last executing test programs: 9.421241925s ago: executing program 0 (id=1577): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000990000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.261249971s ago: executing program 0 (id=1580): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.068380381s ago: executing program 3 (id=1589): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xa, 0x42) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000004c0)={{0x9, 0x0, 0x9, 0x58, '\x00', 0x1}, 0x0, [0x0, 0x80000000, 0x81, 0x3, 0x1, 0x10, 0x0, 0x9, 0xfb, 0xf, 0x12b, 0x3, 0x2, 0xff, 0x1ff, 0x3, 0x9, 0xc056, 0xfffffffffffffffd, 0x9, 0x7, 0x5, 0xfff, 0x8000000000000000, 0x3, 0x7, 0xffffffffffffffff, 0xf25, 0x0, 0x3ff, 0x5, 0x12de, 0x6, 0x9, 0xffffffff, 0x8000000000000000, 0x7, 0xffffffffffffffff, 0xa3d8, 0x5, 0x9, 0x9, 0x6, 0xfed, 0x3, 0x10, 0x9, 0x6, 0x9, 0x9, 0x80000000, 0x2, 0x6, 0xffffffff, 0x3, 0x7, 0xf, 0xad7, 0x100, 0x0, 0x3, 0x2, 0xa87, 0x4, 0x1ff, 0x9, 0xed7, 0x7, 0xdcb, 0x9, 0x7, 0x4, 0x2, 0x1, 0x8000000000000000, 0x0, 0x8001, 0x7, 0x58, 0x401, 0x6, 0xca37, 0x2f54, 0x101, 0x5, 0xee, 0x4, 0x8, 0x1ff, 0xa95, 0xd8b, 0x5, 0x7, 0x9, 0x6, 0x6b1f, 0xe1c741d, 0x0, 0x8, 0x1, 0x7, 0x4, 0xc, 0x8000000000000000, 0x40, 0x6, 0x5, 0x1, 0x8, 0x8a4, 0x19e, 0x7, 0xc, 0x0, 0x9a9, 0x9, 0x4, 0x1, 0x7, 0x9, 0x5, 0x3ff, 0x8000000000000000, 0x0, 0x3, 0x800, 0x5, 0x8]}) rseq(0x0, 0x0, 0x0, 0x0) membarrier(0x4, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0xf, 0x0, 0x0) bind$inet(r3, &(0x7f0000000640)={0x2, 0x0, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000240)={0x20, r6, 0x1, 0x4, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r6, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4000040) 6.800321515s ago: executing program 3 (id=1593): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x25, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x800000, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5}}]}}]}, 0x48}}, 0x0) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r8}, 0x10) fcntl$lock(r5, 0x25, 0x0) io_setup(0x5ff, 0x0) r9 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r9, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$addseals(r0, 0x409, 0xa) 6.393373906s ago: executing program 1 (id=1594): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0x4}}, 0x30) 6.227179527s ago: executing program 0 (id=1596): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f000000b280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f000000b340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70b525, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8054}, 0x4010) 5.691719086s ago: executing program 0 (id=1597): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r1, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 5.484758681s ago: executing program 3 (id=1598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 5.312666429s ago: executing program 1 (id=1599): io_uring_setup(0x175c, &(0x7f000009df80)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000300)={0x50, 0xffff, 0x0, {}, {}, @cond=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) syz_open_dev$evdev(&(0x7f0000000040), 0x75c, 0x10d840) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) 4.768611034s ago: executing program 0 (id=1601): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x150, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x30, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffffd, 0x0, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x80, 0x20}}}}}}}]}}, 0x0) dup(r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x4000, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x804, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0}) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) 3.450764217s ago: executing program 4 (id=1605): r0 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b", 0x2a, 0xebec93e830f96115}) io_uring_enter(r0, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) 3.312588805s ago: executing program 4 (id=1606): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, {}, 0xffffffff}) 2.791624648s ago: executing program 1 (id=1607): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xf3a, 0xa) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x4e) 2.701321497s ago: executing program 4 (id=1608): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x840) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000380)={{0x8, 0xa5}, 0x0, 0x0, 0x4, {0x8, 0xfe}, 0x8, 0x2}) 2.659650422s ago: executing program 1 (id=1609): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 2.574651529s ago: executing program 2 (id=1610): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a64", 0x16, 0xebec93e830f96115}) io_uring_enter(r1, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.554058604s ago: executing program 4 (id=1611): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 2.460172893s ago: executing program 2 (id=1612): socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.236034368s ago: executing program 2 (id=1613): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'team_slave_1\x00', 0xff}) 2.033114859s ago: executing program 2 (id=1614): r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000001640)=""/4108, 0x100c}], 0x1, 0x3, 0x0) 2.027968139s ago: executing program 3 (id=1615): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xa, 0x42) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000004c0)={{0x9, 0x0, 0x9, 0x58, '\x00', 0x1}, 0x0, [0x0, 0x80000000, 0x81, 0x3, 0x1, 0x10, 0x0, 0x9, 0xfb, 0xf, 0x12b, 0x3, 0x2, 0xff, 0x1ff, 0x3, 0x9, 0xc056, 0xfffffffffffffffd, 0x9, 0x7, 0x5, 0xfff, 0x8000000000000000, 0x3, 0x7, 0xffffffffffffffff, 0xf25, 0x0, 0x3ff, 0x5, 0x12de, 0x6, 0x9, 0xffffffff, 0x8000000000000000, 0x7, 0xffffffffffffffff, 0xa3d8, 0x5, 0x9, 0x9, 0x6, 0xfed, 0x3, 0x10, 0x9, 0x6, 0x9, 0x9, 0x80000000, 0x2, 0x6, 0xffffffff, 0x3, 0x7, 0xf, 0xad7, 0x100, 0x0, 0x3, 0x2, 0xa87, 0x4, 0x1ff, 0x9, 0xed7, 0x7, 0xdcb, 0x9, 0x7, 0x4, 0x2, 0x1, 0x8000000000000000, 0x0, 0x8001, 0x7, 0x58, 0x401, 0x6, 0xca37, 0x2f54, 0x101, 0x5, 0xee, 0x4, 0x8, 0x1ff, 0xa95, 0xd8b, 0x5, 0x7, 0x9, 0x6, 0x6b1f, 0xe1c741d, 0x0, 0x8, 0x1, 0x7, 0x4, 0xc, 0x8000000000000000, 0x40, 0x6, 0x5, 0x1, 0x8, 0x8a4, 0x19e, 0x7, 0xc, 0x0, 0x9a9, 0x9, 0x4, 0x1, 0x7, 0x9, 0x5, 0x3ff, 0x8000000000000000, 0x0, 0x3, 0x800, 0x5, 0x8]}) rseq(0x0, 0x0, 0x0, 0x0) membarrier(0x4, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0xf, 0x0, 0x0) bind$inet(r3, &(0x7f0000000640)={0x2, 0x0, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000240)={0x20, r6, 0x1, 0x4, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r6, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4000040) 1.854305192s ago: executing program 1 (id=1616): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = dup(r0) write$uinput_user_dev(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000e40)='./file0\x00') r6 = openat$binfmt(0xffffff9c, r5, 0x41, 0x1ff) write$binfmt_script(r6, &(0x7f00000013c0)={'#! ', './file0', [{0x20, '\xa1a\x00\xdba\x9bz\x06#\xb5\x93\xaf\xf1#\x93\xc2b\x98\xb1#+\xeb\xdd\x8fq\x8bev\xbc\xf6\xeb\xa7|\xe6\x9cm\xcb\x17\xce\xc2M\xcc\x1d\x00\x89i\xda\au\x8cmi\x11\x1bt\x9fl;\xf0\x88 \xbcH\x9d\xc3B\x9c\xd4\xa8`\x9e\x03a9P\x10o\xba)@(p\xfc4\x8857Su\xf53&\xd1)\x9e\a\xfcY\xffVL\xc9e\x1a|\xfbz\xd7\xecP\xd7\x1f\xe2D\xd9\xc6n5\xf3A\x8f\xee\x05bS\xb8\xf0\xd6\xa8\x809(\xc2\x1a\xbc\x00\x00\x00\x00\x00\x10\x00\'\x81`\x9eV\xae\xab\x8d\xed#\xafr`\x1e\xe0!\xc4\xe0S\xff\xd9\x86[\x82p\xb6\x88\xf0\xc4\x1d\xc0\x18R\xddS\xfb^\xe1\xb0Rx|u\xeb\xd7\xcf\xac)Kk\x03\xd2VU\x83i\xafEG\xcb/\tK\r\xd99-^\x9e`\xe8\xbf\xc1=\xa6/\xfd\xda\xa0\xd0\xe9\x06\x01\xee\xbf\xbb\x81\x83\xe4\r\xab\v\xac\xa3\xca\x8f\x81\xd6\xc2=\xc4\xf8'}]}, 0x100) execve(&(0x7f0000001040)='./file0\x00', 0x0, &(0x7f0000000040)) 1.85357171s ago: executing program 2 (id=1617): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) socket$inet_smc(0x2b, 0x1, 0x0) rseq(0x0, 0x0, 0x0, 0x0) 1.701254106s ago: executing program 3 (id=1618): openat$kvm(0xffffffffffffff9c, 0x0, 0x9c0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x14) 923.80022ms ago: executing program 0 (id=1619): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6ea1893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb951368a970c58fb4f3"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="6ce0cb00000000000000fb00"/31], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) 895.951388ms ago: executing program 2 (id=1620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x4, 0x4002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x1d0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 864.687397ms ago: executing program 3 (id=1621): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x4) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3, 0x0, 0x4000000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdedb2150e1918c30b6301f0212feb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9cc7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dcac2563e1c1e7624cc3b88b330ad416c4c1d8c60589b6045a4ffff50df4d34bc5847bebb943a84cb56956931ba9cc39c4a9deea5d77aa843a40000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 606.646927ms ago: executing program 4 (id=1622): syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) 158.140063ms ago: executing program 1 (id=1623): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r1, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 0s ago: executing program 4 (id=1624): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_io_uring_setup(0x4174, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) kernel console output (not intermixed with test