last executing test programs: 4.548775349s ago: executing program 2 (id=2863): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='vegas\x00', 0x58) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @sack_perm, @sack_perm, @timestamp, @timestamp], 0x7) sendto$inet(r0, &(0x7f0000001740)="cb", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x15d}], 0x1}}], 0x1, 0x4008095) 4.42159058s ago: executing program 3 (id=2864): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[], 0x69) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) execve(&(0x7f00000002c0)='./file1\x00', 0x0, 0x0) 4.360715342s ago: executing program 2 (id=2866): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r1, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r2, 0x1, 'g'}, &(0x7f0000000480)=0x9) 4.269450638s ago: executing program 3 (id=2867): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000280)='0', 0x1}], 0x1) 4.165276777s ago: executing program 2 (id=2869): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000340), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4004011) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x10) 4.121505742s ago: executing program 3 (id=2870): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_newnexthop={0x28, 0x68, 0x8daed997891c61b5, 0x4, 0x0, {0x2}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x40}}]}, 0x28}}, 0x0) 3.272845493s ago: executing program 4 (id=2871): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000680)='8\rHY', 0x4}], 0x1) 3.164123961s ago: executing program 0 (id=2873): r0 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x693, @empty}, 0x1c) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0xfff7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x170, 0x1170, 0x1170, 0x170, 0x1170, 0x398, 0x1398, 0x1398, 0x398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @remote, @private2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @empty, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 3.068947975s ago: executing program 3 (id=2874): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200ff0100000009040000000206"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000040000000b0f065e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x18, r3, 0x705, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000b80), 0x0, 0x8004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, 0x0, &(0x7f0000000440)='GPL\x00'}, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r6 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r6, &(0x7f0000000180)={0x0, 0x21}) 3.068431249s ago: executing program 4 (id=2875): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="3caa000000000000791098000000000018090000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x40003}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) pipe(&(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00'}) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x18, &(0x7f0000000000)=0x3ff, 0x4) bind$inet(r6, 0x0, 0x0) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000901001c0000000400000300000000", 0x1c) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.956803345s ago: executing program 2 (id=2877): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='vegas\x00', 0x58) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @sack_perm, @timestamp, @timestamp, @timestamp], 0x7) sendto$inet(r0, &(0x7f0000001740)="cb", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x15d}], 0x1}}], 0x1, 0x4008095) 2.92881665s ago: executing program 0 (id=2878): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[], 0x69) close(r1) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='./file1\x00') execve(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) execve(&(0x7f00000002c0)='./file1\x00', 0x0, 0x0) 2.805454904s ago: executing program 2 (id=2879): r0 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000086e051c0140000102030109022d000101000904002501030103030921ca538f01221a0705810320001000b20905020300045c060e00"], &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xa, 0x2, 0x1, 0xff, 0x1}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x180b}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41c}}, {0x8, &(0x7f0000000740)=ANY=[]}, {0x66, &(0x7f0000000200)=ANY=[]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x437}}]}) syz_usb_control_io(r0, &(0x7f0000000540)={0x18, &(0x7f0000000380)={0x0, 0x23, 0x5b, {0x5b, 0xc, "80717e590185b092bc4127940d5d33f98032e10a20012fae4afa4033439220071e98448d9a24f29587a232da91324e87062c2f311b8b22664e45aea2410635766197cddd07635c0c81c06c969a4d19cb15a258d1b0a4debd35"}}, &(0x7f0000001000)=ANY=[@ANYBLOB="ca4d4dc1110200ec0408717b226aea1c327e7bdc044d4d24f2657b64a848f172c7fa767c0f"], &(0x7f0000000440)={0x0, 0xf, 0x53, {0x5, 0xf, 0x53, 0x5, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x6c, 0x0, 0x8, 0xf00f, 0x1}, @ssp_cap={0x1c, 0x10, 0xa, 0xf0, 0x4, 0x2, 0xff0f, 0x4, [0xc0, 0x3f00, 0xffc0, 0xff3fff]}, @ssp_cap={0x18, 0x10, 0xa, 0xc4, 0x3, 0x2abb, 0xf00, 0x2, [0xc0, 0xc000, 0xffc030]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x1, 0x0, 0x69, 0xa}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1, 0x4, 0x0, "f4c3c10b", "e21e9a47"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x8, 0x4, 0x1, 0x7, 0x6, 0x2}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000580)={0x0, 0xe, 0xba, "48929f661dded16875ba6c1d5194a5a91499ff4c619f412a8c668387dd8d36596eb448ac796a8089c008cd82015bd63001299e5ab1081b5f956e6cba7da0f7d8e54066db718d6ba943eb0d10681fe0d93356270057c626c5e834ffef581e9cebe5cc0294c82d05f2b1f90a3bbc743e0d0038b2bb2c42d88a6324c754f4529d22831655a5ba338cd08cb776b0b1779d5b6b997c55976302bc062eb39339f805d44734bd8b116ff57a276f802becf7848912976e8cd63f553d6901"}, &(0x7f0000000640)={0x0, 0xa, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x5c}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x3}, 0x0, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xffff}, &(0x7f0000000880)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "39f3"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0xff}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0xc}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x77}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12011003b8b78c20d80408fdf9570102030109af08020a1d2cf70905010240fb010196fd0c07100000ff0d0200"/54], &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x18, &(0x7f0000000a40)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000a80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x10, 0x3a, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0xc46}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x5, 0x1}}}}}]}}]}}, &(0x7f0000001040)={0x0, 0x0, 0x5, &(0x7f0000000c80)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0xc09}}, {0xe7, &(0x7f0000000f00)=@string={0xe7, 0x3, "7bb191fc6ef62c9e262d1bd461fefef0c75ea4ad590c5ac181bf6523159637c39f126e1a119d949239be68bf13e532a1c3c1dd5eb2e661cf79fe74e0a8854db7e71ca9b27232dc7c2c08e2af0e2049de89cd2486d5aaa678735fd9a92c936d28261313706f63f49074c3e751c2b569a6b665859c6370f2a6962fb735a7dff2e90cad05b89ccb28289868a1c16683bd8aabba53762ebafa5200043fb8684065f184cbcdd7d389186a67c4db297ed67b14e6699b2d74829a9305f4966f85fdd0a24a407baf0834fe9f7834c2a15b6a870aa4c0c74a2a64579eeac5cdbc697ebe75d4287f2df8"}}]}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd2, 0x15, 0x34, 0x8, 0x41e, 0x401c, 0x1d9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4b, 0x19, 0x86}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000001080)={0x44, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0) 2.719181575s ago: executing program 0 (id=2881): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private0, 0x0, r4}) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, &(0x7f0000000100)) 2.581828908s ago: executing program 0 (id=2883): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b000000090400"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) readv(r1, &(0x7f0000001640)=[{0x0}, {&(0x7f0000000080)=""/61, 0x3d}], 0x2) syz_usb_disconnect(r0) 2.076831661s ago: executing program 4 (id=2884): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r1, &(0x7f0000000300)=""/150, 0x96, 0x0) 1.705355233s ago: executing program 1 (id=2885): io_setup(0x3, &(0x7f0000000280)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') io_submit(r0, 0x2, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x0]) 1.493359817s ago: executing program 1 (id=2886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) 1.470017329s ago: executing program 1 (id=2887): pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)="cd8330e2e3", 0x5}], 0x1, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)="ea", 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) dup2(r1, r0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00004100000000", 0x8) 1.412884474s ago: executing program 1 (id=2888): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000deffffff6a0a00ff00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c5c77f0979b34e1ad837ff0d10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d26b5069f8a98f7dc8f772c06b74635fc9f9de9ca3c0ec0cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583f76e412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19002cc93c1c13ca67fdc6c238342033070000004a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000140eb2e9c15b6c8f6198282df27badac8500bc7d202e099009ca515007e5f009735200040000001896d46cdac0abb841d9f96e2e6a19b7bf661c01800000d77d6165f253683cd8dc926518c699a2b14fb2bb40425dee631368340711a8c47318d5d13085938c3ec5c39b540b34157b0330aa16bd0998607f0ecea84919712d36930abab426f58317cb"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) 1.36393756s ago: executing program 3 (id=2889): openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000002c0)={0x0}) close_range(r3, 0xffffffffffffffff, 0x0) 1.143583605s ago: executing program 4 (id=2890): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='vegas\x00', 0x58) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @sack_perm, @timestamp, @timestamp, @timestamp], 0x7) sendto$inet(r0, &(0x7f0000001740)="cb", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x15d}], 0x1}}], 0x1, 0x4008095) 793.042029ms ago: executing program 4 (id=2891): r0 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x693, @empty}, 0x1c) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0xfff7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x170, 0x1170, 0x1170, 0x170, 0x1170, 0x398, 0x1398, 0x1398, 0x398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @remote, @private2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @empty, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 289.254814ms ago: executing program 1 (id=2892): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[], 0x69) close(r1) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='./file1\x00') execve(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) execve(&(0x7f00000002c0)='./file1\x00', 0x0, 0x0) 275.526619ms ago: executing program 0 (id=2893): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x54}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 264.552824ms ago: executing program 2 (id=2894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) 221.795218ms ago: executing program 3 (id=2895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_pidfd_open(r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x94c9360a61b82d1c}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x400c000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, 0x0, 0x52) 13.154213ms ago: executing program 1 (id=2896): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40600000000004071114300000000008510"], &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0xd}, 0xc) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x4, 0x10001, 0x5000, 0x812, r0, 0x10, '\x00', 0x0, r1, 0x1, 0x2, 0x3, 0xe}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r2], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x8, 0x3, &(0x7f0000000040)=@framed, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'macvtap0\x00', 0x2}) ioctl$TUNGETFILTER(r4, 0x400454dc, &(0x7f00000020c0)=""/4109) 846.49µs ago: executing program 4 (id=2897): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0xfff, 0x7}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 0s ago: executing program 0 (id=2898): sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) uname(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r1, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) kernel console output (not intermixed with test programs): endor=0582, idProduct=0014, bcdDevice=bb.9d [ 1207.541805][ T6463] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.599406][ T5277] usb 3-1: Using ep0 maxpacket: 16 [ 1207.612220][ T5277] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1207.631942][ T6463] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1207.638962][ T5277] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1207.663850][ T5277] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.675392][ T6463] usb 5-1: invalid MIDI out EP 0 [ 1207.681318][ T5277] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1207.691377][T11980] usb 2-1: Using ep0 maxpacket: 16 [ 1207.704716][T11980] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1207.718592][T11980] usb 2-1: config 0 has no interface number 0 [ 1207.726019][ T5277] usb 3-1: config 0 has no interface number 0 [ 1207.745503][T11980] usb 2-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1207.934414][ T5277] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1208.164118][ T5305] hub 4-1:0.0: set hub depth failed [ 1208.169902][ T5488] usb 4-1: USB disconnect, device number 18 [ 1208.204030][ T5277] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1208.214456][T11980] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1208.221472][ T5277] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1208.240873][T11980] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1208.252193][T11980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.262475][ T5277] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1208.282840][T11980] usb 2-1: Product: syz [ 1208.290484][ T5277] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1208.303014][T11980] usb 2-1: Manufacturer: syz [ 1208.307739][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.319144][T11980] usb 2-1: SerialNumber: syz [ 1208.326867][ T5277] usb 3-1: Product: syz [ 1208.333150][ T5277] usb 3-1: Manufacturer: syz [ 1208.338026][ T5277] usb 3-1: SerialNumber: syz [ 1208.382044][T11980] usb 2-1: config 0 descriptor?? [ 1208.445888][ T5277] usb 3-1: config 0 descriptor?? [ 1208.705874][T13852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1208.756358][T13852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1208.785496][ T6463] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1208.789658][ T5277] usb 3-1: USB disconnect, device number 7 [ 1208.816915][ T6463] usb 5-1: USB disconnect, device number 11 [ 1208.836629][T13852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1208.856689][T13852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1208.946015][T13852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1208.965147][T13852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.008127][T13852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.051448][T13852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.318025][T11980] usb 2-1: selecting invalid altsetting 1 [ 1209.326856][T11980] speedtch 2-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1209.346190][T11980] speedtch 2-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1209.361817][T11980] speedtch 2-1:0.1: probe with driver speedtch failed with error -22 [ 1209.398131][T11980] usb 2-1: USB disconnect, device number 7 [ 1210.813105][ T29] audit: type=1400 audit(1724934531.659:418): avc: denied { getopt } for pid=13881 comm="syz.2.