last executing test programs: 32.563407676s ago: executing program 1 (id=595): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000001c0)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x5, 0x0, 0xfffffffffffffd63) ioctl$KVM_RUN(r3, 0xae80, 0x0) 31.58318996s ago: executing program 1 (id=599): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x100) fanotify_mark(r1, 0x61, 0x40001002, r2, 0x0) 31.292425518s ago: executing program 1 (id=601): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)="9b", 0x1}], 0x1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000840)="24567efd4848f2efd063266ccaf8be0b", 0x10) r3 = openat$sndseq(0xffffff9c, 0x0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000040)={0x54, 0x1, 0x3}) 28.161736364s ago: executing program 1 (id=613): r0 = syz_open_pts(0xffffffffffffffff, 0x141201) pipe(0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) open(0x0, 0x2, 0x0) inotify_init() unlink(0x0) openat$tun(0xffffff9c, 0x0, 0x0, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000300)=0x732) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) write(r0, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) 26.025026597s ago: executing program 1 (id=619): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}}}, 0x7) 24.602017154s ago: executing program 1 (id=624): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000000340)={0x3}, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/245}, 0xfd, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}) 11.243839731s ago: executing program 3 (id=660): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1c, 0x4, 0x0, 0x0, 0x70, 0x67, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x65c}, {@rand_addr=0x64010100}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @noop, @noop, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) prctl$PR_SET_MM_MAP(0x21, 0xe, 0x0, 0xfffffffffffffc84) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='\"\x00\x00\x00\a'], 0xd) r6 = gettid() prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) tkill(r6, 0x12) memfd_secret(0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r8, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.265138684s ago: executing program 3 (id=663): preadv(0xffffffffffffffff, &(0x7f0000001980)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1, 0x2, 0x1) io_setup(0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @dev}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x810) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r3, 0x708, 0x2) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, &(0x7f0000000080)={0x0, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) 9.52991689s ago: executing program 0 (id=667): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2080, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x208) umount2(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x0) mlockall(0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220c52ebd4687636457b9822766c1bfea4e81ff23c6a4caeaf049a582a9774d3b882ef0600000000000000025d"}, 0xd8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f00000005c0)=0x18, 0x4) sendmsg$netlink(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="280000005f00010600e400004013000018003b"], 0x28}], 0x1}, 0x0) 8.871785899s ago: executing program 4 (id=669): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x38}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x3}) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/55, 0x37}], 0x2) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0), 0x10, &(0x7f00000004c0), 0x300}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xcad0420cfebab26e) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000001800), 0x100) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000040)=0x1) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r3, &(0x7f0000005080)={0x2020}, 0x2020) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[], 0x5e) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) 8.685922739s ago: executing program 3 (id=670): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000004100)=[{0x0}, {&(0x7f0000001f40)=""/179, 0xb3}], 0x2}, 0xfff}], 0x1, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 8.278997816s ago: executing program 3 (id=671): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000002800018014000400fe880000000000000000000000000001060001000a0000000800"], 0x3c}}, 0x4000000) 7.320555215s ago: executing program 4 (id=672): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) 7.161972963s ago: executing program 0 (id=674): syz_usb_connect(0x0, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="12010300a6ff0540cdabeecdb905000000010902220001000000000904000001010351000905f6fefffffff0000725"], 0x0) 6.418038147s ago: executing program 3 (id=675): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.245642186s ago: executing program 0 (id=676): sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x0, 0x25dfdbff}, 0x14}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3], 0x98}}, 0x0) 4.234074998s ago: executing program 2 (id=678): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="a46053c2c4806387f6b77e61e81feb674576edbca6813ba6b37f7b6a07ee339cba4a8ab647c73959a3ea23a53eb6df67ce108a7fd7b557718f0f229a9ff30128134acbc8c63eabdd463c4cc59b0570c78b2a50116d1691c8fb4f14172312ceb41d28a185d620a3939d2fadac93566cb2181418e43ea6e782d415e8c74ad3b9213150e7c7945daac1ee36deff4b9a67f0b2abb32ef46d34bf9a10c3f8359a57bf75ec40b21bd7da1c925acd5a19407761f8123f792dbc84674d8af2f63d2c5ca2f71da12992084ac629caf210bf820eedaee436cd1eebabbe4c72d92f3e64f87ceb3243cc6d8c60c4ac47bb4038855b9d51c80e583f2cc58d0c4ced274b023edfc7f9a0339c63a6a34ddeaafa31579785aca659ac8c9f2366cf7b1325ac1bfa5e6694eb69812eb847505be89d51337c4638dd7374f7985fb12d610124e849df935444f7c7d17b5c50fe2a2e136731a68f6b54181a2be6a9e77582a76bdf283267e55d25dc22dbd62f5a79ee1615b71f51f0592aabe138f8d3fc43c74c01e392b1baba5a9dc83247311421a4814f20c6b9c0891edd142763520d736d1356691b1fcfb95bf214b1f7dadc380f6efaddaacb22f750107f77fd5fca8b8bd6664de99707fb8fb888e26c61ce3b933217e2aa29b73306c2e0ad9c3b04c6a360e19824aec137b3194eaf18d74bd0f1ba5ea31ead7a247b9999de969a4139603dcd1c84c418d9e1cfe10cebcbe9596b71c5e3abac92168890e32a394d682da65344af7ca4187fb3ad691f2aaede7a217e7a37ebec718a2f94669d745197e2c4cc8edab763414c5a2afc61b377cfae42529c300b0ecbf157ca0575695344882cef0684234bf0bf16dc9b8e6ea09ff4e3908bca9077ddd319cc5d5e828aafd6e4f5054954da9b7a1071721a929cbd20e90503e14a61c2443a31521fa3d64136bc44755148da048c51e41cc004a98e59380818c630a74a1fcbc809a579f329f04f3281c891c7f4c37d2630230a9a8f78371f2cd2ff01ab20dfcd5f70644077b703dd05d104db799ffb9b208b6f8a71e3c5eefa4889d65a7465a886836eb2e80ec82754b6629499bad6977074fa29f40e94797d447d7cd657530e8b66743855db50a99e2186a2ca34401b982ef162185a3d66d6529c2b884e4cd19915dd7721b8a960e273b3d61eb5569d21c66221985322fd52e978092b4fa59957c2eebfc3bcd58d55db0fd3086b25f42eac19b631ee825d479e0ad0f1496ca27cbef53d1bb21990ab8529f70cc93d9bfb15a6d2e597743529818f8cb80fef080ad2ccbffdbf45d14fe2749fa5b90b0cadae70a201704a23761be1b42e1da77dcbc5a87a2c36c418314a2e15056ffceea4dfd5d46d180765eaa01982211e6f5e5f29f607de56c53902bf83b9bc05bda8ffa6a278621b3852fdcc8ac565987c0fc284dd7cfedff61b5716685890b6677a597e5d4beaf77dc205ff81858ceaca560f6ed3c5b47fe5fac666db8578650fdbf1f8c74374e90e678c484b3ed6d0f721c9356af528bbba1efefb015e633b689b81b1ed29471372080301202dfb9a4ef07bb760a45bf990f019d6ad90e20d1f87a6428dd8192f2d9b710087a2e991fc091f67f981e3d842c60dc4422250a4f7d5c2a76dd4b83d3094c796729b813b5ea3396f673eb5a9640210e0e5d0d91239eb69bd499b6e4011e1015af13f90fd8411811602b52a2e5f50a89966d17344fa420c3a65476e0fc64fe2c1c20ce81e3c594c266985ab510d0cae3e7ab5fc318fe279f1c6b328c75cc81a4d2045fef7370fc8a37de3af1e60aea446a68f51b77d98d0c72e6cd637e70ee287bdb2785b7e7020d371873b3a2afe8a97c776490911fb791a08623eec9f11ccc66886a658336e4c55383ffa77c614389023c5ddd16c17ac38bfdcd8edaab56787d25cd3c9e4ef1eef64d538103ac7be6696bae8d132bf6476e155b3ef730e34975384e7361cabed1b7be3b469d8ccbdf7a352d62aac953810ca12dc213f1819aaf0ca719d7590eaa01e8e8c619d13077a6d9150d8d87f6a9c91ff91d8a7b6ec88e911207fac90ad587d0c5744ce66bc112df9abb6f2b2bd9bcd33a3ad8ca6efb36a581bdfe77600027880fa889f72d50cb8ced625ba386ff3f94e1c1f86378e3dcb32c4eb3999b445b1c3726e99acaa8eecc6ff0904e5be39457e53f942d6c985fad5acf834495e78415aa39a4f1959119dc32274492250f6a8df9f439f149fa419e894b86870256f22e7b90325a2d0507f248c63013214eece9b5b33cac4e1c355885e5ae02e9c8ab4bebbce0901cccfe062123a433e6d7c3a4fccb5d33fc640eb22a4b228412d383b95d598e939740f1dcbe9f7110da3b55ef0ccc2d0641408367922ce4b75caa305f3cd96403d131a095306d938f742d7c966a1ff6aa01528a8682b9ec95337ca40ecf822c8c18d9919cc1e400652d33a30963c85df3f6744b4178ba7c0111ab71cb10ce6739a6b31d6bafc12b5a91e6dd630bd2b1c660948a73a0935c9f3a8d731aef881219717740ea544fed6a357fde11f0484509b079bce7dc3831b86fbc0ee70adb34aea7030576e1aa63a4183c3bfaf6969ea32da1c1d86e15ece9649ba7b5330ad4f4e5319591519249be261eb234bae15cb3feff1967d1cc473c9d691d17eb9bbe16e0a8752a73fdbf3b1f5caf78af6a3ddec898a8158bd91ab6411df037689f7b45ed68db7342cb6aea15c369a798174aab600dd96c3241c655e63dcf4586792d709f537ce134a8fe6f7ad8a7fdee1774ca8c5e676dc1ceac957e6a6ac0177dcc62906abe2903a5e5d2eca181ff3db6c30fd59e01d01023aebf36e4f1ee5ff14519c370a968b42373cf821e5c9f8d34bfe8d455bfc485772a39f493dfb63925a3f24e176d9f812e2b5338f39d6c387a0380d1f01852f24f18f84fbd40a3864d2eb0cad35957933b535d821c9f4921d3a5a3a9eda88724e011d3b43fc44ba3809dbbf3e93eaf4ac9c963e8942099873b7e4de8c1f4c1e0053be4f2813af96b948c175cddbb7958720a932021c102578fc91abf4055dfe9f7425512937249a2546bc37fd264da4cd07b3fb5ababea2b9290c5302f0764bed9526d4117e1d547da6167b077f022227254f7a4c31774f8c3257b8cd4bbf2c6e2bbd828162483badea791878a5488917602936d321f679b74a1c8d6af2ce8743639f8b6606aef48cc4a6a50d76ac07f814488ea9cc3feaa8d07966a56e84b9598dad079b27d8978f138912a74eae03219069e57712a39d62fcfb544c89df0597dc35ecfdd025cfe55061c5a739cea46f2a4362be2c6b46be44125251614c2021f4c750903d7a017891d4c56b7495858403ab3ca91a2c01e5546fe408e6cdf42975903e15baf10119944efc529ac4911cd7f6154d0933b31a09e3c8119b597b18a2a6a5f2f08dbdd9c3e701dc4b7377a5dab5a815e9e78e03107896531bad2f029c9efdb6d50eef500978606d5c05906f887788bf35cacc6948e6056c9dfd1ee69aee260b1eb0310a6da161401ff2ff0861dcb34c78ed3fde8ad602a3fafe061ac2c43a16d7987f706ba8f31b2127fa3df204fcc101803069367ba682a33ad0245e72ab6a9d25a77d7fda6f9d7381cf483f845a911b05b90edbbc4ff91e2acaeeebe7508c23141a79292602ff2f1a1a63f50a00051dc3003b164dbaa6c53ad0df5a1eb1b2dd116a5b10e04a5de8ec8e585eece83559364e4d771e192068bcecf727a3f479a47ebe5c2578515be1dfe0d6dea81f77ec7e79a252a26efdd8cae982ab5bf2ea57429786061691fda7158d314e7bc76ee783abf833fd85db65bec278c316f9a559a31f97dfd0b7293d0f59cb99db2840bf6d81a634e8047fb97a05e32ed8a09b6ecb83142bbeb3e12333853f90ccf1431c44282d9c1996669d1e92732db306eb711313859ac1d429f09ecc0ecebe1ef5d57a52a97cbfaae3916c149064c6167bde55fdd77fb1822684c561f673d8bfdde1edb1d9d437a7ba5da0f0fa06c106bdda56b2a488f434f541a7412b1721bb71839dcb6595b790f4ceb65d7d03807006b4124fc4e1bc5a3152cc33e527e9c77ef1c7ba3bd57686b8e2a2451c0565880f0df1c662d78ac668ce6bde7d610d1a071d42e1bb5879c5db3be676bc0ccba6ef9dbc63c903184aa7cc7c3914c60e1a1e559e01db", 0xb89}], 0x1}, 0x10) recvmmsg(r2, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000d00), 0x1, 0x0, 0xffffffffffffff4c}, 0x8000000}], 0x1, 0x0, 0x0) 3.963792078s ago: executing program 2 (id=679): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}}}, 0x7) 3.842846602s ago: executing program 2 (id=680): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000004100)=[{0x0}, {&(0x7f0000001f40)=""/179, 0xb3}], 0x2}, 0xfff}], 0x1, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 3.589480164s ago: executing program 2 (id=681): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000295f6af6207c2b0993c14745337140453e8dbd6e9ab8990d197bf8376aeeb35cace3f778368ddc5761952bddcf4943019"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x0) 3.229060546s ago: executing program 4 (id=682): setregid(0x0, 0xee01) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) getresgid(0x0, &(0x7f0000000100), &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x101a02, 0x0) write$tcp_congestion(r0, &(0x7f0000000140)='hybla\x00', 0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 2.458915834s ago: executing program 4 (id=683): syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) 2.210991064s ago: executing program 2 (id=684): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000002800018014000400fe880000000000000000000000000001060001000a0000000800"], 0x3c}}, 0x4000000) 2.153283435s ago: executing program 4 (id=685): syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7ca1, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d80)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={0x0}}, 0x0) 1.052583335s ago: executing program 3 (id=686): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$revoke(0x6, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) 980.744096ms ago: executing program 0 (id=687): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001680)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001200)="fe9184f4969c33c405f303640bc769941301db88020521fd8a01377c8307d455b4d0f446847cf4c2e150", 0x2a}], 0x1, &(0x7f0000001640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x86}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000006400)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000140)=""/40, 0x28}], 0x1}}], 0x1, 0x0, 0x0) 754.953041ms ago: executing program 0 (id=688): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg(r1, 0x0, 0x10) recvmmsg(r2, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000d00), 0x1, 0x0, 0xffffffffffffff4c}, 0x8000000}], 0x1, 0x0, 0x0) 748.824272ms ago: executing program 4 (id=689): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1c, 0x4, 0x0, 0x0, 0x70, 0x67, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x65c}, {@rand_addr=0x64010100}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @noop, @noop, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) prctl$PR_SET_MM_MAP(0x21, 0xe, 0x0, 0xfffffffffffffc84) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='\"\x00\x00\x00\a'], 0xd) r6 = gettid() prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) tkill(r6, 0x12) r7 = memfd_secret(0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r9, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x14, r10, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40004) ftruncate(r7, 0x1) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180), 0x8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 635.754351ms ago: executing program 2 (id=690): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1f}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}}, 0x0) 0s ago: executing program 0 (id=691): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) kernel console output (not intermixed with test programs): 0 descriptor too short (expected 301, got 45) [ 255.540092][ T5277] usb 4-1: config 0 interface 92 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 255.675693][ T5323] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 255.722625][ T5277] usb 4-1: config 0 interface 92 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 255.745560][ T5323] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 255.772613][ T5323] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 255.793931][ T5277] usb 4-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice= d.81 [ 255.811407][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.834566][ T5323] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.865888][ T5277] usb 4-1: Product: syz [ 255.871019][ T5277] usb 4-1: Manufacturer: syz [ 255.876908][ T5277] usb 4-1: SerialNumber: syz [ 255.881878][ T5323] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 255.894155][ T5323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.911896][ T5277] usb 4-1: config 0 descriptor?? [ 255.954241][ T6267] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 256.215243][ T5323] usb 2-1: usb_control_msg returned -32 [ 256.245557][ T5323] usbtmc 2-1:16.0: can't read capabilities [ 256.288416][ T5277] usb 4-1: USB disconnect, device number 12 [ 256.351719][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.235'. [ 256.621073][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 256.621098][ T29] audit: type=1400 audit(1726893329.806:301): avc: denied { bind } for pid=6288 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 257.029171][ T29] audit: type=1400 audit(1726893330.216:302): avc: denied { write } for pid=6264 comm="syz.1.228" name="usbtmc0" dev="devtmpfs" ino=2451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 257.055668][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 257.885702][ T6295] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 257.960885][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 257.969234][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.980119][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 257.993713][ T25] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 258.003358][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.018399][ T25] usb 5-1: config 0 descriptor?? [ 258.042364][ T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 258.323091][ T6293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.397731][ T6293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.426656][ T9] usb 2-1: USB disconnect, device number 8 [ 258.429061][ T6293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.480236][ T6293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.616074][ T5277] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 258.632379][ T5275] usb 5-1: USB disconnect, device number 8 [ 258.816152][ T5277] usb 3-1: Using ep0 maxpacket: 16 [ 258.824365][ T5277] usb 3-1: config 0 has no interfaces? [ 258.839652][ T5277] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 258.853027][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.861925][ T5277] usb 3-1: Product: syz [ 258.871704][ T5277] usb 3-1: Manufacturer: syz [ 258.914619][ T5277] usb 3-1: SerialNumber: syz [ 258.933511][ T5277] usb 3-1: config 0 descriptor?? [ 258.938874][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 259.146465][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 259.157510][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.179911][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 259.203658][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 259.242591][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 259.253279][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 259.292994][ T5275] usb 3-1: USB disconnect, device number 9 [ 259.295520][ T9] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 259.331052][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.401179][ T9] hub 1-1:1.0: bad descriptor, ignoring hub [ 259.426390][ T29] audit: type=1400 audit(1726893332.606:303): avc: denied { ioctl } for pid=6326 comm="syz.4.247" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=14585 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 259.455437][ T9] hub 1-1:1.0: probe with driver hub failed with error -5 [ 259.502023][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 259.524633][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 259.552580][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 259.574685][ T29] audit: type=1326 audit(1726893332.756:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71bef7def9 code=0x7ffc0000 [ 259.582885][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 259.637221][ T29] audit: type=1326 audit(1726893332.786:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71bef7def9 code=0x7ffc0000 [ 259.661333][ T29] audit: type=1326 audit(1726893332.786:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f71bef7def9 code=0x7ffc0000 [ 259.701770][ T29] audit: type=1326 audit(1726893332.786:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71bef7def9 code=0x7ffc0000 [ 259.760096][ T29] audit: type=1326 audit(1726893332.786:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71bef7def9 code=0x7ffc0000 [ 259.876220][ T6331] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 260.152307][ T29] audit: type=1400 audit(1726893333.336:309): avc: denied { bind } for pid=6334 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 260.172535][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.220165][ T6337] netlink: 'syz.1.251': attribute type 10 has an invalid length. [ 260.273576][ T29] audit: type=1400 audit(1726893333.386:310): avc: denied { setopt } for pid=6334 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 260.330084][ T6337] team0: Failed to send options change via netlink (err -105) [ 260.351102][ T6337] team0: Port device netdevsim0 added [ 260.373121][ T12] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 260.393950][ T6343] netlink: 'syz.1.251': attribute type 10 has an invalid length. [ 260.454581][ T6345] overlayfs: overlapping lowerdir path [ 260.509523][ T6343] team0: Failed to send options change via netlink (err -105) [ 260.544137][ T6343] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 260.598938][ T6343] team0: Port device netdevsim0 removed [ 260.659355][ T6343] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 260.688313][ T6337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.251'. [ 261.047747][ T5287] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 261.601660][ T5275] usb 1-1: USB disconnect, device number 8 [ 261.688603][ T5287] usb 5-1: Using ep0 maxpacket: 16 [ 261.710725][ T5287] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.849444][ T5287] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 262.070886][ T5287] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 262.134974][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.229977][ T5287] usb 5-1: config 0 descriptor?? [ 262.309339][ T5287] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 262.568149][ T6353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.603066][ T6353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.624707][ T6353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.672556][ T6353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.753050][ T5287] usb 5-1: USB disconnect, device number 9 [ 262.995916][ T6382] overlayfs: overlapping lowerdir path [ 263.193315][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 263.193339][ T29] audit: type=1400 audit(1726893336.376:312): avc: denied { write } for pid=6385 comm="syz.0.269" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 263.945622][ T5322] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 264.215411][ T5322] usb 3-1: Using ep0 maxpacket: 8 [ 264.252461][ T5322] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.274395][ T5322] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 264.300122][ T5322] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 264.336388][ T5322] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 264.373824][ T5322] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 264.410781][ T5322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.478681][ T5322] hub 3-1:1.0: bad descriptor, ignoring hub [ 264.505096][ T5322] hub 3-1:1.0: probe with driver hub failed with error -5 [ 264.542245][ T5322] cdc_wdm 3-1:1.0: skipping garbage [ 264.569578][ T5322] cdc_wdm 3-1:1.0: skipping garbage [ 264.602769][ T5322] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 264.622101][ T5322] cdc_wdm 3-1:1.0: Unknown control protocol [ 265.013930][ T6417] overlayfs: overlapping lowerdir path [ 265.146364][ T5275] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 265.359205][ T5275] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 265.380542][ T5275] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.405628][ T5277] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 265.435227][ T5275] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 265.450588][ T5275] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.470795][ T5275] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.507105][ T5275] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 265.533042][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 265.545694][ T5275] usb 1-1: Product: syz [ 265.550089][ T5275] usb 1-1: Manufacturer: syz [ 265.587801][ T5275] cdc_wdm 1-1:1.0: skipping garbage [ 265.593224][ T5275] cdc_wdm 1-1:1.0: skipping garbage [ 265.614205][ T5275] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 265.621310][ T5275] cdc_wdm 1-1:1.0: Unknown control protocol [ 265.638213][ T5277] usb 2-1: Using ep0 maxpacket: 16 [ 265.657617][ T5277] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.675216][ T5277] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 265.696138][ T5277] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 265.716199][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.745801][ T5277] usb 2-1: config 0 descriptor?? [ 265.777979][ T5277] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 265.894427][ T5277] usb 1-1: USB disconnect, device number 9 [ 266.016198][ T6420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.039549][ T6420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.054285][ T6420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.071812][ T6420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.113062][ T5275] usb 2-1: USB disconnect, device number 9 [ 266.204965][ T6436] Bluetooth: MGMT ver 1.23 [ 266.846774][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.852568][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 267.859524][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 267.866094][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 267.871236][ T941] usb 3-1: USB disconnect, device number 10 [ 267.872723][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 267.884739][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 268.339566][ T6459] overlayfs: overlapping lowerdir path [ 268.539438][ T5275] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 268.769206][ T5275] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.798362][ T5275] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 268.856312][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.907696][ T5275] usb 5-1: config 0 descriptor?? [ 268.931129][ T5275] pwc: Askey VC010 type 2 USB webcam detected. [ 269.184593][ T5275] pwc: send_video_command error -71 [ 269.218106][ T5275] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 269.260921][ T5275] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 269.314975][ T5275] usb 5-1: USB disconnect, device number 10 [ 270.246656][ T5275] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 270.750656][ T5275] usb 4-1: Using ep0 maxpacket: 16 [ 270.805463][ T5275] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.825447][ T5275] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 270.991631][ T5275] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 271.025458][ T941] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 271.035535][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.065757][ T5275] usb 4-1: config 0 descriptor?? [ 271.095929][ T5275] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 271.347351][ T941] usb 5-1: device descriptor read/all, error -71 [ 271.356720][ T6481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.426717][ T6481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.478447][ T6481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.540435][ T6481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.655550][ T5277] usb 4-1: USB disconnect, device number 13 [ 271.788755][ T6494] cgroup: fork rejected by pids controller in /syz1 [ 271.855717][ T941] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 272.041338][ T941] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 272.060609][ T941] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.077827][ T941] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 272.105887][ T941] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.144143][ T941] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 272.163838][ T941] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 272.178648][ T941] usb 5-1: Product: syz [ 272.214551][ T941] usb 5-1: Manufacturer: syz [ 272.242140][ T941] cdc_wdm 5-1:1.0: skipping garbage [ 272.255838][ T941] cdc_wdm 5-1:1.0: skipping garbage [ 272.282243][ T941] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 272.285681][ T5275] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 272.309989][ T941] cdc_wdm 5-1:1.0: Unknown control protocol [ 272.496115][ T5275] usb 1-1: Using ep0 maxpacket: 8 [ 272.524841][ T5275] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.557607][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 272.564302][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 272.566095][ T5275] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 272.570779][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 272.586092][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 272.588245][ T5275] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 272.592291][ C0] hrtimer: interrupt took 34731846 ns [ 272.608459][ T5275] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 272.608860][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.620353][ T5275] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 272.626066][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 272.635244][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.641627][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 272.641746][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.642144][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 272.668633][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 272.675272][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 272.682089][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 272.688767][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 272.695405][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 272.701764][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 272.708412][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 272.714940][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 272.720046][ T5275] hub 1-1:1.0: bad descriptor, ignoring hub [ 272.721559][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 272.756147][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 272.765008][ T5322] usb 5-1: USB disconnect, device number 12 [ 272.832878][ T5275] hub 1-1:1.0: probe with driver hub failed with error -5 [ 272.874092][ T5275] cdc_wdm 1-1:1.0: skipping garbage [ 272.890910][ T5275] cdc_wdm 1-1:1.0: skipping garbage [ 272.922783][ T5275] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 272.950933][ T5275] cdc_wdm 1-1:1.0: Unknown control protocol [ 273.048686][ T4228] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.250587][ T4228] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.295952][ T25] usb 1-1: USB disconnect, device number 10 [ 273.376594][ T4228] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.508546][ T4228] bond0: (slave netdevsim0): Releasing backup interface [ 273.541731][ T4228] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.105906][ T941] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 275.064097][ T941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.115980][ T941] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 275.142083][ T4228] bridge_slave_1: left allmulticast mode [ 275.176563][ T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.193868][ T4228] bridge_slave_1: left promiscuous mode [ 275.205772][ T4228] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.262785][ T941] usb 5-1: config 0 descriptor?? [ 275.278606][ T4228] bridge_slave_0: left allmulticast mode [ 275.284326][ T4228] bridge_slave_0: left promiscuous mode [ 275.287761][ T941] pwc: Askey VC010 type 2 USB webcam detected. [ 275.367705][ T4228] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.490379][ T941] pwc: send_video_command error -71 [ 275.504087][ T941] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 275.558197][ T941] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 275.635782][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 275.656290][ T941] usb 5-1: USB disconnect, device number 13 [ 275.875726][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 275.890318][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.908404][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.920585][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.932947][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.961048][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.971263][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 276.002460][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 276.015102][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.023773][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.031587][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.058006][ T9] usb 1-1: config 0 descriptor?? [ 276.090835][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 276.285845][ T5287] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 276.348558][ T6535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.399011][ T6535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.443288][ T6535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.490232][ T5287] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.501699][ T6535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.540170][ T5287] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 276.559738][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.592984][ T5275] usb 1-1: USB disconnect, device number 11 [ 276.660054][ T5287] usb 5-1: config 0 descriptor?? [ 276.722171][ T5287] pwc: Askey VC010 type 2 USB webcam detected. [ 277.117265][ T5287] pwc: recv_control_msg error -32 req 02 val 2b00 [ 277.144683][ T5287] pwc: recv_control_msg error -32 req 02 val 2700 [ 277.157224][ T5287] pwc: recv_control_msg error -32 req 02 val 2c00 [ 277.208473][ T5287] pwc: recv_control_msg error -32 req 04 val 1000 [ 277.229608][ T5287] pwc: recv_control_msg error -32 req 04 val 1300 [ 277.256385][ T5287] pwc: recv_control_msg error -32 req 04 val 1400 [ 277.277033][ T5287] pwc: recv_control_msg error -32 req 02 val 2000 [ 277.319613][ T5287] pwc: recv_control_msg error -32 req 02 val 2100 [ 277.354050][ T5287] pwc: recv_control_msg error -32 req 04 val 1500 [ 277.374201][ T5287] pwc: recv_control_msg error -32 req 02 val 2500 [ 277.397264][ T5287] pwc: recv_control_msg error -32 req 02 val 2400 [ 277.426940][ T5287] pwc: recv_control_msg error -32 req 02 val 2600 [ 277.637173][ T5287] pwc: recv_control_msg error -71 req 02 val 2800 [ 277.665992][ T5287] pwc: recv_control_msg error -71 req 04 val 1100 [ 277.684966][ T5287] pwc: recv_control_msg error -71 req 04 val 1200 [ 277.712301][ T5287] pwc: Registered as video71. [ 277.765846][ T5287] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 277.833989][ T5287] usb 5-1: USB disconnect, device number 14 [ 277.982573][ T4228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.033544][ T4228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.064950][ T4228] bond0 (unregistering): Released all slaves [ 278.078196][ T5240] Bluetooth: hci3: command tx timeout [ 278.875498][ T5277] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 279.107150][ T5277] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 279.133019][ T5277] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.184440][ T5277] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 279.250863][ T5277] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.303701][ T5277] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 279.341289][ T5277] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 279.363000][ T5277] usb 5-1: Product: syz [ 279.375391][ T5277] usb 5-1: Manufacturer: syz [ 279.386081][ T5276] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 279.412107][ T5277] cdc_wdm 5-1:1.0: skipping garbage [ 279.427737][ T5277] cdc_wdm 5-1:1.0: skipping garbage [ 279.464396][ T5277] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 279.557735][ T5277] cdc_wdm 5-1:1.0: Unknown control protocol [ 280.155704][ T5240] Bluetooth: hci3: command tx timeout [ 280.261159][ T941] usb 5-1: USB disconnect, device number 15 [ 280.456280][ T5276] usb 1-1: Using ep0 maxpacket: 8 [ 280.491924][ T5276] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.550612][ T5276] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 280.590987][ T5276] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 280.608350][ T4228] hsr_slave_0: left promiscuous mode [ 280.610640][ T5276] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 280.626532][ T4228] hsr_slave_1: left promiscuous mode [ 280.640570][ T5276] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 280.644639][ T4228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.651469][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.672542][ T4228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.685125][ T4228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.710930][ T5276] hub 1-1:1.0: bad descriptor, ignoring hub [ 280.716949][ T4228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.732723][ T5276] hub 1-1:1.0: probe with driver hub failed with error -5 [ 280.742866][ T5276] cdc_wdm 1-1:1.0: skipping garbage [ 280.755173][ T5276] cdc_wdm 1-1:1.0: skipping garbage [ 280.764678][ T5276] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 280.778084][ T5276] cdc_wdm 1-1:1.0: Unknown control protocol [ 280.805748][ T4228] veth1_macvtap: left promiscuous mode [ 280.816485][ T5277] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 280.826060][ T4228] veth0_macvtap: left promiscuous mode [ 280.831914][ T4228] veth1_vlan: left promiscuous mode [ 280.849824][ T4228] veth0_vlan: left promiscuous mode [ 281.019573][ T5277] usb 4-1: Using ep0 maxpacket: 16 [ 281.048037][ T5277] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.067232][ T5277] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 281.106528][ T5277] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 281.136113][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.208646][ T5277] usb 4-1: config 0 descriptor?? [ 281.269612][ T5277] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 281.615829][ T6594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.626025][ T6594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.647356][ T6594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.665192][ T6594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.738659][ T5287] usb 4-1: USB disconnect, device number 14 [ 281.885666][ T5285] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 282.057506][ T5285] usb 5-1: device descriptor read/64, error -71 [ 282.060837][ T6616] syz.2.338 uses obsolete (PF_INET,SOCK_PACKET) [ 282.236261][ T5240] Bluetooth: hci3: command tx timeout [ 282.335439][ T5285] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 282.406897][ T5240] Bluetooth: hci1: command 0x0406 tx timeout [ 282.416226][ T5276] usb 1-1: USB disconnect, device number 12 [ 282.538534][ T5285] usb 5-1: device descriptor read/64, error -71 [ 282.593829][ T6623] TCP: out of memory -- consider tuning tcp_mem [ 282.666172][ T5285] usb usb5-port1: attempt power cycle [ 282.795550][ T5277] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 282.804933][ T4228] team0 (unregistering): Port device team_slave_1 removed [ 282.890928][ T4228] team0 (unregistering): Port device team_slave_0 removed [ 283.025980][ T5277] usb 4-1: config 0 interface 0 has no altsetting 0 [ 283.033693][ T5277] usb 4-1: New USB device found, idVendor=0e41, idProduct=4150, bcdDevice=1f.c8 [ 283.047197][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.058987][ T5277] usb 4-1: config 0 descriptor?? [ 283.085194][ T5277] snd_usb_toneport 4-1:0.0: Line 6 POD Studio UX1 found [ 283.085560][ T5285] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 283.163207][ T5285] usb 5-1: device descriptor read/8, error -71 [ 283.302565][ T5277] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 283.314972][ T5277] snd_usb_toneport 4-1:0.0: Line 6 POD Studio UX1 now disconnected [ 283.330812][ T5277] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 283.441107][ T5285] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 283.480249][ T5285] usb 5-1: device descriptor read/8, error -71 [ 283.508740][ T5277] usb 4-1: USB disconnect, device number 15 [ 283.615919][ T5285] usb usb5-port1: unable to enumerate USB device [ 284.135205][ T6538] chnl_net:caif_netlink_parms(): no params data found [ 284.349782][ T5240] Bluetooth: hci3: command tx timeout [ 284.478019][ T5240] Bluetooth: hci1: command 0x0406 tx timeout [ 285.317953][ T29] audit: type=1400 audit(1726893358.506:313): avc: denied { create } for pid=6638 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 285.384789][ T29] audit: type=1400 audit(1726893358.526:314): avc: denied { connect } for pid=6638 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 285.407234][ T29] audit: type=1400 audit(1726893358.556:315): avc: denied { write } for pid=6638 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 285.511719][ T29] audit: type=1400 audit(1726893358.696:316): avc: denied { read } for pid=6638 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 285.812713][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.861120][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.876909][ T6538] bridge_slave_0: entered allmulticast mode [ 285.948255][ T6538] bridge_slave_0: entered promiscuous mode [ 286.029186][ T6538] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.072124][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.085672][ T6538] bridge_slave_1: entered allmulticast mode [ 286.102217][ T6538] bridge_slave_1: entered promiscuous mode [ 286.472102][ T6538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.599219][ T6538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.685764][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 286.925664][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 286.993935][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.039711][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 287.086714][ T6538] team0: Port device team_slave_0 added [ 287.128597][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 287.172736][ T6538] team0: Port device team_slave_1 added [ 287.205400][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.268741][ T9] usb 5-1: config 0 descriptor?? [ 287.338450][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 287.490327][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.508060][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.622883][ T6671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.667410][ T6538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.696096][ T6671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.750239][ T6671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.763322][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.783408][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.811991][ T6538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.824028][ T6671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.880287][ T25] usb 5-1: USB disconnect, device number 20 [ 288.178007][ T6538] hsr_slave_0: entered promiscuous mode [ 288.198198][ T6538] hsr_slave_1: entered promiscuous mode [ 288.207045][ T6538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.216493][ T6538] Cannot create hsr debugfs directory [ 290.237586][ T5276] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 290.495670][ T5276] usb 3-1: device descriptor read/64, error -71 [ 290.802881][ T6710] netlink: 52 bytes leftover after parsing attributes in process `syz.3.357'. [ 290.812459][ T5276] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 291.035775][ T5276] usb 3-1: device descriptor read/64, error -71 [ 291.171159][ T5276] usb usb3-port1: attempt power cycle [ 291.495618][ T5287] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 291.606602][ T5276] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 291.635842][ T5285] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 291.650677][ T5276] usb 3-1: device descriptor read/8, error -71 [ 291.678499][ T5287] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.705682][ T6538] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 291.715999][ T5287] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 291.731669][ T6538] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 291.746725][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.768143][ T5287] usb 4-1: config 0 descriptor?? [ 291.791443][ T6538] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 291.802275][ T5287] pwc: Askey VC010 type 2 USB webcam detected. [ 291.834785][ T6538] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 291.845700][ T5285] usb 5-1: Using ep0 maxpacket: 16 [ 291.859481][ T5285] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.883972][ T5285] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 291.950978][ T5285] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 291.965480][ T5276] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 291.993936][ T5287] pwc: send_video_command error -71 [ 292.000393][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.009457][ T5287] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 292.018757][ T5276] usb 3-1: device descriptor read/8, error -71 [ 292.045765][ T5287] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 292.063600][ T5285] usb 5-1: config 0 descriptor?? [ 292.084267][ T5285] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 292.093249][ T5287] usb 4-1: USB disconnect, device number 16 [ 292.158215][ T5276] usb usb3-port1: unable to enumerate USB device [ 292.353611][ T6732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.411491][ T6732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.443275][ T6538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.457549][ T6732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.518832][ T6732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.580820][ T6538] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.624677][ T5285] usb 5-1: USB disconnect, device number 21 [ 292.677524][ T1917] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.684851][ T1917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.717728][ T5287] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 292.864223][ T1917] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.871510][ T1917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.938429][ T5287] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.974069][ T5287] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 293.065475][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.107260][ T5287] usb 4-1: config 0 descriptor?? [ 293.133881][ T5287] pwc: Askey VC010 type 2 USB webcam detected. [ 293.563862][ T5287] pwc: recv_control_msg error -32 req 02 val 2b00 [ 293.607414][ T5287] pwc: recv_control_msg error -32 req 02 val 2700 [ 293.657494][ T5287] pwc: recv_control_msg error -32 req 02 val 2c00 [ 293.686779][ T5287] pwc: recv_control_msg error -32 req 04 val 1000 [ 293.706620][ T5287] pwc: recv_control_msg error -32 req 04 val 1300 [ 293.731912][ T5287] pwc: recv_control_msg error -32 req 04 val 1400 [ 293.760627][ T5287] pwc: recv_control_msg error -32 req 02 val 2000 [ 293.791230][ T5287] pwc: recv_control_msg error -32 req 02 val 2100 [ 293.840642][ T5287] pwc: recv_control_msg error -32 req 04 val 1500 [ 293.866907][ T5287] pwc: recv_control_msg error -32 req 02 val 2500 [ 293.896922][ T5287] pwc: recv_control_msg error -32 req 02 val 2400 [ 293.924195][ T5287] pwc: recv_control_msg error -32 req 02 val 2600 [ 294.165772][ T5287] pwc: recv_control_msg error -71 req 02 val 2800 [ 294.194866][ T5287] pwc: recv_control_msg error -71 req 04 val 1100 [ 294.214693][ T5287] pwc: recv_control_msg error -71 req 04 val 1200 [ 294.322366][ T5287] pwc: Registered as video71. [ 295.186286][ T5287] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 295.249062][ T5287] usb 4-1: USB disconnect, device number 17 [ 295.401841][ T6538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.927816][ T6538] veth0_vlan: entered promiscuous mode [ 296.062487][ T6538] veth1_vlan: entered promiscuous mode [ 296.273185][ T6786] netlink: 52 bytes leftover after parsing attributes in process `syz.0.371'. [ 296.447314][ T6538] veth0_macvtap: entered promiscuous mode [ 296.501389][ T6538] veth1_macvtap: entered promiscuous mode [ 296.647561][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.705460][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.755470][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.854436][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.923356][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.965554][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.037740][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.089661][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.158174][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.277623][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.319024][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.345453][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.375489][ T5275] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 297.386470][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.423133][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.465489][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.465513][ T25] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 297.495423][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.538512][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.572711][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.585638][ T5275] usb 1-1: device descriptor read/64, error -71 [ 297.634672][ T6538] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.653198][ T6538] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.664169][ T6538] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.680602][ T6538] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.725633][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 297.751755][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.791100][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 297.815612][ T5285] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 297.865771][ T5275] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 297.908800][ T25] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 298.038244][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.068573][ T5285] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 298.091464][ T5275] usb 1-1: device descriptor read/64, error -71 [ 298.207826][ T5285] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.340921][ T5275] usb usb1-port1: attempt power cycle [ 298.367523][ T25] usb 5-1: config 0 descriptor?? [ 298.450377][ T5285] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 