programs): : config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.849628][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0 [ 122.869214][ T5921] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.883214][ T5921] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.894818][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0 [ 122.906589][ T5921] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.917250][ T5921] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.568551][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0 [ 123.577868][ T5921] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.588137][ T5921] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.600122][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0 [ 123.631795][ T6936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.356'. [ 123.663191][ T5921] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.701665][ T5921] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.753062][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0 [ 123.787539][ T5921] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.826739][ T5921] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.849145][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0 [ 123.906186][ T5921] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.921846][ T5921] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.943093][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0 [ 123.963954][ T5921] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 123.981535][ T5921] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 124.000381][ T5921] usb 4-1: Product: syz [ 124.027509][ T5921] usb 4-1: Manufacturer: syz [ 124.080137][ T6956] syz.1.366 uses obsolete (PF_INET,SOCK_PACKET) [ 124.102673][ T5921] usb 4-1: SerialNumber: syz [ 124.126494][ T5921] usb 4-1: config 0 descriptor?? [ 124.148274][ T5921] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 124.375244][ T5892] usb 4-1: USB disconnect, device number 5 [ 124.387359][ T5892] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 124.507898][ T29] audit: type=1400 audit(1732739995.501:649): avc: denied { map } for pid=6971 comm="syz.1.373" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 124.632195][ T1200] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 124.818804][ T1200] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.841400][ T1200] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 124.869911][ T1200] usb 1-1: config 1 has no interface number 0 [ 124.898799][ T1200] usb 1-1: too many endpoints for config 1 interface 1 altsetting 0: 48, using maximum allowed: 30 [ 124.953924][ T1200] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 124.987969][ T1200] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.003243][ T1200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.051385][ T1200] usb 1-1: Product: syz [ 125.086103][ T1200] usb 1-1: Manufacturer: syz [ 125.097485][ T1200] usb 1-1: SerialNumber: syz [ 125.338791][ T1200] usb 1-1: USB disconnect, device number 8 [ 125.366800][ T6993] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.399349][ T29] audit: type=1400 audit(1732739996.401:650): avc: denied { append } for pid=6992 comm="syz.2.382" name="media0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.586097][ T29] audit: type=1400 audit(1732739996.421:651): avc: denied { read } for pid=6992 comm="syz.2.382" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 126.111819][ T29] audit: type=1400 audit(1732739996.421:652): avc: denied { open } for pid=6992 comm="syz.2.382" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 126.162441][ T29] audit: type=1400 audit(1732739997.161:653): avc: denied { unmount } for pid=5839 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 126.361664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.376789][ T7010] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 126.390463][ T29] audit: type=1400 audit(1732739997.371:654): avc: denied { ioctl } for pid=7006 comm="syz.3.389" path="socket:[11260]" dev="sockfs" ino=11260 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.481563][ T5991] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 126.491496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 126.517421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 126.632141][ T5991] usb 1-1: Using ep0 maxpacket: 32 [ 126.639990][ T5991] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 126.673058][ T5991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.684721][ T5991] usb 1-1: config 0 descriptor?? [ 126.711194][ T5991] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 126.752235][ T29] audit: type=1400 audit(1732739997.761:655): avc: denied { read write } for pid=6992 comm="syz.2.382" name="radio8" dev="devtmpfs" ino=1009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 126.752306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 126.784722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #340!!! [ 126.793985][ T29] audit: type=1400 audit(1732739997.791:656): avc: denied { open } for pid=6992 comm="syz.2.382" path="/dev/radio8" dev="devtmpfs" ino=1009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 126.811603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 126.864645][ T5894] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 127.034075][ T5894] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 127.072739][ T5894] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.083461][ T7032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7032 comm=syz.3.399 [ 127.089690][ T5894] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.096956][ T7032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7032 comm=syz.3.399 [ 127.171876][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.180286][ T5894] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.190568][ T5894] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.202693][ T29] audit: type=1400 audit(1732739998.201:657): avc: denied { create } for pid=7033 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 127.228193][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.236023][ T5894] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.245245][ T1200] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 127.254035][ T5894] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.265127][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.276798][ T5894] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.285960][ T5894] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.297315][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.313955][ T5894] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.323013][ T5894] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.334011][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.345146][ T5894] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.354179][ T5894] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.365240][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.390443][ T5894] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.401049][ T5894] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.412071][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.419831][ T5894] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.429884][ T5894] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.444144][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.451777][ T1200] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.463092][ T1200] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 127.475418][ T1200] usb 2-1: config 1 has no interface number 0 [ 127.482532][ T1200] usb 2-1: too many endpoints for config 1 interface 1 altsetting 0: 48, using maximum allowed: 30 [ 127.497763][ T1200] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 127.519479][ T5894] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 127.528703][ T5894] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 127.537297][ T5894] usb 5-1: Product: syz [ 127.541888][ T5894] usb 5-1: Manufacturer: syz [ 127.547201][ T5894] usb 5-1: SerialNumber: syz [ 127.560592][ T1200] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.569992][ T1200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.578164][ T1200] usb 2-1: Product: syz [ 127.584449][ T5894] usb 5-1: config 0 descriptor?? [ 127.590869][ T1200] usb 2-1: Manufacturer: syz [ 127.599498][ T1200] usb 2-1: SerialNumber: syz [ 127.606334][ T5894] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 127.767193][ T7042] kvm: emulating exchange as write [ 127.840935][ T5921] usb 5-1: USB disconnect, device number 7 [ 127.865134][ T5921] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 127.929803][ T7052] netlink: 'syz.3.408': attribute type 16 has an invalid length. [ 127.937809][ T7052] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.408'. [ 127.954889][ T1200] usb 2-1: USB disconnect, device number 7 [ 128.481677][ T1200] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 128.511659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 128.640608][ T1200] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 128.655916][ T1200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.670285][ T1200] usb 4-1: Product: syz [ 128.682702][ T1200] usb 4-1: Manufacturer: syz [ 128.702056][ T1200] usb 4-1: SerialNumber: syz [ 128.709636][ T1200] usb 4-1: config 0 descriptor?? [ 128.724376][ T29] audit: type=1400 audit(1732739999.731:658): avc: denied { create } for pid=7066 comm="syz.1.415" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 129.156875][ T5991] gspca_vc032x: reg_r err -32 [ 129.161696][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.167052][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.172918][ T7083] netlink: 'syz.2.422': attribute type 2 has an invalid length. [ 129.181644][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.187197][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.193054][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.198554][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.209542][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.215094][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.220452][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.225845][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.231189][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.245024][ T7083] netlink: 'syz.2.422': attribute type 9 has an invalid length. [ 129.267133][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.277997][ T7083] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.422'. [ 129.287637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 129.303179][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.340392][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.388228][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.408971][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.429316][ T1200] mos7840 4-1:0.0: required endpoints missing [ 129.447917][ T5991] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.486152][ T1200] usb 4-1: USB disconnect, device number 6 [ 129.506086][ T5991] gspca_vc032x: Unknown sensor... [ 129.523192][ T5991] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 129.707596][ T7095] netlink: 'syz.1.426': attribute type 16 has an invalid length. [ 129.715565][ T7095] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.426'. [ 130.231615][ T1200] usb 1-1: USB disconnect, device number 9 [ 130.260752][ T29] audit: type=1400 audit(1732740001.261:659): avc: denied { create } for pid=7124 comm="syz.4.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.265372][ T7125] vlan2: entered promiscuous mode [ 130.285949][ T7125] bridge0: port 4(vlan2) entered blocking state [ 130.292391][ T7125] bridge0: port 4(vlan2) entered disabled state [ 130.298982][ T7125] vlan2: entered allmulticast mode [ 130.481750][ T5892] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 130.534875][ T7133] netlink: 60 bytes leftover after parsing attributes in process `syz.3.443'. [ 130.662020][ T5892] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 130.699560][ T5892] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.727824][ T5892] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.249115][ T5892] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 131.258304][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.271847][ T5892] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 131.286721][ T5892] usb 3-1: invalid MIDI out EP 0 [ 131.348287][ T5892] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 131.386453][ T6023] udevd[6023]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.515524][ T5892] usb 3-1: USB disconnect, device number 8 [ 131.896948][ T7171] netlink: 52 bytes leftover after parsing attributes in process `syz.0.459'. [ 132.144121][ T7176] netlink: 'syz.1.461': attribute type 4 has an invalid length. [ 133.238744][ T29] audit: type=1400 audit(1732740004.241:660): avc: denied { connect } for pid=7200 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 133.292874][ T7204] netlink: 'syz.4.473': attribute type 4 has an invalid length. [ 133.330990][ T7205] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_1, syncid = 4, id = 0 [ 133.861603][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.868056][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.580626][ T7233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7233 comm=syz.4.482 [ 135.587964][ T7252] netlink: 176 bytes leftover after parsing attributes in process `syz.0.488'. [ 139.509980][ T7363] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 139.553193][ T7363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.529'. [ 139.579508][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 140.111567][ T5991] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 140.257575][ T1200] IPVS: starting estimator thread 0... [ 140.283007][ T5991] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 140.302056][ T5991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.314248][ T5991] usb 3-1: config 0 descriptor?? [ 140.371946][ T7388] IPVS: using max 32 ests per chain, 76800 per kthread [ 140.392729][ T29] audit: type=1400 audit(1732740011.401:661): avc: denied { write } for pid=7391 comm="syz.0.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 140.461861][ T29] audit: type=1400 audit(1732740011.421:662): avc: denied { read } for pid=7391 comm="syz.0.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 140.602502][ T7399] netlink: 'syz.3.547': attribute type 4 has an invalid length. [ 140.748007][ T5991] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 140.969449][ T7413] netlink: 'syz.1.550': attribute type 16 has an invalid length. [ 140.977571][ T7413] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.550'. [ 141.554848][ T5991] playstation 0003:054C:0DF2.0008: Invalid byte count transferred, expected 20 got 0 [ 141.565456][ T5991] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense pairing info: -22 [ 141.589175][ T5991] playstation 0003:054C:0DF2.0008: Failed to get MAC address from DualSense [ 141.598140][ T5991] playstation 0003:054C:0DF2.0008: Failed to create dualsense. [ 141.610402][ T5991] playstation 0003:054C:0DF2.0008: probe with driver playstation failed with error -22 [ 141.785378][ T5892] IPVS: starting estimator thread 0... [ 141.793852][ T5892] usb 3-1: USB disconnect, device number 9 [ 141.881985][ T7421] IPVS: using max 26 ests per chain, 62400 per kthread [ 142.292868][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'. [ 142.372327][ T5894] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 142.521224][ T29] audit: type=1400 audit(1732740013.461:663): avc: denied { ioctl } for pid=7452 comm="syz.2.568" path="/dev/video6" dev="devtmpfs" ino=938 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 142.572858][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.608395][ T29] audit: type=1400 audit(1732740013.611:664): avc: denied { map } for pid=7452 comm="syz.2.568" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 142.667830][ T5894] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.690152][ T29] audit: type=1400 audit(1732740013.611:665): avc: denied { read write } for pid=7452 comm="syz.2.568" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 142.697604][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.734506][ T7461] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 142.753754][ T5894] usb 4-1: Product: syz [ 142.758224][ T5894] usb 4-1: Manufacturer: syz [ 142.763427][ T5894] usb 4-1: SerialNumber: syz [ 142.768850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 142.932222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 143.796737][ T7492] loop2: detected capacity change from 0 to 7 [ 143.813548][ T7492] Dev loop2: unable to read RDB block 7 [ 143.819595][ T7492] loop2: unable to read partition table [ 143.831601][ T7492] loop2: partition table beyond EOD, truncated [ 143.837938][ T7492] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 144.022954][ T7497] netlink: 'syz.1.586': attribute type 4 has an invalid length. [ 144.649729][ T5894] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 145.085645][ T5894] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 145.111860][ T5894] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 145.294873][ T5894] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 145.308178][ T5894] cdc_ncm 4-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 145.422403][ T7512] netlink: 'syz.2.588': attribute type 4 has an invalid length. [ 145.510786][ T9] usb 4-1: USB disconnect, device number 7 [ 145.517644][ T9] cdc_ncm 4-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 145.531668][ T5991] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 145.694577][ T5991] usb 2-1: Using ep0 maxpacket: 8 [ 145.714977][ T5991] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 145.755507][ T5991] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x67, changing to 0x7 [ 145.941550][ T5991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 26288, setting to 1024 [ 145.971523][ T5991] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.991546][ T5991] usb 2-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57 [ 146.000631][ T5991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.060821][ T5991] usb 2-1: config 0 descriptor?? [ 146.071035][ T7505] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 146.080394][ T5991] kobil_sct 2-1:0.0: KOBIL USB smart card terminal converter detected [ 146.119643][ T5991] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 146.287326][ T5991] usb 2-1: USB disconnect, device number 8 [ 146.314312][ T5991] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 146.359138][ T5991] kobil_sct 2-1:0.0: device disconnected [ 147.315422][ T7574] netlink: zone id is out of range [ 147.320609][ T7574] netlink: zone id is out of range [ 147.353189][ T7574] netlink: zone id is out of range [ 147.360718][ T7574] netlink: zone id is out of range [ 147.379270][ T7574] netlink: zone id is out of range [ 147.399997][ T7574] netlink: zone id is out of range [ 147.409657][ T7574] netlink: zone id is out of range [ 147.421625][ T7574] netlink: set zone limit has 4 unknown bytes [ 147.472347][ T7582] netlink: 'syz.1.608': attribute type 4 has an invalid length. [ 147.661610][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 147.852301][ T9] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 147.889715][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.909241][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.486395][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 148.496467][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.505530][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.516586][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 148.532524][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.616043][ T5892] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 148.642112][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.700018][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 148.711982][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.251070][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.262150][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 149.351665][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.360585][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.371625][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 149.398655][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.408824][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.420261][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 149.500704][ T5892] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 149.511709][ T5892] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 149.541550][ T5892] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 149.550577][ T5892] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 149.562579][ T5892] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 149.580029][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.589053][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.600177][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 149.608957][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.618327][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.630122][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 149.638026][ T5892] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 149.647338][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 149.655427][ T5892] usb 2-1: Product: syz [ 149.659604][ T5892] usb 2-1: Manufacturer: syz [ 149.672266][ T5892] cdc_wdm 2-1:1.0: skipping garbage [ 149.677550][ T5892] cdc_wdm 2-1:1.0: skipping garbage [ 149.686344][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 149.697054][ T5892] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 149.703206][ T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 149.711754][ T5892] cdc_wdm 2-1:1.0: Unknown control protocol [ 149.720362][ T9] usb 4-1: Product: syz [ 149.724781][ T9] usb 4-1: Manufacturer: syz [ 149.729392][ T9] usb 4-1: SerialNumber: syz [ 149.738131][ T9] usb 4-1: config 0 descriptor?? [ 149.747456][ T9] yurex 4-1:0.0: USB YUREX device now attached to Yurex #1 [ 149.828844][ T7617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.622'. [ 149.927033][ T5893] usb 2-1: USB disconnect, device number 9 [ 149.987276][ T5894] usb 4-1: USB disconnect, device number 8 [ 149.995190][ T5894] yurex 4-1:0.0: USB YUREX #1 now disconnected [ 150.784588][ T7637] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_1, syncid = 4, id = 0 [ 151.721880][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 151.889042][ T9] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 151.898565][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.387504][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.398655][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 152.407609][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.427108][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.452822][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 152.477409][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.496471][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.530328][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 152.842929][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.852891][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.863941][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 152.891994][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.905903][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.925843][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 152.946618][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.981532][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.998755][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 153.011939][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.021108][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.033071][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 153.046045][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.055125][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.116619][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 153.125261][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 153.134660][ T9] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 153.146570][ T9] usb 2-1: Product: syz [ 153.150792][ T9] usb 2-1: Manufacturer: syz [ 153.182406][ T9] usb 2-1: SerialNumber: syz [ 153.199059][ T9] usb 2-1: config 0 descriptor?? [ 153.225080][ T9] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 153.526081][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 153.536328][ T5893] usb 2-1: USB disconnect, device number 10 [ 153.559344][ T5893] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 153.568102][ T29] audit: type=1400 audit(1732740024.571:666): avc: denied { append } for pid=7710 comm="syz.0.659" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 153.601670][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 153.642011][ T29] audit: type=1400 audit(1732740024.581:667): avc: denied { map } for pid=7710 comm="syz.0.659" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 153.708263][ T29] audit: type=1400 audit(1732740024.651:668): avc: denied { call } for pid=7710 comm="syz.0.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 153.798680][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.819133][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 153.834089][ T9] usb 5-1: config 1 has no interface number 0 [ 153.840406][ T9] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.878839][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.888165][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.896626][ T9] usb 5-1: Product: syz [ 153.901022][ T9] usb 5-1: Manufacturer: syz [ 153.905940][ T9] usb 5-1: SerialNumber: syz [ 153.942551][ T9] cdc_ncm 5-1:1.1: skipping garbage [ 153.947847][ T9] cdc_ncm 5-1:1.1: NCM or ECM functional descriptors missing [ 153.955557][ T9] cdc_ncm 5-1:1.1: bind() failure [ 154.007026][ T7728] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_1, syncid = 4, id = 0 [ 154.549297][ T5991] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 154.779943][ T5991] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 154.903240][ T5991] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.997098][ T5991] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 155.006921][ T5991] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 155.019076][ T5991] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 155.046784][ T5991] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 155.059415][ T5991] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 155.077099][ T5991] usb 1-1: Product: syz [ 155.086613][ T5991] usb 1-1: Manufacturer: syz [ 155.103689][ T5991] cdc_wdm 1-1:1.0: skipping garbage [ 155.113255][ T5991] cdc_wdm 1-1:1.0: skipping garbage [ 155.126012][ T5991] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 155.773550][ T5991] usb 1-1: USB disconnect, device number 10 [ 156.352515][ T5991] usb 5-1: USB disconnect, device number 8 [ 156.439727][ T7778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.524569][ T1200] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 156.732796][ T29] audit: type=1400 audit(1732740027.741:669): avc: denied { ioctl } for pid=7772 comm="syz.2.679" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.726513][ T29] audit: type=1400 audit(1732740028.251:670): avc: denied { mount } for pid=7790 comm="syz.0.687" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 157.832313][ T29] audit: type=1400 audit(1732740028.371:671): avc: denied { mounton } for pid=7790 comm="syz.0.687" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 158.013377][ T1200] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 158.024207][ T1200] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.036347][ T1200] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.047357][ T1200] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.054850][ T1200] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.063980][ T1200] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.101979][ T7801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.690'. [ 158.110963][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'. [ 158.125399][ T1200] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.152043][ T29] audit: type=1400 audit(1732740029.161:672): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 158.166516][ T1200] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.185830][ T1200] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.198597][ T1200] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.298455][ T1200] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.322785][ T1200] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.345545][ T7809] netlink: 24 bytes leftover after parsing attributes in process `syz.3.692'. [ 158.442347][ T29] audit: type=1400 