last executing test programs: 3m54.81274965s ago: executing program 4 (id=732): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m53.940808222s ago: executing program 4 (id=739): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000007c0)="3e12d23d346cfdeb1708e9b982bf3187ef6b10dac616f738274bc1c03bee4423fa20837e6e86b86592e9be8351aa0000000037d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8bb844bf127ee741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c796fa597f452bed6b6fbcc812df9be8e35d8d15086609c03", 0xc1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 3m53.679940408s ago: executing program 4 (id=742): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000280)={@my=0x1}) 3m53.39425426s ago: executing program 4 (id=747): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 3m53.208328528s ago: executing program 4 (id=749): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 3m52.441220149s ago: executing program 4 (id=759): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 3m52.101251977s ago: executing program 32 (id=759): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 1m14.489443075s ago: executing program 0 (id=2837): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[], 0x0) 1m14.425584471s ago: executing program 0 (id=2838): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="0a0034000101010101010000080026006c09000008002700"], 0x40}}, 0x0) 1m14.298144334s ago: executing program 0 (id=2839): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000001c80)="bf", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e1f, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xd, 0x9, 0x1}, 0x10) 1m13.33934233s ago: executing program 0 (id=2845): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000000)='.\x00', r0, &(0x7f0000000080)='./file0\x00', 0x0) 1m13.271377068s ago: executing program 0 (id=2846): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/13, 0xd}], 0x1) 1m12.792655751s ago: executing program 0 (id=2851): mkdir(&(0x7f0000000100)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 1m12.345990038s ago: executing program 33 (id=2851): mkdir(&(0x7f0000000100)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 6.725426726s ago: executing program 1 (id=3532): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000099000040"]) 5.331669515s ago: executing program 1 (id=3543): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 3.515316402s ago: executing program 6 (id=3563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000e1"]) 3.258425465s ago: executing program 6 (id=3566): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.89023174s ago: executing program 6 (id=3568): sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) timer_create(0x1, &(0x7f0000000680)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000340)={[0xda]}, 0x8) 2.445317697s ago: executing program 6 (id=3573): setresgid(0xee00, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100) 2.392101337s ago: executing program 2 (id=3574): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40000102, 0x0) 2.321841043s ago: executing program 3 (id=3575): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000007c0)={0x52, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) 2.230405356s ago: executing program 6 (id=3576): socket(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0806032465580600000401"], 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 1.550152093s ago: executing program 3 (id=3577): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r2, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) 1.383446421s ago: executing program 2 (id=3578): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) 1.348182122s ago: executing program 3 (id=3579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x886c}, @void, @eth={@local, @random, @void, {@mpls_mc}}}, 0x12) 1.04368493s ago: executing program 2 (id=3580): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x6c}}, 0x0) 951.342707ms ago: executing program 3 (id=3581): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 875.255052ms ago: executing program 5 (id=3582): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 713.430807ms ago: executing program 6 (id=3583): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="00220f000000540b4550182195f57584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000040)={0x3, 0x200, 0xfffffff7, 0x5, 0xf28, 0x7}) 705.333248ms ago: executing program 3 (id=3584): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x2, &(0x7f0000000040)=[r2, r2], &(0x7f0000000200), 0x0, 0x0}) 633.806091ms ago: executing program 1 (id=3585): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x2000200b}) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x2}]) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778) 609.304251ms ago: executing program 5 (id=3586): socket$inet6(0xa, 0x3, 0x8000000003c) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) 512.490455ms ago: executing program 3 (id=3587): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000400)={0x0, 0x1, 0x3, "26d8e5"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="e8f8f7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 471.267497ms ago: executing program 2 (id=3588): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) 470.936303ms ago: executing program 5 (id=3589): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r2, 0x400}, &(0x7f00000001c0)=0x8) 413.078148ms ago: executing program 1 (id=3590): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.numa_stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x38) 385.855988ms ago: executing program 5 (id=3591): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000100), 0x24, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) 362.51627ms ago: executing program 2 (id=3592): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}, 0x1c) 277.193466ms ago: executing program 5 (id=3593): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000240)='percpu_alloc_percpu\x00', r1}, 0x66) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 252.126845ms ago: executing program 1 (id=3594): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mprotect(&(0x7f000008e000/0x2000)=nil, 0x2000, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlockall(0x5) 251.301785ms ago: executing program 2 (id=3595): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x3}}, 0x1c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 186.142959ms ago: executing program 5 (id=3596): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 1 (id=3597): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002}) kernel console output (not intermixed with test programs): ysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 273.149575][ T10] lo speed is unknown, defaulting to 1000 [ 273.428244][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 273.507555][T12208] serio: Serial port ttyS3 [ 273.599554][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 273.615036][ T24] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 273.646059][ T24] usb 2-1: config 0 has no interface number 0 [ 273.672924][ T24] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 273.687077][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.698045][ T24] usb 2-1: Product: syz [ 273.702244][ T24] usb 2-1: Manufacturer: syz [ 273.706942][ T24] usb 2-1: SerialNumber: syz [ 273.718319][ T24] usb 2-1: config 0 descriptor?? [ 273.731347][ T24] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 273.940852][ T24] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 273.950118][ T5827] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 273.986336][ T24] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 274.011527][T12222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2796'. [ 274.062937][T12222] netlink: 'syz.3.2796': attribute type 1 has an invalid length. [ 274.109149][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 274.120061][ T5827] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.136498][ T5827] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.160736][ T5827] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 274.184050][T12203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.203169][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 274.226689][T12203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.235235][ T5827] usb 6-1: SerialNumber: syz [ 274.280645][ T10] usb 1-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 274.310340][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.322553][ T10] usb 1-1: Product: syz [ 274.330885][ T10] usb 1-1: Manufacturer: syz [ 274.335579][ T10] usb 1-1: SerialNumber: syz [ 274.361586][ T10] usb 1-1: config 0 descriptor?? [ 274.383398][ T10] gspca_main: touptek-2.14.0 probing 0547:6801 [ 274.455166][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 274.465384][ T5827] usb 6-1: 0:2 : does not exist [ 274.474399][ T5827] usb 6-1: usbmixer: too many channels (61) in unit 5 [ 274.488506][ T24] usb 2-1: USB disconnect, device number 27 [ 274.494192][ T5827] usb 6-1: USB disconnect, device number 19 [ 274.515063][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 274.559965][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 274.588446][ T24] quatech2 2-1:0.51: device disconnected [ 274.621908][ T5878] usb 1-1: USB disconnect, device number 30 [ 274.780412][ T24] IPVS: starting estimator thread 0... [ 274.789013][T12241] tipc: Started in network mode [ 274.794081][T12241] tipc: Node identity ac1414aa, cluster identity 4711 [ 274.805771][T12241] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 274.814072][T12241] tipc: Enabled bearer , priority 10 [ 274.877135][T12242] IPVS: using max 48 ests per chain, 115200 per kthread [ 274.947193][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 275.090132][ T30] audit: type=1400 audit(1745451296.692:984): avc: denied { mount } for pid=12247 comm="syz.3.2807" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 275.113184][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 275.192581][ T30] audit: type=1400 audit(1745451296.742:985): avc: denied { mounton } for pid=12247 comm="syz.3.2807" path="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 275.257175][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 275.287800][ T30] audit: type=1400 audit(1745451296.842:986): avc: denied { unmount } for pid=5838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 275.397587][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 275.419353][ T30] audit: type=1400 audit(1745451297.032:987): avc: denied { read } for pid=12259 comm="syz.2.2812" path="socket:[105344]" dev="sockfs" ino=105344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 275.505003][ T30] audit: type=1400 audit(1745451297.112:988): avc: denied { map } for pid=12265 comm="syz.1.2816" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 275.537410][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 275.596041][ T30] audit: type=1400 audit(1745451297.112:989): avc: denied { execute } for pid=12265 comm="syz.1.2816" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 275.669626][ T30] audit: type=1400 audit(1745451297.282:990): avc: denied { append } for pid=12273 comm="syz.0.2820" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 275.693347][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 275.743738][T12277] syzkaller1: entered promiscuous mode [ 275.773843][T12277] syzkaller1: entered allmulticast mode [ 275.828542][ T5878] tipc: Node number set to 2886997162 [ 275.967181][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 276.142162][T12290] lo speed is unknown, defaulting to 1000 [ 276.237123][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 276.337367][ T5878] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 276.470354][ T30] audit: type=1400 audit(1745451298.072:991): avc: denied { read write } for pid=12296 comm="syz.1.2827" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 276.550890][ T5878] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 276.577664][ T30] audit: type=1400 audit(1745451298.072:992): avc: denied { open } for pid=12296 comm="syz.1.2827" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 276.614774][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.657722][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.699449][ T5878] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 276.738938][ T5878] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 276.788117][ T5878] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 276.796242][ T5878] usb 4-1: Manufacturer: syz [ 276.830062][ T5878] usb 4-1: config 0 descriptor?? [ 277.067735][ T5827] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 277.227171][ T5827] usb 2-1: Using ep0 maxpacket: 16 [ 277.239465][ T5827] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 277.250040][T12320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2838'. [ 277.258004][ T5827] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 277.268164][ T5878] appleir 0003:05AC:8243.001E: unknown main item tag 0x0 [ 277.278110][ T5878] appleir 0003:05AC:8243.001E: No inputs registered, leaving [ 277.279500][ T5827] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 277.295517][ T5827] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 277.321893][ T5878] appleir 0003:05AC:8243.001E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 277.334869][ T5827] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 277.345311][ T5827] usb 2-1: config 0 has no interface number 0 [ 277.352564][ T5827] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 277.372455][ T5827] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 277.386804][ T5827] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 277.403961][ T5827] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 277.418068][ T5827] usb 2-1: config 0 interface 125 has no altsetting 0 [ 277.424868][ T5827] usb 2-1: config 0 interface 125 has no altsetting 2 [ 277.440478][ T5827] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 277.449802][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.462312][ T5827] usb 2-1: Product: syz [ 277.466573][ T5827] usb 2-1: Manufacturer: syz [ 277.472095][ T5827] usb 2-1: SerialNumber: syz [ 277.484671][ T5827] usb 2-1: config 0 descriptor?? [ 277.493135][ T5827] usb 2-1: selecting invalid altsetting 2 [ 277.572419][ T9] usb 4-1: USB disconnect, device number 24 [ 277.950282][T12328] GUP no longer grows the stack in syz.2.2840 (12328): 200000004000-200000008000 (200000002000) [ 277.964589][T12328] CPU: 0 UID: 0 PID: 12328 Comm: syz.2.2840 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 277.964622][T12328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 277.964633][T12328] Call