last executing test programs: 2m49.225343404s ago: executing program 2 (id=1986): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bind$xdp(r0, 0x0, 0x0) 2m48.937704064s ago: executing program 2 (id=1990): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x3, 0x7, 0x3c5a, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0x20d, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0x4000000b, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x4a, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffefe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x9, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0xffffff49, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x938, 0x806, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x8000002, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x1, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001"], 0x118}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m48.902824286s ago: executing program 2 (id=1991): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000180)='./file1\x00', 0x2) inotify_add_watch(r1, &(0x7f0000000200)='./file1\x00', 0x10000000) 2m48.855386281s ago: executing program 2 (id=1992): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = socket(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 2m48.794733694s ago: executing program 2 (id=1993): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x18, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m44.995878567s ago: executing program 2 (id=2032): openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x7, 0x10003}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0x4}, 0x50) 2m44.888290972s ago: executing program 32 (id=2032): openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x7, 0x10003}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0x4}, 0x50) 2m3.912996369s ago: executing program 3 (id=2570): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001180)="922f51c2652f6ebeb647ba19a7f202a8e9581eee20d85e47931757ced80465193b", 0x21}, {&(0x7f0000000140)="51cbf647632e9a3f8db9e83587b907", 0xf}], 0x2, &(0x7f0000000900)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x40008}], 0x1, 0xc050) 2m3.825791672s ago: executing program 3 (id=2572): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x3, @loopback, 0x2}}, 0xfffffffd, 0x4, 0x2, 0x7, 0x45, 0x2, 0x5}, &(0x7f00000000c0)=0x9c) 2m3.751229371s ago: executing program 3 (id=2574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000020000003900000008000300", @ANYRES32=r3, @ANYBLOB="1c005a8018000480140001"], 0x38}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) 2m3.582278485s ago: executing program 3 (id=2578): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) statfs(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000d80)=""/4096) 2m3.496513893s ago: executing program 3 (id=2579): syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000001c0)={0x0, 0x707c, 0x10, 0x3, 0x28b}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 2m3.149039838s ago: executing program 3 (id=2585): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x40001012, r2, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 2m2.855833102s ago: executing program 33 (id=2585): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x40001012, r2, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 44.936117427s ago: executing program 4 (id=3511): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003680)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb7, 0x80, 0x3, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r0, 0x0}) io_uring_enter(r1, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 44.480868806s ago: executing program 4 (id=3519): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa, 0x0, 0xb00}}, 0x14}}, 0x0) 44.411386032s ago: executing program 4 (id=3521): r0 = socket(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) 44.118717873s ago: executing program 4 (id=3527): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x10001, 0x9, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1) 44.024641556s ago: executing program 4 (id=3529): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) 43.928852684s ago: executing program 4 (id=3531): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="4f02040102cd42"], 0x7) 27.880548261s ago: executing program 34 (id=3531): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="4f02040102cd42"], 0x7) 19.477652688s ago: executing program 5 (id=3871): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = dup(r0) fanotify_mark(r1, 0x401, 0x1018, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="5800000014", 0x5}], 0x1) 19.415734486s ago: executing program 0 (id=3872): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000100)={0xffff}) 19.393038178s ago: executing program 5 (id=3874): getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20028802) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) 19.316272688s ago: executing program 5 (id=3875): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 19.26051648s ago: executing program 5 (id=3876): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000080)="2682", 0x4000}], 0x1) 19.039929917s ago: executing program 1 (id=3878): getpid() r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r1, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x39, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x10, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @multicast2}}}}) 19.023209257s ago: executing program 1 (id=3879): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) r2 = openat$cgroup(r1, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x4) 18.966273736s ago: executing program 1 (id=3880): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 18.89860569s ago: executing program 1 (id=3881): r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20002017}) close_range(r0, 0xffffffffffffffff, 0x0) 18.897564162s ago: executing program 5 (id=3882): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 18.800875415s ago: executing program 5 (id=3885): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 18.735735137s ago: executing program 1 (id=3886): prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) 18.679806853s ago: executing program 1 (id=3887): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000340)="2c4f3b56e7a3120fbf9a8d0de64a66db22971339ed4c54c2d4d3319b06feee8ceca7238f58b7503a5aef18b26be787ac1c3fb599410f94dacea826507e16", 0x3e}], 0x1) 18.456191574s ago: executing program 0 (id=3891): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18.251976245s ago: executing program 0 (id=3892): getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1, 0x0, 0x11000000}, 0x38) 18.068837972s ago: executing program 0 (id=3893): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b", 0x20}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/11, 0xb}, {&(0x7f0000000540)=""/51, 0x33}], 0x2}, 0x0) 18.042376038s ago: executing program 0 (id=3894): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 17.968194644s ago: executing program 0 (id=3895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x883e}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x3, 0x1}}, {@ipv6={0x86dd, @generic={0x4, 0x6, '>bO', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00'}}}}}, 0x42) 16.811223646s ago: executing program 6 (id=3906): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000140)={0x1ff, 0x5, 0x1000, 0x1000, 0x1, 0x1fd, 0xa}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000030101"], 0x14}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r1) 16.693013996s ago: executing program 6 (id=3907): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 16.643511671s ago: executing program 6 (id=3908): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006ef000/0x3000)=nil, 0x800000}) 16.613630594s ago: executing program 6 (id=3909): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000006207000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000a200)='afs_cell\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdee, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000a200)='afs_cell\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) 16.550439795s ago: executing program 6 (id=3910): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 16.549650109s ago: executing program 6 (id=3911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x6, 0xffffffe6, 0x8001, 0x9, 0x20, 0x4, 0x4}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) 2.501964963s ago: executing program 35 (id=3887): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000340)="2c4f3b56e7a3120fbf9a8d0de64a66db22971339ed4c54c2d4d3319b06feee8ceca7238f58b7503a5aef18b26be787ac1c3fb599410f94dacea826507e16", 0x3e}], 0x1) 2.459228153s ago: executing program 36 (id=3885): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 1.503834347s ago: executing program 37 (id=3895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x883e}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x3, 0x1}}, {@ipv6={0x86dd, @generic={0x4, 0x6, '>bO', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00'}}}}}, 0x42) 0s ago: executing program 38 (id=3911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x6, 0xffffffe6, 0x8001, 0x9, 0x20, 0x4, 0x4}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) kernel console output (not intermixed with test programs): Master is either lo or non-ether device [ 272.806649][ T5899] hid-steam 0003:28DE:1102.002B: unknown main item tag 0x0 [ 272.817614][T12015] veth0_vlan: entered promiscuous mode [ 272.828276][ T5899] hid-steam 0003:28DE:1102.002B: unknown main item tag 0x0 [ 272.855615][ T5899] hid-steam 0003:28DE:1102.002B: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 272.856368][T12015] veth1_vlan: entered promiscuous mode [ 272.910688][T12015] veth0_macvtap: entered promiscuous mode [ 272.930571][T12015] veth1_macvtap: entered promiscuous mode [ 272.949901][ T5899] hid-steam 0003:28DE:1102.002B: Steam Controller 'XXXXXXXXXX' connected [ 272.962829][T12015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.988481][ T5899] input: Steam Controller as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28DE:1102.002B/input/input48 [ 272.990517][T12015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.017955][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.072033][ T5899] hid-steam 0003:28DE:1102.002C: unknown main item tag 0x0 [ 273.088390][ T910] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 273.098498][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.107529][ T5899] hid-steam 0003:28DE:1102.002C: unknown main item tag 0x0 [ 273.133263][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.173190][ T5899] hid-steam 0003:28DE:1102.002C: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 273.187244][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.231562][ T5899] usb 6-1: USB disconnect, device number 11 [ 273.261990][ T5899] hid-steam 0003:28DE:1102.002B: Steam Controller 'XXXXXXXXXX' disconnected [ 273.288907][ T910] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 273.297657][T12241] fido_id[12241]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 273.312120][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.332130][ T910] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 273.341152][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.359381][ T910] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 273.387419][ T910] usb 1-1: config 1 has no interface number 0 [ 273.393661][ T910] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 273.419022][ T910] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 273.433887][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.445341][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.453366][ T910] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 273.464651][ T910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.480553][ T910] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 273.491689][ T30] audit: type=1400 audit(1763231016.831:597): avc: denied { mount } for pid=12015 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 273.804699][ T56] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 273.976740][ T56] usb 2-1: Using ep0 maxpacket: 16 [ 273.992320][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.999211][ T5899] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 274.014947][ T56] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 274.058465][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.080360][ T56] usb 2-1: config 0 descriptor?? [ 274.098859][ T910] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 274.146883][ T5812] Bluetooth: hci3: command tx timeout [ 274.189487][ T5899] usb 6-1: Using ep0 maxpacket: 8 [ 274.196348][ T5899] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 274.205272][ T5899] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 274.215694][ T5899] usb 6-1: config 179 has no interface number 0 [ 274.222140][ T5899] usb 6-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 274.235795][ T5899] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 274.244983][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.340251][ T5884] usb 1-1: USB disconnect, device number 40 [ 274.348494][ T5884] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 274.494837][ T910] usb 6-1: USB disconnect, device number 12 [ 274.568950][ T56] mcp2221 0003:04D8:00DD.002D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 274.794909][ T910] usb 2-1: USB disconnect, device number 33 [ 275.028315][T12276] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.921525][T12301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2681'. [ 276.937869][ T910] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 277.039050][T12335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.134684][ T30] audit: type=1400 audit(1763231020.234:598): avc: denied { write } for pid=12337 comm="syz.5.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 277.176745][ T910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.218288][ T910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 277.261750][ T910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 277.309735][ T910] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 277.338724][ T910] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 277.350073][ T910] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 277.366230][ T910] usb 2-1: Manufacturer: syz [ 277.393859][ T910] usb 2-1: config 0 descriptor?? [ 277.472752][ T1687] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 277.645215][ T1687] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 277.684390][ T1687] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 277.726397][ T1687] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.760922][ T1687] usb 6-1: config 0 descriptor?? [ 277.796717][T12341] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 277.815011][ T910] rc_core: IR keymap rc-hauppauge not found [ 277.836354][ T910] Registered IR keymap rc-empty [ 277.853021][ T910] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 277.894053][ T910] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 277.933353][ T910] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 277.974648][ T910] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input49 [ 278.076664][ T910] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 278.137549][ T910] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 278.169357][ T910] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 278.212053][ T910] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 278.267225][ T910] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 278.284585][ T1687] elan 0003:04F3:0755.002E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 278.296355][ T910] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 278.349730][ T910] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 278.392498][ T910] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 278.442808][ T910] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 278.480012][ T910] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 278.511643][ T30] audit: type=1400 audit(1763231021.525:599): avc: denied { name_connect } for pid=12362 comm="syz.0.2705" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 278.551188][ T910] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 278.570646][ T24] usb 6-1: USB disconnect, device number 13 [ 278.580954][ T910] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 278.637550][ T910] usb 2-1: USB disconnect, device number 34 [ 278.921934][T12371] loop6: detected capacity change from 0 to 91 [ 279.426283][ T30] audit: type=1400 audit(1763231022.385:600): avc: denied { create } for pid=12387 comm="syz.5.