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1211.340926][T13901] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.1590'. [ 1212.933816][T13901] netlink: 183228 bytes leftover after parsing attributes in process `syz.1.1590'. [ 1213.913349][T13935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1600'. [ 1213.958979][T11980] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1214.163100][T11980] usb 5-1: Using ep0 maxpacket: 32 [ 1214.184231][T11980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.210270][T11980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.344038][T11980] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1214.372005][T11980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.418368][T11980] usb 5-1: config 0 descriptor?? [ 1214.453501][T11980] hub 5-1:0.0: USB hub found [ 1214.687072][T11980] hub 5-1:0.0: 1 port detected [ 1214.913952][ T5488] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1215.149253][ T5488] usb 4-1: Using ep0 maxpacket: 32 [ 1215.174092][ T5488] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1215.186646][ T5488] usb 4-1: config 0 has no interface number 0 [ 1215.205415][ T5488] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1215.229090][ T5488] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.262881][ T5488] usb 4-1: Product: syz [ 1215.267103][ T5488] usb 4-1: Manufacturer: syz [ 1215.272993][ T5488] usb 4-1: SerialNumber: syz [ 1215.281398][ T5488] usb 4-1: config 0 descriptor?? [ 1215.314741][T11980] hub 5-1:0.0: activate --> -90 [ 1215.410517][ T5305] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1215.496126][ T5488] radio-si470x 4-1:0.35: this is not a si470x device. [ 1215.520448][ T6463] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1215.525287][ T29] audit: type=1400 audit(1724934536.379:419): avc: denied { write } for pid=13931 comm="syz.4.1601" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1215.550658][ C0] vkms_vblank_simulate: vblank timer overrun [ 1215.557930][ T5488] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1215.558445][ T29] audit: type=1400 audit(1724934536.399:420): avc: denied { map } for pid=13931 comm="syz.4.1601" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1215.589203][ C0] vkms_vblank_simulate: vblank timer overrun [ 1215.602127][ T5305] usb 1-1: Using ep0 maxpacket: 16 [ 1215.614249][ T5305] usb 1-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1215.635902][ T5305] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 1215.678535][ T5305] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1215.689535][ T5305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.697619][ T5305] usb 1-1: Product: syz [ 1215.703481][ T5305] usb 1-1: Manufacturer: syz [ 1215.708394][ T5305] usb 1-1: SerialNumber: syz [ 1215.730370][ T5305] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1215.758473][ T6463] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.775314][ T5488] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 1215.792877][ T6463] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1215.821427][ T5488] radio-raremono 4-1:0.35: V4L2 device registered as radio32 [ 1215.830747][ T6463] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1215.859364][ T5488] usb 4-1: USB disconnect, device number 19 [ 1215.866150][ T6463] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1215.897516][ T5488] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 1215.925139][ T6463] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1215.947294][T13970] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1613'. [ 1215.960285][ T6463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.007681][ T6463] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1216.031705][ T6463] usb 2-1: invalid MIDI out EP 0 [ 1216.411559][ T6463] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1216.430963][ T5277] r8152-cfgselector 1-1: USB disconnect, device number 12 [ 1216.495656][T13975] netlink: 'syz.2.1613': attribute type 7 has an invalid length. [ 1216.503571][T13975] netlink: 'syz.2.1613': attribute type 8 has an invalid length. [ 1216.511501][T13975] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1613'. [ 1216.572821][T13848] udevd[13848]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1217.104175][T11980] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 1217.299340][ T940] usb 5-1: USB disconnect, device number 12 [ 1217.310213][T13983] netlink: 'syz.2.1616': attribute type 10 has an invalid length. [ 1217.339845][T11980] usb 2-1: USB disconnect, device number 8 [ 1217.348765][T13983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.359591][T13983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.556193][ T29] audit: type=1400 audit(1724934538.389:421): avc: denied { ioctl } for pid=13981 comm="syz.2.1616" path="socket:[56529]" dev="sockfs" ino=56529 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1217.640596][T13983] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.643212][ T29] audit: type=1400 audit(1724934538.459:422): avc: denied { shutdown } for pid=13987 comm="syz.0.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1217.647885][T13983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.676382][T13983] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.683650][T13983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.744908][T13983] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1218.056302][ T29] audit: type=1400 audit(1724934538.909:423): avc: denied { append } for pid=13993 comm="syz.0.1620" name="card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1219.281882][ T6463] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1219.669145][ T6463] usb 3-1: Using ep0 maxpacket: 16 [ 1219.725588][ T6463] usb 3-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1219.765634][ T6463] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 1219.795458][T14022] capability: warning: `syz.1.1631' uses 32-bit capabilities (legacy support in use) [ 1219.812165][ T6463] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1219.831329][T14025] usb usb7: usbfs: process 14025 (syz.4.1633) did not claim interface 0 before use [ 1219.840807][ T6463] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.840843][ T6463] usb 3-1: Product: syz [ 1219.840864][ T6463] usb 3-1: Manufacturer: syz [ 1219.840883][ T6463] usb 3-1: SerialNumber: syz [ 1220.670350][ T6463] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1221.258321][T14045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65362 sclass=netlink_route_socket pid=14045 comm=syz.1.1638 [ 1221.281332][T14045] Invalid option length (343) for dns_resolver key [ 1221.944892][ T5275] r8152-cfgselector 3-1: USB disconnect, device number 8 [ 1224.340024][ T29] audit: type=1400 audit(1724934545.199:424): avc: denied { mounton } for pid=14065 comm="syz.2.1645" path="mnt:[4026532852]" dev="nsfs" ino=4026532852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1224.408953][T11980] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1225.530598][T14076] hub 9-0:1.0: USB hub found [ 1225.541370][T14076] hub 9-0:1.0: 8 ports detected [ 1226.180513][T14077] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1226.689011][T11980] usb 1-1: device descriptor read/64, error -71 [ 1227.022648][T11980] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1227.188958][T11980] usb 1-1: device descriptor read/64, error -71 [ 1227.189029][ T5305] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1227.228947][ T5488] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1227.319555][T11980] usb usb1-port1: attempt power cycle [ 1227.380970][ T5305] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1227.390490][ T5305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.403396][ T5305] usb 5-1: config 0 descriptor?? [ 1227.409095][ T5488] usb 4-1: Using ep0 maxpacket: 32 [ 1227.423050][ T5305] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1227.432052][ T5488] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.454549][ T5488] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.467004][ T5488] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1227.480414][ T5488] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.494336][ T5488] usb 4-1: config 0 descriptor?? [ 1227.506172][ T5488] hub 4-1:0.0: USB hub found [ 1227.715065][ T5488] hub 4-1:0.0: 1 port detected [ 1227.837842][T14100] syzkaller1: entered promiscuous mode [ 1227.843922][T14100] syzkaller1: entered allmulticast mode [ 1227.868443][T14100] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256 [ 1228.388167][ T5488] hub 4-1:0.0: activate --> -90 [ 1228.414341][T14108] netlink: 'syz.1.1660': attribute type 1 has an invalid length. [ 1229.171312][ T5488] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1229.193918][ T5275] usb 4-1: USB disconnect, device number 20 [ 1229.450086][ T5305] usb 5-1: USB disconnect, device number 13 [ 1229.669566][T14131] fuse: Unknown parameter '0000000000000000000000018446744073709551615' [ 1231.150904][T14144] ceph: No mds server is up or the cluster is laggy [ 1231.216129][T14159] netlink: 'syz.4.1678': attribute type 1 has an invalid length. [ 1231.814435][ T29] audit: type=1400 audit(1724934552.669:425): avc: denied { read } for pid=14175 comm="syz.0.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1232.043489][ T29] audit: type=1400 audit(1724934552.869:426): avc: denied { module_request } for pid=14179 comm="syz.3.1687" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1232.064987][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.105903][ T29] audit: type=1400 audit(1724934552.959:427): avc: denied { read } for pid=14184 comm="syz.4.1688" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1232.246348][ T5239] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1232.700155][ T5239] Bluetooth: hci5: Injecting HCI hardware error event [ 1232.710726][ T5239] Bluetooth: hci5: hardware error 0x00 [ 1232.773245][ T29] audit: type=1400 audit(1724934552.959:428): avc: denied { open } for pid=14184 comm="syz.4.1688" path="/dev/nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1232.796797][ C1] vkms_vblank_simulate: vblank timer overrun [ 1233.559901][T14195] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1694'. [ 1233.611134][T14199] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1693'. [ 1233.909322][ T940] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1233.924532][T14204] netlink: 'syz.2.1693': attribute type 7 has an invalid length. [ 1233.932908][T14204] netlink: 'syz.2.1693': attribute type 8 has an invalid length. [ 1233.940775][T14204] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1693'. [ 1234.428934][ T940] usb 4-1: Using ep0 maxpacket: 16 [ 1234.546023][ T940] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1234.583172][ T940] usb 4-1: config 0 has no interface number 0 [ 1234.597029][ T940] usb 4-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1234.620738][ T8808] Bluetooth: hci5: unexpected event for opcode 0x2010 [ 1234.657220][ T940] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1234.672252][ T940] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1234.681451][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.693237][ T940] usb 4-1: Product: syz [ 1234.699327][ T940] usb 4-1: Manufacturer: syz [ 1234.704193][ T940] usb 4-1: SerialNumber: syz [ 1234.736703][ T940] usb 4-1: config 0 descriptor?? [ 1234.742894][ T5275] libceph: connect (1)[c::]:6789 error -101 [ 1234.806903][ T5275] libceph: mon0 (1)[c::]:6789 connect error [ 1234.929350][T14211] ceph: No mds server is up or the cluster is laggy [ 1234.955491][T14201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.020076][T14201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.066180][T14201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.145731][T14201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.206972][T14201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.228378][T14201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.278989][ T5275] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1235.279096][ T5239] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1235.295309][T14201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.312771][T14201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.336260][ T6463] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1235.531842][ T5275] usb 1-1: Using ep0 maxpacket: 32 [ 1235.544512][ T6463] usb 3-1: Using ep0 maxpacket: 32 [ 1235.554734][ T940] usb 4-1: selecting invalid altsetting 1 [ 1235.564510][ T5275] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1235.565777][ T940] speedtch 4-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1235.597011][ T6463] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1235.611552][ T940] speedtch 4-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1235.616872][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.629065][ T940] speedtch 4-1:0.1: probe with driver speedtch failed with error -22 [ 1235.640272][ T5275] usb 1-1: Product: syz [ 1235.645416][ T5275] usb 1-1: Manufacturer: syz [ 1235.651653][ T6463] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1235.661163][ T5275] usb 1-1: SerialNumber: syz [ 1235.675316][ T6463] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1235.690763][ T5275] usb 1-1: config 0 descriptor?? [ 1235.706088][ T940] usb 4-1: USB disconnect, device number 21 [ 1235.721073][ T5275] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1235.735121][ T6463] usb 3-1: Product: syz [ 1235.758636][ T6463] usb 3-1: Manufacturer: syz [ 1235.774439][ T6463] usb 3-1: SerialNumber: syz [ 1235.798290][ T6463] usb 3-1: config 0 descriptor?? [ 1235.812765][T14222] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1236.293902][ T5305] usb 3-1: USB disconnect, device number 9 [ 1236.399156][T14233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1703'. [ 1237.792922][ T5275] gspca_ov534_9: reg_w failed -71 [ 1237.869214][ T29] audit: type=1400 audit(1724934558.699:429): avc: denied { getopt } for pid=14250 comm="syz.4.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1237.951659][ T29] audit: type=1400 audit(1724934558.809:430): avc: denied { write } for pid=14252 comm="syz.2.1710" path="socket:[56943]" dev="sockfs" ino=56943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1238.181675][ T6463] libceph: connect (1)[c::]:6789 error -101 [ 1238.187806][ T6463] libceph: mon0 (1)[c::]:6789 connect error [ 1238.209152][ T5275] gspca_ov534_9: Unknown sensor 0000 [ 1238.209275][ T5275] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 1238.290161][ T5275] usb 1-1: USB disconnect, device number 16 [ 1238.302901][T14264] ceph: No mds server is up or the cluster is laggy [ 1238.906197][T14276] xt_hashlimit: size too large, truncated to 1048576 [ 1239.501368][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.507822][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.319125][ T5275] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1240.448167][T14284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1717'. [ 1240.482837][ T29] audit: type=1400 audit(1724934561.339:431): avc: denied { read } for pid=14280 comm="syz.2.1716" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=48240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1240.566111][ T5275] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.571208][ T29] audit: type=1400 audit(1724934561.419:432): avc: denied { ioctl } for pid=14280 comm="syz.2.1716" path="socket:[56971]" dev="sockfs" ino=56971 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1240.584610][ T5275] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1240.619888][T14280] dccp_close: ABORT with 4929 bytes unread [ 1240.621623][ T5275] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1240.645331][T14285] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1240.647671][ T5275] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1240.672513][ T5275] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1240.683143][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.700962][ T5275] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1240.720838][ T5275] usb 1-1: invalid MIDI out EP 0 [ 1240.852343][ T29] audit: type=1400 audit(1724934561.699:433): avc: denied { ioctl } for pid=14290 comm="syz.3.1719" path="/dev/vhost-net" dev="devtmpfs" ino=1085 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1240.976428][ T5275] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1240.997341][T13153] udevd[13153]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1241.027034][ T5275] usb 1-1: USB disconnect, device number 17 [ 1241.471458][ T29] audit: type=1400 audit(1724934562.329:434): avc: denied { ioctl } for pid=14305 comm="syz.4.1725" path="/dev/sg0" dev="devtmpfs" ino=703 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1241.579180][T14308] netlink: 199356 bytes leftover after parsing attributes in process `syz.1.1722'. [ 