last executing test programs: 24m48.441526418s ago: executing program 1 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, &(0x7f00000002c0)=""/114, 0x72) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) setxattr$security_evm(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000380), &(0x7f0000000180)=ANY=[@ANYBLOB="05"], 0x9, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 24m47.240634401s ago: executing program 1 (id=252): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7112c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x5}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @multicast2, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x80, 0x2}, 0x3c) syz_io_uring_setup(0x110, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000003080101000000000000000000000000440004800800064000000000080007400000000008000540fffffffe080001400000000008000540000000040800034000000555080003400000000208000640000100000500030084"], 0x60}}, 0x0) bind$bt_hci(r6, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r6, 0x400448e6, 0x0) ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000500)="d7") sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x24000800) 24m45.484523547s ago: executing program 1 (id=256): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x226100) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r6 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f00000001c0)=0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r8, r7, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x40, 0x4f93969623550860}) io_uring_enter(r6, 0x14, 0xb9c, 0x3, 0x0, 0xffffffd5) r9 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'nicvf0\x00'}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000000c0)) add_key$user(0x0, 0x0, &(0x7f0000000980)="ca", 0x1, r9) ioctl(r0, 0x9, &(0x7f0000000580)="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") 24m44.105312646s ago: executing program 1 (id=258): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0xfffffffffffffe54}, 0x1, 0x0, 0x0, 0xaa34a4cfd797ba50}, 0x10) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x9, @empty, 0x6}, 0x1c, 0x0}}], 0x1, 0x20000045) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {0x0}], 0x2) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000240)={0x0, "08000000000000000000000000000000000000b582000000010000000100"}) unshare(0x400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r4 = syz_io_uring_setup(0x231, &(0x7f0000000240)={0x0, 0x15d2, 0x30101}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r2, 0xffffffffffffffff, 0x0, 0xffffffffffffffea, 0xc}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) sendmmsg$inet(r7, &(0x7f0000008400)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x34, r9, 0x1, 0xfffffff8, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}]}, 0x34}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000100)}, 0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0xb0a82) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') 24m42.610060903s ago: executing program 1 (id=261): creat(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffff, 0x4}, 0x14}}, 0x20000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x298f3cc22e12b39a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$unix(0x1, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$proc_mixer(r0, &(0x7f0000000580)=ANY=[], 0x178) dup3(r1, r0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0), 0x0, 0x80, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @local}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfffffffc}, &(0x7f0000000240)=0x8) 24m41.274862116s ago: executing program 1 (id=263): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x131000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x54647114bbf9433c, 0x40) mkdirat(r2, &(0x7f0000000200)='./file0/file0\x00', 0x1da) landlock_create_ruleset(0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010004"], 0x408100) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x15, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00'}, 0x10) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\r'], 0x44}}, 0x80) 24m25.057687424s ago: executing program 32 (id=263): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x131000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x54647114bbf9433c, 0x40) mkdirat(r2, &(0x7f0000000200)='./file0/file0\x00', 0x1da) landlock_create_ruleset(0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010004"], 0x408100) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x15, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00'}, 0x10) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\r'], 0x44}}, 0x80) 1m32.811641889s ago: executing program 4 (id=3642): ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) socket(0x1d, 0x2, 0x6) syz_emit_vhci(0x0, 0x58) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010000000000000000000d000000060008000000000005001d000f00000006000a"], 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, 0xffffffffffffffff, &(0x7f0000000180)={0x20000005}) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000380)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100), &(0x7f00000002c0)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r8 = syz_open_dev$vivid(&(0x7f00000000c0), 0x3, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x10010, r8, 0xac545000) 1m31.43259641s ago: executing program 4 (id=3646): r0 = syz_open_dev$loop(&(0x7f0000000880), 0x8001, 0x40) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000008c0)=0x7) fsync(r0) 1m31.24104255s ago: executing program 4 (id=3651): bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {}, {{0x6, 0x0, 0xb}, {0x65, 0x0, 0xc}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x7, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) 1m29.894928406s ago: executing program 4 (id=3653): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 1m29.754596225s ago: executing program 4 (id=3655): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) setpriority(0x2, r0, 0xb70) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x38aaf8b7}}, './file0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="1400f0ff1000010000000000000000000000000a44000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c08"], 0x6c}}, 0x0) msync(&(0x7f0000856000/0x4000)=nil, 0x4000, 0x1) kexec_load(0x0, 0x0, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0xa5bfce6, 0x0, 0x3, 0x1d, 0x1, "646b4c7fed409e3eedca8000f500000080000000008474071e9f67cc6481368e22ccf521b6bbe3a6a0157ada941ad42d2b62cb6d7dc5352a94b52ae0bde3bb2c", "0db14295dccd224f8b5ef2619871507eddc5fcc80afaa01d4c3b062568a39748aa03fab4400f982510e9de5b54ae1d7051b12a0cb84eb89391fef5ca6b49111e", "d05ec8eb94ee9afa9810416be0e28111a4a710927747eda9cb44bcdc7563144f", [0x7, 0x7fffffffffffffff]}) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c000480480001"], 0x122}, 0x1, 0x0, 0x0, 0x2}, 0x0) setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000080)=0x100, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e21, 0x0, @mcast2}, {0xa, 0x0, 0x80000001, @mcast2, 0x3}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) 1m28.761936871s ago: executing program 4 (id=3659): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRES8=0x0], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x60202) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f00000000c0)=0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r6, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x400015, 0x800002, 0x144, 0x0}) 1m25.013420209s ago: executing program 33 (id=3659): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRES8=0x0], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x60202) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f00000000c0)=0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r6, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x400015, 0x800002, 0x144, 0x0}) 2.13462363s ago: executing program 5 (id=4068): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000), 0xc) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x1}, 0xc) 1.997930436s ago: executing program 5 (id=4071): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f00000000c0)=0x1) close(r0) 1.887148768s ago: executing program 5 (id=4073): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.736690725s ago: executing program 5 (id=4076): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a0000001801000020207025"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000708000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000190090001006c617374000000000400028010000180090001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) 1.648279551s ago: executing program 5 (id=4078): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000000000000a00000000000000ff02000000000000000000000000000100"/71], 0x210) r1 = syz_io_uring_setup(0x111, &(0x7f0000000380)={0x0, 0xfdf1}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r1, 0x47f6, 0x880e, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @empty}}]}, 0x110) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x8bb9c946495c24b9) clock_gettime(0x0, &(0x7f0000002c00)={0x0, 0x0}) recvmmsg$unix(r9, &(0x7f0000002b80)=[{{&(0x7f0000000180), 0x6e, &(0x7f00000027c0)=[{&(0x7f0000000200)=""/249, 0xf9}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/137, 0x89}, {&(0x7f0000001480)=""/122, 0x7a}, {&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000001500)=""/212, 0xd4}, {&(0x7f0000001600)=""/165, 0xa5}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/227, 0xe3}], 0x9, &(0x7f0000002880)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000002940), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000002a00)=""/169, 0xa9}, {&(0x7f00000029c0)}], 0x2, &(0x7f0000002b00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}], 0x2, 0x100, &(0x7f0000002c40)={r10, r11+60000000}) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x4800) 1.458082066s ago: executing program 6 (id=4083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x40000) 1.372488108s ago: executing program 6 (id=4087): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000480)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0xfff, 0x1}}, 0x20) close_range(r1, r1, 0x0) 1.269866685s ago: executing program 2 (id=4092): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x9, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) 1.243548675s ago: executing program 6 (id=4093): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000002c0)=0x46, 0x4) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0xd9, @dev={0xfe, 0x80, '\x00', 0xf}, 0x4}, 0x1c, 0x0}}], 0x1, 0x24004810) 1.20644551s ago: executing program 0 (id=4094): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200000}) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x800, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d307f3030303030301530303b84b42b9d970bc5f40e5e3030383030302c70726976706f7274"]) 1.149449339s ago: executing program 6 (id=4095): capset(&(0x7f0000002040)={0x20071026}, &(0x7f0000002080)={0x1, 0xffff, 0x0, 0x3, 0xb, 0x6}) r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 1.134886586s ago: executing program 2 (id=4096): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = dup(r0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) 1.130697498s ago: executing program 3 (id=4097): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) iopl(0x3) syz_init_net_socket$x25(0x9, 0x5, 0x0) 1.078111631s ago: executing program 0 (id=4098): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000003700010324bd7002f9dbdf25060000006476b424635b78748c9105f1e145fe317b34060900000000000000fc6ad96f0ca988bfad84be8cb0acd3d65bc11be9bab82192a3470277d2c3372f6cafbc068d65e2b451abe38901cbaee267b2daf27ebbff94f94c3890b80fdf38125e1e2a009ed38c8d4a1afc5639d60049749c2c52401f650ed730c4b979f51333434d460c603db4ce4b639d"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) 1.030621424s ago: executing program 0 (id=4099): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="74000000100003050000000000000a1a90e30000", @ANYRES32=0x0, @ANYBLOB="00000000010000004c0012800c0001006d6163766c616e003c000280080001"], 0x74}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000010000000000ffdbdf2500000000", @ANYRES32, @ANYBLOB="0006f80000000000140012800b00010067656e65766500"], 0x48}, 0x1, 0x2}, 0x0) 1.007510028s ago: executing program 2 (id=4100): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xa87, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff03000000000000000000008500000023000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000a00000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 973.191091ms ago: executing program 3 (id=4101): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x545, 0x40009975, r0, 0x0) 958.237582ms ago: executing program 6 (id=4102): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000240), 0x2000a54, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 910.307468ms ago: executing program 2 (id=4103): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r0, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 859.083411ms ago: executing program 3 (id=4104): r0 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x7, @local, 0x7}, 0x55) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}, 0x51) 858.92267ms ago: executing program 0 (id=4105): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e23, 0x3, 'ovf\x00', 0x1, 0x7, 0x4f}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @loopback, 0x4e20, 0x3, 'wlc\x00', 0x0, 0x60000000, 0xc}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x12002, 0x200000f, 0xe1b2, 0xfffffffd}}, 0x44) 858.53265ms ago: executing program 6 (id=4106): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2000, 0x3, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x40, 0xe, 0x4, {0x4, 0x21, "ee50"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 761.968071ms ago: executing program 2 (id=4107): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @mcast2}, r1}}, 0x30) 706.019817ms ago: executing program 3 (id=4108): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000300)="f98517cc9d0d15e13f93a032e55ebf2b3c630d3d0a426ac2732ee6535549592813", 0x7}, 0x38) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d0012"], 0x184}}, 0x0) 705.889491ms ago: executing program 0 (id=4109): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x16, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) 689.746986ms ago: executing program 2 (id=4110): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) fadvise64(0xffffffffffffffff, 0x18, 0x8800, 0x4) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x58}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x118) landlock_create_ruleset(&(0x7f0000000040)={0x8127, 0x2}, 0x18, 0x0) semctl$GETALL(0x0, 0x0, 0x6, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r9}, 0x10) 646.822321ms ago: executing program 3 (id=4111): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x4, "ec72f936"}, @main=@item_012={0x1, 0x0, 0xb, "8a"}]}}, 0x0}, 0x0) 22.111186ms ago: executing program 3 (id=4112): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x225020, 0x0) 473.862µs ago: executing program 0 (id=4113): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000001000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 0s ago: executing program 5 (id=4114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x25dfdbfb, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): 1] vhci_hcd: connection closed [ 1376.941087][T18157] xt_hashlimit: size too large, truncated to 1048576 [ 1377.007953][T12628] vhci_hcd: stop threads [ 1377.046564][T12628] vhci_hcd: release socket [ 1377.102120][T12628] vhci_hcd: disconnect device [ 1377.527824][ T5866] vhci_hcd: vhci_device speed not set [ 1377.624737][T18151] bridge0: port 5(hsr_slave_1) entered blocking state [ 1377.631701][T18151] bridge0: port 5(hsr_slave_1) entered disabled state [ 1377.650081][T14892] ath6kl: Failed to init ath6kl core: -110 [ 1377.669930][T14892] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1377.815491][T18168] ipt_rpfilter: unknown options [ 1378.772791][T14892] usb 1-1: USB disconnect, device number 56 [ 1378.966453][T18181] Bluetooth: MGMT ver 1.23 [ 1379.254906][T18188] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1379.466086][T18191] bond0: entered promiscuous mode [ 1379.474455][T18191] bond_slave_0: entered promiscuous mode [ 1379.488594][T18191] bond_slave_1: entered promiscuous mode [ 1380.564573][T18191] bond0: left promiscuous mode [ 1380.570611][T18191] bond_slave_0: left promiscuous mode [ 1380.576872][T18191] bond_slave_1: left promiscuous mode [ 1381.841315][T18201] bond0: entered promiscuous mode [ 1381.850185][T18201] bond_slave_0: entered promiscuous mode [ 1381.856120][T18201] bond_slave_1: entered promiscuous mode [ 1381.861917][T18201] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1381.874916][T18201] bond0: left promiscuous mode [ 1381.883429][T18201] bond_slave_0: left promiscuous mode [ 1381.890287][T18201] bond_slave_1: left promiscuous mode [ 1381.895923][T18201] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1383.158709][T18221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2871'. [ 1383.200415][T18221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2871'. [ 1383.340805][T18224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1383.954666][T18233] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1383.964307][T18233] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1384.446389][ T30] audit: type=1400 audit(1741612874.318:2107): avc: denied { ioctl } for pid=18214 comm="syz.0.2869" path="socket:[47501]" dev="sockfs" ino=47501 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1384.799183][T18241] xt_hashlimit: size too large, truncated to 1048576 [ 1385.375066][T12628] Bluetooth: hci0: Frame reassembly failed (-84) [ 1386.360427][T18261] bond0: entered promiscuous mode [ 1386.365691][T18261] bond_slave_0: entered promiscuous mode [ 1386.371552][T18261] bond_slave_1: entered promiscuous mode [ 1386.532970][T18261] bond0: left promiscuous mode [ 1386.542467][T18261] bond_slave_0: left promiscuous mode [ 1386.548500][T18261] bond_slave_1: left promiscuous mode [ 1387.463199][ T5145] Bluetooth: hci0: command 0xfc11 tx timeout [ 1387.482499][T18272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1387.631856][T18277] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2895'. [ 1387.680218][T15522] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1389.578501][T18289] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1389.588033][T18289] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1389.686826][T18287] xt_hashlimit: size too large, truncated to 1048576 [ 1390.687094][T18299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2889'. [ 1391.282788][T18307] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1391.292397][T18307] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1391.773075][T18304] netdevsim netdevsim4: Direct firmware load for . [ 1391.773075][T18304] failed with error -2 [ 1391.810455][T18304] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1391.810455][T18304] [ 1391.831589][T18309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2892'. [ 1392.574936][T18323] bond0: entered promiscuous mode [ 1392.580206][T18323] bond_slave_0: entered promiscuous mode [ 1392.584314][T18318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1392.586497][T18323] bond_slave_1: entered promiscuous mode [ 1392.602498][T18323] bond0: left promiscuous mode [ 1392.607337][T18323] bond_slave_0: left promiscuous mode [ 1392.630573][T18323] bond_slave_1: left promiscuous mode [ 1393.103617][T18334] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2899'. [ 1394.146049][T18344] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1394.155634][T18344] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1394.596255][T14892] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1395.185072][T14892] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1395.194715][T18352] netlink: 'syz.3.2904': attribute type 1 has an invalid length. [ 1395.198472][T14892] usb 1-1: config 0 has no interface number 0 [ 1395.293001][T14892] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1395.302272][T14892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.310360][T14892] usb 1-1: Product: syz [ 1395.314587][T14892] usb 1-1: Manufacturer: syz [ 1395.319287][T14892] usb 1-1: SerialNumber: syz [ 1395.335614][T14892] usb 1-1: config 0 descriptor?? [ 1395.355868][T14892] hub 1-1:0.2: bad descriptor, ignoring hub [ 1395.363441][T18352] siw: device registration error -23 [ 1395.446579][T18357] netlink: 'syz.4.2903': attribute type 11 has an invalid length. [ 1395.937674][T14892] hub 1-1:0.2: probe with driver hub failed with error -5 [ 1395.968691][T14892] f81232 1-1:0.2: f81534a converter detected [ 1395.975753][T14892] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1395.983572][T14892] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1396.009741][T14892] usb 1-1: USB disconnect, device number 57 [ 1396.016369][T14892] f81232 1-1:0.2: device disconnected [ 1396.198040][T18348] 9pnet_fd: Insufficient options for proto=fd [ 1396.210553][T18324] syz.5.2894: vmalloc error: size 566231040, failed to allocated page array size 1105920, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1396.296227][T18362] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1396.305837][T18362] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1396.746816][T18324] CPU: 1 UID: 0 PID: 18324 Comm: syz.5.2894 Not tainted 6.14.0-rc6-syzkaller #0 [ 1396.746835][T18324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1396.746841][T18324] Call Trace: [ 1396.746844][T18324] [ 1396.746849][T18324] dump_stack_lvl+0x16c/0x1f0 [ 1396.746868][T18324] warn_alloc+0x24d/0x3a0 [ 1396.746881][T18324] ? __pfx_warn_alloc+0x10/0x10 [ 1396.746895][T18324] ? __get_vm_area_node+0x1b0/0x2f0 [ 1396.746910][T18324] ? __get_vm_area_node+0x1dc/0x2f0 [ 1396.746927][T18324] __vmalloc_node_range_noprof+0x1102/0x1530 [ 1396.746947][T18324] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 1396.746965][T18324] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1396.746985][T18324] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 1396.746999][T18324] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1396.747013][T18324] vmalloc_user_noprof+0x6b/0x90 [ 1396.747028][T18324] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 1396.747042][T18324] vb2_vmalloc_alloc+0x11e/0x3d0 [ 1396.747057][T18324] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1396.747071][T18324] __vb2_queue_alloc+0x896/0x1230 [ 1396.747091][T18324] vb2_core_reqbufs+0xa73/0xfb0 [ 1396.747108][T18324] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1396.747129][T18324] __vb2_init_fileio+0x3f3/0x1110 [ 1396.747145][T18324] ? vb2_fop_read+0xe2/0x3e0 [ 1396.747158][T18324] __vb2_perform_fileio+0x9de/0x1620 [ 1396.747175][T18324] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 1396.747194][T18324] vb2_fop_read+0x213/0x3e0 [ 1396.747209][T18324] v4l2_read+0x226/0x360 [ 1396.747219][T18324] ? __pfx_v4l2_read+0x10/0x10 [ 1396.747229][T18324] vfs_read+0x1df/0xbf0 [ 1396.747245][T18324] ? __fget_files+0x1fc/0x3a0 [ 1396.747255][T18324] ? __pfx_lock_release+0x10/0x10 [ 1396.747269][T18324] ? __pfx_vfs_read+0x10/0x10 [ 1396.747283][T18324] ? do_futex+0x123/0x350 [ 1396.747296][T18324] ? lock_acquire+0x2f/0xb0 [ 1396.747309][T18324] ? __fget_files+0x40/0x3a0 [ 1396.747320][T18324] ? __fget_files+0x206/0x3a0 [ 1396.747332][T18324] __x64_sys_pread64+0x1f6/0x250 [ 1396.747342][T18324] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1396.747355][T18324] do_syscall_64+0xcd/0x250 [ 1396.747370][T18324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.747384][T18324] RIP: 0033:0x7fb761d8d169 [ 1396.747393][T18324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1396.747402][T18324] RSP: 002b:00007fb762caf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1396.747412][T18324] RAX: ffffffffffffffda RBX: 00007fb761fa6080 RCX: 00007fb761d8d169 [ 1396.747419][T18324] RDX: 00000000fffffe69 RSI: 0000400000000180 RDI: 0000000000000006 [ 1396.747424][T18324] RBP: 00007fb761e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1396.747430][T18324] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1396.747435][T18324] R13: 0000000000000000 R14: 00007fb761fa6080 R15: 00007ffc2d469988 [ 1396.747447][T18324] [ 1396.747451][T18324] Mem-Info: [ 1397.390718][T18324] active_anon:45804 inactive_anon:44 isolated_anon:0 [ 1397.390718][T18324] active_file:18538 inactive_file:39301 isolated_file:0 [ 1397.390718][T18324] unevictable:777 dirty:553 writeback:0 [ 1397.390718][T18324] slab_reclaimable:12523 slab_unreclaimable:115127 [ 1397.390718][T18324] mapped:33872 shmem:39033 pagetables:1024 [ 1397.390718][T18324] sec_pagetables:0 bounce:0 [ 1397.390718][T18324] kernel_misc_reclaimable:0 [ 1397.390718][T18324] free:1226734 free_pcp:4808 free_cma:0 [ 1397.466332][T18371] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1397.480906][T18324] Node 0 active_anon:184560kB inactive_anon:176kB active_file:73944kB inactive_file:157128kB unevictable:1572kB isolated(anon):0kB isolated(file):0kB mapped:136576kB dirty:2224kB writeback:0kB shmem:155868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11276kB pagetables:4004kB sec_pagetables:0kB all_unreclaimable? no [ 1398.212654][T18324] Node 1 active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1398.267155][T18324] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1398.308382][T18324] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1398.387715][T18324] Node 0 DMA32 free:998388kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:177360kB inactive_anon:176kB active_file:73944kB inactive_file:157036kB unevictable:1572kB writepending:2224kB present:3129332kB managed:2547364kB mlocked:0kB bounce:0kB free_pcp:12640kB local_pcp:820kB free_cma:0kB [ 1399.403479][T18324] lowmem_reserve[]: 0 0 0 0 0 [ 1399.447671][T18324] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1399.670266][T18324] lowmem_reserve[]: 0 0 0 0 0 [ 1399.675234][T18324] Node 1 Normal free:3906868kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:76kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1400.053795][T18393] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1400.063396][T18393] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1400.521057][T18324] lowmem_reserve[]: 0 0 0 0 0 [ 1400.537138][T18324] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1400.549852][T18324] Node 0 DMA32: 175*4kB (UME) 114*8kB (UME) 90*16kB (UME) 51*32kB (UME) 6*64kB (UE) 41*128kB (UME) 29*256kB (UME) 54*512kB (UME) 24*1024kB (UME) 9*2048kB (UME) 217*4096kB (UME) = 977228kB [ 1400.585831][T18324] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1400.700693][T18324] Node 1 Normal: 203*4kB (UME) 51*8kB (UME) 39*16kB (UME) 202*32kB (UME) 87*64kB (UME) 26*128kB (UME) 20*256kB (UME) 9*512kB (UM) 7*1024kB (UME) 3*2048kB (ME) 944*4096kB (M) = 3906868kB [ 1400.800625][T18403] ipt_rpfilter: unknown options [ 1400.947856][T18324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1400.958739][T18407] tipc: Enabled bearer , priority 0 [ 1400.968627][T18324] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1401.046437][T18409] overlayfs: failed to clone lowerpath [ 1402.070736][T18324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1402.127031][T18324] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1402.156026][T18324] 96253 total pagecache pages [ 1402.160969][T18324] 45 pages in swap cache [ 1402.167563][T18324] Free swap = 124684kB [ 1402.176476][T18324] Total swap = 124996kB [ 1402.188867][T18324] 2097051 pages RAM [ 1402.200490][T18324] 0 pages HighMem/MovableOnly [ 1402.213961][T18324] 428552 pages reserved [ 1402.218411][T18324] 0 pages cma reserved [ 1402.704276][T18423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2921'. [ 1405.071937][T18444] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1405.081517][T18444] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1405.787532][T18451] ipt_rpfilter: unknown options [ 1408.683061][T18481] input: syz0 as /devices/virtual/input/input17 [ 1408.689415][T18481] input: failed to attach handler leds to device input17, error: -6 [ 1410.819057][T18506] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1410.828719][T18506] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1412.135329][T18513] ipt_rpfilter: unknown options [ 1415.078742][T18518] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2944'. [ 1415.105050][T18527] ipt_rpfilter: unknown options [ 1417.141775][T18550] overlayfs: failed to clone lowerpath [ 1417.670926][T18547] ceph: No mds server is up or the cluster is laggy [ 1417.778300][ T9702] libceph: connect (1)[c::]:6789 error -101 [ 1417.785192][ T9702] libceph: mon0 (1)[c::]:6789 connect error [ 1417.874578][T18553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18553 comm=syz.2.2952 [ 1418.772837][ T9702] libceph: connect (1)[c::]:6789 error -101 [ 1418.781551][ T9702] libceph: mon0 (1)[c::]:6789 connect error [ 1420.741289][T18572] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1420.750868][T18572] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1421.408469][T18579] ipt_rpfilter: unknown options [ 1423.011972][T18598] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2960'. [ 1423.834211][T18597] ipt_rpfilter: unknown options [ 1424.527929][ T30] audit: type=1400 audit(1741612914.428:2108): avc: denied { listen } for pid=18612 comm="syz.5.2963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1427.596118][T18627] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1427.605773][T18627] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1427.911740][T18632] siw: device registration error -23 [ 1429.655750][ T30] audit: type=1400 audit(1741612919.441:2109): avc: denied { ioctl } for pid=18639 comm="syz.0.2974" path="socket:[49183]" dev="sockfs" ino=49183 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1429.811024][T18657] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2975'. [ 1429.851240][T18657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2975'. [ 1430.532294][T18642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2971'. [ 1430.773417][T18642] veth3: entered promiscuous mode [ 1430.867918][T18671] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2976'. [ 1433.659353][T14892] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1433.963011][T18696] netlink: 'syz.2.2983': attribute type 24 has an invalid length. [ 1434.765191][T18699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2984'. [ 1434.792773][T18699] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 43546 - 0 [ 1434.802213][T18699] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 43546 - 0 [ 1434.811511][T18699] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 43546 - 0 [ 1434.820521][T18699] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 43546 - 0 [ 1436.043856][T18709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2986'. [ 1437.224702][T18708] Set syz1 is full, maxelem 65536 reached [ 1437.567361][T14892] usb 6-1: device descriptor read/all, error -71 [ 1438.470073][T18723] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2991'. [ 1438.479214][T18723] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2991'. [ 1440.094126][T18737] netlink: 'syz.5.2993': attribute type 4 has an invalid length. [ 1440.109197][T18737] netlink: 'syz.5.2993': attribute type 4 has an invalid length. [ 1440.451108][T15522] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 1440.515813][T18740] ipt_rpfilter: unknown options [ 1441.382007][T18747] ipt_rpfilter: unknown options [ 1441.699335][T18752] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1441.709107][T18752] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1443.539906][T18770] overlayfs: failed to resolve './file1': -2 [ 1445.081187][T18780] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3004'. [ 1445.090206][T18780] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3004'. [ 1445.174678][T18778] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1445.184310][T18778] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1445.954274][T15522] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 1447.526023][T18819] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3019'. [ 1447.535216][T18819] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3019'. [ 1447.649623][T18820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1448.308092][T18827] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1448.317724][T18827] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1448.833650][T18834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3024'. [ 1449.050662][T18840] ipt_rpfilter: unknown options [ 1449.258204][T18842] 9pnet_fd: Insufficient options for proto=fd [ 1451.626168][ T30] audit: type=1400 audit(1741612941.542:2110): avc: denied { append } for pid=18858 comm="syz.0.3033" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1452.671396][ T30] audit: type=1400 audit(1741612941.542:2111): avc: denied { map } for pid=18858 comm="syz.0.3033" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1452.724669][T18880] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1452.734434][T18880] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1453.209199][T18882] »»»»»» speed is unknown, defaulting to 1000 [ 1453.215799][ T30] audit: type=1400 audit(1741612941.542:2112): avc: denied { execute } for pid=18858 comm="syz.0.3033" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1453.610259][T18882] »»»»»» speed is unknown, defaulting to 1000 [ 1453.646474][T18882] wlan0 speed is unknown, defaulting to 1000 [ 1454.565319][ T5868] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1454.772404][T18898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1454.786226][T18895] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1454.795815][T18895] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1454.839928][T18898] serio: Serial port ptm0 [ 1455.198308][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 1455.213140][ T30] audit: type=1400 audit(1741612945.123:2113): avc: denied { mount } for pid=18899 comm="syz.4.3041" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1455.516596][T15522] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 1456.503631][ T5868] usb 1-1: device descriptor read/all, error -71 [ 1456.703923][T18912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1458.366990][ T5866] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1459.420971][T18949] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1459.430511][T18949] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1459.450841][ T5866] usb 6-1: Using ep0 maxpacket: 16 [ 1459.460060][ T5866] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1459.472003][ T5866] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1459.481785][ T5866] usb 6-1: config 1 has no interface number 1 [ 1459.488634][ T5866] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1459.501793][ T5866] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1459.522796][ T5866] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1460.182490][T15522] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1460.495882][T15522] Bluetooth: hci2: Injecting HCI hardware error event [ 1460.505339][T15522] Bluetooth: hci2: hardware error 0x00 [ 1460.520049][ T5866] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1460.555165][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.630169][ T5866] usb 6-1: Product: syz [ 1460.634351][ T5866] usb 6-1: Manufacturer: syz [ 1460.639056][ T5866] usb 6-1: SerialNumber: syz [ 1461.956158][ T5866] usb 6-1: USB disconnect, device number 46 [ 1462.051339][T18989] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1462.061070][T18989] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1462.542389][T15522] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1464.113994][ T5866] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1464.883572][ T5866] usb 6-1: Using ep0 maxpacket: 16 [ 1464.962365][ T5866] usb 6-1: device descriptor read/all, error -71 [ 1465.003910][T15522] Bluetooth: hci5: unexpected event for opcode 0x2035 [ 1465.601899][T19021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'. [ 1465.607758][T19019] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1465.897057][ T9702] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1466.213264][T19033] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1466.222820][T19033] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1466.890792][ T9702] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1466.907676][ T9702] usb 1-1: config 0 has no interface number 0 [ 1466.915638][ T9702] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1467.448729][T18921] udevd[18921]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1467.480289][ T9702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.510733][ T9702] usb 1-1: Product: syz [ 1467.671845][ T9702] usb 1-1: Manufacturer: syz [ 1467.684692][ T9702] usb 1-1: SerialNumber: syz [ 1467.700831][T19050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3092'. [ 1467.702587][ T9702] usb 1-1: config 0 descriptor?? [ 1467.773283][T19053] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1467.782868][T19053] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1468.367354][ T9702] usb 1-1: can't set config #0, error -71 [ 1468.398956][ T9702] usb 1-1: USB disconnect, device number 60 [ 1468.581314][T19057] netlink: 'syz.0.3093': attribute type 1 has an invalid length. [ 1468.604451][T19057] netlink: 'syz.0.3093': attribute type 1 has an invalid length. [ 1470.078086][T19097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1470.249335][T19107] usb usb6: usbfs: process 19107 (syz.0.3113) did not claim interface 0 before use [ 1472.263573][T19133] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3123'. [ 1472.288089][T19133] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3123'. [ 1472.318492][T19134] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3125'. [ 1472.448746][T19133] netlink: 'syz.2.3123': attribute type 6 has an invalid length. [ 1474.749909][T19166] netlink: 'syz.5.3136': attribute type 16 has an invalid length. [ 1474.773939][T19166] netlink: 'syz.5.3136': attribute type 17 has an invalid length. [ 1474.813334][T19168] ipt_rpfilter: unknown options [ 1474.959386][T19166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1477.059869][T19204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1477.126364][T19207] ALSA: seq fatal error: cannot create timer (-22) [ 1477.367792][ T5897] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1477.542267][ T5897] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1477.551532][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.573722][ T5897] usb 1-1: config 0 descriptor?? [ 1477.802364][ T5897] ath6kl: Failed to submit usb control message: -71 [ 1477.821778][ T5897] ath6kl: unable to send the bmi data to the device: -71 [ 1477.831495][ T5897] ath6kl: Unable to send get target info: -71 [ 1477.849530][ T10] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1477.860648][ T5897] ath6kl: Failed to init ath6kl core: -71 [ 1477.866821][ T5897] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1477.904835][ T5897] usb 1-1: USB disconnect, device number 61 [ 1478.010522][ T10] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1478.026973][ T10] usb 6-1: config 0 has no interface number 0 [ 1478.044042][ T10] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1478.054425][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.085950][ T10] usb 6-1: Product: syz [ 1478.096327][ T10] usb 6-1: Manufacturer: syz [ 1478.113526][ T10] usb 6-1: SerialNumber: syz [ 1478.192578][ T10] usb 6-1: config 0 descriptor?? [ 1478.208848][ T10] hub 6-1:0.2: bad descriptor, ignoring hub [ 1478.216882][ T10] hub 6-1:0.2: probe with driver hub failed with error -5 [ 1478.228375][ T10] f81232 6-1:0.2: f81534a converter detected [ 1478.283205][T19247] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 1478.832135][ T10] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1478.853316][ T10] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1478.900456][ T10] usb 6-1: USB disconnect, device number 49 [ 1478.984900][ T10] f81232 6-1:0.2: device disconnected [ 1479.153329][T19264] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1479.175729][T19265] ipt_rpfilter: unknown options [ 1479.641934][T19272] ipt_rpfilter: unknown options [ 1480.034010][T19277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.072204][T19277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.107998][T19277] tipc: Resetting bearer [ 1480.130867][T19280] ALSA: seq fatal error: cannot create timer (-22) [ 1480.136852][T19277] tipc: Resetting bearer [ 1480.239035][T19283] bond0: entered promiscuous mode [ 1480.254306][T19283] bond_slave_0: entered promiscuous mode [ 1480.264530][T19283] bond_slave_1: entered promiscuous mode [ 1480.284180][T19283] bond0: left promiscuous mode [ 1480.303510][T19283] bond_slave_0: left promiscuous mode [ 1480.326073][T19283] bond_slave_1: left promiscuous mode [ 1480.396163][ T5818] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1480.572167][ T5818] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1480.581649][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.621607][ T5818] usb 6-1: config 0 descriptor?? [ 1480.662874][T19289] xt_hashlimit: size too large, truncated to 1048576 [ 1480.719521][T19289] syz.3.3177: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1480.745868][T19289] CPU: 0 UID: 0 PID: 19289 Comm: syz.3.3177 Not tainted 6.14.0-rc6-syzkaller #0 [ 1480.745894][T19289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1480.745906][T19289] Call Trace: [ 1480.745912][T19289] [ 1480.745919][T19289] dump_stack_lvl+0x16c/0x1f0 [ 1480.745948][T19289] warn_alloc+0x24d/0x3a0 [ 1480.745971][T19289] ? __pfx_warn_alloc+0x10/0x10 [ 1480.746000][T19289] ? __get_vm_area_node+0x1b0/0x2f0 [ 1480.746026][T19289] ? __get_vm_area_node+0x1dc/0x2f0 [ 1480.746057][T19289] __vmalloc_node_range_noprof+0x1102/0x1530 [ 1480.746084][T19289] ? __pfx___lock_acquire+0x10/0x10 [ 1480.746116][T19289] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 1480.746150][T19289] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1480.746178][T19289] ? __pfx_lock_release+0x10/0x10 [ 1480.746201][T19289] ? trace_lock_acquire+0x14e/0x1f0 [ 1480.746226][T19289] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 1480.746252][T19289] vmalloc_noprof+0x6b/0x90 [ 1480.746278][T19289] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 1480.746305][T19289] hashlimit_mt_check_common+0x8b0/0x1450 [ 1480.746342][T19289] hashlimit_mt_check_v1+0x2fe/0x370 [ 1480.746369][T19289] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 1480.746402][T19289] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 1480.746426][T19289] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 1480.746453][T19289] xt_check_match+0x284/0xa50 [ 1480.746486][T19289] ? memmap_init_compound+0x420/0x600 [ 1480.746506][T19289] ? __pfx_xt_check_match+0x10/0x10 [ 1480.746529][T19289] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1480.746561][T19289] ? xt_find_match+0x1f2/0x290 [ 1480.746596][T19289] find_check_entry.constprop.0+0x34d/0xa20 [ 1480.746631][T19289] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 1480.746674][T19289] ? kvfree+0x47/0x50 [ 1480.746706][T19289] translate_table+0xd06/0x17b0 [ 1480.746740][T19289] ? __pfx_translate_table+0x10/0x10 [ 1480.746762][T19289] ? __might_fault+0xe3/0x190 [ 1480.746790][T19289] do_ip6t_set_ctl+0x926/0xbf0 [ 1480.746813][T19289] ? trace_contention_end+0xee/0x140 [ 1480.746838][T19289] ? __mutex_lock+0x1cc/0xb10 [ 1480.746863][T19289] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1480.746887][T19289] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 1480.746915][T19289] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1480.746952][T19289] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 1480.746978][T19289] nf_setsockopt+0x8a/0xf0 [ 1480.747005][T19289] ipv6_setsockopt+0x135/0x170 [ 1480.747030][T19289] rawv6_setsockopt+0xd7/0x680 [ 1480.747052][T19289] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1480.747076][T19289] ? selinux_socket_setsockopt+0x6a/0x80 [ 1480.747097][T19289] ? sock_common_setsockopt+0x2e/0xf0 [ 1480.747116][T19289] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1480.747135][T19289] do_sock_setsockopt+0x222/0x480 [ 1480.747153][T19289] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1480.747172][T19289] ? lock_acquire+0x2f/0xb0 [ 1480.747209][T19289] __sys_setsockopt+0x1a0/0x230 [ 1480.747238][T19289] __x64_sys_setsockopt+0xbd/0x160 [ 1480.747259][T19289] ? syscall_trace_enter+0x8b/0x260 [ 1480.747289][T19289] do_syscall_64+0xcd/0x250 [ 1480.747315][T19289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.747340][T19289] RIP: 0033:0x7f7d5cf8d169 [ 1480.747355][T19289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1480.747370][T19289] RSP: 002b:00007f7d5dd23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1480.747387][T19289] RAX: ffffffffffffffda RBX: 00007f7d5d1a6160 RCX: 00007f7d5cf8d169 [ 1480.747399][T19289] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000000 [ 1480.747410][T19289] RBP: 00007f7d5d00e2a0 R08: 00000000000004c0 R09: 0000000000000000 [ 1480.747420][T19289] R10: 00004000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 1480.747431][T19289] R13: 0000000000000000 R14: 00007f7d5d1a6160 R15: 00007ffcd11d2698 [ 1480.747457][T19289] [ 1481.225685][T19289] Mem-Info: [ 1481.228860][T19289] active_anon:48974 inactive_anon:44 isolated_anon:0 [ 1481.228860][T19289] active_file:18538 inactive_file:39331 isolated_file:0 [ 1481.228860][T19289] unevictable:762 dirty:235 writeback:0 [ 1481.228860][T19289] slab_reclaimable:12671 slab_unreclaimable:116798 [ 1481.228860][T19289] mapped:34294 shmem:41242 pagetables:1050 [ 1481.228860][T19289] sec_pagetables:0 bounce:0 [ 1481.228860][T19289] kernel_misc_reclaimable:0 [ 1481.228860][T19289] free:1243687 free_pcp:324 free_cma:0 [ 1481.321647][T19289] Node 0 active_anon:184288kB inactive_anon:176kB active_file:73944kB inactive_file:157248kB unevictable:1560kB isolated(anon):0kB isolated(file):0kB mapped:133000kB dirty:952kB writeback:0kB shmem:151956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11376kB pagetables:4296kB sec_pagetables:0kB all_unreclaimable? no [ 1481.357037][T19289] Node 1 active_anon:32kB inactive_anon:0kB active_file:208kB inactive_file:76kB unevictable:1504kB isolated(anon):0kB isolated(file):0kB mapped:144kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1481.389540][T19289] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1481.406304][ T5818] ath6kl: Failed to submit usb control message: -71 [ 1481.417062][T19289] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1481.429458][T19289] Node 0 DMA32 free:1053500kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:184388kB inactive_anon:176kB active_file:73944kB inactive_file:157156kB unevictable:1560kB writepending:952kB present:3129332kB managed:2547364kB mlocked:16kB bounce:0kB free_pcp:12152kB local_pcp:11972kB free_cma:0kB [ 1481.460593][T19289] lowmem_reserve[]: 0 0 0 0 0 [ 1481.465501][T19289] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1481.469584][ T5818] ath6kl: unable to send the bmi data to the device: -71 [ 1481.492160][T19289] lowmem_reserve[]: 0 0 0 0 0 [ 1481.492201][T19289] Node 1 Normal free:3906884kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:208kB inactive_file:76kB unevictable:1504kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1481.492247][T19289] lowmem_reserve[]: 0 0 0 0 0 [ 1481.492282][T19289] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1481.492439][T19289] Node 0 DMA32: 200*4kB (UME) 544*8kB (UME) 182*16kB (UME) 253*32kB (UME) 89*64kB (UME) 138*128kB (UME) 178*256kB (UME) 65*512kB (UME) 23*1024kB (UME) 9*2048kB (UME) 218*4096kB (UME) = 1053280kB [ 1481.492598][T19289] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB [ 1481.568439][ T5818] ath6kl: Unable to send get target info: -71 [ 1481.593147][T19289] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1481.600039][T19289] Node 1 Normal: 203*4kB (UME) 51*8kB (UME) 38*16kB (UME) 203*32kB (UME) 87*64kB (UME) 26*128kB (UME) 20*256kB (UME) 9*512kB (UM) 7*1024kB (UME) 3*2048kB (ME) 944*4096kB (M) = 3906884kB [ 1481.621624][ T5818] ath6kl: Failed to init ath6kl core: -71 [ 1481.621650][T19289] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1481.660102][T19289] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1481.837233][T19289] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1482.037250][T19289] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1482.185473][ T5818] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1482.229596][ T5818] usb 6-1: USB disconnect, device number 50 [ 1482.251870][T19289] 96291 total pagecache pages [ 1482.564829][T19289] 45 pages in swap cache [ 1482.569085][T19289] Free swap = 124372kB [ 1482.573207][T19289] Total swap = 124996kB [ 1482.802460][T19289] 2097051 pages RAM [ 1482.827988][T19289] 0 pages HighMem/MovableOnly [ 1482.977887][T19289] 428552 pages reserved [ 1482.982041][T19289] 0 pages cma reserved [ 1483.961205][T19325] openvswitch: netlink: IPv4 tun info is not correct [ 1484.752893][T19336] netlink: 4816 bytes leftover after parsing attributes in process `syz.2.3198'. [ 1484.830160][T19341] ipt_rpfilter: unknown options [ 1485.017061][T19351] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3205'. [ 1486.192416][T19365] ALSA: seq fatal error: cannot create timer (-22) [ 1486.299911][T19371] bond0: entered promiscuous mode [ 1486.316286][T19371] bond_slave_0: entered promiscuous mode [ 1486.326474][T19371] bond_slave_1: entered promiscuous mode [ 1486.344007][T19371] bond0: left promiscuous mode [ 1486.352917][T19371] bond_slave_0: left promiscuous mode [ 1486.369711][T19371] bond_slave_1: left promiscuous mode [ 1486.453104][ T5818] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1487.123547][ T5818] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1487.132744][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.146836][ T5818] usb 1-1: config 0 descriptor?? [ 1487.165060][T19388] xt_hashlimit: size too large, truncated to 1048576 [ 1487.271811][T19393] netlink: 'syz.3.3218': attribute type 32 has an invalid length. [ 1487.462386][ T5818] ath6kl: Failed to submit usb control message: -71 [ 1487.469020][ T5818] ath6kl: unable to send the bmi data to the device: -71 [ 1487.481345][T19398] ipt_rpfilter: unknown options [ 1487.485084][ T5818] ath6kl: Unable to send get target info: -71 [ 1487.493398][ T5818] ath6kl: Failed to init ath6kl core: -71 [ 1487.499574][ T5818] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1487.669773][ T5818] usb 1-1: USB disconnect, device number 62 [ 1488.732517][T19415] bond0: entered promiscuous mode [ 1488.740060][T19415] bond_slave_0: entered promiscuous mode [ 1488.767770][T19415] bond_slave_1: entered promiscuous mode [ 1488.798080][T19415] bond0: left promiscuous mode [ 1488.817577][T19415] bond_slave_0: left promiscuous mode [ 1488.826435][T19419] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3228'. [ 1488.847089][T19415] bond_slave_1: left promiscuous mode [ 1489.041990][T19429] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3232'. [ 1489.894946][ T30] audit: type=1400 audit(1741612979.831:2114): avc: denied { getopt } for pid=19434 comm="syz.2.