Trace: [ 277.964639][T12328] [ 277.964648][T12328] dump_stack_lvl+0x16c/0x1f0 [ 277.964684][T12328] gup_vma_lookup+0x1d2/0x220 [ 277.964713][T12328] __get_user_pages+0x234/0x36f0 [ 277.964747][T12328] ? __pfx___get_user_pages+0x10/0x10 [ 277.964782][T12328] get_user_pages_remote+0x258/0xb20 [ 277.964811][T12328] ? __pfx_mtree_load+0x10/0x10 [ 277.964838][T12328] ? __pfx_get_user_pages_remote+0x10/0x10 [ 277.964875][T12328] __access_remote_vm+0x233/0x9d0 [ 277.964903][T12328] ? __pfx___access_remote_vm+0x10/0x10 [ 277.964933][T12328] proc_pid_cmdline_read+0x4de/0x900 [ 277.964964][T12328] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 277.964995][T12328] ? rw_verify_area+0xcf/0x680 [ 277.965020][T12328] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 277.965047][T12328] vfs_readv+0x6bc/0x8a0 [ 277.965079][T12328] ? __pfx_vfs_readv+0x10/0x10 [ 277.965106][T12328] ? kmem_cache_free+0x2d4/0x4d0 [ 277.965138][T12328] ? __fget_files+0x20e/0x3c0 [ 277.965163][T12328] ? do_preadv+0x1af/0x270 [ 277.965186][T12328] do_preadv+0x1af/0x270 [ 277.965212][T12328] ? __pfx_do_preadv+0x10/0x10 [ 277.965248][T12328] ? rcu_is_watching+0x12/0xc0 [ 277.965276][T12328] do_syscall_64+0xcd/0x260 [ 277.965303][T12328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.965321][T12328] RIP: 0033:0x7f368e78e969 [ 277.965336][T12328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.965353][T12328] RSP: 002b:00007f368c5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 277.965371][T12328] RAX: ffffffffffffffda RBX: 00007f368e9b5fa0 RCX: 00007f368e78e969 [ 277.965382][T12328] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000003 [ 277.965392][T12328] RBP: 00007f368e810ab1 R08: 0000000000000200 R09: 0000000000000000 [ 277.965402][T12328] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 277.965412][T12328] R13: 0000000000000000 R14: 00007f368e9b5fa0 R15: 00007ffcbc813d48 [ 277.965437][T12328] [ 278.711355][ T9] usb 2-1: USB disconnect, device number 28 [ 278.847611][ C1] net_ratelimit: 2 callbacks suppressed [ 278.847629][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 279.491829][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 279.491845][ T30] audit: type=1400 audit(1745451301.102:996): avc: denied { read } for pid=12356 comm="syz.5.2858" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 279.523223][T12357] autofs4:pid:12357:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.8192), cmd(0xc0189379) [ 279.561880][T12357] autofs4:pid:12357:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379) [ 279.607764][ T30] audit: type=1400 audit(1745451301.132:997): avc: denied { open } for pid=12356 comm="syz.5.2858" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 279.653770][ T30] audit: type=1400 audit(1745451301.132:998): avc: denied { ioctl } for pid=12356 comm="syz.5.2858" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 279.758487][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 279.787282][T12364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2860'. [ 279.807206][T12363] hsr0: entered promiscuous mode [ 279.840368][T12364] hsr_slave_0: left promiscuous mode [ 279.867212][T12367] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 279.882669][T12364] hsr_slave_1: left promiscuous mode [ 279.888082][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 279.902976][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 279.912691][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 279.925494][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 279.934878][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 279.944176][ T24] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 279.944363][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 279.975025][ T24] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 279.987280][ T30] audit: type=1400 audit(1745451301.592:999): avc: denied { mounton } for pid=12366 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 280.030105][T12364] hsr0 (unregistering): left promiscuous mode [ 280.050536][ T24] usb 4-1: Product: syz [ 280.064946][ T24] usb 4-1: SerialNumber: syz [ 280.084586][T12366] lo speed is unknown, defaulting to 1000 [ 280.123906][ T24] usb 4-1: config 0 descriptor?? [ 280.380613][ T24] hso 4-1:0.0: Failed to find BULK IN ep [ 280.474130][T12366] chnl_net:caif_netlink_parms(): no params data found [ 280.586490][ T30] audit: type=1400 audit(1745451302.192:1000): avc: denied { read } for pid=12386 comm="syz.5.2869" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 280.595177][ T24] usb 4-1: USB disconnect, device number 25 [ 280.645091][ T30] audit: type=1400 audit(1745451302.192:1001): avc: denied { open } for pid=12386 comm="syz.5.2869" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 280.747913][T12387] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 280.771580][T12387] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 280.793715][T12387] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 280.799936][T12387] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 280.817512][T12387] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 280.824570][T12387] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 280.836136][T12366] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.843596][T12366] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.851790][T12366] bridge_slave_0: entered allmulticast mode [ 280.859609][T12366] bridge_slave_0: entered promiscuous mode [ 280.866637][T12387] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 280.868369][T12366] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.880103][T12366] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.888613][T12366] bridge_slave_1: entered allmulticast mode [ 280.896086][T12366] bridge_slave_1: entered promiscuous mode [ 280.902304][T12387] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 280.927077][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 280.978684][T12387] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 280.994060][T12366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.999598][T12387] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 281.026694][T12366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.055541][T12387] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 281.179048][T12366] team0: Port device team_slave_0 added [ 281.201945][T12366] team0: Port device team_slave_1 added [ 281.262908][T12366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.272959][T12366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.304554][T12366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.318088][T12366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.325055][T12366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.354941][T12366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.460834][T12366] hsr_slave_0: entered promiscuous mode [ 281.471047][T12366] hsr_slave_1: entered promiscuous mode [ 281.485881][T12366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.499752][T12366] Cannot create hsr debugfs directory [ 281.627632][ T5880] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 281.809011][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 281.820744][ T5880] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 281.846583][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.868472][ T5880] usb 6-1: Product: syz [ 281.872678][ T5880] usb 6-1: Manufacturer: syz [ 281.889102][ T5880] usb 6-1: SerialNumber: syz [ 281.922362][ T5880] usb 6-1: config 0 descriptor?? [ 281.949481][ T5880] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 281.967921][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 281.989371][T12366] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 282.001168][T12366] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 282.021605][T12366] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 282.054836][T12366] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 282.197850][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 282.219544][T12434] SELinux: ebitmap start bit (3957488994) is not a multiple of the map unit size (64) [ 282.242297][T12434] SELinux: failed to load policy [ 282.283730][T12366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.317069][T12366] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.342150][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.349331][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.366375][ T5880] gspca_ov534_9: reg_w failed -71 [ 282.398453][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.412764][T12439] input: syz0 as /devices/virtual/input/input47 [ 282.422150][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.437560][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.444757][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.448061][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 282.492679][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.530024][ T9] usb 2-1: config 0 descriptor?? [ 282.549653][ T30] audit: type=1400 audit(1745451304.152:1002): avc: denied { search } for pid=12442 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.589883][ T30] audit: type=1400 audit(1745451304.152:1003): avc: denied { read } for pid=12444 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.645608][ T30] audit: type=1400 audit(1745451304.152:1004): avc: denied { open } for pid=12444 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.749315][ T30] audit: type=1400 audit(1745451304.152:1005): avc: denied { getattr } for pid=12444 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.767224][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 282.794958][ T24] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 282.833153][ T5880] gspca_ov534_9: Unknown sensor 0000 [ 282.833235][ T5880] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 282.847214][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 282.853328][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 282.859938][ T24] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 282.869822][ T5880] usb 6-1: USB disconnect, device number 20 [ 282.931780][ T5837] Bluetooth: hci5: command 0x0405 tx timeout [ 283.005659][ T9] lg-g15 0003:046D:C222.001F: unknown main item tag 0x0 [ 283.013222][ T5837] Bluetooth: hci1: command 0x041b tx timeout [ 283.017057][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 283.023138][ T9] lg-g15 0003:046D:C222.001F: unknown main item tag 0x0 [ 283.035117][ T9] lg-g15 0003:046D:C222.001F: unknown main item tag 0x0 [ 283.042446][ T9] lg-g15 0003:046D:C222.001F: unknown main item tag 0x0 [ 283.067145][ T9] lg-g15 0003:046D:C222.001F: unknown main item tag 0x0 [ 283.077414][ T9] lg-g15 0003:046D:C222.001F: unknown main item tag 0x0 [ 283.086405][ T9] lg-g15 0003:046D:C222.001F: unknown main item tag 0x0 [ 283.095964][ T9] lg-g15 0003:046D:C222.001F: unknown main item tag 0x0 [ 283.106304][ T9] lg-g15 0003:046D:C222.001F: unknown main item tag 0x0 [ 283.117934][ T9] lg-g15 0003:046D:C222.001F: unknown main item tag 0x0 [ 283.131701][ T9] lg-g15 0003:046D:C222.001F: unknown main item tag 0x0 [ 283.166874][T12366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.176341][ T9] lg-g15 0003:046D:C222.001F: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 283.241279][ T9] usb 2-1: USB disconnect, device number 29 [ 283.815018][T12366] veth0_vlan: entered promiscuous mode [ 283.853673][T12366] veth1_vlan: entered promiscuous mode [ 283.984099][T12366] veth0_macvtap: entered promiscuous mode [ 284.012109][T12366] veth1_macvtap: entered promiscuous mode [ 284.047246][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 284.065563][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.076226][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.118643][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.138440][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.151664][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.164375][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.185875][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.210357][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.222206][T12366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.237127][ T5881] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 284.299676][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.338059][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.366844][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.378158][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.390821][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.401436][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.425201][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.488177][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.499391][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.519914][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.539202][ T5881] usb 6-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 284.569295][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.580001][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.607926][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.627825][ T5881] usb 6-1: config 0 descriptor?? [ 284.643452][T12366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.706066][T12520] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2906'. [ 284.762436][T12523] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2906'. [ 284.824587][T12366] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.863878][T12366] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.900034][T12366] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.927261][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 284.933310][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 284.941567][ T24] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 284.949892][T12366] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.981396][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 284.981414][ T30] audit: type=1400 audit(1745451306.592:1017): avc: denied { execute } for pid=12529 comm="syz.1.2909" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 285.012971][ T5837] Bluetooth: hci5: command 0x0405 tx timeout [ 285.017239][ T24] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 285.061770][ T5881] uclogic 0003:5543:0003.0020: item fetching failed at offset 5/7 [ 285.087077][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 285.096306][ T5837] Bluetooth: hci1: command 0x041b tx timeout [ 285.117710][ T5881] uclogic 0003:5543:0003.0020: parse failed [ 285.144338][ T5881] uclogic 0003:5543:0003.0020: probe with driver uclogic failed with error -22 [ 285.305195][ T5881] usb 6-1: USB disconnect, device number 21 [ 285.947414][ T30] audit: type=1400 