T12] bridge_slave_0: left promiscuous mode [ 640.662803][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.583273][ T53] Bluetooth: hci0: command tx timeout [ 643.242068][T11152] warn_alloc: 1 callbacks suppressed [ 643.242097][T11152] syz.3.1754: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 643.284895][T11152] CPU: 0 PID: 11152 Comm: syz.3.1754 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 643.295137][T11152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 643.305256][T11152] Call Trace: [ 643.308626][T11152] [ 643.311699][T11152] dump_stack_lvl+0x16c/0x1f0 [ 643.316493][T11152] warn_alloc+0x24d/0x3a0 [ 643.320903][T11152] ? __pfx_warn_alloc+0x10/0x10 [ 643.325915][T11152] ? xt_alloc_entry_offsets+0x3a/0x60 [ 643.331366][T11152] ? __get_vm_area_node+0x190/0x2d0 [ 643.336650][T11152] ? __get_vm_area_node+0x1bc/0x2d0 [ 643.341936][T11152] __vmalloc_node_range_noprof+0xff7/0x1520 [ 643.347922][T11152] ? xt_alloc_entry_offsets+0x3a/0x60 [ 643.353377][T11152] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 643.359770][T11152] ? trace_kmalloc+0x2d/0xe0 [ 643.364411][T11152] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 643.370170][T11152] ? xt_alloc_entry_offsets+0x3a/0x60 [ 643.375611][T11152] kvmalloc_node_noprof+0x14f/0x1a0 [ 643.380859][T11152] ? xt_alloc_entry_offsets+0x3a/0x60 [ 643.386276][T11152] xt_alloc_entry_offsets+0x3a/0x60 [ 643.391531][T11152] translate_table+0x22e/0x1710 [ 643.396433][T11152] ? __pfx_lock_release+0x10/0x10 [ 643.401503][T11152] ? __pfx___might_resched+0x10/0x10 [ 643.406825][T11152] ? __pfx_translate_table+0x10/0x10 [ 643.412163][T11152] do_ipt_set_ctl+0x605/0xc30 [ 643.416893][T11152] ? trace_contention_end+0xea/0x140 [ 643.422211][T11152] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 643.427453][T11152] ? __pfx___mutex_lock+0x10/0x10 [ 643.432520][T11152] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 643.438985][T11152] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 643.445030][T11152] nf_setsockopt+0x8a/0xf0 [ 643.449501][T11152] ip_setsockopt+0xcb/0xf0 [ 643.453952][T11152] tcp_setsockopt+0xa4/0x100 [ 643.458591][T11152] smc_setsockopt+0x1b4/0xa00 [ 643.463413][T11152] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 643.469368][T11152] ? __pfx_smc_setsockopt+0x10/0x10 [ 643.474688][T11152] ? selinux_socket_setsockopt+0x6a/0x80 [ 643.480364][T11152] ? __pfx_smc_setsockopt+0x10/0x10 [ 643.485606][T11152] do_sock_setsockopt+0x222/0x480 [ 643.490684][T11152] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 643.496282][T11152] ? __fget_light+0x173/0x210 [ 643.501001][T11152] __sys_setsockopt+0x1a4/0x270 [ 643.505987][T11152] ? __pfx___sys_setsockopt+0x10/0x10 [ 643.511403][T11152] ? xfd_validate_state+0x5d/0x180 [ 643.516561][T11152] __x64_sys_setsockopt+0xbd/0x160 [ 643.521710][T11152] ? do_syscall_64+0x91/0x250 [ 643.526472][T11152] ? lockdep_hardirqs_on+0x7c/0x110 [ 643.531709][T11152] do_syscall_64+0xcd/0x250 [ 643.536454][T11152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.542420][T11152] RIP: 0033:0x7f124bd75bd9 [ 643.546862][T11152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.566599][T11152] RSP: 002b:00007f124cb43048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 643.575571][T11152] RAX: ffffffffffffffda RBX: 00007f124bf03f60 RCX: 00007f124bd75bd9 [ 643.583590][T11152] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 643.591586][T11152] RBP: 00007f124bde4aa1 R08: 0000000000000298 R09: 0000000000000000 [ 643.599594][T11152] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000000 [ 643.607594][T11152] R13: 000000000000000b R14: 00007f124bf03f60 R15: 00007ffd89d7ca98 [ 643.615600][T11152] [ 643.635916][T11152] Mem-Info: [ 643.644346][ T53] Bluetooth: hci0: command tx timeout [ 643.645196][T11152] active_anon:10199 inactive_anon:0 isolated_anon:0 [ 643.645196][T11152] active_file:5805 inactive_file:38613 isolated_file:0 [ 643.645196][T11152] unevictable:768 dirty:139 writeback:0 [ 643.645196][T11152] slab_reclaimable:10119 slab_unreclaimable:100022 [ 643.645196][T11152] mapped:19826 shmem:7005 pagetables:779 [ 643.645196][T11152] sec_pagetables:0 bounce:0 [ 643.645196][T11152] kernel_misc_reclaimable:0 [ 643.645196][T11152] free:1371947 free_pcp:4781 free_cma:0 [ 643.704194][T11152] Node 0 active_anon:40796kB inactive_anon:0kB active_file:23220kB inactive_file:154380kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:79304kB dirty:556kB writeback:0kB shmem:26484kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9968kB pagetables:3116kB sec_pagetables:0kB all_unreclaimable? no [ 643.756919][T11152] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 643.826560][T11152] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 643.863938][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 643.863962][ T29] audit: type=1400 audit(1720189646.935:670): avc: denied { setopt } for pid=11161 comm="syz.2.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 643.949567][T11152] lowmem_reserve[]: 0 2565 2567 0 0 [ 643.983485][T11152] Node 0 DMA32 free:1521432kB boost:0kB min:35052kB low:43812kB high:52572kB reserved_highatomic:0KB active_anon:40764kB inactive_anon:0kB active_file:23220kB inactive_file:152568kB unevictable:1536kB writepending:552kB present:3129332kB managed:2654752kB mlocked:0kB bounce:0kB free_pcp:19856kB local_pcp:800kB free_cma:0kB [ 644.029822][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.046923][T11152] lowmem_reserve[]: 0 0 1 0 0 [ 644.060719][T11152] Node 0 Normal free:24kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:1812kB unevictable:0kB writepending:4kB present:1048576kB managed:1896kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 644.104962][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.118892][ T12] bond0 (unregistering): Released all slaves [ 644.136964][T11152] lowmem_reserve[]: 0 0 0 0 0 [ 644.147664][T11152] Node 1 Normal free:3950012kB boost:0kB min:54828kB low:68532kB high:82236kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 644.226280][T11152] lowmem_reserve[]: 0 0 0 0 0 [ 644.255847][T11152] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 644.314643][T11152] Node 0 DMA32: 4*4kB (UE) 8*8kB (ME) 37*16kB (ME) 10*32kB (ME) 3*64kB (E) 1*128kB (E) 3*256kB (UME) 3*512kB (UM) 8*1024kB (UME) 3*2048kB (UME) 367*4096kB (M) = 1521184kB [ 644.360527][T11152] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 644.414137][T11152] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 9*16kB (UM) 8*32kB (UM) 2*64kB (U) 5*128kB (U) 5*256kB (UM) 2*512kB (UM) 2*1024kB (U) 2*2048kB (U) 962*4096kB (UM) = 3950012kB [ 644.440249][T11152] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 644.534560][T11167] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1758'. [ 644.572295][T11152] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 644.622273][T11152] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 644.632132][T11152] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 644.641752][T11152] 45686 total pagecache pages [ 644.646751][T11152] 0 pages in swap cache [ 644.650941][T11152] Free swap = 124712kB [ 644.664165][T11152] Total swap = 124996kB [ 644.668497][T11152] 2097051 pages RAM [ 644.672360][T11152] 0 pages HighMem/MovableOnly [ 644.712461][T11152] 401769 pages reserved [ 644.742079][T11152] 0 pages cma reserved [ 645.023745][T11117] chnl_net:caif_netlink_parms(): no params data found [ 645.734377][ T53] Bluetooth: hci0: command tx timeout [ 646.064204][ T787] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 646.474334][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 646.664204][ T787] usb 3-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 646.714631][ T787] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 646.723402][ T787] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 646.813929][ T787] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 646.859065][ T787] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 646.902847][ T787] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 646.923829][ T787] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 646.952903][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 646.985853][ T787] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 647.008853][ T787] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 647.025136][ T12] hsr_slave_0: left promiscuous mode [ 647.028401][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.054139][ T787] usb 3-1: Product: В [ 647.058303][ T787] usb 3-1: Manufacturer: 놱橹䓸곦瘾砆䵂鷓쬡謆譖ꈶⰕ颍वㇳ︔ [ 647.098640][ T787] usb 3-1: SerialNumber: syz [ 647.126045][ T12] hsr_slave_1: left promiscuous mode [ 647.140877][ T787] usb 3-1: config 0 descriptor?? [ 647.197187][ T787] pvrusb2: Hardware description: Terratec Grabster AV400 [ 647.224594][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.232716][ T787] pvrusb2: ********** [ 647.253652][ T787] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 647.265033][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.284733][ T787] pvrusb2: Important functionality might not be entirely working. [ 647.292705][ T787] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 647.318653][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.364144][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.372365][ T787] pvrusb2: ********** [ 647.471485][ T1979] pvrusb2: Invalid write control endpoint [ 647.576268][ T12] veth1_macvtap: left promiscuous mode [ 647.581945][ T12] veth0_macvtap: left promiscuous mode [ 647.645243][ T12] veth1_vlan: left promiscuous mode [ 647.689702][ T12] veth0_vlan: left promiscuous mode [ 647.976705][ T1979] pvrusb2: Invalid write control endpoint [ 647.982528][ T1979] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 648.085719][ T29] audit: type=1400 audit(1720189651.255:671): avc: denied { create } for pid=11205 comm="syz.0.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 648.187710][ T1979] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 648.408949][ T1979] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 648.475343][ T29] audit: type=1400 audit(1720189651.265:672): avc: denied { ioctl } for pid=11205 comm="syz.0.1765" path="socket:[39568]" dev="sockfs" ino=39568 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 648.531779][ T1979] pvrusb2: Device being rendered inoperable [ 648.581163][ T1979] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 648.695209][ T1979] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 648.740737][ T1979] pvrusb2: Attached sub-driver cx25840 [ 648.796450][ T1979] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 648.890168][ T5136] usb 3-1: USB disconnect, device number 34 [ 648.896301][ T1979] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 650.970669][T11223] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1769'. [ 652.330153][ T5096] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 652.342688][ T5096] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 652.352699][ T5096] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 652.371151][ T5096] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 652.393734][ T5096] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 652.402233][ T5096] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 653.183957][ T12] team0 (unregistering): Port device team_slave_1 removed [ 653.392394][ T12] team0 (unregistering): Port device team_slave_0 removed [ 654.464363][ T53] Bluetooth: hci5: command tx timeout [ 654.505949][T11117] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.543322][T11117] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.605933][T11117] bridge_slave_0: entered allmulticast mode [ 654.642298][T11117] bridge_slave_0: entered promiscuous mode [ 654.687363][T11117] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.713924][ T29] audit: type=1400 audit(1720189657.895:673): avc: denied { ioctl } for pid=11244 comm="syz.2.1776" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 654.724241][T11117] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.804510][T11117] bridge_slave_1: entered allmulticast mode [ 654.838202][T11117] bridge_slave_1: entered promiscuous mode [ 654.858438][ T29] audit: type=1400 audit(1720189657.965:674): avc: denied { listen } for pid=11247 comm="syz.0.