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1491.515944][T19460] netlink: 'syz.2.3245': attribute type 3 has an invalid length. [ 1497.569647][T19524] xt_hashlimit: size too large, truncated to 1048576 [ 1497.885758][ T10] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1497.966777][T19533] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3268'. [ 1498.170956][ T10] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1498.189825][ T10] usb 1-1: config 0 has no interface number 0 [ 1498.198364][ T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1498.213337][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.400285][ T10] usb 1-1: Product: syz [ 1499.369853][ T10] usb 1-1: Manufacturer: syz [ 1499.380767][ T10] usb 1-1: SerialNumber: syz [ 1499.401090][ T10] usb 1-1: config 0 descriptor?? [ 1500.453249][ T10] usb 1-1: can't set config #0, error -71 [ 1500.688088][ T10] usb 1-1: USB disconnect, device number 63 [ 1503.291857][T19566] ipt_rpfilter: unknown options [ 1505.917108][T19599] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1505.980630][T19603] ipt_rpfilter: unknown options [ 1506.141221][ T5818] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1506.786215][ T5818] usb 6-1: Using ep0 maxpacket: 16 [ 1506.831100][ T5818] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 1507.031633][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1507.063269][ T5818] usb 6-1: Manufacturer: syz [ 1507.093235][ T5818] usb 6-1: config 0 descriptor?? [ 1507.312728][ T5818] usb 6-1: Cannot retrieve CPort count: 0 [ 1507.318505][ T5818] usb 6-1: Cannot retrieve CPort count: -5 [ 1507.345537][ T5818] es2_ap_driver 6-1:0.0: probe with driver es2_ap_driver failed with error -5 [ 1508.680584][ T5868] usb 6-1: USB disconnect, device number 51 [ 1512.802480][T19685] netlink: 'syz.3.3321': attribute type 21 has an invalid length. [ 1512.829687][T19685] netlink: 'syz.3.3321': attribute type 1 has an invalid length. [ 1512.962008][T19692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3323'. [ 1514.753486][T19726] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3334'. [ 1514.818652][ T5898] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1514.982778][ T5898] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1515.017424][ T5898] usb 6-1: config 0 has no interface number 0 [ 1515.146987][ T5898] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1516.018743][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.026867][ T5898] usb 6-1: Product: syz [ 1516.031385][ T5898] usb 6-1: Manufacturer: syz [ 1516.035990][ T5898] usb 6-1: SerialNumber: syz [ 1516.045909][ T5898] usb 6-1: config 0 descriptor?? [ 1516.056045][ T5898] hub 6-1:0.2: bad descriptor, ignoring hub [ 1516.113704][ T5898] hub 6-1:0.2: probe with driver hub failed with error -5 [ 1516.130302][ T5898] f81232 6-1:0.2: f81534a converter detected [ 1516.303072][ T5898] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1516.329208][ T5898] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1516.359222][ T5898] usb 6-1: USB disconnect, device number 52 [ 1516.366305][ T5898] f81232 6-1:0.2: device disconnected [ 1516.378132][T19746] netlink: 'syz.0.3344': attribute type 1 has an invalid length. [ 1516.455608][T19746] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3344'. [ 1519.236951][T19779] xt_hashlimit: size too large, truncated to 1048576 [ 1519.594515][ T30] audit: type=1400 audit(1741613009.536:2115): avc: denied { getopt } for pid=19788 comm="syz.5.3357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1522.080496][T19823] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1522.090094][T19823] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1523.081255][T19845] xt_hashlimit: size too large, truncated to 1048576 [ 1523.858906][T19866] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3379'. [ 1524.024242][T14892] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 1524.449464][T14892] usb 1-1: config 0 has an invalid interface number: 248 but max is 0 [ 1524.555932][T14892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.566618][T14892] usb 1-1: config 0 has no interface number 0 [ 1524.572729][T14892] usb 1-1: config 0 interface 248 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1524.667664][T14892] usb 1-1: New USB device found, idVendor=067b, idProduct=1234, bcdDevice=80.76 [ 1524.677476][T14892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.693661][T14892] usb 1-1: Product: syz [ 1524.697922][T14892] usb 1-1: Manufacturer: syz [ 1524.702517][T14892] usb 1-1: SerialNumber: syz [ 1524.715224][T14892] usb 1-1: config 0 descriptor?? [ 1524.738496][T19872] bond0: entered promiscuous mode [ 1524.743547][T19872] bond_slave_0: entered promiscuous mode [ 1524.744858][T14892] pl2303 1-1:0.248: required interrupt-in endpoint missing [ 1524.763844][T19872] bond_slave_1: entered promiscuous mode [ 1524.773808][T19872] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1524.866619][T19872] bond0: left promiscuous mode [ 1524.872522][T19872] bond_slave_0: left promiscuous mode [ 1525.524779][T19872] bond_slave_1: left promiscuous mode [ 1525.530225][T19872] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1525.550866][ T9702] usb 1-1: USB disconnect, device number 64 [ 1525.563364][T19879] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1525.572824][T19879] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1525.874271][T19893] xt_hashlimit: size too large, truncated to 1048576 [ 1526.238576][T19892] ALSA: seq fatal error: cannot create timer (-22) [ 1526.855848][T19908] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3393'. [ 1526.930219][T14892] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1527.324791][T14892] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1527.364977][T19911] ipt_rpfilter: unknown options [ 1527.520386][T14892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.530059][T14892] usb 6-1: config 0 descriptor?? [ 1527.769203][T19925] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1527.778872][T19925] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1528.611822][T14892] ath6kl: Failed to submit usb control message: -71 [ 1528.618456][T14892] ath6kl: unable to send the bmi data to the device: -71 [ 1528.628911][T14892] ath6kl: Unable to send get target info: -71 [ 1528.635656][T14892] ath6kl: Failed to init ath6kl core: -71 [ 1528.641886][T14892] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1528.811700][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1528.847631][T14892] usb 6-1: USB disconnect, device number 53 [ 1529.006359][T19934] ALSA: seq fatal error: cannot create timer (-22) [ 1529.622002][T14892] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1529.839898][T14892] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1529.853460][T14892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.922733][T14892] usb 1-1: config 0 descriptor?? [ 1531.027523][T19958] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3407'. [ 1531.770184][T14892] ath6kl: Failed to submit usb control message: -110 [ 1531.790158][T14892] ath6kl: unable to send the bmi data to the device: -110 [ 1531.967446][T14892] ath6kl: Unable to send get target info: -110 [ 1532.283992][T14892] ath6kl: Failed to init ath6kl core: -110 [ 1532.301607][T14892] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1532.318229][T14892] usb 1-1: USB disconnect, device number 65 [ 1532.419797][ T30] audit: type=1400 audit(1741613022.362:2116): avc: denied { mounton } for pid=19967 comm="syz.5.3412" path=2F3536332FE91F7189591E9233614B dev="tmpfs" ino=3269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1536.290832][T20005] ALSA: seq fatal error: cannot create timer (-22) [ 1536.817182][T19909] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1536.822062][T20021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3429'. [ 1536.834379][T20021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3429'. [ 1537.338848][T19909] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1537.348171][T19909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.357859][T19909] usb 1-1: config 0 descriptor?? [ 1537.629490][T19909] ath6kl: Failed to submit usb control message: -71 [ 1537.636161][T19909] ath6kl: unable to send the bmi data to the device: -71 [ 1537.643286][T19909] ath6kl: Unable to send get target info: -71 [ 1537.657945][T19909] ath6kl: Failed to init ath6kl core: -71 [ 1537.670597][T19909] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1537.739104][T19909] usb 1-1: USB disconnect, device number 66 [ 1541.909469][T20091] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3448'. [ 1542.245791][T20093] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1542.252423][T20093] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1542.901603][T20106] xt_hashlimit: size too large, truncated to 1048576 [ 1542.940000][T20094] vhci_hcd: connection closed [ 1543.612877][T20093] vhci_hcd vhci_hcd.0: Device attached [ 1543.677775][T18701] vhci_hcd: stop threads [ 1543.682045][T18701] vhci_hcd: release socket [ 1543.708305][T18701] vhci_hcd: disconnect device [ 1543.726938][T10887] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.449940][T10887] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.721786][T10887] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.405622][T10887] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.390524][T10887] bridge_slave_1: left allmulticast mode [ 1547.415717][T10887] bridge_slave_1: left promiscuous mode [ 1547.441580][T10887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.573627][T20170] ALSA: seq fatal error: cannot create timer (-22) [ 1547.640258][T10887] bridge_slave_0: left allmulticast mode [ 1547.646205][T10887] bridge_slave_0: left promiscuous mode [ 1547.666611][T10887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.467566][ T5897] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1548.905704][ T5897] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1548.939763][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.076236][ T5897] usb 6-1: config 0 descriptor?? [ 1549.718574][T20199] xt_hashlimit: size too large, truncated to 1048576 [ 1549.725994][T10887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1549.746913][T10887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1549.765174][T10887] bond0 (unregistering): Released all slaves [ 1549.784923][ T5897] ath6kl: Failed to submit usb control message: -71 [ 1549.861377][ T5897] ath6kl: unable to send the bmi data to the device: -71 [ 1549.868449][ T5897] ath6kl: Unable to send get target info: -71 [ 1549.904146][ T5897] ath6kl: Failed to init ath6kl core: -71 [ 1549.910498][ T5897] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1549.931428][ T5897] usb 6-1: USB disconnect, device number 54 [ 1550.192734][T20217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3488'. [ 1550.232553][T20219] ALSA: seq fatal error: cannot create timer (-22) [ 1550.490811][ T5897] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1550.651969][ T5897] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1550.693250][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.272619][ T5897] usb 1-1: config 0 descriptor?? [ 1551.540811][ T5897] ath6kl: Failed to submit usb control message: -71 [ 1551.572597][ T5897] ath6kl: unable to send the bmi data to the device: -71 [ 1551.598776][ T5897] ath6kl: Unable to send get target info: -71 [ 1551.628517][ T5897] ath6kl: Failed to init ath6kl core: -71 [ 1552.011738][ T5897] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1552.059285][ T5897] usb 1-1: USB disconnect, device number 67 [ 1552.149228][T10887] hsr_slave_0: left promiscuous mode [ 1552.171943][T10887] hsr_slave_1: left promiscuous mode [ 1552.186162][T10887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1552.204575][T10887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1552.214679][T10887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1552.223963][T10887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1552.258776][T10887] veth1_macvtap: left promiscuous mode [ 1552.273002][T10887] veth0_macvtap: left promiscuous mode [ 1552.279689][T10887] veth1_vlan: left promiscuous mode [ 1553.231123][T20277] ALSA: seq fatal error: cannot create timer (-22) [ 1554.027785][T19909] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1554.146236][T10887] team0 (unregistering): Port device team_slave_1 removed [ 1554.191246][T10887] team0 (unregistering): Port device team_slave_0 removed [ 1554.202009][T19909] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1554.211406][T19909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.230454][T19909] usb 1-1: config 0 descriptor?? [ 1554.239091][ T10] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1554.403519][ T10] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1554.411704][ T10] usb 6-1: config 0 has no interface number 0 [ 1554.421497][ T10] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1554.430769][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.439124][ T10] usb 6-1: Product: syz [ 1554.443291][ T10] usb 6-1: Manufacturer: syz [ 1554.447883][ T10] usb 6-1: SerialNumber: syz [ 1554.464164][ T10] usb 6-1: config 0 descriptor?? [ 1554.475489][ T10] hub 6-1:0.2: bad descriptor, ignoring hub [ 1554.481916][ T10] hub 6-1:0.2: probe with driver hub failed with error -5 [ 1554.495418][ T10] f81232 6-1:0.2: f81534a converter detected [ 1554.669949][T19909] ath6kl: Failed to submit usb control message: -71 [ 1554.748742][ T30] audit: type=1400 audit(1741613044.683:2117): avc: denied { write } for pid=20298 comm="syz.4.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1554.750224][ T10] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1554.778609][T19909] ath6kl: unable to send the bmi data to the device: -71 [ 1554.785651][T19909] ath6kl: Unable to send get target info: -71 [ 1554.808183][T19909] ath6kl: Failed to init ath6kl core: -71 [ 1554.813605][ T10] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1554.839203][T19909] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1554.880475][ T10] usb 6-1: USB disconnect, device number 55 [ 1554.888927][ T10] f81232 6-1:0.2: device disconnected [ 1554.997905][T19909] usb 1-1: USB disconnect, device number 68 [ 1555.198972][T20310] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1555.208489][T20310] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1557.072115][T20321] ipt_rpfilter: unknown options [ 1558.249102][T20343] ALSA: seq fatal error: cannot create timer (-22) [ 1558.667734][ T5898] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1558.929216][T20357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3521'. [ 1558.946056][T20357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3521'. [ 1558.958053][ T5898] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1559.536209][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.559552][ T5898] usb 1-1: config 0 descriptor?? [ 1559.768409][ T5898] ath6kl: Failed to submit usb control message: -71 [ 1559.785709][ T5898] ath6kl: unable to send the bmi data to the device: -71 [ 1559.796812][ T5898] ath6kl: Unable to send get target info: -71 [ 1559.815975][ T5898] ath6kl: Failed to init ath6kl core: -71 [ 1559.831392][ T5898] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1560.453975][ T5898] usb 1-1: USB disconnect, device number 69 [ 1560.651221][T20394] ipt_rpfilter: unknown options [ 1560.724121][T20398] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3531'. [ 1561.467682][T20416] xt_hashlimit: size too large, truncated to 1048576 [ 1561.505362][ T10] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1561.675757][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1561.692758][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1561.714243][ T10] usb 1-1: config 11 has an invalid interface number: 244 but max is 0 [ 1561.732846][ T10] usb 1-1: config 11 has no interface number 0 [ 1561.749410][ T10] usb 1-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1561.773035][ T10] usb 1-1: config 11 interface 244 has no altsetting 0 [ 1561.794282][ T10] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 1561.813874][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.832140][ T10] usb 1-1: Product: syz [ 1561.840586][ T10] usb 1-1: Manufacturer: syz [ 1561.850549][ T10] usb 1-1: SerialNumber: syz [ 1562.426966][ T10] usb 1-1: USB disconnect, device number 70 [ 1565.096179][T20483] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1565.105865][T20483] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1565.843044][ T30] audit: type=1400 audit(1741613055.809:2118): avc: denied { sys_chroot } for pid=20495 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1565.868530][ T30] audit: type=1400 audit(1741613055.839:2119): avc: denied { setgid } for pid=20495 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1565.936130][ T30] audit: type=1400 audit(1741613055.839:2120): avc: denied { setrlimit } for pid=20495 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 1566.129081][T20503] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1566.138687][T20503] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1566.312976][ T10] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1566.446625][ T30] audit: type=1400 audit(1741613056.419:2121): avc: denied { read } for pid=20505 comm="syz.3.3557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1566.626454][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1566.658118][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1566.699764][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=7a26, bcdDevice=ad.13 [ 1566.715138][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.731205][ T10] usb 1-1: config 0 descriptor?? [ 1567.042684][ T5914] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1567.222393][ T10] wacom 0003:056A:7A26.0003: unknown main item tag 0xd [ 1567.238661][ T10] wacom 0003:056A:7A26.0003: Unknown device_type for 'HID 056a:7a26'. Ignoring. [ 1567.248475][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 