last executing test programs: 9.440947191s ago: executing program 1 (id=5406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000300)={'pcl711\x00', [0x2f00, 0x5, 0xd09a, 0x1002, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x10, 0x3, 0x4, 0xaba5, 0xffff, 0x100006, 0x5, 0x8, 0x830, 0x40, 0x10000, 0xa, 0x800, 0xe2df, 0x2, 0x8001, 0x7, 0xb, 0x4, 0x5, 0x800]}) 8.718273446s ago: executing program 0 (id=5410): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r3, 0x111, 0x3, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000040)=0x4, 0x4) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='RECLEV\nPHONEOUT\nSPEAKER \'CD\' 00000000000000000000\nDIGITA'], 0xb8) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r7, r6, 0x0) r8 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) 8.6638183s ago: executing program 3 (id=5411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r3, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 8.50110786s ago: executing program 1 (id=5412): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009040100011870f50009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 6.772217968s ago: executing program 3 (id=5416): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, 0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) clock_getres(0xfffffffffffffff6, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0xd, r3, 0x1, 0x0, 0x6, @remote}, 0x14) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.572875989s ago: executing program 3 (id=5418): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x11, 0x1, @thr={0x0, 0x0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000000600000000000000fddbdf25ffffffff00af00000000000000000000000004d30a003300"], 0x28}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched_retired(r3, &(0x7f00000067c0)={0x0, 0x0, &(0x7f0000006780)={&(0x7f0000006600)=@delqdisc={0x24, 0x25, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x9}, {0x4, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x4040004) 5.777281727s ago: executing program 4 (id=5423): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000000, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) r2 = syz_io_uring_setup(0x18d6, 0x0, &(0x7f0000ffe000), 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, 0x0, 0xfe) openat(0xffffffffffffff9c, 0x0, 0x185342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) 5.593738671s ago: executing program 0 (id=5424): socket$inet6_udp(0xa, 0x2, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8442, 0x5c) syz_usbip_server_init(0x3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_80211_inject_frame(0x0, 0x0, 0xb5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc1}) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000140)={0x7, 0x5, 0xfc000000}) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 5.478270209s ago: executing program 1 (id=5425): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) 5.10407635s ago: executing program 3 (id=5428): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.814929846s ago: executing program 4 (id=5431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x72) 4.59222976s ago: executing program 4 (id=5432): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 4.584975848s ago: executing program 0 (id=5433): close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x505, 0x0, 0x25dfdbf9, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = gettid() socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x7, 0x2f, 0x1}) 4.348168287s ago: executing program 1 (id=5434): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r3, 0x111, 0x3, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000040)=0x4, 0x4) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='RECLEV\nPHONEOUT\nSPEAKER \'CD\' 00000000000000000000\nDIGITA'], 0xb8) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r7, r6, 0x0) r8 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) 3.67270724s ago: executing program 4 (id=5436): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) unshare(0x28000600) flock(r1, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e00000085000000500000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@sg0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r3 = gettid() mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',access=', @ANYRESDEC=0x0]) gettid() timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)='ethtool\x00'}, 0x30) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) linkat(r1, &(0x7f0000000300)='./file0\x00', r1, &(0x7f0000000340)='./file0\x00', 0x1000) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) 3.586516696s ago: executing program 0 (id=5437): syz_usb_connect(0x5, 0x36, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f92400905090aff03f707090905870240"], 0x0) 3.318580059s ago: executing program 4 (id=5438): socket(0x10, 0x3, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, 0x0, 0x0) dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x24) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 2.858227909s ago: executing program 2 (id=5439): socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x24) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r3, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) 2.793824288s ago: executing program 3 (id=5440): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x4}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r1, r2, 0x4, r0}, 0x10) 2.203113192s ago: executing program 3 (id=5441): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000001640)='debugfs\x00', 0x208000, 0x0) fchdir(0xffffffffffffffff) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000002000"], 0x48}}, 0x4000) 2.087544128s ago: executing program 4 (id=5442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) 1.916157707s ago: executing program 2 (id=5443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x72) 1.746985667s ago: executing program 1 (id=5444): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) sendmsg$NL80211_CMD_JOIN_OCB(r0, 0x0, 0x448d0) 1.708340994s ago: executing program 2 (id=5445): truncate(0x0, 0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r3, 0x8f5, 0x100000000000000) read$FUSE(r2, &(0x7f00000003c0)={0x2020}, 0x2020) 1.416922179s ago: executing program 2 (id=5446): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000440)={0x1, 0x1, 0x3000, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3, 0x0, 0x0) 1.415122976s ago: executing program 1 (id=5447): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x4, 0x4000000, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4004, 0x0, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) close(r8) 440.594048ms ago: executing program 2 (id=5448): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0xc00, &(0x7f0000000480)=ANY=[]) chdir(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) creat(&(0x7f0000000080)='./file0\x00', 0xa) capset(0x0, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=rdma,port=0x000000']) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1800) 201.505729ms ago: executing program 0 (id=5449): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) clock_getres(0xfffffffffffffff6, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0xd, r3, 0x1, 0x0, 0x6, @remote}, 0x14) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 124.992726ms ago: executing program 2 (id=5450): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x0, &(0x7f0000000280)}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x21, 0xffffffff, 0xfffffffff12bd390, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x1, 0x6}}, 0x50) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 0s ago: executing program 0 (id=5451): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="200f03000000b14f04"], 0x0, 0x0}) kernel console output (not intermixed with test programs): T30] audit: type=1400 audit(1757804962.466:7114): avc: denied { ioctl } for pid=24759 comm="syz.0.4429" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1558.250952][ T30] audit: type=1400 audit(1757804962.576:7115): avc: denied { read } for pid=24761 comm="syz.2.4430" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1558.361384][ T30] audit: type=1400 audit(1757804962.576:7116): avc: denied { open } for pid=24761 comm="syz.2.4430" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1558.853090][T20956] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1559.309366][T24788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4439'. [ 1559.372658][T20956] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1559.383864][T20956] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1559.395436][T20956] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1559.404424][T24788] bond3 (unregistering): Released all slaves [ 1559.413631][T20956] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1559.429133][T20956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.439246][T20956] usb 2-1: config 0 descriptor?? [ 1559.493494][T24788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4439'. [ 1560.057543][T20956] usb 2-1: string descriptor 0 read error: -22 [ 1560.188195][ T30] audit: type=1326 audit(1757804964.596:7117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24803 comm="syz.0.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98af8eba9 code=0x7ffc0000 [ 1560.221268][ T30] audit: type=1326 audit(1757804964.596:7118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24803 comm="syz.0.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7ff98af8eba9 code=0x7ffc0000 [ 1560.253548][ T30] audit: type=1326 audit(1757804964.596:7119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24803 comm="syz.0.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98af8eba9 code=0x7ffc0000 [ 1560.283089][T20956] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0009/input/input9 [ 1560.303128][T20956] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0009/input/input10 [ 1560.348897][T20956] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0009/input/input11 [ 1560.417894][T20956] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0009/input/input12 [ 1560.479092][T20956] uclogic 0003:256C:006D.0009: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 1560.517808][T20956] usb 2-1: USB disconnect, device number 63 [ 1560.617993][T24815] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1564.570878][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1564.570903][ T30] audit: type=1400 audit(1757804968.996:7140): avc: denied { write } for pid=24867 comm="syz.0.4464" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1564.732278][T24870] netlink: 'syz.1.4465': attribute type 2 has an invalid length. [ 1564.740235][T24870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 1564.760010][T24870] netlink: 'syz.1.4465': attribute type 2 has an invalid length. [ 1564.769095][T24870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 1565.157579][T21042] libceph: connect (1)[c::]:6789 error -101 [ 1565.164073][T21042] libceph: mon0 (1)[c::]:6789 connect error [ 1565.195204][T21042] libceph: connect (1)[c::]:6789 error -101 [ 1565.201942][T21042] libceph: mon0 (1)[c::]:6789 connect error [ 1565.463594][T21042] libceph: connect (1)[c::]:6789 error -101 [ 1565.473425][T21042] libceph: mon0 (1)[c::]:6789 connect error [ 1565.701616][T24879] ceph: No mds server is up or the cluster is laggy [ 1565.817434][T24901] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4474'. [ 1565.909093][T24901] bond1 (unregistering): Released all slaves [ 1565.918366][T24906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4474'. [ 1567.080984][T21042] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1567.299856][T24927] _ÐZ`Ô€@ÿÃ: entered promiscuous mode [ 1567.718117][T21042] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1567.733317][T24929] tipc: Started in network mode [ 1567.738256][T24929] tipc: Node identity 56edf703d4dc, cluster identity 4711 [ 1567.745588][T24929] tipc: Enabled bearer , priority 0 [ 1567.756190][T21042] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1567.779524][T24929] syzkaller0: entered promiscuous mode [ 1567.785101][T24929] syzkaller0: entered allmulticast mode [ 1567.800526][T24929] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1567.811504][T24928] tipc: Resetting bearer [ 1567.896527][T24928] tipc: Disabling bearer [ 1567.921885][T21042] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1568.159425][T21042] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1568.187977][T21042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.311796][T21042] usb 2-1: config 0 descriptor?? [ 1568.496306][T24941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4487'. [ 1568.565098][T24949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4487'. [ 1568.577686][T24941] bond3 (unregistering): Released all slaves [ 1568.801107][ T913] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1568.936575][T21042] usb 2-1: string descriptor 0 read error: -22 [ 1568.953361][ T913] usb 4-1: Using ep0 maxpacket: 8 [ 1568.968214][ T913] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 1569.064303][ T913] usb 4-1: config 0 has no interface number 0 [ 1569.073720][ T913] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 1569.083078][ T913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.091395][ T913] usb 4-1: Product: syz [ 1569.095586][ T913] usb 4-1: Manufacturer: syz [ 1569.100204][ T913] usb 4-1: SerialNumber: syz [ 1569.107083][ T913] usb 4-1: config 0 descriptor?? [ 1569.599020][T21042] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000A/input/input13 [ 1569.634320][T21042] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000A/input/input14 [ 1569.645907][ T913] peak_usb 4-1:0.56: PEAK-System PCAN-USB X6 v156 fw v58.86.98 (2 channels) [ 1569.665352][T21042] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000A/input/input15 [ 1569.688496][T21042] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000A/input/input16 [ 1569.712977][T21042] uclogic 0003:256C:006D.000A: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 1569.733392][T21042] usb 2-1: USB disconnect, device number 64 [ 1569.836846][ T913] peak_usb 4-1:0.56 can0: sending command failure: -8 [ 1569.851853][ T913] peak_usb 4-1:0.56 can0: sending command failure: -8 [ 1569.859059][ T913] peak_usb 4-1:0.56 can0: sending command failure: -8 [ 1569.939288][ T913] peak_usb 4-1:0.56: probe with driver peak_usb failed with error -8 [ 1570.078449][T20956] usb 4-1: USB disconnect, device number 83 [ 1570.094843][T24980] bond3 (unregistering): Released all slaves [ 1570.103208][ T30] audit: type=1326 audit(1757804974.546:7141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24977 comm="syz.2.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf58eba9 code=0x7ffc0000 [ 1570.126951][ C0] vkms_vblank_simulate: vblank timer overrun [ 1570.142618][T24983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4503'. [ 1570.162272][ T30] audit: type=1326 audit(1757804974.546:7142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24977 comm="syz.2.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf58eba9 code=0x7ffc0000 [ 1570.267464][ T30] audit: type=1326 audit(1757804974.546:7143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24977 comm="syz.2.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fbfdf58eba9 code=0x7ffc0000 [ 1570.316024][ T30] audit: type=1326 audit(1757804974.546:7144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24977 comm="syz.2.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf58eba9 code=0x7ffc0000 [ 1570.343484][ T30] audit: type=1326 audit(1757804974.546:7145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24977 comm="syz.2.