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 655.030683][T11251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1778'. [ 655.727649][T11117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.821500][T11117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.209532][T11117] team0: Port device team_slave_0 added [ 656.278760][T11117] team0: Port device team_slave_1 added [ 656.533466][ T53] Bluetooth: hci5: command tx timeout [ 656.651862][T11117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.662175][T11117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.695423][T11117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.745794][T11117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.773352][T11117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.842556][T11117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.137982][T11117] hsr_slave_0: entered promiscuous mode [ 657.175140][T11117] hsr_slave_1: entered promiscuous mode [ 657.206227][T11117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 657.234272][T11117] Cannot create hsr debugfs directory [ 657.774427][T11290] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1785'. [ 657.824481][ T7774] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 657.906882][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.036394][ T7774] usb 2-1: Using ep0 maxpacket: 32 [ 658.083656][ T7774] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 658.117730][ T7774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 16384, setting to 64 [ 658.171907][ T7774] usb 2-1: config 0 interface 0 has no altsetting 1 [ 658.200087][ T7774] usb 2-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c [ 658.229435][ T7774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.266062][ T7774] usb 2-1: Product: syz [ 658.270333][ T7774] usb 2-1: Manufacturer: syz [ 658.277419][ T7774] usb 2-1: SerialNumber: syz [ 658.307737][ T7774] usb 2-1: config 0 descriptor?? [ 658.727779][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.738598][ T53] Bluetooth: hci5: command tx timeout [ 659.181521][ T29] audit: type=1400 audit(1720189662.315:675): avc: denied { map } for pid=11306 comm="syz.0.1790" path="socket:[39738]" dev="sockfs" ino=39738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 659.433199][ T7774] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 659.816064][ T29] audit: type=1326 audit(1720189662.975:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d9375bd9 code=0x7ffc0000 [ 659.898217][ T29] audit: type=1326 audit(1720189662.985:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d9375bd9 code=0x7ffc0000 [ 659.968252][ T29] audit: type=1326 audit(1720189662.995:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f13d9375bd9 code=0x7ffc0000 [ 659.992861][ T29] audit: type=1326 audit(1720189662.995:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d9375bd9 code=0x7ffc0000 [ 660.020257][ T29] audit: type=1326 audit(1720189663.035:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d9375bd9 code=0x7ffc0000 [ 660.064336][ T29] audit: type=1326 audit(1720189663.045:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13d9375bd9 code=0x7ffc0000 [ 660.092492][ T29] audit: type=1326 audit(1720189663.045:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d9375bd9 code=0x7ffc0000 [ 660.116344][ T29] audit: type=1326 audit(1720189663.045:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d9375bd9 code=0x7ffc0000 [ 660.142313][ T29] audit: type=1326 audit(1720189663.075:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f13d9375bd9 code=0x7ffc0000 [ 660.166101][ T29] audit: type=1326 audit(1720189663.075:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d9375bd9 code=0x7ffc0000 [ 660.240321][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.641075][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.774075][ T53] Bluetooth: hci5: command tx timeout [ 660.931669][T11229] chnl_net:caif_netlink_parms(): no params data found [ 661.024927][ T8] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 661.282940][ T8] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 661.324304][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.332372][ T8] usb 3-1: Product: syz [ 661.372670][ T8] usb 3-1: Manufacturer: syz [ 661.384400][ T8] usb 3-1: SerialNumber: syz [ 661.410338][ T8] usb 3-1: config 0 descriptor?? [ 661.445026][ T8] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 035 [ 661.731981][T11325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.755165][T11325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.944290][ T8] (null): failure setting delay to 10us [ 661.953233][ T8] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 661.986810][ T8] usb 3-1: USB disconnect, device number 35 [ 662.343505][T11229] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.387708][T11229] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.435876][T11229] bridge_slave_0: entered allmulticast mode [ 662.464979][T11229] bridge_slave_0: entered promiscuous mode [ 662.508254][T11229] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.538304][T11229] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.557165][T11229] bridge_slave_1: entered allmulticast mode [ 662.567995][T11349] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1797'. [ 662.579051][T11229] bridge_slave_1: entered promiscuous mode [ 662.956797][ T12] bridge_slave_1: left allmulticast mode [ 662.984796][ T12] bridge_slave_1: left promiscuous mode [ 662.990823][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.032269][ T12] bridge_slave_0: left allmulticast mode [ 663.064199][ T12] bridge_slave_0: left promiscuous mode [ 663.070198][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.228262][T11358] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1798'. [ 663.342210][ T5137] usb 2-1: USB disconnect, device number 36 [ 665.762045][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.787138][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.799442][ T12] bond0 (unregistering): Released all slaves [ 665.831694][T11229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.869740][T11229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.282182][T11229] team0: Port device team_slave_0 added [ 666.970474][T11229] team0: Port device team_slave_1 added [ 667.029797][T11389] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1807'. [ 667.246814][T11229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.253877][T11229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.302524][T11229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.604239][T11117] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 667.663280][T11117] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 667.715609][T11229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.732750][T11229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.776536][T11229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.943196][T11117] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 667.973015][T11117] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 669.321962][ T12] hsr_slave_0: left promiscuous mode [ 669.382216][ T12] hsr_slave_1: left promiscuous mode [ 669.404272][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.415495][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.425309][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.453422][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.545242][ T12] veth1_macvtap: left promiscuous mode [ 669.550915][ T12] veth0_macvtap: left promiscuous mode [ 669.568579][ T12] veth1_vlan: left promiscuous mode [ 669.579824][ T12] veth0_vlan: left promiscuous mode [ 669.614344][ T5139] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 669.786880][ T5139] usb 1-1: device descriptor read/64, error -71 [ 670.085198][ T5139] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 670.260171][ T5139] usb 1-1: device descriptor read/64, error -71 [ 670.395637][ T5139] usb usb1-port1: attempt power cycle [ 670.864234][ T5139] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 670.917815][ T5139] usb 1-1: device descriptor read/8, error -71 [ 671.195600][ T5139] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 671.244974][ T5139] usb 1-1: device descriptor read/8, error -71 [ 671.364703][ T5139] usb usb1-port1: unable to enumerate USB device [ 671.540873][ T12] team0 (unregistering): Port device team_slave_1 removed [ 671.680170][ T12] team0 (unregistering): Port device team_slave_0 removed [ 672.791409][T11229] hsr_slave_0: entered promiscuous mode [ 672.810811][T11229] hsr_slave_1: entered promiscuous mode [ 672.822094][T11229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 672.830411][T11229] Cannot create hsr debugfs directory [ 675.022977][T11470] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1828'. [ 675.321420][ T7774] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 675.496286][T11117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.557254][ T7774] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 675.582987][ T7774] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 675.626170][ T7774] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 675.696736][ T7774] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 675.793257][ T7774] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 675.847571][ T7774] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 675.898223][ T7774] usb 1-1: Product: syz [ 675.933674][ T7774] usb 1-1: Manufacturer: syz [ 676.167489][ T7774] cdc_wdm 1-1:1.0: skipping garbage [ 676.172812][ T7774] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 676.226372][T11117] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.583351][ T8] usb 1-1: USB disconnect, device number 48 [ 676.609846][ T787] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.617199][ T787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.692739][ T787] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.700106][ T787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.221877][T11229] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 677.287833][T11229] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 677.329316][T11229] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 677.391022][T11229] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 677.936372][T11229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.077718][T11229] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.179180][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.186934][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.271479][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.279003][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.456092][T11117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.461292][T11229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.933415][T11229] veth0_vlan: entered promiscuous mode [ 680.258587][T11229] veth1_vlan: entered promiscuous mode [ 680.566241][T11543] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1838'. [ 680.672614][T11117] veth0_vlan: entered promiscuous mode [ 680.915581][T11117] veth1_vlan: entered promiscuous mode [ 681.147283][T11229] veth0_macvtap: entered promiscuous mode [ 681.227970][T11229] veth1_macvtap: entered promiscuous mode [ 681.321570][T11117] veth0_macvtap: entered promiscuous mode [ 681.368735][T11117] veth1_macvtap: entered promiscuous mode [ 681.389687][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.410919][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.423313][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.485648][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.543786][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.604180][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.692030][T11229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.792760][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.837895][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.871474][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.882741][ T8] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 681.928740][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.963881][T11229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.000715][T11229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.067232][T11229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.087852][ T8] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 