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 279.793063][ T30] audit: type=1400 audit(1763231022.722:601): avc: denied { mounton } for pid=12399 comm="syz.5.2721" path="/proc/250/cgroup" dev="proc" ino=40338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 279.993029][T12410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2725'. [ 280.037591][T12410] bond1: Invalid ad_actor_system MAC address. [ 280.044605][T12410] bond1: option ad_actor_system: invalid value (1) [ 280.056471][T12410] bond1 (unregistering): Released all slaves [ 280.156856][ T5813] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 280.199563][ T910] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 280.328266][ T5813] usb 2-1: Using ep0 maxpacket: 16 [ 280.362072][ T910] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 280.371490][ T910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.372110][ T5813] usb 2-1: config 0 has no interfaces? [ 280.383426][ T910] usb 6-1: config 0 descriptor?? [ 280.387688][ T5813] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 280.399397][ T910] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 280.407933][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.425264][ T5813] usb 2-1: Product: syz [ 280.434152][ T5813] usb 2-1: Manufacturer: syz [ 280.444968][ T5813] usb 2-1: SerialNumber: syz [ 280.477376][ T5813] usb 2-1: config 0 descriptor?? [ 280.750973][ T5813] usb 2-1: USB disconnect, device number 35 [ 281.242371][ T30] audit: type=1400 audit(1763231024.087:602): avc: denied { write } for pid=12440 comm="syz.0.2739" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 281.274871][ T910] gspca_stv06xx: I2C: Read error writing address: -71 [ 281.335264][ T910] usb 6-1: USB disconnect, device number 14 [ 281.729000][ T1687] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 281.846504][ T910] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 281.901796][ T1687] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 281.921446][ T1687] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 281.955180][ T1687] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 281.978054][ T1687] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 281.989508][ T1687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.000043][ T1687] usb 2-1: Product: syz [ 282.004254][ T1687] usb 2-1: Manufacturer: syz [ 282.010820][ T1687] usb 2-1: SerialNumber: syz [ 282.020467][ T1687] usb 2-1: config 0 descriptor?? [ 282.032083][T12444] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 282.043328][ T910] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 282.047392][T12444] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 282.064280][ T1687] usb 2-1: ucan: probing device on interface #0 [ 282.072082][ T910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.080360][ T910] usb 7-1: Product: syz [ 282.087051][ T910] usb 7-1: Manufacturer: syz [ 282.091858][ T910] usb 7-1: SerialNumber: syz [ 282.103289][ T910] usb 7-1: config 0 descriptor?? [ 282.141617][ T5884] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 282.295644][ T5899] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 282.317128][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 282.330368][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.353060][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.389820][ T5884] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 282.409007][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.429231][ T5884] usb 5-1: config 0 descriptor?? [ 282.479713][ T5899] usb 6-1: Using ep0 maxpacket: 8 [ 282.493030][ T5899] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 282.512577][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.531074][ T5899] usb 6-1: Product: syz [ 282.538061][ T5899] usb 6-1: Manufacturer: syz [ 282.552287][ T5899] usb 6-1: SerialNumber: syz [ 282.560785][ T910] usb 7-1: Firmware: major: 0, minor: 11, hardware type: UNKNOWN (88) [ 282.570592][ T5899] usb 6-1: config 0 descriptor?? [ 282.590283][ T5899] gspca_main: sq930x-2.14.0 probing 2770:930c [ 282.760413][ T1687] ucan 2-1:0.0: probe with driver ucan failed with error -71 [ 282.775879][ T910] usb 7-1: failed to fetch extended address, random address set [ 282.781271][ T1687] usb 2-1: USB disconnect, device number 36 [ 282.797764][ T910] usb 7-1: atusb_probe: initialization failed, error = -524 [ 282.812158][ T910] atusb 7-1:0.0: probe with driver atusb failed with error -524 [ 282.841364][ T910] usb 7-1: USB disconnect, device number 2 [ 282.878008][ T5884] ntrig 0003:1B96:0008.002F: unknown main item tag 0x0 [ 282.892710][ T5884] ntrig 0003:1B96:0008.002F: unknown main item tag 0x0 [ 282.901756][ T5884] ntrig 0003:1B96:0008.002F: item fetching failed at offset 4/7 [ 282.910662][ T5884] ntrig 0003:1B96:0008.002F: parse failed [ 282.917666][ T5884] ntrig 0003:1B96:0008.002F: probe with driver ntrig failed with error -22 [ 283.115434][ T1687] usb 5-1: USB disconnect, device number 36 [ 283.467381][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2756'. [ 283.835585][ T5813] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 283.931755][ T5899] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 283.937665][ T1687] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 284.029491][ T5813] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 284.039052][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.061273][ T5813] usb 2-1: config 0 descriptor?? [ 284.083288][ T5813] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 284.128431][ T1687] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.141116][ T1687] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 284.154951][ T1687] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.171192][ T1687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.179640][ T5899] gspca_sq930x: Sensor ov9630 not yet treated [ 284.185770][ T5899] sq930x 6-1:0.0: probe with driver sq930x failed with error -22 [ 284.206231][ T1687] usb 1-1: Product: syz [ 284.215790][ T1687] usb 1-1: Manufacturer: syz [ 284.223097][ T5899] usb 6-1: USB disconnect, device number 15 [ 284.229062][ T1687] usb 1-1: SerialNumber: syz [ 284.247221][ T1687] cdc_mbim 1-1:1.0: skipping garbage [ 284.293576][ T5813] gspca_sn9c2028: read1 error -32 [ 284.441544][ T36] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 284.465688][T12504] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 284.777414][ T5813] usb 2-1: USB disconnect, device number 37 [ 285.125753][T12504] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 285.133741][ T1687] cdc_mbim 1-1:1.0: setting tx_max = 48 [ 285.142537][ T1687] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 285.155686][ T1687] wwan wwan0: port wwan0mbim0 attached [ 285.171059][ T1687] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 3e:5f:2c:4e:49:b6 [ 285.443492][ T5813] usb 1-1: USB disconnect, device number 41 [ 285.468090][ T5813] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 285.571360][ T5813] wwan wwan0: port wwan0mbim0 disconnected [ 285.709208][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2783'. [ 285.771264][ T1687] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 285.989749][ T1687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.008398][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2787'. [ 286.027876][ T1687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.047544][ T1687] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 286.096186][ T30] audit: type=1400 audit(1763231028.613:603): avc: denied { module_load } for pid=12598 comm="syz.6.2788" path="/34/bus" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 286.122999][T12599] Invalid ELF header magic: != ELF [ 286.128361][ T1687] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 286.148292][T12597] xfrm1: entered promiscuous mode [ 286.162694][ T1687] usb 2-1: Manufacturer: syz [ 286.168324][T12597] xfrm1: entered allmulticast mode [ 286.180265][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2787'. [ 286.209445][ T1687] usb 2-1: config 0 descriptor?? [ 286.397817][T12609] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 286.406170][ T30] audit: type=1400 audit(1763231028.912:604): avc: denied { create } for pid=12607 comm="syz.6.2791" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 286.589043][ T30] audit: type=1400 audit(1763231028.912:605): avc: denied { associate } for pid=12607 comm="syz.6.2791" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 286.880937][ T30] audit: type=1400 audit(1763231029.006:606): avc: denied { mounton } for pid=12607 comm="syz.6.2791" path="/35/bus" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 286.999889][ T30] audit: type=1400 audit(1763231029.006:607): avc: denied { add_name } for pid=12607 comm="syz.6.2791" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 287.091287][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.183411][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.308973][ T1687] uclogic 0003:256C:006D.0030: interface is invalid, ignoring [ 287.382529][ T30] audit: type=1400 audit(1763231029.015:608): avc: denied { setattr } for pid=12607 comm="syz.6.2791" name="work" dev="tmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 287.382940][ T30] audit: type=1400 audit(1763231029.015:609): avc: denied { write open } for pid=12607 comm="syz.6.2791" path=2F202864656C6574656429 dev="tmpfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 287.474417][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.567453][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.628264][ T1687] usb 2-1: USB disconnect, device number 38 [ 287.649531][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2797'. [ 287.659497][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2797'. [ 287.673310][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2797'. [ 287.685072][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2797'. [ 287.747348][ T30] audit: type=1400 audit(1763231029.015:610): avc: denied { create } for pid=12607 comm="syz.6.2791" name="#1c" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 287.747770][ T30] audit: type=1400 audit(1763231029.015:611): avc: denied { remove_name } for pid=12607 comm="syz.6.2791" name="#1c" dev="tmpfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 287.839193][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.930687][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.025594][ T30] audit: type=1400 audit(1763231029.015:612): avc: denied { rename } for pid=12607 comm="syz.6.2791" name="#1c" dev="tmpfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 290.123740][ T1687] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 290.240675][T12734] input: syz0 as /devices/virtual/input/input50 [ 290.476626][T12742] input: syz0 as /devices/virtual/input/input51 [ 290.508661][ T1687] usb 6-1: Using ep0 maxpacket: 32 [ 290.521387][ T1687] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 290.529724][ T1687] usb 6-1: config 0 has no interface number 0 [ 290.557214][ T1687] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 290.578408][ T1687] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.594165][ T1687] usb 6-1: Product: syz [ 290.598346][ T1687] usb 6-1: Manufacturer: syz [ 290.612030][ T1687] usb 6-1: SerialNumber: syz [ 290.628508][ T1687] usb 6-1: config 0 descriptor?? [ 290.656287][ T1687] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 290.791498][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2841'. [ 290.808044][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2841'. [ 290.877886][ T1687] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 290.918640][ T1687] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 291.129604][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2845'. [ 291.163106][T12760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2845'. [ 291.188629][T12760] netlink: 'syz.4.2845': attribute type 11 has an invalid length. [ 291.198434][T12760] netlink: 'syz.4.2845': attribute type 13 has an invalid length. [ 291.379964][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 291.390937][ T5899] usb 6-1: USB disconnect, device number 16 [ 291.412863][ T5899] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 291.457862][ T5899] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 291.514646][ T5899] quatech2 6-1:0.51: device disconnected [ 291.717049][ T5884] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 291.781212][ T1687] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 291.888249][ T5884] usb 7-1: Using ep0 maxpacket: 16 [ 291.894758][ T5884] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.906872][ T5884] usb 7-1: config 0 interface 0 has no altsetting 0 [ 291.917639][ T5884] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 291.927225][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.941865][ T1687] usb 5-1: Using ep0 maxpacket: 16 [ 291.942177][ T5884] usb 7-1: config 0 descriptor?? [ 291.973420][ T1687] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 292.004044][ T1687] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.029284][ T1687] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.056369][T12785] netlink: 'syz.5.2857': attribute type 39 has an invalid length. [ 292.063281][ T1687] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 292.078552][ T1687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.114338][ T1687] usb 5-1: Product: syz [ 292.119312][ T1687] usb 5-1: Manufacturer: syz [ 292.140915][ T1687] usb 5-1: SerialNumber: syz [ 292.465075][ T5884] acrux 0003:1A34:0802.0031: unknown main item tag 0x0 [ 292.476400][ T5884] acrux 0003:1A34:0802.0031: unknown main item tag 0x0 [ 292.483419][ T5884] acrux 0003:1A34:0802.0031: unknown main item tag 0x0 [ 292.495394][ T5884] acrux 0003:1A34:0802.0031: unknown main item tag 0x0 [ 292.504380][ T5884] acrux 0003:1A34:0802.0031: unknown main item tag 0x0 [ 292.520622][ T5884] acrux 0003:1A34:0802.0031: hidraw0: USB HID v0.05 Device [HID 1a34:0802] on usb-dummy_hcd.6-1/input0 [ 292.537584][ T5884] acrux 0003:1A34:0802.0031: no inputs found [ 292.544487][ T5884] acrux 0003:1A34:0802.0031: Failed to enable force feedback support, error: -19 [ 292.602600][ T1687] usb 5-1: 0:2 : does not exist [ 292.717851][ T5899] usb 7-1: USB disconnect, device number 3 [ 293.361402][T12798] sctp: [Deprecated]: syz.0.2871 (pid 12798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 293.361402][T12798] Use struct sctp_sack_info instead [ 293.489093][T12804] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 293.542019][ T1687] usb 5-1: USB disconnect, device number 37 [ 