audit(1745451307.542:1018): avc: denied { read write } for pid=12557 comm="syz.3.2917" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 285.987804][T12559] 9pnet_fd: Insufficient options for proto=fd [ 286.006178][ T30] audit: type=1400 audit(1745451307.542:1019): avc: denied { open } for pid=12557 comm="syz.3.2917" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 286.127752][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 286.166945][T12563] lo speed is unknown, defaulting to 1000 [ 286.202393][T12564] netlink: 'syz.5.2919': attribute type 13 has an invalid length. [ 286.363060][T12564] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.660726][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2923'. [ 287.167235][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 287.174597][ T24] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 287.183899][ T5837] Bluetooth: hci1: command 0x041b tx timeout [ 287.184030][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 287.191190][ T24] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 288.093463][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 288.205125][ T30] audit: type=1400 audit(1745451309.812:1020): avc: denied { mount } for pid=12601 comm="syz.1.2934" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 288.227024][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 288.263839][ T30] audit: type=1400 audit(1745451309.872:1021): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 288.300393][T12606] can0: slcan on ptm0. [ 288.368724][T12605] can0 (unregistered): slcan off ptm0. [ 289.247075][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 289.254122][ T5834] Bluetooth: hci1: command 0x041b tx timeout [ 289.730562][ T5834] Bluetooth: hci5: command 0x0405 tx timeout [ 289.736756][ T24] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 289.742968][ T24] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 290.297080][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 291.327080][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 291.334807][ T5834] Bluetooth: hci1: command 0x041b tx timeout [ 291.342570][ T24] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 291.349424][ T24] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 291.427291][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.435453][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.514052][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.547690][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.597512][ T30] audit: type=1400 audit(1745451313.202:1022): avc: denied { mounton } for pid=12366 comm="syz-executor" path="/root/syzkaller.aKti4i/syz-tmp" dev="sda1" ino=1952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 291.679930][ T30] audit: type=1400 audit(1745451313.202:1023): avc: denied { mount } for pid=12366 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 291.755572][ T30] audit: type=1400 audit(1745451313.202:1024): avc: denied { mounton } for pid=12366 comm="syz-executor" path="/root/syzkaller.aKti4i/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 291.860195][ T30] audit: type=1400 audit(1745451313.242:1025): avc: denied { mounton } for pid=12366 comm="syz-executor" path="/root/syzkaller.aKti4i/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=121044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 291.904172][ T30] audit: type=1400 audit(1745451313.442:1026): avc: denied { mounton } for pid=12366 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 291.927955][ T30] audit: type=1400 audit(1745451313.512:1027): avc: denied { mounton } for pid=12366 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 292.367084][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.637598][T12634] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.646498][T12634] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.657131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 292.764287][T12634] veth0_to_team: left promiscuous mode [ 292.770319][T12634] veth0_to_team: left allmulticast mode [ 292.784079][T12634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.796363][T12634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.858616][T12634] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.877572][T12634] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.890528][T12634] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.901083][T12634] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.940584][T12634] bridge1: left promiscuous mode [ 292.987709][ T5827] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 293.154774][ T5827] usb 7-1: Using ep0 maxpacket: 16 [ 293.175520][ T5827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.200296][ T5827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.211108][ T5827] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 293.236251][ T5827] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 293.258855][ T5827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.280510][ T5827] usb 7-1: config 0 descriptor?? [ 293.378291][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 293.407300][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 293.536190][ T30] audit: type=1400 audit(1745451315.142:1028): avc: denied { write } for pid=12670 comm="syz.3.2959" path="socket:[121594]" dev="sockfs" ino=121594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 293.538613][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.627633][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.667594][ T10] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 293.681000][ T10] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 293.701631][ T5827] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 293.709160][ T5827] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 293.718605][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.733683][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.742200][ T5827] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 293.753866][ T10] usb 3-1: Product: syz [ 293.759635][ T5827] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 293.766837][ T10] usb 3-1: Manufacturer: syz [ 293.790345][ T5827] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 293.798626][ T10] usb 3-1: SerialNumber: syz [ 293.827597][ T5827] input: HID 0955:7214 Haptics as /devices/virtual/input/input48 [ 293.862315][ T5827] shield 0003:0955:7214.0021: Registered Thunderstrike controller [ 293.897504][ T5827] shield 0003:0955:7214.0021: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 293.908820][T12677] lo speed is unknown, defaulting to 1000 [ 293.909205][T12647] random: crng reseeded on system resumption [ 293.914757][ T30] audit: type=1400 audit(1745451315.522:1029): avc: denied { write } for pid=12646 comm="syz.6.2951" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 293.959090][ T30] audit: type=1400 audit(1745451315.522:1030): avc: denied { ioctl } for pid=12646 comm="syz.6.2951" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 294.030468][T12651] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 294.063583][T12681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2963'. [ 294.084171][T12681] netlink: 'syz.5.2963': attribute type 21 has an invalid length. [ 294.447147][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 294.584006][ T5827] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 294.596400][ T9] usb 7-1: USB disconnect, device number 2 [ 294.613563][ T5827] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 294.640140][ T5827] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 294.663675][ T5827] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 294.697076][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 294.781265][T12651] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 294.847263][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 294.854221][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 294.876914][ T24] usb 6-1: config 0 has no interface number 0 [ 294.901468][ T24] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 294.912853][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.935634][ T24] usb 6-1: Product: syz [ 294.952585][ T24] usb 6-1: Manufacturer: syz [ 294.970645][ T24] usb 6-1: SerialNumber: syz [ 294.991538][ T24] usb 6-1: config 0 descriptor?? [ 295.001926][ T10] cdc_mbim 3-1:1.0: bind() failure [ 295.002765][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 295.026679][ T10] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 295.055796][ T10] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 295.091058][ T10] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 295.113119][ T10] usb 3-1: USB disconnect, device number 30 [ 295.207686][ T30] audit: type=1400 audit(1745451316.812:1031): avc: denied { mounton } for pid=12698 comm="syz.6.2970" path="/proc/10/cgroup" dev="nsfs" ino=4026534163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 295.487597][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 295.697271][ T5827] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 295.868868][ T5827] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 295.893790][ T5827] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 295.948578][ T5827] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 295.967364][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.985570][ T5827] usb 2-1: Product: syz [ 295.999741][ T5827] usb 2-1: Manufacturer: syz [ 296.004389][ T5827] usb 2-1: SerialNumber: syz [ 296.042015][ T5827] usb 2-1: config 0 descriptor?? [ 296.052313][T12706] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 296.052946][ T24] gspca_spca1528: reg_w err -71 [ 296.060636][T12706] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 296.076601][ T24] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 296.136766][ T24] usb 6-1: USB disconnect, device number 22 [ 296.340471][T12706] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 296.388568][T12706] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 296.527075][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 296.817583][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 296.817599][ T30] audit: type=1400 audit(1745451318.422:1033): avc: denied { bind } for pid=12730 comm="syz.5.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 296.863810][ T5827] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 296.896077][ T30] audit: type=1400 audit(1745451318.462:1034): avc: denied { watch } for pid=12728 comm="syz.6.2984" path="/12/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 296.941843][ T30] audit: type=1400 audit(1745451318.462:1035): avc: denied { watch_sb watch_reads } for pid=12728 comm="syz.6.2984" path="/12/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 297.037536][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2987'. [ 297.275075][ T5827] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 297.322042][ T5827] usb 2-1: USB disconnect, device number 30 [ 297.427443][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 297.517717][ T2022] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 297.567104][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 297.577532][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 297.589423][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.611635][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.644031][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 297.681019][ T2022] usb 4-1: Using ep0 maxpacket: 32 [ 297.695787][ T2022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 297.706410][T12752] xt_CT: No such helper "snmp" [ 297.716194][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.741611][ T2022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 297.760077][ T2022] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 297.772742][ T9] usb 3-1: config 0 descriptor?? [ 297.803553][ T2022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 297.825041][ T2022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 297.869243][ T2022] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 297.899149][ T2022] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.916041][ T2022] usb 4-1: Product: syz [ 297.931117][ T2022] usb 4-1: Manufacturer: syz [ 297.940144][ T2022] usb 4-1: SerialNumber: syz [ 297.957452][ T2022] usb 4-1: config 0 descriptor?? [ 297.988435][T12748] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 298.001642][ T2022] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input49 [ 298.035575][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 298.071733][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 298.145305][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 298.197231][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 298.229460][ T9] ft260 0003:0403:6030.0022: unknown main item tag 0x0 [ 298.275801][T12748] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 298.320307][ T2022] usb 4-1: USB disconnect, device number 26 [ 298.425174][ T9] ft260 0003:0403:6030.0022: chip code: 0000 0000 [ 298.607221][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 298.906435][ T9] usb 3-1: USB disconnect, device number 31 [ 299.218726][ T30] audit: type=1400 audit(1745451320.812:1036): avc: denied { setopt } for pid=12798 comm="syz.5.