1567.260555][ T5914] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1567.280387][ T5914] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1567.415703][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.459873][ T5914] usb 6-1: config 0 descriptor?? [ 1567.507712][ T5914] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input21 [ 1567.531776][ T9702] usb 1-1: USB disconnect, device number 71 [ 1567.694273][ T5179] bcm5974 6-1:0.0: could not read from device [ 1567.760747][ T5914] bcm5974 6-1:0.0: could not read from device [ 1567.825935][ T5179] bcm5974 6-1:0.0: could not read from device [ 1567.854737][ T5914] input: failed to attach handler mousedev to device input21, error: -5 [ 1567.891311][ T5179] bcm5974 6-1:0.0: could not read from device [ 1567.893833][ T5914] usb 6-1: USB disconnect, device number 56 [ 1568.274661][T20579] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3573'. [ 1568.567062][T20590] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1568.576786][T20590] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1568.587793][ T5914] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1568.841734][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 1568.986280][ T5914] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 1569.036076][ T5914] usb 1-1: config 0 has no interface number 0 [ 1569.060469][T20591] ALSA: seq fatal error: cannot create timer (-22) [ 1569.071592][ T5914] usb 1-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1569.090659][ T5914] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 1569.108851][ T5914] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1569.121031][ T5914] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1569.135074][ T5914] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1569.153915][ T5914] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 1569.168040][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.281019][ T5914] usb 1-1: Product: syz [ 1569.294221][ T5914] usb 1-1: Manufacturer: syz [ 1569.298868][ T5914] usb 1-1: SerialNumber: syz [ 1569.342929][ T5914] usb 1-1: config 0 descriptor?? [ 1569.349495][T20576] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1569.878483][ T5914] etas_es58x 1-1:0.219: Starting syz syz (Serial Number syz) [ 1569.901069][T14892] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1570.131902][ T5914] etas_es58x 1-1:0.219: could not parse product info: 'ࡃ' [ 1570.333202][T14892] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1570.350212][T14892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.359876][T14892] usb 6-1: config 0 descriptor?? [ 1570.431022][T19909] usb 1-1: USB disconnect, device number 72 [ 1570.440559][T20626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3585'. [ 1570.464598][T19909] etas_es58x 1-1:0.219: Disconnecting syz syz [ 1570.488349][T20626] openvswitch: netlink: VXLAN extension message has 151 unknown bytes. [ 1570.586512][T14892] ath6kl: Failed to submit usb control message: -71 [ 1570.605391][T14892] ath6kl: unable to send the bmi data to the device: -71 [ 1570.616478][T14892] ath6kl: Unable to send get target info: -71 [ 1570.643898][T14892] ath6kl: Failed to init ath6kl core: -71 [ 1570.650167][T14892] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1570.690940][T14892] usb 6-1: USB disconnect, device number 57 [ 1571.353832][ T10] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1572.310329][T20675] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1572.319874][T20675] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1572.421188][ T10] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1572.429295][ T10] usb 1-1: config 0 has no interface number 0 [ 1572.431718][T20680] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3597'. [ 1572.437183][ T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1572.477779][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.486150][ T10] usb 1-1: Product: syz [ 1572.490511][ T10] usb 1-1: Manufacturer: syz [ 1572.495107][ T10] usb 1-1: SerialNumber: syz [ 1572.523740][ T10] usb 1-1: config 0 descriptor?? [ 1572.566494][ T10] hub 1-1:0.2: bad descriptor, ignoring hub [ 1572.631479][ T10] hub 1-1:0.2: probe with driver hub failed with error -5 [ 1572.712061][ T10] f81232 1-1:0.2: f81534a converter detected [ 1572.767765][ T10] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1572.801511][ T10] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1572.847742][ T10] usb 1-1: USB disconnect, device number 73 [ 1572.870490][ T10] f81232 1-1:0.2: device disconnected [ 1574.095697][T20710] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3607'. [ 1576.778106][T20733] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1576.787721][T20733] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1578.072718][T20744] bond0: entered promiscuous mode [ 1578.118050][T20744] bond_slave_0: entered promiscuous mode [ 1578.123824][T20744] bond_slave_1: entered promiscuous mode [ 1578.205090][T20744] bond0: left promiscuous mode [ 1578.217095][T20744] bond_slave_0: left promiscuous mode [ 1578.218288][T20754] ALSA: seq fatal error: cannot create timer (-22) [ 1578.936719][T20744] bond_slave_1: left promiscuous mode [ 1579.005071][T20764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3619'. [ 1579.386927][T20781] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1580.172763][ T5898] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1580.367156][ T5898] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1580.405212][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.731710][ T5898] usb 1-1: config 0 descriptor?? [ 1580.881013][ T5898] ath6kl: Failed to submit usb control message: -71 [ 1580.888955][ T5898] ath6kl: unable to send the bmi data to the device: -71 [ 1580.901996][ T5898] ath6kl: Unable to send get target info: -71 [ 1580.912431][ T5898] ath6kl: Failed to init ath6kl core: -71 [ 1580.921258][ T5898] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1581.223854][ T5898] usb 1-1: USB disconnect, device number 74 [ 1582.697523][T20832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3635'. [ 1583.327604][T20843] ALSA: seq fatal error: cannot create timer (-22) [ 1583.344984][T20842] openvswitch: netlink: Actions may not be safe on all matching packets [ 1583.517624][T20848] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1583.857437][T20850] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3641'. [ 1584.783654][ T5898] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1584.928849][T20870] ipt_rpfilter: unknown options [ 1585.127376][ T5898] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1585.139574][T20878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3651'. [ 1585.145643][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.079396][ T5898] usb 1-1: config 0 descriptor?? [ 1586.231597][T20889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3652'. [ 1586.728956][T20909] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3655'. [ 1586.738915][ T5914] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1587.262423][ T5898] ath6kl: Failed to submit usb control message: -110 [ 1587.269197][ T5898] ath6kl: unable to send the bmi data to the device: -110 [ 1587.349464][ T5898] ath6kl: Unable to send get target info: -110 [ 1587.376518][ T5898] ath6kl: Failed to init ath6kl core: -110 [ 1587.393342][ T5898] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1587.445926][ T5898] usb 1-1: USB disconnect, device number 75 [ 1587.463731][T20916] ipt_rpfilter: unknown options [ 1587.512358][ T5914] usb 6-1: Using ep0 maxpacket: 32 [ 1587.531475][ T5914] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1587.567549][ T5914] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1587.602752][ T5914] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1587.618653][ T5914] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 1587.638082][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.693053][ T5914] usb 6-1: config 0 descriptor?? [ 1587.820883][T20931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3661'. [ 1588.355182][ T5914] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 1588.362449][ T5914] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 1588.369689][ T5914] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 1588.388822][ T5914] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 1588.471553][ T5914] corsair 0003:1B1C:1B3E.0004: failed to start in urb: -90 [ 1588.492564][ T5914] corsair 0003:1B1C:1B3E.0004: hidraw0: USB HID v0.7f Device [HID 1b1c:1b3e] on usb-dummy_hcd.5-1/input0 [ 1588.532910][ T5914] usb 6-1: USB disconnect, device number 58 [ 1589.196428][T20964] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3669'. [ 1590.337154][T20980] xt_hashlimit: size too large, truncated to 1048576 [ 1591.473091][T21007] bond0: entered promiscuous mode [ 1591.485259][T21007] bond_slave_0: entered promiscuous mode [ 1591.491490][T21007] bond_slave_1: entered promiscuous mode [ 1591.509121][T21007] bond0: left promiscuous mode [ 1591.519224][ T30] audit: type=1400 audit(1741613081.502:2122): avc: denied { shutdown } for pid=21003 comm="syz.5.3679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1591.520706][T21007] bond_slave_0: left promiscuous mode [ 1591.570489][T21007] bond_slave_1: left promiscuous mode [ 1591.595954][T18960] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1591.612648][T18960] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1591.633072][T18960] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1591.770709][T18960] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1591.789990][T18960] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1591.799214][T18960] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1592.105626][ T30] audit: type=1400 audit(1741613082.002:2123): avc: denied { mounton } for pid=21011 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1592.193842][T20911] syz_tun (unregistering): left allmulticast mode [ 1592.252846][T20911] bond0: (slave syz_tun): Releasing backup interface [ 1592.306815][T21011] »»»»»» speed is unknown, defaulting to 1000 [ 1593.086451][ T6264] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.292636][T21011] »»»»»» speed is unknown, defaulting to 1000 [ 1593.330894][T21011] wlan0 speed is unknown, defaulting to 1000 [ 1593.526201][T20002] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1593.791541][T20002] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1593.902664][T20002] usb 1-1: config 0 has no interface number 0 [ 1593.960135][ T6264] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.970399][T20002] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1593.970425][T20002] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.970443][T20002] usb 1-1: Product: syz [ 1593.970458][T20002] usb 1-1: Manufacturer: syz [ 1593.970473][T20002] usb 1-1: SerialNumber: syz [ 1593.972730][T20002] usb 1-1: config 0 descriptor?? [ 1594.020572][T21046] ALSA: seq fatal error: cannot create timer (-22) [ 1594.049128][T20002] hub 1-1:0.2: bad descriptor, ignoring hub [ 1594.140812][T15522] Bluetooth: hci0: command tx timeout [ 1594.144916][T20002] hub 1-1:0.2: probe with driver hub failed with error -5 [ 1594.161219][ T6264] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.181512][T20002] f81232 1-1:0.2: f81534a converter detected [ 1594.262171][T20002] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1594.269763][ T5898] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1594.411561][ T6264] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.622677][ T5898] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1594.790843][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.813895][T20002] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1594.872806][ T5898] usb 6-1: config 0 descriptor?? [ 1594.873836][T20002] usb 1-1: USB disconnect, device number 76 [ 1594.921145][T20002] f81232 1-1:0.2: device disconnected [ 1595.747085][ T5898] ath6kl: Failed to submit usb control message: -71 [ 1595.754353][ T5898] ath6kl: unable to send the bmi data to the device: -71 [ 1595.763753][ T5898] ath6kl: Unable to send get target info: -71 [ 1595.770852][ T5898] ath6kl: Failed to init ath6kl core: -71 [ 1595.777039][ T5898] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1595.793501][ T5898] usb 6-1: USB disconnect, device number 59 [ 1595.812584][ T6264] bridge_slave_1: left allmulticast mode [ 1595.818641][ T6264] bridge_slave_1: left promiscuous mode [ 1595.871264][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.918593][ T6264] bridge_slave_0: left allmulticast mode [ 1595.929092][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.288592][T15522] Bluetooth: hci0: command tx timeout [ 1596.824448][ T6264] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1597.126595][ T6264] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1598.387770][T15522] Bluetooth: hci0: command tx timeout [ 1598.397407][ T6264] batman_adv: batadv0: Removing interface: gretap1 [ 1599.096986][T20002] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1599.256699][T20002] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1599.271069][T20002] usb 1-1: config 0 has no interface number 0 [ 1599.280848][T20002] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1599.297161][T20002] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.311797][T20002] usb 1-1: Product: syz [ 1599.316006][T20002] usb 1-1: Manufacturer: syz [ 1599.321936][T20002] usb 1-1: SerialNumber: syz [ 1599.349040][T20002] usb 1-1: config 0 descriptor?? [ 1599.356211][T20002] hub 1-1:0.2: bad descriptor, ignoring hub [ 1599.364708][T20002] hub 1-1:0.2: probe with driver hub failed with error -5 [ 1599.372503][T20002] f81232 1-1:0.2: f81534a converter detected [ 1599.529028][ T6264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1599.540848][ T6264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1599.551009][ T6264] bond0 (unregistering): Released all slaves [ 1599.585213][T21119] bond0: entered promiscuous mode [ 1599.590701][T20002] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1599.600048][T21119] bond_slave_0: entered promiscuous mode [ 1599.613007][T20002] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1599.621038][T21119] bond_slave_1: entered promiscuous mode [ 1599.647009][T20002] usb 1-1: USB disconnect, device number 77 [ 1599.649603][T21119] bond0: left promiscuous mode [ 1599.657786][T21119] bond_slave_0: left promiscuous mode [ 1599.664397][T20002] f81232 1-1:0.2: device disconnected [ 1599.779934][T21119] bond_slave_1: left promiscuous mode [ 1599.794530][T18701] tipc: Resetting bearer [ 1599.803871][T21011] chnl_net:caif_netlink_parms(): no params data found [ 1599.813988][ T6264] tipc: Disabling bearer [ 1600.493555][T15522] Bluetooth: hci0: command tx timeout [ 1600.503176][ T6264] tipc: Left network mode [ 1602.188222][T21011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1602.333822][T21011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.487812][T21011] bridge_slave_0: entered allmulticast mode [ 1602.517475][T21011] bridge_slave_0: entered promiscuous mode [ 1602.537791][T21011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.563814][T21011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.590691][T21011] bridge_slave_1: entered allmulticast mode [ 1602.608499][T21011] bridge_slave_1: entered promiscuous mode [ 1602.665512][T21174] ALSA: seq fatal error: cannot create timer (-22) [ 1602.678531][T21011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1602.767924][T21011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1602.852940][T21011] team0: Port device team_slave_0 added [ 1602.940085][ T5898] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1602.953188][T21011] team0: Port device team_slave_1 added [ 1603.378464][ T5898] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1603.403206][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.425607][ T5898] usb 1-1: config 0 descriptor?? [ 1603.458060][T21011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1603.496482][T21011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1603.552889][T21011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1603.619988][T21011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1603.629009][T21011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1603.683962][ T5898] ath6kl: Failed to submit usb control message: -71 [ 1603.697678][ T5898] ath6kl: unable to send the bmi data to the device: -71 [ 1603.708769][T21011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1603.722574][ T5898] ath6kl: Unable to send get target info: -71 [ 1603.740925][ T5898] ath6kl: Failed to init ath6kl core: -71 [ 1603.753172][ T5898] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1603.780248][T21203] ALSA: seq fatal error: cannot create timer (-22) [ 1603.790457][ T5898] usb 1-1: USB disconnect, device number 78 [ 1603.992048][T21011] hsr_slave_0: entered promiscuous mode [ 1604.011510][T21011] hsr_slave_1: entered promiscuous mode [ 1604.104024][T14892] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1604.323452][T21218] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3726'. [ 1604.734836][T14892] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1604.748870][T14892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.749557][ T6264] hsr_slave_0: left promiscuous mode [ 1604.773330][T14892] usb 6-1: config 0 descriptor?? [ 