294.598090][ T5899] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 294.794996][ T5899] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 294.818301][ T5899] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 294.857988][ T5899] usb 6-1: Product: syz [ 294.885514][ T5899] usb 6-1: Manufacturer: syz [ 294.890148][ T5899] usb 6-1: SerialNumber: syz [ 294.937682][ T5899] usb 6-1: config 0 descriptor?? [ 294.955557][ T5899] ch341 6-1:0.0: ch341-uart converter detected [ 294.975472][T12841] ªªªªªª: renamed from wg2 (while UP) [ 295.069970][T12848] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2883'. [ 295.103676][T12848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2883'. [ 295.404104][T12854] input: syz1 as /devices/virtual/input/input52 [ 295.425119][ T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 295.609894][ T24] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 295.619744][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 295.635062][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 295.635077][ T30] audit: type=1400 audit(1763231037.534:617): avc: denied { map } for pid=12862 comm="syz.6.2889" path="socket:[42130]" dev="sockfs" ino=42130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 295.684917][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 295.693976][ T24] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 295.703464][ T24] usb 2-1: Product: syz [ 295.708714][ T24] usb 2-1: Manufacturer: syz [ 295.713317][ T24] usb 2-1: SerialNumber: syz [ 295.731733][ T24] usb 2-1: config 0 descriptor?? [ 295.743201][ T24] usb 2-1: selecting invalid altsetting 0 [ 296.005338][ T30] audit: type=1400 audit(1763231037.861:618): avc: denied { setattr } for pid=12866 comm="syz.0.2891" name="file0" dev="tmpfs" ino=2905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 296.068804][ T30] audit: type=1400 audit(1763231037.880:619): avc: denied { rename } for pid=12866 comm="syz.0.2891" name="file0" dev="tmpfs" ino=2905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 296.103035][ T5899] usb 6-1: ch341-uart converter now attached to ttyUSB0 [ 296.156388][ T24] usb 2-1: USB disconnect, device number 39 [ 296.196449][T12869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2892'. [ 296.201383][ T7384] udevd[7384]: failed to send result of seq 18337 to main daemon: Connection refused [ 296.333329][T12875] vivid-003: disconnect [ 296.339000][ T1687] usb 6-1: USB disconnect, device number 17 [ 296.346587][T12875] vivid-003: reconnect [ 296.357811][ T1687] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 296.377696][ T1687] ch341 6-1:0.0: device disconnected [ 296.471564][T12880] netlink: 'syz.0.2898': attribute type 2 has an invalid length. [ 296.479516][T12880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2898'. [ 296.585370][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2900'. [ 296.683641][ T30] audit: type=1326 audit(1763231038.525:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12877 comm="syz.4.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b2b8f6c9 code=0x7fc00000 [ 296.786019][ T5899] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 296.954423][ T30] audit: type=1400 audit(1763231038.777:621): avc: denied { create } for pid=12894 comm="syz.1.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 296.981257][ T5899] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 296.999898][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.014128][ T30] audit: type=1400 audit(1763231038.796:622): avc: denied { ioctl } for pid=12894 comm="syz.1.2904" path="socket:[41821]" dev="sockfs" ino=41821 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 297.042372][ T5899] usb 1-1: config 0 descriptor?? [ 297.064338][ T24] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 297.229417][ T24] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 297.240012][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 297.255126][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 297.272904][ T24] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 297.290048][ T24] usb 7-1: Product: syz [ 297.297768][ T24] usb 7-1: Manufacturer: syz [ 297.305618][ T24] usb 7-1: SerialNumber: syz [ 297.315151][ T24] usb 7-1: config 0 descriptor?? [ 297.327405][ T24] usb 7-1: selecting invalid altsetting 0 [ 297.351426][ T30] audit: type=1326 audit(1763231039.133:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12877 comm="syz.4.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65b2b8f6c9 code=0x7fc00000 [ 297.593505][ T24] usb 7-1: USB disconnect, device number 4 [ 297.719039][T12921] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2916'. [ 297.834440][T12925] xt_hashlimit: size too large, truncated to 1048576 [ 298.148792][ T5899] usb 1-1: Cannot set autoneg [ 298.156095][ T5899] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 298.174021][ T1687] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 298.350872][ T1687] usb 5-1: Using ep0 maxpacket: 16 [ 298.359957][T12935] netlink: 'syz.6.2922': attribute type 1 has an invalid length. [ 298.369043][ T1687] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 298.390123][ T1687] usb 5-1: config 0 has no interface number 0 [ 298.396808][T12937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2923'. [ 298.408004][T12935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 298.419729][ T5899] usb 1-1: USB disconnect, device number 42 [ 298.428223][ T1687] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 298.430879][T12939] bond1: (slave geneve2): making interface the new active one [ 298.450386][T12939] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 298.459340][ T1687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.477916][ T1139] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 298.508640][ T1687] usb 5-1: Product: syz [ 298.513708][ T1139] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 298.533077][ T1687] usb 5-1: Manufacturer: syz [ 298.548624][ T1687] usb 5-1: SerialNumber: syz [ 298.574183][ T1139] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 298.597831][ T1687] usb 5-1: config 0 descriptor?? [ 298.603014][ T1139] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 298.623725][ T1687] hub 5-1:0.132: bad descriptor, ignoring hub [ 298.644562][ T1687] hub 5-1:0.132: probe with driver hub failed with error -5 [ 298.672323][ T1687] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input53 [ 298.927885][ T30] audit: type=1400 audit(1763231040.619:624): avc: denied { setopt } for pid=12949 comm="syz.1.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 299.128903][ T24] usb 5-1: USB disconnect, device number 38 [ 299.146404][ T30] audit: type=1400 audit(1763231040.825:625): avc: denied { map } for pid=12960 comm="syz.0.2932" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 299.265122][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.363771][T12970] input: syz1 as /devices/virtual/input/input54 [ 299.690724][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.822274][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.932208][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.991479][T12988] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 299.999567][ T5955] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 300.197696][ T5955] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 300.209693][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.265183][ T5955] usb 1-1: config 0 descriptor?? [ 300.541670][ T5955] kaweth 1-1:0.0: Firmware present in device. [ 300.722321][ T5955] kaweth 1-1:0.0: Statistics collection: 0 [ 300.763970][ T5955] kaweth 1-1:0.0: Multicast filter limit: 0 [ 300.785850][ T5955] kaweth 1-1:0.0: MTU: 0 [ 300.790129][ T5955] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 301.429432][ T5955] kaweth 1-1:0.0: kaweth interface created at eth9 [ 301.431975][ T36] tipc: Disabling bearer [ 301.458477][T13026] batadv_slave_1: entered promiscuous mode [ 301.464485][ T36] tipc: Left network mode [ 301.604345][ T5955] usb 1-1: USB disconnect, device number 43 [ 301.670811][T13024] batadv_slave_1: left promiscuous mode [ 301.789300][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.799247][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.807111][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.816169][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.843176][ T36] veth1_macvtap: left promiscuous mode [ 301.848760][ T36] veth0_macvtap: left promiscuous mode [ 302.121055][ T36] team0 (unregistering): Port device team_slave_1 removed [ 302.161138][ T36] team0 (unregistering): Port device team_slave_0 removed [ 302.795290][T13060] netlink: 'syz.5.2970': attribute type 1 has an invalid length. [ 303.245565][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2977'. [ 303.642000][T13082] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 303.698077][T13082] CIFS mount error: No usable UNC path provided in device string! [ 303.698077][T13082] [ 303.726116][T13082] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 303.749329][T13060] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 303.980014][T13097] xt_hashlimit: size too large, truncated to 1048576 [ 304.402938][ T36] IPVS: stop unused estimator thread 0... [ 304.476607][ T30] audit: type=1400 audit(1763231045.800:626): avc: denied { name_bind } for pid=13111 comm="syz.5.2989" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 306.303775][ T910] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 306.445404][ T910] usb 2-1: device descriptor read/64, error -71 [ 306.710097][ T910] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 306.795635][ T5955] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 306.849109][ T910] usb 2-1: device descriptor read/64, error -71 [ 306.895174][T13178] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 306.940721][T13180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.969355][ T910] usb usb2-port1: attempt power cycle [ 306.969525][ T5955] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 306.983181][ T5955] usb 1-1: config 1 has no interface number 0 [ 306.992853][ T5955] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 307.003014][ T5955] usb 1-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 307.018158][ T5955] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 307.027402][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.035489][ T5955] usb 1-1: Product: syz [ 307.039777][ T5955] usb 1-1: Manufacturer: syz [ 307.045367][ T5955] usb 1-1: SerialNumber: syz [ 307.053425][T13162] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 307.060715][T13162] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 307.071011][ T5955] usb 1-1: Expected 3 endpoints, found: 2 [ 307.175698][T13186] overlayfs: failed lookup in lower (newroot/112, name='bus', err=-40): overlapping layers [ 307.325804][ T24] usb 1-1: USB disconnect, device number 44 [ 307.351779][ T910] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 307.397742][ T910] usb 2-1: device descriptor read/8, error -71 [ 307.672577][ T910] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 307.709723][ T910] usb 2-1: device descriptor read/8, error -71 [ 307.834878][ T910] usb usb2-port1: unable to enumerate USB device [ 308.116538][ T24] page_pool_release_retry() stalled pool shutdown: id 45, 1 inflight 60 sec [ 308.821089][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3044'. [ 309.125707][T13265] input: syz0 as /devices/virtual/input/input55 [ 309.158703][T13265] input: failed to attach handler leds to device input55, error: -6 [ 309.371485][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 309.619232][ T24] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 309.773350][ T30] audit: type=1400 audit(1763231050.765:627): avc: denied { write } for pid=13300 comm="syz.4.3063" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 309.824181][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.843424][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.864532][ T24] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 309.885502][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.941308][ T24] usb 1-1: config 0 descriptor?? [ 310.357421][T13312] loop4: detected capacity change from 0 to 2560 [ 310.386864][ T24] cm6533_jd 0003:0D8C:0022.0032: unknown main item tag 0x0 [ 310.407463][T13311] buffer_io_error: 25 callbacks suppressed [ 310.407479][T13311] Buffer I/O error on dev loop4, logical block 1, async page read [ 310.421788][ T30] audit: type=1400 audit(1763231051.336:628): avc: denied { map } for pid=13311 comm="syz.5.3067" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 310.434294][ T24] cm6533_jd 0003:0D8C:0022.0032: unknown main item tag 0x0 [ 310.474812][T13311] Buffer I/O error on dev loop4, logical block 1, async page read [ 310.505999][T13311] Buffer I/O error on dev loop4, logical block 1, async page read [ 310.514504][ T30] audit: type=1400 audit(1763231051.336:629): avc: denied { execute } for pid=13311 comm="syz.5.3067" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 310.543000][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0032/input/input56 [ 310.560357][T13311] Buffer I/O error on dev loop4, logical block 1, async page read [ 310.579206][T13311] Buffer I/O error on dev loop4, logical block 1, async page read [ 310.609701][T13311] Buffer I/O error on dev loop4, logical block 2, async page read [ 310.635066][ T24] cm6533_jd 0003:0D8C:0022.0032: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 310.659467][T13311] Buffer I/O error on dev loop4, logical block 2, async page read [ 310.671633][ T24] usb 1-1: USB disconnect, device number 45 [ 310.689617][T13311] Buffer I/O error on dev loop4, logical block 2, async page read [ 310.712955][T13312] Buffer I/O error on dev loop4, logical block 1, async page read [ 310.742105][T13312] Buffer I/O error on dev loop4, logical block 1, async page read [ 310.817106][ T5884] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 311.021330][T13333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 311.061792][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 311.084255][ T5884] usb 5-1: config 0 has no interfaces? [ 311.089784][ T5884] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 311.111232][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.150423][ T5884] usb 5-1: config 0 descriptor?? [ 311.401582][ T5955] usb 5-1: USB disconnect, device number 39 [ 311.774518][T13355] kvm: apic: phys broadcast and lowest prio [ 312.250255][T13381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3094'. [ 312.409153][ T30] audit: type=1400 audit(1763231053.225:630): avc: denied { ioctl } for pid=13383 comm="syz.0.3096" path="socket:[44852]" dev="sockfs" ino=44852 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 312.673574][T13400] IPv4: Oversized IP packet from 127.202.26.0 [ 313.491599][T13435] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3118'. [ 314.137954][ T30] audit: type=1400 audit(1763231054.842:631): avc: denied { bind } for pid=13466 comm="syz.6.3131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 314.887167][ T30] audit: type=1400 audit(1763231055.544:632): avc: denied { getopt } for pid=13500 comm="syz.5.3147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 315.235544][ T30] audit: type=1400 audit(1763231055.871:633): avc: denied { listen } for pid=13518 comm="syz.5.3153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 315.282920][ T30] audit: type=1400 audit(1763231055.871:634): avc: denied { accept } for pid=13518 comm="syz.5.3153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 315.377839][ T30] audit: type=1326 audit(1763231056.002:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13523 comm="syz.6.