298.626114][ T5285] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.655222][ T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 298.730315][ T5285] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 298.757595][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 298.766557][ T5285] usb 4-1: Product: syz [ 298.770809][ T5285] usb 4-1: Manufacturer: syz [ 298.790791][ T6801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.801749][ T5285] cdc_wdm 4-1:1.0: skipping garbage [ 298.836543][ T5285] cdc_wdm 4-1:1.0: skipping garbage [ 298.847486][ T6801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.869363][ T5285] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 298.885935][ T5285] cdc_wdm 4-1:1.0: Unknown control protocol [ 298.898188][ T5275] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 298.913169][ T6801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.933465][ T2894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.954506][ T6801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.976584][ T5275] usb 1-1: device descriptor read/8, error -71 [ 298.995380][ T2894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.049971][ T5276] usb 5-1: USB disconnect, device number 22 [ 299.073526][ C1] wdm_int_callback: 142 callbacks suppressed [ 299.073560][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 299.086244][ C1] wdm_int_callback: 142 callbacks suppressed [ 299.086272][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 299.098650][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 299.105315][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 299.111729][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 299.118384][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 299.124895][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 299.131559][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 299.138118][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 299.144781][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 299.151187][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 299.157838][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 299.164303][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 299.170953][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 299.177337][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 299.183991][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 299.190454][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 299.197193][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 299.203552][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 299.210209][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 299.234856][ T1917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.254063][ T5285] usb 4-1: USB disconnect, device number 18 [ 299.254141][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 299.285024][ T1917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.376126][ T5275] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 299.407491][ T5275] usb 1-1: device descriptor read/8, error -71 [ 299.530347][ T5275] usb usb1-port1: unable to enumerate USB device [ 299.875697][ T5275] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 300.053244][ T6835] netlink: 5312 bytes leftover after parsing attributes in process `syz.1.382'. [ 300.062648][ T6835] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 301.018961][ T5275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.050520][ T5275] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 301.106959][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.155053][ T5275] usb 3-1: config 0 descriptor?? [ 301.162040][ T6841] netlink: 52 bytes leftover after parsing attributes in process `syz.1.384'. [ 301.178033][ T5275] pwc: Askey VC010 type 2 USB webcam detected. [ 301.418168][ T5275] pwc: send_video_command error -71 [ 301.440355][ T5275] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 301.470474][ T5275] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 301.562658][ T5275] usb 3-1: USB disconnect, device number 15 [ 302.298064][ T5323] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 303.245709][ T5323] usb 3-1: device descriptor read/all, error -71 [ 303.716039][ T25] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 303.905905][ T941] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 303.956268][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 303.990571][ T6882] netlink: 5312 bytes leftover after parsing attributes in process `syz.2.394'. [ 304.000498][ T6882] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 304.082637][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.337615][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.592977][ T25] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 304.725470][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.090473][ T25] usb 4-1: config 0 descriptor?? [ 305.110860][ T941] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 305.142939][ T941] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.326669][ T5276] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 305.699754][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.776348][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.836931][ T5276] usb 5-1: device descriptor read/64, error -71 [ 306.005917][ T941] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 306.015969][ T941] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.036239][ T941] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 306.056347][ T941] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 306.064433][ T941] usb 1-1: Product: syz [ 306.072797][ T941] usb 1-1: Manufacturer: syz [ 306.101766][ T941] cdc_wdm 1-1:1.0: skipping garbage [ 306.105736][ T5276] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 306.115461][ T941] cdc_wdm 1-1:1.0: skipping garbage [ 306.124547][ T941] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 306.130948][ T941] cdc_wdm 1-1:1.0: Unknown control protocol [ 306.146138][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 306.176868][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 306.229777][ T25] usb 4-1: USB disconnect, device number 19 [ 306.354228][ C0] wdm_int_callback: 170 callbacks suppressed [ 306.354264][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 306.355537][ T5276] usb 5-1: device descriptor read/64, error -71 [ 306.360312][ C0] wdm_int_callback: 170 callbacks suppressed [ 306.360335][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 306.360706][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 306.391966][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 306.398455][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 306.405111][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 306.411522][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 306.418178][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 306.424562][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 306.431223][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 306.437945][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 306.444595][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 306.450982][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 306.457634][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 306.463998][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 306.470651][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 306.477003][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 306.483662][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 306.490013][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 306.496657][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 306.506078][ T5276] usb usb5-port1: attempt power cycle [ 306.529392][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 306.538328][ T5323] usb 1-1: USB disconnect, device number 17 [ 306.935806][ T5276] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 307.059161][ T5276] usb 5-1: device descriptor read/8, error -71 [ 307.525536][ T5276] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 307.943400][ T5276] usb 5-1: device descriptor read/8, error -71 [ 308.078149][ T5276] usb usb5-port1: unable to enumerate USB device [ 308.086506][ T941] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 308.340533][ T941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.351003][ T941] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 308.360302][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.408888][ T941] usb 4-1: config 0 descriptor?? [ 308.456965][ T941] pwc: Askey VC010 type 2 USB webcam detected. [ 309.846462][ T5235] Bluetooth: hci0: command 0x0406 tx timeout [ 309.853392][ T5235] Bluetooth: hci2: command 0x0406 tx timeout [ 310.376001][ T941] pwc: send_video_command error -71 [ 310.389588][ T941] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 310.398248][ T941] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 310.417735][ T941] usb 4-1: USB disconnect, device number 20 [ 311.235469][ T5276] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 311.439865][ T5276] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.514855][ T5276] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 311.572151][ T5276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.619836][ T5276] usb 4-1: config 0 descriptor?? [ 311.664696][ T5276] pwc: Askey VC010 type 2 USB webcam detected. [ 312.070555][ T5276] pwc: recv_control_msg error -32 req 02 val 2b00 [ 312.146576][ T5276] pwc: recv_control_msg error -32 req 02 val 2700 [ 312.177265][ T5276] pwc: recv_control_msg error -32 req 02 val 2c00 [ 312.210821][ T5276] pwc: recv_control_msg error -32 req 04 val 1000 [ 312.256976][ T5276] pwc: recv_control_msg error -32 req 04 val 1300 [ 312.275460][ T941] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 312.289863][ T5276] pwc: recv_control_msg error -32 req 04 val 1400 [ 312.306328][ T5276] pwc: recv_control_msg error -32 req 02 val 2000 [ 312.328077][ T5276] pwc: recv_control_msg error -32 req 02 val 2100 [ 312.362250][ T5276] pwc: recv_control_msg error -32 req 04 val 1500 [ 312.390981][ T5276] pwc: recv_control_msg error -32 req 02 val 2500 [ 312.525632][ T941] usb 2-1: Using ep0 maxpacket: 16 [ 312.548337][ T941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.688663][ T5276] pwc: recv_control_msg error -71 req 02 val 2400 [ 312.775004][ T5276] pwc: recv_control_msg error -71 req 02 val 2600 [ 312.896048][ T5276] pwc: recv_control_msg error -71 req 02 val 2900 [ 313.012936][ T5276] pwc: recv_control_msg error -71 req 02 val 2800 [ 313.199175][ T5276] pwc: recv_control_msg error -71 req 04 val 1100 [ 313.413661][ T6967] syz.2.410 (6967): drop_caches: 2 [ 313.419623][ T6967] syz.2.410 (6967): drop_caches: 2 [ 313.437720][ T5276] pwc: recv_control_msg error -71 req 04 val 1200 [ 313.515373][ T941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.516063][ T5276] pwc: Registered as video71. [ 313.525268][ T941] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 313.565850][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.622099][ T941] usb 2-1: config 0 descriptor?? [ 313.649867][ T5276] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 313.777287][ T5275] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 313.793665][ T5276] usb 4-1: USB disconnect, device number 21 [ 313.902919][ T6955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.947116][ T6955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.038285][ T5275] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 314.076401][ T5275] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.112869][ T5275] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 314.138670][ T5275] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.153438][ T5275] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 314.172523][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 314.182910][ T5275] usb 5-1: Product: syz [ 314.187461][ T5275] usb 5-1: Manufacturer: syz [ 314.244183][ T941] usbhid 2-1:0.0: can't add hid device: -71 [ 314.248705][ T5275] cdc_wdm 5-1:1.0: skipping garbage [ 314.291616][ T941] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 314.299635][ T5275] cdc_wdm 5-1:1.0: skipping garbage [ 314.305503][ T5276] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 314.322348][ T5275] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 314.355463][ T5275] cdc_wdm 5-1:1.0: Unknown control protocol [ 314.361621][ T941] usb 2-1: USB disconnect, device number 10 [ 314.485759][ T5276] usb 4-1: device descriptor read/64, error -71 [ 314.508959][ C1] wdm_int_callback: 107 callbacks suppressed [ 314.508992][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 314.522095][ C1] wdm_int_callback: 107 callbacks suppressed [ 314.522123][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 314.534593][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 314.541277][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 314.547656][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 314.554303][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 314.560785][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 314.566027][ T5240] Bluetooth: hci4: command 0x0406 tx timeout [ 314.567404][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 314.579801][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 314.586448][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 314.593000][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 314.599646][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 314.606126][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 314.612769][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 314.619182][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 314.625838][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 314.632180][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 314.638834][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 314.645268][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 314.652093][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 314.740588][ T941] usb 5-1: USB disconnect, device number 27 [ 314.740680][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 314.826513][ T5276] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 314.997081][ T5276] usb 4-1: device descriptor read/64, error -71 [ 315.116494][ T5276] usb usb4-port1: attempt power cycle [ 315.535468][ T5276] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 315.580079][ T5276] usb 4-1: device descriptor read/8, error -71 [ 315.865402][ T5276] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 315.906270][ T5276] usb 4-1: device descriptor read/8, error -71 [ 315.941519][ T6997] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 315.987803][ T6997] overlayfs: failed to set xattr on upper [ 316.025478][ T6997] overlayfs: ...falling back to redirect_dir=nofollow. [ 316.044426][ T29] audit: type=1400 audit(1726893389.226:317): avc: denied { execute } for pid=6996 comm="syz.4.423" path="/60/file0/bus/net_prio.prioidx" dev="ramfs" ino=16181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 316.076047][ T6997] overlayfs: ...falling back to index=off. [ 316.085843][ T5276] usb usb4-port1: unable to enumerate USB device [ 316.125470][ T6997] overlayfs: ...falling back to uuid=null. [ 317.995662][ T5275] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 318.056218][ T5277] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 318.203761][ T5275] usb 1-1: Using ep0 maxpacket: 16 [ 318.234957][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.276973][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.308049][ T5277] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 318.325408][ T5277] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.347940][ T5275] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 318.425625][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.542816][ T5277] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 318.548572][ T5275] usb 1-1: config 0 descriptor?? [ 318.762861][ T5277] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.136429][ T5277] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 319.147794][ T7017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.186271][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 319.217281][ T5277] usb 3-1: Product: syz [ 319.221930][ T7017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.238905][ T5277] usb 3-1: Manufacturer: syz [ 319.265179][ T5277] cdc_wdm 3-1:1.0: skipping garbage [ 319.389164][ T5277] cdc_wdm 3-1:1.0: skipping garbage [ 319.636484][ T5277] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 319.642471][ T5277] cdc_wdm 3-1:1.0: Unknown control protocol [ 319.697854][ T5277] usb 3-1: USB disconnect, device number 18 [ 319.745280][ T5275] usbhid 1-1:0.0: can't add hid device: -71 [ 319.909555][ T5275] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 320.079650][ T5275] usb 1-1: USB disconnect, device number 18 [ 