audit(1732740029.441:673): avc: denied { read write } for pid=7812 comm="syz.1.694" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.486111][ T1200] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.495287][ T1200] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.504345][ T1200] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.515470][ T1200] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.529298][ T29] audit: type=1400 audit(1732740029.441:674): avc: denied { open } for pid=7812 comm="syz.1.694" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.538913][ T1200] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.561943][ T1200] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.573140][ T1200] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.599996][ T1200] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.609033][ T1200] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.620086][ T1200] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.633158][ T1200] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.642185][ T1200] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.653131][ T1200] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.665030][ T1200] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 158.674376][ T1200] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 158.682822][ T1200] usb 3-1: Product: syz [ 158.687034][ T1200] usb 3-1: Manufacturer: syz [ 158.691735][ T1200] usb 3-1: SerialNumber: syz [ 158.698454][ T1200] usb 3-1: config 0 descriptor?? [ 158.701660][ T9] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 158.714924][ T1200] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 158.890927][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.905966][ T9] usb 2-1: config 0 has no interfaces? [ 158.914038][ T9] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 158.928037][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.938392][ T9] usb 2-1: Product: syz [ 158.947646][ T9] usb 2-1: Manufacturer: syz [ 158.952680][ T9] usb 2-1: SerialNumber: syz [ 159.006024][ T9] usb 2-1: config 0 descriptor?? [ 159.073388][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 159.073864][ T9] usb 3-1: USB disconnect, device number 10 [ 159.114505][ T9] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 159.261721][ T5894] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 159.269517][ T5853] Bluetooth: hci1: unexpected event 0x06 length: 10 > 3 [ 159.271653][ T29] audit: type=1400 audit(1732740030.261:675): avc: denied { create } for pid=7812 comm="syz.1.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 159.274394][ T7822] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.315353][ T5893] usb 2-1: USB disconnect, device number 11 [ 160.012683][ T29] audit: type=1400 audit(1732740031.021:676): avc: denied { getopt } for pid=7830 comm="syz.2.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 160.046150][ T5894] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 160.054735][ T5894] usb 4-1: config 0 has no interface number 0 [ 160.063205][ T5894] usb 4-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 160.090976][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.112131][ T5894] usb 4-1: Product: syz [ 160.267328][ T5894] usb 4-1: Manufacturer: syz [ 160.272549][ T5894] usb 4-1: SerialNumber: syz [ 160.292485][ T5894] usb 4-1: config 0 descriptor?? [ 160.306941][ T5894] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 160.316823][ T5894] dvb-usb: bulk message failed: -22 (4/0) [ 160.323107][ T5894] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 160.401412][ T5894] dvb-usb: bulk message failed: -22 (5/0) [ 160.488059][ T5894] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 160.798060][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 160.822591][ T5894] dvbdev: DVB: registering new adapter (Pinnacle 400e DVB-S USB2.0) [ 160.832380][ T5894] usb 4-1: media controller created [ 160.851209][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.871781][ T5894] ttusb2: set interface to alts=3 failed [ 161.002129][ T5894] DVB: Unable to find symbol tda10086_attach() [ 161.008357][ T5894] dvb-usb: no frontend was attached by 'Pinnacle 400e DVB-S USB2.0' [ 161.128645][ T7857] netlink: 36 bytes leftover after parsing attributes in process `syz.1.709'. [ 161.186492][ T5894] dvb-usb: bulk message failed: -22 (4/0) [ 161.193058][ T5894] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 161.203440][ T5894] dvb-usb: bulk message failed: -22 (5/0) [ 161.209197][ T5894] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 161.219442][ T5894] dvb-usb: Pinnacle 400e DVB-S USB2.0 successfully initialized and connected. [ 161.233093][ T5894] usb 4-1: USB disconnect, device number 9 [ 161.274936][ T5894] dvb-usb: Pinnacle 400e DVB-S USB2.0 successfully deinitialized and disconnected. [ 161.362036][ T5921] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 161.401399][ T7868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.713'. [ 161.481798][ T6012] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 161.531666][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 161.538245][ T5921] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.548328][ T5921] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.558319][ T5893] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 161.566020][ T5921] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.576222][ T5921] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.590176][ T5921] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 161.600100][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.641582][ T6012] usb 3-1: Using ep0 maxpacket: 8 [ 161.648426][ T6012] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 161.657064][ T6012] usb 3-1: config 0 has no interface number 0 [ 161.665668][ T6012] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.677145][ T6012] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 161.686617][ T6012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.697305][ T6012] usb 3-1: config 0 descriptor?? [ 161.707768][ T6012] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 161.723125][ T5893] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 161.742660][ T5893] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.754072][ T5893] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.768414][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 161.778704][ T5893] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.791693][ T5893] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.807103][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 161.814789][ T5893] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.827944][ T5921] usb 5-1: usb_control_msg returned -32 [ 161.834637][ T5893] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 162.280600][ T7862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.432659][ T5921] usbtmc 5-1:16.0: can't read capabilities [ 162.439562][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 162.453025][ T7862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.453869][ T5893] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.613801][ T5893] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 162.632659][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 162.640346][ T5893] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.649825][ T5893] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 162.674884][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 162.720425][ T5893] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.925588][ T5893] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.105590][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.193258][ T5893] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.225925][ T5893] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.250040][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.266273][ T5893] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.277443][ T5893] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.291237][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.306938][ T5893] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 163.391656][ T5893] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 163.400049][ T5893] usb 2-1: Product: syz [ 163.433025][ T5893] usb 2-1: Manufacturer: syz [ 163.437680][ T5893] usb 2-1: SerialNumber: syz [ 163.457027][ T5893] usb 2-1: config 0 descriptor?? [ 163.483331][ T5893] yurex 2-1:0.0: USB YUREX device now attached to Yurex #2 [ 163.711863][ T6012] usb 2-1: USB disconnect, device number 12 [ 163.720225][ T6012] yurex 2-1:0.0: USB YUREX #2 now disconnected [ 164.226630][ T6012] usb 5-1: USB disconnect, device number 9 [ 164.254737][ T5991] usb 3-1: USB disconnect, device number 11 [ 164.266039][ T5991] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 164.395526][ T7901] netlink: 87 bytes leftover after parsing attributes in process `syz.4.725'. [ 164.464251][ T29] audit: type=1400 audit(1732740035.471:677): avc: denied { write } for pid=7898 comm="syz.3.