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858ef8f6c9 code=0x7ffc0000 [ 315.401264][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.494814][ T30] audit: type=1326 audit(1763231056.030:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13523 comm="syz.6.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858ef8f6c9 code=0x7ffc0000 [ 315.596123][ T30] audit: type=1326 audit(1763231056.039:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13523 comm="syz.6.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f858ef8f6c9 code=0x7ffc0000 [ 315.619531][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.634382][T13531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3160'. [ 315.801050][T13539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3163'. [ 315.818490][T13537] SELinux: failed to load policy [ 315.861845][T13539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 315.916683][T13543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 315.924218][T13543] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 315.936672][T13543] bond1: (slave gre1): Error -95 calling set_mac_address [ 316.112719][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3171'. [ 316.195881][ T5899] hid-generic 1000:0003:0001.0033: unknown main item tag 0x0 [ 316.215558][ T5899] hid-generic 1000:0003:0001.0033: hidraw0: HID v4000.00 Device [syz0] on syz1 [ 316.238455][ T1687] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 316.409549][ T1687] usb 7-1: Using ep0 maxpacket: 16 [ 316.418912][ T1687] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 316.463005][ T1687] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.496645][ T1687] usb 7-1: config 0 descriptor?? [ 316.509307][ T1687] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 316.623857][ T5884] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 316.797078][ T5884] usb 2-1: config 0 has no interfaces? [ 316.805563][ T5884] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 316.825521][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.844708][ T5884] usb 2-1: Product: syz [ 316.850776][ T5884] usb 2-1: Manufacturer: syz [ 316.855953][ T5884] usb 2-1: SerialNumber: syz [ 316.863583][ T5884] usb 2-1: config 0 descriptor?? [ 316.880203][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 317.051217][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 317.074718][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.094193][ T24] usb 6-1: config 0 has no interfaces? [ 317.114994][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 317.159878][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.178929][ T24] usb 6-1: Product: syz [ 317.190700][ T24] usb 6-1: Manufacturer: syz [ 317.211701][ T24] usb 6-1: SerialNumber: syz [ 317.221268][ T24] usb 6-1: config 0 descriptor?? [ 317.347633][T13568] veth0_vlan: left promiscuous mode [ 317.367634][T13568] veth0_vlan: entered promiscuous mode [ 317.403638][ T24] usb 2-1: USB disconnect, device number 44 [ 317.603324][ T1687] gspca_sonixj: reg_w1 err -71 [ 317.630929][ T1687] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 317.655565][ T1687] usb 7-1: USB disconnect, device number 5 [ 318.094569][T13615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.132240][T13615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.851612][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 318.851627][ T30] audit: type=1400 audit(1763231059.256:652): avc: denied { mounton } for pid=13635 comm="syz.0.3205" path="/604/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 318.879995][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.827378][ T5955] usb 6-1: USB disconnect, device number 18 [ 319.962533][ T30] audit: type=1400 audit(1763231060.294:653): avc: denied { accept } for pid=13675 comm="syz.5.3223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 320.109897][ T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 320.200989][T13691] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3230'. [ 320.225154][T13691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 320.256615][T13691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 320.263732][T13691] bond2: (slave gre2): The slave device specified does not support setting the MAC address [ 320.274521][T13691] bond2: (slave gre2): Error -95 calling set_mac_address [ 320.315323][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 320.326643][ T24] usb 5-1: config 0 has an invalid interface number: 144 but max is 1 [ 320.335116][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.351381][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 320.360671][ T24] usb 5-1: config 0 has no interface number 0 [ 320.367173][ T24] usb 5-1: config 0 interface 144 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 320.381248][ T24] usb 5-1: config 0 interface 144 has no altsetting 0 [ 320.391461][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=d0.ae [ 320.401017][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.409017][ T24] usb 5-1: Product: syz [ 320.413574][ T24] usb 5-1: Manufacturer: syz [ 320.418179][ T24] usb 5-1: SerialNumber: syz [ 320.422929][ T5884] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 320.435372][ T24] usb 5-1: config 0 descriptor?? [ 320.585312][T13699] syz.6.3233: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 320.601761][ T5884] usb 6-1: Using ep0 maxpacket: 32 [ 320.616059][ T5884] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 320.633969][T13699] CPU: 0 UID: 0 PID: 13699 Comm: syz.6.3233 Not tainted syzkaller #0 PREEMPT(full) [ 320.633998][T13699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 320.634032][T13699] Call Trace: [ 320.634040][T13699] [ 320.634048][T13699] dump_stack_lvl+0x16c/0x1f0 [ 320.634073][T13699] warn_alloc+0x248/0x3a0 [ 320.634105][T13699] ? __pfx_warn_alloc+0x10/0x10 [ 320.634126][T13699] ? lockdep_hardirqs_on+0x7c/0x110 [ 320.634155][T13699] ? kasan_save_stack+0x42/0x60 [ 320.634173][T13699] ? kasan_save_stack+0x33/0x60 [ 320.634192][T13699] ? kasan_save_track+0x14/0x30 [ 320.634210][T13699] ? xskq_create+0x52/0x1d0 [ 320.634232][T13699] ? xsk_setsockopt+0x74e/0x9a0 [ 320.634252][T13699] ? do_sock_setsockopt+0xf3/0x1d0 [ 320.634282][T13699] ? xskq_create+0xfb/0x1d0 [ 320.634309][T13699] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 320.634344][T13699] ? xskq_create+0xfb/0x1d0 [ 320.634376][T13699] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 320.634407][T13699] ? xskq_create+0xfb/0x1d0 [ 320.634431][T13699] vmalloc_user_noprof+0x9e/0xe0 [ 320.634456][T13699] ? xskq_create+0xfb/0x1d0 [ 320.634481][T13699] xskq_create+0xfb/0x1d0 [ 320.634510][T13699] xsk_setsockopt+0x74e/0x9a0 [ 320.634536][T13699] ? __pfx_xsk_setsockopt+0x10/0x10 [ 320.634559][T13699] ? find_held_lock+0x2b/0x80 [ 320.634588][T13699] ? selinux_socket_setsockopt+0x6a/0x80 [ 320.634608][T13699] ? __pfx_xsk_setsockopt+0x10/0x10 [ 320.634631][T13699] do_sock_setsockopt+0xf3/0x1d0 [ 320.634663][T13699] __sys_setsockopt+0x1a0/0x230 [ 320.634692][T13699] __x64_sys_setsockopt+0xbd/0x160 [ 320.634716][T13699] ? do_syscall_64+0x91/0xfa0 [ 320.634735][T13699] ? lockdep_hardirqs_on+0x7c/0x110 [ 320.634754][T13699] do_syscall_64+0xcd/0xfa0 [ 320.634776][T13699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.634796][T13699] RIP: 0033:0x7f858ef8f6c9 [ 320.634814][T13699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.634835][T13699] RSP: 002b:00007f858fef9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 320.634856][T13699] RAX: ffffffffffffffda RBX: 00007f858f1e5fa0 RCX: 00007f858ef8f6c9 [ 320.634872][T13699] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 320.634883][T13699] RBP: 00007f858f011f91 R08: 0000000000000004 R09: 0000000000000000 [ 320.634894][T13699] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.634906][T13699] R13: 00007f858f1e6038 R14: 00007f858f1e5fa0 R15: 00007fff14fd3e98 [ 320.634935][T13699] [ 320.634942][T13699] Mem-Info: [ 320.634987][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.655079][T13699] active_anon:33110 inactive_anon:0 isolated_anon:0 [ 320.655079][T13699] active_file:19460 inactive_file:40752 isolated_file:0 [ 320.655079][T13699] unevictable:768 dirty:367 writeback:16 [ 320.655079][T13699] slab_reclaimable:13152 slab_unreclaimable:115119 [ 320.655079][T13699] mapped:29403 shmem:29028 pagetables:1436 [ 320.655079][T13699] sec_pagetables:0 bounce:0 [ 320.655079][T13699] kernel_misc_reclaimable:0 [ 320.655079][T13699] free:1239557 free_pcp:22342 free_cma:0 [ 320.693053][ T5884] usb 6-1: Product: syz [ 320.755495][T13699] Node 0 active_anon:132440kB inactive_anon:0kB active_file:77840kB inactive_file:162808kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117612kB dirty:1468kB writeback:64kB shmem:114576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12536kB pagetables:5404kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 320.755554][T13699] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 320.755615][T13699] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.755678][T13699] lowmem_reserve[]: 0 2485 2487 2487 [ 320.771792][ T5884] usb 6-1: Manufacturer: syz [ 320.876529][T13699] 2487 [ 320.879782][ T5884] usb 6-1: SerialNumber: syz [ 320.958330][T13699] [ 320.985941][ T24] ims_pcu 5-1:0.144: Missing CDC union descriptor [ 321.059499][T13699] Node 0 [ 321.072353][ T24] ims_pcu 5-1:0.144: probe with driver ims_pcu failed with error -22 [ 321.087215][ T24] usb 5-1: USB disconnect, device number 40 [ 321.096529][T13699] DMA32 free:1052200kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:132400kB inactive_anon:0kB active_file:77840kB inactive_file:162812kB unevictable:1536kB writepending:1492kB zspages:0kB present:3129332kB managed:2544860kB mlocked:0kB bounce:0kB free_pcp:68236kB local_pcp:38588kB free_cma:0kB [ 321.099640][ T5884] usb 6-1: config 0 descriptor?? [ 321.131356][T13699] lowmem_reserve[]: 0 0 1 1 1 [ 321.153948][T13699] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 321.154065][ T5884] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 321.191576][T13699] lowmem_reserve[]: 0 0 0 0 0 [ 321.196376][T13699] Node 1 Normal free:3897768kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14336kB local_pcp:6048kB free_cma:0kB [ 321.230845][T13699] lowmem_reserve[]: 0 0 0 0 0 [ 321.236020][T13699] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 321.248904][T13699] Node 0 DMA32: 1005*4kB (UME) 181*8kB (UME) 100*16kB (UME) 176*32kB (UME) 144*64kB (UME) 66*128kB (UME) 52*256kB (UME) 37*512kB (UM) 23*1024kB (UME) 4*2048kB (UME) 234*4096kB (UM) = 1052828kB [ 321.268638][T13699] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 321.280824][T13699] Node 1 Normal: 196*4kB (UME) 47*8kB (UME) 42*16kB (UME) 144*32kB (UME) 46*64kB (UME) 12*128kB (UME) 3*256kB (ME) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3897768kB [ 321.299086][T13699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.313230][T13699] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 321.323060][T13699] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.332798][T13699] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 321.342213][T13699] 89237 total pagecache pages [ 321.346899][T13699] 0 pages in swap cache [ 321.351152][T13699] Free swap = 124996kB [ 321.355326][T13699] Total swap = 124996kB [ 321.359986][T13699] 2097051 pages RAM [ 321.364713][T13699] 0 pages HighMem/MovableOnly [ 321.369408][T13699] 428746 pages reserved [ 321.373728][T13699] 0 pages cma reserved [ 321.377915][ T5884] gspca_ov534_9: reg_w failed -71 [ 321.382319][ T5955] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 321.547389][ T5955] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 321.556167][ T5955] usb 1-1: config 0 has no interface number 0 [ 321.562385][ T5955] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 321.580345][ T5955] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 321.601221][ T5955] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 321.611544][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.628355][ T5955] usb 1-1: Product: syz [ 321.639187][ T5955] usb 1-1: Manufacturer: syz [ 321.643902][ T5955] usb 1-1: SerialNumber: syz [ 321.655368][T13716] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 321.663238][ T30] audit: type=1326 audit(1763231061.884:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz.1.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9178f8f6c9 code=0x7fc00000 [ 321.686768][ T5899] IPVS: starting estimator thread 0... [ 321.693055][ T5955] usb 1-1: config 0 descriptor?? [ 321.705267][T13706] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 321.715401][ T5955] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 321.734381][ T5955] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 321.781431][T13720] IPVS: using max 36 ests per chain, 86400 per kthread [ 321.831693][T13722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3242'. [ 321.847317][T13722] bridge_slave_1: left allmulticast mode [ 321.860350][T13722] bridge_slave_1: left promiscuous mode [ 321.867219][T13722] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.884398][T13722] bridge_slave_0: left allmulticast mode [ 321.884890][ T5884] gspca_ov534_9: Unknown sensor 0000 [ 321.893530][ T5884] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 321.907204][T13722] bridge_slave_0: left promiscuous mode [ 321.907448][T13722] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.953323][ T5884] usb 6-1: USB disconnect, device number 19 [ 322.158925][T13706] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13706 comm=syz.0.3235 [ 322.179164][ T24] usb 1-1: USB disconnect, device number 46 [ 322.203075][ T24] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 322.234354][ T24] cyberjack 1-1:0.69: device disconnected [ 323.392899][ T5884] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 323.564173][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 323.571192][ T5884] usb 5-1: config 10 has an invalid interface number: 238 but max is 0 [ 323.610930][ T5884] usb 5-1: config 10 has no interface number 0 [ 323.628195][ T5884] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a6.98 [ 323.648121][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.774805][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3270'. [ 323.803979][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3270'. [ 323.823403][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3270'. [ 323.842908][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3270'. [ 323.890765][ T5884] usb 5-1: string descriptor 0 read error: -71 [ 323.903026][ T5884] ftdi_sio 5-1:10.238: FTDI USB Serial Device converter detected [ 323.921389][ T5884] ftdi_sio ttyUSB0: unknown device type: 0xa698 [ 323.942895][ T5884] usb 5-1: USB disconnect, device number 41 [ 323.954876][ T5884] ftdi_sio 5-1:10.238: device disconnected [ 324.240188][ T30] audit: type=1400 audit(1763231064.296:655): avc: denied { bind } for pid=13805 comm="syz.6.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 324.309209][ T30] audit: type=1400 audit(1763231064.296:656): avc: denied { listen } for pid=13805 comm="syz.6.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 324.371009][ T30] audit: type=1400 audit(1763231064.296:657): avc: denied { getopt } for pid=13805 comm="syz.6.