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 299.627595][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 299.647084][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 299.813361][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 299.834364][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.862645][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.887958][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 299.899737][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 299.941496][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 299.964456][ T9] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 300.007077][ T9] usb 7-1: Manufacturer: syz [ 300.028631][ T9] usb 7-1: config 0 descriptor?? [ 300.066106][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 300.093105][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 300.114467][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.156780][ T24] usb 4-1: config 0 descriptor?? [ 300.180199][ T24] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 300.466573][ T9] appleir 0003:05AC:8243.0023: unknown main item tag 0x0 [ 300.495583][ T9] appleir 0003:05AC:8243.0023: No inputs registered, leaving [ 300.507104][ T5880] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 300.547995][ T9] appleir 0003:05AC:8243.0023: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 300.687142][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 300.694687][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 300.714799][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.731329][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 300.757068][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 300.766784][ T5880] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 300.769333][ T9] usb 7-1: USB disconnect, device number 3 [ 300.797171][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.842257][ T5880] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 300.871292][ T5880] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 300.897235][ T5880] usb 3-1: Manufacturer: syz [ 300.919525][ T5880] usb 3-1: config 0 descriptor?? [ 301.207976][ T5880] rc_core: IR keymap rc-hauppauge not found [ 301.225206][ T24] usb 4-1: USB disconnect, device number 27 [ 301.242904][ T5880] Registered IR keymap rc-empty [ 301.250546][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 301.277940][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 301.302909][ T5880] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 301.329875][ T5880] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input50 [ 301.346826][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 301.355718][ T30] audit: type=1400 audit(1745451322.962:1037): avc: denied { mount } for pid=12860 comm="syz.5.3042" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 301.397187][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 301.417034][ T30] audit: type=1400 audit(1745451323.012:1038): avc: denied { search } for pid=12860 comm="syz.5.3042" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 301.468273][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 301.477073][ T30] audit: type=1400 audit(1745451323.012:1039): avc: denied { read } for pid=12860 comm="syz.5.3042" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 301.502551][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 301.511027][ T30] audit: type=1400 audit(1745451323.012:1040): avc: denied { open } for pid=12860 comm="syz.5.3042" path="/472/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 301.535949][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 301.544602][ T30] audit: type=1400 audit(1745451323.132:1041): avc: denied { unmount } for pid=7708 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 301.565606][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 301.587894][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 301.607196][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 301.638612][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 301.658011][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 301.697118][ T5881] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 301.707878][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 301.727045][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 301.735325][ T5880] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 301.757794][ T5880] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 301.771151][ T5880] usb 3-1: USB disconnect, device number 32 [ 301.848551][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 301.864582][ T5881] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 301.885842][ T5881] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 301.905942][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.927700][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 301.929305][ T5881] usb 2-1: config 0 descriptor?? [ 301.948376][T12878] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3050'. [ 302.121147][ T10] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 302.156398][ T10] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 302.198072][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 302.214365][ T5880] usb 2-1: USB disconnect, device number 31 [ 302.227634][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.249634][T12871] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 302.262091][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 302.607588][ T5881] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 302.647179][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 302.767365][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 302.778626][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 302.791622][ T5880] usb 7-1: USB disconnect, device number 4 [ 302.802034][ T5881] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 302.815427][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.831598][ T5881] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.857123][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.862192][ T5881] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.866904][ T10] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 302.895774][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.915815][ T10] usb 6-1: config 0 descriptor?? [ 302.922405][T12902] syz.1.3061 (12902): /proc/12901/oom_adj is deprecated, please use /proc/12901/oom_score_adj instead. [ 302.929029][ T5881] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.957130][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.982606][ T5881] usb 4-1: Product: syz [ 302.986894][ T5881] usb 4-1: Manufacturer: syz [ 302.991791][ T5881] usb 4-1: SerialNumber: syz [ 303.437452][ T30] audit: type=1400 audit(1745451325.042:1042): avc: denied { shutdown } for pid=12911 comm="syz.2.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 303.458350][ T5881] usb 4-1: 0:2 : does not exist [ 303.464169][ T30] audit: type=1400 audit(1745451325.042:1043): avc: denied { write } for pid=12911 comm="syz.2.3066" path="socket:[127432]" dev="sockfs" ino=127432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 303.487399][ T9] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 303.568454][ T10] usb 6-1: string descriptor 0 read error: -22 [ 303.648927][ T9] usb 2-1: config 0 has no interfaces? [ 303.664880][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 303.681191][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.695225][ T9] usb 2-1: config 0 descriptor?? [ 303.807296][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 303.814523][ T10] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0024/input/input51 [ 303.921113][ T10] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0024/input/input52 [ 303.944815][ T5880] usb 2-1: USB disconnect, device number 32 [ 303.945493][ T10] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0024/input/input53 [ 303.969136][ T10] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0024/input/input54 [ 303.996055][ T10] uclogic 0003:256C:006D.0024: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 304.025589][ T10] usb 6-1: USB disconnect, device number 23 [ 304.060377][T12918] Bluetooth: hci3: Frame reassembly failed (-84) [ 304.068664][ T5881] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 304.105289][ T36] Bluetooth: hci3: Frame reassembly failed (-84) [ 304.106497][ T5881] usb 4-1: USB disconnect, device number 28 [ 304.419224][T12910] syz.6.3065 (12910): drop_caches: 2 [ 304.619668][T12922] overlayfs: upper fs does not support file handles, falling back to index=off. [ 304.647132][T12922] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 304.669839][ T5881] kernel write not supported for file /1408/attr/exec (pid: 5881 comm: kworker/1:6) [ 304.782840][ T30] audit: type=1400 audit(1745451326.382:1044): avc: denied { create } for pid=12926 comm="syz.5.3074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 304.847124][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 305.317875][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 305.480877][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 305.515394][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 305.545763][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 305.559605][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.573170][T12941] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 305.593037][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.862771][ T9] usb 2-1: USB disconnect, device number 33 [ 305.887055][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 306.046099][T12968] syzkaller1: entered promiscuous mode [ 306.058103][T12968] syzkaller1: entered allmulticast mode [ 306.128247][ T5834] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 306.136178][ T5837] Bluetooth: hci3: command 0xfc11 tx timeout [ 306.398702][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 306.435890][T12978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.558427][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 306.592087][ T30] audit: type=1400 audit(1745451328.202:1045): avc: denied { bind } for pid=12983 comm="syz.3.3099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 306.630949][ T9] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 306.667315][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.686389][ T9] usb 7-1: Product: syz [ 306.693086][ T30] audit: type=1400 audit(1745451328.232:1046): avc: denied { setopt } for pid=12983 comm="syz.3.3099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 306.699574][ T9] usb 7-1: Manufacturer: syz [ 306.755655][ T9] usb 7-1: SerialNumber: syz [ 306.760842][T12986] vivid-002: disconnect [ 306.780871][T12985] vivid-002: reconnect [ 306.786913][ T9] usb 7-1: config 0 descriptor?? [ 306.810299][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 306.883637][ T30] audit: type=1400 audit(1745451328.492:1047): avc: denied { write } for pid=12992 comm="syz.3.3103" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 306.927074][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 306.982922][ T30] audit: type=1400 audit(1745451328.492:1048): avc: denied { open } for pid=12992 comm="syz.3.3103" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 307.186640][ T30] audit: type=1400 audit(1745451328.792:1049): avc: denied { ioctl } for pid=13004 comm="syz.1.3107" path="socket:[130064]" dev="sockfs" ino=130064 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 307.462077][T13016] Bluetooth: hci3: Frame reassembly failed (-84) [ 307.765881][ T30] audit: type=1400 audit(1745451329.372:1050): avc: denied { mount } for pid=13027 comm="syz.5.3118" name="/" dev="configfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 307.789786][ T5881] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 307.800618][ T30] audit: type=1400 audit(1745451329.412:1051): avc: denied { search } for pid=13027 comm="syz.5.3118" name="/" dev="configfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 307.834074][ T9] gspca_ov534_9: reg_w failed -71 [ 307.949323][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.960492][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.970307][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 307.981461][ T5881] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 307.993058][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.019387][ T5881] usb 3-1: config 0 descriptor?? [ 308.127225][ T9] gspca_ov534_9: Unknown sensor 0000 [ 308.127313][ T9] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 308.168043][ T9] usb 7-1: USB disconnect, device number 5 [ 308.462971][ T5881] cm6533_jd 0003:0D8C:0022.0025: unknown main item tag 0x0 [ 308.470772][T13039] input: syz0 as /devices/virtual/input/input55 [ 308.497875][ T5881] cm6533_jd 0003:0D8C:0022.0025: unknown main item tag 0x0 [ 308.506516][ T5881] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0025/input/input56 [ 308.570748][ T5881] cm6533_jd 0003:0D8C:0022.0025: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 308.736941][ T5881] usb 3-1: USB disconnect, device number 33 [ 308.824380][T13046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.007096][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 309.147295][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 309.237201][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 309.327721][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 309.369869][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 309.397754][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 309.403025][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 309.430151][ T9] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 309.447937][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 309.458279][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.487429][ T5831] Bluetooth: hci3: command 0x1003 tx timeout [ 309.488630][ T9] usb 7-1: config 0 descriptor?? [ 309.495079][ T5834] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 309.520120][ T10] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 309.548484][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.577337][ T9] as10x_usb: device has been detected [ 309.583356][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 309.611240][ T10] usb 6-1: Product: syz [ 309.626435][ T10] usb 6-1: Manufacturer: syz [ 309.644653][ T10] usb 6-1: SerialNumber: syz [ 309.674949][ T9] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 309.685745][ T10] usb 6-1: config 0 descriptor?? [ 309.706517][ T10] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 309.842683][T13080] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3141'. [ 309.874988][ T30] audit: type=1400 audit(1745451331.482:1052): avc: denied { firmware_load } for pid=9 comm="kworker/0:0" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=271 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 309.910154][ T9] as10x_usb: error during firmware upload part1 [ 309.934559][ T9] Registered device nBox DVB-T Dongle [ 309.946151][ T9] usb 7-1: USB disconnect, device number 6 [ 309.981107][ T10] ums-isd200 6-1:0.0: probe with driver ums-isd200 failed with error -22 [ 310.057119][ T5827] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 310.057137][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 310.136090][ T9] Unregistered device nBox DVB-T Dongle [ 310.146243][ T10] usb 6-1: USB disconnect, device number 24 [ 310.166855][ T9] as10x_usb: device has been disconnected [ 310.238534][ T5827] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 310.250523][ T5827] usb 3-1: config 179 has no interface number 0 [ 310.256864][ T5827] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 310.314240][ T5827] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 310.347741][ T5827] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 310.370933][ T5827] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 310.383518][ T5827] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 310.399445][ T5827] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 310.414892][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.432307][ T30] audit: type=1400 audit(1745451332.042:1053): avc: denied { read } for pid=13096 comm="syz.1.3148" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 