682.133375][T11229] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.152685][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 682.203924][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 682.222669][T11229] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.275358][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 682.299365][T11229] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.341581][T11229] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.375121][ T8] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 682.427194][ T8] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 682.484141][ T8] usb 2-1: Product: syz [ 682.488384][ T8] usb 2-1: Manufacturer: syz [ 682.585078][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 682.613177][ T8] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 682.748717][T11117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.760742][T11117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.780028][T11117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.791250][T11117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.802956][T11117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.828945][T11117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.856674][T11117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.889877][T11117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.901900][ T8] usb 2-1: USB disconnect, device number 37 [ 682.921309][T11117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.015951][T11117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.049542][T11117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.075844][T11117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.103829][T11117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.156356][T11117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.200559][T11117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.218840][T11117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.237426][T11117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.280315][T11117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.365898][T11117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.419301][T11117] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.454326][T11117] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.463133][T11117] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.724389][ T5139] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 683.777032][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.819817][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.934353][ T5139] usb 1-1: Using ep0 maxpacket: 16 [ 683.973073][ T5139] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.996270][ T5139] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 684.018479][ T9591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.032072][ T9591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.040863][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.080225][ T5139] usb 1-1: config 0 descriptor?? [ 684.251379][ T2466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.269672][ T2466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.387665][ T9591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.420062][ T9591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.684335][ T5139] usb 1-1: USB disconnect, device number 49 [ 685.755738][T11609] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1847'. [ 688.397685][T11641] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1856'. [ 688.504377][ T5071] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 688.690355][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 688.690407][ T29] audit: type=1400 audit(1720189691.825:714): avc: denied { sqpoll } for pid=11631 comm="syz.2.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 688.898524][ T5137] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 689.167048][ T5137] usb 1-1: Using ep0 maxpacket: 16 [ 689.179692][ T5137] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.237320][ T5137] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 689.274574][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.365751][ T5137] usb 1-1: config 0 descriptor?? [ 689.430863][ T5071] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 689.457922][T11661] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1860'. [ 689.460399][ T5071] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 689.515319][ T5071] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 689.542487][ T5071] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 689.617679][ T5071] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 689.651441][ T5071] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 689.664164][ T5071] usb 2-1: Product: syz [ 689.668414][ T5071] usb 2-1: Manufacturer: syz [ 690.002123][ T5071] cdc_wdm 2-1:1.0: skipping garbage [ 690.007766][ T5071] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 690.091851][ T787] usb 1-1: USB disconnect, device number 50 [ 690.405782][ T787] usb 2-1: USB disconnect, device number 38 [ 691.574398][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.584409][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.744773][T11698] batadv0: entered promiscuous mode [ 692.875557][T11708] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1871'. [ 692.922275][T11711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.029620][ T29] audit: type=1400 audit(1720189696.215:715): avc: denied { accept } for pid=11696 comm="syz.1.1869" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 693.134575][ T5136] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 693.334501][ T5136] usb 1-1: Using ep0 maxpacket: 16 [ 693.347911][ T5136] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.374479][ T5136] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 693.400216][ T5136] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 693.428106][T11724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1875'. [ 693.444109][ T5136] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 693.452289][ T5136] usb 1-1: Product: syz [ 693.474508][ T5136] usb 1-1: Manufacturer: syz [ 693.479372][ T5136] usb 1-1: SerialNumber: syz [ 693.516479][ T5136] usb 1-1: config 0 descriptor?? [ 693.798759][ T7774] usb 1-1: USB disconnect, device number 51 [ 694.074235][ T5136] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 694.184279][ T787] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 694.282657][ T5136] usb 2-1: Using ep0 maxpacket: 32 [ 694.306009][ T5136] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 694.344152][ T5136] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 16384, setting to 64 [ 694.430925][ T787] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 694.460805][ T5136] usb 2-1: config 0 interface 0 has no altsetting 1 [ 694.483479][ T787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 694.522716][ T5136] usb 2-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c [ 695.084245][ T787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 695.093349][ T787] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 695.106990][ T5136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.120001][ T5136] usb 2-1: Product: syz [ 695.124488][ T5136] usb 2-1: Manufacturer: syz [ 695.129233][ T5136] usb 2-1: SerialNumber: syz [ 695.140064][ T5136] usb 2-1: config 0 descriptor?? [ 695.145500][ T787] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 695.155082][ T787] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 695.170119][ T5136] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 695.214218][ T787] usb 4-1: Product: syz [ 695.218516][ T787] usb 4-1: Manufacturer: syz [ 695.286791][ T787] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 695.374468][T11758] netlink: 'syz.2.1883': attribute type 3 has an invalid length. [ 695.445923][T11757] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1884'. [ 695.720924][ T5136] usb 4-1: USB disconnect, device number 45 [ 695.947678][ T29] audit: type=1326 audit(1720189699.135:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d9375bd9 code=0x7ffc0000 [ 696.056224][ T29] audit: type=1326 audit(1720189699.135:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d9375bd9 code=0x7ffc0000 [ 696.143020][ T29] audit: type=1326 audit(1720189699.165:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f13d9375bd9 code=0x7ffc0000 [ 696.244287][ T29] audit: type=1326 audit(1720189699.165:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d9375bd9 code=0x7ffc0000 [ 696.339358][ T29] audit: type=1326 audit(1720189699.165:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d9375bd9 code=0x7ffc0000 [ 696.373768][ T29] audit: type=1326 audit(1720189699.225:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13d9375bd9 code=0x7ffc0000 [ 696.411569][ T29] audit: type=1326 audit(1720189699.225:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d9375bd9 code=0x7ffc0000 [ 696.473436][ T29] audit: type=1326 audit(1720189699.225:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d9375bd9 code=0x7ffc0000 [ 696.607814][ T29] audit: type=1326 audit(1720189699.255:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f13d9375bd9 code=0x7ffc0000 [ 696.769022][ T29] audit: type=1326 audit(1720189699.255:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11735 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d9375bd9 code=0x7ffc0000 [ 697.084916][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1888'. [ 699.404697][ T5138] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 699.507603][T11797] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1895'. [ 699.641769][ T5138] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 699.664096][ T5138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.694683][ T5138] usb 3-1: Product: syz [ 699.698950][ T5138] usb 3-1: Manufacturer: syz [ 699.703612][ T5138] usb 3-1: SerialNumber: syz [ 699.778659][ T5138] usb 3-1: config 0 descriptor?? [ 699.817674][ T5138] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 036 [ 700.218753][T11806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.267714][T11806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.563303][ T5139] usb 2-1: USB disconnect, device number 39 [ 700.714229][ T5138] (null): failure setting delay to 10us [ 700.720034][ T5138] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 700.752332][ T5138] usb 3-1: USB disconnect, device number 36 [ 700.803869][T11815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1901'. [ 700.934473][ T5136] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 701.468614][ T5136] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 701.477685][ T5136] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.488767][ T5136] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 701.498611][ T5136] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 702.089064][ T5136] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 702.104083][ T5136] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 702.112994][ T5136] usb 5-1: Product: syz [ 702.126440][ T5136] usb 5-1: Manufacturer: syz [ 702.146756][ T5136] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 702.563324][ T5136] usb 5-1: USB disconnect, device number 34 [ 706.164085][ T7774] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 706.396982][ T7774] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 706.415355][ T7774] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 706.450586][ T7774] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 706.474406][ T7774] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 706.507223][ T7774] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 706.517006][ T7774] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 706.525251][ T7774] usb 3-1: Product: syz [ 706.530510][ T7774] usb 3-1: Manufacturer: syz [ 706.549671][ T7774] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 706.856374][ T7774] usb 3-1: USB disconnect, device number 37 [ 707.102713][T11890] netlink: 'syz.1.1926': attribute type 3 has an invalid length. [ 708.229551][T11910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1934'. [ 709.008375][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 709.242402][T11927] netlink: 'syz.0.1940': attribute type 3 has an invalid length. [ 710.787875][T11941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1945'. [ 711.066572][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 711.066599][ T29] audit: type=1400 audit(1720189714.245:755): avc: denied { mounton } for pid=11944 comm="syz.2.1947" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 711.716237][ T5139] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 711.914996][ T5139] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 711.940288][ T5139] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.974033][ T5139] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 711.994182][ T5139] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 712.078541][ T5139] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 712.119946][ T5139] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 712.171938][ T5139] usb 3-1: Product: syz [ 712.207332][ T5139] usb 3-1: Manufacturer: syz [ 712.286843][ T5139] cdc_wdm 3-1:1.0: skipping garbage [ 712.292159][ T5139] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 712.455404][T11968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1957'. [ 713.072514][ T5139] usb 3-1: USB disconnect, device number 38 [ 714.134669][T10345] Bluetooth: hci2: command 0x0406 tx timeout [ 714.136232][ T5098] Bluetooth: hci3: command 0x0406 tx timeout [ 715.212049][T11993] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 715.646495][ T29] audit: type=1400 audit(1720189718.825:756): avc: denied { getopt } for pid=11998 comm="syz.2.