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 324.857939][ T5884] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 325.019753][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.030879][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.040824][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 325.054477][ T5884] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 325.063714][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.073348][ T5884] usb 1-1: config 0 descriptor?? [ 325.528296][ T5884] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 325.829936][T13868] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 326.253296][ T30] audit: type=1400 audit(1763231066.176:658): avc: denied { ioctl } for pid=13894 comm="syz.4.3312" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 326.287203][ T5955] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 326.294879][T13888] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 326.438930][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.445407][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.483405][ T5955] usb 7-1: Using ep0 maxpacket: 8 [ 326.493634][ T5955] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 326.505411][ T5955] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.513957][ T5955] usb 7-1: Product: syz [ 326.518562][ T5955] usb 7-1: Manufacturer: syz [ 326.523185][ T5955] usb 7-1: SerialNumber: syz [ 326.554231][ T5955] usb 7-1: config 0 descriptor?? [ 326.576895][ T5955] gspca_main: sq930x-2.14.0 probing 2770:930c [ 326.603106][T13914] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3320'. [ 326.952842][T13933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3328'. [ 326.986185][T13933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3328'. [ 327.002083][T13933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3328'. [ 327.011904][T13933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3328'. [ 327.153410][T13938] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 327.165550][ T5813] IPVS: starting estimator thread 0... [ 327.178607][ T5884] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 327.267565][T13942] IPVS: using max 40 ests per chain, 96000 per kthread [ 327.350196][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 327.365988][ T5884] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 327.387269][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.398177][ T5884] usb 2-1: Product: syz [ 327.402357][ T5884] usb 2-1: Manufacturer: syz [ 327.407306][ T5884] usb 2-1: SerialNumber: syz [ 327.417253][ T5884] usb 2-1: config 0 descriptor?? [ 327.425065][ T5884] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 327.521632][T13955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3337'. [ 327.591603][T13960] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.662240][ T56] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 327.713198][ T5955] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 327.726953][ T5955] sq930x 7-1:0.0: probe with driver sq930x failed with error -71 [ 327.745628][ T5955] usb 7-1: USB disconnect, device number 6 [ 327.757244][ T1687] usb 1-1: USB disconnect, device number 47 [ 327.830845][ T56] usb 6-1: Using ep0 maxpacket: 16 [ 327.837922][ T56] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 327.849840][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 327.865500][ T56] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 327.875514][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.883595][ T56] usb 6-1: Product: syz [ 327.889092][ T56] usb 6-1: Manufacturer: syz [ 327.893731][ T56] usb 6-1: SerialNumber: syz [ 327.908714][ T56] usb 6-1: config 0 descriptor?? [ 327.928227][ T56] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 327.960963][ T56] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 328.575565][ T56] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 328.612373][ T56] em28xx 6-1:0.0: Config register raw data: 0x36 [ 328.618772][ T56] em28xx 6-1:0.0: I2S Audio (3 sample rate(s)) [ 328.657380][ T56] em28xx 6-1:0.0: No AC97 audio processor [ 328.739882][ T5884] gspca_sonixj: reg_w1 err -71 [ 328.782816][ T5884] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 328.812516][ T5884] usb 2-1: USB disconnect, device number 45 [ 328.918084][T13996] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3351'. [ 328.930668][ T5955] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 329.044030][ T56] usb 6-1: USB disconnect, device number 20 [ 329.091796][T14007] netlink: 'syz.6.3355': attribute type 8 has an invalid length. [ 329.100468][ T5955] usb 1-1: Using ep0 maxpacket: 32 [ 329.100538][T14007] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3355'. [ 329.107544][T14007] bond0: entered promiscuous mode [ 329.118219][ T5955] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 329.119994][T14007] bond_slave_0: entered promiscuous mode [ 329.128394][ T5955] usb 1-1: config 2 has no interface number 0 [ 329.140599][T14007] bond_slave_1: entered promiscuous mode [ 329.146404][ T5955] usb 1-1: config 2 interface 88 has no altsetting 0 [ 329.149586][T14007] gretap0: entered promiscuous mode [ 329.160502][ T5955] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 329.161121][T14007] veth0_to_batadv: entered promiscuous mode [ 329.169861][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.177706][T14007] hsr1: entered promiscuous mode [ 329.184828][ T5955] usb 1-1: Product: syz [ 329.193275][ T5955] usb 1-1: Manufacturer: syz [ 329.197929][ T5955] usb 1-1: SerialNumber: syz [ 329.336542][T14014] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.3357'. [ 329.348088][T14014] openvswitch: netlink: Missing key (keys=40, expected=80) [ 329.424212][T14016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.714212][ T56] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 329.916342][ T5884] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 329.938130][ T56] usb 2-1: config 1 has an invalid descriptor of length 70, skipping remainder of the config [ 329.958732][ T56] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 329.982408][ T56] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 330.020690][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 330.037092][ T56] usb 2-1: SerialNumber: syz [ 330.056332][T14038] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 330.121753][ T5884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.134017][ T5884] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 330.162115][ T5884] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 330.174810][ T5884] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 330.184424][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.196386][T14026] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 330.210150][ T30] audit: type=1326 audit(1763231069.869:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.4.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b2b8f6c9 code=0x7ffc0000 [ 330.211093][ T5884] hub 6-1:1.0: bad descriptor, ignoring hub [ 330.233523][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.236859][ T30] audit: type=1326 audit(1763231069.897:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.4.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b2b8f6c9 code=0x7ffc0000 [ 330.245951][ T5884] hub 6-1:1.0: probe with driver hub failed with error -5 [ 330.250010][ T30] audit: type=1326 audit(1763231069.907:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.4.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b2b8f6c9 code=0x7ffc0000 [ 330.269899][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.271909][ T5884] cdc_wdm 6-1:1.0: skipping garbage [ 330.281447][ T30] audit: type=1326 audit(1763231069.907:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.4.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b2b8f6c9 code=0x7ffc0000 [ 330.309947][ T5884] cdc_wdm 6-1:1.0: skipping garbage [ 330.335831][ T30] audit: type=1326 audit(1763231069.907:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.4.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b2b8f6c9 code=0x7ffc0000 [ 330.365885][ T30] audit: type=1326 audit(1763231069.935:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.4.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b2b8f6c9 code=0x7ffc0000 [ 330.367445][ T56] usb 2-1: 0:2 : does not exist [ 330.398146][ T30] audit: type=1326 audit(1763231069.944:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.4.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b2b8f6c9 code=0x7ffc0000 [ 330.410693][ T56] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 330.422514][ T30] audit: type=1326 audit(1763231069.944:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.4.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b2b8f6c9 code=0x7ffc0000 [ 330.433900][ T5884] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 330.454877][ T5899] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 330.468167][ T30] audit: type=1326 audit(1763231069.972:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.4.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b2b8f6c9 code=0x7ffc0000 [ 330.469765][ T5884] cdc_wdm 6-1:1.0: Unknown control protocol [ 330.493258][ T30] audit: type=1326 audit(1763231070.047:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.4.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b2b8f6c9 code=0x7ffc0000 [ 330.503770][ T56] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 330.534986][ T5955] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 330.542378][ T56] usb 2-1: 5:0: cannot get min/max values for control 8 (id 5) [ 330.545458][ T5955] asix 1-1:2.88: probe with driver asix failed with error -71 [ 330.555132][ T5884] usb 6-1: USB disconnect, device number 21 [ 330.565584][ T5955] usb 1-1: USB disconnect, device number 48 [ 330.586588][ T56] usb 2-1: USB disconnect, device number 46 [ 330.644946][ T5899] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 330.655589][ T5899] usb 7-1: config 1 has no interface number 0 [ 330.661701][ T5899] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 330.674257][ T5899] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 330.695504][ T5899] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.719999][ T5899] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 330.729424][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.737441][ T5899] usb 7-1: Product: syz [ 330.743988][ T5899] usb 7-1: Manufacturer: syz [ 330.748599][ T5899] usb 7-1: SerialNumber: syz [ 330.771194][T14042] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 331.003032][T14042] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 331.118320][ T5884] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 331.265295][ T5899] sierra_net 7-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 331.326123][ T5884] usb 6-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 331.337981][ T5884] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 331.347100][ T5884] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 331.362687][ T5884] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 331.375508][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.387970][T14026] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 331.403926][ T5884] hub 6-1:1.0: bad descriptor, ignoring hub [ 331.409856][ T5884] hub 6-1:1.0: probe with driver hub failed with error -5 [ 331.417629][ T5884] cdc_wdm 6-1:1.0: skipping garbage [ 331.424477][ T5884] cdc_wdm 6-1:1.0: skipping garbage [ 331.430538][ T5884] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 331.672510][ T5899] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 331.679174][ T5899] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 331.690528][ T5899] usb 7-1: USB disconnect, device number 7 [ 331.698977][ T5899] sierra_net 7-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem [ 331.710369][ T5955] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 331.756109][ T5899] sierra_net 7-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 331.766652][ T5884] usb 6-1: USB disconnect, device number 22 [ 331.883843][ T5955] usb 5-1: Using ep0 maxpacket: 16 [ 331.892801][ T5955] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 331.909816][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.920919][ T5955] usb 5-1: Product: syz [ 331.925168][ T5955] usb 5-1: Manufacturer: syz [ 331.931318][ T5955] usb 5-1: SerialNumber: syz [ 331.942850][ T5955] usb 5-1: config 0 descriptor?? [ 331.951731][ T5955] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 332.376103][ T5892] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 332.561248][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 332.591144][ T5892] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 332.611197][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.628416][ T5892] usb 2-1: config 0 descriptor?? [ 332.905719][ T5892] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 332.936606][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 332.955102][ T5892] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 332.973334][ T5892] usb 2-1: media controller created [ 333.026005][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 333.204212][ T5892] DVB: Unable to find symbol dib7000p_attach() [ 333.221013][ T5892] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 333.271144][ T5955] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 333.322669][ T5955] usb 5-1: USB disconnect, device number 42 [ 333.391679][ T5892] rc_core: IR keymap rc-dib0700-rc5 not found [ 333.404236][ T5892] Registered IR keymap rc-empty [ 333.409459][ T5892] dvb-usb: could not initialize remote control. [ 333.416506][ T5892] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 333.638549][ T5892] usb 2-1: USB disconnect, device number 47 [ 333.747299][ T5892] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 333.819159][T14127] kvm: user requested TSC rate below hardware speed [ 334.006891][T14133] netlink: 'syz.4.3407': attribute type 21 has an invalid length. [ 334.027390][T14133] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3407'. [ 334.643257][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3417'. [ 334.783422][T14162] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 334.810207][T14162] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 334.900617][T14166] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 334.948373][T14168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3426'. [ 335.384617][T14194] Bluetooth: hci0: unsupported parameter 255 [ 335.390818][T14194] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 335.668274][T14210] netlink: 'syz.6.3442': attribute type 22 has an invalid length. [ 335.680720][T14210] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3442'. [ 335.701087][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.701110][T14210] netlink: 'syz.6.3442': attribute type 22 has an invalid length. [ 335.701129][T14210] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3442'. [ 335.728144][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.777858][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.797457][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.440388][ T5955] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 336.601687][ T5955] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.623865][ T5955] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 336.634169][ T5955] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 336.653616][ T5955] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 336.692223][ T5955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.719104][T14232] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 336.731099][ T5955] hub 7-1:1.0: bad descriptor, ignoring hub [ 336.745895][ T5955] hub 7-1:1.0: probe with driver hub failed with error -5 [ 336.765398][ T5955] cdc_wdm 7-1:1.0: skipping garbage [ 336.778172][ T5955] cdc_wdm 7-1:1.0: skipping garbage [ 336.791914][ T5955] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 336.805003][ T5955] cdc_wdm 7-1:1.0: Unknown control protocol [ 337.112786][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 337.112801][ T30] audit: type=1326 audit(1763231076.322:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.5.