1241.588622][T14308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1722'. [ 1242.203927][ T29] audit: type=1400 audit(1724934562.419:435): avc: denied { watch watch_reads } for pid=14298 comm="syz.1.1722" path="/55/file0" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1242.334598][T14300] syzkaller0: entered promiscuous mode [ 1242.342928][T14300] syzkaller0: entered allmulticast mode [ 1242.498981][ T5275] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1242.630036][ T5488] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1242.712123][ T5275] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 1242.739265][ T5275] usb 4-1: config 0 has no interface number 0 [ 1242.749230][ T5275] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.768148][ T5275] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.788543][ T5275] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 1242.806325][ T5275] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1242.821384][ T5488] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1242.837600][ T5275] usb 4-1: Manufacturer: syz [ 1242.844455][ T5488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.864910][ T5275] usb 4-1: config 0 descriptor?? [ 1242.895042][ T5488] usb 5-1: config 0 descriptor?? [ 1242.909015][ T5276] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1242.928336][ T5488] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1243.133731][ T5276] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1243.165270][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.204965][ T5276] usb 2-1: config 0 descriptor?? [ 1243.238974][ T29] audit: type=1400 audit(1724934564.079:436): avc: denied { read write } for pid=14301 comm="syz.3.1724" name="uhid" dev="devtmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1243.263163][ T5276] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1243.304632][ T29] audit: type=1400 audit(1724934564.079:437): avc: denied { open } for pid=14301 comm="syz.3.1724" path="/dev/uhid" dev="devtmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1243.476746][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1243.482685][ C1] hrtimer: interrupt took 64336 ns [ 1243.540443][ T940] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1243.645566][ T5276] gp8psk: usb out operation failed. [ 1243.654184][ T5276] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1243.719233][ T5276] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1243.752917][ T5276] usb 2-1: USB disconnect, device number 9 [ 1244.823366][ T5488] usb 5-1: USB disconnect, device number 14 [ 1246.845677][T14327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1732'. [ 1246.871810][T14327] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1247.250669][ T5275] usbhid 4-1:0.18: can't add hid device: -71 [ 1247.308670][ T5275] usbhid 4-1:0.18: probe with driver usbhid failed with error -71 [ 1247.363026][ T5275] usb 4-1: USB disconnect, device number 22 [ 1247.802931][T14369] mmap: syz.1.1748 (14369) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1247.869046][T11980] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1248.082502][T11980] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1248.119502][T11980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.145477][T14378] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1752'. [ 1248.350445][T11980] usb 3-1: config 0 descriptor?? [ 1248.600927][T14383] netlink: 'syz.1.1752': attribute type 7 has an invalid length. [ 1248.608785][T14383] netlink: 'syz.1.1752': attribute type 8 has an invalid length. [ 1248.618371][T14383] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1752'. [ 1249.324436][T11980] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1249.796443][T14402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1761'. [ 1249.819111][ T5276] libceph: connect (1)[c::]:6789 error -101 [ 1249.850934][ T5276] libceph: mon0 (1)[c::]:6789 connect error [ 1249.923616][T14402] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1250.156671][ T5276] libceph: connect (1)[c::]:6789 error -101 [ 1250.190053][ T5276] libceph: mon0 (1)[c::]:6789 connect error [ 1250.472599][T14394] ceph: No mds server is up or the cluster is laggy [ 1250.505283][T14421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1767'. [ 1250.774160][ T5488] libceph: connect (1)[c::]:6789 error -101 [ 1250.783586][ T5488] libceph: mon0 (1)[c::]:6789 connect error [ 1251.211403][T14429] netlink: 'syz.1.1767': attribute type 7 has an invalid length. [ 1251.219280][T14429] netlink: 'syz.1.1767': attribute type 8 has an invalid length. [ 1251.227015][T14429] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1767'. [ 1251.859869][T11980] usb 3-1: USB disconnect, device number 10 [ 1251.967756][T14442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1776'. [ 1252.232371][T14447] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1253.390822][T14465] netlink: 'syz.2.1783': attribute type 7 has an invalid length. [ 1253.400596][T14465] netlink: 'syz.2.1783': attribute type 8 has an invalid length. [ 1253.408342][T14465] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1783'. [ 1254.359031][ T5488] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1255.086515][ T5488] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1255.118935][ T5488] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.155139][ T5488] usb 4-1: config 0 descriptor?? [ 1255.195552][ T5488] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1256.086624][T14505] syzkaller1: entered promiscuous mode [ 1256.098871][T14505] syzkaller1: entered allmulticast mode [ 1256.159472][ T29] audit: type=1400 audit(1724934577.009:438): avc: denied { ioctl } for pid=14484 comm="syz.4.1793" path="socket:[58239]" dev="sockfs" ino=58239 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1256.167433][T14505] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256 [ 1256.246136][ T29] audit: type=1400 audit(1724934577.019:439): avc: denied { connect } for pid=14484 comm="syz.4.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1257.379588][ T5488] usb 4-1: USB disconnect, device number 23 [ 1257.451444][T14529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1811'. [ 1257.718736][ T29] audit: type=1400 audit(1724934578.569:440): avc: denied { map } for pid=14528 comm="syz.1.1811" path="/dev/usbmon0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1257.870385][T14539] netlink: 'syz.4.1814': attribute type 7 has an invalid length. [ 1257.878167][T14539] netlink: 'syz.4.1814': attribute type 8 has an invalid length. [ 1257.999424][T14539] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1814'. [ 1259.977510][T14575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1826'. [ 1262.406712][T14619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1841'. [ 1262.487002][T14624] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1264.345792][T14656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1855'. [ 1264.600333][ T29] audit: type=1400 audit(1724934585.459:441): avc: denied { setopt } for pid=14665 comm="syz.3.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1265.597432][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1868'. [ 1266.910578][ T29] audit: type=1400 audit(1724934587.689:442): avc: denied { read write } for pid=14695 comm="syz.0.1871" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1266.933147][ C1] vkms_vblank_simulate: vblank timer overrun [ 1267.097401][ T29] audit: type=1400 audit(1724934587.689:443): avc: denied { open } for pid=14695 comm="syz.0.1871" path="/107/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1267.120415][ C1] vkms_vblank_simulate: vblank timer overrun [ 1268.205562][ T5488] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1268.430723][ T5488] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.459046][ T5488] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1268.490610][ T5488] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1268.549187][ T5488] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1268.558274][ T5488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.603058][ T5488] usb 1-1: config 0 descriptor?? [ 1268.960499][ T5277] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1269.204056][ T5488] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1269.237588][ T5488] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1269.249771][ T5488] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1269.257925][ T5488] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1269.302134][ T5488] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1269.311668][ T5488] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1269.321302][ T5488] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1269.652060][ T5488] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1269.940685][ T5488] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1269.948254][ T5488] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1269.964158][ T5488] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1269.969835][ T5277] usb 3-1: Using ep0 maxpacket: 16 [ 1269.999379][ T5488] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1270.017537][ T5277] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1270.028910][ T5488] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1270.036376][ T5488] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1270.044615][ T5277] usb 3-1: config 0 has no interface number 0 [ 1270.065281][ T5277] usb 3-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1270.078594][ T5488] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1270.099767][ T5277] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1270.119601][ T5488] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 1270.119725][ T5277] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1270.157517][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.176691][ T5277] usb 3-1: Product: syz [ 1270.185272][ T5277] usb 3-1: Manufacturer: syz [ 1270.208912][ T5277] usb 3-1: SerialNumber: syz [ 1270.220498][ T5488] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1270.245431][ T5277] usb 3-1: config 0 descriptor?? [ 1270.309006][ T5488] usb 1-1: USB disconnect, device number 18 [ 1270.498563][T14742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.579413][T14742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.610490][T14742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.661040][T14742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.687463][T14742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.732029][T14742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.753965][T14742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.797294][T14742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.139900][ T5277] usb 3-1: selecting invalid altsetting 1 [ 1271.159483][ T5277] speedtch 3-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1271.197308][ T5277] speedtch 3-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1271.699284][ T5277] speedtch 3-1:0.1: probe with driver speedtch failed with error -22 [ 1271.846744][ T5277] usb 3-1: USB disconnect, device number 11 [ 1272.849004][ T5488] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1273.089772][ T5488] usb 3-1: Using ep0 maxpacket: 16 [ 1273.131401][ T5488] usb 3-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1273.149378][ T5488] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 1273.174469][ T5488] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1273.183895][ T5488] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.219039][ T5488] usb 3-1: Product: syz [ 1273.223256][ T5488] usb 3-1: Manufacturer: syz [ 1273.227876][ T5488] usb 3-1: SerialNumber: syz [ 1273.255474][ T5488] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1274.165635][ T5277] r8152-cfgselector 3-1: USB disconnect, device number 12 [ 1274.572696][ T29] audit: type=1400 audit(1724934595.429:444): avc: denied { mount } for pid=14825 comm="syz.3.1922" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1274.599744][ T5275] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1275.050211][ T5275] usb 1-1: Using ep0 maxpacket: 16 [ 1275.705363][ T5275] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1275.743367][ T5275] usb 1-1: config 0 has no interface number 0 [ 1275.775728][ T5275] usb 1-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1275.814700][ T5275] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1275.826481][ T5275] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1275.840265][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.998225][ T5275] usb 1-1: Product: syz [ 1276.003681][ T5275] usb 1-1: Manufacturer: syz [ 1276.008352][ T5275] usb 1-1: SerialNumber: syz [ 1276.022734][ T5275] usb 1-1: config 0 descriptor?? [ 1276.147063][ T5305] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1276.240821][T14823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.272437][T14823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.303473][T14823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.329235][ T5305] usb 5-1: device descriptor read/64, error -71 [ 1276.347054][T14823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.383454][T14823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.416173][T14823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.451022][T14823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.492267][T14823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.618955][ T5305] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1276.728269][ T5275] usb 1-1: selecting invalid altsetting 1 [ 1276.751554][ T5275] speedtch 1-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1276.782340][ T5275] speedtch 1-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1276.789884][ T5305] usb 5-1: device descriptor read/64, error -71 [ 1276.816649][ T5275] speedtch 1-1:0.1: probe with driver speedtch failed with error -22 [ 1276.867794][ T5275] usb 1-1: USB disconnect, device number 19 [ 1276.929555][ T5305] usb usb5-port1: attempt power cycle [ 1277.379021][ T5305] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1277.562094][ T5305] usb 5-1: device descriptor read/8, error -71 [ 1277.869441][ T5305] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1277.932588][ T5305] usb 5-1: device descriptor read/8, error -71 [ 1278.020495][T14875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1941'. [ 1278.069462][ T5305] usb usb5-port1: unable to enumerate USB device [ 1278.284604][T14881] syzkaller0: entered promiscuous mode [ 1278.297441][T14881] syzkaller0: entered allmulticast mode [ 1280.399381][ T5275] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1280.761669][ T5275] usb 5-1: Using ep0 maxpacket: 16 [ 1280.812131][ T5275] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1280.862260][ T5275] usb 5-1: config 0 has no interface number 0 [ 1280.878308][ T5275] usb 5-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1280.907728][ T5275] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1280.932364][ T5275] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1280.949267][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.957830][ T5275] usb 5-1: Product: syz [ 1280.963118][ T5275] usb 5-1: Manufacturer: syz [ 1280.971258][ T5275] usb 5-1: SerialNumber: syz [ 1280.997305][ T5275] usb 5-1: config 0 descriptor?? [ 1281.234299][T14896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.267217][T14896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.301988][T14896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.318599][T14896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.339090][T14896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.351729][T14896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.368482][T14896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.383404][T14896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.649628][ T5275] usb 5-1: selecting invalid altsetting 1 [ 1281.664850][ T5275] speedtch 5-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1281.690011][ T5275] speedtch 5-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1281.697070][ T5275] speedtch 5-1:0.1: probe with driver speedtch failed with error -22 [ 1281.721549][ T5275] usb 5-1: USB disconnect, device number 19 [ 1282.663099][ T5488] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1282.685877][T14930] dccp_close: ABORT with 189 bytes unread [ 1282.844380][ T5488] usb 2-1: device descriptor read/64, error -71 [ 