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf58eba9 code=0x7ffc0000 [ 1570.367087][ C0] vkms_vblank_simulate: vblank timer overrun [ 1570.392539][ T30] audit: type=1326 audit(1757804974.546:7146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24977 comm="syz.2.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfdf58eba9 code=0x7ffc0000 [ 1570.416124][ C0] vkms_vblank_simulate: vblank timer overrun [ 1570.426175][ T30] audit: type=1326 audit(1757804974.546:7147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24977 comm="syz.2.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf58eba9 code=0x7ffc0000 [ 1570.449668][ C0] vkms_vblank_simulate: vblank timer overrun [ 1570.479437][ T30] audit: type=1326 audit(1757804974.546:7148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24977 comm="syz.2.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfdf58eba9 code=0x7ffc0000 [ 1570.508313][ T30] audit: type=1326 audit(1757804974.546:7149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24977 comm="syz.2.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf58eba9 code=0x7ffc0000 [ 1570.531807][ C0] vkms_vblank_simulate: vblank timer overrun [ 1570.539549][ T30] audit: type=1326 audit(1757804974.546:7150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24977 comm="syz.2.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf58eba9 code=0x7ffc0000 [ 1570.563184][ C0] vkms_vblank_simulate: vblank timer overrun [ 1572.161054][T20956] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1572.455890][T20956] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1572.861663][T20956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.046218][T10132] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1573.301857][T20956] usb 3-1: Product: syz [ 1573.309127][T20956] usb 3-1: Manufacturer: syz [ 1573.333384][T20956] usb 3-1: SerialNumber: syz [ 1573.492953][T20956] usb 3-1: can't set config #1, error -71 [ 1573.500553][T20956] usb 3-1: USB disconnect, device number 64 [ 1573.594698][T10132] usb 5-1: Using ep0 maxpacket: 32 [ 1573.697416][T10132] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1573.707628][T10132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.718295][T10132] usb 5-1: config 0 descriptor?? [ 1573.726504][T10132] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1573.801071][T21042] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1573.970962][T21042] usb 2-1: Using ep0 maxpacket: 8 [ 1574.000111][T21042] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1574.055383][T21042] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.088374][T21042] usb 2-1: Product: syz [ 1574.097874][T21042] usb 2-1: Manufacturer: syz [ 1574.108281][T21042] usb 2-1: SerialNumber: syz [ 1574.336930][T21042] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 65 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1574.562721][ T913] usb 2-1: USB disconnect, device number 65 [ 1574.574727][ T913] usblp0: removed [ 1574.671209][T10132] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 1574.741124][T10132] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 1574.752282][T10132] usb 5-1: USB disconnect, device number 64 [ 1575.633167][T25047] tipc: Started in network mode [ 1575.639297][T25047] tipc: Node identity 0a7dd933fa49, cluster identity 4711 [ 1575.646980][T25047] tipc: Enabled bearer , priority 0 [ 1575.722965][T25047] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1575.744623][T25047] tipc: Resetting bearer [ 1575.792273][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1575.792292][ T30] audit: type=1326 audit(1757804980.236:7195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25053 comm="syz.3.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1575.841451][T25045] tipc: Disabling bearer [ 1575.855999][ T30] audit: type=1326 audit(1757804980.266:7196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25053 comm="syz.3.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1575.880344][ T30] audit: type=1326 audit(1757804980.266:7197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25053 comm="syz.3.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1575.911206][ T30] audit: type=1326 audit(1757804980.266:7198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25053 comm="syz.3.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1575.961304][T20956] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1576.001029][ T30] audit: type=1326 audit(1757804980.266:7199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25053 comm="syz.3.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1576.035255][ T30] audit: type=1326 audit(1757804980.266:7200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25053 comm="syz.3.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1576.105570][ T30] audit: type=1326 audit(1757804980.266:7201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25053 comm="syz.3.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1576.130432][ T30] audit: type=1326 audit(1757804980.266:7202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25053 comm="syz.3.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1576.154353][T20956] usb 2-1: Using ep0 maxpacket: 16 [ 1576.163846][ T30] audit: type=1326 audit(1757804980.266:7203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25053 comm="syz.3.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1576.188356][ T30] audit: type=1326 audit(1757804980.266:7204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25053 comm="syz.3.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1576.188494][T20956] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.00 [ 1576.225734][T20956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.237693][T20956] usb 2-1: config 0 descriptor?? [ 1576.787649][ T913] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1576.840922][T10132] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1576.941000][ T913] usb 3-1: Using ep0 maxpacket: 16 [ 1577.029409][T20956] usbhid 2-1:0.0: can't add hid device: -71 [ 1577.035922][T20956] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1577.056488][ T913] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1577.061155][T20956] usb 2-1: USB disconnect, device number 66 [ 1577.066068][ T913] usb 3-1: config 0 has no interface number 0 [ 1577.084017][ T913] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1577.539486][ T913] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1577.553233][ T913] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1577.553747][T10132] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1577.562210][ T913] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1577.579792][T10132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.596002][ T913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.606036][ T913] usb 3-1: Product: syz [ 1577.610312][ T913] usb 3-1: Manufacturer: syz [ 1577.612561][T10132] usb 4-1: Product: syz [ 1577.615095][ T913] usb 3-1: SerialNumber: syz [ 1577.631602][T10132] usb 4-1: Manufacturer: syz [ 1577.632253][ T913] usb 3-1: config 0 descriptor?? [ 1577.636322][T10132] usb 4-1: SerialNumber: syz [ 1577.642273][T25069] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1577.653733][T25069] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1577.889490][T25069] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1577.911751][T25069] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1579.002076][ T913] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -32 [ 1579.314852][T10132] rtl8150 4-1:1.0: couldn't reset the device [ 1579.321632][T10132] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 1579.335759][T10132] usb 4-1: USB disconnect, device number 84 [ 1580.361403][T20956] usb 3-1: USB disconnect, device number 65 [ 1582.257264][T25137] binder: 25127:25137 ioctl 400c620e 2000000001c0 returned -22 [ 1582.298321][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1582.298368][ T30] audit: type=1400 audit(1757804986.736:7263): avc: denied { setattr } for pid=25127 comm="syz.1.4555" name="NETLINK" dev="sockfs" ino=83712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1583.272179][ T30] audit: type=1400 audit(1757804987.706:7264): avc: denied { setopt } for pid=25146 comm="syz.1.4563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1585.366661][T20956] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1585.563804][T20956] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1586.323337][T25197] kvm: kvm [25196]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5500000800 [ 1586.360664][T25197] kvm: kvm [25196]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7100000800 [ 1586.383074][T25197] kvm: kvm [25196]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xa600000000 [ 1586.399724][T25197] kvm: kvm [25196]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xb200000000 [ 1586.531015][T20956] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1586.680984][T20956] usb 4-1: Using ep0 maxpacket: 16 [ 1586.692704][T20956] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.00 [ 1586.717250][T20956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.755159][T20956] usb 4-1: config 0 descriptor?? [ 1587.040016][ T30] audit: type=1400 audit(1757804991.416:7265): avc: denied { bind } for pid=25227 comm="syz.1.4590" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1587.105116][ T30] audit: type=1400 audit(1757804991.426:7266): avc: denied { name_bind } for pid=25227 comm="syz.1.4590" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1587.126761][ T30] audit: type=1400 audit(1757804991.426:7267): avc: denied { node_bind } for pid=25227 comm="syz.1.4590" saddr=::ffff:172.20.20.21 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1587.294595][T20956] usbhid 4-1:0.0: can't add hid device: -71 [ 1587.300715][T20956] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1587.311075][T25238] overlayfs: missing 'lowerdir' [ 1587.324082][T20956] usb 4-1: USB disconnect, device number 85 [ 1587.368449][T21042] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1587.377294][T21042] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1587.603198][ T30] audit: type=1326 audit(1757804992.046:7268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25247 comm="syz.1.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cdf8eba9 code=0x7ffc0000 [ 1587.644169][T25248] 9pnet_fd: Insufficient options for proto=fd [ 1587.684577][ T30] audit: type=1326 audit(1757804992.046:7269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25247 comm="syz.1.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cdf8eba9 code=0x7ffc0000 [ 1587.711736][ T30] audit: type=1326 audit(1757804992.076:7270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25247 comm="syz.1.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f18cdf8eba9 code=0x7ffc0000 [ 1587.738885][ T30] audit: type=1326 audit(1757804992.076:7271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25247 comm="syz.1.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cdf8eba9 code=0x7ffc0000 [ 1587.768007][ T30] audit: type=1326 audit(1757804992.076:7272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25247 comm="syz.1.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f18cdf8eba9 code=0x7ffc0000 [ 1587.890933][ T30] audit: type=1326 audit(1757804992.076:7273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25247 comm="syz.1.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cdf8eba9 code=0x7ffc0000 [ 1587.924442][ T30] audit: type=1326 audit(1757804992.076:7274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25247 comm="syz.1.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f18cdf8eba9 code=0x7ffc0000 [ 1587.950330][ T30] audit: type=1326 audit(1757804992.076:7275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25247 comm="syz.1.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cdf8eba9 code=0x7ffc0000 [ 1587.973831][ C1] vkms_vblank_simulate: vblank timer overrun [ 1587.982297][ T30] audit: type=1326 audit(1757804992.076:7276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25247 comm="syz.1.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cdf8eba9 code=0x7ffc0000 [ 1588.049430][ T30] audit: type=1326 audit(1757804992.076:7277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25247 comm="syz.1.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f18cdf8eba9 code=0x7ffc0000 [ 1588.073049][ C1] vkms_vblank_simulate: vblank timer overrun [ 1588.105950][T25265] tipc: Enabled bearer , priority 0 [ 1588.114150][T25265] syzkaller0: entered promiscuous mode [ 1588.119640][T25265] syzkaller0: entered allmulticast mode [ 1588.151636][T25265] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1588.273211][T25275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4610'. [ 1588.303652][T25272] tipc: Resetting bearer [ 1588.352131][T25260] tipc: Resetting bearer [ 1588.553279][T25260] tipc: Disabling bearer [ 1589.281837][T25289] tmpfs: Bad value for 'mpol' [ 1589.681615][T20956] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 1589.875527][T20956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1589.893505][T25309] 9pnet_fd: Insufficient options for proto=fd [ 1589.899748][T20956] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1589.911958][T20956] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1589.923451][T20956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.936814][T20956] usb 4-1: config 0 descriptor?? [ 1589.948069][T20956] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1589.957003][T20956] dvb-usb: bulk message failed: -22 (3/0) [ 1589.972475][T20956] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1589.991976][T20956] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1590.001834][T25315] tipc: Started in network mode [ 1590.002158][T20956] usb 4-1: media controller created [ 1590.017154][T25315] tipc: Node identity 1eb265ce2546, cluster identity 4711 [ 1590.017163][T20956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1590.033513][T25315] tipc: Enabled bearer , priority 0 [ 1590.035262][T20956] dvb-usb: bulk message failed: -22 (6/0) [ 1590.042418][T25315] syzkaller0: entered promiscuous mode [ 1590.051310][T20956] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1590.059739][T25315] syzkaller0: entered allmulticast mode [ 1590.069833][T20956] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 1590.070911][T21042] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1590.088801][T20956] dvb-usb: schedule remote query interval to 150 msecs. [ 1590.088835][T20956] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1590.117942][T25315] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1590.129984][T25315] tipc: Resetting bearer [ 1590.140066][T25314] tipc: Resetting bearer [ 1590.161610][T25314] tipc: Disabling bearer [ 1590.162511][T25300] dvb-usb: bulk message failed: -22 (2/0) [ 1590.179113][ T913] usb 4-1: USB disconnect, device number 86 [ 1590.215964][ T913] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1590.290935][T21042] usb 3-1: Using ep0 maxpacket: 32 [ 1590.300221][T21042] usb 3-1: no configurations [ 1590.306454][T21042] usb 3-1: can't read configurations, error -22 [ 1590.895514][T21042] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1591.123115][T21042] usb 3-1: Using ep0 maxpacket: 32 [ 1591.137477][T21042] usb 3-1: no configurations [ 1591.151217][ T913] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1591.167190][T21042] usb 3-1: can't read configurations, error -22 [ 1591.175653][T21042] usb usb3-port1: attempt power cycle [ 1591.322811][ T913] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1591.340295][ T913] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1591.357320][ T913] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1591.364910][ T913] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1591.403062][ T913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.487705][ T913] usb 2-1: config 0 descriptor?? [ 1591.559251][T21042] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1591.723071][T21042] usb 3-1: Using ep0 maxpacket: 32 [ 1591.730258][T21042] usb 3-1: no configurations [ 1591.736621][T21042] usb 3-1: can't read configurations, error -22 [ 1591.937603][T21042] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1591.964867][T21042] usb 3-1: Using ep0 maxpacket: 32 [ 1592.042314][T21042] usb 3-1: no configurations [ 1592.047100][T21042] usb 3-1: can't read configurations, error -22 [ 1592.054188][T21042] usb usb3-port1: unable to enumerate USB device [ 1592.164187][ T913] usb 2-1: string descriptor 0 read error: -22 [ 1592.295837][T25358] netlink: 'syz.3.4644': attribute type 72 has an invalid length. [ 1592.303909][T25358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4644'. [ 1592.351655][T25360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4645'. [ 1592.383638][ T913] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000D/input/input18 [ 1592.455473][ T913] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000D/input/input19 [ 1592.470374][ T913] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000D/input/input20 [ 1592.485556][ T913] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000D/input/input21 [ 1592.504488][ T913] uclogic 0003:256C:006D.000D: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 1592.521359][T21042] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1592.581986][ T913] usb 2-1: USB disconnect, device number 67 [ 1592.691721][T21042] usb 5-1: Using ep0 maxpacket: 16 [ 1592.704442][T21042] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1592.712766][T21042] usb 5-1: config 0 has no interface number 0 [ 1592.719008][T21042] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1592.729096][T21042] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1592.739174][T21042] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1592.748191][T21042] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1592.759640][T21042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.769714][T21042] usb 5-1: Product: syz [ 1592.774020][T21042] usb 5-1: Manufacturer: syz [ 1592.778921][T21042] usb 5-1: SerialNumber: syz [ 1592.786339][T21042] usb 5-1: config 0 descriptor?? [ 1592.792306][T25356] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1592.799590][T25356] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1593.018495][T25356] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1593.026221][T25356] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1593.213170][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 1593.213187][ T30] audit: type=1326 audit(1757804997.656:7368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25376 comm="syz.2.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf58eba9 code=0x7ffc0000 [ 1593.242904][ C1] vkms_vblank_simulate: vblank timer overrun [ 1593.261408][ T30] audit: type=1326 audit(1757804997.656:7369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25376 comm="syz.2.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fbfdf58eba9 code=0x7ffc0000 [ 1593.406757][T25384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1593.433477][ T30] audit: type=1326 audit(1757804997.656:7370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25376 comm="syz.2.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf58eba9 code=0x7ffc0000 [ 1593.463010][T21042] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -32 [ 1593.475603][ T30] audit: type=1326 audit(1757804997.656:7371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25376 comm="syz.2.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf58eba9 code=0x7ffc0000 [ 1593.502392][ T30] audit: type=1326 audit(1757804997.656:7372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25376 comm="syz.2.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfdf58eba9 code=0x7ffc0000 [ 1593.528549][ T30] audit: type=1326 audit(1757804997.656:7373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25376 comm="syz.2.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf58eba9 code=0x7ffc0000 [ 1593.553908][ T30] audit: type=1326 audit(1757804997.656:7374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25376 comm="syz.2.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfdf58eba9 code=0x7ffc0000 [ 1593.577378][ C1] vkms_vblank_simulate: vblank timer overrun [ 1593.583677][ T30] audit: type=1326 audit(1757804997.656:7375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25376 comm="syz.2.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf58eba9 code=0x7ffc0000 [ 1593.607121][ C1] vkms_vblank_simulate: vblank timer overrun [ 1593.613346][ T30] audit: type=1326 audit(1757804997.656:7376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25376 comm="syz.2.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf58eba9 code=0x7ffc0000 [ 1593.636984][ T30] audit: type=1326 audit(1757804997.656:7377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25376 comm="syz.2.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbfdf58eba9 code=0x7ffc0000 [ 1593.660334][ C1] vkms_vblank_simulate: vblank timer overrun [ 1593.760996][T21042] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1593.935502][T21042] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1593.944730][T21042] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.952777][T21042] usb 3-1: Product: syz [ 1593.956947][T21042] usb 3-1: Manufacturer: syz [ 1593.961592][T21042] usb 3-1: SerialNumber: syz [ 1594.281093][ T913] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1594.398639][T25391] syzkaller0: entered promiscuous mode [ 1594.405106][T25391] syzkaller0: entered allmulticast mode [ 1594.425233][T25391] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1594.433345][ T913] usb 4-1: Using ep0 maxpacket: 16 [ 1594.440274][ T913] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.00 [ 1594.449759][ T913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.464149][ T913] usb 4-1: config 0 descriptor?? [ 1594.472951][T21042] rtl8150 3-1:1.0: couldn't reset the device [ 1594.480583][T21042] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 1594.494301][T21042] usb 3-1: USB disconnect, device number 70 [ 1594.627597][T20956] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1594.641258][T20956] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1595.079056][ T913] usbhid 4-1:0.0: can't add hid device: -71 [ 1595.091271][ T913] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1595.116056][ T913] usb 4-1: USB disconnect, device number 87 [ 1595.280150][T20956] usb 5-1: USB disconnect, device number 65 [ 1595.461134][T21042] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1595.630939][T21042] usb 3-1: Using ep0 maxpacket: 16 [ 1595.642612][T21042] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1595.656545][T21042] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1595.666911][T21042] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1595.680188][T21042] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1595.734558][T21042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.758275][T21042] usb 3-1: config 0 descriptor?? [ 1596.213820][T21042] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 1596.223688][T21042] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 1596.231398][T21042] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 1596.248516][T21042] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 1596.279909][T21042] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 1596.297877][T21042] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 1596.319951][T21042] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 1596.353646][T21042] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 1596.388780][T21042] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 1596.476434][T21042] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000F/input/input22 [ 1596.670159][T21042] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1596.693279][T25436] syzkaller0: entered promiscuous mode [ 1596.708212][T25436] syzkaller0: entered allmulticast mode [ 1596.730879][T21042] usb 3-1: USB disconnect, device number 71 [ 1596.773753][T25436] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1596.831031][T20956] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1597.005003][T20956] usb 5-1: Using ep0 maxpacket: 8 [ 1597.013181][T20956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.026443][T20956] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1597.035837][T20956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.046489][T20956] usb 5-1: config 0 descriptor?? [ 1597.054422][T20956] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1597.291222][T21042] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1597.364801][ T913] libceph: connect (1)[c::]:6789 error -101 [ 1597.374695][ T913] libceph: mon0 (1)[c::]:6789 connect error [ 1597.501572][T21042] usb 4-1: Using ep0 maxpacket: 16 [ 1597.518519][T21042] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1597.541505][T21042] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1597.560199][T21042] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1597.587876][T21042] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1597.607534][T21042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.627886][T21042] usb 4-1: config 0 descriptor?? [ 1597.648362][ T913] libceph: connect (1)[c::]:6789 error -101 [ 1597.655866][ T913] libceph: mon0 (1)[c::]:6789 connect error [ 1597.711754][T25463] overlayfs: missing 'lowerdir' [ 1598.073689][T25449] ceph: No mds server is up or the cluster is laggy [ 1598.191891][T25470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4690'. [ 1598.212486][T20956] gspca_vc032x: reg_r err -71 [ 1598.222062][T20956] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 1598.243684][T20956] usb 5-1: USB disconnect, device number 66 [ 1598.428764][T21042] input: HID 0955:7214 Haptics as /devices/virtual/input/input23 [ 1598.610000][T25446] netlink: 'syz.3.4680': attribute type 2 has an invalid length. [ 1598.667681][T25446] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4680'. [ 1599.264706][T21042] shield 0003:0955:7214.0010: Registered Thunderstrike controller [ 1599.276492][T21042] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 1599.735185][T21042] usb 4-1: USB disconnect, device number 88 [ 1599.750345][ T913] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1599.785834][ T913] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1599.812347][T25485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1599.920060][ T913] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1599.931661][ T913] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1600.036986][ T913] hid_parser_main: 6 callbacks suppressed [ 1600.037011][ T913] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1600.104319][ T913] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1600.991180][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 1600.991202][ T30] audit: type=1400 audit(1757805005.436:7441): avc: denied { ioctl } for pid=25499 comm="syz.2.4701" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1601.784147][T25516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4705'. [ 1602.383491][ T30] audit: type=1326 audit(1757805006.826:7442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25519 comm="syz.3.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1602.417121][T25524] fuse: Bad value for 'group_id' [ 1602.429161][T25525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1602.439345][T25524] fuse: Bad value for 'group_id' [ 1602.460901][ T30] audit: type=1326 audit(1757805006.826:7443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25519 comm="syz.3.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1602.543947][ T30] audit: type=1326 audit(1757805006.826:7444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25519 comm="syz.3.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1602.760218][ T30] audit: type=1326 audit(1757805006.826:7445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25519 comm="syz.3.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1602.784153][ C1] vkms_vblank_simulate: vblank timer overrun [ 1602.873298][ T30] audit: type=1326 audit(1757805006.826:7446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25519 comm="syz.3.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1602.926900][ T30] audit: type=1326 audit(1757805006.826:7447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25519 comm="syz.3.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1602.996832][ T30] audit: type=1326 audit(1757805006.826:7448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25519 comm="syz.3.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1603.020346][ C1] vkms_vblank_simulate: vblank timer overrun [ 1603.048888][T25532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4711'. [ 1603.060091][ T30] audit: type=1326 audit(1757805006.826:7449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25519 comm="syz.3.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1603.083753][ C1] vkms_vblank_simulate: vblank timer overrun [ 1603.090321][T10132] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1603.115098][ T30] audit: type=1326 audit(1757805006.826:7450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25519 comm="syz.3.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1603.138522][ C1] vkms_vblank_simulate: vblank timer overrun [ 1603.265724][T10132] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1603.277372][T10132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.296027][T10132] usb 4-1: Product: syz [ 1603.310533][T10132] usb 4-1: Manufacturer: syz [ 1603.326152][T10132] usb 4-1: SerialNumber: syz [ 1604.131402][T10132] rtl8150 4-1:1.0: couldn't reset the device [ 1604.137873][T10132] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 1604.166225][T10132] usb 4-1: USB disconnect, device number 89 [ 1604.587839][T25558] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1604.594419][T25558] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1604.623164][T25558] vhci_hcd vhci_hcd.0: Device attached [ 1604.630307][T25558] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1604.643297][T25558] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1604.655099][T25558] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1604.666185][T25558] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1604.775153][T25558] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1604.809603][T10132] vhci_hcd: vhci_device speed not set [ 1604.977879][T10132] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 1605.086106][T25558] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1605.584503][T25564] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(19) [ 1605.591186][T25564] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1605.621524][T25564] vhci_hcd vhci_hcd.0: Device attached [ 1605.645811][T25565] vhci_hcd vhci_hcd.0: port 0 already used [ 1605.653730][T25557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1605.766833][T25566] vhci_hcd: connection closed [ 1605.768182][T25559] vhci_hcd: connection reset by peer [ 1605.770167][ T3552] vhci_hcd: stop threads [ 1606.285388][ T3552] vhci_hcd: release socket [ 1606.292503][ T3552] vhci_hcd: disconnect device [ 1606.299401][ T3552] vhci_hcd: stop threads [ 1606.333380][ T3552] vhci_hcd: release socket [ 1606.344608][ T3552] vhci_hcd: disconnect device [ 1606.509046][T25580] overlayfs: missing 'workdir' [ 1607.001764][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.244541][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.448023][T25611] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1608.454586][T25611] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1608.465883][T25611] vhci_hcd