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fef8f6c9 code=0x7ffc0000 [ 337.144309][ T5955] usb 7-1: USB disconnect, device number 8 [ 337.218739][ T30] audit: type=1326 audit(1763231076.368:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.5.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fef8f6c9 code=0x7ffc0000 [ 337.279317][ T30] audit: type=1326 audit(1763231076.368:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.5.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f14fef8f6c9 code=0x7ffc0000 [ 337.371198][ T5899] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 337.432831][ T30] audit: type=1326 audit(1763231076.368:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.5.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fef8f6c9 code=0x7ffc0000 [ 337.495104][ T5884] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 337.557572][ T5899] usb 1-1: unable to get BOS descriptor or descriptor too short [ 337.571337][ T5899] usb 1-1: not running at top speed; connect to a high speed hub [ 337.599766][ T30] audit: type=1326 audit(1763231076.368:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.5.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fef8f6c9 code=0x7ffc0000 [ 337.668426][ T5899] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.689244][ T5884] usb 7-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 337.744335][ T5884] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 337.744356][ T5899] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.754651][ T5884] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 337.775701][ T30] audit: type=1326 audit(1763231076.368:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.5.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f14fef8f6c9 code=0x7ffc0000 [ 337.837523][ T30] audit: type=1326 audit(1763231076.368:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.5.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f14fef2b789 code=0x7ffc0000 [ 337.890531][ T5899] usb 1-1: string descriptor 0 read error: -22 [ 337.893659][ T5884] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 337.897025][ T5899] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 337.897052][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.912079][ T5899] usb 1-1: 0:2 : does not exist [ 337.964413][ T30] audit: type=1326 audit(1763231076.368:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.5.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f14fef2b789 code=0x7ffc0000 [ 338.020630][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.106253][T14232] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 338.127560][ T30] audit: type=1326 audit(1763231076.368:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.5.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f14fef2b789 code=0x7ffc0000 [ 338.156093][ T5884] hub 7-1:1.0: bad descriptor, ignoring hub [ 338.193875][ T5884] hub 7-1:1.0: probe with driver hub failed with error -5 [ 338.233967][ T5884] cdc_wdm 7-1:1.0: skipping garbage [ 338.261501][ T30] audit: type=1326 audit(1763231076.368:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.5.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f14fef2b789 code=0x7ffc0000 [ 338.265826][ T5884] cdc_wdm 7-1:1.0: skipping garbage [ 338.406618][ T5884] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 338.452985][ T5884] usb 7-1: USB disconnect, device number 9 [ 339.211103][ T5899] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 339.237713][ T5899] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 339.249426][ T5899] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 339.273436][ T56] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 339.295099][ T5899] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 339.316602][ T5899] usb 1-1: USB disconnect, device number 49 [ 339.445460][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 339.457297][ T56] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 339.466835][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.474832][ T56] usb 6-1: Product: syz [ 339.490112][ T56] usb 6-1: Manufacturer: syz [ 339.494729][ T56] usb 6-1: SerialNumber: syz [ 339.515233][ T56] usb 6-1: config 0 descriptor?? [ 339.533626][ T56] gspca_main: sq905-2.14.0 probing 2770:9120 [ 339.917075][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3481'. [ 339.947723][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3481'. [ 340.086163][ T5813] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 340.259009][ T5813] usb 1-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.269066][ T5813] usb 1-1: config 0 interface 0 has no altsetting 0 [ 340.275681][ T5813] usb 1-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 340.285472][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.304964][ T5813] usb 1-1: config 0 descriptor?? [ 340.465970][T14308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.628074][T14312] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3487'. [ 340.646884][ T56] gspca_sq905: bulk read fail (-22) len 0/4 [ 340.657527][ T56] sq905 6-1:0.0: probe with driver sq905 failed with error -5 [ 340.676037][T14316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3488'. [ 340.708183][T14316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3488'. [ 340.749958][T14316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3488'. [ 340.776511][ T5813] hid (null): bogus close delimiter [ 340.793537][ T5813] hid (null): unknown global tag 0xc [ 340.802003][ T5813] asus 0003:0B05:1A30.0035: unknown main item tag 0x0 [ 340.809762][ T5813] asus 0003:0B05:1A30.0035: unknown main item tag 0x0 [ 340.830571][ T5813] asus 0003:0B05:1A30.0035: unknown main item tag 0x0 [ 340.847287][ T5813] asus 0003:0B05:1A30.0035: unknown main item tag 0x0 [ 340.865391][ T5813] asus 0003:0B05:1A30.0035: unknown main item tag 0x0 [ 340.890892][ T5813] asus 0003:0B05:1A30.0035: unknown main item tag 0x0 [ 340.901366][ T5813] asus 0003:0B05:1A30.0035: unknown main item tag 0x0 [ 340.909403][ T5813] asus 0003:0B05:1A30.0035: unknown main item tag 0x0 [ 340.911534][ T56] usb 6-1: USB disconnect, device number 23 [ 340.924530][ T5813] asus 0003:0B05:1A30.0035: unknown main item tag 0x0 [ 340.937237][ T5813] asus 0003:0B05:1A30.0035: unknown main item tag 0x0 [ 340.965165][ T5813] asus 0003:0B05:1A30.0035: bogus close delimiter [ 340.986769][ T5813] asus 0003:0B05:1A30.0035: item 0 0 2 10 parsing failed [ 341.005110][ T5813] asus 0003:0B05:1A30.0035: Asus hid parse failed: -22 [ 341.048020][ T5813] asus 0003:0B05:1A30.0035: probe with driver asus failed with error -22 [ 341.073913][ T5813] usb 1-1: USB disconnect, device number 50 [ 341.544238][T14343] netlink: 'syz.5.3500': attribute type 1 has an invalid length. [ 341.571949][T14343] bond3: entered promiscuous mode [ 341.586988][T14343] 8021q: adding VLAN 0 to HW filter on device bond3 [ 341.656745][T14345] 8021q: adding VLAN 0 to HW filter on device bond4 [ 341.672414][T14345] bond3: (slave bond4): making interface the new active one [ 341.690358][T14345] bond4: entered promiscuous mode [ 341.696554][T14345] bond3: (slave bond4): Enslaving as an active interface with an up link [ 342.356868][T14366] netlink: 'syz.0.3506': attribute type 21 has an invalid length. [ 342.390794][T14366] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3506'. [ 342.898802][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 342.953924][T14387] input: syz0 as /devices/virtual/input/input58 [ 343.059198][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 343.066483][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 343.073547][ T24] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 343.091412][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.111110][ T24] usb 6-1: config 0 descriptor?? [ 343.329253][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3525'. [ 343.558520][T14420] netlink: 'syz.1.3532': attribute type 5 has an invalid length. [ 343.573686][ T24] hid (null): invalid report_size 27180 [ 343.599031][ T49] nci: nci_rsp_packet: unsupported rsp opcode 0xf02 [ 343.641882][T14425] input: syz0 as /devices/virtual/input/input59 [ 343.717427][T14431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.784598][ T5813] usb 6-1: USB disconnect, device number 24 [ 344.481594][ T5955] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 344.674011][ T5955] usb 1-1: Using ep0 maxpacket: 32 [ 344.681279][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.706085][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.727198][ T5955] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 344.741721][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.758555][ T5955] usb 1-1: config 0 descriptor?? [ 344.769396][ T5955] hub 1-1:0.0: USB hub found [ 344.828633][T14471] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3952259481 (15809037924 ns) > initial count (8318055364 ns). Using initial count to start timer. [ 344.906196][T14473] raw_sendmsg: syz.5.3554 forgot to set AF_INET. Fix it! [ 344.990175][ T5955] hub 1-1:0.0: 1 port detected [ 345.099415][T14482] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 345.547247][T14496] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 345.595298][ T30] kauditd_printk_skb: 644 callbacks suppressed [ 345.595316][ T30] audit: type=1400 audit(1763231084.251:1336): avc: denied { read } for pid=14495 comm="syz.1.3565" name="saved_tgids" dev="tracefs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 345.649642][ T30] audit: type=1400 audit(1763231084.289:1337): avc: denied { getattr } for pid=14495 comm="syz.1.3565" name="saved_tgids" dev="tracefs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 345.720070][ T5955] hub 1-1:0.0: activate --> -90 [ 345.850302][ T5812] Bluetooth: hci2: command 0x0c1a tx timeout [ 345.856492][ T24] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 345.871659][ T24] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 346.041178][ T30] audit: type=1400 audit(1763231084.672:1338): avc: denied { ioctl } for pid=14506 comm="syz.5.3570" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 346.151540][T14512] rdma_rxe: rxe_newlink: failed to add wg2 [ 346.170531][ T5899] usb 1-1: USB disconnect, device number 51 [ 346.331307][T14517] netlink: 'syz.6.3574': attribute type 1 has an invalid length. [ 346.395320][T14517] 8021q: adding VLAN 0 to HW filter on device bond3 [ 346.406639][ T5955] usb 1-1-port1: config error [ 346.444603][T14519] bond3: (slave geneve3): making interface the new active one [ 346.466176][T14519] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 346.784561][T14532] Invalid ELF header magic: != ELF [ 346.817520][T14531] pim6reg1: entered promiscuous mode [ 346.846491][T14531] pim6reg1: entered allmulticast mode [ 346.932105][T14536] batadv_slave_1: entered promiscuous mode [ 346.943499][T14536] batadv_slave_0: entered promiscuous mode [ 346.974580][T14535] batadv_slave_0: left promiscuous mode [ 346.985342][T14535] batadv_slave_1: left promiscuous mode [ 347.138383][T14547] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 347.732697][T14564] tipc: Started in network mode [ 347.775338][T14564] tipc: Node identity fffffffa, cluster identity 4711 [ 347.797805][T14564] tipc: Node number set to 4294967290 [ 348.150102][ T5812] Bluetooth: hci3: command 0x0c1a tx timeout [ 348.160587][ T24] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 348.215225][ T24] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 348.321068][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.208655][T14633] batman_adv: batadv0: Adding interface: dummy0 [ 350.220409][T14633] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.245609][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.270285][T14633] batman_adv: batadv0: Interface activated: dummy0 [ 350.283512][T14636] batadv0: mtu less than device minimum [ 350.299971][T14636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 350.312078][T14636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 350.323591][T14636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 350.335166][T14636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 350.347120][T14636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 350.358101][T14636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 350.369236][T14636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 350.380169][T14636] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 350.598437][ T5937] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 350.675033][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3628'. [ 350.690833][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3628'. [ 350.782102][ T5937] usb 7-1: Using ep0 maxpacket: 16 [ 350.789147][ T5937] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.808712][ T5937] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.819108][ T5937] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 350.832403][ T5937] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 350.848789][ T5937] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.861198][ T5937] usb 7-1: config 0 descriptor?? [ 351.292504][T14682] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3642'. [ 351.306687][ T5937] hid_parser_main: 948 callbacks suppressed [ 351.306709][ T5937] shield 0003:0955:7214.0037: unknown main item tag 0x0 [ 351.334829][ T5937] shield 0003:0955:7214.0037: unknown main item tag 0x0 [ 351.349437][ T5937] shield 0003:0955:7214.0037: unknown main item tag 0x0 [ 351.369147][ T5937] shield 0003:0955:7214.0037: unknown main item tag 0x0 [ 351.384375][ T5937] shield 0003:0955:7214.0037: unknown main item tag 0x0 [ 351.406107][ T5937] input: HID 0955:7214 Haptics as /devices/virtual/input/input60 [ 351.420616][ T5937] shield 0003:0955:7214.0037: Registered Thunderstrike controller [ 351.429794][ T5937] shield 0003:0955:7214.0037: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 351.549684][T14639] netlink: 'syz.6.3623': attribute type 2 has an invalid length. [ 351.557935][T14639] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3623'. [ 351.569934][ T5937] shield 0003:0955:7214.0037: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 351.581323][ T5885] usb 7-1: USB disconnect, device number 10 [ 351.591585][ T5937] shield 0003:0955:7214.0037: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 351.608507][ T5937] shield 0003:0955:7214.0037: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 351.620015][ T5937] shield 0003:0955:7214.0037: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 351.743270][ T910] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 351.916161][ T910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.927174][ T910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.937014][ T910] usb 6-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 351.946192][ T910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.955711][ T910] usb 6-1: config 0 descriptor?? [ 352.234009][T14698] input: syz1 as /devices/virtual/input/input61 [ 352.306511][T14700] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3650'. [ 352.354993][ T5885] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 352.404983][ T910] thrustmaster 0003:044F:B653.0038: unknown main item tag 0x0 [ 352.434503][ T910] thrustmaster 0003:044F:B653.0038: unknown main item tag 0x0 [ 352.445878][ T30] audit: type=1400 audit(1763231090.666:1339): avc: denied { read } for pid=14701 comm="syz.1.3651" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 