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 165.637957][ T7924] netlink: 176 bytes leftover after parsing attributes in process `syz.1.732'. [ 166.091813][ T6012] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 166.251643][ T6012] usb 4-1: Using ep0 maxpacket: 8 [ 166.286933][ T6012] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.476281][ T6012] usb 4-1: config 0 has no interface number 0 [ 166.529690][ T6012] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.547732][ T6012] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.557171][ T6012] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.570752][ T6012] usb 4-1: config 0 descriptor?? [ 166.582604][ T6012] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 166.734752][ T7936] netlink: zone id is out of range [ 166.740011][ T7936] netlink: zone id is out of range [ 166.747074][ T7936] netlink: zone id is out of range [ 166.753035][ T7936] netlink: zone id is out of range [ 166.758258][ T7936] netlink: zone id is out of range [ 166.906107][ T7936] netlink: zone id is out of range [ 166.916168][ T7936] netlink: set zone limit has 8 unknown bytes [ 166.998691][ T7939] can0: slcan on ttyS3. [ 167.351078][ T29] audit: type=1400 audit(1732740038.351:678): avc: denied { mount } for pid=7954 comm="syz.4.741" name="/" dev="configfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 167.381163][ T5921] usb 4-1: USB disconnect, device number 10 [ 167.410279][ T5921] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 167.497872][ T29] audit: type=1400 audit(1732740038.501:679): avc: denied { sys_module } for pid=7961 comm="syz.0.743" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 167.642998][ T7937] can0 (unregistered): slcan off ttyS3. [ 167.797336][ T29] audit: type=1400 audit(1732740038.791:680): avc: denied { read } for pid=7954 comm="syz.4.741" name="/" dev="configfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 167.895336][ T29] audit: type=1400 audit(1732740038.791:681): avc: denied { open } for pid=7954 comm="syz.4.741" path="/174/file0" dev="configfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 169.381658][ T29] audit: type=1400 audit(1732740040.381:682): avc: denied { unmount } for pid=5839 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 169.466358][ T29] audit: type=1400 audit(1732740040.461:683): avc: denied { read } for pid=7992 comm="syz.1.750" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 169.613088][ T29] audit: type=1400 audit(1732740040.461:684): avc: denied { open } for pid=7992 comm="syz.1.750" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 170.865879][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 171.104606][ T8021] : renamed from bond0 (while UP) [ 171.648118][ T29] audit: type=1400 audit(1732740042.111:685): avc: denied { ioctl } for pid=8018 comm="syz.3.754" path="socket:[16887]" dev="sockfs" ino=16887 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.205742][ T6012] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 172.241588][ T5893] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 172.371808][ T6012] usb 1-1: Using ep0 maxpacket: 8 [ 172.378234][ T6012] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 172.387093][ T6012] usb 1-1: config 0 has no interface number 0 [ 172.399687][ T6012] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.411690][ T6012] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 172.420752][ T6012] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.447562][ T5893] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 172.464994][ T5893] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.469468][ T6012] usb 1-1: config 0 descriptor?? [ 172.489682][ T5893] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 172.507125][ T6012] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 172.509250][ T5893] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 172.552831][ T5893] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 172.622762][ T5893] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 172.636854][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 172.647346][ T5893] usb 5-1: Product: syz [ 172.651788][ T5893] usb 5-1: Manufacturer: syz [ 172.670697][ T5893] cdc_wdm 5-1:1.0: skipping garbage [ 172.676818][ T5893] cdc_wdm 5-1:1.0: skipping garbage [ 172.682175][ T5893] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 172.876101][ T5921] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 173.043378][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 173.066112][ T5921] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 173.075032][ T5894] usb 5-1: USB disconnect, device number 10 [ 173.075233][ T5921] usb 3-1: config 0 has no interface number 0 [ 173.089110][ T5921] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.119317][ T5921] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.129490][ T5921] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 173.146873][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.157199][ T5921] usb 3-1: config 0 descriptor?? [ 173.192702][ T9] usb 1-1: USB disconnect, device number 11 [ 173.200256][ T9] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 173.636113][ T29] audit: type=1400 audit(1732740044.641:686): avc: denied { append } for pid=8063 comm="syz.4.772" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 173.786107][ T5894] usb 3-1: USB disconnect, device number 12 [ 174.021597][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 174.201710][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 174.219220][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 174.742395][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 174.753498][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.766469][ T9] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57 [ 174.775576][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.785608][ T9] usb 1-1: config 0 descriptor?? [ 174.795427][ T9] kobil_sct 1-1:0.0: required endpoints missing [ 175.035063][ T5893] usb 1-1: USB disconnect, device number 12 [ 175.081273][ T8084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8084 comm=syz.2.778 [ 175.287433][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 175.497373][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.603699][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 175.674922][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.707183][ T9] usb 2-1: config 0 descriptor?? [ 175.744910][ T8091] netlink: 60 bytes leftover after parsing attributes in process `syz.2.782'. [ 176.478959][ T9] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 176.489926][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000A/input/input15 [ 176.657186][ T9] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 176.910781][ T6012] usb 2-1: USB disconnect, device number 13 [ 176.973853][ T29] audit: type=1400 audit(1732740047.981:687): avc: denied { nlmsg_write } for pid=8114 comm="syz.4.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 178.150619][ T8122] uprobe: syz.4.793:8122 failed to unregister, leaking uprobe [ 178.326731][ T8140] netlink: 'syz.0.797': attribute type 16 has an invalid length. [ 178.334626][ T8140] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.797'. [ 178.978762][ T8148] netlink: 40 bytes leftover after parsing attributes in process `syz.2.803'. [ 179.151242][ T29] audit: type=1400 audit(1732740050.151:688): avc: denied { read } for pid=8154 comm="syz.2.807" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 179.406811][ T29] audit: type=1400 audit(1732740050.151:689): avc: denied { open } for pid=8154 comm="syz.2.807" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 179.542512][ T29] audit: type=1400 audit(1732740050.401:690): avc: denied { ioctl } for pid=8154 comm="syz.2.807" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 180.019578][ T8170] netlink: 'syz.3.814': attribute type 2 has an invalid length. [ 180.042733][ T8170] netlink: 'syz.3.814': attribute type 9 has an invalid length. [ 180.050413][ T8170] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.814'. [ 181.198192][ T8190] netlink: 'syz.3.816': attribute type 16 has an invalid length. [ 181.206202][ T8190] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.816'. [ 181.883032][ T8205] netlink: 'syz.0.826': attribute type 2 has an invalid length. [ 181.891055][ T8205] netlink: 'syz.0.826': attribute type 9 has an invalid length. [ 181.906132][ T8205] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.826'. [ 182.101624][ T5150] Bluetooth: hci4: command 0x0406 tx timeout [ 182.107773][ T5150] Bluetooth: hci1: command 0x0406 tx timeout [ 182.121583][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 182.127799][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 182.134339][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 182.979629][ T29] audit: type=1400 audit(1732740053.971:691): avc: denied { execute } for pid=8218 comm="syz.0.830" path="/173/cpu.stat" dev="tmpfs" ino=900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 183.180746][ T8234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38325 sclass=netlink_route_socket pid=8234 comm=syz.0.836 [ 183.395628][ T8241] netlink: 'syz.1.839': attribute type 2 has an invalid length. [ 183.403491][ T8241] netlink: 'syz.1.839': attribute type 9 has an invalid length. [ 183.413304][ T8241] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.839'. [ 183.549961][ T29] audit: type=1400 audit(1732740054.551:692): avc: denied { connect } for pid=8229 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.818032][ T29] audit: type=1400 audit(1732740054.631:693): avc: denied { shutdown } for pid=8229 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.604409][ T8260] netlink: 348 bytes leftover after parsing attributes in process `syz.2.845'. [ 185.670567][ T29] audit: type=1400 audit(1732740056.661:694): avc: denied { shutdown } for pid=8257 comm="syz.2.845" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.930085][ T8257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.277628][ T8279] netlink: 'syz.1.851': attribute type 2 has an invalid length. [ 186.310522][ T8279] netlink: 'syz.1.851': attribute type 9 has an invalid length. [ 186.334304][ T8279] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.851'. [ 186.455985][ T8284] bridge0: port 