310.445713][T13077] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 310.490752][T13077] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 310.497139][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 310.522877][ T30] audit: type=1400 audit(1745451332.132:1054): avc: denied { listen } for pid=13094 comm="syz.3.3147" lport=41601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 310.574962][ T30] audit: type=1400 audit(1745451332.152:1055): avc: denied { accept } for pid=13094 comm="syz.3.3147" lport=41601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 310.697565][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 310.713678][ T9] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 310.723540][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.742691][ T9] usb 7-1: config 0 descriptor?? [ 310.768158][ T9] as10x_usb: device has been detected [ 310.792458][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 310.847798][ T5880] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 310.849944][ T9] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 310.920971][ T9] as10x_usb: error during firmware upload part1 [ 310.941148][ T9] Registered device nBox DVB-T Dongle [ 310.965287][ T9] usb 7-1: USB disconnect, device number 7 [ 311.015146][ T9] Unregistered device nBox DVB-T Dongle [ 311.022194][ T9] as10x_usb: device has been disconnected [ 311.047473][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.065168][ T5827] usb 3-1: USB disconnect, device number 34 [ 311.065231][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 311.065270][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 311.078137][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.088287][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 311.099117][T13107] syzkaller1: entered promiscuous mode [ 311.123664][T13107] syzkaller1: entered allmulticast mode [ 311.158517][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 311.173481][ T5880] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 311.192864][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.241808][ T5880] usb 2-1: config 0 descriptor?? [ 311.254538][ T5837] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 311.635544][ T5878] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 311.667816][ T5878] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 311.689294][ T5880] plantronics 0003:047F:FFFF.0027: reserved main item tag 0xd [ 311.722296][ T5880] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 311.761310][ T5880] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 311.797055][ T5881] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 311.851637][T13121] netlink: 'syz.2.3159': attribute type 1 has an invalid length. [ 311.861358][T13121] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3159'. [ 311.907668][ T24] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 311.980275][ T5881] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 311.991641][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.012076][ T5878] usb 2-1: USB disconnect, device number 34 [ 312.021227][ T5881] usb 4-1: Product: syz [ 312.036578][ T5881] usb 4-1: Manufacturer: syz [ 312.047322][ T5881] usb 4-1: SerialNumber: syz [ 312.059626][ T5881] usb 4-1: config 0 descriptor?? [ 312.092016][ T24] usb 6-1: config 0 has no interfaces? [ 312.114478][ T24] usb 6-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 312.127220][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 312.140317][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.157121][ T24] usb 6-1: Product: syz [ 312.167352][ T24] usb 6-1: Manufacturer: syz [ 312.187855][ T24] usb 6-1: SerialNumber: syz [ 312.201921][ T24] usb 6-1: config 0 descriptor?? [ 312.271847][T13131] input: syz0 as /devices/virtual/input/input58 [ 312.434465][ T24] usb 6-1: USB disconnect, device number 25 [ 312.479265][ T5881] usb 4-1: Firmware version (0.0) predates our first public release. [ 312.498739][ T5881] usb 4-1: Please update to version 0.2 or newer [ 312.513745][ T5881] usb 4-1: Firmware: build [ 312.633352][ T30] audit: type=1400 audit(1745451334.242:1056): avc: denied { bind } for pid=13138 comm="syz.1.3166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 312.729228][ T5881] usb 4-1: USB disconnect, device number 29 [ 313.167048][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 313.376922][T13157] SELinux: failed to load policy [ 313.572648][ T30] audit: type=1400 audit(1745451335.162:1057): avc: denied { write } for pid=13164 comm="syz.2.3179" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 313.797044][ T30] audit: type=1400 audit(1745451335.402:1058): avc: denied { create } for pid=13173 comm="syz.1.3183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 313.879106][ T30] audit: type=1400 audit(1745451335.412:1059): avc: denied { read } for pid=13173 comm="syz.1.3183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 313.898418][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.992513][T13176] netlink: 'syz.5.3185': attribute type 2 has an invalid length. [ 313.993929][ T30] audit: type=1400 audit(1745451335.602:1060): avc: denied { setopt } for pid=13177 comm="syz.2.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 314.021824][T13176] netlink: 'syz.5.3185': attribute type 1 has an invalid length. [ 314.053046][T13176] nbd: illegal input index 65544 [ 314.059233][ T30] audit: type=1400 audit(1745451335.602:1061): avc: denied { read } for pid=13177 comm="syz.2.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 314.207045][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 314.263305][ T5881] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 314.447547][ T5881] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.474636][ T5881] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 314.497464][ T5881] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 314.515842][ T5881] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2816, setting to 64 [ 314.547708][T13194] pim6reg1: entered promiscuous mode [ 314.570472][ T5881] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.577052][T13194] pim6reg1: entered allmulticast mode [ 314.608744][ T5881] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a9, bcdDevice= 0.40 [ 314.636898][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.673179][ T5881] usb 2-1: Product: syz [ 314.683077][ T5881] usb 2-1: Manufacturer: syz [ 314.695377][ T5881] usb 2-1: SerialNumber: syz [ 314.704399][T13180] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 315.247141][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 315.511674][T13230] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3203'. [ 315.582237][T13230] ip6gretap0: entered promiscuous mode [ 315.627355][T13230] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3203'. [ 315.772790][ T5881] cdc_ncm 2-1:1.0: bind() failure [ 315.791018][ T5881] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 315.822817][T13235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.824444][ T5881] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 315.868686][ T5881] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 315.891034][ T5881] usb 2-1: USB disconnect, device number 35 [ 316.282542][T13245] macsec1: entered promiscuous mode [ 316.287856][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 316.337100][T13245] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 316.345016][T13245] macsec1: entered allmulticast mode [ 316.367378][T13245] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 316.447948][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 316.495955][ T3583] Bluetooth: hci3: Frame reassembly failed (-84) [ 316.630811][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 316.654867][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 316.680397][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 316.704208][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 316.747663][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 316.780391][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 316.799256][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 316.823376][ T9] usb 4-1: Product: syz [ 316.838769][ T9] usb 4-1: Manufacturer: syz [ 316.864953][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.874703][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 316.882894][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 316.912339][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 316.958247][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 317.327051][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 317.532555][T13278] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3222'. [ 317.552235][T13278] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3222'. [ 318.367081][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 318.527362][ T5837] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 318.527657][ T5834] Bluetooth: hci3: command 0x1003 tx timeout [ 319.261627][ T5880] usb 4-1: USB disconnect, device number 30 [ 319.301991][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 319.302006][ T30] audit: type=1400 audit(1745451340.912:1065): avc: denied { watch } for pid=13301 comm="syz.3.3234" path="/681" dev="tmpfs" ino=3476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 319.378801][ T30] audit: type=1400 audit(1745451340.942:1066): avc: denied { watch_sb } for pid=13301 comm="syz.3.3234" path="/681" dev="tmpfs" ino=3476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 319.407053][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 319.432909][ T30] audit: type=1400 audit(1745451340.962:1067): avc: denied { create } for pid=13303 comm="syz.6.3233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 319.457143][ T5878] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 319.522312][ T30] audit: type=1400 audit(1745451340.982:1068): avc: denied { write } for pid=13303 comm="syz.6.3233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 319.617171][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 319.659435][ T5878] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 319.672094][ T30] audit: type=1400 audit(1745451341.282:1069): avc: denied { write } for pid=13314 comm="syz.3.3239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 319.683309][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 319.738167][ T5878] usb 3-1: Manufacturer: syz [ 319.755580][ T5878] usb 3-1: config 0 descriptor?? [ 319.970206][T13327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.995727][ T5878] usb 3-1: Cannot retrieve CPort count: 0 [ 320.012178][ T5878] usb 3-1: Cannot retrieve CPort count: -5 [ 320.022287][ T5878] es2_ap_driver 3-1:0.0: probe with driver es2_ap_driver failed with error -5 [ 320.246593][ T5878] usb 3-1: USB disconnect, device number 35 [ 320.267079][ T5880] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 320.347272][ T5827] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 320.439257][ T5880] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 320.450368][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 320.461819][ T5880] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 320.472508][ T5880] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 320.481766][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.493640][T13329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 320.504753][ T5880] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 320.518703][ T5827] usb 4-1: Using ep0 maxpacket: 8 [ 320.525346][ T5827] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 320.541843][ T5827] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 320.553786][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 320.567756][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 320.581985][ T5827] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 320.601207][ T5827] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 320.612310][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.647188][ T5827] usb 4-1: Product: syz [ 320.648358][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 320.651377][ T5827] usb 4-1: Manufacturer: syz [ 320.663546][ T5827] usb 4-1: SerialNumber: syz [ 320.673141][ T5827] usb 4-1: config 0 descriptor?? [ 320.685066][ T5827] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input59 [ 320.818122][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 320.826865][ T24] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 320.840137][ T24] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 320.848744][ T24] usb 7-1: Product: syz [ 320.852925][ T24] usb 7-1: Manufacturer: syz [ 320.867090][ T24] usb 7-1: SerialNumber: syz [ 320.878387][ T24] usb 7-1: config 0 descriptor?? [ 320.928358][ T5880] usb 2-1: USB disconnect, device number 36 [ 321.018781][ T24] usb 4-1: USB disconnect, device number 31 [ 321.163233][ T5878] usb 7-1: USB disconnect, device number 8 [ 321.487080][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 321.499871][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3259'. [ 321.565360][ T30] audit: type=1400 audit(1745451343.172:1070): avc: denied { mount } for pid=13360 comm="syz.1.3260" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 321.605521][ T30] audit: type=1400 audit(1745451343.182:1071): avc: denied { mounton } for pid=13360 comm="syz.1.3260" path="/643/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 321.642805][ T30] audit: type=1400 audit(1745451343.212:1072): avc: denied { create } for pid=13362 comm="syz.3.3261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 321.708672][ T30] audit: type=1400 audit(1745451343.212:1073): avc: denied { connect } for pid=13362 comm="syz.3.3261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 321.765312][ T30] audit: type=1400 audit(1745451343.292:1074): avc: denied { write } for pid=13362 comm="syz.3.3261" path="socket:[140670]" dev="sockfs" ino=140670 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 322.037325][ T5878] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 322.167087][ T5827] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 322.201082][ T5878] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.221348][ T5878] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 322.230781][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.248639][ T5878] usb 7-1: config 0 descriptor?? [ 322.266403][ T5878] pwc: Askey VC010 type 2 USB webcam detected. [ 322.328692][ T5827] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.367895][ T5827] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 322.410755][ T5827] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 322.435330][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.458145][ T5827] usb 