1283.136301][ T5488] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1283.318753][ T5488] usb 2-1: device descriptor read/64, error -71 [ 1283.442425][ T5239] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1283.492622][ T5488] usb usb2-port1: attempt power cycle [ 1283.972041][ T5488] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1284.019996][ T5488] usb 2-1: device descriptor read/8, error -71 [ 1284.305363][ T5488] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1284.371567][ T5488] usb 2-1: device descriptor read/8, error -71 [ 1284.501314][ T5488] usb usb2-port1: unable to enumerate USB device [ 1285.429043][ T5277] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1285.559473][ T5488] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1285.628925][ T5277] usb 1-1: Using ep0 maxpacket: 16 [ 1285.638306][ T5239] Bluetooth: hci0: sending frame failed (-49) [ 1285.647192][ T8808] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 1285.659115][ T5277] usb 1-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1285.711377][ T5277] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 1285.768544][ T5488] usb 4-1: Using ep0 maxpacket: 16 [ 1285.787065][ T5488] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1285.788968][ T5277] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1285.805512][ T5488] usb 4-1: config 0 has no interface number 0 [ 1285.813782][ T5488] usb 4-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1285.837444][ T5488] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1285.846386][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.852184][ T5488] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1285.881172][ T5488] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.884919][ T5277] usb 1-1: Product: syz [ 1285.892661][ T5488] usb 4-1: Product: syz [ 1285.898537][ T5488] usb 4-1: Manufacturer: syz [ 1285.903812][ T5488] usb 4-1: SerialNumber: syz [ 1285.916096][ T5488] usb 4-1: config 0 descriptor?? [ 1285.921298][ T5277] usb 1-1: Manufacturer: syz [ 1285.921325][ T5277] usb 1-1: SerialNumber: syz [ 1286.187806][T14960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.225287][T14960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.272083][T14960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.336353][T14960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.384140][T14960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.441513][ T5277] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1286.444951][T14960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.504226][T14960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.520426][T14960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.044773][ T5488] usb 4-1: selecting invalid altsetting 1 [ 1287.213463][ T5488] speedtch 4-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1287.370825][ T5488] speedtch 4-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1287.377971][ T5488] speedtch 4-1:0.1: probe with driver speedtch failed with error -22 [ 1287.451022][ T5488] usb 4-1: USB disconnect, device number 24 [ 1287.550360][ T6463] r8152-cfgselector 1-1: USB disconnect, device number 20 [ 1289.178912][ T940] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1289.432212][ T940] usb 3-1: Using ep0 maxpacket: 16 [ 1289.486511][ T940] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1289.509153][ T940] usb 3-1: config 0 has no interface number 0 [ 1289.535122][ T940] usb 3-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1289.567832][ T940] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1289.609548][ T940] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1289.618639][ T940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.667580][ T940] usb 3-1: Product: syz [ 1289.688565][ T940] usb 3-1: Manufacturer: syz [ 1289.713773][ T940] usb 3-1: SerialNumber: syz [ 1289.758596][ T940] usb 3-1: config 0 descriptor?? [ 1289.995291][T15020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.097427][T15020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.160023][T15020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.202357][T15020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.243912][T15020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.290568][T15020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.341067][T15020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.801227][ T6463] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1291.234160][T15020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.450133][ T6463] usb 4-1: Using ep0 maxpacket: 16 [ 1291.466557][ T6463] usb 4-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1291.492024][ T6463] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 1291.541906][ T6463] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1291.551865][ T940] usb 3-1: selecting invalid altsetting 1 [ 1291.557643][ T940] speedtch 3-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1291.565725][ T6463] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.584822][ T6463] usb 4-1: Product: syz [ 1291.598992][ T6463] usb 4-1: Manufacturer: syz [ 1291.602242][ T940] speedtch 3-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1291.614813][ T6463] usb 4-1: SerialNumber: syz [ 1291.628542][ T940] speedtch 3-1:0.1: probe with driver speedtch failed with error -22 [ 1291.654141][ T6463] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1291.661630][ T940] usb 3-1: USB disconnect, device number 13 [ 1292.594323][ T6463] r8152-cfgselector 4-1: USB disconnect, device number 25 [ 1295.047237][T15095] syzkaller0: entered promiscuous mode [ 1295.058173][T15095] syzkaller0: entered allmulticast mode [ 1295.329019][ T5488] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1295.520648][ T5488] usb 3-1: Using ep0 maxpacket: 16 [ 1295.547835][ T5488] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1295.556648][ T5488] usb 3-1: config 0 has no interface number 0 [ 1295.573744][ T5488] usb 3-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1295.597493][ T5488] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1295.645267][ T5488] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1295.659659][ T5488] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.667704][ T5488] usb 3-1: Product: syz [ 1295.682985][ T5488] usb 3-1: Manufacturer: syz [ 1295.687636][ T5488] usb 3-1: SerialNumber: syz [ 1295.712441][ T5277] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1295.718005][ T5488] usb 3-1: config 0 descriptor?? [ 1295.932050][T15112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.936025][ T5277] usb 2-1: Using ep0 maxpacket: 16 [ 1295.946977][T15112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.961938][T15112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.974778][ T5277] usb 2-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1295.995710][ T5277] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 1296.006826][T15112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.031517][ T5277] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1296.035461][T15112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.050849][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.060619][ T5277] usb 2-1: Product: syz [ 1296.061122][T15112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.065634][ T5277] usb 2-1: Manufacturer: syz [ 1296.089636][ T5277] usb 2-1: SerialNumber: syz [ 1296.109278][ T5277] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1296.136383][T15112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.167516][T15112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.416831][ T5488] usb 3-1: selecting invalid altsetting 1 [ 1296.434724][ T5488] speedtch 3-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1296.452177][ T5488] speedtch 3-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1296.464107][ T5488] speedtch 3-1:0.1: probe with driver speedtch failed with error -22 [ 1296.484055][ T5488] usb 3-1: USB disconnect, device number 14 [ 1298.962542][ T940] r8152-cfgselector 2-1: USB disconnect, device number 14 [ 1299.946390][T15141] misc userio: No port type given on /dev/userio [ 1300.025421][T15144] misc userio: The device must be registered before sending interrupts [ 1300.748074][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.756017][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.921354][ T5239] Bluetooth: hci0: command 0x1003 tx timeout [ 1301.935439][ T8808] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1302.261715][T15174] syzkaller0: entered promiscuous mode [ 1302.269426][T15174] syzkaller0: entered allmulticast mode [ 1302.559591][T15192] trusted_key: syz.1.2056 sent an empty control message without MSG_MORE. [ 1303.010927][ T5305] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1303.203192][ T5305] usb 4-1: Using ep0 maxpacket: 16 [ 1303.225920][ T5305] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1303.242927][ T5305] usb 4-1: config 0 has no interface number 0 [ 1303.249524][ T5305] usb 4-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1303.262640][ T5305] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1303.311392][ T5305] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1303.320628][ T5305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.328676][ T5305] usb 4-1: Product: syz [ 1303.342875][ T5305] usb 4-1: Manufacturer: syz [ 1303.357279][ T5305] usb 4-1: SerialNumber: syz [ 1303.365598][ T5305] usb 4-1: config 0 descriptor?? [ 1303.769903][T15196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.854218][T15196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.995849][T15196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1304.081647][T15196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1304.213772][T15196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1304.327536][T15196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1304.358234][T15196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1304.367884][T15196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1304.391332][ T5305] usb 4-1: selecting invalid altsetting 1 [ 1304.397183][ T5305] speedtch 4-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1304.410966][ T5305] speedtch 4-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1304.423711][ T5305] speedtch 4-1:0.1: probe with driver speedtch failed with error -22 [ 1304.437870][ T5305] usb 4-1: USB disconnect, device number 26 [ 1308.319104][ T8808] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1309.445504][T15250] syzkaller0: entered promiscuous mode [ 1309.451966][T15250] syzkaller0: entered allmulticast mode [ 1310.993637][ T5239] Bluetooth: hci0: sending frame failed (-49) [ 1311.013656][ T8808] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 1314.964018][T15339] syzkaller0: entered promiscuous mode [ 1314.976016][T15339] syzkaller0: entered allmulticast mode [ 1318.781071][T15390] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2131'. [ 1320.459185][ T5276] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1320.774748][ T5276] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1320.823455][ T5276] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1320.848596][T15416] syzkaller0: entered promiscuous mode [ 1320.996426][T15416] syzkaller0: entered allmulticast mode [ 1321.538898][ T5276] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 1321.569788][ T5276] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1321.588862][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.619386][T15412] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1321.654403][T15412] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1321.677792][ T5276] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1321.942201][ T5277] usb 3-1: USB disconnect, device number 15 [ 1325.829796][T15441] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2146'. [ 1327.088919][ T5305] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1327.203511][T15504] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2171'. [ 1327.292050][ T5305] usb 5-1: Using ep0 maxpacket: 16 [ 1327.307745][ T5305] usb 5-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1327.328169][ T5305] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 1327.367991][ T5305] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1327.400722][ T5305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.452808][ T5305] usb 5-1: Product: syz [ 1327.457021][ T5305] usb 5-1: Manufacturer: syz [ 1327.510258][ T5305] usb 5-1: SerialNumber: syz [ 1327.550670][ T5305] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1328.404632][ T9] r8152-cfgselector 5-1: USB disconnect, device number 20 [ 1329.462078][T15547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2187'. [ 1329.887303][T15553] netlink: 'syz.0.2187': attribute type 7 has an invalid length. [ 1329.895302][T15553] netlink: 'syz.0.2187': attribute type 8 has an invalid length. [ 1329.903164][T15553] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2187'. [ 1330.909109][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1330.978987][ T5275] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1331.098902][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1331.107379][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1331.138901][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1331.162342][ T9] usb 1-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 1331.179239][ T5275] usb 5-1: Using ep0 maxpacket: 16 [ 1331.186505][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.196861][ T5275] usb 5-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1331.211056][ T9] usb 1-1: config 0 descriptor?? [ 1331.218852][ T5275] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 1331.509704][ T5275] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1331.519898][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.528069][ T5275] usb 5-1: Product: syz [ 1331.535660][ T5275] usb 5-1: Manufacturer: syz [ 1331.540374][ T5275] usb 5-1: SerialNumber: syz [ 1331.552719][ T5275] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1331.725260][ T9] hid_mf 0003:0079:1801.0003: item fetching failed at offset 0/2 [ 1331.748368][ T9] hid_mf 0003:0079:1801.0003: HID parse failed. [ 1331.755685][ T9] hid_mf 0003:0079:1801.0003: probe with driver hid_mf failed with error -22 [ 1331.950737][ T9] usb 1-1: USB disconnect, device number 21 [ 1332.011924][T15590] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2204'. [ 1332.050305][ T5275] r8152-cfgselector 5-1: USB disconnect, device number 21 [ 1332.426471][T15594] netlink: 'syz.3.2204': attribute type 7 has an invalid length. [ 1332.434686][T15594] netlink: 'syz.3.2204': attribute type 8 has an invalid length. [ 1332.442571][T15594] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2204'. [ 1333.583600][T15610] ubi1: attaching mtd0 [ 1334.856553][T15628] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2220'. [ 1335.255036][T15640] netlink: 'syz.0.2220': attribute type 7 has an invalid length. [ 1335.262976][T15640] netlink: 'syz.0.2220': attribute type 8 has an invalid length. [ 1335.270849][T15640] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2220'. [ 1336.313128][ T29] audit: type=1400 audit(1724934657.169:445): avc: denied { ioctl } for pid=15656 comm="syz.2.2230" path="socket:[62135]" dev="sockfs" ino=62135 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1338.329010][ T5276] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1338.528997][ T5276] usb 3-1: Using ep0 maxpacket: 32 [ 1338.557890][ T5276] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1338.584253][ T5276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.608473][ T5276] usb 3-1: Product: syz [ 1338.628554][ T5276] usb 3-1: Manufacturer: syz [ 1338.658586][ T5276] usb 3-1: SerialNumber: syz [ 1338.692596][ T5276] usb 3-1: config 0 descriptor?? [ 1339.034686][ T5276] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 1339.051507][ T5276] eb 9a 3b 80 9b e4 7a f0 [ 1339.056194][ T5276] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 1339.774593][ T5275] usb 3-1: USB disconnect, device number 16 [ 1339.843233][T15690] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2238'. [ 1340.041793][T15680] Bluetooth: hci0: command 0x1003 tx timeout [ 1340.042833][ T8808] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1340.145697][T15692] netlink: 'syz.0.2238': attribute type 7 has an invalid length. [ 1340.153632][T15692] netlink: 'syz.0.2238': attribute type 8 has an invalid length. [ 1340.162979][T15692] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2238'. [ 1340.249058][ T5239] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1341.156758][ T29] audit: type=1400 audit(1724934662.009:446): avc: denied { listen } for pid=15696 comm="syz.2.