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 715.731815][T12000] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 716.394513][T12008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1969'. [ 717.036720][ T5137] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 717.091563][T12013] 9pnet_virtio: no channels available for device [ 717.287256][ T5137] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 717.337251][ T5137] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.383737][ T5137] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 717.434212][ T5137] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 717.471068][ T5137] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 717.488565][ T5137] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 717.535855][ T5137] usb 2-1: Product: syz [ 717.550417][ T5137] usb 2-1: Manufacturer: syz [ 717.569321][T12028] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 717.595276][ T5137] cdc_wdm 2-1:1.0: skipping garbage [ 717.623886][ T5137] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 717.842877][ T5096] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 717.924518][ T5178] usb 2-1: USB disconnect, device number 40 [ 718.546583][T12043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1982'. [ 720.440492][T12064] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 720.937250][T12073] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1993'. [ 721.906399][ T5096] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 721.915949][ T5096] Bluetooth: hci4: Injecting HCI hardware error event [ 721.928171][ T5096] Bluetooth: hci4: hardware error 0x00 [ 723.164855][ T29] audit: type=1400 audit(1720189726.335:757): avc: denied { mount } for pid=12086 comm="syz.1.1998" name="/" dev="configfs" ino=1158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 723.818903][ T29] audit: type=1400 audit(1720189726.345:758): avc: denied { setattr } for pid=12086 comm="syz.1.1998" name="/" dev="configfs" ino=1158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 724.004441][ T29] audit: type=1400 audit(1720189726.345:759): avc: denied { search } for pid=12086 comm="syz.1.1998" name="/" dev="configfs" ino=1158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 724.094081][ T29] audit: type=1400 audit(1720189726.965:760): avc: denied { unmount } for pid=10674 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 724.124409][ T5096] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 724.895353][T12114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2006'. [ 725.239143][ T29] audit: type=1400 audit(1720189728.335:761): avc: denied { write } for pid=12115 comm="syz.4.2008" path="socket:[44215]" dev="sockfs" ino=44215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 725.398292][ T29] audit: type=1400 audit(1720189728.345:762): avc: denied { ioctl } for pid=12115 comm="syz.4.2008" path="socket:[44215]" dev="sockfs" ino=44215 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 726.174221][ T5137] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 726.286585][ T787] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 726.524296][ T5137] usb 3-1: Using ep0 maxpacket: 16 [ 726.560516][ T5137] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 726.602140][ T5137] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 726.614080][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 726.661333][ T5137] usb 3-1: Product: syz [ 726.666091][ T787] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.688805][ T5137] usb 3-1: Manufacturer: syz [ 726.704752][ T787] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 726.724136][ T5137] usb 3-1: SerialNumber: syz [ 726.752972][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.796273][ T5137] usb 3-1: config 0 descriptor?? [ 726.832199][ T787] usb 4-1: config 0 descriptor?? [ 727.088761][ T5137] usb 3-1: USB disconnect, device number 39 [ 727.481760][ T5178] usb 4-1: USB disconnect, device number 46 [ 727.503330][T11342] udevd[11342]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 731.550040][ T5137] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 731.734218][ T5137] usb 5-1: Using ep0 maxpacket: 16 [ 731.751755][ T5137] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 731.764168][ T5137] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 731.783136][ T5137] usb 5-1: Product: syz [ 731.793636][ T5137] usb 5-1: Manufacturer: syz [ 731.811918][ T5137] usb 5-1: SerialNumber: syz [ 731.824291][ T5139] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 731.835572][ T5137] usb 5-1: config 0 descriptor?? [ 732.044192][ T5139] usb 1-1: Using ep0 maxpacket: 16 [ 732.071574][ T5139] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.092264][ T5137] usb 5-1: USB disconnect, device number 35 [ 732.119909][ T5139] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 732.143177][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.167526][ T5139] usb 1-1: config 0 descriptor?? [ 733.065918][ T5178] usb 1-1: USB disconnect, device number 52 [ 734.404168][ T7774] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 735.716653][ T7774] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 735.733080][ T7774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.769566][ T7774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.792198][ T7774] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 735.847335][ T7774] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 735.870881][ T7774] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 735.887895][ T7774] usb 4-1: Manufacturer: syz [ 735.925039][ T7774] usb 4-1: config 0 descriptor?? [ 736.700137][ T7774] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 736.973521][ T7774] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 737.058880][ T7774] usb 4-1: USB disconnect, device number 47 [ 737.153071][ T5136] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 737.160279][ T45] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 737.669470][ T5136] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 737.714061][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 738.517122][ T5136] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.565254][ T5136] usb 5-1: Product: syz [ 738.569599][ T5136] usb 5-1: Manufacturer: syz [ 738.631693][ T45] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 738.637143][ T5136] usb 5-1: SerialNumber: syz [ 738.645148][ T45] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 738.654101][ T45] usb 1-1: Product: syz [ 738.658566][ T45] usb 1-1: Manufacturer: syz [ 738.663299][ T45] usb 1-1: SerialNumber: syz [ 738.682309][ T45] usb 1-1: config 0 descriptor?? [ 738.718429][ T5136] usb 5-1: config 0 descriptor?? [ 738.765496][ T5136] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 036 [ 738.896018][ T5136] (null): failure setting delay to 10us [ 738.934269][ T5136] i2c-tiny-usb 5-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 738.983637][ T5136] usb 5-1: USB disconnect, device number 36 [ 739.023375][ T45] usb 1-1: USB disconnect, device number 53 [ 739.057129][T10933] udevd[10933]: setting mode of /dev/bus/usb/005/036 to 020664 failed: No such file or directory [ 739.102149][T10933] udevd[10933]: setting owner of /dev/bus/usb/005/036 to uid=0, gid=0 failed: No such file or directory [ 739.117178][ T5178] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 739.354122][ T5178] usb 2-1: Using ep0 maxpacket: 16 [ 739.362151][ T5178] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.383213][ T5178] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 739.410784][ T5178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.432353][ T5178] usb 2-1: config 0 descriptor?? [ 739.942496][T12286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2061'. [ 740.255096][ T5071] usb 2-1: USB disconnect, device number 41 [ 743.019353][T12328] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2073'. [ 743.028750][ T45] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 743.224074][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 743.268652][ T45] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 743.288353][ T29] audit: type=1400 audit(1720189746.475:763): avc: denied { listen } for pid=12330 comm="syz.4.2075" lport=48086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 743.318582][ T45] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 743.351897][ T45] usb 3-1: Product: syz [ 743.357256][ T45] usb 3-1: Manufacturer: syz [ 743.372267][ T45] usb 3-1: SerialNumber: syz [ 743.386870][ T45] usb 3-1: config 0 descriptor?? [ 743.785264][ T5136] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 744.120896][ T787] usb 3-1: USB disconnect, device number 40 [ 744.235205][ T5136] usb 1-1: Using ep0 maxpacket: 16 [ 744.253743][ T5136] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.333027][T11342] udevd[11342]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 744.354482][ T5136] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 744.420206][ T5136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.501699][ T5136] usb 1-1: config 0 descriptor?? [ 745.075863][T12362] fuse: Bad value for 'fd' [ 745.324873][ T45] usb 1-1: USB disconnect, device number 54 [ 746.514670][T12378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2087'. [ 746.805225][T12382] tipc: Started in network mode [ 746.810193][T12382] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 746.919491][T12382] tipc: Enabled bearer , priority 10 [ 747.234432][ T5136] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 747.633327][ T5136] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 747.681537][ T5136] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.767107][ T5136] usb 1-1: Product: syz [ 747.785354][ T5136] usb 1-1: Manufacturer: syz [ 747.840989][ T5136] usb 1-1: SerialNumber: syz [ 747.875865][ T5136] usb 1-1: config 0 descriptor?? [ 747.949047][ T5136] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 055 [ 748.323901][ T5178] tipc: Node number set to 4269801491 [ 749.120688][T12409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.254580][T12409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.543225][T12418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2100'. [ 749.674571][ T8999] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 749.727808][ T5136] (null): failure setting delay to 10us [ 749.733644][ T5136] i2c-tiny-usb 1-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 749.780049][ T5136] usb 1-1: USB disconnect, device number 55 [ 749.791350][ T5178] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 749.875697][ T8999] usb 5-1: Using ep0 maxpacket: 16 [ 749.889341][ T8999] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.916218][ T8999] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 749.963726][ T8999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.310917][ T5178] usb 3-1: No LPM exit latency info found, disabling LPM. [ 750.322530][ T8999] usb 5-1: config 0 descriptor?? [ 750.339752][ T5178] usb 3-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 751.225129][ T5178] usb 3-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 751.239433][ T5178] usb 3-1: config 1 interface 0 has no altsetting 0 [ 751.266049][ T5178] usb 3-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 751.285268][ T5178] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.293360][ T5178] usb 3-1: Product: 毻낍᧌籎袚弹緍릢ꃶㄺ賑﷓뱕鵀ங཯‭ᜣ暟⯗雤귻兿靵ᕛ䁼娸㫓쐠ΰ鞽礎ꞔ는춎蔼ᱮ灏赫礁쬧쫋഻菳꼊뫬ﰢղ賧雞ỷ騋跭컀ꅎ契ឧ䮇郢 [ 751.347228][ T45] usb 5-1: USB disconnect, device number 37 [ 751.369343][ T5178] usb 3-1: SerialNumber: Ъ [ 751.390669][T12414] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 751.432874][T12414] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 751.955454][T12414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=12414 comm=syz.2.2098 [ 752.082645][ T5178] usbhid 3-1:1.0: can't add hid device: -71 [ 752.169151][ T5178] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 752.604409][ T5178] usb 3-1: USB disconnect, device number 41 [ 753.025887][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.051129][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.534984][T12458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2112'. [ 755.684356][ T5178] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 755.934472][ T7774] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 756.144655][ T7774] usb 2-1: Using ep0 maxpacket: 16 [ 756.170357][ T5178] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 756.170633][ T7774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.194067][ T5178] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.202153][ T5178] usb 3-1: Product: syz [ 756.298146][ T7774] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 756.411213][ T7774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.645084][ T7774] usb 2-1: config 0 descriptor?? [ 757.058098][ T5178] usb 3-1: Manufacturer: syz [ 757.062799][ T5178] usb 3-1: SerialNumber: syz [ 757.075573][ T5178] usb 3-1: config 0 descriptor?? [ 757.085858][ T5178] usb 3-1: can't set config #0, error -71 [ 757.097417][ T5178] usb 3-1: USB disconnect, device number 42 [ 757.592188][ T8999] usb 2-1: USB disconnect, device number 42 [ 760.304158][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 761.894115][ T8999] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 762.396731][ T8999] usb 4-1: No LPM exit latency info found, disabling LPM. [ 762.415944][ T8999] usb 4-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 762.449175][ T45] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 762.759012][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 762.844143][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.914533][ T45] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 762.923657][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.017456][ T45] usb 5-1: config 0 descriptor?? [ 763.305959][ T8999] usb 4-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 763.321456][ T8999] usb 4-1: config 1 interface 0 has no altsetting 0 [ 763.339954][ T8999] usb 4-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 763.364057][ T8999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.372147][ T8999] usb 4-1: Product: 毻낍᧌籎袚弹緍릢ꃶㄺ賑﷓뱕鵀ங཯‭ᜣ暟⯗雤귻兿靵ᕛ䁼娸㫓쐠ΰ鞽礎ꞔ는춎蔼ᱮ灏赫礁쬧쫋഻菳꼊뫬ﰢղ賧雞ỷ騋跭컀ꅎ契ឧ䮇郢 [ 763.433667][ T8999] usb 4-1: SerialNumber: Ъ [ 763.471196][T12544] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 763.485590][T12544] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 763.623355][T12519] warn_alloc: 1 callbacks suppressed [ 763.623382][T12519] syz.1.2131: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 763.663662][ T5178] usb 5-1: USB disconnect, device number 38 [ 763.678025][T12519] CPU: 0 PID: 12519 Comm: syz.1.2131 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 763.688283][T12519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 763.698394][T12519] Call Trace: [ 763.701711][T12519] [ 763.704669][T12519] dump_stack_lvl+0x16c/0x1f0 [ 763.709391][T12519] warn_alloc+0x24d/0x3a0 [ 763.713764][T12519] ? __pfx_warn_alloc+0x10/0x10 [ 763.718651][T12519] ? xt_alloc_entry_offsets+0x3a/0x60 [ 763.724083][T12519] ? __get_vm_area_node+0x190/0x2d0 [ 763.729319][T12519] ? __get_vm_area_node+0x1bc/0x2d0 [ 763.734558][T12519] __vmalloc_node_range_noprof+0xff7/0x1520 [ 763.740498][T12519] ? xt_alloc_entry_offsets+0x3a/0x60 [ 763.745913][T12519] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 763.752297][T12519] ? trace_kmalloc+0x2d/0xe0 [ 763.756924][T12519] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 763.762717][T12519] ? xt_alloc_entry_offsets+0x3a/0x60 [ 763.768225][T12519] kvmalloc_node_noprof+0x14f/0x1a0 [ 763.773476][T12519] ? xt_alloc_entry_offsets+0x3a/0x60 [ 763.778901][T12519] xt_alloc_entry_offsets+0x3a/0x60 [ 763.784244][T12519] translate_table+0x22e/0x1710 [ 763.789150][T12519] ? __pfx_lock_release+0x10/0x10 [ 763.794220][T12519] ? __pfx___might_resched+0x10/0x10 [ 763.799536][T12519] ? __pfx_translate_table+0x10/0x10 [ 763.804867][T12519] do_ipt_set_ctl+0x605/0xc30 [ 763.809618][T12519] ? trace_contention_end+0xea/0x140 [ 763.815113][T12519] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 763.820358][T12519] ? __pfx___mutex_lock+0x10/0x10 [ 763.825444][T12519] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 763.831577][T12519] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 763.837606][T12519] nf_setsockopt+0x8a/0xf0 [ 763.842073][T12519] ip_setsockopt+0xcb/0xf0 [ 763.846523][T12519] tcp_setsockopt+0xa4/0x100 [ 763.851146][T12519] smc_setsockopt+0x1b4/0xa00 [ 763.855864][T12519] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 763.861809][T12519] ? __pfx_smc_setsockopt+0x10/0x10 [ 763.867041][T12519] ? selinux_socket_setsockopt+0x6a/0x80 [ 763.872722][T12519] ? __pfx_smc_setsockopt+0x10/0x10 [ 763.877952][T12519] do_sock_setsockopt+0x222/0x480 [ 763.883028][T12519] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 763.888631][T12519] ? __fget_light+0x173/0x210 [ 763.893349][T12519] __sys_setsockopt+0x1a4/0x270 [ 763.898239][T12519] ? __pfx___sys_setsockopt+0x10/0x10 [ 763.903651][T12519] ? xfd_validate_state+0x5d/0x180 [ 763.908808][T12519] __x64_sys_setsockopt+0xbd/0x160 [ 763.913964][T12519] ? do_syscall_64+0x91/0x250 [ 763.918687][T12519] ? lockdep_hardirqs_on+0x7c/0x110 [ 763.923923][T12519] do_syscall_64+0xcd/0x250 [ 763.928478][T12519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.934418][T12519] RIP: 0033:0x7f13d9375bd9 [ 763.938869][T12519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.958603][T12519] RSP: 002b:00007f13da0c9048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 763.967048][T12519] RAX: ffffffffffffffda RBX: 00007f13d9503f60 RCX: 00007f13d9375bd9 [ 763.975056][T12519] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 763.983054][T12519] RBP: 00007f13d93e4aa1 R08: 0000000000000298 R09: 0000000000000000 [ 763.991055][T12519] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000000 [ 763.999139][T12519] R13: 000000000000000b R14: 00007f13d9503f60 R15: 00007ffd8983af48 [ 764.007169][T12519] [ 764.054367][T12519] Mem-Info: [ 764.068047][T12519] active_anon:7910 inactive_anon:0 isolated_anon:0 [ 764.068047][T12519] active_file:5805 inactive_file:38661 isolated_file:0 [ 764.068047][T12519] unevictable:768 dirty:69 writeback:0 [ 764.068047][T12519] slab_reclaimable:10015 slab_unreclaimable:99745 [ 764.068047][T12519] mapped:17197 shmem:4258 pagetables:840 [ 764.068047][T12519] sec_pagetables:0 bounce:0 [ 764.068047][T12519] kernel_misc_reclaimable:0 [ 764.068047][T12519] free:1378620 free_pcp:346 free_cma:0 [ 764.147080][T12519] Node 0 active_anon:31340kB inactive_anon:0kB active_file:23220kB inactive_file:154572kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:68788kB dirty:276kB writeback:0kB shmem:15196kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10072kB pagetables:3360kB sec_pagetables:0kB all_unreclaimable? no [ 764.181966][ T8999] usbhid 4-1:1.0: can't add hid device: -71 [ 764.188647][ T8999] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 764.201999][T12519] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 764.234793][ T8999] usb 4-1: USB disconnect, device number 48 [ 764.244426][T12519] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 764.340173][T12519] lowmem_reserve[]: 0 2565 2567 0 0 [ 764.381491][T12519] Node 0 DMA32 free:1548864kB boost:0kB min:35052kB low:43812kB high:52572kB reserved_highatomic:0KB active_anon:31008kB inactive_anon:0kB active_file:23220kB inactive_file:152760kB unevictable:1536kB writepending:276kB present:3129332kB managed:2654752kB mlocked:0kB bounce:0kB free_pcp:2580kB local_pcp:1528kB free_cma:0kB [ 764.538542][T12519] lowmem_reserve[]: 0 0 1 0 0 [ 764.577855][T12519] Node 0 Normal free:24kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:1812kB unevictable:0kB writepending:0kB present:1048576kB managed:1896kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 764.713211][T12519] lowmem_reserve[]: 0 0 0 0 0 [ 764.718219][T12519] Node 1 Normal free:3950008kB boost:0kB min:54828kB low:68532kB high:82236kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 764.754437][T12519] lowmem_reserve[]: 0 0 0 0 0 [ 764.759334][T12519] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 765.115702][T12519] Node 0 DMA32: 3*4kB (E) 13*8kB (UME) 7*16kB (E) 21*32kB (ME) 34*64kB (UME) 36*128kB (UME) 37*256kB (UM) 42*512kB (UME) 6*1024kB (UME) 3*2048kB (UE) 362*4096kB (UM) = 1533700kB [ 765.602118][T12519] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 765.804842][T12519] Node 1 Normal: 4*4kB (UM) 5*8kB (UM) 10*16kB (UM) 9*32kB (UM) 3*64kB (U) 6*128kB (U) 6*256kB (UM) 3*512kB (UM) 1*1024kB (U) 2*2048kB (U) 962*4096kB (UM) = 3950008kB [ 765.955262][T12519] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 766.159663][T12519] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 766.234109][T12519] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 766.243747][T12519] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 766.373642][T12519] 51448 total pagecache pages [ 766.399120][T12519] 0 pages in swap cache [ 766.403354][T12519] Free swap = 124712kB [ 766.449171][T12519] Total swap = 124996kB [ 766.476003][T12519] 2097051 pages RAM [ 766.479894][T12519] 0 pages HighMem/MovableOnly [ 766.524275][T12519] 401769 pages reserved [ 766.577190][T12519] 0 pages cma reserved [ 768.158769][ T7774] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 768.479180][ T7774] usb 3-1: No LPM exit latency info found, disabling LPM. [ 768.504390][ T7774] usb 3-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 768.694290][ T5096] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 768.705131][ T5096] Bluetooth: hci5: Injecting HCI hardware error event [ 768.716000][ T5096] Bluetooth: hci5: hardware error 0x00 [ 768.876856][ T7774] usb 3-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 769.734046][ T7774] usb 3-1: config 1 interface 0 has no altsetting 0 [ 769.794812][ T7774] usb 3-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 769.804415][ T5138] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 769.847127][ T7774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.887568][ T7774] usb 3-1: Product: 毻낍᧌籎袚弹緍릢ꃶㄺ賑﷓뱕鵀ங཯‭ᜣ暟⯗雤귻兿靵ᕛ䁼娸㫓쐠ΰ鞽礎ꞔ는춎蔼ᱮ灏赫礁쬧쫋഻菳꼊뫬ﰢղ賧雞ỷ騋跭컀ꅎ契ឧ䮇郢 [ 769.990279][ T7774] usb 3-1: SerialNumber: Ъ [ 770.034051][ T5138] usb 5-1: Using ep0 maxpacket: 16 [ 770.043007][T12589] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 770.084751][T12589] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 770.092628][ T5138] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.134081][ T5138] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 770.143315][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.209587][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 770.237066][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 770.253373][ T5138] usb 5-1: config 0 descriptor?? [ 770.259581][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 770.277749][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 770.299174][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 770.307974][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 770.411493][ T7774] usbhid 3-1:1.0: can't add hid device: -71 [ 770.469883][ T7774] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 770.574290][ T7774] usb 3-1: USB disconnect, device number 43 [ 770.589519][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2161'. [ 771.200217][ T8999] usb 5-1: USB disconnect, device number 39 [ 771.804259][ T5096] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 772.181975][T12607] chnl_net:caif_netlink_parms(): no params data found [ 772.445085][ T5096] Bluetooth: hci1: command tx timeout [ 772.856665][T12607] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.868601][T12607] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.888257][T12607] bridge_slave_0: entered allmulticast mode [ 772.906250][T12607] bridge_slave_0: entered promiscuous mode [ 772.929407][T12607] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.951347][T12607] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.966933][T12607] bridge_slave_1: entered allmulticast mode [ 772.991406][T12607] bridge_slave_1: entered promiscuous mode [ 773.412911][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.780728][ T5096] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 773.816936][T12607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.328615][T12607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.527246][ T5096] Bluetooth: hci1: command tx timeout [ 774.777538][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.102695][T12607] team0: Port device team_slave_0 added [ 775.427781][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.492141][T12607] team0: Port device team_slave_1 added [ 775.648340][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.728104][T12607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.746756][T12607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.786884][T12607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.801740][T12607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.833786][T12607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.866313][T12607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.104313][ T5139] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 776.182570][T12607] hsr_slave_0: entered promiscuous mode [ 776.208152][T12607] hsr_slave_1: entered promiscuous mode [ 776.249797][ T29] audit: type=1400 audit(1720189779.435:764): avc: denied { bind } for pid=12677 comm="syz.2.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 776.298345][T12607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 776.310954][T12607] Cannot create hsr debugfs directory [ 776.316503][ T5139] usb 1-1: Using ep0 maxpacket: 16 [ 776.335227][ T5139] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.367869][ T5139] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 776.396589][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.433115][ T5139] usb 1-1: config 0 descriptor?? [ 776.604074][ T5096] Bluetooth: hci1: command tx timeout [ 777.805198][ T5096] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 777.814577][ T5096] Bluetooth: hci0: Injecting HCI hardware error event [ 777.826543][ T5096] Bluetooth: hci0: hardware error 0x00 [ 777.843229][ T11] bridge_slave_1: left allmulticast mode [ 777.882258][ T11] bridge_slave_1: left promiscuous mode [ 777.934008][ T5139] usb 1-1: USB disconnect, device number 56 [ 777.951432][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.066995][ T11] bridge_slave_0: left allmulticast mode [ 778.072748][ T11] bridge_slave_0: left promiscuous mode [ 778.144789][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.691124][ T5098] Bluetooth: hci1: command tx timeout [ 779.769365][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.791495][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.809593][ T11] bond0 (unregistering): Released all slaves [ 779.854168][ T8999] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 779.965156][ T5096] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 780.064672][ T8999] usb 1-1: Using ep0 maxpacket: 32 [ 780.105375][ T8999] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 780.127547][ T8999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 16384, setting to 64 [ 780.174491][ T8999] usb 1-1: config 0 interface 0 has no altsetting 1 [ 780.206667][ T8999] usb 1-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c [ 780.220815][ T8999] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.229701][ T8999] usb 1-1: Product: syz [ 780.233916][ T8999] usb 1-1: Manufacturer: syz [ 780.239676][ T8999] usb 1-1: SerialNumber: syz [ 780.264995][ T8999] usb 1-1: config 0 descriptor?? [ 780.282754][ T8999] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22 [ 780.806477][ T29] audit: type=1326 audit(1720189783.985:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b75bd9 code=0x7ffc0000 [ 780.906451][ T29] audit: type=1326 audit(1720189783.985:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b75bd9 code=0x7ffc0000 [ 780.940527][ T7774] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 780.988507][ T29] audit: type=1326 audit(1720189784.045:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcce1b75bd9 code=0x7ffc0000 [ 781.077424][ T29] audit: type=1326 audit(1720189784.045:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b75bd9 code=0x7ffc0000 [ 781.168945][ T29] audit: type=1326 audit(1720189784.045:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b75bd9 code=0x7ffc0000 [ 781.185184][ T7774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.264061][ T7774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.306043][ T29] audit: type=1326 audit(1720189784.115:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcce1b75bd9 code=0x7ffc0000 [ 781.309772][ T7774] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 781.435925][ T29] audit: type=1326 audit(1720189784.115:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b75bd9 code=0x7ffc0000 [ 781.472151][ T11] hsr_slave_0: left promiscuous mode [ 781.518574][ T29] audit: type=1326 audit(1720189784.115:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b75bd9 code=0x7ffc0000 [ 781.578269][ T11] hsr_slave_1: left promiscuous mode [ 781.635149][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.702449][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.712572][ T29] audit: type=1326 audit(1720189784.165:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fcce1b75bd9 code=0x7ffc0000 [ 781.791646][ T7774] usb 3-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 781.797940][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.801985][ T7774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.829052][ T29] audit: type=1326 audit(1720189784.175:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b75bd9 code=0x7ffc0000 [ 781.856874][ T7774] usb 3-1: config 0 descriptor?? [ 781.862622][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.330359][ T29] audit: type=1326 audit(1720189784.175:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b75bd9 code=0x7ffc0000 [ 782.521696][ T29] audit: type=1326 audit(1720189784.175:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fcce1b75bd9 code=0x7ffc0000 [ 782.588223][ T11] veth1_macvtap: left promiscuous mode [ 782.619247][ T11] veth0_macvtap: left promiscuous mode [ 782.652021][ T29] audit: type=1326 audit(1720189784.175:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b75bd9 code=0x7ffc0000 [ 782.675925][ T29] audit: type=1326 audit(1720189784.175:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce1b75bd9 code=0x7ffc0000 [ 782.701793][ T29] audit: type=1326 audit(1720189784.175:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.0.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcce1b75bd9 code=0x7ffc0000 [ 782.705573][ T11] veth1_vlan: left promiscuous mode [ 782.758555][ T7774] wacom 0003:056A:0314.0002: unknown main item tag 0x0 [ 782.776212][ T7774] wacom 0003:056A:0314.0002: Unknown device_type for 'HID 056a:0314'. Assuming pen. [ 782.792341][ T11] veth0_vlan: left promiscuous mode [ 782.808130][ T7774] wacom 0003:056A:0314.0002: hidraw0: USB HID v0.00 Device [HID 056a:0314] on usb-dummy_hcd.2-1/input0 [ 782.840205][ T7774] input: Wacom Intuos Pro S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0314.0002/input/input11 [ 783.124858][ T7774] usb 3-1: USB disconnect, device number 44 [ 783.604354][ T5092] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 783.870796][ T5092] usb 5-1: Using ep0 maxpacket: 16 [ 783.897888][ T5092] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.923279][ T5092] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 783.960849][ T5092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.002019][ T5092] usb 5-1: config 0 descriptor?? [ 784.538934][ T5092] usb 5-1: USB disconnect, device number 40 [ 785.241506][ T5178] usb 1-1: USB disconnect, device number 57 [ 785.724100][ T7774] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 785.920747][ T7774] usb 5-1: No LPM exit latency info found, disabling LPM. [ 785.946676][ T7774] usb 5-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 785.979835][ T7774] usb 5-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 786.028749][ T7774] usb 5-1: config 1 interface 0 has no altsetting 0 [ 786.052396][ T7774] usb 5-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 786.094251][ T7774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.119138][ T7774] usb 5-1: Product: 毻낍᧌籎袚弹緍릢ꃶㄺ賑﷓뱕鵀ங཯‭ᜣ暟⯗雤귻兿靵ᕛ䁼娸㫓쐠ΰ鞽礎ꞔ는춎蔼ᱮ灏赫礁쬧쫋഻菳꼊뫬ﰢղ賧雞ỷ騋跭컀ꅎ契ឧ䮇郢 [ 786.158625][ T11] team0 (unregistering): Port device team_slave_1 removed [ 786.252507][ T7774] usb 5-1: SerialNumber: Ъ [ 786.371057][T12783] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 786.456173][T12783] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 786.728586][ T11] team0 (unregistering): Port device team_slave_0 removed [ 786.967858][T12783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=12783 comm=syz.4.2201 [ 787.034640][ T7774] usbhid 5-1:1.0: can't add hid device: -71 [ 787.040967][ T7774] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 787.062992][ T7774] usb 5-1: USB disconnect, device number 41 [ 788.297192][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2205'. [ 791.456612][ T5139] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 791.714494][ T5139] usb 3-1: Using ep0 maxpacket: 16 [ 791.755748][ T5139] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.817437][ T5139] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 791.889188][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.903326][T12607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 791.954018][ T5139] usb 3-1: config 0 descriptor?? [ 792.103671][T12607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 792.469639][T12607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 792.595334][T12607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 792.939217][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2216'. [ 792.961031][ T5136] usb 3-1: USB disconnect, device number 45 [ 793.276267][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 793.276289][ T29] audit: type=1326 audit(1720189796.465:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12846 comm="syz.3.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc391975bd9 code=0x7ffc0000 [ 793.376727][ T29] audit: type=1326 audit(1720189796.495:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12846 comm="syz.3.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fc391975bd9 code=0x7ffc0000 [ 793.431610][T12607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.437989][ T5137] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 793.503152][ T29] audit: type=1326 audit(1720189796.495:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12846 comm="syz.3.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc391975bd9 code=0x7ffc0000 [ 793.558533][ T29] audit: type=1326 audit(1720189796.495:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12846 comm="syz.3.