2-1: config 0 descriptor?? [ 322.468222][ T5827] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 322.475831][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 322.489748][ T5827] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 322.506923][ T5827] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 322.525647][ T5827] usb 2-1: media controller created [ 322.527077][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 322.548659][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 322.590030][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 322.610167][ T5827] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 322.623532][ T5827] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input60 [ 322.636688][ T5827] dvb-usb: schedule remote query interval to 150 msecs. [ 322.644025][ T5827] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 322.672992][T13373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.686344][ T5878] pwc: recv_control_msg error -32 req 02 val 2b00 [ 322.696772][ T5878] pwc: recv_control_msg error -32 req 02 val 2700 [ 322.707754][T13373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.741849][ T5827] usb 2-1: USB disconnect, device number 37 [ 322.796814][ T5827] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 322.910840][T13390] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3273'. [ 322.932416][ T5878] pwc: recv_control_msg error -71 req 04 val 1000 [ 322.941896][ T5878] pwc: recv_control_msg error -71 req 04 val 1300 [ 322.947463][T13390] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3273'. [ 322.950708][ T5878] pwc: recv_control_msg error -71 req 04 val 1400 [ 322.985532][ T5878] pwc: recv_control_msg error -71 req 02 val 2000 [ 322.994384][ T5878] pwc: recv_control_msg error -71 req 02 val 2100 [ 323.010593][ T5878] pwc: recv_control_msg error -71 req 04 val 1500 [ 323.037396][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 323.058857][ T5878] pwc: recv_control_msg error -71 req 02 val 2500 [ 323.065684][ T5878] pwc: recv_control_msg error -71 req 02 val 2400 [ 323.083940][ T5878] pwc: recv_control_msg error -71 req 02 val 2600 [ 323.111313][ T5878] pwc: recv_control_msg error -71 req 02 val 2900 [ 323.124912][ T5878] pwc: recv_control_msg error -71 req 02 val 2800 [ 323.141527][ T5878] pwc: recv_control_msg error -71 req 04 val 1100 [ 323.170731][ T5878] pwc: recv_control_msg error -71 req 04 val 1200 [ 323.183974][ T5878] pwc: Registered as video103. [ 323.194270][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input61 [ 323.209035][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.226101][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.256665][ T9] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 323.276074][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.280471][ T5878] usb 7-1: USB disconnect, device number 9 [ 323.336092][ T9] usb 4-1: config 0 descriptor?? [ 323.426132][T13400] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 323.567038][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 323.760171][ T9] hid-steam 0003:28DE:1142.0028: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 323.859716][ T9] hid-steam 0003:28DE:1142.0028: Steam wireless receiver connected [ 323.897415][ T9] hid-steam 0003:28DE:1142.0029: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 323.982965][T13419] input: syz0 as /devices/virtual/input/input62 [ 324.012315][T13419] input: failed to attach handler leds to device input62, error: -6 [ 324.607304][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 324.647556][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 324.827447][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 324.861377][ T9] usb 3-1: config 0 has an invalid interface number: 167 but max is 0 [ 324.877135][ T9] usb 3-1: config 0 has no interface number 0 [ 324.889192][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=62b0, bcdDevice=b8.ce [ 324.907059][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.920842][ T9] usb 3-1: Product: syz [ 324.925727][ T9] usb 3-1: Manufacturer: syz [ 324.949025][ T9] usb 3-1: SerialNumber: syz [ 324.961204][ T9] usb 3-1: config 0 descriptor?? [ 325.017994][ T9] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62b0 [ 325.293621][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 325.293637][ T30] audit: type=1326 audit(1745451346.902:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13445 comm="syz.6.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56758e969 code=0x7ffc0000 [ 325.331304][ T30] audit: type=1326 audit(1745451346.942:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13445 comm="syz.6.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe56758e969 code=0x7ffc0000 [ 325.356534][ T30] audit: type=1326 audit(1745451346.942:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13445 comm="syz.6.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56758e969 code=0x7ffc0000 [ 325.406753][ T30] audit: type=1326 audit(1745451346.942:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13445 comm="syz.6.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56758e969 code=0x7ffc0000 [ 325.436928][ T30] audit: type=1326 audit(1745451346.992:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13445 comm="syz.6.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe56758e969 code=0x7ffc0000 [ 325.461236][ T9] gspca_sn9c20x: Write register 1001 failed -71 [ 325.461256][ T9] gspca_sn9c20x: Device initialization failed [ 325.461313][ T9] gspca_sn9c20x 3-1:0.167: probe with driver gspca_sn9c20x failed with error -71 [ 325.463021][ T9] usb 3-1: USB disconnect, device number 36 [ 325.471413][ T30] audit: type=1326 audit(1745451346.992:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13445 comm="syz.6.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56758e969 code=0x7ffc0000 [ 325.540086][ T30] audit: type=1326 audit(1745451346.992:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13445 comm="syz.6.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe567585927 code=0x7ffc0000 [ 325.569331][ T30] audit: type=1326 audit(1745451346.992:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13445 comm="syz.6.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe56752ab39 code=0x7ffc0000 [ 325.647048][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 325.664998][ T30] audit: type=1326 audit(1745451346.992:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13445 comm="syz.6.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe567585927 code=0x7ffc0000 [ 325.721997][ T30] audit: type=1326 audit(1745451346.992:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13445 comm="syz.6.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe56752ab39 code=0x7ffc0000 [ 325.772002][ T5878] usb 4-1: USB disconnect, device number 32 [ 325.813837][ T5878] hid-steam 0003:28DE:1142.0028: Steam wireless receiver disconnected [ 326.479681][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 326.487557][ T2022] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 326.653662][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 326.665500][ T2022] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.676740][ T2022] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.687040][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 326.689633][ T2022] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 326.717089][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.732423][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.742773][ T9] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 326.766124][ T2022] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 326.788349][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.796494][ T2022] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.813176][ T9] usb 4-1: config 0 descriptor?? [ 326.829376][ T2022] usb 7-1: config 0 descriptor?? [ 326.907604][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 327.017108][ T5878] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 327.069464][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.109533][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 327.130386][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 327.143364][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 327.161793][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 327.181894][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 327.189938][ T5878] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 327.208458][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.216776][ T5878] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.238948][ T24] usb 6-1: config 0 descriptor?? [ 327.244292][ T5878] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.273399][T13491] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 327.295229][ T2022] plantronics 0003:047F:FFFF.002A: No inputs registered, leaving [ 327.308365][ T5878] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.320851][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.321473][ T2022] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 327.332411][ T5878] usb 3-1: Product: syz [ 327.349785][ T5878] usb 3-1: Manufacturer: syz [ 327.354454][ T5878] usb 3-1: SerialNumber: syz [ 327.471113][ T9] usb 4-1: language id specifier not provided by device, defaulting to English [ 327.643012][ T5880] usb 7-1: USB disconnect, device number 10 [ 327.672054][ T9] letsketch 0003:6161:4D15.002B: Device info: T [ 327.716740][ T24] plantronics 0003:047F:FFFF.002C: reserved main item tag 0xd [ 327.727144][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 327.759142][ T24] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving [ 327.777996][ T24] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 327.799087][ T5878] usb 3-1: 0:2 : does not exist [ 327.917810][ T9] usb 4-1: Max retries (5) exceeded reading string descriptor 201 [ 327.925756][ T9] letsketch 0003:6161:4D15.002B: probe with driver letsketch failed with error -71 [ 327.944111][ T9] usb 4-1: USB disconnect, device number 33 [ 328.012467][ T5880] usb 6-1: USB disconnect, device number 26 [ 328.136239][T13501] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.3323'. [ 328.264939][T13504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.411398][ T5878] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 328.513913][ T5878] usb 3-1: USB disconnect, device number 37 [ 328.767055][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 328.807087][ T2022] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 328.862319][T13520] rdma_op ffff888029a919f0 conn xmit_rdma 0000000000000000 [ 328.977956][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 328.989196][ T2022] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 329.008214][ T2022] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 329.041897][ T2022] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 329.062752][ T2022] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.091740][T13510] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 329.115229][ T2022] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 329.147710][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.174240][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.204102][ T9] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 329.214032][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.227152][ T9] usb 7-1: config 0 descriptor?? [ 329.381588][ T5878] usb 4-1: USB disconnect, device number 34 [ 329.807056][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 329.845060][ T9] usb 7-1: string descriptor 0 read error: -22 [ 330.071893][ T9] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.002D/input/input65 [ 330.175529][ T9] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.002D/input/input66 [ 330.200506][T13547] KVM: debugfs: duplicate directory 13547-4 [ 330.232272][ T9] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.002D/input/input67 [ 330.274466][ T9] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.002D/input/input68 [ 330.299536][ T9] uclogic 0003:256C:006D.002D: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 330.320444][ T9] usb 7-1: USB disconnect, device number 11 [ 330.679793][T13561] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.702022][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.709278][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.847089][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 331.011098][ T5880] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 331.178530][ T5880] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 331.188975][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.213671][ T5880] usb 6-1: config 0 descriptor?? [ 331.230578][ T5880] cp210x 6-1:0.0: cp210x converter detected [ 331.309907][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 331.309923][ T30] audit: type=1400 audit(1745451352.922:1143): avc: denied { write } for pid=13585 comm="syz.3.3359" path="socket:[147975]" dev="sockfs" ino=147975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 331.635321][ T5880] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 331.847222][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 331.855369][ T5880] usb 6-1: cp210x converter now attached to ttyUSB0 [ 331.867577][ T9] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 331.897043][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 332.019820][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 332.031269][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 332.041551][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 332.055846][ T5880] usb 6-1: USB disconnect, device number 27 [ 332.056481][T13612] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3369'. [ 332.072278][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.083322][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.083896][ T5880] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 332.091465][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 332.091527][ T9] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 332.091546][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.093515][ T9] usb 7-1: config 0 descriptor?? [ 332.135291][T13610] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3369'. [ 332.145455][T13595] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 332.155514][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 332.192074][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 332.194187][ T5880] cp210x 6-1:0.0: device disconnected [ 332.201763][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 332.238594][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 332.259585][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 332.269066][ T9] usb 7-1: media controller