3(syz_tun) entered disabled state [ 186.557186][ T8284] syz_tun (unregistering): left allmulticast mode [ 186.571011][ T8284] syz_tun (unregistering): left promiscuous mode [ 186.606205][ T8284] bridge0: port 3(syz_tun) entered disabled state [ 186.638576][ T8291] netlink: 60 bytes leftover after parsing attributes in process `syz.1.857'. [ 186.941408][ T8299] netlink: 60 bytes leftover after parsing attributes in process `syz.1.857'. [ 187.064784][ T29] audit: type=1400 audit(1732740058.031:695): avc: denied { read write } for pid=8294 comm="syz.2.859" name="sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 187.403398][ T8299] netlink: 60 bytes leftover after parsing attributes in process `syz.1.857'. [ 187.439461][ T29] audit: type=1400 audit(1732740058.031:696): avc: denied { open } for pid=8294 comm="syz.2.859" path="/dev/sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 187.743553][ T8313] netlink: 'syz.3.865': attribute type 2 has an invalid length. [ 187.776839][ T8313] netlink: 'syz.3.865': attribute type 9 has an invalid length. [ 187.807360][ T8313] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.865'. [ 187.971530][ T29] audit: type=1400 audit(1732740058.961:697): avc: denied { map } for pid=8306 comm="syz.4.862" path="pipe:[17615]" dev="pipefs" ino=17615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 188.107819][ T8326] netlink: 60 bytes leftover after parsing attributes in process `syz.1.869'. [ 188.151281][ T5894] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 188.302965][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.318889][ T5894] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 188.329484][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.346043][ T5894] usb 1-1: config 0 descriptor?? [ 188.355591][ T5894] pwc: Askey VC010 type 2 USB webcam detected. [ 188.777596][ T5894] pwc: recv_control_msg error -32 req 02 val 2b00 [ 188.792086][ T5894] pwc: recv_control_msg error -32 req 02 val 2700 [ 188.807431][ T5894] pwc: recv_control_msg error -32 req 02 val 2c00 [ 189.035168][ T5894] pwc: recv_control_msg error -71 req 04 val 1300 [ 189.043063][ T5894] pwc: recv_control_msg error -71 req 04 val 1400 [ 189.051996][ T5894] pwc: recv_control_msg error -71 req 02 val 2000 [ 189.058778][ T5894] pwc: recv_control_msg error -71 req 02 val 2100 [ 189.065907][ T5894] pwc: recv_control_msg error -71 req 04 val 1500 [ 189.077744][ T5894] pwc: recv_control_msg error -71 req 02 val 2500 [ 189.084804][ T5894] pwc: recv_control_msg error -71 req 02 val 2400 [ 189.091637][ T5894] pwc: recv_control_msg error -71 req 02 val 2600 [ 189.098348][ T5894] pwc: recv_control_msg error -71 req 02 val 2900 [ 189.109975][ T5894] pwc: recv_control_msg error -71 req 02 val 2800 [ 189.118808][ T5894] pwc: recv_control_msg error -71 req 04 val 1100 [ 189.128029][ T5894] pwc: recv_control_msg error -71 req 04 val 1200 [ 189.529698][ T5894] pwc: Registered as video103. [ 189.593424][ T5894] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 189.641581][ T5892] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 189.659188][ T8348] netlink: 'syz.2.878': attribute type 2 has an invalid length. [ 189.668416][ T8348] netlink: 'syz.2.878': attribute type 9 has an invalid length. [ 189.680648][ T8348] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.878'. [ 189.741194][ T5894] usb 1-1: USB disconnect, device number 13 [ 189.804105][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.839248][ T5892] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 189.849596][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.898968][ T5892] usb 4-1: config 0 descriptor?? [ 190.327754][ T5892] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 190.343094][ T5892] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000B/input/input17 [ 190.362372][ T29] audit: type=1400 audit(1732740061.371:698): avc: denied { search } for pid=5193 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.416530][ T8375] netlink: 'syz.2.889': attribute type 2 has an invalid length. [ 190.425545][ T8375] netlink: 'syz.2.889': attribute type 9 has an invalid length. [ 190.439138][ T8375] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.889'. [ 190.480959][ T5892] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 190.739369][ T5991] usb 4-1: USB disconnect, device number 11 [ 190.859357][ T29] audit: type=1400 audit(1732740061.861:699): avc: denied { sqpoll } for pid=8380 comm="syz.2.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 191.224051][ T29] audit: type=1400 audit(1732740062.221:700): avc: denied { write } for pid=8383 comm="syz.2.894" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 192.363352][ T29] audit: type=1400 audit(1732740063.361:701): avc: denied { block_suspend } for pid=8395 comm="syz.0.898" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 192.651753][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 193.159068][ T29] audit: type=1400 audit(1732740064.031:702): avc: denied { read } for pid=8421 comm="syz.3.907" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 193.371613][ T29] audit: type=1400 audit(1732740064.031:703): avc: denied { open } for pid=8421 comm="syz.3.907" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 193.401601][ T29] audit: type=1400 audit(1732740064.031:704): avc: denied { ioctl } for pid=8421 comm="syz.3.907" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 194.504168][ T29] audit: type=1400 audit(1732740065.501:705): avc: denied { ioctl } for pid=8457 comm="syz.2.918" path="socket:[18919]" dev="sockfs" ino=18919 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 194.596127][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'. [ 194.801751][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 194.964149][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 194.976852][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.013603][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 195.022729][ T9] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 195.034523][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 195.051917][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 195.061029][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 195.078631][ T9] usb 5-1: Product: syz [ 195.087570][ T9] usb 5-1: Manufacturer: syz [ 195.107943][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 195.113404][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 195.118801][ T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 195.291907][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.298240][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.331241][ T5892] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 195.483118][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 195.503607][ T5892] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0061, bcdDevice=cd.47 [ 195.521481][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.551960][ T5892] usb 4-1: Product: syz [ 195.559509][ T5892] usb 4-1: Manufacturer: syz [ 195.577701][ T5892] usb 4-1: SerialNumber: syz [ 195.605316][ T5892] usb 4-1: config 0 descriptor?? [ 195.664741][ T5891] usb 5-1: USB disconnect, device number 11 [ 195.866250][ T5892] usb 4-1: USB disconnect, device number 12 [ 195.888730][ T8483] tipc: Failed to remove unknown binding: 66,1,1/0:2751540910/2751540912 [ 195.911883][ T29] audit: type=1400 audit(1732740066.891:706): avc: denied { bind } for pid=8482 comm="syz.0.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 195.957466][ T8483] tipc: Failed to remove unknown binding: 66,1,1/0:2751540910/2751540912 [ 196.006902][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 196.016821][ T8483] tipc: Failed to remove unknown binding: 66,1,1/0:2751540910/2751540912 [ 196.461676][ T29] audit: type=1400 audit(1732740067.461:707): avc: denied { write } for pid=8490 comm="syz.4.932" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 196.851730][ T5991] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 196.883173][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 197.172444][ T5991] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 197.185881][ T5991] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 197.195958][ T5991] usb 1-1: config 1 has no interface number 0 [ 197.202520][ T5991] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.218876][ T5991] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.238086][ T5991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.246642][ T5991] usb 1-1: Product: syz [ 197.250897][ T5991] usb 1-1: Manufacturer: syz [ 197.255638][ T5991] usb 1-1: SerialNumber: syz [ 197.324176][ T8504] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 197.377668][ T29] audit: type=1400 audit(1732740068.321:708): avc: denied { mount } for pid=8501 comm="syz.3.936" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 197.706480][ T5991] usb 1-1: selecting invalid altsetting 1 [ 198.067527][ T29] audit: type=1400 audit(1732740068.961:709): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 198.556893][ T5991] cdc_ncm 1-1:1.1: SET_CRC_MODE failed [ 198.582167][ T5991] cdc_ncm 1-1:1.1: SET_NTB_FORMAT failed [ 198.615641][ T5991] usb 1-1: selecting invalid altsetting 1 [ 198.639737][ T8517] overlayfs: failed to resolve './file0': -2 [ 198.641603][ T5991] cdc_ncm 1-1:1.1: bind() failure [ 198.827067][ T5991] usb 1-1: USB disconnect, device number 14 [ 200.216066][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.952'. [ 200.271570][ T29] audit: type=1400 audit(1732740071.251:710): avc: denied { bind } for pid=8542 comm="syz.3.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 200.595628][ T29] audit: type=1400 audit(1732740071.581:711): avc: denied { connect } for pid=8537 comm="syz.1.