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc391975bd9 code=0x7ffc0000 [ 793.614585][T12607] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.700252][ T5137] usb 1-1: No LPM exit latency info found, disabling LPM. [ 793.714912][ T5137] usb 1-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 793.723098][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.733052][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.751487][ T5137] usb 1-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 793.808169][ T5137] usb 1-1: config 1 interface 0 has no altsetting 0 [ 793.838337][ T5137] usb 1-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 793.851119][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.858482][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.858673][ T5137] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.960600][ T5137] usb 1-1: Product: 毻낍᧌籎袚弹緍릢ꃶㄺ賑﷓뱕鵀ங཯‭ᜣ暟⯗雤귻兿靵ᕛ䁼娸㫓쐠ΰ鞽礎ꞔ는춎蔼ᱮ灏赫礁쬧쫋഻菳꼊뫬ﰢղ賧雞ỷ騋跭컀ꅎ契ឧ䮇郢 [ 794.089460][ T5137] usb 1-1: SerialNumber: Ъ [ 794.136008][T12844] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 794.143541][T12844] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 794.635770][T12844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=12844 comm=syz.0.2217 [ 794.754384][ T5137] usbhid 1-1:1.0: can't add hid device: -71 [ 794.760532][ T5137] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 794.851252][ T5137] usb 1-1: USB disconnect, device number 58 [ 795.478336][T12607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.867699][T12607] veth0_vlan: entered promiscuous mode [ 795.991910][T12607] veth1_vlan: entered promiscuous mode [ 796.850713][T12607] veth0_macvtap: entered promiscuous mode [ 797.028270][T12607] veth1_macvtap: entered promiscuous mode [ 797.158024][T12607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.226132][T12607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.367742][T12607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.442020][T12607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.564894][T12607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.599274][T12607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.609386][T12607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.629140][T12607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.908527][T12607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.101805][T12607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.224690][T12607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.301255][T12607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.407773][T12607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.468136][T12607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.478793][T12607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.490070][T12607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.501536][T12607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.514877][T12607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.531849][T12607] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.548964][T12607] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.564017][T12607] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.573061][T12607] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.678434][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2228'. [ 799.394225][ T2455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.432784][ T2455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.454315][ T8999] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 799.674164][ T8999] usb 3-1: Using ep0 maxpacket: 16 [ 799.686743][ T8999] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.719687][ T8999] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 799.734148][ T2466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.759868][ T2466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.793343][ T8999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.873770][ T8999] usb 3-1: config 0 descriptor?? [ 800.388931][ T5138] usb 3-1: USB disconnect, device number 46 [ 803.777301][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2240'. [ 804.784171][ T5138] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 805.007966][ T5138] usb 3-1: Using ep0 maxpacket: 16 [ 805.049217][ T5138] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 805.280588][ T5138] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 805.448946][ T5138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.534897][ T5138] usb 3-1: config 0 descriptor?? [ 805.618919][ T5138] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14 [ 805.897431][ T8999] usb 3-1: USB disconnect, device number 47 [ 805.901343][ T4522] bcm5974 3-1:0.0: could not read from device [ 806.894165][ T8999] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 807.244559][ T8999] usb 2-1: Using ep0 maxpacket: 16 [ 807.257181][ T8999] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.340085][ T8999] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 807.439675][ T8999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.519101][ T8999] usb 2-1: config 0 descriptor?? [ 807.900454][ T8999] usb 2-1: USB disconnect, device number 43 [ 810.204397][ T5137] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 811.444065][ T8999] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 811.466974][ T5137] usb 5-1: No LPM exit latency info found, disabling LPM. [ 811.490833][ T5137] usb 5-1: config 1 interface 0 altsetting 218 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 811.514313][ T5137] usb 5-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 811.539859][ T5137] usb 5-1: config 1 interface 0 has no altsetting 0 [ 811.565101][ T5137] usb 5-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 811.581820][ T5137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.593744][ T5137] usb 5-1: Product: 毻낍᧌籎袚弹緍릢ꃶㄺ賑﷓뱕鵀ங཯‭ᜣ暟⯗雤귻兿靵ᕛ䁼娸㫓쐠ΰ鞽礎ꞔ는춎蔼ᱮ灏赫礁쬧쫋഻菳꼊뫬ﰢղ賧雞ỷ騋跭컀ꅎ契ឧ䮇郢 [ 811.618417][ T5137] usb 5-1: SerialNumber: Ъ [ 811.624524][ T5138] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 811.635692][T13007] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 811.644100][ T8999] usb 4-1: Using ep0 maxpacket: 8 [ 811.650910][T13007] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 811.656283][ T8999] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 811.667715][ T8999] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 811.678458][ T8999] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 811.703884][ T8999] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 811.714774][ T8999] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 811.728718][ T8999] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 811.738793][ T8999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.981665][ T8999] usb 4-1: usb_control_msg returned -32 [ 811.996460][ T8999] usbtmc 4-1:16.0: can't read capabilities [ 812.047370][ T5138] usb 2-1: Using ep0 maxpacket: 16 [ 812.065555][ T5138] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.103906][ T5138] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 812.117638][ T5138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.156034][ T5138] usb 2-1: config 0 descriptor?? [ 812.206193][T13007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=13007 comm=syz.4.2260 [ 812.652245][T13035] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 812.659815][ T5138] usb 4-1: USB disconnect, device number 49 [ 812.809341][ T7774] usb 2-1: USB disconnect, device number 44 [ 812.958386][ T5137] usbhid 5-1:1.0: can't add hid device: -71 [ 812.968726][ T5137] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 812.980721][ T5137] usb 5-1: USB disconnect, device number 42 [ 814.449792][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.462716][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.567482][ T5137] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 816.024128][ T5137] usb 1-1: Using ep0 maxpacket: 32 [ 816.144462][ T5137] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 816.182525][ T5137] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 816.194189][ T5137] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 816.208570][ T5137] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 816.234114][ T5137] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 816.319829][ T5137] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 816.331334][ T5137] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 816.342932][ T5137] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 816.366108][ T5137] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 816.392446][ T5137] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.441517][ T5137] usb 1-1: Product: В [ 816.453432][ T5137] usb 1-1: Manufacturer: 놱橹䓸곦瘾砆䵂鷓쬡謆譖ꈶⰕ颍वㇳ︔ [ 816.501535][ T5137] usb 1-1: SerialNumber: syz [ 816.605541][ T5137] usb 1-1: config 0 descriptor?? [ 817.511543][ T5137] pvrusb2: Hardware description: Terratec Grabster AV400 [ 817.514574][ T29] audit: type=1400 audit(1720189820.695:811): avc: denied { read } for pid=13077 comm="syz.4.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 817.557843][ T5137] pvrusb2: ********** [ 817.561955][ T5137] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 817.593172][ T5137] pvrusb2: Important functionality might not be entirely working. [ 817.613444][ T5137] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 817.638663][ T5137] pvrusb2: ********** [ 817.667423][ T1979] pvrusb2: Invalid write control endpoint [ 817.754082][ T45] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 817.885045][ T1979] pvrusb2: Invalid write control endpoint [ 817.898432][ T1979] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 817.919708][ T1979] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 817.933531][ T1979] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 817.964048][ T1979] pvrusb2: Device being rendered inoperable [ 817.973659][ T1979] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 817.980949][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 818.001421][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.012101][ T1979] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 818.021968][ T45] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 818.043213][ T1979] pvrusb2: Attached sub-driver cx25840 [ 818.064034][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.074087][ T1979] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 818.095739][ T1979] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 818.110661][ T45] usb 4-1: config 0 descriptor?? [ 819.061057][ T45] usb 1-1: USB disconnect, device number 59 [ 819.445382][ T5092] usb 4-1: USB disconnect, device number 50 [ 822.969345][T13128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 827.834428][ T45] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 828.624570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 828.646624][T13194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 828.862683][ T45] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 828.872542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 828.917488][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.959766][ T45] usb 4-1: Product: syz [ 828.979228][ T45] usb 4-1: Manufacturer: syz [ 829.010760][ T45] usb 4-1: SerialNumber: syz [ 829.033465][ T45] usb 4-1: config 0 descriptor?? [ 829.065200][ T45] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 051 [ 829.387760][T13213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.433395][T13213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.951033][ T45] (null): failure setting delay to 10us [ 829.974287][ T45] i2c-tiny-usb 4-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 829.997844][ T45] usb 4-1: USB disconnect, device number 51 [ 830.815576][ T5138] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 831.386553][ T5138] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 831.395421][ T5138] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 831.424472][ T5138] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 831.433568][ T5138] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.386121][ T5138] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 832.415795][ T5138] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 832.423894][ T5138] usb 2-1: Product: syz [ 832.480175][ T5138] usb 2-1: Manufacturer: syz [ 832.525169][ T5137] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 832.596882][ T5138] usb 2-1: can't set config #1, error -71 [ 832.633275][ T5138] usb 2-1: USB disconnect, device number 45 [ 832.749164][ T5137] usb 5-1: Using ep0 maxpacket: 32 [ 832.773056][ T5137] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 832.821063][ T5137] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 