created [ 332.279388][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 332.316239][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 332.331839][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 332.355173][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input69 [ 332.407867][T13598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.423188][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 332.438316][T13598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.448922][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 332.486962][ T9] usb 7-1: USB disconnect, device number 12 [ 332.539862][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 332.549450][ T10] usb 4-1: USB disconnect, device number 35 [ 332.927160][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 332.948177][T13625] syz.5.3375 uses old SIOCAX25GETINFO [ 332.948218][ T30] audit: type=1400 audit(1745451354.562:1144): avc: denied { ioctl } for pid=13624 comm="syz.5.3375" path="socket:[149006]" dev="sockfs" ino=149006 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 333.584266][ T30] audit: type=1400 audit(1745451355.192:1145): avc: denied { bind } for pid=13656 comm="syz.5.3388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 333.603614][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.667735][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 333.827346][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 333.843204][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.854923][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 333.875248][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.925528][ T9] usb 4-1: config 0 descriptor?? [ 333.968636][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 334.047598][ T5827] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 334.228810][ T5827] usb 2-1: Using ep0 maxpacket: 16 [ 334.246515][ T5827] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.260909][ T5827] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.272983][ T5827] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 334.287740][ T5880] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 334.304729][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.321766][ T5827] usb 2-1: Product: syz [ 334.326105][ T5827] usb 2-1: Manufacturer: syz [ 334.331181][ T5827] usb 2-1: SerialNumber: syz [ 334.362308][T13674] netlink: 61211 bytes leftover after parsing attributes in process `syz.6.3396'. [ 334.365326][ T9] mcp2221 0003:04D8:00DD.002E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 334.463207][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.501048][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.526074][ T30] audit: type=1400 audit(1745451356.132:1146): avc: denied { create } for pid=13679 comm="syz.5.3399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 334.565007][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 334.625765][ T30] audit: type=1400 audit(1745451356.142:1147): avc: denied { write } for pid=13679 comm="syz.5.3399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 334.664400][ T5880] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 334.727132][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.761795][ T5880] usb 3-1: config 0 descriptor?? [ 334.822842][ T5827] usb 2-1: 0:2 : does not exist [ 334.941461][ T5878] usb 4-1: USB disconnect, device number 36 [ 335.017170][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 335.204224][ T5880] plantronics 0003:047F:FFFF.002F: No inputs registered, leaving [ 335.269664][ T5880] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 335.392490][ T30] audit: type=1400 audit(1745451357.002:1148): avc: denied { read } for pid=13699 comm="syz.5.3408" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 335.449476][ T5827] usb 2-1: USB disconnect, device number 38 [ 335.473062][ T30] audit: type=1400 audit(1745451357.032:1149): avc: denied { open } for pid=13699 comm="syz.5.3408" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 335.507110][ T30] audit: type=1400 audit(1745451357.052:1150): avc: denied { ioctl } for pid=13699 comm="syz.5.3408" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 335.833704][T13714] syzkaller1: entered promiscuous mode [ 335.839625][T13714] syzkaller1: entered allmulticast mode [ 335.914037][ T30] audit: type=1400 audit(1745451357.522:1151): avc: denied { create } for pid=13719 comm="syz.5.3417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 335.938445][ T30] audit: type=1400 audit(1745451357.552:1152): avc: denied { write } for pid=13719 comm="syz.5.3417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 336.057137][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 336.431198][ T30] audit: type=1400 audit(1745451358.042:1153): avc: denied { connect } for pid=13738 comm="syz.5.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 336.476395][ T30] audit: type=1400 audit(1745451358.042:1154): avc: denied { name_connect } for pid=13738 comm="syz.5.3426" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 336.529495][ T30] audit: type=1400 audit(1745451358.112:1155): avc: denied { read } for pid=13738 comm="syz.5.3426" laddr=127.0.0.1 lport=43382 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 336.553839][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.068850][ T5877] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 337.087076][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 337.237217][ T5877] usb 6-1: Using ep0 maxpacket: 16 [ 337.265041][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.290999][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.332639][ T5877] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 337.373807][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.405719][ T5877] usb 6-1: config 0 descriptor?? [ 337.474765][ T5880] usb 3-1: reset high-speed USB device number 38 using dummy_hcd [ 337.496229][ T5880] usb 3-1: device reset changed ep0 maxpacket size! [ 337.546244][ T5878] usb 3-1: USB disconnect, device number 38 [ 337.731392][ T5878] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 337.839475][ T5877] kye 0003:0458:5016.0030: control desc unexpectedly large [ 337.865279][ T5877] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0030/input/input70 [ 337.898752][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 337.906078][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.931362][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.941818][ T5880] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 337.964431][ T5878] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 337.974530][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.990769][ T5877] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0030/input/input71 [ 338.008441][ T5878] usb 3-1: config 0 descriptor?? [ 338.119252][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 338.127132][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 338.156782][ T5877] kye 0003:0458:5016.0030: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 338.182624][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.198370][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50723, setting to 1024 [ 338.211464][ T5877] usb 6-1: USB disconnect, device number 28 [ 338.220972][ T5880] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 338.231871][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.249951][ T5880] usb 4-1: config 0 descriptor?? [ 338.299745][T13778] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 338.311310][ T5880] hub 4-1:0.0: USB hub found [ 338.465009][ T5878] kye 0003:0458:5016.0031: control desc unexpectedly large [ 338.481642][ T5878] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0031/input/input72 [ 338.520937][ T5880] hub 4-1:0.0: 1 port detected [ 338.583202][ T5878] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0031/input/input73 [ 338.651148][ T5878] kye 0003:0458:5016.0031: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 338.710894][ T5878] usb 3-1: USB disconnect, device number 39 [ 338.879429][T13813] block nbd6: shutting down sockets [ 338.920656][T13813] block nbd6: NBD_DISCONNECT [ 338.925348][T13813] block nbd6: Send disconnect failed -22 [ 339.167052][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 339.265702][ T30] audit: type=1400 audit(1745451360.872:1156): avc: denied { setopt } for pid=13818 comm="syz.6.3460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 339.297237][ T5878] usb 4-1: reset high-speed USB device number 37 using dummy_hcd [ 339.527928][T13831] nbd: device at index 6 is going down [ 339.707633][ T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 339.823572][T13840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3469'. [ 339.903831][ T24] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 339.925635][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.955821][ T24] usb 2-1: config 0 descriptor?? [ 340.207049][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 340.290998][ T30] audit: type=1400 audit(1745451361.882:1157): avc: denied { setopt } for pid=13862 comm="syz.5.3476" lport=44998 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 340.398524][ T5878] usb 4-1: device descriptor read/64, error -71 [ 340.657867][ T5878] usb 4-1: reset high-speed USB device number 37 using dummy_hcd [ 340.666696][ T5878] usb 4-1: device reset changed ep0 maxpacket size! [ 340.681477][ T5880] usb 4-1: USB disconnect, device number 37 [ 340.968606][ T5880] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 340.992955][ T24] usb 2-1: Cannot set autoneg [ 341.000205][ T24] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 341.042915][ T24] usb 2-1: USB disconnect, device number 39 [ 341.168733][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 341.176571][ T5880] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 341.189353][ T5880] usb 4-1: config 179 has no interface number 0 [ 341.211516][ T5880] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 341.247157][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 341.254367][ T5880] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 341.302817][ T5880] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 341.337204][ T5880] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 341.359445][ T5881] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 341.378940][ T5880] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 341.399490][ T5880] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 341.409295][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.420160][T13848] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 341.568089][ T5881] usb 7-1: Using ep0 maxpacket: 8 [ 341.580439][ T5881] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 341.606251][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.640577][ T5881] usb 7-1: Product: syz [ 341.654322][ T5880] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input74 [ 341.678931][ T5881] usb 7-1: Manufacturer: syz [ 341.686041][ T5881] usb 7-1: SerialNumber: syz [ 341.720602][ T5881] usb 7-1: config 0 descriptor?? [ 341.879770][ T5880] usb 4-1: USB disconnect, device number 38 [ 341.879820][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 341.894118][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 341.904855][ T5880] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 341.940283][ T5881] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 341.980482][ T5881] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 342.024666][ T5881] usb 7-1: USB disconnect, device number 13 [ 342.033032][T13893] gre0: entered promiscuous mode [ 342.098531][T13893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3488'. [ 342.160624][ T30] audit: type=1400 audit(1745451363.772:1158): avc: denied { connect } for pid=13896 comm="syz.5.3489" lport=512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 342.275492][ T30] audit: type=1400 audit(1745451363.882:1159): avc: denied { mounton } for pid=13900 comm="syz.1.3491" path="/" dev="configfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 342.307237][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 342.348321][ T30] audit: type=1400 audit(1745451363.932:1160): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 342.444095][T13907] overlayfs: unescaped trailing colons in lowerdir mount option. [ 342.644401][T13920] netlink: 'syz.1.3497': attribute type 29 has an invalid length. [ 342.680807][T13918] ipvlan2: entered promiscuous mode [ 342.697273][T13918] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 342.704666][T13918] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 342.722316][T13922] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3497'. [ 342.906575][T13920] netlink: 'syz.1.3497': attribute type 29 has an invalid length. [ 343.058993][T13928] ipvlan2: entered promiscuous mode [ 343.079635][T13928] ipvlan2: entered allmulticast mode [ 343.091947][T13928] bridge0: entered allmulticast mode [ 343.114220][T13928] batman_adv: batadv0: Adding interface: ipvlan2 [ 343.127938][T13928] batman_adv: batadv0: Interface activated: ipvlan2 [ 343.337079][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 344.058457][T13958] /dev/nullb0: Can't open blockdev [ 344.157777][ T30] audit: type=1326 audit(1745451365.752:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13960 comm="syz.5.3519" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f119e78e969 code=0x0 [ 344.377605][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 344.517218][ T5881] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 344.577944][ T5880] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 344.689161][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 344.709917][ T5881] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 344.742778][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 344.765190][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 344.784542][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 344.802409][ T5881] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 344.819197][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.828790][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 344.849574][ T5881] usb 4-1: Product: syz [ 344.855833][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 344.869432][ T5881] usb 4-1: Manufacturer: syz [ 344.898283][ T5881] usb 4-1: SerialNumber: syz [ 344.911062][ T5880] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 344.929207][ T5881] usb 4-1: config 0 descriptor?? [ 344.944317][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.954072][T13968] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 344.978767][T13968] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 344.988718][ T5880] usb 3-1: Product: syz [ 