1604.789328][ T6264] hsr_slave_1: left promiscuous mode [ 1604.796412][ T6264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1604.805273][ T6264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1604.813997][ T6264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1604.827956][ T6264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1604.850756][ T6264] veth0_macvtap: left promiscuous mode [ 1605.581854][ T6264] pimreg (unregistering): left allmulticast mode [ 1605.601582][T14892] ath6kl: Failed to submit usb control message: -71 [ 1605.608458][T14892] ath6kl: unable to send the bmi data to the device: -71 [ 1605.615715][T14892] ath6kl: Unable to send get target info: -71 [ 1606.212033][T14892] ath6kl: Failed to init ath6kl core: -71 [ 1606.224616][T14892] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1606.240915][T14892] usb 6-1: USB disconnect, device number 60 [ 1606.914208][ T9702] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1607.057290][T21011] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1607.113979][ T9702] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1607.149091][ T9702] usb 6-1: config 0 has no interface number 0 [ 1607.172621][ T9702] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1607.183725][ T9702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.209196][ T9702] usb 6-1: Product: syz [ 1607.222566][T21251] ALSA: seq fatal error: cannot create timer (-22) [ 1607.229941][ T9702] usb 6-1: Manufacturer: syz [ 1607.238038][ T9702] usb 6-1: SerialNumber: syz [ 1607.321026][ T9702] usb 6-1: config 0 descriptor?? [ 1607.367317][ T9702] hub 6-1:0.2: bad descriptor, ignoring hub [ 1607.431427][ T9702] hub 6-1:0.2: probe with driver hub failed with error -5 [ 1607.448305][ T9702] f81232 6-1:0.2: f81534a converter detected [ 1607.521321][T21011] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1607.583537][ T9702] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1607.593248][ T5866] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1607.603109][T21011] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1607.621253][ T9702] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1607.644139][T21011] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1607.657372][ T9702] usb 6-1: USB disconnect, device number 61 [ 1607.674757][ T9702] f81232 6-1:0.2: device disconnected [ 1607.776120][ T5866] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1607.798246][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.842529][ T5866] usb 1-1: config 0 descriptor?? [ 1607.871277][T21011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1607.877824][ T6264] IPVS: stop unused estimator thread 0... [ 1607.899425][T21011] 8021q: adding VLAN 0 to HW filter on device team0 [ 1607.927005][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.934099][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1608.016765][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 1608.023882][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1608.324552][T21278] ALSA: seq fatal error: cannot create timer (-22) [ 1608.506903][T21011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1608.641986][ T5897] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1608.914631][ T5897] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1608.942143][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.024994][ T5897] usb 6-1: config 0 descriptor?? [ 1609.441255][ T5866] ath6kl: Failed to submit usb control message: -71 [ 1609.447895][ T5866] ath6kl: unable to send the bmi data to the device: -71 [ 1609.468624][T21011] veth0_vlan: entered promiscuous mode [ 1609.494559][ T5866] ath6kl: Unable to send get target info: -71 [ 1609.521410][ T5866] ath6kl: Failed to init ath6kl core: -71 [ 1609.545745][ T5866] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1609.584041][T21011] veth1_vlan: entered promiscuous mode [ 1609.635889][ T5866] usb 1-1: USB disconnect, device number 79 [ 1609.708733][T21011] veth0_macvtap: entered promiscuous mode [ 1609.737179][T21011] veth1_macvtap: entered promiscuous mode [ 1610.284637][T21011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1610.306128][T21011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.318379][T21011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1610.329004][T21011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.339221][T21011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1610.349757][T21011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.359860][T21011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1610.370411][T21011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.395945][T21011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1610.429931][T21011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1610.445135][ T5897] ath6kl: Failed to submit usb control message: -71 [ 1610.455433][T21011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.465335][ T5897] ath6kl: unable to send the bmi data to the device: -71 [ 1610.472534][T21011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1610.483057][ T5897] ath6kl: Unable to send get target info: -71 [ 1610.489879][ T5897] ath6kl: Failed to init ath6kl core: -71 [ 1610.495745][T21011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.506186][ T5897] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1610.514755][T21011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1610.555704][ T5897] usb 6-1: USB disconnect, device number 62 [ 1610.582285][T21011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.607370][T21011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1610.640844][T21011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.678292][T21011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1610.709240][T21011] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.730386][T21011] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.740518][T21011] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.750894][T21011] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.868272][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1610.888765][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.922505][T18701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1610.936625][T18701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.947040][ T30] audit: type=1400 audit(1741613100.941:2124): avc: denied { mounton } for pid=21011 comm="syz-executor" path="/root/syzkaller.3WLlzb/syz-tmp" dev="sda1" ino=1952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1610.973425][ T5914] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1610.980643][ T30] audit: type=1400 audit(1741613100.941:2125): avc: denied { mounton } for pid=21011 comm="syz-executor" path="/root/syzkaller.3WLlzb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1611.047244][ T30] audit: type=1400 audit(1741613100.941:2126): avc: denied { mounton } for pid=21011 comm="syz-executor" path="/root/syzkaller.3WLlzb/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=56875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1611.165771][ T5914] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1611.187649][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.231664][ T5914] usb 1-1: config 0 descriptor?? [ 1611.238874][ T30] audit: type=1400 audit(1741613100.971:2127): avc: denied { mounton } for pid=21011 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1611.262700][ T30] audit: type=1400 audit(1741613101.021:2128): avc: denied { mounton } for pid=21011 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1611.902374][ T5914] creative-sb0540 0003:041E:3100.0005: unknown main item tag 0x0 [ 1611.911185][ T5914] creative-sb0540 0003:041E:3100.0005: item fetching failed at offset 4/5 [ 1611.923716][ T5914] creative-sb0540 0003:041E:3100.0005: parse failed [ 1611.930474][ T5914] creative-sb0540 0003:041E:3100.0005: probe with driver creative-sb0540 failed with error -22 [ 1612.192477][T14892] usb 1-1: USB disconnect, device number 80 [ 1613.419633][T21367] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 1613.426262][T21367] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1613.449371][ T5914] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1613.787585][T21367] vhci_hcd vhci_hcd.0: Device attached [ 1614.021813][T14892] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1614.059342][ T5914] usb 6-1: Using ep0 maxpacket: 32 [ 1614.075446][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1614.668876][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1614.679199][ T5914] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1614.688283][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.709102][ T5914] usb 6-1: config 0 descriptor?? [ 1614.729116][T21368] vhci_hcd: connection reset by peer [ 1614.742686][T18701] vhci_hcd: stop threads [ 1614.754098][T18701] vhci_hcd: release socket [ 1614.777238][T18701] vhci_hcd: disconnect device [ 1614.794048][T21392] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3762'. [ 1614.830623][T21392] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3762'. [ 1615.191551][ T5914] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0xe [ 1615.202909][ T5914] kovaplus 0003:1E7D:2D50.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 1615.426769][ T5914] usb 6-1: USB disconnect, device number 63 [ 1615.818797][ T5897] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 1616.006141][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1616.046901][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1616.071205][ T5897] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1616.103260][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.183637][ T5897] usb 1-1: config 0 descriptor?? [ 1616.623023][ T5897] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1617.051856][ T5897] usb 1-1: USB disconnect, device number 81 [ 1617.797321][ T5897] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1617.997711][ T5897] usb 6-1: Using ep0 maxpacket: 8 [ 1618.076194][ T5897] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1618.121661][ T5897] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1618.143290][ T5897] usb 6-1: Product: syz [ 1618.158079][ T5897] usb 6-1: Manufacturer: syz [ 1618.167987][ T5897] usb 6-1: SerialNumber: syz [ 1618.184527][ T5897] usb 6-1: config 0 descriptor?? [ 1618.273625][ T5897] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1618.362287][T21479] ALSA: seq fatal error: cannot create timer (-22) [ 1618.541413][T21487] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1618.689251][ T5898] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1618.813965][ T5897] gspca_zc3xx: reg_w_i err -110 [ 1618.933106][ T5897] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1618.942188][T15522] Bluetooth: hci0: command tx timeout [ 1619.079711][ T5898] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1619.098902][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.155322][ T5898] usb 7-1: config 0 descriptor?? [ 1619.165006][T14892] vhci_hcd: vhci_device speed not set [ 1619.568684][ T5898] ath6kl: Failed to submit usb control message: -71 [ 1619.592685][ T5898] ath6kl: unable to send the bmi data to the device: -71 [ 1619.610081][ T5898] ath6kl: Unable to send get target info: -71 [ 1619.621548][ T5898] ath6kl: Failed to init ath6kl core: -71 [ 1619.646843][ T5898] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1619.682174][ T5898] usb 7-1: USB disconnect, device number 2 [ 1620.586687][T14892] usb 6-1: USB disconnect, device number 64 [ 1620.706789][T21541] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3802'. [ 1620.726798][T21543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3801'. [ 1620.805713][ T5898] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1621.326876][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1621.339685][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1621.350045][ T5898] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1621.359185][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.369009][ T5898] usb 7-1: config 0 descriptor?? [ 1621.475420][T14892] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1622.191817][ T5898] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 1622.199356][ T5898] arvo 0003:1E7D:30D4.0007: item fetching failed at offset 5/7 [ 1622.208228][ T5898] arvo 0003:1E7D:30D4.0007: parse failed [ 1622.214137][ T5898] arvo 0003:1E7D:30D4.0007: probe with driver arvo failed with error -22 [ 1622.223026][T14892] usb 6-1: Using ep0 maxpacket: 32 [ 1622.269464][ T5898] usb 7-1: USB disconnect, device number 3 [ 1622.282759][T14892] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 1622.301735][T14892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.313155][T14892] usb 6-1: Product: syz [ 1622.318198][T14892] usb 6-1: Manufacturer: syz [ 1622.323521][T14892] usb 6-1: SerialNumber: syz [ 1622.332934][T14892] usb 6-1: config 0 descriptor?? [ 1622.340954][T14892] hub 6-1:0.0: bad descriptor, ignoring hub [ 1622.964400][T14892] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1622.972837][T14892] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1623.038943][T21580] geneve0: entered allmulticast mode [ 1623.434413][ T5898] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1623.476364][T14892] gspca_vc032x: reg_r err -71 [ 1623.491839][T14892] gspca_vc032x: I2c Bus Busy Wait 00 [ 1623.525377][T21595] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3816'. [ 1623.534664][T14892] gspca_vc032x: I2c Bus Busy Wait 00 [ 1623.540481][T14892] gspca_vc032x: I2c Bus Busy Wait 00 [ 1623.547998][T14892] gspca_vc032x: I2c Bus Busy Wait 00 [ 1623.557876][T14892] gspca_vc032x: I2c Bus Busy Wait 00 [ 1623.604900][ T5898] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1623.648835][T14892] gspca_vc032x: I2c Bus Busy Wait 00 [ 1623.692887][ T5898] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1623.720275][T14892] gspca_vc032x: I2c Bus Busy Wait 00 [ 1623.764538][T14892] gspca_vc032x: I2c Bus Busy Wait 00 [ 1623.780618][ T5898] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1623.806103][T14892] gspca_vc032x: I2c Bus Busy Wait 00 [ 1623.811416][T14892] gspca_vc032x: I2c Bus Busy Wait 00 [ 1623.820544][ T5898] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1623.834128][T14892] gspca_vc032x: I2c Bus Busy Wait 00 [ 1623.839428][T14892] gspca_vc032x: I2c Bus Busy Wait 00 [ 1623.845398][ T5898] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1623.864058][T14892] gspca_vc032x: I2c Bus Busy Wait 00 [ 1623.869369][T14892] gspca_vc032x: I2c Bus Busy Wait 00 [ 1623.876542][T14892] gspca_vc032x: I2c Bus Busy Wait 00 [ 1623.882747][T14892] gspca_vc032x: I2c Bus Busy Wait 00 [ 1623.888380][T14892] gspca_vc032x: I2c Bus Busy Wait 00 [ 1623.894251][T14892] gspca_vc032x: I2c Bus Busy Wait 00 [ 1623.899654][ T5898] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1623.912923][T14892] gspca_vc032x: I2c Bus Busy Wait 00 [ 1623.919113][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1623.941751][T14892] gspca_vc032x: Unknown sensor... [ 1623.958988][T14892] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 1624.129149][ T5898] usb 1-1: Product: syz [ 1624.175098][ T5898] usb 1-1: Manufacturer: syz [ 1624.307876][T14892] usb 6-1: USB disconnect, device number 65 [ 1624.372307][ T5898] cdc_wdm 1-1:1.0: skipping garbage [ 1624.390856][ T5898] cdc_wdm 1-1:1.0: skipping garbage [ 1624.413396][ T5898] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1624.420488][ T5898] cdc_wdm 1-1:1.0: Unknown control protocol [ 1624.476694][T21607] QAT: Invalid ioctl 1074024464 [ 1625.201853][ T5898] usb 1-1: USB disconnect, device number 82 [ 1625.417088][T21619] ALSA: seq fatal error: cannot create timer (-22) [ 1625.554908][T21626] xt_hashlimit: size too large, truncated to 1048576 [ 1625.991821][T14892] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1627.013799][T14892] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1627.023420][T14892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.033714][T14892] usb 7-1: config 0 descriptor?? [ 1627.262381][T14892] ath6kl: Failed to submit usb control message: -71 [ 1627.279170][T14892] ath6kl: unable to send the bmi data to the device: -71 [ 1627.292473][T14892] ath6kl: Unable to send get target info: -71 [ 1627.309341][T14892] ath6kl: Failed to init ath6kl core: -71 [ 1627.322760][T14892] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1627.346620][T14892] usb 7-1: USB disconnect, device number 4 [ 1627.372541][T21332] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1627.377436][ T30] audit: type=1400 audit(1741613117.380:2129): avc: denied { remount } for pid=21658 comm="syz.5.3837" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1628.042185][T21332] usb 1-1: Using ep0 maxpacket: 16 [ 1628.052926][T21332] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1628.072617][T21332] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.084564][T21332] usb 1-1: config 0 has no interface number 0 [ 1628.093302][T21332] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1628.102661][T21332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.111059][T21332] usb 1-1: Product: syz [ 1628.119775][T21332] usb 1-1: Manufacturer: syz [ 1628.125708][T21332] usb 1-1: SerialNumber: syz [ 1628.137220][T21332] usb 1-1: config 0 descriptor?? [ 1628.282178][ T5914] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1628.354852][T21332] usb 1-1: Found UVC 0.00 device syz (046d:08d3) [ 1628.371380][T21332] usb 1-1: No valid video chain found. [ 1628.467123][ T5914] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1628.478736][ T5914] usb 6-1: config 0 has no interface number 0 [ 1628.493163][ T5914] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1628.506543][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.515080][ T5914] usb 6-1: Product: syz [ 1628.519309][ T5914] usb 6-1: Manufacturer: syz [ 1628.528433][ T5914] usb 6-1: SerialNumber: syz [ 1628.542209][ T5914] usb 6-1: config 0 descriptor?? [ 1628.549916][ T5914] hub 6-1:0.2: bad descriptor, ignoring hub [ 1628.571779][ T5914] hub 6-1:0.2: probe with driver hub failed with error -5 [ 1628.585509][T21332] usb 1-1: USB disconnect, device number 83 [ 1628.603962][ T5914] f81232 6-1:0.2: f81534a converter detected [ 1628.778862][ T5914] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1628.791573][ T5914] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1628.822326][ T5914] usb 6-1: USB disconnect, device number 66 [ 1628.830162][ T5914] f81232 6-1:0.2: device disconnected [ 1629.869565][T21700] block nbd5: not configured, cannot reconfigure [ 1629.886075][T21702] netlink: 'syz.3.3849': attribute type 2 has an invalid length. [ 1629.991141][ T5914] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1630.018223][T21708] ALSA: seq fatal error: cannot create timer (-22) [ 1630.191229][ T5914] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1630.224466][ T5914] usb 1-1: config 0 has no interface number 0 [ 1630.265570][ T5914] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1630.275172][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.301384][ T5818] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1630.308994][ T5914] usb 1-1: Product: syz [ 1630.317077][ T5914] usb 1-1: Manufacturer: syz [ 1630.327513][ T5914] usb 1-1: SerialNumber: syz [ 1630.468715][ T5818] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1630.524974][ T5914] usb 1-1: config 0 descriptor?? [ 1630.556200][ T5914] hub 1-1:0.2: bad descriptor, ignoring hub [ 1630.565761][ T5914] hub 1-1:0.2: probe with driver hub failed with error -5 [ 1631.463983][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.481445][ T5818] usb 7-1: config 0 descriptor?? [ 1631.507674][T15522] Bluetooth: hci0: command tx timeout [ 1631.553355][ T5914] f81232 1-1:0.2: f81534a converter detected [ 1631.594626][ T5914] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1631.926105][ T5914] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1631.950746][ T5914] usb 1-1: USB disconnect, device number 84 [ 1631.970263][ T5914] f81232 1-1:0.2: device disconnected [ 1632.407890][T21752] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3867'. [ 1633.141350][ T5818] ath6kl: Failed to submit usb control message: -110 [ 1633.184723][ T5818] ath6kl: unable to send the bmi data to the device: -110 [ 1633.812309][ T5818] ath6kl: Unable to send get target info: -110 [ 1633.832914][ T5818] ath6kl: Failed to init ath6kl core: -110 [ 1633.839328][ T5818] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1634.375360][ T5818] usb 7-1: USB disconnect, device number 5 [ 1634.420988][T21767] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1635.456626][T21794] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3880'. [ 1636.904218][T21810] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1636.996381][T21806] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3881'. [ 1637.380936][T21822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1639.153431][T21869] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3900'. [ 1639.183103][T21869] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3900'. [ 1639.472703][T21876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3902'. [ 1639.625492][T21876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3902'. [ 1639.964214][T14892] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1640.063810][ T30] audit: type=1400 audit(1741613130.066:2130): avc: denied { nlmsg_write } for pid=21885 comm="syz.6.3905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1640.146349][T14892] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1640.250226][T14892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1640.399686][T14892] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1640.502443][T21889] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3906'. [ 1640.516140][T14892] usb 1-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.00 [ 1640.558171][T14892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.584571][T14892] usb 1-1: config 0 descriptor?? [ 1641.374329][T14892] asus 0003:0B05:1866.0008: item fetching failed at offset 6/7 [ 1641.410243][T14892] asus 0003:0B05:1866.0008: Asus hid parse failed: -22 [ 1641.568817][T14892] asus 0003:0B05:1866.0008: probe with driver asus failed with error -22 [ 1641.583256][T14892] usb 1-1: USB disconnect, device number 85 [ 1643.139617][T21929] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 1643.146243][T21929] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1643.210057][T21929] vhci_hcd vhci_hcd.0: Device attached [ 1643.218932][T21929] xt_hashlimit: size too large, truncated to 1048576 [ 1643.472748][T21932] vhci_hcd: connection closed [ 1643.478488][T12628] vhci_hcd: stop threads [ 1643.566347][T12628] vhci_hcd: release socket [ 1643.594231][T14892] usb 43-1: new low-speed USB device number 4 using vhci_hcd [ 1643.622031][T12628] vhci_hcd: disconnect device [ 1643.950657][T21964] Bluetooth: MGMT ver 1.23 [ 1643.954938][T15522] Bluetooth: hci0: command tx timeout [ 1644.637012][T21332] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1645.123833][T21332] usb 7-1: Using ep0 maxpacket: 16 [ 1645.304969][T21978] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3927'. [ 1645.314439][T21978] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3927'. [ 1645.482620][T21332] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 1645.677822][T21332] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 1645.723355][T21332] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1645.780515][T21332] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1645.870821][T21332] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1645.903318][T21332] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.911570][T21332] usb 7-1: Product: syz [ 1645.974985][T21332] usb 7-1: Manufacturer: syz [ 1645.979608][T21332] usb 7-1: SerialNumber: syz [ 1646.003965][T21991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3932'. [ 1646.044234][T21332] usb 7-1: config 0 descriptor?? [ 1646.087773][T21949] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1646.108540][ C0] port100 7-1:0.0: NFC: Urb failure (status -71) [ 1646.747588][T21332] port100 7-1:0.0: NFC: Could not get supported command types [ 1646.861967][T21332] usb 7-1: USB disconnect, device number 6 [ 1648.179910][T22024] xt_hashlimit: size too large, truncated to 1048576 [ 1648.828728][T14892] vhci_hcd: vhci_device speed not set [ 1649.511014][T22044] : entered promiscuous mode [ 1649.518625][T20002] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1649.541391][T22050] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3948'. [ 1650.047408][T20002] usb 6-1: Using ep0 maxpacket: 16 [ 1650.218604][T20002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1650.520510][T20002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1650.530917][T20002] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1650.752226][T20002] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1650.779958][ T30] audit: type=1400 audit(1741613140.781:2131): avc: denied { write } for pid=22076 comm="syz.0.3954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1650.904710][T20002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.041519][T20002] usb 6-1: config 0 descriptor?? [ 1651.329246][T22095] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3958'. [ 1651.556016][T22103] xt_hashlimit: size too large, truncated to 1048576 [ 1651.753479][T20002] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 1651.789934][T20002] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 1651.844152][T20002] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 1651.891411][T22108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3960'. [ 1651.924265][T22108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3960'. [ 1651.926750][T20002] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0009/input/input22 [ 1652.332755][T20002] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1652.512221][T20002] usb 6-1: USB disconnect, device number 67 [ 1652.971327][T22135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1654.116345][T22149] ipt_rpfilter: unknown options [ 1654.287014][ T30] audit: type=1400 audit(1741613144.293:2132): avc: denied { bind } for pid=22158 comm="syz.6.3974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1654.378552][T22164] ALSA: seq fatal error: cannot create timer (-22) [ 1654.668816][ T5818] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1654.850158][ T5818] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1654.899915][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.939641][ T5818] usb 6-1: config 0 descriptor?? [ 1655.245128][ T5914] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1655.266687][ T5818] ath6kl: Failed to submit usb control message: -71 [ 1655.293926][ T5818] ath6kl: unable to send the bmi data to the device: -71 [ 1655.301454][ T5818] ath6kl: Unable to send get target info: -71 [ 1655.319394][ T5818] ath6kl: Failed to init ath6kl core: -71 [ 1655.325605][ T5818] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1655.353121][ T5818] usb 6-1: USB disconnect, device number 68 [ 1655.399344][T20002] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1655.419607][ T5914] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1655.431338][ T5914] usb 1-1: config 0 has no interface number 0 [ 1655.444321][ T5914] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1655.456710][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.465984][ T5914] usb 1-1: Product: syz [ 1655.475600][ T5914] usb 1-1: Manufacturer: syz [ 1655.481254][ T5914] usb 1-1: SerialNumber: syz [ 1655.488005][ T5914] usb 1-1: config 0 descriptor?? [ 1655.497838][ T5914] hub 1-1:0.2: bad descriptor, ignoring hub [ 1655.505044][ T5914] hub 1-1:0.2: probe with driver hub failed with error -5 [ 1655.516032][ T5914] f81232 1-1:0.2: f81534a converter detected [ 1655.561541][T20002] usb 7-1: Using ep0 maxpacket: 16 [ 1655.568417][T20002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1655.580449][T20002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1655.590405][T20002] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1655.603546][T20002] usb 7-1: New USB device found, idVendor=05ac, idProduct=029a, bcdDevice= 0.00 [ 1655.613022][T20002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.624390][T20002] usb 7-1: config 0 descriptor?? [ 1655.712884][ T5914] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1655.720872][ T5914] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1655.749497][ T5914] usb 1-1: USB disconnect, device number 86 [ 1655.756807][ T5914] f81232 1-1:0.2: device disconnected [ 1656.046606][T22206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3992'. [ 1656.059583][T20002] apple 0003:05AC:029A.000A: unknown main item tag 0x0 [ 1656.070736][T22206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3992'. [ 1656.080677][T20002] apple 0003:05AC:029A.000A: hidraw0: USB HID v0.00 Device [HID 05ac:029a] on usb-dummy_hcd.6-1/input0 [ 1656.318514][T22204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1656.352431][T20002] usb 7-1: USB disconnect, device number 7 [ 1656.517113][T22218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1656.797623][ T5818] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1656.975948][T22226] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 1657.066859][ T5818] usb 1-1: Using ep0 maxpacket: 16 [ 1657.076833][ T5818] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1657.086902][ T5818] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1657.096521][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.738416][ T5818] usb 1-1: config 0 descriptor?? [ 1659.337252][T20002] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1659.416743][ T5818] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.000B/input/input23 [ 1659.568033][T20002] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1659.587792][T20002] usb 6-1: config 0 has no interface number 0 [ 1659.612362][T20002] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1659.624335][T20002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.662427][T20002] usb 6-1: Product: syz [ 1659.675424][T20002] usb 6-1: Manufacturer: syz [ 1659.682055][T22262] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1659.688582][T22262] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1659.700301][T20002] usb 6-1: SerialNumber: syz [ 1659.717625][T22262] vhci_hcd vhci_hcd.0: Device attached [ 1659.818019][T20002] usb 6-1: config 0 descriptor?? [ 1659.818251][ T5818] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.000B/input/input24 [ 1659.823958][T20002] hub 6-1:0.2: bad descriptor, ignoring hub [ 1659.860063][T22264] vhci_hcd: connection closed [ 1659.860316][T18701] vhci_hcd: stop threads [ 1659.886407][T20002] hub 6-1:0.2: probe with driver hub failed with error -5 [ 1659.893605][T18701] vhci_hcd: release socket [ 1659.899172][T20002] f81232 6-1:0.2: f81534a converter detected [ 1659.905238][T18701] vhci_hcd: disconnect device [ 1659.912233][ T5818] kye 0003:0458:5013.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 1659.926503][ T5914] vhci_hcd: vhci_device speed not set [ 1659.963142][ T5818] usb 1-1: USB disconnect, device number 87 [ 1660.067620][T22272] ALSA: seq fatal error: cannot create timer (-22) [ 1660.186083][T20002] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1660.193259][T20002] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1660.241510][T20002] usb 6-1: USB disconnect, device number 69 [ 1660.248870][T20002] f81232 6-1:0.2: device disconnected [ 1660.539440][ T5818] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1660.657769][T22280] netlink: 1272 bytes leftover after parsing attributes in process `syz.3.4018'. [ 1660.671153][T22280] openvswitch: netlink: Flow actions attr not present in new flow. [ 1661.136748][ T5818] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1661.146172][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.167454][ T5818] usb 1-1: config 0 descriptor?? [ 1661.401329][ T5818] ath6kl: Failed to submit usb control message: -71 [ 1661.408727][ T5818] ath6kl: unable to send the bmi data to the device: -71 [ 1661.422793][ T5818] ath6kl: Unable to send get target info: -71 [ 1661.438296][ T5818] ath6kl: Failed to init ath6kl core: -71 [ 1661.444507][ T5818] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1661.485458][ T5818] usb 1-1: USB disconnect, device number 88 [ 1662.782103][T22305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4025'. [ 1663.198806][T22314] ALSA: seq fatal error: cannot create timer (-22) [ 1663.514248][ T5818] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1663.823568][ T5818] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1663.835482][ T5897] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1663.872723][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.904803][ T5818] usb 7-1: config 0 descriptor?? [ 1664.426647][ T5897] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1664.437287][ T5897] usb 6-1: config 0 has no interface number 0 [ 1664.462902][ T5897] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1664.627239][ T5818] ath6kl: Failed to submit usb control message: -71 [ 1664.645903][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.654019][ T5818] ath6kl: unable to send the bmi data to the device: -71 [ 1664.769069][ T5897] usb 6-1: Product: syz [ 1664.773440][ T5818] ath6kl: Unable to send get target info: -71 [ 1664.780391][ T5897] usb 6-1: Manufacturer: syz [ 1664.785902][ T5897] usb 6-1: SerialNumber: syz [ 1664.799729][ T5897] usb 6-1: config 0 descriptor?? [ 1664.936014][T22337] xt_hashlimit: size too large, truncated to 1048576 [ 1664.978121][ T5818] ath6kl: Failed to init ath6kl core: -71 [ 1665.666479][ T5818] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1665.676703][ T5897] hub 6-1:0.2: bad descriptor, ignoring hub [ 1665.683516][ T5897] hub 6-1:0.2: probe with driver hub failed with error -5 [ 1665.747358][ T5818] usb 7-1: USB disconnect, device number 8 [ 1665.761002][ T5897] f81232 6-1:0.2: f81534a converter detected [ 1666.209684][ T5897] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1666.291231][ T5897] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1666.344657][ T5897] usb 6-1: USB disconnect, device number 70 [ 1666.351232][ T5897] f81232 6-1:0.2: device disconnected [ 1667.460293][T22354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4040'. [ 1668.551696][T21332] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1668.821874][T21332] usb 1-1: Using ep0 maxpacket: 16 [ 1668.887110][T21332] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1668.911575][T21332] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1669.925555][T21332] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1670.460833][T22383] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 