vhci_hcd.0: Device attached [ 1608.488727][T25611] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1608.579490][T25614] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1608.624592][T25611] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1608.655435][ T913] vhci_hcd: vhci_device speed not set [ 1608.714361][T25611] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1608.734777][ T913] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 1608.757779][T25611] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1608.919041][T25611] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(18) [ 1608.925712][T25611] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1608.951803][T25611] vhci_hcd vhci_hcd.0: Device attached [ 1609.426038][T25611] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1609.511454][T25611] vhci_hcd vhci_hcd.0: port 0 already used [ 1609.561865][T25610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1609.592473][T25621] vhci_hcd: connection closed [ 1609.592671][T25612] vhci_hcd: connection reset by peer [ 1609.603982][T18665] vhci_hcd: stop threads [ 1609.691848][T18665] vhci_hcd: release socket [ 1609.703406][T18665] vhci_hcd: disconnect device [ 1609.709535][T18665] vhci_hcd: stop threads [ 1609.715447][T18665] vhci_hcd: release socket [ 1609.720973][T18665] vhci_hcd: disconnect device [ 1610.408608][T10132] vhci_hcd: vhci_device speed not set [ 1612.231448][T25666] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1612.232177][T25670] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1612.238060][T25666] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1612.325621][T25666] vhci_hcd vhci_hcd.0: Device attached [ 1612.399671][T25666] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1612.415093][T25666] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1612.425218][T25666] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1612.437233][T25666] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1612.448728][T25666] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(18) [ 1612.455369][T25666] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1612.470583][T25666] vhci_hcd vhci_hcd.0: Device attached [ 1612.526027][T25670] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1612.585806][T25678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4758'. [ 1612.732020][T25666] vhci_hcd vhci_hcd.0: port 0 already used [ 1613.055193][T25665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1613.095710][T25668] vhci_hcd: connection closed [ 1613.096056][T25680] vhci_hcd: connection closed [ 1613.096170][T18665] vhci_hcd: stop threads [ 1613.123425][T18665] vhci_hcd: release socket [ 1613.220938][T18665] vhci_hcd: disconnect device [ 1613.240961][T18665] vhci_hcd: stop threads [ 1613.245271][T18665] vhci_hcd: release socket [ 1613.829206][T18665] vhci_hcd: disconnect device [ 1613.881117][ T913] vhci_hcd: vhci_device speed not set [ 1613.901732][T25700] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4763'. [ 1614.131509][T25706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4763'. [ 1614.236413][T25700] bond1 (unregistering): Released all slaves [ 1614.555298][T25723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39940 sclass=netlink_route_socket pid=25723 comm=syz.2.4769 [ 1614.730929][T21042] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1614.890923][T21042] usb 5-1: Using ep0 maxpacket: 32 [ 1614.897622][T21042] usb 5-1: config index 0 descriptor too short (expected 44, got 36) [ 1614.922592][T21042] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 1615.070688][T21042] usb 5-1: config 0 has no interface number 0 [ 1615.091277][T21042] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1615.562470][T21042] usb 5-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1615.574606][T21042] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 1615.603685][T21042] usb 5-1: config 0 interface 126 has no altsetting 0 [ 1615.622238][T21042] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1615.636597][T21042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.645623][T21042] usb 5-1: Product: syz [ 1615.653042][T21042] usb 5-1: Manufacturer: syz [ 1615.658196][T21042] usb 5-1: SerialNumber: syz [ 1615.664828][T21042] usb 5-1: config 0 descriptor?? [ 1615.670712][T25718] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1615.743033][T25738] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1615.749603][T25738] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1615.760334][T25738] vhci_hcd vhci_hcd.0: Device attached [ 1615.769212][T25738] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1615.778976][T25738] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1615.788587][T25738] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1615.798890][T25738] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1615.808574][T25738] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1615.876794][T25741] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(19) [ 1615.883456][T25741] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1615.901155][T25741] vhci_hcd vhci_hcd.0: Device attached [ 1615.914400][T25738] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1615.924475][T25738] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1615.932913][ T913] vhci_hcd: vhci_device speed not set [ 1615.947611][T25737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1615.960568][T25743] vhci_hcd: connection closed [ 1615.963620][T25739] vhci_hcd: connection closed [ 1615.963706][ T3473] vhci_hcd: stop threads [ 1615.990939][ T913] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 1616.003234][T25740] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1616.012141][ T3473] vhci_hcd: release socket [ 1616.016893][ T3473] vhci_hcd: disconnect device [ 1616.022196][ T3473] vhci_hcd: stop threads [ 1616.026587][ T3473] vhci_hcd: release socket [ 1616.031804][ T3473] vhci_hcd: disconnect device [ 1616.112185][T21042] ir_usb 5-1:0.126: IR Dongle converter detected [ 1616.689603][T25718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1616.981630][T25718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1617.033377][T21042] usb 5-1: IR Dongle converter now attached to ttyUSB0 [ 1617.160408][T25765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39940 sclass=netlink_route_socket pid=25765 comm=syz.3.4781 [ 1617.253736][T10132] usb 5-1: USB disconnect, device number 67 [ 1617.270051][T10132] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 1617.275135][T25769] netlink: 'syz.2.4785': attribute type 2 has an invalid length. [ 1617.291994][T10132] ir_usb 5-1:0.126: device disconnected [ 1617.315219][T25769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4785'. [ 1617.347302][T25769] netlink: 'syz.2.4785': attribute type 2 has an invalid length. [ 1617.365777][T25769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4785'. [ 1617.943707][T25777] tipc: Started in network mode [ 1617.948869][T25777] tipc: Node identity 66f53434c73b, cluster identity 4711 [ 1617.975055][T25777] tipc: Enabled bearer , priority 0 [ 1617.982863][T25777] syzkaller0: entered promiscuous mode [ 1617.988568][T25777] syzkaller0: entered allmulticast mode [ 1618.049702][T25777] tipc: Resetting bearer [ 1618.565981][T25776] tipc: Resetting bearer [ 1618.587993][T25784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4790'. [ 1618.668252][T25776] tipc: Disabling bearer [ 1618.720522][T25784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4790'. [ 1618.860471][T25792] bond1 (unregistering): Released all slaves [ 1618.907951][T25800] netlink: 'syz.0.4794': attribute type 27 has an invalid length. [ 1618.930912][T25800] netlink: 'syz.0.4794': attribute type 4 has an invalid length. [ 1618.938775][T25800] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4794'. [ 1619.067404][T25805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39940 sclass=netlink_route_socket pid=25805 comm=syz.2.4797 [ 1619.163153][T25812] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=25812 comm=syz.2.4800 [ 1620.904645][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1620.904664][ T30] audit: type=1400 audit(1757805025.346:7471): avc: denied { write } for pid=25835 comm="syz.3.4808" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1620.991052][ T30] audit: type=1400 audit(1757805025.346:7472): avc: denied { open } for pid=25835 comm="syz.3.4808" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1621.068442][ T30] audit: type=1400 audit(1757805025.386:7473): avc: denied { name_connect } for pid=25839 comm="syz.4.4809" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1621.174730][ T913] vhci_hcd: vhci_device speed not set [ 1621.570993][ T30] audit: type=1400 audit(1757805025.466:7474): avc: denied { write } for pid=25835 comm="syz.3.4808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1621.607686][ T30] audit: type=1400 audit(1757805025.506:7475): avc: denied { ioctl } for pid=25835 comm="syz.3.4808" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0xaebc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1621.643969][T25851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4813'. [ 1621.853987][T25856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1622.120926][ T5914] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1622.280940][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 1622.290036][ T5914] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1622.299269][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.307429][ T5914] usb 4-1: Product: syz [ 1622.311899][ T5914] usb 4-1: Manufacturer: syz [ 1622.317688][ T5914] usb 4-1: SerialNumber: syz [ 1622.328129][ T5914] usb 4-1: config 0 descriptor?? [ 1622.349004][ T5914] usb 4-1: selecting invalid altsetting 3 [ 1622.362190][ T5914] comedi comedi5: could not set alternate setting 3 in high speed [ 1622.378258][ T5914] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1622.397666][ T5914] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 1622.603668][T21042] usb 4-1: USB disconnect, device number 90 [ 1623.640504][ T30] audit: type=1326 audit(1757805028.076:7476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25884 comm="syz.3.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1623.701489][ T30] audit: type=1326 audit(1757805028.106:7477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25884 comm="syz.3.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1623.763376][ T30] audit: type=1326 audit(1757805028.106:7478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25884 comm="syz.3.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1623.814926][ T30] audit: type=1326 audit(1757805028.106:7479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25884 comm="syz.3.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1623.850941][ T30] audit: type=1326 audit(1757805028.106:7480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25884 comm="syz.3.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1624.251068][T20956] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1624.404359][T20956] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1624.414493][T20956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.422887][T20956] usb 4-1: Product: syz [ 1624.427689][T20956] usb 4-1: Manufacturer: syz [ 1624.432442][T20956] usb 4-1: SerialNumber: syz [ 1624.905536][T20956] rtl8150 4-1:1.0: couldn't reset the device [ 1624.925789][T20956] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 1624.969003][T20956] usb 4-1: USB disconnect, device number 91 [ 1625.038683][T25907] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1625.045240][T25907] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1625.074742][T25907] vhci_hcd vhci_hcd.0: Device attached [ 1625.083589][T25907] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1625.104730][T25907] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1625.118981][T25907] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1625.131940][T25907] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1625.141525][T25907] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1625.151916][T25907] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1625.161497][T25907] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1625.172668][T25907] vhci_hcd vhci_hcd.0: port 0 already used [ 1625.186183][T25906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1625.199755][T25909] vhci_hcd: connection closed [ 1625.199967][ T5941] vhci_hcd: stop threads [ 1625.212308][ T5941] vhci_hcd: release socket [ 1625.216997][ T5941] vhci_hcd: disconnect device [ 1625.250996][T10132] vhci_hcd: vhci_device speed not set [ 1626.143872][T20956] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1626.190990][T20939] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1626.301102][T20956] usb 5-1: Using ep0 maxpacket: 8 [ 1626.316635][T20956] usb 5-1: config 0 has an invalid descriptor of length 199, skipping remainder of the config [ 1626.338670][T20956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1626.363305][T25928] binder: 25927:25928 ioctl 4018620d 0 returned -22 [ 1626.374760][T20939] usb 4-1: Using ep0 maxpacket: 16 [ 1626.396056][T20956] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1626.396164][T20939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1626.430482][T20956] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1626.454387][T20956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.463160][T20939] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1626.475118][T20956] usb 5-1: config 0 descriptor?? [ 1626.483124][T20939] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1626.496331][T20939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.514027][T20939] usb 4-1: Product: syz [ 1626.521790][T20939] usb 4-1: Manufacturer: syz [ 1626.526865][T20939] usb 4-1: SerialNumber: syz [ 1626.538201][T20939] usb 4-1: config 0 descriptor?? [ 1626.749565][T25924] [U] £‹­+ù#àX¹Pøfû×Ô [ 1626.758066][T25923] [U] EJ [ 1626.768312][T21042] usb 4-1: USB disconnect, device number 92 [ 1627.589757][T25941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4840'. [ 1627.662823][T25941] bond1 (unregistering): Released all slaves [ 1627.685409][T25943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4840'. [ 1628.166114][T21042] usb 5-1: USB disconnect, device number 68 [ 1628.236990][T25954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1628.493776][T25961] binder: 25960:25961 ioctl 4018620d 0 returned -22 [ 1629.170951][T20939] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1629.364617][T20939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1629.377778][T20939] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1629.388276][T20939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.411551][T21042] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1629.439026][T20939] usb 3-1: config 0 descriptor?? [ 1629.522230][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 1629.572840][T21042] usb 2-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 1629.587395][T21042] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1629.635486][T21042] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1629.660092][T21042] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1629.675820][T21042] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.685191][T21042] usb 2-1: Product: syz [ 1629.689639][T21042] usb 2-1: Manufacturer: syz [ 1629.695282][T21042] usb 2-1: SerialNumber: syz [ 1629.708197][T25972] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1629.860389][T20939] mcp2200 0003:04D8:00DF.0012: item fetching failed at offset 6/7 [ 1629.875223][T20939] mcp2200 0003:04D8:00DF.0012: can't parse reports [ 1629.883594][T20939] mcp2200 0003:04D8:00DF.0012: probe with driver mcp2200 failed with