344.992971][ T5880] usb 3-1: Manufacturer: syz [ 345.007982][ T5880] usb 3-1: SerialNumber: syz [ 345.013468][ T5881] usb 4-1: ucan: probing device on interface #0 [ 345.034309][ T5880] usb 3-1: config 0 descriptor?? [ 345.177605][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 345.199372][T13999] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 345.214526][T13999] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 345.265050][ T5880] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 345.357442][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 345.364248][ T9] usb 2-1: config 0 has no interfaces? [ 345.371222][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 345.393469][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.406124][ T9] usb 2-1: config 0 descriptor?? [ 345.417050][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 345.487790][ T9] usb 3-1: USB disconnect, device number 40 [ 345.642620][ T5881] ucan 4-1:0.0 can0: registered device [ 345.741862][ T9] usb 2-1: USB disconnect, device number 40 [ 345.842657][ T5881] ucan 4-1:0.0 can0: firmware string: Á [ 345.854725][T14007] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 345.867150][ T30] audit: type=1400 audit(1745451367.462:1162): avc: denied { read } for pid=14006 comm="syz.5.3539" path="socket:[157347]" dev="sockfs" ino=157347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 345.983819][ T30] audit: type=1326 audit(1745451367.592:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14008 comm="syz.5.3540" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f119e78e969 code=0x0 [ 346.121762][ T5881] usb 4-1: USB disconnect, device number 39 [ 346.404558][T14016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3542'. [ 346.447047][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 346.678365][ T30] audit: type=1400 audit(1745451368.282:1164): avc: denied { read } for pid=14019 comm="syz.6.3545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 346.933928][T14031] tracefs: Invalid gid '0x00000000ffffffff' [ 346.934319][ T30] audit: type=1400 audit(1745451368.542:1165): avc: denied { remount } for pid=14030 comm="syz.5.3550" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 346.941860][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3551'. [ 347.042781][T14033] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.052119][T14033] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.060606][T14033] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.068928][T14033] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.153672][T14033] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.162219][T14033] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.171064][T14033] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.179533][T14033] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.497293][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 347.781132][ T30] audit: type=1400 audit(1745451369.392:1166): avc: denied { write } for pid=14055 comm="syz.2.3559" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 347.997158][ T9] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 348.182396][ T9] usb 4-1: config 0 has no interfaces? [ 348.188845][ T9] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 348.209070][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.229534][ T9] usb 4-1: config 0 descriptor?? [ 348.453316][T14073] loop2: detected capacity change from 0 to 7 [ 348.483663][T14053] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3556'. [ 348.487774][T14073] Dev loop2: unable to read RDB block 7 [ 348.516601][T14053] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3556'. [ 348.520662][T14073] loop2: unable to read partition table [ 348.531558][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 348.554032][ T9] usb 4-1: USB disconnect, device number 40 [ 348.581309][T14073] loop2: partition table beyond EOD, truncated [ 348.605576][T14073] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 349.567037][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 349.737071][ T5880] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 349.909135][T14093] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 349.920098][ T5880] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.930518][ T5880] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.972149][ T5880] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 349.987113][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 350.015468][ T5880] usb 7-1: SerialNumber: syz [ 350.160567][T14099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 350.251358][ T5880] usb 7-1: 0:2 : does not exist [ 350.299962][ T5880] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 350.362155][ T5880] usb 7-1: USB disconnect, device number 14 [ 350.607120][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 350.689831][T14105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3580'. [ 350.877229][T14109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3580'. [ 350.941019][T14109] nbd: device at index 64 is going down [ 351.237335][ T5880] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 351.397139][ T58] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 351.416643][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.459277][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.488709][ T5880] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 351.518507][ T5880] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 351.548854][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.578610][ T5880] usb 7-1: config 0 descriptor?? [ 351.587044][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 351.611003][ T58] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 351.623194][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.646943][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 456.653906][ C0] rcu: 1-...!: (0 ticks this GP) idle=db74/1/0x4000000000000000 softirq=100341/100341 fqs=5 [ 456.665199][ C0] rcu: (detected by 0, t=10502 jiffies, g=61613, q=375 ncpus=2) [ 456.672914][ C0] Sending NMI from CPU 0 to CPUs 1: [ 456.672936][ C1] NMI backtrace for cpu 1 [ 456.672947][ C1] CPU: 1 UID: 0 PID: 5878 Comm: kworker/1:4 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 456.672963][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 456.672971][ C1] Workqueue: events_freezable_pwr_efficient sync_hw_clock [ 456.672987][ C1] RIP: 0010:write_comp_data+0x11/0x90 [ 456.673000][ C1] Code: cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 97 96 eb 11 <65> 8b 05 a8 96 eb 11 a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 [ 456.673016][ C1] RSP: 0018:ffffc90000a08e38 EFLAGS: 00000046 [ 456.673026][ C1] RAX: 0000000000000001 RBX: ffff8880b8527940 RCX: ffffffff81a87d6e [ 456.673034][ C1] RDX: ffff88801ef84880 RSI: 0000000000000000 RDI: 0000000000000001 [ 456.673042][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 456.673049][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880b8527840 [ 456.673057][ C1] R13: 0000000000000001 R14: ffff8880291bb340 R15: ffffffff8982ca90 [ 456.673064][ C1] FS: 0000000000000000(0000) GS:ffff888124ab2000(0000) knlGS:0000000000000000 [ 456.673077][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.673085][ C1] CR2: 0000001b2fc1eff8 CR3: 0000000021f02000 CR4: 00000000003526f0 [ 456.673093][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 456.673101][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 456.673109][ C1] Call Trace: [ 456.673113][ C1] [ 456.673118][ C1] __hrtimer_run_queues+0x58e/0xad0 [ 456.673137][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 456.673150][ C1] ? read_tsc+0x9/0x20 [ 456.673168][ C1] ? rcu_is_watching+0x12/0xc0 [ 456.673184][ C1] hrtimer_interrupt+0x397/0x8e0 [ 456.673203][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 456.673219][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 456.673235][ C1] [ 456.673238][ C1] [ 456.673243][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 456.673256][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 456.673268][ C1] Code: b0 0e 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 f2 1a ee 0e 0f 82 74 02 00 00 8b 35 8a 4a ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 c9 af 0e 12 0f 85 c7 02 00 00 48 83 c4 [ 456.673279][ C1] RSP: 0018:ffffc900030f7bf0 EFLAGS: 00000206 [ 456.673289][ C1] RAX: 0000000000000046 RBX: ffffc900030f7d18 RCX: 0000000000000001 [ 456.673296][ C1] RDX: 0000000000000000 RSI: ffffffff8dbca2c7 RDI: ffffffff8bf465c0 [ 456.673304][ C1] RBP: 0000000000000000 R08: 437e9f7f0224fc7a R09: ffffffff966bef30 [ 456.673312][ C1] R10: 0000000000000008 R11: 0000000000002be0 R12: 0000000000000001 [ 456.673319][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.673334][ C1] ? rcu_is_watching+0x12/0xc0 [ 456.673349][ C1] process_one_work+0x932/0x1b70 [ 456.673363][ C1] ? process_one_work+0x929/0x1b70 [ 456.673380][ C1] ? __pfx_process_one_work+0x10/0x10 [ 456.673396][ C1] ? assign_work+0x1a0/0x250 [ 456.673410][ C1] worker_thread+0x6c8/0xf10 [ 456.673426][ C1] ? __kthread_parkme+0x19e/0x250 [ 456.673444][ C1] ? __pfx_worker_thread+0x10/0x10 [ 456.673457][ C1] kthread+0x3c2/0x780 [ 456.673469][ C1] ? __pfx_kthread+0x10/0x10 [ 456.673480][ C1] ? __pfx_kthread+0x10/0x10 [ 456.673491][ C1] ? __pfx_kthread+0x10/0x10 [ 456.673503][ C1] ? __pfx_kthread+0x10/0x10 [ 456.673514][ C1] ? rcu_is_watching+0x12/0xc0 [ 456.673529][ C1] ? __pfx_kthread+0x10/0x10 [ 456.673541][ C1] ret_from_fork+0x45/0x80 [ 456.673553][ C1] ? __pfx_kthread+0x10/0x10 [ 456.673565][ C1] ret_from_fork_asm+0x1a/0x30 [ 456.673588][ C1] [ 456.673932][ C0] rcu: rcu_preempt kthread starved for 10492 jiffies! g61613 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 457.045783][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 457.055742][ C0] rcu: RCU grace-period kthread stack dump: [ 457.061613][ C0] task:rcu_preempt state:R running task stack:27704 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 457.075092][ C0] Call Trace: [ 457.078360][ C0] [ 457.081286][ C0] __schedule+0x116f/0x5de0 [ 457.085794][ C0] ? find_held_lock+0x2b/0x80 [ 457.090472][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 457.095404][ C0] ? __pfx___schedule+0x10/0x10 [ 457.100256][ C0] ? find_held_lock+0x2b/0x80 [ 457.104929][ C0] ? schedule+0x2d7/0x3a0 [ 457.109256][ C0] schedule+0xe7/0x3a0 [ 457.113335][ C0] schedule_timeout+0x123/0x290 [ 457.118186][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 457.123550][ C0] ? __pfx_process_timeout+0x10/0x10 [ 457.128836][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 457.134637][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 457.140101][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 457.144858][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 457.150138][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 457.154994][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 457.160810][ C0] rcu_gp_kthread+0x270/0x380 [ 457.165484][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 457.170673][ C0] ? rcu_is_watching+0x12/0xc0 [ 457.175429][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 457.180625][ C0] ? __kthread_parkme+0x19e/0x250 [ 457.185647][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 457.190838][ C0] kthread+0x3c2/0x780 [ 457.194898][ C0] ? __pfx_kthread+0x10/0x10 [ 457.199478][ C0] ? __pfx_kthread+0x10/0x10 [ 457.204061][ C0] ? __pfx_kthread+0x10/0x10 [ 457.208641][ C0] ? __pfx_kthread+0x10/0x10 [ 457.213222][ C0] ? rcu_is_watching+0x12/0xc0 [ 457.217980][ C0] ? __pfx_kthread+0x10/0x10 [ 457.222567][ C0] ret_from_fork+0x45/0x80 [ 457.226975][ C0] ? __pfx_kthread+0x10/0x10 [ 457.231561][ C0] ret_from_fork_asm+0x1a/0x30 [ 457.236335][ C0] [ 457.239344][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 457.245660][ C0] CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 457.257625][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 457.267680][ C0] Workqueue: events_unbound toggle_allocation_gate [ 457.274178][ C0] RIP: 0010:smp_call_function_many_cond+0x4a5/0x1290 [ 457.280849][ C0] Code: 89 ee e8 be 12 0c 00 85 ed 74 48 48 8b 44 24 20 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 f4 83 c5 03 e8 5d 17 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 de 0b 00 00 8b 43 08 31 [ 457.300448][ C0] RSP: 0018:ffffc90000be7938 EFLAGS: 00000293 [ 457.306505][ C0] RAX: 0000000000000000 RBX: ffff8880b853f740 RCX: ffffffff81af38b9 [ 457.314474][ C0] RDX: ffff88801ee80000 RSI: ffffffff81af3893 RDI: 0000000000000005 [ 457.322439][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 457.330399][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170a7ee9 [ 457.338359][ C0] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff8880b843b040 [ 457.346321][ C0] FS: 0000000000000000(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 457.355241][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.361817][ C0] CR2: 0000001b2c810ff8 CR3: 000000000e180000 CR4: 00000000003526f0 [ 457.369780][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 457.377741][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 457.385702][ C0] Call Trace: [ 457.388970][ C0] [ 457.391902][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 457.396924][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 457.402031][ C0] text_poke_bp_batch+0x220/0x760 [ 457.407075][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 457.412617][ C0] ? __jump_label_patch+0x1db/0x400 [ 457.417819][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 457.424057][ C0] ? find_held_lock+0x2b/0x80 [ 457.428735][ C0] text_poke_finish+0x30/0x40 [ 457.433407][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 457.439383][ C0] jump_label_update+0x376/0x550 [ 457.444313][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 457.450195][ C0] static_key_enable+0x1a/0x20 [ 457.454951][ C0] toggle_allocation_gate+0xfa/0x280 [ 457.460229][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 457.466117][ C0] ? rcu_is_watching+0x12/0xc0 [ 457.470880][ C0] process_one_work+0x9cc/0x1b70 [ 457.475817][ C0] ? __pfx_kfree_rcu_monitor+0x10/0x10 [ 457.481267][ C0] ? __pfx_process_one_work+0x10/0x10 [ 457.486637][ C0] ? assign_work+0x1a0/0x250 [ 457.491235][ C0] worker_thread+0x6c8/0xf10 [ 457.495829][ C0] ? __pfx_worker_thread+0x10/0x10 [ 457.500931][ C0] kthread+0x3c2/0x780 [ 457.504993][ C0] ? __pfx_kthread+0x10/0x10 [ 457.509578][ C0] ? __pfx_kthread+0x10/0x10 [ 457.514156][ C0] ? __pfx_kthread+0x10/0x10 [ 457.518734][ C0] ? __pfx_kthread+0x10/0x10 [ 457.523311][ C0] ? rcu_is_watching+0x12/0xc0 [ 457.528067][ C0] ? __pfx_kthread+0x10/0x10 [ 457.532648][ C0] ret_from_fork+0x45/0x80 [ 457.537054][ C0] ? __pfx_kthread+0x10/0x10 [ 457.541635][ C0] ret_from_fork_asm+0x1a/0x30 [ 457.546407][ C0]