1670.467459][T22383] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1670.475134][T22383] vhci_hcd vhci_hcd.0: Device attached [ 1670.495023][T18960] Bluetooth: hci0: command tx timeout [ 1670.502506][T22386] vhci_hcd: connection closed [ 1670.503288][ T6264] vhci_hcd: stop threads [ 1670.904075][T21332] usb 1-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1670.933284][ T6264] vhci_hcd: release socket [ 1670.937725][ T6264] vhci_hcd: disconnect device [ 1671.367399][T21332] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1671.386632][T22390] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 1671.393251][T22390] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1671.400965][T22390] vhci_hcd vhci_hcd.0: Device attached [ 1671.406654][T22395] vhci_hcd: connection closed [ 1671.407725][T22389] xt_hashlimit: size too large, truncated to 1048576 [ 1671.426781][T12628] vhci_hcd: stop threads [ 1671.431241][T12628] vhci_hcd: release socket [ 1671.439824][T12628] vhci_hcd: disconnect device [ 1671.447652][T22398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4052'. [ 1671.458412][T21332] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1671.475028][T21332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.506978][T21332] usb 1-1: config 0 descriptor?? [ 1672.065403][T21332] usbhid 1-1:0.0: can't add hid device: -71 [ 1672.090029][T15522] Bluetooth: hci4: unexpected event for opcode 0x0c58 [ 1672.157160][T21332] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1672.182152][T21332] usb 1-1: USB disconnect, device number 89 [ 1672.231965][T22409] ALSA: seq fatal error: cannot create timer (-22) [ 1672.275604][T22414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4059'. [ 1672.286543][T22414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1672.590180][T21332] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1672.628341][T22426] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1672.634881][T22426] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1672.655844][T22426] vhci_hcd vhci_hcd.0: Device attached [ 1673.079813][ T5818] usb 45-1: new low-speed USB device number 4 using vhci_hcd [ 1673.153856][T22429] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 1673.160476][T22429] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1673.169644][T22429] vhci_hcd vhci_hcd.0: Device attached [ 1673.176111][T22430] vhci_hcd: connection closed [ 1673.185280][ T62] vhci_hcd: stop threads [ 1673.198996][ T62] vhci_hcd: release socket [ 1673.208133][ T62] vhci_hcd: disconnect device [ 1673.234010][T21332] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1673.246470][T21332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.268313][T21332] usb 1-1: config 0 descriptor?? [ 1673.555796][T22427] vhci_hcd: connection reset by peer [ 1673.586283][ T30] audit: type=1400 audit(1741613163.342:2133): avc: denied { getopt } for pid=22439 comm="syz.3.4067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1673.649486][ T6264] vhci_hcd: stop threads [ 1673.925148][ T6264] vhci_hcd: release socket [ 1673.936032][ T6264] vhci_hcd: disconnect device [ 1673.973957][T21332] ath6kl: Failed to submit usb control message: -71 [ 1673.985458][T21332] ath6kl: unable to send the bmi data to the device: -71 [ 1673.992800][T21332] ath6kl: Unable to send get target info: -71 [ 1674.001505][T21332] ath6kl: Failed to init ath6kl core: -71 [ 1674.007697][T21332] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1674.056893][T21332] usb 1-1: USB disconnect, device number 90 [ 1674.454985][T22461] netlink: 368 bytes leftover after parsing attributes in process `syz.3.4075'. [ 1674.498529][T22461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4075'. [ 1674.509404][T15522] Bluetooth: hci4: command 0x0c1a tx timeout [ 1674.738623][ T5914] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1674.926879][T22496] 9pnet_fd: p9_fd_create_tcp (22496): problem binding to privport [ 1674.942885][ T5914] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1674.958522][ T5914] usb 6-1: config 0 has no interface number 0 [ 1674.988930][ T5914] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1675.008144][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.032402][ T5914] usb 6-1: Product: syz [ 1675.036961][ T5914] usb 6-1: Manufacturer: syz [ 1675.045607][ T5914] usb 6-1: SerialNumber: syz [ 1675.055960][T22504] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4095'. [ 1675.067354][ T5914] usb 6-1: config 0 descriptor?? [ 1675.086327][ T5914] hub 6-1:0.2: bad descriptor, ignoring hub [ 1675.106497][ T5914] hub 6-1:0.2: probe with driver hub failed with error -5 [ 1675.114817][T22506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4099'. [ 1675.116398][ T5914] f81232 6-1:0.2: f81534a converter detected [ 1675.156457][T22506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4099'. [ 1675.300598][ T5914] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1675.301258][T22516] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1675.328152][ T5914] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1675.388557][ T5914] usb 6-1: USB disconnect, device number 71 [ 1675.406839][ T5914] f81232 6-1:0.2: device disconnected [ 1675.415558][T22524] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4108'. [ 1675.514008][T22532] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1676.118185][T20002] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1781.115300][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1781.122260][ C0] rcu: 1-...!: (0 ticks this GP) idle=2fac/1/0x4000000000000000 softirq=90239/90239 fqs=0 [ 1781.133598][ C0] rcu: (detected by 0, t=10502 jiffies, g=71237, q=123 ncpus=2) [ 1781.141312][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1781.141336][ C1] NMI backtrace for cpu 1 [ 1781.141345][ C1] CPU: 1 UID: 0 PID: 22538 Comm: syz.5.4114 Not tainted 6.14.0-rc6-syzkaller #0 [ 1781.141361][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1781.141369][ C1] RIP: 0010:kasan_check_range+0x1a/0x1a0 [ 1781.141391][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 85 f6 0f 84 50 01 00 00 48 89 f8 41 54 44 0f b6 c2 48 01 f0 55 <53> 0f 82 c6 00 00 00 48 b8 ff ff ff ff ff 7f ff ff 48 39 f8 0f 83 [ 1781.141404][ C1] RSP: 0018:ffffc90000a28d40 EFLAGS: 00000096 [ 1781.141415][ C1] RAX: ffff88807eaa2160 RBX: ffff88807eaa2000 RCX: ffffffff8931fb93 [ 1781.141424][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88807eaa2158 [ 1781.141433][ C1] RBP: ffff888029728010 R08: 0000000000000001 R09: 0000000000000000 [ 1781.141442][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 1781.141449][ C1] R13: ffff888029728000 R14: ffff88807eaa2340 R15: ffff888029728c00 [ 1781.141458][ C1] FS: 00007fb762cd06c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1781.141473][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1781.141482][ C1] CR2: 0000001b3201bff8 CR3: 000000005c62a000 CR4: 00000000003526f0 [ 1781.141491][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1781.141499][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1781.141508][ C1] Call Trace: [ 1781.141512][ C1] [ 1781.141518][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1781.141535][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1781.141552][ C1] ? nmi_handle+0x1ac/0x5d0 [ 1781.141570][ C1] ? kasan_check_range+0x1a/0x1a0 [ 1781.141591][ C1] ? default_do_nmi+0x6a/0x160 [ 1781.141605][ C1] ? exc_nmi+0x170/0x1e0 [ 1781.141617][ C1] ? end_repeat_nmi+0xf/0x53 [ 1781.141637][ C1] ? __netif_schedule+0x23/0x2f0 [ 1781.141652][ C1] ? kasan_check_range+0x1a/0x1a0 [ 1781.141668][ C1] ? kasan_check_range+0x1a/0x1a0 [ 1781.141685][ C1] ? kasan_check_range+0x1a/0x1a0 [ 1781.141701][ C1] [ 1781.141705][ C1] [ 1781.141710][ C1] __netif_schedule+0x23/0x2f0 [ 1781.141723][ C1] advance_sched+0x6a7/0xc60 [ 1781.141741][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1781.141753][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 1781.141771][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1781.141784][ C1] ? read_tsc+0x9/0x20 [ 1781.141800][ C1] hrtimer_interrupt+0x392/0x8e0 [ 1781.141818][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1781.141838][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1781.141853][ C1] [ 1781.141858][ C1] [ 1781.141862][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1781.141880][ C1] RIP: 0010:__copy_msghdr+0x0/0x470 [ 1781.141899][ C1] Code: 48 89 34 24 e8 41 ff f3 f8 48 8b 34 24 eb d6 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 41 55 49 89 d5 41 54 55 48 89 f5 53 48 89 fb e8 b8 e0 [ 1781.141911][ C1] RSP: 0018:ffffc900051f7b20 EFLAGS: 00000283 [ 1781.141922][ C1] RAX: 000000000000003b RBX: 1ffff92000a3ef65 RCX: ffffc9001bac5000 [ 1781.141931][ C1] RDX: 0000000000000000 RSI: ffffc900051f7b48 RDI: ffffc900051f7e40 [ 1781.141939][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1781.141947][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900051f7e40 [ 1781.141955][ C1] R13: 0000000000000000 R14: ffffc900051f7c40 R15: ffffc900051f7b48 [ 1781.141970][ C1] copy_msghdr_from_user+0xc2/0x160 [ 1781.141987][ C1] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1781.142010][ C1] ___sys_sendmsg+0xff/0x1e0 [ 1781.142028][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 1781.142050][ C1] ? __pfx_lock_release+0x10/0x10 [ 1781.142067][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 1781.142085][ C1] ? __fget_files+0x206/0x3a0 [ 1781.142102][ C1] __sys_sendmsg+0x16e/0x220 [ 1781.142119][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 1781.142141][ C1] ? rcu_is_watching+0x12/0xc0 [ 1781.142156][ C1] do_syscall_64+0xcd/0x250 [ 1781.142174][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1781.142190][ C1] RIP: 0033:0x7fb761d8d169 [ 1781.142202][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1781.142214][ C1] RSP: 002b:00007fb762cd0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1781.142226][ C1] RAX: ffffffffffffffda RBX: 00007fb761fa5fa0 RCX: 00007fb761d8d169 [ 1781.142235][ C1] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000003 [ 1781.142243][ C1] RBP: 00007fb761e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1781.142252][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1781.142260][ C1] R13: 0000000000000000 R14: 00007fb761fa5fa0 R15: 00007ffc2d469988 [ 1781.142274][ C1] [ 1781.142331][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g71237 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1781.620929][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1781.630889][ C0] rcu: RCU grace-period kthread stack dump: [ 1781.636763][ C0] task:rcu_preempt state:R running task stack:28192 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1781.650253][ C0] Call Trace: [ 1781.653524][ C0] [ 1781.656451][ C0] __schedule+0xf43/0x5890 [ 1781.660865][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1781.666073][ C0] ? __pfx___schedule+0x10/0x10 [ 1781.670922][ C0] ? schedule+0x298/0x350 [ 1781.675244][ C0] ? __pfx_lock_release+0x10/0x10 [ 1781.680270][ C0] ? lock_acquire+0x2f/0xb0 [ 1781.684771][ C0] ? schedule+0x1fd/0x350 [ 1781.689097][ C0] schedule+0xe7/0x350 [ 1781.693161][ C0] schedule_timeout+0x124/0x280 [ 1781.698005][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1781.703373][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1781.708659][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1781.714458][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 1781.719919][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1781.724685][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1781.729967][ C0] ? rcu_gp_init+0xc82/0x1630 [ 1781.734645][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1781.739848][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1781.745651][ C0] rcu_gp_kthread+0x271/0x380 [ 1781.750331][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1781.755530][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1781.760726][ C0] ? __kthread_parkme+0x148/0x220 [ 1781.765748][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1781.770947][ C0] kthread+0x3af/0x750 [ 1781.775012][ C0] ? __pfx_kthread+0x10/0x10 [ 1781.779604][ C0] ? __pfx_kthread+0x10/0x10 [ 1781.784194][ C0] ret_from_fork+0x45/0x80 [ 1781.788607][ C0] ? __pfx_kthread+0x10/0x10 [ 1781.793193][ C0] ret_from_fork_asm+0x1a/0x30 [ 1781.797962][ C0] [ 1781.800972][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1781.807282][ C0] CPU: 0 UID: 0 PID: 22535 Comm: syz.0.4113 Not tainted 6.14.0-rc6-syzkaller #0 [ 1781.816295][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1781.826338][ C0] RIP: 0010:smp_call_function_many_cond+0x4c4/0x12c0 [ 1781.833006][ C0] Code: d2 09 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 ac 0e 0c 00 90 41 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 [ 1781.852605][ C0] RSP: 0018:ffffc90005ca7a48 EFLAGS: 00000293 [ 1781.858666][ C0] RAX: 0000000000000000 RBX: ffff8880b8744a80 RCX: ffffffff81ade25a [ 1781.866631][ C0] RDX: ffff88802829a440 RSI: ffffffff81ade234 RDI: 0000000000000005 [ 1781.874597][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1781.882561][ C0] R10: 0000000000000001 R11: 0000000000000005 R12: ffffed10170e8951 [ 1781.890522][ C0] R13: 0000000000000001 R14: ffff8880b863fe80 R15: ffff8880b8744a88 [ 1781.898487][ C0] FS: 000055558a626500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1781.907411][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1781.913988][ C0] CR2: 000000110c337784 CR3: 000000007f908000 CR4: 00000000003526f0 [ 1781.921952][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1781.929915][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1781.937892][ C0] Call Trace: [ 1781.941169][ C0] [ 1781.944010][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 1781.950343][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1781.955544][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 1781.961010][ C0] ? timekeeping_advance+0x72e/0xa90 [ 1781.966298][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1781.971931][ C0] ? __asan_memcpy+0x3c/0x60 [ 1781.976527][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 1781.981821][ C0] ? rcu_is_watching+0x12/0xc0 [ 1781.986584][ C0] ? update_process_times+0x178/0x2d0 [ 1781.991957][ C0] ? __pfx_update_process_times+0x10/0x10 [ 1781.997676][ C0] ? update_wall_time+0x1c/0x40 [ 1782.002526][ C0] ? tick_nohz_handler+0x376/0x530 [ 1782.007635][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1782.013086][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 1782.018456][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1782.024167][ C0] ? read_tsc+0x9/0x20 [ 1782.028236][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 1782.033351][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1782.039505][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1782.045307][ C0] [ 1782.048229][ C0] [ 1782.051153][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1782.057311][ C0] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 1782.063372][ C0] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 1782.069430][ C0] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 1782.075489][ C0] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 1782.081556][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1782.086574][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1782.091680][ C0] text_poke_bp_batch+0x22b/0x760 [ 1782.096701][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1782.101724][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1782.107266][ C0] ? text_poke_queue+0xef/0x180 [ 1782.112121][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1782.118364][ C0] text_poke_finish+0x30/0x40 [ 1782.123034][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1782.129022][ C0] jump_label_update+0x1d7/0x400 [ 1782.133974][ C0] static_key_disable_cpuslocked+0x158/0x1c0 [ 1782.139959][ C0] static_key_disable+0x1a/0x20 [ 1782.144825][ C0] tracepoint_probe_unregister+0x4fd/0xd70 [ 1782.150643][ C0] ? bpf_link_free+0x95/0x390 [ 1782.155333][ C0] ? __pfx_lock_release+0x10/0x10 [ 1782.160362][ C0] ? __pfx_tracepoint_probe_unregister+0x10/0x10 [ 1782.166703][ C0] ? __pfx_bpf_link_release+0x10/0x10 [ 1782.172077][ C0] bpf_raw_tp_link_release+0x35/0x70 [ 1782.177365][ C0] bpf_link_free+0xe9/0x390 [ 1782.181872][ C0] bpf_link_release+0x5d/0x80 [ 1782.186551][ C0] __fput+0x3ff/0xb70 [ 1782.190539][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1782.195743][ C0] task_work_run+0x14e/0x250 [ 1782.200334][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1782.205451][ C0] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1782.211083][ C0] do_syscall_64+0xda/0x250 [ 1782.215590][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1782.221481][ C0] RIP: 0033:0x7f2e7198d169 [ 1782.225889][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1782.245491][ C0] RSP: 002b:00007ffe62ae0f18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1782.253900][ C0] RAX: 0000000000000000 RBX: 0000000000199910 RCX: 00007f2e7198d169 [ 1782.261865][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1782.269825][ C0] RBP: 00007f2e71ba7ba0 R08: 0000000000000001 R09: 0000000362ae120f [ 1782.277801][ C0] R10: 00007f2e71800000 R11: 0000000000000246 R12: 00007f2e71ba5fac [ 1782.285780][ C0] R13: 00007f2e71ba5fa0 R14: ffffffffffffffff R15: 00007ffe62ae1030 [ 1782.293767][ C0]