323.305827][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.448'. [ 323.534049][ T7079] syz.3.438 (7079): drop_caches: 2 [ 323.769939][ T7079] syz.3.438 (7079): drop_caches: 2 [ 325.969031][ T5275] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 326.205035][ T5275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.311358][ T5275] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 326.385400][ T5275] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 326.405543][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.419981][ T5275] usb 3-1: config 0 descriptor?? [ 326.700447][ T5275] usb 3-1: USB disconnect, device number 19 [ 328.053963][ T5275] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 328.246591][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.466375][ T5275] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.520780][ T5275] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 328.939805][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.156821][ T5275] usb 2-1: config 0 descriptor?? [ 329.179383][ T5275] pwc: Askey VC010 type 2 USB webcam detected. [ 329.379158][ T5275] pwc: send_video_command error -71 [ 329.384500][ T5275] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 329.401515][ T5275] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 329.431527][ T5275] usb 2-1: USB disconnect, device number 11 [ 330.125526][ T5285] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 330.337801][ T5285] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.361596][ T5285] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 330.395385][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.421801][ T5285] usb 2-1: config 0 descriptor?? [ 330.470382][ T5285] pwc: Askey VC010 type 2 USB webcam detected. [ 330.879753][ T5285] pwc: recv_control_msg error -32 req 02 val 2b00 [ 330.892883][ T5285] pwc: recv_control_msg error -32 req 02 val 2700 [ 330.921288][ T5285] pwc: recv_control_msg error -32 req 02 val 2c00 [ 330.946062][ T5285] pwc: recv_control_msg error -32 req 04 val 1000 [ 330.974912][ T5285] pwc: recv_control_msg error -32 req 04 val 1300 [ 331.012537][ T5285] pwc: recv_control_msg error -32 req 04 val 1400 [ 331.037277][ T5285] pwc: recv_control_msg error -32 req 02 val 2000 [ 331.065158][ T5285] pwc: recv_control_msg error -32 req 02 val 2100 [ 331.091866][ T5285] pwc: recv_control_msg error -32 req 04 val 1500 [ 331.113500][ T5285] pwc: recv_control_msg error -32 req 02 val 2500 [ 331.186095][ T5285] pwc: recv_control_msg error -32 req 02 val 2400 [ 331.203432][ T5285] pwc: recv_control_msg error -32 req 02 val 2600 [ 331.366020][ T5275] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 331.425992][ T5285] pwc: recv_control_msg error -71 req 02 val 2800 [ 331.454673][ T5285] pwc: recv_control_msg error -71 req 04 val 1100 [ 331.471117][ T5285] pwc: recv_control_msg error -71 req 04 val 1200 [ 331.507512][ T5285] pwc: Registered as video71. [ 331.563720][ T5285] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 331.615718][ T5275] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.649377][ T5275] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 331.666039][ T5285] usb 2-1: USB disconnect, device number 12 [ 331.686619][ T5275] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 331.730384][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.762917][ T7165] syz.2.472 (7165): drop_caches: 2 [ 331.796543][ T5275] usb 4-1: config 0 descriptor?? [ 331.897475][ T5277] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 332.029294][ T5285] usb 4-1: USB disconnect, device number 26 [ 332.099643][ T5277] usb 5-1: Using ep0 maxpacket: 16 [ 332.131273][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.159355][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.175129][ T5277] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 332.186452][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.218396][ T5277] usb 5-1: config 0 descriptor?? [ 332.459701][ T7167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.496583][ T7167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.903017][ T5277] usbhid 5-1:0.0: can't add hid device: -71 [ 332.930872][ T5277] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 332.990826][ T5277] usb 5-1: USB disconnect, device number 28 [ 334.693024][ T29] audit: type=1400 audit(1726893407.876:318): avc: denied { mount } for pid=7196 comm="syz.0.486" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 334.835496][ T29] audit: type=1400 audit(1726893407.956:319): avc: denied { mounton } for pid=7196 comm="syz.0.486" path="/68/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 334.845683][ T5275] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 334.874301][ T29] audit: type=1400 audit(1726893407.966:320): avc: denied { watch_reads } for pid=7196 comm="syz.0.486" path="/68" dev="tmpfs" ino=371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 334.999435][ T29] audit: type=1400 audit(1726893408.056:321): avc: denied { read } for pid=7196 comm="syz.0.486" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 335.097815][ T29] audit: type=1400 audit(1726893408.056:322): avc: denied { open } for pid=7196 comm="syz.0.486" path="/68/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 335.125910][ T5275] usb 4-1: Using ep0 maxpacket: 8 [ 335.165672][ T29] audit: type=1400 audit(1726893408.056:323): avc: denied { watch } for pid=7196 comm="syz.0.486" path="/68/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 335.185732][ T5275] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.190267][ T29] audit: type=1400 audit(1726893408.316:324): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 335.227099][ T5275] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 335.255653][ T5275] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 335.269736][ T5275] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.283155][ T5240] Bluetooth: hci2: command 0x0406 tx timeout [ 335.295802][ T5275] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 335.310276][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.704845][ T5275] usb 4-1: GET_CAPABILITIES returned 0 [ 335.726017][ T5275] usbtmc 4-1:16.0: can't read capabilities [ 335.915829][ T5276] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 336.369822][ T5276] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.388328][ T5276] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 336.399534][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.345745][ T5276] usb 1-1: config 0 descriptor?? [ 337.359357][ T5231] Bluetooth: hci2: command 0x0406 tx timeout [ 337.380487][ T5276] pwc: Askey VC010 type 2 USB webcam detected. [ 337.525453][ T5322] usb 4-1: USB disconnect, device number 27 [ 337.589816][ T5276] pwc: send_video_command error -71 [ 337.618394][ T5276] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 337.651772][ T5276] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 337.710846][ T5276] usb 1-1: USB disconnect, device number 19 [ 338.350287][ T5322] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 338.395608][ T941] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 338.565722][ T5322] usb 5-1: Using ep0 maxpacket: 16 [ 338.594847][ T5322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.632051][ T5322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.642635][ T941] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.694823][ T941] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 338.711034][ T5322] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 338.740130][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.752286][ T5322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.779138][ T5322] usb 5-1: config 0 descriptor?? [ 338.796467][ T941] usb 1-1: config 0 descriptor?? [ 338.870483][ T941] pwc: Askey VC010 type 2 USB webcam detected. [ 338.920943][ T29] audit: type=1400 audit(1726893412.106:325): avc: denied { read } for pid=7224 comm="syz.3.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 338.999778][ T7223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.044062][ T7223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.213053][ T941] pwc: recv_control_msg error -32 req 02 val 2b00 [ 339.222285][ T941] pwc: recv_control_msg error -32 req 02 val 2700 [ 339.234820][ T941] pwc: recv_control_msg error -32 req 02 val 2c00 [ 339.243724][ T941] pwc: recv_control_msg error -32 req 04 val 1000 [ 339.268699][ T941] pwc: recv_control_msg error -32 req 04 val 1300 [ 339.281113][ T941] pwc: recv_control_msg error -32 req 04 val 1400 [ 339.296417][ T941] pwc: recv_control_msg error -32 req 02 val 2000 [ 339.312925][ T941] pwc: recv_control_msg error -32 req 02 val 2100 [ 339.330943][ T941] pwc: recv_control_msg error -32 req 04 val 1500 [ 339.351827][ T5322] usbhid 5-1:0.0: can't add hid device: -71 [ 339.389394][ T941] pwc: recv_control_msg error -32 req 02 val 2500 [ 339.405716][ T5322] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 339.435758][ T941] pwc: recv_control_msg error -32 req 02 val 2400 [ 339.459188][ T5322] usb 5-1: USB disconnect, device number 29 [ 339.475806][ T941] pwc: recv_control_msg error -32 req 02 val 2600 [ 339.608392][ T7230] syz.2.492 (7230): drop_caches: 2 [ 339.748025][ T941] pwc: recv_control_msg error -71 req 02 val 2800 [ 339.783495][ T941] pwc: recv_control_msg error -71 req 04 val 1100 [ 339.823971][ T941] pwc: recv_control_msg error -71 req 04 val 1200 [ 339.884116][ T941] pwc: Registered as video71. [ 339.977760][ T941] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 340.920512][ T941] usb 1-1: USB disconnect, device number 20 [ 341.843702][ T941] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 342.578694][ T7248] sched: RT throttling activated [ 342.855440][ T941] usb 1-1: Using ep0 maxpacket: 16 [ 342.887192][ T941] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 342.972548][ T941] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.031301][ T5726] cgroup: fork rejected by pids controller in /syz4 [ 343.072014][ T941] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32 [ 343.089114][ T941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.125342][ T941] usb 1-1: Product: syz [ 343.133216][ T941] usb 1-1: Manufacturer: syz [ 343.164756][ T941] usb 1-1: SerialNumber: syz [ 343.199420][ T941] usb 1-1: config 0 descriptor?? [ 343.206153][ T7245] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 343.524667][ T5322] usb 1-1: USB disconnect, device number 21 [ 343.816633][ T1917] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.951427][ T7260] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 343.975683][ T7260] overlayfs: failed to set xattr on upper [ 343.981484][ T7260] overlayfs: ...falling back to redirect_dir=nofollow. [ 344.020251][ T7260] overlayfs: ...falling back to index=off. [ 344.043748][ T7260] overlayfs: ...falling back to uuid=null. [ 344.220536][ T1917] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.659700][ T1917] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.919231][ T1917] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.078333][ T29] audit: type=1400 audit(1726893418.256:326): avc: denied { map } for pid=7266 comm="syz.3.508" path="socket:[18795]" dev="sockfs" ino=18795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 345.321533][ T941] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 345.558730][ T941] usb 3-1: Using ep0 maxpacket: 16 [ 345.590055][ T941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.632176][ T941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.646768][ T941] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 345.656993][ T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.696452][ T1917] bridge_slave_1: left allmulticast mode [ 345.704950][ T941] usb 3-1: config 0 descriptor?? [ 345.740822][ T1917] bridge_slave_1: left promiscuous mode [ 345.747357][ T5322] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 345.800086][ T1917] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.859714][ T1917] bridge_slave_0: left allmulticast mode [ 345.895853][ T1917] bridge_slave_0: left promiscuous mode [ 345.901954][ T1917] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.035617][ T5322] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.048138][ T7271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.075973][ T5322] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 346.136084][ T5322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.163819][ T7271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.173158][ T5322] usb 1-1: config 0 descriptor?? [ 346.197811][ T5322] pwc: Askey VC010 type 2 USB webcam detected. [ 346.415178][ T5322] pwc: send_video_command error -71 [ 346.415202][ T5322] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 346.415500][ T5322] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 346.425765][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 346.425793][ T5322] usb 1-1: USB disconnect, device number 22 [ 346.436289][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 346.438252][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 346.457644][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 346.462433][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 346.463484][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 346.473249][ T941] usbhid 3-1:0.0: can't add hid device: -71 [ 346.473412][ T941] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 346.504617][ T941] usb 3-1: USB disconnect, device number 20 [ 347.155640][ T5322] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 348.006973][ T5285] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 348.224586][ T5322] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.242473][ T5285] usb 4-1: Using ep0 maxpacket: 16 [ 348.261702][ T5285] usb 4-1: config 0 has no interfaces? [ 348.273113][ T5285] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 348.274647][ T5322] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 348.292584][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.328951][ T5285] usb 4-1: Product: syz [ 348.333192][ T5285] usb 4-1: Manufacturer: syz [ 348.345955][ T5322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.357550][ T5285] usb 4-1: SerialNumber: syz [ 348.396407][ T5285] usb 4-1: config 0 descriptor?? [ 348.398724][ T5322] usb 1-1: config 0 descriptor?? [ 348.479368][ T5322] usb 1-1: can't set config #0, error -71 [ 348.548233][ T5322] usb 1-1: USB disconnect, device number 23 [ 348.555647][ T5231] Bluetooth: hci0: command tx timeout [ 348.680433][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 348.752681][ T25] usb 4-1: USB disconnect, device number 28 [ 349.179022][ T5322] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 349.417469][ T5322] usb 1-1: Using ep0 maxpacket: 16 [ 349.464580][ T5322] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 349.506512][ T5322] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.592821][ T5322] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32 [ 349.614256][ T1917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.644127][ T5322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.674714][ T5322] usb 1-1: Product: syz [ 349.682996][ T5322] usb 1-1: Manufacturer: syz [ 349.687720][ T5322] usb 1-1: SerialNumber: syz [ 349.924664][ T5322] usb 1-1: config 0 descriptor?? [ 349.952325][ T1917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.288445][ T7318] syz.3.519 (7318): drop_caches: 2 [ 350.389194][ T7318] syz.3.519 (7318): drop_caches: 2 [ 350.431065][ T7311] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 350.635856][ T5231] Bluetooth: hci0: command tx timeout [ 350.879002][ T1917] bond0 (unregistering): Released all slaves [ 350.978599][ T1917] bond1 (unregistering): Released all slaves [ 351.082148][ T25] usb 1-1: USB disconnect, device number 24 [ 352.292999][ T1917] hsr_slave_0: left promiscuous mode [ 352.378943][ T1917] hsr_slave_1: left promiscuous mode [ 352.410142][ T1917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.438447][ T1917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.506905][ T1917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.641435][ T1917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.750739][ T5231] Bluetooth: hci0: command tx timeout [ 352.842204][ T1917] veth1_macvtap: left promiscuous mode [ 352.923186][ T1917] veth0_macvtap: left promiscuous mode [ 352.959039][ T1917] veth1_vlan: left promiscuous mode [ 353.232252][ T1917] veth0_vlan: left promiscuous mode [ 353.635570][ T5285] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 353.868150][ T5285] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.883140][ T5285] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 353.913843][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.956728][ T5285] usb 4-1: config 0 descriptor?? [ 353.990846][ T5285] pwc: Askey VC010 type 2 USB webcam detected. [ 353.997267][ T25] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 354.170935][ T5285] pwc: send_video_command error -71 [ 354.187018][ T5285] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 354.219728][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 354.228441][ T5285] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 354.248039][ T25] usb 3-1: config 0 has no interfaces? [ 354.275473][ T25] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 354.298836][ T5285] usb 4-1: USB disconnect, device number 29 [ 354.304920][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.344199][ T25] usb 3-1: Product: syz [ 354.353523][ T25] usb 3-1: Manufacturer: syz [ 354.368760][ T25] usb 3-1: SerialNumber: syz [ 354.406579][ T25] usb 3-1: config 0 descriptor?? [ 354.699906][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 354.718204][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.529'. [ 354.732629][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.529'. [ 354.760768][ T5277] usb 3-1: USB disconnect, device number 21 [ 354.798334][ T5231] Bluetooth: hci0: command tx timeout [ 355.005449][ T25] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 355.111522][ T29] audit: type=1400 audit(1726893428.296:327): avc: denied { unmount } for pid=6538 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 355.221009][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.259569][ T25] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 355.269559][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.294719][ T25] usb 4-1: config 0 descriptor?? [ 355.320309][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 355.734667][ T25] pwc: recv_control_msg error -32 req 02 val 2b00 [ 355.744115][ T25] pwc: recv_control_msg error -32 req 02 val 2700 [ 355.760871][ T25] pwc: recv_control_msg error -32 req 02 val 2c00 [ 355.786863][ T25] pwc: recv_control_msg error -32 req 04 val 1000 [ 355.796197][ T25] pwc: recv_control_msg error -32 req 04 val 1300 [ 355.821086][ T25] pwc: recv_control_msg error -32 req 04 val 1400 [ 355.829228][ T25] pwc: recv_control_msg error -32 req 02 val 2000 [ 355.844940][ T25] pwc: recv_control_msg error -32 req 02 val 2100 [ 355.854543][ T25] pwc: recv_control_msg error -32 req 04 val 1500 [ 355.886812][ T5276] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 355.900326][ T25] pwc: recv_control_msg error -32 req 02 val 2500 [ 355.908840][ T25] pwc: recv_control_msg error -32 req 02 val 2400 [ 355.928076][ T25] pwc: recv_control_msg error -32 req 02 val 2600 [ 355.940566][ T29] audit: type=1400 audit(1726893429.126:328): avc: denied { append } for pid=7377 comm="syz.2.536" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 356.100618][ T1917] team0 (unregistering): Port device team_slave_1 removed [ 356.109743][ T5276] usb 2-1: Using ep0 maxpacket: 16 [ 356.130110][ T5276] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 356.142204][ T25] pwc: recv_control_msg error -71 req 02 val 2800 [ 356.149392][ T5276] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 356.169753][ T25] pwc: recv_control_msg error -71 req 04 val 1100 [ 356.180013][ T25] pwc: recv_control_msg error -71 req 04 val 1200 [ 356.188590][ T5276] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32 [ 356.200576][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.211714][ T25] pwc: Registered as video71. [ 356.235449][ T5276] usb 2-1: Product: syz [ 356.239688][ T5276] usb 2-1: Manufacturer: syz [ 356.244499][ T5276] usb 2-1: SerialNumber: syz [ 356.258287][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 356.307150][ T5276] usb 2-1: config 0 descriptor?? [ 356.316043][ T7374] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 356.361093][ T25] usb 4-1: USB disconnect, device number 30 [ 356.422679][ T1917] team0 (unregistering): Port device team_slave_0 removed [ 356.608400][ T5277] usb 2-1: USB disconnect, device number 13 [ 359.649659][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 359.846708][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 359.887599][ T25] usb 2-1: config 0 has no interfaces? [ 359.926774][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 359.971109][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.005347][ T25] usb 2-1: Product: syz [ 360.029973][ T25] usb 2-1: Manufacturer: syz [ 360.055935][ T25] usb 2-1: SerialNumber: syz [ 360.135727][ T25] usb 2-1: config 0 descriptor?? [ 360.322476][ T7282] chnl_net:caif_netlink_parms(): no params data found [ 360.427946][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 360.476033][ T25] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 360.487267][ T7400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.543'. [ 360.513907][ T7400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.543'. [ 360.602257][ T5285] usb 2-1: USB disconnect, device number 14 [ 360.724393][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.775107][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 360.826143][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024 [ 360.881184][ T29] audit: type=1400 audit(1726893434.066:329): avc: denied { write } for pid=7420 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 360.908379][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 360.934229][ T25] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 360.944287][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.974831][ T7282] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.007779][ T7282] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.019856][ T25] usb 1-1: config 0 descriptor?? [ 361.026275][ T7406] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 361.045542][ T7282] bridge_slave_0: entered allmulticast mode [ 361.071169][ T25] gspca_main: spca561-2.14.0 probing abcd:cdee [ 361.080328][ T7282] bridge_slave_0: entered promiscuous mode [ 361.161293][ T7282] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.186035][ T7282] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.204011][ T7282] bridge_slave_1: entered allmulticast mode [ 361.227259][ T7282] bridge_slave_1: entered promiscuous mode [ 361.258749][ T25] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 361.289303][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 361.338061][ T25] usb 1-1: MIDIStreaming interface descriptor not found [ 361.531998][ T25] usb 1-1: USB disconnect, device number 25 [ 361.728366][ T29] audit: type=1400 audit(1726893434.856:330): avc: denied { write } for pid=7436 comm="syz.2.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 361.847136][ T7282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.889810][ T29] audit: type=1400 audit(1726893434.966:331): avc: denied { ioctl } for pid=7436 comm="syz.2.552" path="socket:[19488]" dev="sockfs" ino=19488 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 361.917204][ T29] audit: type=1400 audit(1726893435.046:332): avc: denied { read } for pid=7436 comm="syz.2.552" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 361.947776][ T7282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.270639][ T7442] syz.1.551 (7442): drop_caches: 2 [ 362.305871][ T7442] syz.1.551 (7442): drop_caches: 2 [ 362.428607][ T29] audit: type=1400 audit(1726893435.046:333): avc: denied { open } for pid=7436 comm="syz.2.552" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 363.005252][ T7439] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 363.026503][ T7439] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 363.109881][ T7439] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 363.112663][ T7282] team0: Port device team_slave_0 added [ 363.125010][ T7439] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 363.172832][ T7439] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 363.181245][ T7439] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 363.181372][ T7439] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 363.202557][ T7439] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 363.210900][ T7439] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 363.211037][ T7439] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 363.211279][ T7282] team0: Port device team_slave_1 added [ 363.239546][ T7458] netlink: 5312 bytes leftover after parsing attributes in process `syz.0.554'. [ 363.239629][ T7458] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 363.253287][ T7439] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 363.718044][ T7282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.718087][ T7282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.718131][ T7282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.722304][ T7282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.722367][ T7282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.722412][ T7282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.344631][ T7282] hsr_slave_0: entered promiscuous mode [ 364.387120][ T7282] hsr_slave_1: entered promiscuous mode [ 364.410723][ T7282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.435408][ T7282] Cannot create hsr debugfs directory [ 365.121013][ T5231] Bluetooth: hci1: command 0x0406 tx timeout [ 365.127987][ T5231] Bluetooth: hci4: command 0x0406 tx timeout [ 365.195939][ T5240] Bluetooth: hci2: command 0x0406 tx timeout [ 365.202234][ T5231] Bluetooth: hci3: command 0x0c1a tx timeout [ 365.286343][ T5231] Bluetooth: hci0: command 0x0c1a tx timeout [ 366.235576][ T5276] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 366.473761][ T5276] usb 4-1: Using ep0 maxpacket: 16 [ 366.493598][ T5276] usb 4-1: config 0 has no interfaces? [ 366.556245][ T5276] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 366.585602][ T5276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.593691][ T5276] usb 4-1: Product: syz [ 366.635162][ T5276] usb 4-1: Manufacturer: syz [ 366.672946][ T5276] usb 4-1: SerialNumber: syz [ 366.699825][ T5276] usb 4-1: config 0 descriptor?? [ 366.731935][ T29] audit: type=1400 audit(1726893439.906:334): avc: denied { create } for pid=7500 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 366.791512][ T29] audit: type=1400 audit(1726893439.956:335): avc: denied { connect } for pid=7500 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 367.041383][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 367.070471][ T7481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.561'. [ 367.094737][ T7481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.561'. [ 367.147065][ T941] usb 4-1: USB disconnect, device number 31 [ 367.195524][ T5231] Bluetooth: hci1: command 0x0406 tx timeout [ 367.276719][ T5231] Bluetooth: hci3: command 0x0c1a tx timeout [ 367.276830][ T5231] Bluetooth: hci2: command 0x0406 tx timeout [ 367.355487][ T5240] Bluetooth: hci0: command 0x0c1a tx timeout [ 367.629608][ T5240] Bluetooth: hci2: unexpected event 0x08 length: 78 > 4 [ 367.871166][ T7282] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 367.937165][ T7282] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 367.975391][ T29] audit: type=1400 audit(1726893441.156:336): avc: denied { create } for pid=7520 comm="syz.0.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 368.012061][ T7282] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 368.056506][ T7521] netlink: 36 bytes leftover after parsing attributes in process `syz.0.572'. [ 368.081914][ T29] audit: type=1400 audit(1726893441.246:337): avc: denied { write } for pid=7520 comm="syz.0.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 368.121288][ T7282] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 368.466791][ T941] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 368.474455][ T5309] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 368.675347][ T941] usb 3-1: Using ep0 maxpacket: 8 [ 368.696766][ T5309] usb 4-1: Using ep0 maxpacket: 8 [ 368.705561][ T941] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 368.740155][ T941] usb 3-1: config 0 has no interface number 0 [ 368.748910][ T5309] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.780145][ T7282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.782298][ T941] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 368.805408][ T5309] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 368.836023][ T5309] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 368.849899][ T941] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 368.878903][ T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.908598][ T5309] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 368.920683][ T5309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.936520][ T941] usb 3-1: config 0 descriptor?? [ 368.989168][ T941] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 368.993642][ T7282] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.032788][ T5309] hub 4-1:1.0: bad descriptor, ignoring hub [ 369.092408][ T5309] hub 4-1:1.0: probe with driver hub failed with error -5 [ 369.102010][ T1917] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.109374][ T1917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.131412][ T5309] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 369.243657][ T2918] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.251165][ T2918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.355512][ T5240] Bluetooth: hci3: command 0x0c1a tx timeout [ 369.435564][ T5240] Bluetooth: hci0: command 0x0c1a tx timeout [ 370.334360][ T5309] usb 3-1: USB disconnect, device number 22 [ 370.414250][ T7554] netlink: 5312 bytes leftover after parsing attributes in process `syz.0.577'. [ 370.423695][ T7554] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 370.442423][ T5276] usb 4-1: USB disconnect, device number 32 [ 371.523477][ T5309] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 371.830899][ T7282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.873345][ T7567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.579'. [ 372.755431][ T5285] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 372.959467][ T5285] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 372.995360][ T5285] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.039117][ T5285] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 373.090781][ T5285] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.102775][ T7601] binder_alloc: 7594: binder_alloc_buf size -416 failed, no address space [ 373.112257][ T7601] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 373.159260][ T29] audit: type=1400 audit(1726893446.266:338): avc: denied { call } for pid=7594 comm="syz.0.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 373.178210][ T5285] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 373.178259][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 373.178295][ T5285] usb 2-1: Product: syz [ 373.178322][ T5285] usb 2-1: Manufacturer: syz [ 373.217274][ T5285] cdc_wdm 2-1:1.0: skipping garbage [ 373.244382][ T5285] cdc_wdm 2-1:1.0: skipping garbage [ 373.274457][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.588'. [ 373.291732][ T5285] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 373.298432][ T5285] cdc_wdm 2-1:1.0: Unknown control protocol [ 373.567517][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.588'. [ 373.582656][ C1] wdm_int_callback: 368 callbacks suppressed [ 373.582679][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 373.595325][ C1] wdm_int_callback: 368 callbacks suppressed [ 373.595349][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 373.607729][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 373.614364][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 373.620730][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 373.627365][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 373.633671][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 373.640305][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 373.646681][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 373.653390][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 373.659703][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 373.666411][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 373.672707][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 373.679414][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 373.685793][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 373.692391][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 373.698700][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 373.705347][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 373.711641][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 373.718264][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 373.770195][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 373.779113][ T5285] usb 2-1: USB disconnect, device number 15 [ 373.864533][ T29] audit: type=1400 audit(1726893447.036:339): avc: denied { create } for pid=7599 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 374.063770][ T7282] veth0_vlan: entered promiscuous mode [ 374.169684][ T7282] veth1_vlan: entered promiscuous mode [ 374.286337][ T29] audit: type=1400 audit(1726893447.476:340): avc: denied { setopt } for pid=7599 