352.469566][ T910] thrustmaster 0003:044F:B653.0038: unknown main item tag 0x0 [ 352.477574][ T910] thrustmaster 0003:044F:B653.0038: unknown main item tag 0x0 [ 352.478260][ T30] audit: type=1400 audit(1763231090.666:1340): avc: denied { open } for pid=14701 comm="syz.1.3651" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 352.520323][ T910] thrustmaster 0003:044F:B653.0038: unknown main item tag 0x0 [ 352.565300][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.576500][ T910] thrustmaster 0003:044F:B653.0038: hidraw0: USB HID v0.00 Device [HID 044f:b653] on usb-dummy_hcd.5-1/input0 [ 352.597542][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.618757][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 352.632179][ T910] thrustmaster 0003:044F:B653.0038: no inputs found [ 352.654388][ T5885] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.663758][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.678676][ T5885] usb 1-1: config 0 descriptor?? [ 353.025380][T14725] loop3: detected capacity change from 0 to 7 [ 353.035071][T14725] Dev loop3: unable to read RDB block 7 [ 353.041101][T14725] loop3: AHDI p1 [ 353.044868][T14725] loop3: partition table partially beyond EOD, truncated [ 353.146611][T14729] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3672'. [ 353.147314][ T5885] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 353.183788][T14731] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 353.746861][ T5885] usb 1-1: USB disconnect, device number 52 [ 353.957007][T14757] pimreg: entered allmulticast mode [ 354.732073][ T5955] usb 6-1: USB disconnect, device number 25 [ 354.906778][T14799] netlink: 'syz.0.3695': attribute type 1 has an invalid length. [ 354.915465][T14799] netlink: 'syz.0.3695': attribute type 4 has an invalid length. [ 354.924542][T14799] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.3695'. [ 355.276368][ T30] audit: type=1400 audit(1763231093.312:1341): avc: denied { shutdown } for pid=14809 comm="syz.5.3699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 355.347796][ T30] audit: type=1400 audit(1763231093.340:1342): avc: denied { write } for pid=14809 comm="syz.5.3699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 356.416448][ T910] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 356.508358][T14846] syz.5.3712 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 356.587162][ T910] usb 2-1: Using ep0 maxpacket: 16 [ 356.594054][ T910] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.626660][ T910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 356.642909][ T910] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 356.661233][ T910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.674356][ T910] usb 2-1: config 0 descriptor?? [ 356.929323][ T5885] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 357.102261][ T5885] usb 6-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 357.126821][ T910] nzxt-smart2 0003:1E71:2009.003A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 357.138844][ T5885] usb 6-1: config 0 interface 0 altsetting 250 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 357.154598][ T5885] usb 6-1: config 0 interface 0 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 357.168462][ T5885] usb 6-1: config 0 interface 0 has no altsetting 0 [ 357.175904][ T5885] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 357.185171][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.196795][ T5885] usb 6-1: config 0 descriptor?? [ 357.218970][T14848] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 357.555153][ T910] usb 2-1: USB disconnect, device number 48 [ 357.679141][ T5885] hid_parser_main: 2 callbacks suppressed [ 357.679163][ T5885] corsair-psu 0003:1B1C:1C0C.003B: unknown main item tag 0x0 [ 357.706563][T14855] ip6gre1: entered promiscuous mode [ 357.713028][T14855] ip6gre1: entered allmulticast mode [ 357.721772][ T5885] corsair-psu 0003:1B1C:1C0C.003B: hidraw0: USB HID vf4.f6 Device [HID 1b1c:1c0c] on usb-dummy_hcd.5-1/input0 [ 357.800427][ T5885] corsair-psu 0003:1B1C:1C0C.003B: unable to initialize device (-71) [ 357.822090][ T5885] corsair-psu 0003:1B1C:1C0C.003B: probe with driver corsair-psu failed with error -71 [ 357.893859][ T5813] usb 6-1: USB disconnect, device number 26 [ 358.255797][ T30] audit: type=1400 audit(1763231096.080:1343): avc: denied { bind } for pid=14864 comm="syz.1.3720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 358.786361][ T30] audit: type=1400 audit(1763231096.595:1344): avc: denied { create } for pid=14881 comm="syz.0.3727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 358.827005][ T30] audit: type=1400 audit(1763231096.613:1345): avc: denied { setopt } for pid=14881 comm="syz.0.3727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 358.918801][ T910] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 359.093994][ T910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 359.113516][T14897] netlink: 'syz.6.3734': attribute type 30 has an invalid length. [ 359.115165][ T910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.153746][ T910] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 359.162893][ T910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.173683][ T910] usb 6-1: config 0 descriptor?? [ 359.462287][ T5955] Process accounting resumed [ 359.667405][ T910] isku 0003:1E7D:319C.003C: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 359.725365][T14929] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 359.784964][ T5955] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 359.876445][ T910] isku 0003:1E7D:319C.003C: couldn't init struct isku_device [ 359.884021][ T910] isku 0003:1E7D:319C.003C: couldn't install keyboard [ 359.893572][ T910] isku 0003:1E7D:319C.003C: probe with driver isku failed with error -71 [ 359.906063][ T910] usb 6-1: USB disconnect, device number 27 [ 359.957974][ T5955] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 359.966178][ T5955] usb 1-1: config 0 has no interface number 0 [ 359.972567][ T5955] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 359.984629][ T5955] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 359.998567][ T5955] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 360.013516][ T5955] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 360.025475][ T5955] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 360.034633][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.042805][ T5955] usb 1-1: Product: syz [ 360.046963][ T5955] usb 1-1: Manufacturer: syz [ 360.051556][ T5955] usb 1-1: SerialNumber: syz [ 360.057947][ T5955] usb 1-1: config 0 descriptor?? [ 360.066336][ T5955] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 360.077812][ T5955] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.237/input/input62 [ 360.297063][ T5955] usb 1-1: USB disconnect, device number 53 [ 360.408103][T14934] SELinux: failed to load policy [ 360.902864][ T30] audit: type=1326 audit(1763231098.577:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14951 comm="syz.1.3759" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9178f8f6c9 code=0x0 [ 361.406346][ T30] audit: type=1400 audit(1763231099.045:1347): avc: denied { write } for pid=14982 comm="syz.0.3771" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 361.738603][T15000] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 361.758924][T15000] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 361.799235][T15000] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 361.807892][T15000] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 361.820382][T15000] overlayfs: d_ino too big (712, ino=9223372036854779495, xinobits=3) [ 361.831069][T15000] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 361.840993][T15000] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 361.855117][T15000] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 361.866222][T15000] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 361.875607][T15000] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 361.884842][T15000] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 361.910809][T15000] overlayfs: d_ino too big (instances, ino=4611686018427388093, xinobits=3) [ 362.076971][T15015] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.167124][T15018] "syz.5.3787" (15018) uses obsolete ecb(arc4) skcipher [ 362.298092][ T910] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 362.525450][ T910] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 362.536113][ T910] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 362.546637][ T910] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 362.558441][ T910] usb 2-1: config 220 has no interface number 2 [ 362.566362][ T910] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 362.602555][ T910] usb 2-1: config 220 interface 0 has no altsetting 0 [ 362.639987][ T910] usb 2-1: config 220 interface 76 has no altsetting 0 [ 362.646881][ T910] usb 2-1: config 220 interface 1 has no altsetting 0 [ 362.666835][ T910] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 362.677306][ T910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.686615][ T910] usb 2-1: Product: syz [ 362.690868][ T910] usb 2-1: Manufacturer: syz [ 362.697221][ T910] usb 2-1: SerialNumber: syz [ 362.976522][ T910] usb 2-1: selecting invalid altsetting 0 [ 363.004076][ T910] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 363.035572][ T910] uvcvideo 2-1:220.0: No valid video chain found. [ 363.064055][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3805'. [ 363.069274][ T910] usb 2-1: selecting invalid altsetting 0 [ 363.094707][ T910] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 363.118534][ T910] usb 2-1: USB disconnect, device number 49 [ 363.241207][T15071] SELinux: ebitmap: map size 536870912 does not match my size 64 (high bit was 393216) [ 363.275821][T15071] SELinux: failed to load policy [ 363.752898][T15093] tls_set_device_offload: netdev not found [ 363.760830][T15092] pimreg: entered allmulticast mode [ 363.792296][T15092] pimreg: left allmulticast mode [ 364.703731][T15130] netlink: 'syz.0.3833': attribute type 12 has an invalid length. [ 364.714758][ T910] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 364.719694][T15130] netlink: 'syz.0.3833': attribute type 29 has an invalid length. [ 364.731062][T15130] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3833'. [ 364.753930][T15130] netlink: 'syz.0.3833': attribute type 2 has an invalid length. [ 364.761910][T15130] netlink: 'syz.0.3833': attribute type 1 has an invalid length. [ 364.909211][ T910] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 364.918113][ T910] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 364.927693][ T910] usb 2-1: config 150 has no interface number 0 [ 364.936591][ T910] usb 2-1: config 150 interface 204 has no altsetting 0 [ 364.947363][ T910] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 364.956764][ T910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.965319][ T910] usb 2-1: Product: syz [ 364.969523][ T910] usb 2-1: Manufacturer: syz [ 364.974661][ T910] usb 2-1: SerialNumber: syz [ 365.205600][ T910] xr_serial 2-1:150.204: skipping garbage [ 365.211643][ T910] xr_serial 2-1:150.204: xr_serial converter detected [ 365.894090][ T56] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 365.923169][ T56] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 366.069684][ T910] usb 2-1: xr_serial converter now attached to ttyUSB0 [ 366.207092][ T5955] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 366.303935][ T5813] usb 2-1: USB disconnect, device number 50 [ 366.312002][ T5813] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 366.322398][ T5813] xr_serial 2-1:150.204: device disconnected [ 366.375159][ T5955] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.386188][ T5955] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.395964][ T5955] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 366.409009][ T5955] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 366.418237][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.427940][ T5955] usb 6-1: config 0 descriptor?? [ 366.846229][T15184] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3857'. [ 366.890262][ T5955] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 367.027292][ T30] audit: type=1326 audit(1763231104.300:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15192 comm="syz.1.3861" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9178f8f6c9 code=0x0 [ 367.230458][ T56] usb 6-1: USB disconnect, device number 28 [ 367.304511][ T30] audit: type=1326 audit(1763231104.562:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.6.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858ef8f6c9 code=0x7ffc0000 [ 367.329672][ T30] audit: type=1326 audit(1763231104.562:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.6.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858ef8f6c9 code=0x7ffc0000 [ 367.354320][ T30] audit: type=1326 audit(1763231104.562:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.6.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f858ef8f6c9 code=0x7ffc0000 [ 367.378814][ T30] audit: type=1326 audit(1763231104.562:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.6.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858ef8f6c9 code=0x7ffc0000 [ 367.403073][ T30] audit: type=1326 audit(1763231104.562:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.6.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858ef8f6c9 code=0x7ffc0000 [ 367.427485][ T30] audit: type=1326 audit(1763231104.562:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.6.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f858ef8f6c9 code=0x7ffc0000 [ 367.453256][ T30] audit: type=1326 audit(1763231104.562:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.6.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858ef8f6c9 code=0x7ffc0000 [ 367.478103][ T30] audit: type=1326 audit(1763231104.562:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.6.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858ef8f6c9 code=0x7ffc0000 [ 367.502365][ T30] audit: type=1326 audit(1763231104.571:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15199 comm="syz.6.