832.867201][ T5137] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 832.914083][ T5137] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 832.948123][ T5137] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 832.995624][ T5137] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 833.035535][ T5137] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 833.370392][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.383404][ T5137] usb 5-1: config 0 descriptor?? [ 834.444278][ T5137] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 834.704194][ T5137] usb 5-1: USB disconnect, device number 43 [ 834.785977][ T5137] usblp0: removed [ 835.214278][ T5137] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 835.481274][ T5137] usb 5-1: Using ep0 maxpacket: 32 [ 835.761527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 835.805372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 836.494263][ T5154] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 836.502563][ T5137] usb 5-1: device descriptor read/all, error -71 [ 836.522813][T13278] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 836.736994][ T5154] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 836.764664][ T5154] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 836.803423][ T5154] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 836.837428][ T5154] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.866673][ T5154] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 836.903138][ T5154] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 836.927571][ T5154] usb 4-1: Product: syz [ 836.974581][ T5154] usb 4-1: Manufacturer: syz [ 837.013371][ T5154] cdc_wdm 4-1:1.0: skipping garbage [ 837.024489][ T45] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 837.044736][ T5154] cdc_wdm 4-1:1.0: skipping garbage [ 837.059698][ T5154] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 837.069723][T13293] netlink: 'syz.1.2355': attribute type 1 has an invalid length. [ 837.078136][ T5154] cdc_wdm 4-1:1.0: Unknown control protocol [ 837.094187][T13293] netlink: 'syz.1.2355': attribute type 1 has an invalid length. [ 837.119832][T13293] netlink: 9108 bytes leftover after parsing attributes in process `syz.1.2355'. [ 837.164294][T13293] netlink: 'syz.1.2355': attribute type 1 has an invalid length. [ 837.182064][T13293] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2355'. [ 837.247995][ T45] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 837.295968][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.326130][ T45] usb 3-1: config 0 descriptor?? [ 837.345806][ C0] wdm_int_callback: 180 callbacks suppressed [ 837.345840][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 837.348141][ T7774] usb 4-1: USB disconnect, device number 52 [ 837.351902][ C0] wdm_int_callback: 180 callbacks suppressed [ 837.351925][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 837.351949][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 837.730056][ T45] ath6kl: Failed to submit usb control message: -71 [ 837.737291][ T45] ath6kl: unable to send the bmi data to the device: -71 [ 837.749979][ T45] ath6kl: Unable to send get target info: -71 [ 837.774401][ T45] ath6kl: Failed to init ath6kl core: -71 [ 838.129377][ T45] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 838.869960][ T45] usb 3-1: USB disconnect, device number 48 [ 839.273851][ T29] audit: type=1400 audit(1720189842.455:812): avc: denied { create } for pid=13316 comm="syz.1.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 840.651838][ T5139] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 841.502131][ T5139] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 841.574216][ T5139] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 841.647349][ T5139] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 841.724417][ T5139] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.801404][ T5139] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 841.850231][ T5139] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 841.914130][ T5139] usb 4-1: Product: syz [ 841.953988][ T5139] usb 4-1: Manufacturer: syz [ 842.013005][ T5139] cdc_wdm 4-1:1.0: skipping garbage [ 842.044443][ T5139] cdc_wdm 4-1:1.0: skipping garbage [ 842.060638][ T5139] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 842.080522][ T5139] cdc_wdm 4-1:1.0: Unknown control protocol [ 842.386210][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 842.387090][ T7774] usb 4-1: USB disconnect, device number 53 [ 842.392874][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 842.392901][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 842.500532][ T5178] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 842.517671][ T29] audit: type=1400 audit(1720189845.705:813): avc: denied { bind } for pid=13369 comm="syz.1.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 842.782943][ T5178] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 842.827552][ T5178] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 842.847293][ T5178] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 842.882671][ T5178] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 842.900805][ T5178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.275707][ T5178] usb 1-1: config 0 descriptor?? [ 843.301061][T13359] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 844.299010][ T5178] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x6 [ 844.310100][ T5178] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 845.151658][ T5178] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 845.197556][ T5178] usb 1-1: USB disconnect, device number 60 [ 845.257255][T13397] xt_CT: You must specify a L4 protocol and not use inversions on it [ 845.524851][ T29] audit: type=1400 audit(1720189848.705:814): avc: denied { ioctl } for pid=13403 comm="syz.3.2397" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 950.933898][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 950.940934][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13403/1:b..l [ 950.949546][ C0] rcu: (detected by 0, t=10502 jiffies, g=101653, q=344 ncpus=2) [ 950.957368][ C0] task:syz.3.2397 state:R running task stack:27168 pid:13403 tgid:13403 ppid:11229 flags:0x00004000 [ 950.970668][ C0] Call Trace: [ 950.973986][ C0] [ 950.976927][ C0] __schedule+0xf15/0x5d00 [ 950.981380][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 950.986663][ C0] ? lock_acquire+0x1b1/0x560 [ 950.991381][ C0] ? __pfx___schedule+0x10/0x10 [ 950.996275][ C0] ? __pfx_mark_lock+0x10/0x10 [ 951.001083][ C0] ? mark_held_locks+0x9f/0xe0 [ 951.005903][ C0] preempt_schedule_irq+0x51/0x90 [ 951.010946][ C0] irqentry_exit+0x36/0x90 [ 951.015379][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 951.021396][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x13/0x60 [ 951.027583][ C0] Code: 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 64 f4 75 7e 65 8b 05 65 f4 75 7e 00 01 ff 00 48 8b 34 24 74 0f f6 c4 01 74 35 8b 82 1c 16 00 00 [ 951.047234][ C0] RSP: 0018:ffffc90003277440 EFLAGS: 00000286 [ 951.053316][ C0] RAX: 0000000080000000 RBX: 0000000000000001 RCX: ffffffff813ce8ff [ 951.061301][ C0] RDX: ffff88802307da00 RSI: 0000000000000000 RDI: 0000000000000005 [ 951.069312][ C0] RBP: ffffc90003277e10 R08: 0000000000000005 R09: 0000000000000000 [ 951.077293][ C0] R10: 0000000080000000 R11: 0000000000000001 R12: ffffc90003270000 [ 951.085276][ C0] R13: ffffc90003278000 R14: ffffc90003277e18 R15: ffffc90003277df8 [ 951.093267][ C0] ? unwind_next_frame+0x11ff/0x23a0 [ 951.098600][ C0] unwind_next_frame+0x51/0x23a0 [ 951.103583][ C0] ? mmput+0x62/0x70 [ 951.107493][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 951.113691][ C0] arch_stack_walk+0x100/0x170 [ 951.118487][ C0] ? do_exit+0x9b7/0x2ba0 [ 951.122866][ C0] stack_trace_save+0x95/0xd0 [ 951.127744][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 951.133145][ C0] save_stack+0x162/0x1f0 [ 951.137625][ C0] ? __pfx_save_stack+0x10/0x10 [ 951.142490][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 951.147557][ C0] ? free_unref_folios+0x991/0x1310 [ 951.152773][ C0] ? folios_put_refs+0x487/0x6d0 [ 951.157736][ C0] ? free_pages_and_swap_cache+0x36d/0x510 [ 951.163603][ C0] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 951.169797][ C0] ? tlb_finish_mmu+0x168/0x7b0 [ 951.174807][ C0] ? exit_mmap+0x3d1/0xb20 [ 951.179253][ C0] ? __mmput+0x12a/0x4d0 [ 951.183515][ C0] ? mmput+0x62/0x70 [ 951.187455][ C0] __reset_page_owner+0x8d/0x400 [ 951.192413][ C0] free_unref_folios+0x991/0x1310 [ 951.197483][ C0] folios_put_refs+0x487/0x6d0 [ 951.202271][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 951.207578][ C0] ? lru_add_drain_cpu+0x454/0x860 [ 951.212728][ C0] free_pages_and_swap_cache+0x36d/0x510 [ 951.218385][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 951.224583][ C0] ? hlock_class+0x4e/0x130 [ 951.229113][ C0] ? __pfx___might_resched+0x10/0x10 [ 951.234412][ C0] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 951.240419][ C0] tlb_finish_mmu+0x168/0x7b0 [ 951.245122][ C0] exit_mmap+0x3d1/0xb20 [ 951.249382][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 951.254173][ C0] __mmput+0x12a/0x4d0 [ 951.258257][ C0] mmput+0x62/0x70 [ 951.262004][ C0] do_exit+0x9b7/0x2ba0 [ 951.266212][ C0] ? __pfx_do_exit+0x10/0x10 [ 951.270823][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 951.276223][ C0] do_group_exit+0xd3/0x2a0 [ 951.280773][ C0] __x64_sys_exit_group+0x3e/0x50 [ 951.285823][ C0] do_syscall_64+0xcd/0x250 [ 951.290394][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.296316][ C0] RIP: 0033:0x7fc391975bd9 [ 951.300739][ C0] RSP: 002b:00007ffe37738e38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 951.309183][ C0] RAX: ffffffffffffffda RBX: 00007ffe37738f30 RCX: 00007fc391975bd9 [ 951.317252][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 951.325231][ C0] RBP: 0000000000000001 R08: 0000000e37738f6f R09: 0000000000000000 [ 951.333208][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 951.341191][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 951.349194][ C0] [ 951.352219][ C0] rcu: rcu_preempt kthread starved for 10542 jiffies! g101653 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 951.363509][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 951.373512][ C0] rcu: RCU grace-period kthread stack dump: [ 951.379407][ C0] task:rcu_preempt state:R running task stack:27584 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 951.391156][ C0] Call Trace: [ 951.394442][ C0] [ 951.397380][ C0] __schedule+0xf15/0x5d00 [ 951.401815][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 951.407045][ C0] ? __pfx___schedule+0x10/0x10 [ 951.411911][ C0] ? schedule+0x298/0x350 [ 951.416271][ C0] ? __pfx_lock_release+0x10/0x10 [ 951.421317][ C0] ? __pfx___mod_timer+0x10/0x10 [ 951.426278][ C0] ? lock_acquire+0x1b1/0x560 [ 951.430996][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 951.436481][ C0] schedule+0xe7/0x350 [ 951.440563][ C0] schedule_timeout+0x136/0x2a0 [ 951.445444][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 951.450842][ C0] ? __pfx_process_timeout+0x10/0x10 [ 951.456173][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 951.462014][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 951.467515][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 951.472335][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 951.477644][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 951.482860][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 951.488683][ C0] rcu_gp_kthread+0x271/0x380 [ 951.493385][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 951.498634][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 951.503850][ C0] ? __kthread_parkme+0x148/0x220 [ 951.508933][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 951.514175][ C0] kthread+0x2c1/0x3a0 [ 951.518292][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 951.523589][ C0] ? __pfx_kthread+0x10/0x10 [ 951.528202][ C0] ret_from_fork+0x45/0x80 [ 951.532657][ C0] ? __pfx_kthread+0x10/0x10 [ 951.537296][ C0] ret_from_fork_asm+0x1a/0x30 [ 951.542369][ C0] [ 951.545394][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 951.551747][ C0] Sending NMI from CPU 0 to CPUs 1: [ 951.556975][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20