error -22 [ 1629.931534][T21042] usb 2-1: 0:2 : does not exist [ 1629.971894][T21042] usb 2-1: USB disconnect, device number 68 [ 1630.065269][ T5914] usb 3-1: USB disconnect, device number 72 [ 1631.922377][T25996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1634.015182][T26026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4866'. [ 1634.033269][T26024] netlink: 308 bytes leftover after parsing attributes in process `syz.4.4869'. [ 1634.459356][T26036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1636.194782][T26055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4877'. [ 1636.244855][T26060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1638.251712][T26098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1639.083241][T20939] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 1639.251806][T20939] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 1639.380989][T20939] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1639.432642][T20939] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1639.444302][T26124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4906'. [ 1639.451552][T20939] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1639.480379][T20939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.495611][T20939] usb 4-1: Product: syz [ 1639.507710][T20939] usb 4-1: Manufacturer: syz [ 1639.534972][T20939] usb 4-1: SerialNumber: syz [ 1639.558470][T26106] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1639.848064][T20939] usb 4-1: 0:2 : does not exist [ 1640.011187][T20939] usb 4-1: USB disconnect, device number 93 [ 1640.940531][T26161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4920'. [ 1641.280996][T20939] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1641.464698][T20939] usb 2-1: Using ep0 maxpacket: 32 [ 1641.946775][T20939] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1641.979100][T20939] usb 2-1: config 0 has no interface number 0 [ 1642.344207][T20939] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1642.358278][T20939] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1642.378084][T20939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.386452][T20939] usb 2-1: Product: syz [ 1642.406733][T20939] usb 2-1: Manufacturer: syz [ 1642.419743][T26184] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4929'. [ 1642.433867][T20939] usb 2-1: SerialNumber: syz [ 1642.443633][T20939] usb 2-1: config 0 descriptor?? [ 1643.289733][T20939] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 1643.357521][T20939] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1643.406912][T20939] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1643.464157][T20939] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1643.587383][T20939] usb 2-1: USB disconnect, device number 69 [ 1646.011105][ T5914] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1646.141221][ T5914] usb 5-1: device descriptor read/64, error -71 [ 1646.391290][ T5914] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1646.531617][ T5914] usb 5-1: device descriptor read/64, error -71 [ 1646.759575][ T5914] usb usb5-port1: attempt power cycle [ 1646.905876][T26263] tipc: Enabled bearer , priority 0 [ 1646.908670][T26265] xt_policy: too many policy elements [ 1646.919572][T26263] syzkaller0: entered promiscuous mode [ 1646.925414][T26263] syzkaller0: entered allmulticast mode [ 1646.946030][T26262] tipc: Resetting bearer [ 1646.962615][T26262] tipc: Disabling bearer [ 1647.125717][T26269] kvm: emulating exchange as write [ 1647.180853][ T5914] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1647.202654][ T5914] usb 5-1: device descriptor read/8, error -71 [ 1647.500389][ T5914] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1647.521544][ T5914] usb 5-1: device descriptor read/8, error -71 [ 1647.663360][ T5914] usb usb5-port1: unable to enumerate USB device [ 1650.082732][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1650.082752][ T30] audit: type=1400 audit(1757805054.526:7505): avc: denied { accept } for pid=26298 comm="syz.4.4971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1650.378226][ T30] audit: type=1400 audit(1757805054.816:7506): avc: denied { read } for pid=26312 comm="syz.2.4975" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1650.475431][ T30] audit: type=1400 audit(1757805054.906:7507): avc: denied { open } for pid=26312 comm="syz.2.4975" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1651.961219][ T30] audit: type=1326 audit(1757805056.386:7508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26349 comm="syz.3.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1652.032289][T26350] 9pnet_fd: Insufficient options for proto=fd [ 1652.177149][ T30] audit: type=1326 audit(1757805056.396:7509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26349 comm="syz.3.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1652.247404][ T30] audit: type=1326 audit(1757805056.446:7510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26349 comm="syz.3.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1652.287044][ T30] audit: type=1326 audit(1757805056.446:7511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26349 comm="syz.3.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1652.349560][ T30] audit: type=1326 audit(1757805056.446:7512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26349 comm="syz.3.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1652.450013][ T30] audit: type=1326 audit(1757805056.456:7513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26349 comm="syz.3.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1652.520975][ T30] audit: type=1326 audit(1757805056.456:7514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26349 comm="syz.3.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e318eba9 code=0x7ffc0000 [ 1653.228363][T21042] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1653.750923][T21042] usb 3-1: Using ep0 maxpacket: 32 [ 1653.779138][T21042] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1653.800517][T21042] usb 3-1: config 0 has no interface number 0 [ 1653.870954][T21042] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1653.899269][T21042] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.909125][T21042] usb 3-1: Product: syz [ 1653.914040][T21042] usb 3-1: Manufacturer: syz [ 1653.919233][T21042] usb 3-1: SerialNumber: syz [ 1653.933737][T21042] usb 3-1: config 0 descriptor?? [ 1654.033761][T21042] quatech2 3-1:0.1: Quatech 2nd gen USB to Serial Driver converter detected [ 1655.817789][T21042] usb 3-1: qt2_attach - failed to power on unit: -71 [ 1655.894720][T21042] quatech2 3-1:0.1: probe with driver quatech2 failed with error -71 [ 1655.905978][T21042] usb 3-1: USB disconnect, device number 73 [ 1655.970359][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 1655.971188][ T30] audit: type=1400 audit(1757805060.396:7611): avc: denied { ioctl } for pid=26395 comm="syz.4.5000" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1656.422260][T26414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5004'. [ 1656.675192][T26425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5009'. [ 1657.019159][T26435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5013'. [ 1657.030511][T26435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5013'. [ 1657.271294][T26439] syz_tun: entered allmulticast mode [ 1657.317548][T26439] dvmrp1: entered allmulticast mode [ 1657.333333][T26439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5014'. [ 1657.905469][T26436] syz_tun: left allmulticast mode [ 1658.601028][T20939] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1658.811052][T20939] usb 4-1: Using ep0 maxpacket: 8 [ 1658.828671][T20939] usb 4-1: config 0 has an invalid descriptor of length 199, skipping remainder of the config [ 1658.848804][T20939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1659.022566][T20939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1659.040926][T20939] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1659.060905][T20939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.071234][T20939] usb 4-1: config 0 descriptor?? [ 1659.534294][T26479] syzkaller0: entered promiscuous mode [ 1659.540309][T26479] syzkaller0: entered allmulticast mode [ 1659.629804][T26479] tipc: Enabled bearer , priority 0 [ 1659.675934][T26478] tipc: Resetting bearer [ 1659.848411][T26478] tipc: Disabling bearer [ 1659.920562][T26482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1659.935065][T26483] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1659.970141][T26483] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 1660.090457][T26487] syz_tun: left allmulticast mode [ 1660.141168][T26487] syz_tun: left promiscuous mode [ 1660.147386][T26487] bridge0: port 1(syz_tun) entered disabled state [ 1660.169899][T26497] fuse: Bad value for 'fd' [ 1660.176484][T26487] batman_adv: batadv0: Interface deactivated: dummy0 [ 1660.187980][T26487] batman_adv: batadv0: Removing interface: dummy0 [ 1660.548260][T26487] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1660.569941][T26487] bond1: (slave macvlan2): Releasing backup interface [ 1660.588830][T26507] netlink: 'syz.2.5035': attribute type 10 has an invalid length. [ 1660.619029][T26507] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1660.632978][T26505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1662.189211][T20939] usb 4-1: USB disconnect, device number 94 [ 1662.235776][T26532] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5044'. [ 1662.360446][T26534] tipc: Enabled bearer , priority 0 [ 1662.505664][T26534] tipc: Resetting bearer [ 1662.663467][T26533] tipc: Disabling bearer [ 1663.227224][T26554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5052'. [ 1663.257064][T26554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5052'. [ 1663.346719][T26560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1663.525688][T26568] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5056'. [ 1665.570379][T26605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5071'. [ 1665.572695][T26604] fuse: Bad value for 'fd' [ 1666.492595][ T30] audit: type=1400 audit(1757805070.936:7612): avc: denied { read } for pid=26617 comm="syz.0.5075" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1666.873431][T26626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5077'. [ 1667.045234][T26627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5078'. [ 1667.195360][T26633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5081'. [ 1668.811336][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.818472][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.885498][T26659] fuse: Bad value for 'fd' [ 1669.415585][T21042] libceph: connect (1)[c::]:6789 error -101 [ 1669.421678][T21042] libceph: mon0 (1)[c::]:6789 connect error [ 1669.754594][T21042] libceph: connect (1)[c::]:6789 error -101 [ 1669.830728][T21042] libceph: mon0 (1)[c::]:6789 connect error [ 1670.290912][T26690] syz_tun: entered allmulticast mode [ 1670.330454][T26690] dvmrp1: entered allmulticast mode [ 1670.353979][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 1670.529348][T26672] ceph: No mds server is up or the cluster is laggy [ 1670.540451][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 1670.847567][T26686] syz_tun: left allmulticast mode [ 1673.115428][T26730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5110'. [ 1673.525088][T26752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5119'. [ 1673.558084][T26752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5119'. [ 1674.107130][T26752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5119'. [ 1674.261179][T26752] bond3 (unregistering): Released all slaves [ 1676.854092][T26813] comedi: valid board names for 8255 driver are: [ 1676.931701][T26813] 8255 [ 1676.934978][T26813] comedi: valid board names for vmk80xx driver are: [ 1676.941750][T26813] vmk80xx [ 1676.946282][T26813] comedi: valid board names for usbduxsigma driver are: [ 1676.953432][T26813] usbduxsigma [ 1676.957038][T26813] comedi: valid board names for usbduxfast driver are: [ 1676.963969][T26813] usbduxfast [ 1676.967283][T26813] comedi: valid board names for usbdux driver are: [ 1676.973841][T26813] usbdux [ 1676.976810][T26813] comedi: valid board names for ni6501 driver are: [ 1676.983351][T26813] ni6501 [ 1676.986323][T26813] comedi: valid board names for dt9812 driver are: [ 1676.992864][T26813] dt9812 [ 1676.995826][T26813] comedi: valid board names for ni_labpc_cs driver are: [ 1677.020960][T26813] ni_labpc_cs [ 1677.040607][T26813] comedi: valid board names for ni_daq_700 driver are: [ 1677.052830][T26813] ni_daq_700 [ 1677.056138][T26813] comedi: valid board names for labpc_pci driver are: [ 1677.080965][T26813] labpc_pci [ 1677.084202][T26813] comedi: valid board names for adl_pci9118 driver are: [ 1677.123248][T26813] pci9118dg [ 1677.126478][T26813] pci9118hg [ 1677.129668][T26813] pci9118hr [ 1677.148615][T26813] comedi: valid board names for 8255_pci driver are: [ 1677.160935][T26813] 8255_pci [ 1677.168804][T26813] comedi: valid board names for s526 driver are: [ 1677.182842][T26813] s526 [ 1677.188992][T26813] comedi: valid board names for multiq3 driver are: [ 1677.208387][T26813] multiq3 [ 1677.209490][T26828] fuse: Invalid rootmode [ 1677.220953][T26813] comedi: valid board names for pcmuio driver are: [ 1677.239606][T26813] pcmuio48 [ 1677.240209][T26829] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1677.249352][T26813] pcmuio96 [ 1677.254073][T26813] comedi: valid board names for pcmmio driver are: [ 1677.264074][T26829] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1677.288733][T26829] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1677.300876][T26813] pcmmio [ 1677.303965][T26813] comedi: valid board names for pcmda12 driver are: [ 1677.310696][T26813] pcmda12 [ 1677.312140][T26829] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1677.314904][T26813] comedi: valid board names for pcmad driver are: [ 1677.341814][T26813] pcmad12 [ 1677.343957][T26829] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1677.348177][T26813] pcmad16 [ 1677.361539][T26813] comedi: valid board names for ni_labpc driver are: [ 1677.371668][T26829] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(16) [ 1677.376000][T26813] lab-pc-1200 [ 1677.378269][T26829] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1677.393342][T26829] vhci_hcd vhci_hcd.0: Device attached [ 1677.403283][T26813] lab-pc-1200ai [ 1677.410836][T26813] lab-pc+ [ 1677.411638][T26829] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1677.417207][T26813] comedi: valid board names for atmio16 driver are: [ 1677.440595][T26813] atmio16 [ 1677.444179][T26829] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1677.447136][T26813] atmio16d [ 1677.456403][T26829] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(24) [ 1677.463003][T26829] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1677.463946][T26813] comedi: valid board names for ni_at_ao driver are: [ 1677.482287][T26829] vhci_hcd vhci_hcd.0: Device attached [ 1677.495014][T26827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1677.505801][T26834] vhci_hcd: connection closed [ 1677.505980][T18665] vhci_hcd: stop threads [ 1677.512468][T26813] at-ao-6 [ 1677.517480][T18665] vhci_hcd: release socket [ 1677.523764][T26832] vhci_hcd: connection closed [ 1677.526232][T18665] vhci_hcd: disconnect device [ 1677.538196][T26813] at-ao-10 [ 1677.542445][T26813] comedi: valid board names for ni_at_a2150 driver are: [ 1677.549545][T26813] ni_at_a2150 [ 1677.555017][T18665] vhci_hcd: stop threads [ 1677.559301][T18665] vhci_hcd: release socket [ 1677.564114][T18665] vhci_hcd: disconnect device [ 1677.568889][T26813] comedi: valid board names for adq12b driver are: [ 1677.575614][T20939] vhci_hcd: vhci_device speed not set [ 1677.583469][T26813] adq12b [ 1677.586412][T26813] comedi: valid board names for mpc624 driver are: [ 1677.593065][T26813] mpc624 [ 1677.595995][T26813] comedi: valid board names for c6xdigio driver are: [ 1677.611051][T26813] c6xdigio [ 1677.614186][T26813] comedi: valid board names for aio_iiro_16 driver are: [ 1677.631016][T26813] aio_iiro_16 [ 1677.634415][T26813] comedi: valid board names for aio_aio12_8 driver are: [ 1677.652193][T26813] aio_aio12_8 [ 1677.655602][T26813] aio_ai12_8 [ 1677.658879][T26813] aio_ao12_4 [ 1677.682411][T26813] comedi: valid board names for fl512 driver are: [ 1677.699459][T26813] fl512 [ 1677.841733][T26813] comedi: valid board names for dmm32at driver are: [ 1677.869564][T26813] dmm32at [ 1677.873893][T26813] comedi: valid board names for dt282x driver are: [ 1677.886301][T26813] dt2821 [ 1677.890610][T26813] dt2821-f [ 1677.896630][T26813] dt2821-g [ 1677.903360][T26813] dt2823 [ 1677.908205][T26813] dt2824-pgh [ 1677.914159][T26813] dt2824-pgl [ 1677.919526][T26813] dt2825 [ 1677.922569][T26813] dt2827 [ 1677.926002][T26813] dt2828 [ 1677.929073][T26813] dt2829 [ 1677.934733][T26813] dt21-ez [ 1677.939389][T26813] dt23-ez [ 1677.943876][T26813] dt24-ez [ 1677.948394][T26813] dt24-ez-pgl [ 1677.961393][T26813] comedi: valid board names for dt2817 driver are: [ 1677.987572][T26813] dt2817 [ 1677.993445][T26813] comedi: valid board names for dt2815 driver are: [ 1678.001005][T26813] dt2815 [ 1678.003970][T26813] comedi: valid board names for dt2814 driver are: [ 1678.010524][T26813] dt2814 [ 1678.014212][T26813] comedi: valid board names for dt2811 driver are: [ 1678.020925][T26813] dt2811-pgh [ 1678.024229][T26813] dt2811-pgl [ 1678.027563][T26813] comedi: valid board names for dt2801 driver are: [ 1678.037729][T26813] dt2801 [ 1678.040713][T26813] comedi: valid board names for das6402 driver are: [ 1678.165936][T26813] das6402-12 [ 1678.169249][T26813] das6402-16 [ 1678.204268][T26813] comedi: valid board names for das1800 driver are: [ 1678.211171][T10132] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1678.221779][T26848] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5149'. [ 1678.237854][T26813] das-1701st [ 1678.249235][T26813] das-1701st-da [ 1678.265900][T26813] das-1702st [ 1678.269273][T26813] das-1702st-da [ 1678.275260][T26813] das-1702hr [ 1678.278608][T26813] das-1702hr-da [ 1678.294112][T26813] das-1701ao [ 1678.298705][T26813] das-1702ao [ 1678.303487][T26813] das-1801st [ 1678.307149][T26813] das-1801st-da [ 1678.314737][T26813] das-1802st [ 1678.318245][T26813] das-1802st-da [ 1678.326814][T26813] das-1802hr [ 1678.330437][T26813] das-1802hr-da [ 1678.336196][T26813] das-1801hc [ 1678.339563][T26813] das-1802hc [ 1678.342993][T26813] das-1801ao [ 1678.346415][T26813] das-1802ao [ 1678.349796][T26813] comedi: valid board names for das800 driver are: [ 1678.357711][T26813] das-800 [ 1678.362214][T26813] cio-das800 [ 1678.365622][T26813] das-801 [ 1678.368743][T26813] cio-das801 [ 1678.373995][T26813] das-802 [ 1678.383522][T10132] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1678.409142][T10132] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1678.482857][T10132] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1678.493607][T26813] cio-das802 [ 1678.497138][T26813] cio-das802/16 [ 1678.501141][T10132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.509893][T26813] comedi: valid board names for isa-das08 driver are: [ 1678.526596][T26843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1678.537238][T10132] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1678.550974][T26813] isa-das08 [ 1678.554196][T26813] das08-pgm [ 1678.557550][T26813] das08-pgh [ 1678.560732][T26813] das08-pgl [ 1678.564065][T26813] das08-aoh [ 1678.567254][T26813] das08-aol [ 1678.573279][T26813] das08-aom [ 1678.576480][T26813] das08/jr-ao [ 1678.579837][T26813] das08jr-16-ao [ 1678.612883][T26813] pc104-das08 [ 1678.622715][T26813] das08jr/16 [ 1678.632744][T26813] comedi: valid board names for das16m1 driver are: [ 1678.710412][T26813] das16m1 [ 1678.720243][T26813] comedi: valid board names for dac02 driver are: [ 1678.736955][T26813] dac02 [ 1678.742910][T26843] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5147'. [ 1678.750026][T26813] comedi: valid board names for rti802 driver are: [ 1678.776506][T26813] rti802 [ 1678.786442][T26813] comedi: valid board names for rti800 driver are: [ 1678.806162][T26813] rti800 [ 1678.811444][T26813] rti815 [ 1678.819050][T26813] comedi: valid board names for pcm3724 driver are: [ 1678.835105][T26813] pcm3724 [ 1678.840991][T10132] usb 3-1: USB disconnect, device number 74 [ 1678.841718][T26813] comedi: valid board names for pcl818 driver are: [ 1678.868929][T26813] pcl818l [ 1678.877652][T26813] pcl818h [ 1678.887239][T26813] pcl818hd [ 1678.890367][T26813] pcl818hg [ 1678.919014][T26813] pcl818 [ 1678.922438][T26813] pcl718 [ 1678.925371][T26813] pcm3718 [ 1678.928380][T26813] comedi: valid board names for pcl816 driver are: [ 1678.939613][T26813] pcl816 [ 1678.944615][T26813] pcl814b [ 1678.947805][T26813] comedi: valid board names for pcl812 driver are: [ 1678.954546][T26813] pcl812 [ 1678.957661][T26813] pcl812pg [ 1678.961265][T26813] acl8112pg [ 1678.964465][T26813] acl8112dg [ 1678.967716][T26813] acl8112hg [ 1678.970930][T26813] a821pgl [ 1678.973997][T26813] a821pglnda [ 1678.977270][T26813] a821pgh [ 1678.980345][T26813] a822pgl [ 1678.983612][T26813] a822pgh [ 1678.986679][T26813] a823pgl [ 1678.989693][T26813] a823pgh [ 1678.992872][T26813] pcl813 [ 1678.995798][T26813] pcl813b [ 1678.998910][T26813] acl8113 [ 1679.012288][T26813] iso813 [ 1679.015244][T26813] acl8216 [ 1679.018329][T26813] a826pg [ 1679.021515][T26813] comedi: valid board names for pcl730 driver are: [ 1679.028014][T26813] pcl730 [ 1679.033140][T26813] iso730 [ 1679.036081][T26813] acl7130 [ 1679.039091][T26813] pcm3730 [ 1679.042180][T26813] pcl725 [ 1679.045163][T26813] p8r8dio [ 1679.048180][T26813] acl7225b [ 1679.052031][T26813] p16r16dio [ 1679.055283][T26813] pcl733 [ 1679.058208][T26813] pcl734 [ 1679.061182][T26813] opmm-1616-xt [ 1679.064626][T26813] pearl-mm-p [ 1679.067959][T26813] ir104-pbf [ 1679.071346][T26813] comedi: valid board names for pcl726 driver are: [ 1679.077837][T26813] pcl726 [ 1679.080873][T26813] pcl727 [ 1679.083800][T26813] pcl728 [ 1679.086719][T26813] acl6126 [ 1679.089726][T26813] acl6128 [ 1679.092824][T26813] comedi: valid board names for pcl724 driver are: [ 1679.099313][T26813] pcl724 [ 1679.109388][T26813] pcl722 [ 1679.116353][T26813] pcl731 [ 1679.119659][T26813] acl7122 [ 1679.135391][T26813] acl7124 [ 1679.143470][T26813] pet48dio [ 1679.147721][T26813] pcmio48 [ 1679.152112][T26813] onyx-mm-dio [ 1679.155479][T26813] comedi: valid board names for pcl711 driver are: [ 1679.163480][T26813] pcl711 [ 1679.166789][T26813] pcl711b [ 1679.170282][T26813] acl8112hg [ 1679.176118][T26813] acl8112dg [ 1679.179328][T26813] comedi: valid board names for amplc_pc263 driver are: [ 1679.189996][T26813] pc263 [ 1679.196042][T26813] comedi: valid board names for amplc_pc236 driver are: [ 1679.207688][T26813] pc36at [ 1679.211825][T26813] comedi: valid board names for amplc_dio200 driver are: [ 1679.292315][T26813] pc212e [ 1679.301041][T26813] pc214e [ 1679.303990][T26813] pc215e [ 1679.306911][T26813] pc218e [ 1679.309902][T26813] pc272e [ 1679.320040][T26813] comedi: valid board names for comedi_parport driver are: [ 1679.327486][T26813] comedi_parport [ 1679.331229][T26813] comedi: valid board names for comedi_test driver are: [ 1679.338220][T26813] comedi_test [ 1679.444154][T26813] comedi: valid board names for comedi_bond driver are: [ 1679.823279][T26813] comedi_bond [ 1680.574909][ T30] audit: type=1400 audit(1757805084.986:7613): avc: denied { create } for pid=26880 comm="syz.0.5162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1681.290893][ T5914] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1682.195304][T26909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5171'. [ 1682.200854][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 1682.228357][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1682.241396][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1682.252574][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1682.265389][ T5914] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1682.274511][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.284548][ T5914] usb 2-1: config 0 descriptor?? [ 1682.326129][T26911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=26911 comm=syz.3.5172 [ 1682.395235][T21042] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1682.432362][T26914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5173'. [ 1682.609436][T26911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=26911 comm=syz.3.5172 [ 1682.633248][T26911] netlink: 'syz.3.5172': attribute type 27 has an invalid length. [ 1682.650345][T26911] netlink: 'syz.3.5172': attribute type 4 has an invalid length. [ 1682.663615][T26911] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5172'. [ 1682.744660][T21042] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1682.756069][T21042] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1682.765491][T21042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.792222][T21042] usb 3-1: config 0 descriptor?? [ 1682.800694][T21042] pwc: Askey VC010 type 2 USB webcam detected. [ 1683.182603][ T5914] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1683.343375][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1683.356387][ T5914] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1683.367155][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.379969][ T5914] usb 4-1: config 0 descriptor?? [ 1683.417805][ T5914] pwc: Askey VC010 type 2 USB webcam detected. [ 1683.458213][T21042] pwc: recv_control_msg error -71 req 02 val 2700 [ 1683.466324][T21042] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1683.476284][T21042] pwc: recv_control_msg error -71 req 04 val 1000 [ 1683.488837][T21042] pwc: recv_control_msg error -71 req 04 val 1300 [ 1683.496037][T21042] pwc: recv_control_msg error -71 req 04 val 1400 [ 1683.505414][T21042] pwc: recv_control_msg error -71 req 02 val 2000 [ 1683.516427][T21042] pwc: recv_control_msg error -71 req 02 val 2100 [ 1683.526087][T21042] pwc: recv_control_msg error -71 req 04 val 1500 [ 1683.534043][T21042] pwc: recv_control_msg error -71 req 02 val 2500 [ 1683.541256][T21042] pwc: recv_control_msg error -71 req 02 val 2400 [ 1683.556972][T21042] pwc: recv_control_msg error -71 req 02 val 2600 [ 1683.564757][T21042] pwc: recv_control_msg error -71 req 02 val 2900 [ 1683.571539][T21042] pwc: recv_control_msg error -71 req 02 val 2800 [ 1683.580161][T21042] pwc: recv_control_msg error -71 req 04 val 1100 [ 1683.588159][T21042] pwc: recv_control_msg error -71 req 04 val 1200 [ 1683.606650][T21042] pwc: Registered as video103. [ 1683.612530][T21042] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input24 [ 1683.637517][T21042] usb 3-1: USB disconnect, device number 75 [ 1683.851521][ T5914] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1683.858874][ T5914] pwc: recv_control_msg error -32 req 02 val 2700 [ 1683.873896][ T5914] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1683.889731][ T5914] pwc: recv_control_msg error -32 req 04 val 1000 [ 1683.904188][ T5914] pwc: recv_control_msg error -32 req 04 val 1300 [ 1683.917054][ T5914] pwc: recv_control_msg error -32 req 04 val 1400 [ 1683.927337][ T5914] pwc: recv_control_msg error -32 req 02 val 2000 [ 1684.103715][T26937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5182'. [ 1684.141893][T26937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5182'. [ 1684.142766][ T5914] pwc: recv_control_msg error -71 req 04 val 1500 [ 1684.157820][ T5914] pwc: recv_control_msg error -71 req 02 val 2500 [ 1684.164565][ T5914] pwc: recv_control_msg error -71 req 02 val 2400 [ 1684.175570][ T5914] pwc: recv_control_msg error -71 req 02 val 2600 [ 1684.223765][T26937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5182'. [ 1684.224701][ T5914] pwc: recv_control_msg error -71 req 02 val 2900 [ 1684.240406][T26937] bond3 (unregistering): Released all slaves [ 1684.245200][ T5914] pwc: recv_control_msg error -71 req 02 val 2800 [ 1684.253518][ T5914] pwc: recv_control_msg error -71 req 04 val 1100 [ 1684.260398][ T5914] pwc: recv_control_msg error -71 req 04 val 1200 [ 1684.270464][ T5914] pwc: Registered as video103. [ 1684.277098][ T5914] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 1684.292580][ T5914] usb 4-1: USB disconnect, device number 95 [ 1684.393650][T26944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1684.670481][ T5914] usb 2-1: USB disconnect, device number 70 [ 1685.020853][ T913] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1685.139667][T26962] affs: No valid root block on device nullb0 [ 1685.988199][ T30] audit: type=1400 audit(1757805089.576:7614): avc: denied { mounton } for pid=26956 comm="syz.1.5188" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1686.683458][ T913] usb 5-1: device descriptor read/64, error -71 [ 1687.024587][ T913] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1687.700951][ T913] usb 5-1: device descriptor read/64, error -71 [ 1687.832828][ T913] usb usb5-port1: attempt power cycle [ 1687.859637][ T30] audit: type=1400 audit(1757805092.296:7615): avc: denied { getopt } for pid=26983 comm="syz.1.5197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1688.061745][T21042] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1688.189424][T26984] ALSA: mixer_oss: invalid OSS volume 'DIGITA' [ 1688.220874][T21042] usb 4-1: Using ep0 maxpacket: 16 [ 1688.230947][T21042] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1688.250955][T21042] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1688.270314][T21042] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1688.286055][T21042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.297253][T21042] usb 4-1: config 0 descriptor?? [ 1688.570957][T20939] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1688.684841][T27003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5201'. [ 1688.693841][T27003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5201'. [ 1688.702863][T27003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5201'. [ 1688.723487][T20939] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 1688.732298][T20939] usb 2-1: config 0 has no interface number 0 [ 1688.742016][T20939] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1688.753302][T20939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.761425][T20939] usb 2-1: Product: syz [ 1688.765789][T20939] usb 2-1: Manufacturer: syz [ 1688.770422][T20939] usb 2-1: SerialNumber: syz [ 1688.781820][T20939] usb 2-1: config 0 descriptor?? [ 1689.759822][T26984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1689.768791][T26984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1689.779983][T20939] usb 2-1: Firmware version (0.0) predates our first public release. [ 1689.791073][T20939] usb 2-1: Please update to version 0.2 or newer [ 1689.865440][T20939] usb 2-1: USB disconnect, device number 71 [ 1690.188777][ T913] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1690.321267][ T913] usb 3-1: device descriptor read/64, error -71 [ 1690.349222][T27023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5207'. [ 1690.349222][ T30] audit: type=1400 audit(1757805094.786:7616): avc: denied { nlmsg_read } for pid=27020 comm="syz.0.5207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1690.580929][ T913] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1690.710905][ T913] usb 3-1: device descriptor read/64, error -71 [ 1690.712870][T20939] usb 4-1: USB disconnect, device number 96 [ 