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1341.419255][ T29] audit: type=1400 audit(1724934662.279:447): avc: denied { ioctl } for pid=15709 comm="syz.3.2244" path="socket:[61386]" dev="sockfs" ino=61386 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1341.800384][ T29] audit: type=1400 audit(1724934662.649:448): avc: denied { watch watch_reads } for pid=15704 comm="syz.0.2245" path="/proc/450/pagemap" dev="proc" ino=62237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1342.393647][T15739] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2255'. [ 1342.427869][ T29] audit: type=1326 audit(1724934663.279:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15738 comm="syz.0.2255" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94d3179ef9 code=0x0 [ 1342.463061][T11980] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1342.543324][T15742] ebt_among: src integrity fail: 300 [ 1342.659235][T11980] usb 3-1: Using ep0 maxpacket: 16 [ 1342.674676][T11980] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1342.699632][T11980] usb 3-1: config 0 has no interface number 0 [ 1342.728206][T11980] usb 3-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1342.775856][T11980] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1342.800448][T11980] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1342.810222][T11980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.831868][T11980] usb 3-1: Product: syz [ 1342.837488][T11980] usb 3-1: Manufacturer: syz [ 1342.847972][T11980] usb 3-1: SerialNumber: syz [ 1342.896325][T11980] usb 3-1: config 0 descriptor?? [ 1343.137584][T15728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.150055][T15728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.162581][T15728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.179329][T15728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.214279][T15728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.301534][T15728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.325648][T15728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.337379][T15728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.701911][T11980] usb 3-1: selecting invalid altsetting 1 [ 1343.709284][T11980] speedtch 3-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1343.717817][T11980] speedtch 3-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1343.725622][T11980] speedtch 3-1:0.1: probe with driver speedtch failed with error -22 [ 1344.376329][T11980] usb 3-1: USB disconnect, device number 17 [ 1344.859841][ T29] audit: type=1400 audit(1724934665.709:450): avc: denied { write } for pid=15783 comm="syz.0.2273" path="socket:[62388]" dev="sockfs" ino=62388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1346.554165][T15807] netlink: 'syz.1.2280': attribute type 7 has an invalid length. [ 1346.562062][T15807] netlink: 'syz.1.2280': attribute type 8 has an invalid length. [ 1346.569943][T15807] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2280'. [ 1346.749073][ T5276] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1347.039286][ T5276] usb 4-1: Using ep0 maxpacket: 32 [ 1347.073908][ T5276] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 1347.093748][ T5276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.120487][ T5276] usb 4-1: Product: syz [ 1347.128974][ T5276] usb 4-1: Manufacturer: syz [ 1347.133602][ T5276] usb 4-1: SerialNumber: syz [ 1347.159189][ T5488] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1347.170102][ T5276] usb 4-1: config 0 descriptor?? [ 1347.191544][ T5276] hub 4-1:0.0: bad descriptor, ignoring hub [ 1347.207714][ T5276] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1347.227889][ T5276] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1347.395008][ T5488] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1347.419055][ T5488] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.442390][ T5488] usb 5-1: Product: syz [ 1347.446668][ T5488] usb 5-1: Manufacturer: syz [ 1347.476104][ T5488] usb 5-1: SerialNumber: syz [ 1347.510327][ T5488] usb 5-1: config 0 descriptor?? [ 1347.534745][ T5488] hub 5-1:0.0: bad descriptor, ignoring hub [ 1347.553962][ T5488] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1347.569932][ T5488] f81232 5-1:0.0: f81534a converter detected [ 1347.618971][ T5305] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1347.745503][ T5488] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1347.753905][ T5276] gspca_vc032x: reg_w err -110 [ 1347.763823][ T5488] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1347.779091][ T5276] gspca_vc032x: I2c Bus Busy Wait 00 [ 1347.784491][ T5276] gspca_vc032x: I2c Bus Busy Wait 00 [ 1347.958985][T11980] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1348.080088][ T5488] usb 5-1: USB disconnect, device number 22 [ 1348.087582][ T5488] f81232 5-1:0.0: device disconnected [ 1348.093113][ T5276] gspca_vc032x: I2c Bus Busy Wait 00 [ 1348.098452][ T5276] gspca_vc032x: I2c Bus Busy Wait 00 [ 1348.105182][ T5276] gspca_vc032x: I2c Bus Busy Wait 00 [ 1348.112699][ T5305] usb 2-1: Using ep0 maxpacket: 16 [ 1348.122048][ T5276] gspca_vc032x: I2c Bus Busy Wait 00 [ 1348.149052][T11980] usb 3-1: Using ep0 maxpacket: 16 [ 1348.161748][T11980] usb 3-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1348.179396][T11980] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 1348.193022][T11980] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1348.208895][T11980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.217966][T11980] usb 3-1: Product: syz [ 1348.227748][T11980] usb 3-1: Manufacturer: syz [ 1348.237449][T11980] usb 3-1: SerialNumber: syz [ 1348.260714][T11980] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1348.492085][ T5276] gspca_vc032x: I2c Bus Busy Wait 00 [ 1348.497699][ T5305] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1348.506171][ T5276] gspca_vc032x: I2c Bus Busy Wait 00 [ 1348.511596][ T5305] usb 2-1: config 0 has no interface number 0 [ 1348.517734][ T5305] usb 2-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1348.530714][ T5276] gspca_vc032x: I2c Bus Busy Wait 00 [ 1348.536018][ T5276] gspca_vc032x: I2c Bus Busy Wait 00 [ 1348.541477][ T5276] gspca_vc032x: I2c Bus Busy Wait 00 [ 1348.546820][ T5276] gspca_vc032x: I2c Bus Busy Wait 00 [ 1348.568891][ T5305] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1348.575700][ T5276] gspca_vc032x: I2c Bus Busy Wait 00 [ 1348.587429][ T5305] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1348.600638][ T5276] gspca_vc032x: I2c Bus Busy Wait 00 [ 1348.605961][ T5276] gspca_vc032x: I2c Bus Busy Wait 00 [ 1348.616726][ T5305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.625274][ T5276] gspca_vc032x: I2c Bus Busy Wait 00 [ 1348.634129][ T5305] usb 2-1: Product: syz [ 1348.638322][ T5305] usb 2-1: Manufacturer: syz [ 1348.643959][ T5276] gspca_vc032x: I2c Bus Busy Wait 00 [ 1348.650526][ T5276] gspca_vc032x: I2c Bus Busy Wait 00 [ 1348.658690][ T5305] usb 2-1: SerialNumber: syz [ 1348.671445][ T5276] gspca_vc032x: I2c Bus Busy Wait 00 [ 1348.679482][ T5305] usb 2-1: config 0 descriptor?? [ 1348.684742][ T5276] gspca_vc032x: Unknown sensor... [ 1348.691584][ T5276] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1348.816559][T11980] r8152-cfgselector 3-1: USB disconnect, device number 18 [ 1348.901805][T15832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.929603][T15832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.941215][T15832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.958092][T15832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.981129][T15832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.999578][T15832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.026031][T15832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.050953][T15832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.313747][ T5305] usb 2-1: selecting invalid altsetting 1 [ 1349.320386][ T5305] speedtch 2-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1349.337638][ T5305] speedtch 2-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1349.345514][ T5305] speedtch 2-1:0.1: probe with driver speedtch failed with error -22 [ 1349.364893][ T5305] usb 2-1: USB disconnect, device number 15 [ 1350.046364][ T5305] usb 4-1: USB disconnect, device number 27 [ 1351.019000][ T5277] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1351.259050][ T5277] usb 5-1: Using ep0 maxpacket: 8 [ 1351.343294][ T5277] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.595669][ T5277] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1351.721005][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1351.787209][ T5277] usb 5-1: SerialNumber: syz [ 1351.831986][ T5277] usb 5-1: config 0 descriptor?? [ 1351.912747][ T29] audit: type=1326 audit(1724934672.769:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.2.2314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff4e379ef9 code=0x0 [ 1352.102857][ T5277] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 1352.137306][ T5277] usb 5-1: No valid video chain found. [ 1352.162901][ T5277] usb 5-1: USB disconnect, device number 23 [ 1352.172395][ T29] audit: type=1326 audit(1724934673.029:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.2.2314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff4e379ef9 code=0x0 [ 1352.195375][ C1] vkms_vblank_simulate: vblank timer overrun [ 1354.849265][ T29] audit: type=1326 audit(1724934675.679:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.2.2314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff4e379ef9 code=0x0 [ 1354.948945][ T6463] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1355.116753][ T8808] Bluetooth: hci0: sending frame failed (-49) [ 1355.129471][ T6463] usb 2-1: Using ep0 maxpacket: 32 [ 1355.136891][ T5239] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 1355.149009][ T6463] usb 2-1: device descriptor read/all, error -71 [ 1356.339984][ T5275] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1356.540705][ T5275] usb 1-1: Using ep0 maxpacket: 16 [ 1356.586022][ T5275] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1356.619283][ T5275] usb 1-1: config 0 has no interface number 0 [ 1356.625473][ T5275] usb 1-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1356.655625][ T5275] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1356.796973][ T5275] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1357.102669][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.137328][ T5275] usb 1-1: Product: syz [ 1357.167945][ T5275] usb 1-1: Manufacturer: syz [ 1357.195511][ T5275] usb 1-1: SerialNumber: syz [ 1357.441217][ T5275] usb 1-1: config 0 descriptor?? [ 1357.515471][T15947] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2332'. [ 1357.896839][T15954] netlink: 'syz.2.2332': attribute type 7 has an invalid length. [ 1357.904722][T15954] netlink: 'syz.2.2332': attribute type 8 has an invalid length. [ 1357.912548][T15954] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2332'. [ 1358.499350][T15952] hub 9-0:1.0: USB hub found [ 1358.504822][T15952] hub 9-0:1.0: 8 ports detected [ 1359.697078][ T5275] usb 1-1: selecting invalid altsetting 1 [ 1359.776714][ T5275] speedtch 1-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1360.263802][ T5275] speedtch 1-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1360.409584][ T5275] speedtch 1-1:0.1: probe with driver speedtch failed with error -22 [ 1360.554507][ T5275] usb 1-1: USB disconnect, device number 22 [ 1361.950525][T15993] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2345'. [ 1362.179173][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.185664][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.213603][T15994] netlink: 'syz.3.2345': attribute type 7 has an invalid length. [ 1362.221458][T15994] netlink: 'syz.3.2345': attribute type 8 has an invalid length. [ 1362.229316][T15994] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2345'. [ 1362.588884][ T5276] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1362.857441][ T5276] usb 5-1: Using ep0 maxpacket: 16 [ 1362.877310][ T5276] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1362.903352][ T5276] usb 5-1: config 0 has no interface number 0 [ 1362.931189][ T5276] usb 5-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1362.983802][ T5276] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1363.008226][ T5276] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1363.030800][ T5276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.063562][ T5276] usb 5-1: Product: syz [ 1363.083529][ T5276] usb 5-1: Manufacturer: syz [ 1363.109420][ T5276] usb 5-1: SerialNumber: syz [ 1363.142561][ T5276] usb 5-1: config 0 descriptor?? [ 1363.390392][T15996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1363.440579][T15996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.490106][T15996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1363.545466][T15996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.576310][T15996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1363.595784][T15996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.804335][T15996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.102084][T15996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1364.575508][ T5276] usb 5-1: selecting invalid altsetting 1 [ 1364.594861][ T5276] speedtch 5-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1364.619587][ T5276] speedtch 5-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1364.863741][ T5276] speedtch 5-1:0.1: probe with driver speedtch failed with error -22 [ 1364.888569][ T5276] usb 5-1: USB disconnect, device number 24 [ 1365.498948][ T5277] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1365.548906][ T8778] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1365.724265][ T5277] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1365.745148][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.758287][ T8778] usb 3-1: Using ep0 maxpacket: 8 [ 1365.846338][ T8778] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1365.869381][ T5277] usb 2-1: config 0 descriptor?? [ 1365.900669][ T8778] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1365.917157][ T5277] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1365.953922][ T8778] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1365.972079][ T8778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.895258][ T8778] usb 3-1: string descriptor 0 read error: -71 [ 1366.910374][ T8778] hub 3-1:32.0: USB hub found [ 1366.916746][ T8778] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 1367.149670][ T8778] usb 3-1: USB disconnect, device number 19 [ 1368.482951][ T5277] usb 2-1: USB disconnect, device number 18 [ 1369.859065][ T5276] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1370.059143][ T5276] usb 1-1: Using ep0 maxpacket: 16 [ 1370.089006][ T5488] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1370.154672][ T5276] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1370.273062][ T5276] usb 1-1: config 0 has no interface number 0 [ 1370.305179][ T5488] usb 5-1: Using ep0 maxpacket: 16 [ 1370.372220][ T5276] usb 1-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1370.444456][ T5488] usb 5-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1370.559236][ T5488] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 1370.587473][ T5276] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1370.638265][ T5488] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1370.649917][ T5276] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1370.679091][ T5488] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.697380][ T5276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.727917][ T5488] usb 5-1: Product: syz [ 1370.750481][ T5276] usb 1-1: Product: syz [ 1370.762607][ T5488] usb 5-1: Manufacturer: syz [ 1370.767265][ T5488] usb 5-1: SerialNumber: syz [ 1370.778823][ T5276] usb 1-1: Manufacturer: syz [ 1370.793844][ T5276] usb 1-1: SerialNumber: syz [ 1370.815741][ T5488] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1370.834710][ T5276] usb 1-1: config 0 descriptor?? [ 