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f858ef8f6c9 code=0x7ffc0000 [ 368.215068][ T910] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 368.238937][ T910] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 369.095954][T15274] binder: 15271:15274 ioctl c0306201 2000000001c0 returned -14 [ 392.137363][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.143653][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 457.829565][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 457.835833][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 479.729587][ C0] net_ratelimit: 11 callbacks suppressed [ 479.729602][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.057533][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 518.065100][ T31] Not tainted syzkaller #0 [ 518.070173][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 518.078907][ T31] task:kworker/1:0 state:D stack:22232 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 518.090990][ T31] Workqueue: events rfkill_op_handler [ 518.096382][ T31] Call Trace: [ 518.099856][ T31] [ 518.102781][ T31] __schedule+0x1190/0x5de0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 518.107269][ T31] ? check_path.constprop.0+0x24/0x50 [ 518.112833][ T31] ? __lock_acquire+0x622/0x1c90 [ 518.117780][ T31] ? __pfx___schedule+0x10/0x10 [ 518.122895][ T31] ? find_held_lock+0x2b/0x80 [ 518.127578][ T31] ? schedule+0x2d7/0x3a0 [ 518.132474][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 518.163335][ T31] schedule+0xe7/0x3a0 [ 518.167422][ T31] schedule_preempt_disabled+0x13/0x30 [ 518.172884][ T31] __mutex_lock+0x818/0x1060 [ 518.189629][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 518.194243][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 518.200256][ T31] ? kobject_uevent_env+0x2e5/0x1870 [ 518.205556][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 518.210689][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 518.215273][ T31] nfc_dev_down+0x2d/0x2e0 [ 518.219862][ T31] nfc_rfkill_set_block+0x39/0xe0 [ 518.224889][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 518.230844][ T31] rfkill_set_block+0x1fe/0x550 [ 518.235712][ T31] rfkill_epo+0x8e/0x1d0 [ 518.240032][ T31] rfkill_op_handler+0x262/0x280 [ 518.244973][ T31] process_one_work+0x9cf/0x1b70 [ 518.249922][ T31] ? __pfx_process_one_work+0x10/0x10 [ 518.255290][ T31] ? assign_work+0x1a0/0x250 [ 518.259946][ T31] worker_thread+0x6c8/0xf10 [ 518.264538][ T31] ? __pfx_worker_thread+0x10/0x10 [ 518.269638][ T31] kthread+0x3c5/0x780 [ 518.273716][ T31] ? __pfx_kthread+0x10/0x10 [ 518.278300][ T31] ? rcu_is_watching+0x12/0xc0 [ 518.283068][ T31] ? __pfx_kthread+0x10/0x10 [ 518.287649][ T31] ret_from_fork+0x675/0x7d0 [ 518.292369][ T31] ? __pfx_kthread+0x10/0x10 [ 518.296959][ T31] ret_from_fork_asm+0x1a/0x30 [ 518.301715][ T31] [ 518.304904][ T31] INFO: task kworker/1:4:5884 blocked for more than 143 seconds. [ 518.312614][ T31] Not tainted syzkaller #0 [ 518.317725][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 518.326516][ T31] task:kworker/1:4 state:D stack:21704 pid:5884 tgid:5884 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 518.338583][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 518.346146][ T31] Call Trace: [ 518.349417][ T31] [ 518.352325][ T31] __schedule+0x1190/0x5de0 [ 518.356905][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 518.361855][ T31] ? __pfx___schedule+0x10/0x10 [ 518.366824][ T31] ? find_held_lock+0x2b/0x80 [ 518.371497][ T31] ? schedule+0x2d7/0x3a0 [ 518.375821][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 518.382383][ T31] schedule+0xe7/0x3a0 [ 518.386457][ T31] schedule_preempt_disabled+0x13/0x30 [ 518.391982][ T31] __mutex_lock+0x818/0x1060 [ 518.396569][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 518.403014][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 518.408033][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 518.413950][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 518.420299][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 518.426430][ T31] process_one_work+0x9cf/0x1b70 [ 518.431521][ T31] ? __pfx_process_one_work+0x10/0x10 [ 518.436895][ T31] ? assign_work+0x1a0/0x250 [ 518.441543][ T31] worker_thread+0x6c8/0xf10 [ 518.446129][ T31] ? __kthread_parkme+0x19e/0x250 [ 518.451132][ T31] ? __pfx_worker_thread+0x10/0x10 [ 518.456332][ T31] kthread+0x3c5/0x780 [ 518.460405][ T31] ? __pfx_kthread+0x10/0x10 [ 518.465055][ T31] ? rcu_is_watching+0x12/0xc0 [ 518.469815][ T31] ? __pfx_kthread+0x10/0x10 [ 518.474462][ T31] ret_from_fork+0x675/0x7d0 [ 518.479043][ T31] ? __pfx_kthread+0x10/0x10 [ 518.483615][ T31] ret_from_fork_asm+0x1a/0x30 [ 518.488462][ T31] [ 518.491498][ T31] INFO: task syz.4.3531:14412 blocked for more than 143 seconds. [ 518.500832][ T31] Not tainted syzkaller #0 [ 518.505972][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 518.514625][ T31] task:syz.4.3531 state:D stack:26712 pid:14412 tgid:14412 ppid:5806 task_flags:0x400040 flags:0x00080002 [ 518.526598][ T31] Call Trace: [ 518.529887][ T31] [ 518.532797][ T31] __schedule+0x1190/0x5de0 [ 518.537280][ T31] ? check_path.constprop.0+0x24/0x50 [ 518.542745][ T31] ? __lock_acquire+0x622/0x1c90 [ 518.547678][ T31] ? __pfx___schedule+0x10/0x10 [ 518.552560][ T31] ? find_held_lock+0x2b/0x80 [ 518.557237][ T31] ? schedule+0x2d7/0x3a0 [ 518.561632][ T31] ? rfkill_unregister+0xec/0x2c0 [ 518.566653][ T31] schedule+0xe7/0x3a0 [ 518.571357][ T31] schedule_preempt_disabled+0x13/0x30 [ 518.576825][ T31] __mutex_lock+0x818/0x1060 [ 518.581677][ T31] ? class_to_subsys+0x10f/0x160 [ 518.586619][ T31] ? rfkill_unregister+0xec/0x2c0 [ 518.591666][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 518.596691][ T31] ? device_del+0x6b6/0x9f0 [ 518.601178][ T31] ? __pfx_device_del+0x10/0x10 [ 518.606102][ T31] ? rfkill_unregister+0xec/0x2c0 [ 518.611125][ T31] rfkill_unregister+0xec/0x2c0 [ 518.616008][ T31] nfc_unregister_device+0x94/0x330 [ 518.621207][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 518.626987][ T31] virtual_ncidev_close+0x4b/0xa0 [ 518.632011][ T31] __fput+0x402/0xb70 [ 518.636114][ T31] task_work_run+0x150/0x240 [ 518.640694][ T31] ? __pfx_task_work_run+0x10/0x10 [ 518.645880][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 518.651598][ T31] exit_to_user_mode_loop+0xec/0x130 [ 518.656924][ T31] do_syscall_64+0x426/0xfa0 [ 518.661507][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.667470][ T31] RIP: 0033:0x7f65b2b8f6c9 [ 518.671874][ T31] RSP: 002b:00007ffdd1cde108 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 518.680327][ T31] RAX: 0000000000000000 RBX: 00007f65b2de7da0 RCX: 00007f65b2b8f6c9 [ 518.688367][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 518.696327][ T31] RBP: 00007f65b2de7da0 R08: 000000000000007c R09: 00000006d1cde3ff [ 518.704455][ T31] R10: 00007f65b2de7cb0 R11: 0000000000000246 R12: 0000000000051794 [ 518.712458][ T31] R13: 00007f65b2de6090 R14: ffffffffffffffff R15: 00007ffdd1cde220 [ 518.720452][ T31] [ 518.723459][ T31] INFO: task syz-executor:14932 blocked for more than 143 seconds. [ 518.731944][ T31] Not tainted syzkaller #0 [ 518.736856][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 518.746124][ T31] task:syz-executor state:D stack:28680 pid:14932 tgid:14932 ppid:1 task_flags:0x400040 flags:0x00080000 [ 518.758290][ T31] Call Trace: [ 518.761566][ T31] [ 518.764562][ T31] __schedule+0x1190/0x5de0 [ 518.769224][ T31] ? __lock_acquire+0x622/0x1c90 [ 518.774289][ T31] ? __pfx___schedule+0x10/0x10 [ 518.779150][ T31] ? find_held_lock+0x2b/0x80 [ 518.783991][ T31] ? schedule+0x2d7/0x3a0 [ 518.788325][ T31] ? rfkill_register+0x3a/0xb40 [ 518.793153][ T31] schedule+0xe7/0x3a0 [ 518.797284][ T31] schedule_preempt_disabled+0x13/0x30 [ 518.802753][ T31] __mutex_lock+0x818/0x1060 [ 518.807398][ T31] ? rfkill_register+0x3a/0xb40 [ 518.812249][ T31] ? __pfx___debug_object_init+0x10/0x10 [ 518.818150][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 518.823191][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 518.828656][ T31] ? __init_waitqueue_head+0xca/0x150 [ 518.834030][ T31] ? rfkill_register+0x3a/0xb40 [ 518.838927][ T31] ? rfkill_alloc+0x25b/0x330 [ 518.843600][ T31] rfkill_register+0x3a/0xb40 [ 518.848288][ T31] hci_register_dev+0x3cc/0xc60 [ 518.853145][ T31] __vhci_create_device+0x357/0x880 [ 518.858329][ T31] vhci_write+0x2c0/0x480 [ 518.862677][ T31] vfs_write+0x7d3/0x11d0 [ 518.867002][ T31] ? __pfx_vhci_write+0x10/0x10 [ 518.871936][ T31] ? __pfx_vfs_write+0x10/0x10 [ 518.876697][ T31] ? find_held_lock+0x2b/0x80 [ 518.881443][ T31] ? find_held_lock+0x2b/0x80 [ 518.886130][ T31] ksys_write+0x12a/0x250 [ 518.890465][ T31] ? __pfx_ksys_write+0x10/0x10 [ 518.895384][ T31] do_syscall_64+0xcd/0xfa0 [ 518.899884][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.905815][ T31] RIP: 0033:0x7f08c298e140 [ 518.910221][ T31] RSP: 002b:00007ffd0f5bc1f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 518.918635][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f08c298e140 [ 518.926620][ T31] RDX: 0000000000000002 RSI: 00007ffd0f5bc20a RDI: 00000000000000ca [ 518.934607][ T31] RBP: 00007f08c2be67b8 R08: 0000000000000000 R09: 00007f08c371d6c0 [ 518.942570][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 518.950547][ T31] R13: 0000000000000003 R14: 00007ffd0f5bc558 R15: 0000000000000000 [ 518.958557][ T31] [ 518.961581][ T31] [ 518.961581][ T31] Showing all locks held in the system: [ 518.969315][ T31] 4 locks held by kworker/1:0/24: [ 518.974321][ T31] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 518.984767][ T31] #1: ffffc900001e7d00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 518.995151][ T31] #2: ffffffff905920c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x55/0x1d0 [ 519.004638][ T31] #3: ffff88802c056100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 519.013638][ T31] 1 lock held by khungtaskd/31: [ 519.018486][ T31] #0: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 519.028445][ T31] 6 locks held by kworker/u8:7/3560: [ 519.033755][ T31] 2 locks held by getty/5572: [ 519.038418][ T31] #0: ffff8880314450a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 519.048179][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 519.058308][ T31] 3 locks held by kworker/1:4/5884: [ 519.063504][ T31] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 519.073965][ T31] #1: ffffc9000444fd00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 519.087041][ T31] #2: ffffffff905920c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 519.098628][ T31] 2 locks held by syz.4.3531/14412: [ 519.103839][ T31] #0: ffff88802c056100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 519.113587][ T31] #1: ffffffff905920c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 519.123723][ T31] 2 locks held by syz-executor/14932: [ 519.129094][ T31] #0: ffff888056d86118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 519.138520][ T31] #1: ffffffff905920c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 519.148464][ T31] 5 locks held by kworker/u8:8/15207: [ 519.153832][ T31] 2 locks held by syz.5.3885/15254: [ 519.159039][ T31] #0: ffff88802815a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 519.168919][ T31] #1: ffffffff905920c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 519.178857][ T31] 3 locks held by syz.1.3887/15260: [ 519.184077][ T31] #0: ffffffff8f0743e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 519.192538][ T31] #1: ffff88802f558100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0x9a/0x3c0 [ 519.202187][ T31] #2: ffffffff905920c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 519.212152][ T31] 1 lock held by syz.0.3895/15284: [ 519.217245][ T31] #0: ffffffff8f0743e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 519.225684][ T31] 1 lock held by syz.6.3911/15322: [ 519.230777][ T31] #0: ffffffff8f0743e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 519.239224][ T31] 1 lock held by syz-executor/15332: [ 519.244517][ T31] #0: ffffffff8f0743e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 519.252929][ T31] 1 lock held by syz-executor/15333: [ 519.258216][ T31] #0: ffffffff8f0743e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 519.266678][ T31] 1 lock held by syz-executor/15335: [ 519.271928][ T31] #0: ffffffff8f0743e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 519.280386][ T31] 1 lock held by syz-executor/15337: [ 519.285650][ T31] #0: ffffffff8f0743e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 519.294110][ T31] 1 lock held by syz-executor/15339: [ 519.299402][ T31] #0: ffffffff8f0743e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 519.307903][ T31] 1 lock held by syz-executor/15346: [ 519.313173][ T31] #0: ffffffff8f0743e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 519.321643][ T31] 1 lock held by syz-executor/15347: [ 519.326907][ T31] #0: ffffffff8f0743e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 519.335344][ T31] 1 lock held by syz-executor/15349: [ 519.340645][ T31] #0: ffffffff8f0743e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 519.349056][ T31] 1 lock held by syz-executor/15351: [ 519.354336][ T31] #0: ffffffff8f0743e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 519.362796][ T31] 1 lock held by syz-executor/15353: [ 519.368045][ T31] #0: ffffffff8f0743e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 519.376499][ T31] 1 lock held by syz-executor/15360: [ 519.381766][ T31] #0: ffffffff8f0743e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 519.390241][ T31] 1 lock held by syz-executor/15361: [ 519.395519][ T31] #0: ffffffff8f0743e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 519.403984][ T31] 1 lock held by syz-executor/15363: [ 519.409248][ T31] #0: ffffffff8f0743e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 519.417687][ T31] 1 lock held by syz-executor/15365: [ 519.422959][ T31] #0: ffffffff8f0743e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 519.431725][ T31] [ 519.434042][ T31] ============================================= [ 519.434042][ T31] [ 519.442694][ T31] NMI backtrace for cpu 1 [ 519.442706][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 519.442728][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 519.442740][ T31] Call Trace: [ 519.442746][ T31] [ 519.442754][ T31] dump_stack_lvl+0x116/0x1f0 [ 519.442776][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 519.442802][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 519.442829][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 519.442857][ T31] watchdog+0xf3f/0x1170 [ 519.442882][ T31] ? rcu_is_watching+0x12/0xc0 [ 519.442905][ T31] ? __pfx_watchdog+0x10/0x10 [ 519.442926][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 519.442945][ T31] ? __kthread_parkme+0x19e/0x250 [ 519.442974][ T31] ? __pfx_watchdog+0x10/0x10 [ 519.442997][ T31] kthread+0x3c5/0x780 [ 519.443017][ T31] ? __pfx_kthread+0x10/0x10 [ 519.443034][ T31] ? rcu_is_watching+0x12/0xc0 [ 519.443053][ T31] ? __pfx_kthread+0x10/0x10 [ 519.443069][ T31] ret_from_fork+0x675/0x7d0 [ 519.443083][ T31] ? __pfx_kthread+0x10/0x10 [ 519.443098][ T31] ret_from_fork_asm+0x1a/0x30 [ 519.443132][ T31] [ 519.443141][ T31] Sending NMI from CPU 1 to CPUs 0: [ 519.562592][ C0] NMI backtrace for cpu 0 [ 519.562605][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 519.562626][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 519.562636][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 519.562670][ C0] Code: c7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 74 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 519.562686][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 519.562700][ C0] RAX: 00000000002ec355 RBX: 0000000000000000 RCX: ffffffff8b60b2a9 [ 519.562711][ C0] RDX: 0000000000000000 RSI: ffffffff8da2bfb6 RDI: ffffffff8bf070c0 [ 519.562722][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 519.562733][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 519.562743][ C0] R13: ffffffff8e097a00 R14: ffffffff908212d0 R15: 0000000000000000 [ 519.562754][ C0] FS: 0000000000000000(0000) GS:ffff888124a05000(0000) knlGS:0000000000000000 [ 519.562769][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.562780][ C0] CR2: 0000560e52f2bad0 CR3: 000000000e182000 CR4: 00000000003526f0 [ 519.562791][ C0] Call Trace: [ 519.562797][ C0] [ 519.562803][ C0] default_idle+0x13/0x20 [ 519.562820][ C0] default_idle_call+0x6c/0xb0 [ 519.562838][ C0] do_idle+0x38d/0x500 [ 519.562860][ C0] ? __pfx_do_idle+0x10/0x10 [ 519.562879][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 519.562900][ C0] cpu_startup_entry+0x4f/0x60 [ 519.562919][ C0] rest_init+0x16b/0x2b0 [ 519.562938][ C0] ? acpi_subsystem_init+0x133/0x180 [ 519.562960][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 519.562984][ C0] start_kernel+0x3f6/0x4e0 [ 519.563005][ C0] x86_64_start_reservations+0x18/0x30 [ 519.563027][ C0] x86_64_start_kernel+0x130/0x190 [ 519.563050][ C0] common_startup_64+0x13e/0x148 [ 519.563076][ C0] [ 523.534771][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 523.541071][ T1297] ieee802154 phy1 wpan1: encryption failed: -22