1690.718741][T27031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5211'. [ 1690.769075][T27031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5211'. [ 1690.778429][T27031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5211'. [ 1690.821018][ T913] usb usb3-port1: attempt power cycle [ 1690.828069][T27031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5211'. [ 1690.838637][T27031] bond3 (unregistering): Released all slaves [ 1691.579355][ T913] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1691.601368][ T913] usb 3-1: device descriptor read/8, error -71 [ 1691.665712][T27057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5220'. [ 1691.685120][T27057] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5220'. [ 1691.700916][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1691.700969][T27057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5220'. [ 1691.709952][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1691.720207][T27057] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5220'. [ 1691.727581][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1691.746073][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1691.890884][ T913] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1691.925486][ T913] usb 3-1: device descriptor read/8, error -71 [ 1692.044198][T27073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5227'. [ 1692.054310][ T913] usb usb3-port1: unable to enumerate USB device [ 1692.253373][ T30] audit: type=1400 audit(1757805096.686:7617): avc: denied { connect } for pid=27080 comm="syz.0.5229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1692.327535][ T30] audit: type=1400 audit(1757805096.736:7618): avc: denied { write } for pid=27080 comm="syz.0.5229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1695.588773][T27130] syzkaller0: entered promiscuous mode [ 1695.597978][T27130] syzkaller0: entered allmulticast mode [ 1695.665993][T27130] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1698.341209][T27149] binder: 27148:27149 ioctl 4018620d 0 returned -22 [ 1698.716974][ T913] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 1698.884398][ T913] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 1698.900115][ T913] usb 3-1: config 0 has no interface number 0 [ 1698.914097][ T913] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1698.935960][T27169] syzkaller0: entered promiscuous mode [ 1698.944772][ T913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.955625][T27169] syzkaller0: entered allmulticast mode [ 1698.961512][ T913] usb 3-1: Product: syz [ 1698.969577][ T913] usb 3-1: Manufacturer: syz [ 1698.987150][ T913] usb 3-1: SerialNumber: syz [ 1698.995586][T27169] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1699.031434][ T913] usb 3-1: config 0 descriptor?? [ 1699.519851][T27175] fuse: Unknown parameter 'user_i00000000000000000000' [ 1699.551745][T27177] fuse: Bad value for 'fd' [ 1699.617499][ T913] usb 3-1: Firmware version (0.0) predates our first public release. [ 1699.627423][ T913] usb 3-1: Please update to version 0.2 or newer [ 1699.680878][T21042] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1699.761264][T27183] __nla_validate_parse: 1 callbacks suppressed [ 1699.761299][T27183] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5259'. [ 1699.776961][T27183] unsupported nlmsg_type 40 [ 1700.081431][ T913] usb 3-1: USB disconnect, device number 80 [ 1700.250890][T21042] usb 2-1: Using ep0 maxpacket: 8 [ 1700.271662][T21042] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 1700.408944][T21042] usb 2-1: config 0 has no interface number 0 [ 1700.428239][T21042] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1700.452098][T21042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.484905][T21042] usb 2-1: config 0 descriptor?? [ 1700.589765][T27194] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5263'. [ 1700.616907][T21042] viperboard 2-1:0.143: version 0.00 found at bus 002 address 072 [ 1700.870360][T21042] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1700.952367][T21042] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1701.238056][T27203] cgroup: Need name or subsystem set [ 1701.262169][ T30] audit: type=1400 audit(1757805105.686:7619): avc: denied { remount } for pid=27199 comm="syz.0.5266" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1701.736231][ T5914] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1701.880804][T27203] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1701.944528][T21042] usb 2-1: USB disconnect, device number 72 [ 1701.963158][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 1701.978500][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1702.034267][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1702.056569][ T5914] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1702.066757][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.074984][ T5914] usb 4-1: Product: syz [ 1702.079174][ T5914] usb 4-1: Manufacturer: syz [ 1702.085104][ T5914] usb 4-1: SerialNumber: syz [ 1702.091521][ T5914] usb 4-1: config 0 descriptor?? [ 1702.099843][ T5914] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1702.232889][ T5914] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1702.319925][T27216] tipc: Enabled bearer , priority 0 [ 1702.336355][T27215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1702.369580][T27211] tipc: Resetting bearer [ 1702.605198][T27210] tipc: Disabling bearer [ 1702.741530][ T5914] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1702.751400][ T5914] em28xx 4-1:0.0: Config register raw data: 0x96 [ 1702.957219][ T5914] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1702.981499][ T5914] em28xx 4-1:0.0: No AC97 audio processor [ 1703.000720][ T5914] usb 4-1: USB disconnect, device number 97 [ 1703.018747][ T5914] em28xx 4-1:0.0: Disconnecting em28xx [ 1703.034464][ T5914] em28xx 4-1:0.0: Freeing device [ 1703.790193][T27250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5279'. [ 1703.906978][T27253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5279'. [ 1703.957943][T27255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5279'. [ 1704.173903][T27255] bond3 (unregistering): Released all slaves [ 1704.710311][T27266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1705.176969][T27279] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1705.183522][T27279] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1705.192391][T27279] vhci_hcd vhci_hcd.0: Device attached [ 1705.200236][T27279] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 1705.206776][T27279] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1705.215069][T27279] vhci_hcd vhci_hcd.0: Device attached [ 1705.444351][ T30] audit: type=1400 audit(1757805109.756:7620): avc: denied { bind } for pid=27280 comm="syz.2.5288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1705.471932][T10132] vhci_hcd: vhci_device speed not set [ 1705.531579][ T30] audit: type=1400 audit(1757805109.786:7621): avc: denied { accept } for pid=27280 comm="syz.2.5288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1705.555433][T10132] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1705.796306][T27283] vhci_hcd: connection reset by peer [ 1705.799104][T27285] vhci_hcd: connection closed [ 1705.803890][ T49] vhci_hcd: stop threads [ 1705.922241][ T49] vhci_hcd: release socket [ 1705.926791][ T49] vhci_hcd: disconnect device [ 1705.944923][ T49] vhci_hcd: stop threads [ 1705.949202][ T49] vhci_hcd: release socket [ 1705.960974][ T49] vhci_hcd: disconnect device [ 1706.261008][T21042] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1706.280872][ T5914] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1706.411388][T21042] usb 3-1: Using ep0 maxpacket: 16 [ 1706.451649][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 1706.460289][T21042] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.568692][ T5914] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1706.586103][T21042] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1706.589178][T27302] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1706.617411][ T5914] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1706.629018][T21042] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1706.644543][ T5914] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1706.656107][T21042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.664952][ T5914] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1706.797574][T21042] usb 3-1: config 0 descriptor?? [ 1706.807052][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.819317][ T5914] usb 2-1: config 0 descriptor?? [ 1708.520905][ T5914] nzxt-smart2 0003:1E71:2009.0013: item fetching failed at offset 2/5 [ 1708.529672][ T5914] nzxt-smart2 0003:1E71:2009.0013: probe with driver nzxt-smart2 failed with error -22 [ 1708.730626][T27313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5296'. [ 1708.750584][T20939] usb 2-1: USB disconnect, device number 73 [ 1709.069676][T27326] input: syz1 as /devices/virtual/input/input26 [ 1710.740944][T10132] vhci_hcd: vhci_device speed not set [ 1711.456418][T27331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1711.477402][ T5914] usb 3-1: USB disconnect, device number 81 [ 1711.544394][T27335] input: syz1 as /devices/virtual/input/input27 [ 1711.859802][T27343] tipc: Enabled bearer , priority 0 [ 1711.868499][T27343] syzkaller0: entered promiscuous mode [ 1711.874704][T27343] syzkaller0: entered allmulticast mode [ 1711.933420][T27343] tipc: Resetting bearer [ 1711.992961][T27341] tipc: Resetting bearer [ 1712.044504][T27341] tipc: Disabling bearer [ 1712.361435][T27347] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1713.253457][T27372] input: syz1 as /devices/virtual/input/input28 [ 1715.027828][T27383] ceph: No mds server is up or the cluster is laggy [ 1717.992723][T27455] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1718.007672][T27455] Error validating options; rc = [-22] [ 1718.721208][T20939] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1718.880885][T20939] usb 4-1: Using ep0 maxpacket: 16 [ 1718.890525][T20939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1718.918598][T20939] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1718.938025][T20939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.951252][T20939] usb 4-1: Product: syz [ 1718.958250][T20939] usb 4-1: Manufacturer: syz [ 1719.201790][T20939] usb 4-1: SerialNumber: syz [ 1719.208545][T20939] usb 4-1: config 0 descriptor?? [ 1719.216651][T20939] hub 4-1:0.0: bad descriptor, ignoring hub [ 1719.226294][T20939] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1719.242505][T20939] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input29 [ 1719.829078][T20939] usb 4-1: USB disconnect, device number 98 [ 1720.248816][T27498] netlink: 'syz.4.5354': attribute type 2 has an invalid length. [ 1720.256906][T27498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5354'. [ 1721.387110][T27525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1721.552166][T27533] sock: sock_timestamping_bind_phc: sock not bind to device [ 1721.571999][T20939] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1721.812296][T20939] usb 3-1: Using ep0 maxpacket: 8 [ 1721.821075][T20939] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1721.833573][T20939] usb 3-1: config 0 has no interfaces? [ 1721.839073][T20939] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1721.848779][T20939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.867618][T20939] usb 3-1: config 0 descriptor?? [ 1722.758411][T27550] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1722.764948][T27550] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1722.786267][T27550] vhci_hcd vhci_hcd.0: Device attached [ 1722.796492][T27550] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1722.809293][T27550] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1722.821111][T27550] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1722.835542][T27550] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1722.845615][T27550] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1722.896078][T27550] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(17) [ 1722.902686][T27550] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1722.931410][T27550] vhci_hcd vhci_hcd.0: Device attached [ 1722.942849][T27550] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1722.953085][T27550] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1722.961599][ T5914] vhci_hcd: vhci_device speed not set [ 1722.976563][T27549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1722.990060][T27560] vhci_hcd: connection closed [ 1722.991144][ T59] vhci_hcd: stop threads [ 1723.001955][ T59] vhci_hcd: release socket [ 1723.006574][ T59] vhci_hcd: disconnect device [ 1723.021210][ T5914] usb 35-1: new full-speed USB device number 5 using vhci_hcd [ 1723.030463][T27552] vhci_hcd: connection closed [ 1723.039222][ T49] vhci_hcd: stop threads [ 1723.050085][ T49] vhci_hcd: release socket [ 1723.055473][ T49] vhci_hcd: disconnect device [ 1723.620627][ T30] audit: type=1400 audit(1757805128.056:7622): avc: denied { execute } for pid=27570 comm="syz.4.5377" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1723.644114][ C1] vkms_vblank_simulate: vblank timer overrun [ 1723.894489][T27580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5380'. [ 1723.951162][T27585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5380'. [ 1723.972196][T27583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1723.997114][T27580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5380'. [ 1724.023510][T27580] bond3 (unregistering): Released all slaves [ 1724.333066][T20939] usb 3-1: USB disconnect, device number 82 [ 1724.711709][T27602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=27602 comm=syz.2.5388 [ 1724.741243][T27602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=27602 comm=syz.2.5388 [ 1724.844338][T27602] netlink: 'syz.2.5388': attribute type 27 has an invalid length. [ 1724.874502][T27602] netlink: 'syz.2.5388': attribute type 4 has an invalid length. [ 1724.909269][T27602] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5388'. [ 1725.410860][T20939] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1725.572658][T20939] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1725.607841][T20939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1725.656068][T20939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1725.695031][T20939] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1725.730009][T20939] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1725.740331][T20939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.757345][T20939] usb 3-1: config 0 descriptor?? [ 1726.120673][T27629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1726.178966][T20939] plantronics 0003:047F:FFFF.0014: ignoring exceeding usage max [ 1726.208003][T20939] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1727.523333][T27645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=27645 comm=syz.3.5404 [ 1727.543309][T27645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=27645 comm=syz.3.5404 [ 1727.558261][T27645] netlink: 'syz.3.5404': attribute type 27 has an invalid length. [ 1727.566424][T27645] netlink: 'syz.3.5404': attribute type 4 has an invalid length. [ 1727.576727][T27645] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5404'. [ 1728.260898][ T5914] vhci_hcd: vhci_device speed not set [ 1729.115379][T27669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1729.756789][T27673] ALSA: mixer_oss: invalid OSS volume 'DIGITA' [ 1729.844768][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.851897][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.041012][T18906] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1730.107516][ T913] usb 3-1: USB disconnect, device number 83 [ 1730.220874][T18906] usb 2-1: Using ep0 maxpacket: 32 [ 1730.227357][T18906] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1730.236548][T18906] usb 2-1: config 0 has no interface number 0 [ 1730.991673][T18906] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1731.020563][T18906] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1731.040507][T27686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=27686 comm=syz.2.5415 [ 1731.041276][T18906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.061733][T18906] usb 2-1: Product: syz [ 1731.066183][T18906] usb 2-1: Manufacturer: syz [ 1731.070973][T18906] usb 2-1: SerialNumber: syz [ 1731.092549][T27686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=27686 comm=syz.2.5415 [ 1731.106543][T27686] netlink: 'syz.2.5415': attribute type 27 has an invalid length. [ 1731.107078][T18906] usb 2-1: config 0 descriptor?? [ 1731.119583][T27686] netlink: 'syz.2.5415': attribute type 4 has an invalid length. [ 1731.126892][T18906] quatech2 2-1:0.1: Quatech 2nd gen USB to Serial Driver converter detected [ 1731.133079][T27686] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5415'. [ 1731.343932][T18906] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 1731.361155][T18906] quatech2 2-1:0.1: probe with driver quatech2 failed with error -8 [ 1731.456299][T27698] tipc: Enabling of bearer rejected, failed to enable media [ 1731.466710][T27699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5418'. [ 1731.627798][T20939] usb 2-1: USB disconnect, device number 74 [ 1732.186415][T27715] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1732.192974][T27715] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1732.202019][T27715] vhci_hcd vhci_hcd.0: Device attached [ 1732.209069][T27715] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1732.239080][T27715] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1732.340639][T27719] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1732.391213][T20939] vhci_hcd: vhci_device speed not set [ 1732.399363][T27715] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1732.450360][T27719] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1732.472659][T20939] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 1732.490842][T27715] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(18) [ 1732.497478][T27715] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1732.519949][T27719] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1732.531211][T27727] tipc: Enabled bearer , priority 0 [ 1732.539248][T27719] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1732.550781][T27727] syzkaller0: entered promiscuous mode [ 1732.556402][T27727] syzkaller0: entered allmulticast mode [ 1732.564785][T27715] vhci_hcd vhci_hcd.0: Device attached [ 1732.575736][T27727] tipc: Resetting bearer [ 1732.590926][T27714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1732.606059][T27716] vhci_hcd: connection reset by peer [ 1732.611755][T27724] vhci_hcd: connection closed [ 1732.612360][ T3473] vhci_hcd: stop threads [ 1732.624531][ T3473] vhci_hcd: release socket [ 1732.629165][ T3473] vhci_hcd: disconnect device [ 1732.637445][T27726] tipc: Resetting bearer [ 1732.647265][ T3473] vhci_hcd: stop threads [ 1732.653603][ T3473] vhci_hcd: release socket [ 1732.661916][ T3473] vhci_hcd: disconnect device [ 1732.677080][T27726] tipc: Disabling bearer [ 1733.030824][T18906] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1733.212672][T18906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1733.230809][T18906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1733.240589][T18906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1733.310814][T18906] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1733.339855][T18906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.375024][T18906] usb 4-1: config 0 descriptor?? [ 1733.872369][T27747] ALSA: mixer_oss: invalid OSS volume 'DIGITA' [ 1734.206519][ T913] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1734.218498][ T30] audit: type=1326 audit(1757805138.656:7623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27751 comm="syz.4.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101c78eba9 code=0x7ffc0000 [ 1734.245383][ T30] audit: type=1326 audit(1757805138.686:7624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27751 comm="syz.4.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101c78eba9 code=0x7ffc0000 [ 1734.257317][T27753] 9pnet_fd: Insufficient options for proto=fd [ 1734.269168][ T30] audit: type=1326 audit(1757805138.686:7625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27751 comm="syz.4.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f101c78eba9 code=0x7ffc0000 [ 1734.293398][T18906] usbhid 4-1:0.0: can't add hid device: -71 [ 1734.302600][ T30] audit: type=1326 audit(1757805138.686:7626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27751 comm="syz.4.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101c78eba9 code=0x7ffc0000 [ 1734.316624][T18906] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1734.359384][T18906] usb 4-1: USB disconnect, device number 99 [ 1734.361532][ T30] audit: type=1326 audit(1757805138.686:7627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27751 comm="syz.4.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101c78eba9 code=0x7ffc0000 [ 1734.393930][ T30] audit: type=1326 audit(1757805138.686:7628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27751 comm="syz.4.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f101c78eba9 code=0x7ffc0000 [ 1734.407113][ T913] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 1734.428548][ T30] audit: type=1326 audit(1757805138.686:7629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27751 comm="syz.4.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101c78eba9 code=0x7ffc0000 [ 1734.440800][ T913] usb 2-1: config 0 has no interface number 0 [ 1734.461972][ T30] audit: type=1326 audit(1757805138.686:7630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27751 comm="syz.4.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101c78eba9 code=0x7ffc0000 [ 1734.487859][ T30] audit: type=1326 audit(1757805138.686:7631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27751 comm="syz.4.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f101c78eba9 code=0x7ffc0000 [ 1734.513343][ T913] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1734.522487][ T913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.530567][ T30] audit: type=1326 audit(1757805138.686:7632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27751 comm="syz.4.5436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101c78eba9 code=0x7ffc0000 [ 1734.557393][ T913] usb 2-1: Product: syz [ 1734.561947][ T913] usb 2-1: Manufacturer: syz [ 1734.566633][ T913] usb 2-1: SerialNumber: syz [ 1734.575927][ T913] usb 2-1: config 0 descriptor?? [ 1735.064634][ T913] usb 2-1: Firmware version (0.0) predates our first public release. [ 1735.077945][ T913] usb 2-1: Please update to version 0.2 or newer [ 1735.139063][ T913] usb 2-1: USB disconnect, device number 75 [ 1737.642589][T20939] vhci_hcd: vhci_device speed not set [ 1737.719447][T27799] ------------[ cut here ]------------ [ 1737.725294][T27799] WARNING: CPU: 0 PID: 27799 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1737.735689][T27799] Modules linked in: [ 1737.739730][T27799] CPU: 0 UID: 0 PID: 27799 Comm: syz.2.5450 Not tainted syzkaller #0 PREEMPT(full) [ 1737.749376][T27799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1737.760644][T27799] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1737.767618][T27799] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 4f a6 82 09 83 fe 0a 0f 86 0a fe ff ff 80 3d a0 b9 7e 0e 00 75 0b c6 05 97 b9 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 1737.787442][T27799] RSP: 0018:ffffc90015d177f0 EFLAGS: 00010246 [ 1737.793787][T27799] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1737.801886][T27799] RDX: 0000000000000000 RSI: 000000000000002a RDI: 0000000000040d40 [ 1737.809891][T27799] RBP: 000000000000002a R08: 0000000000000005 R09: 0000000000000009 [ 1737.818116][T27799] R10: 000000000000002a R11: ffffffff8b9450cd R12: 0000000000040d40 [ 1737.826339][T27799] R13: 1ffff92002ba2f13 R14: ffffffff9ae80a24 R15: 000000000000002a [ 1737.834414][T27799] FS: 00007fbfe04606c0(0000) GS:ffff8881246b4000(0000) knlGS:0000000000000000 [ 1737.844156][T27799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1737.850875][T27799] CR2: 00007ff98bd056c0 CR3: 00000000826a0000 CR4: 00000000003526f0 [ 1737.858895][T27799] Call Trace: [ 1737.862310][T27799] [ 1737.865303][T27799] ? do_syscall_64+0xcd/0x4e0 [ 1737.870048][T27799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.876363][T27799] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1737.882902][T27799] ? kasan_quarantine_put+0x10a/0x240 [ 1737.888396][T27799] ? lockdep_hardirqs_on+0x7c/0x110 [ 1737.893743][T27799] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1737.899685][T27799] ? policy_nodemask+0xea/0x4e0 [ 1737.904696][T27799] alloc_pages_mpol+0x1fb/0x550 [ 1737.909625][T27799] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1737.915028][T27799] ? v9fs_fid_get_acl+0x7a/0x120 [ 1737.919963][T27799] ___kmalloc_large_node+0xed/0x160 [ 1737.925274][T27799] ? v9fs_fid_get_acl+0x7a/0x120 [ 1737.930244][T27799] __kmalloc_large_node_noprof+0x1c/0x70 [ 1737.936038][T27799] __kmalloc_noprof.cold+0xc/0x61 [ 1737.941139][T27799] ? __pfx_iget5_locked+0x10/0x10 [ 1737.946194][T27799] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 1737.952273][T27799] v9fs_fid_get_acl+0x7a/0x120 [ 1737.957043][T27799] v9fs_get_acl+0xee/0x530 [ 1737.961472][T27799] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 1737.966996][T27799] v9fs_mount+0x4fd/0xa90 [ 1737.971324][T27799] ? __pfx_v9fs_mount+0x10/0x10 [ 1737.976149][T27799] ? cap_capable+0xb3/0x250 [ 1737.980636][T27799] ? __pfx_v9fs_mount+0x10/0x10 [ 1737.985507][T27799] legacy_get_tree+0x109/0x220 [ 1737.990267][T27799] vfs_get_tree+0x8e/0x340 [ 1737.994757][T27799] path_mount+0x1513/0x2000 [ 1737.999263][T27799] ? __pfx_path_mount+0x10/0x10 [ 1738.004165][T27799] ? kmem_cache_free+0x2d1/0x4d0 [ 1738.009101][T27799] ? putname+0x154/0x1a0 [ 1738.013346][T27799] ? putname+0x154/0x1a0 [ 1738.017578][T27799] ? __x64_sys_mount+0x28d/0x310 [ 1738.022521][T27799] __x64_sys_mount+0x28d/0x310 [ 1738.027260][T27799] ? __pfx___x64_sys_mount+0x10/0x10 [ 1738.032550][T27799] do_syscall_64+0xcd/0x4e0 [ 1738.037033][T27799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.042931][T27799] RIP: 0033:0x7fbfdf58eba9 [ 1738.047317][T27799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1738.066952][T27799] RSP: 002b:00007fbfe0460038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1738.075388][T27799] RAX: ffffffffffffffda RBX: 00007fbfdf7d5fa0 RCX: 00007fbfdf58eba9 [ 1738.083409][T27799] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 1738.091429][T27799] RBP: 00007fbfdf611e19 R08: 0000200000000500 R09: 0000000000000000 [ 1738.099412][T27799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1738.107535][T27799] R13: 00007fbfdf7d6038 R14: 00007fbfdf7d5fa0 R15: 00007ffcf177a3e8 [ 1738.115645][T27799] [ 1738.118693][T27799] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1738.126068][T27799] CPU: 0 UID: 0 PID: 27799 Comm: syz.2.5450 Not tainted syzkaller #0 PREEMPT(full) [ 1738.135446][T27799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1738.145485][T27799] Call Trace: [ 1738.148748][T27799] [ 1738.151666][T27799] dump_stack_lvl+0x3d/0x1f0 [ 1738.156263][T27799] vpanic+0x6e8/0x7a0 [ 1738.160259][T27799] ? __pfx_vpanic+0x10/0x10 [ 1738.164772][T27799] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1738.170827][T27799] panic+0xca/0xd0 [ 1738.174555][T27799] ? __pfx_panic+0x10/0x10 [ 1738.178961][T27799] check_panic_on_warn+0xab/0xb0 [ 1738.183878][T27799] __warn+0xf6/0x3c0 [ 1738.187752][T27799] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1738.193804][T27799] report_bug+0x3c3/0x580 [ 1738.198117][T27799] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1738.204170][T27799] handle_bug+0x184/0x210 [ 1738.208487][T27799] exc_invalid_op+0x17/0x50 [ 1738.212976][T27799] asm_exc_invalid_op+0x1a/0x20 [ 1738.217809][T27799] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1738.224467][T27799] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 4f a6 82 09 83 fe 0a 0f 86 0a fe ff ff 80 3d a0 b9 7e 0e 00 75 0b c6 05 97 b9 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 1738.244145][T27799] RSP: 0018:ffffc90015d177f0 EFLAGS: 00010246 [ 1738.250208][T27799] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1738.258157][T27799] RDX: 0000000000000000 RSI: 000000000000002a RDI: 0000000000040d40 [ 1738.266109][T27799] RBP: 000000000000002a R08: 0000000000000005 R09: 0000000000000009 [ 1738.274064][T27799] R10: 000000000000002a R11: ffffffff8b9450cd R12: 0000000000040d40 [ 1738.282021][T27799] R13: 1ffff92002ba2f13 R14: ffffffff9ae80a24 R15: 000000000000002a [ 1738.289976][T27799] ? do_syscall_64+0xcd/0x4e0 [ 1738.294647][T27799] ? do_syscall_64+0xcd/0x4e0 [ 1738.299333][T27799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.305388][T27799] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1738.311707][T27799] ? kasan_quarantine_put+0x10a/0x240 [ 1738.317147][T27799] ? lockdep_hardirqs_on+0x7c/0x110 [ 1738.322328][T27799] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1738.328215][T27799] ? policy_nodemask+0xea/0x4e0 [ 1738.333051][T27799] alloc_pages_mpol+0x1fb/0x550 [ 1738.337891][T27799] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1738.343270][T27799] ? v9fs_fid_get_acl+0x7a/0x120 [ 1738.348847][T27799] ___kmalloc_large_node+0xed/0x160 [ 1738.354035][T27799] ? v9fs_fid_get_acl+0x7a/0x120 [ 1738.358959][T27799] __kmalloc_large_node_noprof+0x1c/0x70 [ 1738.364580][T27799] __kmalloc_noprof.cold+0xc/0x61 [ 1738.369590][T27799] ? __pfx_iget5_locked+0x10/0x10 [ 1738.374603][T27799] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 1738.380572][T27799] v9fs_fid_get_acl+0x7a/0x120 [ 1738.385326][T27799] v9fs_get_acl+0xee/0x530 [ 1738.389751][T27799] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 1738.395296][T27799] v9fs_mount+0x4fd/0xa90 [ 1738.399609][T27799] ? __pfx_v9fs_mount+0x10/0x10 [ 1738.404441][T27799] ? cap_capable+0xb3/0x250 [ 1738.408956][T27799] ? __pfx_v9fs_mount+0x10/0x10 [ 1738.413790][T27799] legacy_get_tree+0x109/0x220 [ 1738.418553][T27799] vfs_get_tree+0x8e/0x340 [ 1738.422958][T27799] path_mount+0x1513/0x2000 [ 1738.427461][T27799] ? __pfx_path_mount+0x10/0x10 [ 1738.432410][T27799] ? kmem_cache_free+0x2d1/0x4d0 [ 1738.437328][T27799] ? putname+0x154/0x1a0 [ 1738.441557][T27799] ? putname+0x154/0x1a0 [ 1738.445784][T27799] ? __x64_sys_mount+0x28d/0x310 [ 1738.450704][T27799] __x64_sys_mount+0x28d/0x310 [ 1738.455452][T27799] ? __pfx___x64_sys_mount+0x10/0x10 [ 1738.460730][T27799] do_syscall_64+0xcd/0x4e0 [ 1738.465233][T27799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.471107][T27799] RIP: 0033:0x7fbfdf58eba9 [ 1738.475502][T27799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1738.495088][T27799] RSP: 002b:00007fbfe0460038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1738.503483][T27799] RAX: ffffffffffffffda RBX: 00007fbfdf7d5fa0 RCX: 00007fbfdf58eba9 [ 1738.511520][T27799] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 1738.519467][T27799] RBP: 00007fbfdf611e19 R08: 0000200000000500 R09: 0000000000000000 [ 1738.527415][T27799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1738.535363][T27799] R13: 00007fbfdf7d6038 R14: 00007fbfdf7d5fa0 R15: 00007ffcf177a3e8 [ 1738.543323][T27799] [ 1738.546542][T27799] Kernel Offset: disabled [ 1738.550851][T27799] Rebooting in 86400 seconds..