1371.126076][T16081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.144776][T16081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.314962][T16081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.934497][T16081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.067735][T16081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.138210][T16081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.168635][T16081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.188587][T16081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.198962][ T8778] r8152-cfgselector 5-1: USB disconnect, device number 25 [ 1372.423441][ T5276] usb 1-1: selecting invalid altsetting 1 [ 1372.442919][ T5276] speedtch 1-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1372.467710][ T5276] speedtch 1-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1372.494390][ T5276] speedtch 1-1:0.1: probe with driver speedtch failed with error -22 [ 1372.534358][ T5276] usb 1-1: USB disconnect, device number 23 [ 1373.188977][ T5277] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1373.391336][ T5277] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1373.414932][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.442242][ T5277] usb 5-1: config 0 descriptor?? [ 1373.466616][ T5277] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1375.079184][ T8778] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1375.290664][ T8778] usb 1-1: Using ep0 maxpacket: 16 [ 1375.299799][ T8778] usb 1-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1375.308863][ T8778] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 1375.321394][ T8778] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1375.330733][ T8778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.338897][ T8778] usb 1-1: Product: syz [ 1375.343209][ T8778] usb 1-1: Manufacturer: syz [ 1375.347873][ T8778] usb 1-1: SerialNumber: syz [ 1375.348975][ T5276] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1375.366317][ T8778] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1375.448866][ T5277] usb 5-1: USB disconnect, device number 26 [ 1375.538998][ T5276] usb 2-1: Using ep0 maxpacket: 16 [ 1375.551287][ T5276] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1375.565152][ T5276] usb 2-1: config 0 has no interface number 0 [ 1375.572103][ T5276] usb 2-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1375.592391][ T5276] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1375.626199][ T5276] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1375.649384][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.657650][ T5276] usb 2-1: Product: syz [ 1375.668712][ T5276] usb 2-1: Manufacturer: syz [ 1375.674137][ T5276] usb 2-1: SerialNumber: syz [ 1375.708194][ T5276] usb 2-1: config 0 descriptor?? [ 1375.900645][ T5277] r8152-cfgselector 1-1: USB disconnect, device number 24 [ 1375.932314][T16153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.970879][T16153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.001733][T16153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.045201][T16153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.117288][T16153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.146686][T16153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.245115][T16153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.293560][T16153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.544435][ T5276] usb 2-1: selecting invalid altsetting 1 [ 1376.568954][ T5276] speedtch 2-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1376.593136][ T5276] speedtch 2-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1376.606398][ T5276] speedtch 2-1:0.1: probe with driver speedtch failed with error -22 [ 1376.654016][ T5276] usb 2-1: USB disconnect, device number 19 [ 1378.881266][ T5276] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1379.071355][ T5276] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1379.090026][ T5276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.107753][ T5276] usb 5-1: config 0 descriptor?? [ 1379.244544][ T5276] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1380.282621][ T29] audit: type=1326 audit(1724934701.139:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16216 comm="syz.3.2427" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a8cf79ef9 code=0x0 [ 1380.419495][ T8778] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1380.628977][ T8778] usb 1-1: Using ep0 maxpacket: 16 [ 1380.656014][ T8778] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1380.696178][ T8778] usb 1-1: config 0 has no interface number 0 [ 1380.714853][ T8778] usb 1-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1380.737612][ T8778] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1380.751312][ T8778] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1380.790845][ T8778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.799751][ T8778] usb 1-1: Product: syz [ 1380.804063][ T8778] usb 1-1: Manufacturer: syz [ 1380.822550][ T8778] usb 1-1: SerialNumber: syz [ 1380.896243][ T8778] usb 1-1: config 0 descriptor?? [ 1381.128014][T16223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.201307][T16223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.258982][T16223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.283529][T16223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.370967][T16223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.405969][T16223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.454508][T16223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.563270][T16223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.723206][ T5276] usb 5-1: USB disconnect, device number 27 [ 1381.884729][ T8778] usb 1-1: selecting invalid altsetting 1 [ 1381.920462][ T8778] speedtch 1-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1381.951804][ T8778] speedtch 1-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1381.964657][ T8778] speedtch 1-1:0.1: probe with driver speedtch failed with error -22 [ 1381.983693][ T8778] usb 1-1: USB disconnect, device number 25 [ 1385.708395][ T5276] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1386.561306][ T5276] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1386.825000][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.495975][ T5276] usb 1-1: config 0 descriptor?? [ 1387.526762][ T5276] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1388.879943][T16325] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2462'. [ 1390.048665][T16343] netlink: 'syz.3.2462': attribute type 7 has an invalid length. [ 1390.056519][T16343] netlink: 'syz.3.2462': attribute type 8 has an invalid length. [ 1390.064346][T16343] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2462'. [ 1390.541820][ T5276] gspca_stv06xx: I2C: Read error writing address: -71 [ 1390.589273][ T5276] usb 1-1: USB disconnect, device number 26 [ 1390.948872][ T5305] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1391.158832][ T5305] usb 4-1: Using ep0 maxpacket: 16 [ 1391.271767][ T5305] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1391.282335][ T5305] usb 4-1: config 0 has no interface number 0 [ 1391.288678][ T5305] usb 4-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1391.303076][ T5305] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1391.328651][ T5305] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1391.343078][ T5305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.364040][ T5305] usb 4-1: Product: syz [ 1391.381921][ T5305] usb 4-1: Manufacturer: syz [ 1391.396390][ T5305] usb 4-1: SerialNumber: syz [ 1391.423587][ T5305] usb 4-1: config 0 descriptor?? [ 1391.649383][T16354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.667154][T16354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.719237][T16354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.771552][T16354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.820253][T16354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.881753][T16354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.930571][T16354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.957334][T16354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.239253][ T5305] usb 4-1: selecting invalid altsetting 1 [ 1392.260272][ T5305] speedtch 4-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1393.159322][ T5305] speedtch 4-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1393.207657][ T5305] speedtch 4-1:0.1: probe with driver speedtch failed with error -22 [ 1393.304493][ T5305] usb 4-1: USB disconnect, device number 28 [ 1393.589144][ T5277] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1394.421160][ T5277] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1394.700568][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.728961][ T5277] usb 3-1: config 0 descriptor?? [ 1394.741875][ T5277] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1395.859275][T11980] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1396.079158][T11980] usb 5-1: Using ep0 maxpacket: 16 [ 1396.091059][T11980] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1396.114781][T11980] usb 5-1: config 0 has no interface number 0 [ 1396.123770][T11980] usb 5-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1396.151971][T11980] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1396.177085][T11980] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1396.190074][T11980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.218680][T11980] usb 5-1: Product: syz [ 1396.224530][T11980] usb 5-1: Manufacturer: syz [ 1396.236900][T11980] usb 5-1: SerialNumber: syz [ 1396.251053][T11980] usb 5-1: config 0 descriptor?? [ 1396.645132][T16413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1397.390701][T16413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1397.425447][ T5277] usb 3-1: USB disconnect, device number 20 [ 1397.436179][T16413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1397.473316][T16413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1397.517597][T16413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1397.546257][T16413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1397.578075][T16413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1397.616451][T16413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.125581][T11980] usb 5-1: selecting invalid altsetting 1 [ 1398.143100][T11980] speedtch 5-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1398.151763][T11980] speedtch 5-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1398.167351][T11980] speedtch 5-1:0.1: probe with driver speedtch failed with error -22 [ 1398.202227][T11980] usb 5-1: USB disconnect, device number 28 [ 1400.188985][T11980] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1400.707357][T11980] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1400.844953][T11980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.985358][T11980] usb 5-1: Product: syz [ 1401.004918][T11980] usb 5-1: Manufacturer: syz [ 1401.042141][T11980] usb 5-1: SerialNumber: syz [ 1401.094100][T11980] usb 5-1: config 0 descriptor?? [ 1401.145631][T11980] hub 5-1:0.0: bad descriptor, ignoring hub [ 1401.178979][T11980] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1401.232999][T11980] f81232 5-1:0.0: f81534a converter detected [ 1401.358720][T11980] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1401.398099][T11980] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1401.508649][T11980] usb 5-1: USB disconnect, device number 29 [ 1401.553813][T11980] f81232 5-1:0.0: device disconnected [ 1404.357008][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2533'. [ 1404.485625][T16523] Bluetooth: MGMT ver 1.23 [ 1405.320555][T16543] ceph: No mds server is up or the cluster is laggy [ 1407.129005][ T5277] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1408.068864][ T5277] usb 2-1: Using ep0 maxpacket: 16 [ 1408.091803][ T5277] usb 2-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1408.128966][ T5277] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 1408.181102][ T5277] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1408.223402][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.281012][ T5277] usb 2-1: Product: syz [ 1408.290143][ T5277] usb 2-1: Manufacturer: syz [ 1408.294874][ T5277] usb 2-1: SerialNumber: syz [ 1408.959037][ T5277] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1409.588198][ T5277] r8152-cfgselector 2-1: USB disconnect, device number 20 [ 1409.845861][T16628] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2571'. [ 1410.026516][T16628] netlink: 'syz.2.2571': attribute type 7 has an invalid length. [ 1410.034675][T16628] netlink: 'syz.2.2571': attribute type 8 has an invalid length. [ 1410.042451][T16628] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2571'. [ 1410.713554][T16652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1411.182663][T16663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2586'. [ 1411.374043][T16663] netlink: 'syz.0.2586': attribute type 7 has an invalid length. [ 1411.381836][T16663] netlink: 'syz.0.2586': attribute type 8 has an invalid length. [ 1411.389622][T16663] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2586'. [ 1411.729509][ T5277] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1411.941496][ T5277] usb 4-1: Using ep0 maxpacket: 16 [ 1411.975387][ T5277] usb 4-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1412.016554][ T5277] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 1412.070974][ T5277] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1412.090199][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.110241][ T5277] usb 4-1: Product: syz [ 1412.119225][ T5277] usb 4-1: Manufacturer: syz [ 1412.125914][ T5277] usb 4-1: SerialNumber: syz [ 1412.136971][ T5277] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1412.881616][ T8778] r8152-cfgselector 4-1: USB disconnect, device number 29 [ 1413.051388][T16701] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2601'. [ 1413.060784][ T5276] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1413.139803][T16704] netlink: 'syz.2.2601': attribute type 7 has an invalid length. [ 1413.147624][T16704] netlink: 'syz.2.2601': attribute type 8 has an invalid length. [ 1413.155847][T16704] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2601'. [ 1413.270325][ T5276] usb 2-1: Using ep0 maxpacket: 32 [ 1413.281075][ T5276] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 1413.291019][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.304357][ T5276] usb 2-1: config 0 descriptor?? [ 1413.316114][ T5276] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1413.327313][ T5276] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1413.444842][ T29] audit: type=1400 audit(1724934734.289:455): avc: denied { setopt } for pid=16705 comm="syz.4.2602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1414.650848][ T29] audit: type=1400 audit(1724934735.499:456): avc: denied { watch watch_reads } for pid=16723 comm="syz.2.2609" path="/227" dev="tmpfs" ino=1165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1414.909159][ T29] audit: type=1400 audit(1724934735.759:457): avc: denied { setopt } for pid=16729 comm="syz.4.2611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1414.917529][T16730] x_tables: duplicate underflow at hook 3 [ 1414.970985][T16730] ieee802154 phy0 wpan0: encryption failed: -22 [ 1414.974515][ T29] audit: type=1400 audit(1724934735.829:458): avc: denied { write } for pid=16729 comm="syz.4.2611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1414.978221][T16734] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2613'. [ 1415.092138][T16737] netlink: 'syz.2.2613': attribute type 7 has an invalid length. [ 1415.100237][T16737] netlink: 'syz.2.2613': attribute type 8 has an invalid length. [ 1415.108835][T16737] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2613'. [ 1415.239068][ T8778] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1416.293809][ T8778] usb 1-1: Using ep0 maxpacket: 8 [ 1416.301382][ T8778] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.319387][ T8778] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1416.328634][ T8778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1416.350658][ T8778] usb 1-1: SerialNumber: syz [ 1416.367869][ T8778] usb 1-1: config 0 descriptor?? [ 1416.424796][ T5305] usb 2-1: USB disconnect, device number 21 [ 1416.637852][ T8778] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 1416.661951][ T8778] usb 1-1: No valid video chain found. [ 1416.683512][ T8778] usb 1-1: USB disconnect, device number 27 [ 1416.719554][ T5277] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1416.921715][ T5277] usb 4-1: Using ep0 maxpacket: 16 [ 1416.948176][ T5277] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1416.965513][ T5277] usb 4-1: config 0 has no interface number 0 [ 1417.000393][ T5277] usb 4-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1417.024551][ T5277] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1417.053923][ T5277] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1417.068424][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.084690][ T5277] usb 4-1: Product: syz [ 1417.105415][ T5277] usb 4-1: Manufacturer: syz [ 1417.117798][ T5277] usb 4-1: SerialNumber: syz [ 1417.151086][ T5277] usb 4-1: config 0 descriptor?? [ 1418.152492][T16749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.260683][T16749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.290268][T16749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.300485][T16749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.461873][T16749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.075512][T16749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.220728][ T5277] usb 4-1: selecting invalid altsetting 1 [ 1420.247351][ T5277] speedtch 4-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1420.274915][ T5277] speedtch 4-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1420.374353][ T5277] speedtch 4-1:0.1: probe with driver speedtch failed with error -22 [ 1420.559900][ T5277] usb 4-1: USB disconnect, device number 30 [ 1420.746238][T13276] udevd[13276]: setting owner of /dev/bus/usb/004/030 to uid=0, gid=0 failed: No such file or directory [ 1423.604820][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.613683][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.158887][ T5277] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1425.358849][ T5277] usb 5-1: Using ep0 maxpacket: 16 [ 1425.395300][ T5277] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1425.407142][ T5277] usb 5-1: config 0 has no interface number 0 [ 1425.414100][ T5277] usb 5-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1426.238406][ T5277] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1426.279906][ T5277] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1426.334110][ T5277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.388892][ T5277] usb 5-1: Product: syz [ 1426.405090][ T5277] usb 5-1: Manufacturer: syz [ 1426.433067][ T5277] usb 5-1: SerialNumber: syz [ 1426.464436][ T5277] usb 5-1: config 0 descriptor?? [ 1426.696888][T16820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.860944][T16820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.030124][T16820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1427.175135][T16820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.389812][T16820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1427.458094][ T5305] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1427.516231][T16820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.580648][T16820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1427.630971][T16820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.729160][ T5305] usb 2-1: Using ep0 maxpacket: 8 [ 1427.808217][T16866] bond_slave_0: entered promiscuous mode [ 1427.814428][T16866] bond_slave_1: entered promiscuous mode [ 1427.864914][ T5277] usb 5-1: selecting invalid altsetting 1 [ 1427.881724][T16866] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1427.889366][ T5277] speedtch 5-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1427.910311][ T5277] speedtch 5-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1427.921154][T16866] bond_slave_0: left promiscuous mode [ 1427.926715][T16866] bond_slave_1: left promiscuous mode [ 1427.939540][ T5277] speedtch 5-1:0.1: probe with driver speedtch failed with error -22 [ 1427.973387][ T5277] usb 5-1: USB disconnect, device number 30 [ 1428.134623][ T5305] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1428.149533][ T5305] usb 2-1: no configurations [ 1428.166832][ T5305] usb 2-1: can't read configurations, error -22 [ 1431.647372][T16906] dccp_close: ABORT with 189 bytes unread [ 1431.818510][ T29] audit: type=1400 audit(1724934752.669:459): avc: denied { read write } for pid=16911 comm="syz.4.2676" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1431.868858][T11980] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1431.917231][ T29] audit: type=1400 audit(1724934752.669:460): avc: denied { open } for pid=16911 comm="syz.4.2676" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1432.343257][T11980] usb 4-1: Using ep0 maxpacket: 32 [ 1432.365710][T11980] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1432.400953][T11980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.459520][T11980] usb 4-1: Product: syz [ 1432.485694][T11980] usb 4-1: Manufacturer: syz [ 1432.537997][T11980] usb 4-1: SerialNumber: syz [ 1433.259712][T11980] usb 4-1: config 0 descriptor?? [ 1433.488943][T11980] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 1433.497758][T11980] eb 9a 3b 80 9b e4 7a f0 [ 1433.529988][T11980] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 1434.658639][ T5277] usb 4-1: USB disconnect, device number 31 [ 1435.702009][T16950] sp0: Synchronizing with TNC [ 1435.866976][ T29] audit: type=1400 audit(1724934756.719:461): avc: denied { bind } for pid=16954 comm="syz.3.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1436.066381][T16951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1436.485315][T16949] [U] è` [ 1438.509148][ T5277] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1438.817775][ T5277] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1438.932219][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.030658][ T5277] usb 5-1: config 0 descriptor?? [ 1439.072287][ T5277] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1439.195565][T17000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2706'. [ 1439.203895][ T29] audit: type=1400 audit(1724934760.049:462): avc: denied { setopt } for pid=16999 comm="syz.2.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1439.650126][ T8778] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1439.861397][ T8778] usb 2-1: Using ep0 maxpacket: 16 [ 1439.882387][ T8778] usb 2-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1439.912453][ T8778] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 1439.936376][ T8778] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1439.958998][ T8778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.996101][ T8778] usb 2-1: Product: syz [ 1440.019645][ T8778] usb 2-1: Manufacturer: syz [ 1440.031164][ T8778] usb 2-1: SerialNumber: syz [ 1440.055749][ T8778] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1441.171557][ T8778] r8152-cfgselector 2-1: USB disconnect, device number 24 [ 1441.386858][ T5277] usb 5-1: USB disconnect, device number 31 [ 1441.609340][ T940] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1441.802301][ T940] usb 4-1: Using ep0 maxpacket: 16 [ 1441.826822][ T940] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1441.844482][ T940] usb 4-1: config 0 has no interface number 0 [ 1441.858848][ T940] usb 4-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1441.882095][ T940] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1441.901629][ T940] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1441.918812][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.937242][ T940] usb 4-1: Product: syz [ 1441.942818][ T940] usb 4-1: Manufacturer: syz [ 1441.958104][ T940] usb 4-1: SerialNumber: syz [ 1441.969805][ T940] usb 4-1: config 0 descriptor?? [ 1442.223523][T17036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.271194][T17036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.333470][T17036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.380092][T17056] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2727'. [ 1442.422163][T17036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.959427][T17036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.091896][T17036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.159363][T17036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.269230][T17036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1444.287263][ T940] usb 4-1: selecting invalid altsetting 1 [ 1444.298791][ T940] speedtch 4-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1444.310560][ T940] speedtch 4-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1444.318148][ T940] speedtch 4-1:0.1: probe with driver speedtch failed with error -22 [ 1444.330946][ T940] usb 4-1: USB disconnect, device number 32 [ 1444.649095][T17079] netlink: 'syz.1.2736': attribute type 10 has an invalid length. [ 1444.674113][T17079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1444.714010][T17079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1444.759528][T17079] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1444.819108][ T6463] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1445.029087][ T6463] usb 1-1: Using ep0 maxpacket: 16 [ 1445.047916][ T6463] usb 1-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1445.066975][ T6463] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 1445.110011][ T6463] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1445.128812][ T6463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.153826][ T6463] usb 1-1: Product: syz [ 1445.164742][ T6463] usb 1-1: Manufacturer: syz [ 1445.181993][ T6463] usb 1-1: SerialNumber: syz [ 1445.223517][ T6463] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1445.359862][T17090] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1445.419643][T17092] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2742'. [ 1445.770072][T11980] r8152-cfgselector 1-1: USB disconnect, device number 28 [ 1445.863347][T17100] netlink: 'syz.3.2742': attribute type 7 has an invalid length. [ 1445.871355][T17100] netlink: 'syz.3.2742': attribute type 8 has an invalid length. [ 1445.879370][T17100] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2742'. [ 1445.890436][ T5276] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1446.088999][ T5276] usb 3-1: Using ep0 maxpacket: 8 [ 1446.110415][ T5276] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1446.125490][ T5276] usb 3-1: config 0 has no interface number 0 [ 1446.131842][ T5276] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1446.160213][ T5276] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1446.180265][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.200345][ T5276] usb 3-1: config 0 descriptor?? [ 1446.238245][ T5276] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1447.703720][T11980] usb 3-1: USB disconnect, device number 21 [ 1447.729291][T11980] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 1448.878955][ T5277] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1449.058899][ T5277] usb 4-1: Using ep0 maxpacket: 16 [ 1449.073320][ T5277] usb 4-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1449.093563][ T5277] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 1449.122712][ T5277] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1449.135321][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.145955][ T5277] usb 4-1: Product: syz [ 1449.163065][ T5277] usb 4-1: Manufacturer: syz [ 1449.168210][ T5277] usb 4-1: SerialNumber: syz [ 1449.191431][ T5277] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1449.731502][ T5277] r8152-cfgselector 4-1: USB disconnect, device number 33 [ 1450.859397][T17158] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2765'. [ 1451.241201][T17168] netlink: 'syz.1.2765': attribute type 7 has an invalid length. [ 1451.249996][T17168] netlink: 'syz.1.2765': attribute type 8 has an invalid length. [ 1451.257757][T17168] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2765'. [ 1453.863595][T17207] ubi1: attaching mtd0 [ 1453.917697][ T29] audit: type=1400 audit(1724934774.729:463): avc: denied { ioctl } for pid=17202 comm="syz.2.2780" path="/dev/nullb0" dev="devtmpfs" ino=682 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1455.068953][T17224] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2786'. [ 1455.422047][T17227] netlink: 'syz.0.2786': attribute type 7 has an invalid length. [ 1455.429973][T17227] netlink: 'syz.0.2786': attribute type 8 has an invalid length. [ 1455.437801][T17227] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2786'. [ 1455.634130][T17229] No control pipe specified [ 1456.417520][T17246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2796'. [ 1458.079358][T11980] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1458.278873][T11980] usb 4-1: Using ep0 maxpacket: 16 [ 1458.297223][T11980] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1458.315964][T11980] usb 4-1: config 0 has no interface number 0 [ 1458.342619][T11980] usb 4-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1458.396502][T11980] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1458.421304][T11980] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1458.456379][T11980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.480005][T11980] usb 4-1: Product: syz [ 1458.484225][T11980] usb 4-1: Manufacturer: syz [ 1458.499583][T11980] usb 4-1: SerialNumber: syz [ 1458.520529][T11980] usb 4-1: config 0 descriptor?? [ 1458.868114][T17254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1462.870381][T17254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.066179][T17285] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2811'. [ 1463.129867][T11980] usb 4-1: selecting invalid altsetting 1 [ 1463.187125][T11980] speedtch 4-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1463.256593][T11980] speedtch 4-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1463.312414][T11980] speedtch 4-1:0.1: probe with driver speedtch failed with error -22 [ 1463.391798][T17289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2812'. [ 1463.412387][T11980] usb 4-1: USB disconnect, device number 34 [ 1463.487588][T17296] netlink: 'syz.2.2811': attribute type 7 has an invalid length. [ 1463.495768][T17296] netlink: 'syz.2.2811': attribute type 8 has an invalid length. [ 1463.503638][T17296] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2811'. [ 1464.875391][T17316] syz.0.2822[17316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1464.875601][T17316] syz.0.2822[17316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1466.739921][ T5277] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1466.889490][T11980] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1466.948814][ T5277] usb 5-1: Using ep0 maxpacket: 16 [ 1466.959452][ T5277] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1466.967566][ T5277] usb 5-1: config 0 has no interface number 0 [ 1466.980261][ T5277] usb 5-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1467.008791][ T5277] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1467.034756][ T5277] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1467.054898][ T5277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.068787][ T5277] usb 5-1: Product: syz [ 1467.072994][ T5277] usb 5-1: Manufacturer: syz [ 1467.080419][T11980] usb 3-1: Using ep0 maxpacket: 16 [ 1467.098536][ T5277] usb 5-1: SerialNumber: syz [ 1467.104953][T11980] usb 3-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1467.117148][ T5277] usb 5-1: config 0 descriptor?? [ 1467.128816][T11980] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 1467.160449][T11980] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1467.175534][T11980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.195959][T11980] usb 3-1: Product: syz [ 1467.195990][T11980] usb 3-1: Manufacturer: syz [ 1467.196013][T11980] usb 3-1: SerialNumber: syz [ 1467.203706][T11980] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1467.372584][T17324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.405077][T17324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.445168][T17324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.489015][ T940] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1467.599793][T17324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.712009][T17324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.728213][ T940] usb 2-1: New USB device found, idVendor=0c45, idProduct=62b0, bcdDevice=46.75 [ 1467.748524][ T940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.757242][T17324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.842259][T17324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.853705][ T940] usb 2-1: config 0 descriptor?? [ 1467.859339][T17324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.895576][ T940] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62b0 [ 1467.905565][ T8778] r8152-cfgselector 3-1: USB disconnect, device number 22 [ 1468.084698][ T5277] usb 5-1: selecting invalid altsetting 1 [ 1468.107552][T17347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1468.117432][ T5277] speedtch 5-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1468.117538][ T5277] speedtch 5-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1468.117640][ T5277] speedtch 5-1:0.1: probe with driver speedtch failed with error -22 [ 1468.126881][ T5277] usb 5-1: USB disconnect, device number 32 [ 1468.178696][T17347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1468.234696][T17347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1468.408177][ T940] gspca_sn9c20x: Write register 1001 failed -71 [ 1468.432531][ T940] gspca_sn9c20x: Device initialization failed [ 1468.448616][ T940] gspca_sn9c20x 2-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 1468.484691][ T940] usb 2-1: USB disconnect, device number 25 [ 1468.643893][T17351] sp0: Synchronizing with TNC [ 1468.767116][T17353] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2837'. [ 1470.017663][T17348] [U] è` [ 1470.328851][ T940] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1470.701047][ T940] usb 4-1: no configurations [ 1470.701127][ T940] usb 4-1: can't read configurations, error -22 [ 1470.849329][ T940] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1471.042714][ T940] usb 4-1: no configurations [ 1471.042766][ T940] usb 4-1: can't read configurations, error -22 [ 1471.044325][ T940] usb usb4-port1: attempt power cycle [ 1471.529773][ T940] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1471.560508][ T940] usb 4-1: no configurations [ 1471.560534][ T940] usb 4-1: can't read configurations, error -22 [ 1471.631359][T17382] netlink: 'syz.0.2837': attribute type 7 has an invalid length. [ 1471.641125][T17382] netlink: 'syz.0.2837': attribute type 8 has an invalid length. [ 1471.648927][T17382] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2837'. [ 1471.909578][ T940] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1471.970707][ T940] usb 4-1: no configurations [ 1471.978378][ T940] usb 4-1: can't read configurations, error -22 [ 1471.987518][ T940] usb usb4-port1: unable to enumerate USB device [ 1472.019039][ T5276] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1472.239253][ T5276] usb 3-1: Using ep0 maxpacket: 16 [ 1472.246953][ T5276] usb 3-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1472.259237][ T5276] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 1472.274316][ T5276] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1472.288042][ T5276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.298955][ T5276] usb 3-1: Product: syz [ 1472.303150][ T5276] usb 3-1: Manufacturer: syz [ 1472.316544][ T5276] usb 3-1: SerialNumber: syz [ 1472.359316][ T5276] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1472.439033][ T940] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1472.639140][ T940] usb 5-1: Using ep0 maxpacket: 16 [ 1472.679461][ T940] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1472.697301][ T940] usb 5-1: config 0 has no interface number 0 [ 1472.706008][ T940] usb 5-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1472.734240][ T940] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1472.759097][ T940] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1472.777008][ T940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.787277][ T940] usb 5-1: Product: syz [ 1472.792239][ T940] usb 5-1: Manufacturer: syz [ 1472.798701][ T940] usb 5-1: SerialNumber: syz [ 1472.824110][ T940] usb 5-1: config 0 descriptor?? [ 1473.706242][ T5277] r8152-cfgselector 3-1: USB disconnect, device number 23 [ 1473.892277][T17390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.927533][T17390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.944975][T17390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.999056][T17390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.053496][T17390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.105632][T17390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.123879][T17390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.137230][T17390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.375114][ T5276] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1474.652645][ T5276] usb 2-1: config 0 has no interfaces? [ 1474.674689][ T5276] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1474.687141][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.728054][ T5276] usb 2-1: config 0 descriptor?? [ 1474.883857][ T940] usb 5-1: selecting invalid altsetting 1 [ 1474.898820][ T940] speedtch 5-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1474.907347][ T940] speedtch 5-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1474.921132][ T940] speedtch 5-1:0.1: probe with driver speedtch failed with error -22 [ 1474.951773][ T940] usb 5-1: USB disconnect, device number 33 [ 1475.022193][ T5276] usb 2-1: USB disconnect, device number 26 [ 1476.739760][ T8778] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1476.938984][ T8778] usb 4-1: Using ep0 maxpacket: 16 [ 1476.951181][ T8778] usb 4-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 1476.970057][ T8778] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 1477.000250][ T8778] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1477.016059][ T8778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.025866][ T8778] usb 4-1: Product: syz [ 1477.036097][ T8778] usb 4-1: Manufacturer: syz [ 1477.043031][ T8778] usb 4-1: SerialNumber: syz [ 1477.061751][ T940] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1477.077504][ T8778] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1477.271554][ T940] usb 3-1: Using ep0 maxpacket: 16 [ 1477.289420][ T940] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1477.317250][ T940] usb 3-1: config 0 has no interface number 0 [ 1477.341218][ T5277] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1477.355541][ T940] usb 3-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1477.391912][ T940] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1477.407702][ T940] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1477.424391][ T940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.440407][ T940] usb 3-1: Product: syz [ 1477.444897][ T940] usb 3-1: Manufacturer: syz [ 1477.455441][ T940] usb 3-1: SerialNumber: syz [ 1477.466150][ T940] usb 3-1: config 0 descriptor?? [ 1477.549685][ T6463] r8152-cfgselector 4-1: USB disconnect, device number 39 [ 1477.570205][ T5277] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.586481][ T5277] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1477.596469][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.615254][ T5277] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1477.674887][ T5277] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1477.723951][T17462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.752788][T17462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.768904][T17462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.788655][T17462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.805316][T17462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.826772][T17462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.848210][T17462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.860254][ T5277] usb 1-1: USB disconnect, device number 29 [ 1477.882159][T17462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1478.107508][ T940] usb 3-1: selecting invalid altsetting 1 [ 1478.124892][ T940] speedtch 3-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1478.134487][ T940] speedtch 3-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1478.141712][ T940] speedtch 3-1:0.1: probe with driver speedtch failed with error -22 [ 1478.154469][ T940] usb 3-1: USB disconnect, device number 24 [ 1479.696415][T17507] ------------[ cut here ]------------ [ 1479.702814][T17507] WARNING: CPU: 1 PID: 17507 at kernel/bpf/helpers.c:132 bpf_map_lookup_percpu_elem+0xa8/0xc0 [ 1479.714201][T17507] Modules linked in: [ 1479.718142][T17507] CPU: 1 UID: 0 PID: 17507 Comm: syz.4.2897 Not tainted 6.11.0-rc5-syzkaller-00079-g928f79a188aa #0 [ 1479.730257][T17507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1479.741236][T17507] RIP: 0010:bpf_map_lookup_percpu_elem+0xa8/0xc0 [ 1479.747689][T17507] Code: 41 5c 41 5d ff e0 cc 66 90 e8 84 1d e5 ff e8 0f 82 ca ff 31 ff 41 89 c4 89 c6 e8 b3 1f e5 ff 45 85 e4 75 8c e8 69 1d e5 ff 90 <0f> 0b 90 eb 81 48 89 df e8 ab 4a 42 00 eb 93 e8 a4 4a 42 00 eb ae [ 1479.767542][T17507] RSP: 0018:ffffc900033b7a80 EFLAGS: 00010283 [ 1479.773909][T17507] RAX: 0000000000001d29 RBX: ffff8880575e5000 RCX: ffffc9000e3fe000 [ 1479.781983][T17507] RDX: 0000000000040000 RSI: ffffffff81a558a7 RDI: 0000000000000005 [ 1479.790112][T17507] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000 [ 1479.798144][T17507] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1479.806291][T17507] R13: ffffc900033b7b38 R14: 0000000000000000 R15: 0000000000000000 [ 1479.814349][T17507] FS: 00007f61af5f36c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1479.823767][T17507] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1479.831735][T17507] CR2: 000000110c2f4639 CR3: 000000007de8c000 CR4: 00000000003506f0 [ 1479.840478][T17507] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1479.848512][T17507] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1479.856583][T17507] Call Trace: [ 1479.859944][T17507] [ 1479.862922][T17507] ? show_regs+0x8c/0xa0 [ 1479.867293][T17507] ? __warn+0xe5/0x3c0 [ 1479.871612][T17507] ? bpf_map_lookup_percpu_elem+0xa8/0xc0 [ 1479.877365][T17507] ? report_bug+0x3c0/0x580 [ 1479.882109][T17507] ? handle_bug+0x3d/0x70 [ 1479.886563][T17507] ? exc_invalid_op+0x17/0x50 [ 1479.891321][T17507] ? asm_exc_invalid_op+0x1a/0x20 [ 1479.896480][T17507] ? bpf_map_lookup_percpu_elem+0xa7/0xc0 [ 1479.902333][T17507] ? bpf_map_lookup_percpu_elem+0xa8/0xc0 [ 1479.908090][T17507] ? __pfx_bpf_map_lookup_percpu_elem+0x10/0x10 [ 1479.914464][T17507] ___bpf_prog_run+0x3e51/0xabd0 [ 1479.921980][T17507] __bpf_prog_run32+0xc1/0x100 [ 1479.926886][T17507] ? __pfx___bpf_prog_run32+0x10/0x10 [ 1479.933949][T17507] ? __pfx_lock_acquire+0x10/0x10 [ 1479.939804][T17507] ? __pfx_lock_release+0x10/0x10 [ 1479.944876][T17507] ? __pfx___cant_migrate+0x10/0x10 [ 1479.950278][T17507] bpf_prog_test_run_syscall+0x5b7/0x770 [ 1479.956061][T17507] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1479.962344][T17507] ? fput+0x32/0x390 [ 1479.966568][T17507] ? __bpf_prog_get+0xa0/0x2f0 [ 1479.971387][T17507] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1479.977574][T17507] __sys_bpf+0x10d2/0x4a00 [ 1479.982124][T17507] ? __pfx_futex_wake+0x10/0x10 [ 1479.987036][T17507] ? __pfx___sys_bpf+0x10/0x10 [ 1479.991905][T17507] ? do_user_addr_fault+0xdc7/0x13f0 [ 1479.997274][T17507] ? reacquire_held_locks+0x20b/0x4c0 [ 1480.002699][T17507] ? do_futex+0x123/0x350 [ 1480.007022][T17507] ? __pfx_do_futex+0x10/0x10 [ 1480.011896][T17507] ? xfd_validate_state+0x5d/0x180 [ 1480.017046][T17507] __x64_sys_bpf+0x78/0xc0 [ 1480.021571][T17507] ? lockdep_hardirqs_on+0x7c/0x110 [ 1480.026806][T17507] do_syscall_64+0xcd/0x250 [ 1480.031384][T17507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.038002][T17507] RIP: 0033:0x7f61ae779ef9 [ 1480.043301][T17507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1480.062931][ C1] vkms_vblank_simulate: vblank timer overrun [ 1480.069110][T17507] RSP: 002b:00007f61af5f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1480.077548][T17507] RAX: ffffffffffffffda RBX: 00007f61ae915f80 RCX: 00007f61ae779ef9 [ 1480.085867][T17507] RDX: 0000000000000010 RSI: 0000000020000740 RDI: 000000000000000a [ 1480.093996][T17507] RBP: 00007f61ae7e793e R08: 0000000000000000 R09: 0000000000000000 [ 1480.102067][T17507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1480.110118][T17507] R13: 0000000000000000 R14: 00007f61ae915f80 R15: 00007ffd0d2ade18 [ 1480.118141][T17507] [ 1480.121248][T17507] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1480.128719][T17507] CPU: 1 UID: 0 PID: 17507 Comm: syz.4.2897 Not tainted 6.11.0-rc5-syzkaller-00079-g928f79a188aa #0 [ 1480.139499][T17507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1480.149570][T17507] Call Trace: [ 1480.152850][T17507] [ 1480.155787][T17507] dump_stack_lvl+0x3d/0x1f0 [ 1480.160413][T17507] panic+0x6dc/0x7c0 [ 1480.164406][T17507] ? __pfx_panic+0x10/0x10 [ 1480.168832][T17507] ? show_trace_log_lvl+0x363/0x500 [ 1480.174052][T17507] ? bpf_map_lookup_percpu_elem+0xa8/0xc0 [ 1480.179789][T17507] check_panic_on_warn+0xab/0xb0 [ 1480.184738][T17507] __warn+0xf1/0x3c0 [ 1480.188648][T17507] ? bpf_map_lookup_percpu_elem+0xa8/0xc0 [ 1480.194376][T17507] report_bug+0x3c0/0x580 [ 1480.198713][T17507] handle_bug+0x3d/0x70 [ 1480.202887][T17507] exc_invalid_op+0x17/0x50 [ 1480.207393][T17507] asm_exc_invalid_op+0x1a/0x20 [ 1480.212249][T17507] RIP: 0010:bpf_map_lookup_percpu_elem+0xa8/0xc0 [ 1480.218590][T17507] Code: 41 5c 41 5d ff e0 cc 66 90 e8 84 1d e5 ff e8 0f 82 ca ff 31 ff 41 89 c4 89 c6 e8 b3 1f e5 ff 45 85 e4 75 8c e8 69 1d e5 ff 90 <0f> 0b 90 eb 81 48 89 df e8 ab 4a 42 00 eb 93 e8 a4 4a 42 00 eb ae [ 1480.238296][T17507] RSP: 0018:ffffc900033b7a80 EFLAGS: 00010283 [ 1480.244385][T17507] RAX: 0000000000001d29 RBX: ffff8880575e5000 RCX: ffffc9000e3fe000 [ 1480.252359][T17507] RDX: 0000000000040000 RSI: ffffffff81a558a7 RDI: 0000000000000005 [ 1480.260336][T17507] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000 [ 1480.268309][T17507] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1480.276282][T17507] R13: ffffc900033b7b38 R14: 0000000000000000 R15: 0000000000000000 [ 1480.284265][T17507] ? bpf_map_lookup_percpu_elem+0xa7/0xc0 [ 1480.290000][T17507] ? __pfx_bpf_map_lookup_percpu_elem+0x10/0x10 [ 1480.296248][T17507] ___bpf_prog_run+0x3e51/0xabd0 [ 1480.301280][T17507] __bpf_prog_run32+0xc1/0x100 [ 1480.306060][T17507] ? __pfx___bpf_prog_run32+0x10/0x10 [ 1480.311535][T17507] ? __pfx_lock_acquire+0x10/0x10 [ 1480.316570][T17507] ? __pfx_lock_release+0x10/0x10 [ 1480.321603][T17507] ? __pfx___cant_migrate+0x10/0x10 [ 1480.326815][T17507] bpf_prog_test_run_syscall+0x5b7/0x770 [ 1480.332460][T17507] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1480.338630][T17507] ? fput+0x32/0x390 [ 1480.342537][T17507] ? __bpf_prog_get+0xa0/0x2f0 [ 1480.347307][T17507] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1480.353483][T17507] __sys_bpf+0x10d2/0x4a00 [ 1480.357917][T17507] ? __pfx_futex_wake+0x10/0x10 [ 1480.362777][T17507] ? __pfx___sys_bpf+0x10/0x10 [ 1480.367551][T17507] ? do_user_addr_fault+0xdc7/0x13f0 [ 1480.372848][T17507] ? reacquire_held_locks+0x20b/0x4c0 [ 1480.378236][T17507] ? do_futex+0x123/0x350 [ 1480.382573][T17507] ? __pfx_do_futex+0x10/0x10 [ 1480.387266][T17507] ? xfd_validate_state+0x5d/0x180 [ 1480.392673][T17507] __x64_sys_bpf+0x78/0xc0 [ 1480.397116][T17507] ? lockdep_hardirqs_on+0x7c/0x110 [ 1480.402336][T17507] do_syscall_64+0xcd/0x250 [ 1480.406863][T17507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.412783][T17507] RIP: 0033:0x7f61ae779ef9 [ 1480.417204][T17507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1480.436831][T17507] RSP: 002b:00007f61af5f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1480.445257][T17507] RAX: ffffffffffffffda RBX: 00007f61ae915f80 RCX: 00007f61ae779ef9 [ 1480.453237][T17507] RDX: 0000000000000010 RSI: 0000000020000740 RDI: 000000000000000a [ 1480.461220][T17507] RBP: 00007f61ae7e793e R08: 0000000000000000 R09: 0000000000000000 [ 1480.469192][T17507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1480.477164][T17507] R13: 0000000000000000 R14: 00007f61ae915f80 R15: 00007ffd0d2ade18 [ 1480.485149][T17507] [ 1480.488378][T17507] Kernel Offset: disabled [ 1480.492752][T17507] Rebooting in 86400 seconds..