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 374.457119][ T7282] veth0_macvtap: entered promiscuous mode [ 374.589219][ T7282] veth1_macvtap: entered promiscuous mode [ 374.781655][ T7282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.838145][ T7282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.881871][ T7282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.935843][ T7282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.971795][ T7282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.055547][ T7627] netlink: 5312 bytes leftover after parsing attributes in process `syz.1.591'. [ 375.064801][ T7627] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 375.925649][ T7282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.985394][ T7282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.039869][ T7282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.061141][ T7625] Bluetooth: MGMT ver 1.23 [ 376.155545][ T5231] Bluetooth: hci2: command 0x0406 tx timeout [ 376.221993][ T7282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.302327][ T7282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.366319][ T7282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.421504][ T7282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.485789][ T7282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.506731][ T29] audit: type=1400 audit(1726893449.626:341): avc: denied { setcurrent } for pid=7629 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 376.556291][ T7282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.615579][ T7282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.665508][ T7282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.725232][ T7282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.778135][ T7282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.797433][ T29] audit: type=1400 audit(1726893449.986:342): avc: denied { bind } for pid=7641 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 376.982653][ T7282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.031236][ T7282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.047852][ T29] audit: type=1400 audit(1726893449.986:343): avc: denied { setopt } for pid=7641 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 377.062524][ T7282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.145695][ T7282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.777817][ T1917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.813603][ T1917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.025416][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.057049][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.245444][ T5231] Bluetooth: hci2: command 0x0406 tx timeout [ 378.295463][ T5322] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 378.568452][ T5322] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 378.614779][ T5322] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.667373][ T5322] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 378.695412][ T5322] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.730185][ T5322] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 378.751321][ T5322] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 378.761881][ T5322] usb 2-1: Product: syz [ 378.774936][ T5322] usb 2-1: Manufacturer: syz [ 378.836438][ T7680] netlink: 5312 bytes leftover after parsing attributes in process `syz.0.604'. [ 378.845723][ T7680] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 379.703094][ T5322] cdc_wdm 2-1:1.0: skipping garbage [ 379.712323][ T5322] cdc_wdm 2-1:1.0: skipping garbage [ 379.741328][ T5322] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 379.814885][ T5322] cdc_wdm 2-1:1.0: Unknown control protocol [ 379.946864][ T5322] usb 2-1: USB disconnect, device number 16 [ 380.358843][ T7691] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 380.373922][ T7691] overlayfs: failed to set xattr on upper [ 380.380845][ T7691] overlayfs: ...falling back to redirect_dir=nofollow. [ 380.414257][ T7691] overlayfs: ...falling back to index=off. [ 380.462874][ T7691] overlayfs: ...falling back to uuid=null. [ 380.695434][ T5276] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 380.928579][ T5276] usb 4-1: Using ep0 maxpacket: 16 [ 380.973532][ T5276] usb 4-1: config 0 has no interfaces? [ 381.011581][ T5276] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 381.055673][ T5276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.122311][ T7712] overlayfs: overlapping lowerdir path [ 381.133113][ T5276] usb 4-1: Product: syz [ 381.142082][ T5276] usb 4-1: Manufacturer: syz [ 381.157352][ T5276] usb 4-1: SerialNumber: syz [ 381.266844][ T5276] usb 4-1: config 0 descriptor?? [ 381.543394][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 381.554342][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 381.554431][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 381.563438][ T5276] usb 4-1: USB disconnect, device number 33 [ 381.663133][ T7731] netlink: 5312 bytes leftover after parsing attributes in process `syz.4.616'. [ 381.672547][ T7731] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 384.870485][ T5276] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 384.975845][ T7765] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 384.983032][ T7765] overlayfs: failed to set xattr on upper [ 385.013875][ T7766] overlayfs: overlapping lowerdir path [ 385.025414][ T7765] overlayfs: ...falling back to redirect_dir=nofollow. [ 385.066222][ T7765] overlayfs: ...falling back to index=off. [ 385.072243][ T7765] overlayfs: ...falling back to uuid=null. [ 385.102552][ T5276] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 385.126283][ T5276] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.168108][ T5276] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 385.228262][ T5276] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.281323][ T5276] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 385.311027][ T5276] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 385.350030][ T5276] usb 5-1: Product: syz [ 385.354280][ T5276] usb 5-1: Manufacturer: syz [ 385.393711][ T5276] cdc_wdm 5-1:1.0: skipping garbage [ 385.405423][ T5276] cdc_wdm 5-1:1.0: skipping garbage [ 385.431567][ T5276] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 385.452490][ T5276] cdc_wdm 5-1:1.0: Unknown control protocol [ 385.511645][ T7777] netlink: 5312 bytes leftover after parsing attributes in process `syz.2.627'. [ 385.521060][ T7777] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 386.315479][ T5231] Bluetooth: hci3: command 0x0c1a tx timeout [ 386.483277][ T5323] usb 5-1: USB disconnect, device number 30 [ 387.165641][ T5276] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 387.379808][ T5276] usb 1-1: Using ep0 maxpacket: 16 [ 387.410416][ T5276] usb 1-1: config 0 has no interfaces? [ 387.434680][ T5276] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 387.482532][ T5276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.514566][ T5276] usb 1-1: Product: syz [ 387.526815][ T5276] usb 1-1: Manufacturer: syz [ 387.542634][ T5276] usb 1-1: SerialNumber: syz [ 387.551957][ T5276] usb 1-1: config 0 descriptor?? [ 387.851918][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 387.888249][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'. [ 387.916764][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'. [ 387.945643][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'. [ 388.135922][ T5323] usb 1-1: USB disconnect, device number 26 [ 388.265091][ T7814] overlayfs: overlapping lowerdir path [ 388.594517][ T5231] Bluetooth: hci3: command 0x0c1a tx timeout [ 388.619631][ T29] audit: type=1400 audit(1726893461.676:344): avc: denied { mount } for pid=7807 comm="syz.3.635" name="/" dev="gadgetfs" ino=21205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 389.506780][ T29] audit: type=1400 audit(1726893462.696:345): avc: denied { write } for pid=7821 comm="syz.3.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 389.587337][ T7828] netlink: 5312 bytes leftover after parsing attributes in process `syz.0.639'. [ 389.597050][ T7828] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 389.817385][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.824123][ T5231] Bluetooth: hci0: command 0x0c1a tx timeout [ 390.411823][ T7825] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 390.438096][ T7825] overlayfs: failed to set xattr on upper [ 390.480768][ T7825] overlayfs: ...falling back to redirect_dir=nofollow. [ 390.489261][ T7827] Invalid ELF header type: 0 != 1 [ 390.509242][ T29] audit: type=1400 audit(1726893463.676:346): avc: denied { module_load } for pid=7821 comm="syz.3.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 390.555365][ T7825] overlayfs: ...falling back to index=off. [ 390.575723][ T7825] overlayfs: ...falling back to uuid=null. [ 391.468792][ T5323] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 391.636096][ T7842] netlink: 236 bytes leftover after parsing attributes in process `syz.4.645'. [ 391.658338][ T7842] netlink: 236 bytes leftover after parsing attributes in process `syz.4.645'. [ 391.682835][ T5323] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 391.704743][ T5323] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.718074][ T5323] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 391.727213][ T5323] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.742909][ T5323] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 391.757157][ T5323] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 391.765531][ T5323] usb 1-1: Product: syz [ 391.769764][ T5323] usb 1-1: Manufacturer: syz [ 391.783324][ T5323] cdc_wdm 1-1:1.0: skipping garbage [ 391.802583][ T5323] cdc_wdm 1-1:1.0: skipping garbage [ 391.812834][ T5323] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 391.818917][ T5323] cdc_wdm 1-1:1.0: Unknown control protocol [ 391.845718][ T5240] Bluetooth: hci0: command 0x0c1a tx timeout [ 392.024719][ C0] wdm_int_callback: 232 callbacks suppressed [ 392.024755][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 392.037446][ C0] wdm_int_callback: 232 callbacks suppressed [ 392.037471][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 392.049797][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 392.056424][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 392.062741][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 392.069471][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 392.076259][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 392.082919][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 392.089260][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 392.095901][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 392.102370][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 392.109020][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 392.115433][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 392.122093][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 392.128473][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 392.135108][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 392.141449][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 392.148100][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 392.154441][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 392.161095][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 392.164188][ T25] usb 1-1: USB disconnect, device number 27 [ 392.167198][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 394.427683][ T7843] tipc: Started in network mode [ 394.432594][ T7843] tipc: Node identity 101, cluster identity 4711 [ 394.445018][ T7843] tipc: Node number set to 257 [ 394.471256][ T7844] netlink: 'syz.4.645': attribute type 1 has an invalid length. [ 394.485396][ T7844] netlink: 224 bytes leftover after parsing attributes in process `syz.4.645'. [ 395.265760][ T5323] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 395.485386][ T7866] netlink: 5312 bytes leftover after parsing attributes in process `syz.4.652'. [ 395.494635][ T7866] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 396.428219][ T5323] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.438740][ T5323] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 396.448089][ T5323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.486946][ T5323] usb 4-1: config 0 descriptor?? [ 396.518450][ T5323] pwc: Askey VC010 type 2 USB webcam detected. [ 396.641382][ T7872] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 396.685536][ T7872] overlayfs: failed to set xattr on upper [ 396.712440][ T5323] pwc: send_video_command error -71 [ 396.737368][ T7872] overlayfs: ...falling back to redirect_dir=nofollow. [ 396.757204][ T5323] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 396.764915][ T5323] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 396.792549][ T7872] overlayfs: ...falling back to index=off. [ 396.825966][ T5323] usb 4-1: USB disconnect, device number 34 [ 396.860187][ T7872] overlayfs: ...falling back to uuid=null. [ 397.247490][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 397.258441][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 397.267627][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 397.278344][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 397.323035][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 397.335741][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 397.476965][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.585602][ T5275] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 397.753183][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.793166][ T5275] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 397.822895][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024 [ 397.837899][ T5275] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 397.849405][ T5275] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 397.872344][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.918301][ T5275] usb 1-1: config 0 descriptor?? [ 397.952794][ T7886] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 398.000494][ T5275] gspca_main: spca561-2.14.0 probing abcd:cdee [ 398.154419][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.167567][ T7895] netlink: 'syz.2.659': attribute type 3 has an invalid length. [ 398.205675][ T5275] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 398.211053][ T7895] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.659'. [ 398.231133][ T5275] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 398.310621][ T5275] usb 1-1: MIDIStreaming interface descriptor not found [ 398.442747][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.485138][ T5275] usb 1-1: USB disconnect, device number 28 [ 399.180268][ T7906] netlink: 124 bytes leftover after parsing attributes in process `syz.0.664'. [ 399.436105][ T5240] Bluetooth: hci3: command tx timeout [ 399.453305][ T12] bridge_slave_1: left allmulticast mode [ 399.465392][ T12] bridge_slave_1: left promiscuous mode [ 399.476183][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.542180][ T12] bridge_slave_0: left allmulticast mode [ 399.568402][ T12] bridge_slave_0: left promiscuous mode [ 399.581931][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.841984][ T29] audit: type=1400 audit(1726893473.026:347): avc: denied { watch } for pid=7916 comm="syz.0.667" path="/112/file0" dev="tmpfs" ino=602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 401.165570][ T5276] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 401.355662][ T5276] usb 4-1: Using ep0 maxpacket: 16 [ 401.368310][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.368547][ T5276] usb 4-1: config 0 has no interfaces? [ 401.393509][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.393523][ T5276] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 401.393570][ T5276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.422737][ T5276] usb 4-1: Product: syz [ 401.427530][ T5276] usb 4-1: Manufacturer: syz [ 401.432632][ T5276] usb 4-1: SerialNumber: syz [ 401.440278][ T12] bond0 (unregistering): Released all slaves [ 401.450022][ T5276] usb 4-1: config 0 descriptor?? [ 401.526430][ T5240] Bluetooth: hci3: command tx timeout [ 401.829913][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 401.951399][ T941] usb 4-1: USB disconnect, device number 35 [ 402.285602][ T5276] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 402.308239][ T7882] chnl_net:caif_netlink_parms(): no params data found [ 402.479161][ T5276] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 402.495016][ T12] hsr_slave_0: left promiscuous mode [ 402.512493][ T5276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024 [ 402.526001][ T12] hsr_slave_1: left promiscuous mode [ 402.567973][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.582914][ T5276] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 402.587401][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.618206][ T5276] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 402.655385][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.695122][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.712597][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.722061][ T5276] usb 1-1: config 0 descriptor?? [ 402.748072][ T7937] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 402.776286][ T5276] gspca_main: spca561-2.14.0 probing abcd:cdee [ 402.859278][ T12] veth1_macvtap: left promiscuous mode [ 402.866685][ T12] veth0_macvtap: left promiscuous mode [ 402.873129][ T12] veth1_vlan: left promiscuous mode [ 402.908918][ T12] veth0_vlan: left promiscuous mode [ 402.987664][ T5276] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 403.034996][ T5276] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 403.068351][ T5276] usb 1-1: MIDIStreaming interface descriptor not found [ 403.437879][ T5276] usb 1-1: USB disconnect, device number 29 [ 403.596835][ T5240] Bluetooth: hci3: command tx timeout [ 404.018086][ T7955] netlink: 124 bytes leftover after parsing attributes in process `syz.0.676'. [ 404.341544][ T7950] syz.4.672 (7950): drop_caches: 2 [ 405.676951][ T5240] Bluetooth: hci3: command tx timeout [ 406.227336][ T12] team0 (unregistering): Port device team_slave_1 removed [ 406.680292][ T12] team0 (unregistering): Port device team_slave_0 removed [ 407.218468][ T25] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 407.405807][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 407.417211][ T25] usb 3-1: config 0 has no interfaces? [ 407.427603][ T25] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 407.437223][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.446063][ T25] usb 3-1: Product: syz [ 407.450289][ T25] usb 3-1: Manufacturer: syz [ 407.454941][ T25] usb 3-1: SerialNumber: syz [ 407.473204][ T25] usb 3-1: config 0 descriptor?? [ 407.718621][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 407.776608][ T941] usb 3-1: USB disconnect, device number 23 [ 407.902472][ T7942] netlink: 68 bytes leftover after parsing attributes in process `syz.3.675'. [ 408.560314][ T7882] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.591533][ T7882] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.627632][ T7882] bridge_slave_0: entered allmulticast mode [ 408.662756][ T7882] bridge_slave_0: entered promiscuous mode [ 513.795218][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 513.802315][ C1] rcu: 0-...!: (1 GPs behind) idle=8aec/1/0x4000000000000000 softirq=30455/30456 fqs=67 [ 513.813708][ C1] rcu: (detected by 1, t=10502 jiffies, g=46081, q=381 ncpus=2) [ 513.821670][ C1] Sending NMI from CPU 1 to CPUs 0: [ 513.827021][ C0] NMI backtrace for cpu 0 [ 513.827046][ C0] CPU: 0 UID: 0 PID: 7991 Comm: syz.2.690 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 513.827078][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 513.827096][ C0] RIP: 0010:advance_sched+0xaa/0xc60 [ 513.827145][ C0] Code: 48 c1 ea 03 80 3c 02 00 0f 85 32 0b 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 1b 48 8d 7b 36 48 89 fa 48 c1 ea 03 0f b6 14 02 <48> 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 e6 09 00 00 0f [ 513.827170][ C0] RSP: 0018:ffffc90000007d80 EFLAGS: 00000807 [ 513.827191][ C0] RAX: dffffc0000000000 RBX: ffff888078680000 RCX: 1ffff1100f56b8d9 [ 513.827209][ C0] RDX: 0000000000000000 RSI: ffffffff8927ca5a RDI: ffff888078680036 [ 513.827227][ C0] RBP: 000000000003d8cc R08: 0000000000000001 R09: 0000000000000000 [ 513.827243][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880b882cb40 [ 513.827260][ C0] R13: ffff88805d443340 R14: ffff88805d443340 R15: ffffffff8927ca40 [ 513.827278][ C0] FS: 00007fe261d086c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 513.827304][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.827322][ C0] CR2: 000055558f4475c8 CR3: 0000000020eb2000 CR4: 00000000003506f0 [ 513.827348][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 513.827364][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 513.827381][ C0] Call Trace: [ 513.827392][ C0] [ 513.827402][ C0] ? show_regs+0x8c/0xa0 [ 513.827444][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 513.827484][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 513.827522][ C0] ? nmi_handle+0x1a9/0x5c0 [ 513.827548][ C0] ? advance_sched+0xaa/0xc60 [ 513.827585][ C0] ? default_do_nmi+0x6a/0x160 [ 513.827619][ C0] ? exc_nmi+0x170/0x1e0 [ 513.827651][ C0] ? end_repeat_nmi+0xf/0x53 [ 513.827674][ C0] ? __pfx_advance_sched+0x10/0x10 [ 513.827716][ C0] ? advance_sched+0x1a/0xc60 [ 513.827753][ C0] ? advance_sched+0xaa/0xc60 [ 513.827790][ C0] ? advance_sched+0xaa/0xc60 [ 513.827828][ C0] ? advance_sched+0xaa/0xc60 [ 513.827866][ C0] [ 513.827873][ C0] [ 513.827885][ C0] ? timerqueue_del+0x83/0x150 [ 513.827921][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 513.827950][ C0] ? __pfx_advance_sched+0x10/0x10 [ 513.827986][ C0] __hrtimer_run_queues+0x20c/0xcc0 [ 513.828022][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 513.828053][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 513.828096][ C0] hrtimer_interrupt+0x31b/0x800 [ 513.828135][ C0] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 513.828166][ C0] sysvec_apic_timer_interrupt+0x90/0xb0 [ 513.828207][ C0] [ 513.828215][ C0] [ 513.828223][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 513.828267][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 513.828310][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 36 fd 4e f6 48 89 df e8 4e 7a 4f f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 f3 40 f6 65 8b 05 86 0c e9 74 85 c0 74 16 5b [ 513.828345][ C0] RSP: 0018:ffffc900095c70f0 EFLAGS: 00000246 [ 513.828365][ C0] RAX: 0000000000000002 RBX: ffff88805d4432e8 RCX: 1ffffffff2d4b68b [ 513.828382][ C0] RDX: 0000000000000000 RSI: ffffffff8b4cdac0 RDI: ffffffff8bb118a0 [ 513.828399][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: fffffbfff2d39b0d [ 513.828415][ C0] R10: ffffffff969cd86f R11: 0000000000000000 R12: ffff88805d4430f0 [ 513.828433][ C0] R13: 0000000000000246 R14: 0000000000000002 R15: 0000005f262e50ab [ 513.828461][ C0] taprio_change+0x28ae/0x39a0 [ 513.828513][ C0] ? __pfx_taprio_change+0x10/0x10 [ 513.828550][ C0] ? find_held_lock+0x2d/0x110 [ 513.828598][ C0] taprio_init+0x6b0/0x940 [ 513.828639][ C0] ? __pfx_taprio_init+0x10/0x10 [ 513.828680][ C0] ? __pfx_taprio_init+0x10/0x10 [ 513.828716][ C0] qdisc_create+0x4f1/0x1100 [ 513.828757][ C0] ? __pfx_qdisc_create+0x10/0x10 [ 513.828799][ C0] tc_modify_qdisc+0x4d8/0x1c40 [ 513.828843][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 513.828896][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 513.828934][ C0] rtnetlink_rcv_msg+0x3c7/0xea0 [ 513.828972][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 513.829016][ C0] netlink_rcv_skb+0x16b/0x440 [ 513.829048][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 513.829085][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.829127][ C0] ? netlink_deliver_tap+0x1ae/0xd90 [ 513.829160][ C0] netlink_unicast+0x53c/0x7f0 [ 513.829194][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 513.829231][ C0] netlink_sendmsg+0x8b8/0xd70 [ 513.829266][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.829296][ C0] ? __import_iovec+0x1fd/0x6e0 [ 513.829351][ C0] ____sys_sendmsg+0xaaf/0xc90 [ 513.829381][ C0] ? copy_msghdr_from_user+0x10b/0x160 [ 513.829418][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.829451][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 513.829490][ C0] ? try_to_wake_up+0x14b/0x13e0 [ 513.829534][ C0] ___sys_sendmsg+0x135/0x1e0 [ 513.829573][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.829609][ C0] ? find_held_lock+0x2d/0x110 [ 513.829660][ C0] ? __fget_light+0x173/0x210 [ 513.829692][ C0] __sys_sendmsg+0x117/0x1f0 [ 513.829731][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 513.829770][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 513.829818][ C0] do_syscall_64+0xcd/0x250 [ 513.829845][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.829886][ C0] RIP: 0033:0x7fe260f7def9 [ 513.829912][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.829937][ C0] RSP: 002b:00007fe261d08038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.829960][ C0] RAX: ffffffffffffffda RBX: 00007fe261135f80 RCX: 00007fe260f7def9 [ 513.829977][ C0] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 513.829993][ C0] RBP: 00007fe260ff0b76 R08: 0000000000000000 R09: 0000000000000000 [ 513.830010][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.830025][ C0] R13: 0000000000000000 R14: 00007fe261135f80 R15: 00007ffd6ce1c408 [ 513.830052][ C0] [ 513.831015][ C1] rcu: rcu_preempt kthread starved for 10368 jiffies! g46081 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 514.440234][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 514.450241][ C1] rcu: RCU grace-period kthread stack dump: [ 514.456172][ C1] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 514.468222][ C1] Call Trace: [ 514.471537][ C1] [ 514.474519][ C1] __schedule+0xe37/0x5490 [ 514.479268][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 514.484636][ C1] ? __pfx___schedule+0x10/0x10 [ 514.489554][ C1] ? schedule+0x298/0x350 [ 514.493943][ C1] ? __pfx_lock_release+0x10/0x10 [ 514.499032][ C1] ? __pfx___mod_timer+0x10/0x10 [ 514.504042][ C1] ? lock_acquire+0x1b1/0x560 [ 514.508778][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 514.514312][ C1] schedule+0xe7/0x350 [ 514.518447][ C1] schedule_timeout+0x136/0x2a0 [ 514.523385][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 514.528820][ C1] ? __pfx_process_timeout+0x10/0x10 [ 514.534170][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 514.540040][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 514.545570][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 514.550407][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 514.555743][ C1] ? rcu_gp_init+0xc82/0x1630 [ 514.560478][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 514.565751][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 514.571623][ C1] rcu_gp_kthread+0x271/0x380 [ 514.576396][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 514.582004][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 514.587264][ C1] ? __kthread_parkme+0x148/0x220 [ 514.592391][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 514.597652][ C1] kthread+0x2c1/0x3a0 [ 514.601772][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 514.607046][ C1] ? __pfx_kthread+0x10/0x10 [ 514.611691][ C1] ret_from_fork+0x45/0x80 [ 514.616184][ C1] ? __pfx_kthread+0x10/0x10 [ 514.620837][ C1] ret_from_fork_asm+0x1a/0x30 [ 514.625687][ C1] [ 514.628745][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 514.635097][ C1] CPU: 1 UID: 0 PID: 7999 Comm: syz.0.691 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 514.645410][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 514.655510][ C1] RIP: 0010:smp_call_function_many_cond+0x4e7/0x1420 [ 514.662242][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 cb 34 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 f7 0c 00 00 8b 43 08 31 [ 514.682176][ C1] RSP: 0018:ffffc90003207520 EFLAGS: 00000246 [ 514.688290][ C1] RAX: 0000000000040000 RBX: ffff8880b8846700 RCX: ffffc9000a9c2000 [ 514.696386][ C1] RDX: 0000000000040000 RSI: ffffffff817fa415 RDI: 0000000000000005 [ 514.704492][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 514.712526][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed1017108ce1 [ 514.720545][ C1] R13: 0000000000000001 R14: ffff8880b8846708 R15: ffff8880b893fd80 [ 514.728658][ C1] FS: 00007f0cd499f6c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 514.737642][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 514.744266][ C1] CR2: 00007f0cd499ef98 CR3: 000000007d398000 CR4: 00000000003506f0 [ 514.752369][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 514.760381][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 514.768390][ C1] Call Trace: [ 514.771700][ C1] [ 514.774663][ C1] ? show_regs+0x8c/0xa0 [ 514.778973][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 514.785356][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 514.790607][ C1] ? rcu_sched_clock_irq+0x24f4/0x33e0 [ 514.796160][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 514.801858][ C1] ? __asan_memcpy+0x3c/0x60 [ 514.806529][ C1] ? __asan_memcpy+0x3c/0x60 [ 514.811179][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 514.816546][ C1] ? update_process_times+0x175/0x220 [ 514.821971][ C1] ? __pfx_update_process_times+0x10/0x10 [ 514.827740][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 514.833259][ C1] ? update_wall_time+0x1c/0x40 [ 514.838173][ C1] ? tick_nohz_handler+0x376/0x530 [ 514.843343][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 514.848940][ C1] ? __hrtimer_run_queues+0x657/0xcc0 [ 514.854376][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 514.860167][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 514.866327][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 514.871513][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 514.877843][ C1] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 514.883712][ C1] [ 514.886669][ C1] [ 514.889633][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 514.895870][ C1] ? smp_call_function_many_cond+0x4e5/0x1420 [ 514.901984][ C1] ? smp_call_function_many_cond+0x4e7/0x1420 [ 514.908206][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 514.914682][ C1] ? __pfx___text_poke+0x10/0x10 [ 514.919674][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 514.924765][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 514.929950][ C1] text_poke_bp_batch+0x22b/0x760 [ 514.935039][ C1] ? __pfx_text_poke_loc_init+0x10/0x10 [ 514.940650][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 514.946299][ C1] ? __SCT__tp_func_sched_wakeup_new+0x8/0x8 [ 514.952375][ C1] text_poke_bp+0xa3/0xd0 [ 514.956759][ C1] ? __pfx_text_poke_bp+0x10/0x10 [ 514.961848][ C1] ? __mutex_lock+0x1a6/0x9c0 [ 514.966591][ C1] ? arch_static_call_transform+0x28/0xb0 [ 514.972388][ C1] ? __SCT__tp_func_sched_wakeup_new+0x8/0x8 [ 514.978439][ C1] __static_call_transform+0x34d/0x770 [ 514.984142][ C1] ? __pfx___static_call_transform+0x10/0x10 [ 514.990198][ C1] ? __SCT__tp_func_sched_wakeup_new+0x8/0x8 [ 514.996257][ C1] ? __pfx___traceiter_sched_switch+0x10/0x10 [ 515.002397][ C1] ? __SCT__tp_func_sched_wakeup_new+0x8/0x8 [ 515.008435][ C1] ? __pfx___traceiter_sched_switch+0x10/0x10 [ 515.014566][ C1] arch_static_call_transform+0x5d/0xb0 [ 515.020177][ C1] ? __SCT__tp_func_sched_wakeup_new+0x8/0x8 [ 515.026281][ C1] __static_call_update+0xee/0x660 [ 515.031473][ C1] ? __pfx___traceiter_sched_switch+0x10/0x10 [ 515.037627][ C1] ? __pfx___static_call_update+0x10/0x10 [ 515.043426][ C1] ? trace_kmalloc+0x2d/0xe0 [ 515.048082][ C1] ? __kmalloc_noprof+0x207/0x400 [ 515.053159][ C1] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 515.059279][ C1] tracepoint_add_func+0xb50/0xe50 [ 515.064491][ C1] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 515.070612][ C1] tracepoint_probe_register_prio_may_exist+0xbd/0x110 [ 515.077520][ C1] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 515.085030][ C1] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 515.091143][ C1] ? bpf_link_prime+0x8a/0x4d0 [ 515.095959][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 515.101391][ C1] bpf_probe_register+0x189/0x200 [ 515.106494][ C1] bpf_raw_tp_link_attach+0x245/0x540 [ 515.111931][ C1] ? find_held_lock+0x2d/0x110 [ 515.116744][ C1] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 515.122691][ C1] ? __might_fault+0x13b/0x190 [ 515.127531][ C1] ? fput+0x30/0x390 [ 515.131501][ C1] ? __bpf_prog_get+0x9a/0x2e0 [ 515.136328][ C1] __sys_bpf+0x3a5/0x49c0 [ 515.140726][ C1] ? __pfx_futex_wake+0x10/0x10 [ 515.145642][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 515.150455][ C1] ? do_user_addr_fault+0xdc7/0x13f0 [ 515.155803][ C1] ? reacquire_held_locks+0x20b/0x4c0 [ 515.161241][ C1] ? do_futex+0x123/0x350 [ 515.165627][ C1] ? __pfx_do_futex+0x10/0x10 [ 515.170405][ C1] ? xfd_validate_state+0x5d/0x180 [ 515.175595][ C1] __x64_sys_bpf+0x78/0xc0 [ 515.180061][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 515.185325][ C1] do_syscall_64+0xcd/0x250 [ 515.189878][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.195832][ C1] RIP: 0033:0x7f0cd3b7def9 [ 515.200285][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.219936][ C1] RSP: 002b:00007f0cd499f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 515.228487][ C1] RAX: ffffffffffffffda RBX: 00007f0cd3d36130 RCX: 00007f0cd3b7def9 [ 515.236512][ C1] RDX: 0000000000000010 RSI: 0000000020000740 RDI: 0000000000000011 [ 515.244617][ C1] RBP: 00007f0cd3bf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 515.252627][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.260722][ C1] R13: 0000000000000000 R14: 00007f0cd3d36130 R15: 00007ffd302e8978 [ 515.268780][ C1]