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 200.617223][ T8556] overlayfs: failed to resolve './file0': -2 [ 200.892756][ T8571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 200.918127][ T8569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.961'. [ 201.050594][ T8576] netlink: 'syz.0.964': attribute type 2 has an invalid length. [ 201.059449][ T8576] netlink: 'syz.0.964': attribute type 9 has an invalid length. [ 201.068150][ T8576] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.964'. [ 201.496791][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.968'. [ 201.702896][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'. [ 201.720212][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'. [ 201.729627][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'. [ 201.906962][ T8601] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 201.952431][ T8599] overlayfs: failed to resolve './file1': -2 [ 202.445620][ T8611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.976'. [ 202.465080][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 202.858053][ T29] audit: type=1400 audit(1732740073.851:712): avc: denied { create } for pid=8622 comm="syz.3.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 202.929039][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.983'. [ 202.951815][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 202.981572][ T5891] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 203.123296][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.133655][ T5891] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 203.146062][ T5891] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.159690][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 203.187298][ T5891] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 203.189778][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.214978][ T5891] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.236466][ T9] usb 3-1: config 0 descriptor?? [ 203.241648][ T5891] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.262812][ T5891] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 203.284147][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 203.301510][ T5891] usb 1-1: Product: syz [ 203.315415][ T5891] usb 1-1: Manufacturer: syz [ 203.328196][ T5891] cdc_wdm 1-1:1.0: skipping garbage [ 203.341866][ T5891] cdc_wdm 1-1:1.0: skipping garbage [ 203.356242][ T5891] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 203.372495][ T5891] cdc_wdm 1-1:1.0: Unknown control protocol [ 203.552238][ T5891] usb 1-1: USB disconnect, device number 15 [ 204.134895][ T9] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 204.145798][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000C/input/input18 [ 204.425713][ T9] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 204.897566][ T9] usb 3-1: USB disconnect, device number 13 [ 205.491931][ T29] audit: type=1400 audit(1732740076.431:713): avc: denied { ioctl } for pid=8666 comm="syz.0.997" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 205.837740][ T6012] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 206.121560][ T6012] usb 4-1: Using ep0 maxpacket: 8 [ 206.128156][ T6012] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.146956][ T6012] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 206.158171][ T6012] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.174503][ T6012] usb 4-1: Product: syz [ 206.178816][ T6012] usb 4-1: Manufacturer: syz [ 206.198534][ T6012] usb 4-1: SerialNumber: syz [ 206.675354][ T5849] Bluetooth: hci3: unexpected event for opcode 0x2012 [ 207.498170][ T6012] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 207.525674][ T6012] cdc_ncm 4-1:1.0: bind() failure [ 207.624142][ T6012] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 207.798777][ T6012] cdc_ncm 4-1:1.1: bind() failure [ 208.017564][ T6012] usb 4-1: USB disconnect, device number 13 [ 208.327162][ T29] audit: type=1400 audit(1732740079.261:714): avc: denied { create } for pid=8709 comm="syz.4.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 209.107844][ T29] audit: type=1400 audit(1732740080.021:715): avc: denied { ioctl } for pid=8709 comm="syz.4.1014" path="/dev/sg0" dev="devtmpfs" ino=735 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 210.081595][ T5921] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 210.293760][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.360587][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.732052][ T5849] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 210.741715][ T5849] Bluetooth: hci3: Injecting HCI hardware error event [ 210.759725][ T5849] Bluetooth: hci3: hardware error 0x00 [ 210.785680][ T5921] usb 4-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 210.885371][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.905972][ T5921] usb 4-1: config 0 descriptor?? [ 211.379341][ T5921] apple 0003:05AC:027C.000D: hidraw0: USB HID v0.00 Device [HID 05ac:027c] on usb-dummy_hcd.3-1/input0 [ 211.851290][ T5921] usb 4-1: USB disconnect, device number 14 [ 212.802420][ T5849] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 215.943653][ T8820] __nla_validate_parse: 5 callbacks suppressed [ 215.943699][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1049'. [ 216.112006][ T29] audit: type=1400 audit(1732740087.121:716): avc: denied { append } for pid=8823 comm="syz.0.1053" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 216.391614][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 216.466624][ T8838] bridge0: port 3(syz_tun) entered disabled state [ 216.506509][ T8838] syz_tun (unregistering): left allmulticast mode [ 216.513424][ T8838] syz_tun (unregistering): left promiscuous mode [ 216.521727][ T8838] bridge0: port 3(syz_tun) entered disabled state [ 216.589488][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.601394][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.618890][ T9] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 216.644158][ T9] usb 2-1: New USB device strings: Mfr=0, Product=249, SerialNumber=255 [ 216.672424][ T9] usb 2-1: Product: syz [ 216.688826][ T9] usb 2-1: SerialNumber: syz [ 216.729740][ T9] usb 2-1: config 0 descriptor?? [ 216.976997][ T8835] 9pnet_fd: Insufficient options for proto=fd [ 216.980855][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 217.471013][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 217.694869][ T9] usb 2-1: USB disconnect, device number 14 [ 218.203733][ T29] audit: type=1400 audit(1732740089.211:717): avc: denied { bind } for pid=8870 comm="syz.1.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 220.637271][ T29] audit: type=1400 audit(1732740091.641:718): avc: denied { read write } for pid=8922 comm="syz.4.1090" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 220.698145][ T29] audit: type=1400 audit(1732740091.671:719): avc: denied { open } for pid=8922 comm="syz.4.1090" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 220.744957][ T29] audit: type=1400 audit(1732740091.691:720): avc: denied { ioctl } for pid=8922 comm="syz.4.1090" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 221.289117][ T5845] cgroup: fork rejected by pids controller in /syz3 [ 222.721769][ T5893] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 222.918972][ T5893] usb 5-1: device descriptor read/64, error -71 [ 223.064829][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 223.087438][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 223.100661][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 223.114962][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 223.128191][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 223.138211][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 223.176403][ T29] audit: type=1400 audit(1732740094.181:721): avc: denied { mounton } for pid=8983 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 223.199413][ T5893] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 223.351697][ T5893] usb 5-1: device descriptor read/64, error -71 [ 223.375771][ T8983] chnl_net:caif_netlink_parms(): no params data found [ 223.487726][ T5893] usb usb5-port1: attempt power cycle [ 223.769678][ T8983] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.777151][ T8983] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.799751][ T8983] bridge_slave_0: entered allmulticast mode [ 223.807146][ T8983] bridge_slave_0: entered promiscuous mode [ 223.822053][ T29] audit: type=1400 audit(1732740094.821:722): avc: denied { name_bind } for pid=8999 comm="syz.1.1114" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 223.839696][ T8983] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.850241][ T8983] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.863962][ T29] audit: type=1400 audit(1732740094.821:723): avc: denied { node_bind } for pid=8999 comm="syz.1.1114" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 223.891834][ T8983] bridge_slave_1: entered allmulticast mode [ 223.902731][ T8983] bridge_slave_1: entered promiscuous mode [ 223.954732][ T8983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.965030][ T5893] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 224.002345][ T5893] usb 5-1: device descriptor read/8, error -71 [ 224.009469][ T8983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.138378][ T8983] team0: Port device team_slave_0 added [ 224.267437][ T8983] team0: Port device team_slave_1 added [ 224.691765][ T5893] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 224.715307][ T5893] usb 5-1: device descriptor read/8, error -71 [ 224.733072][ T8983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.740185][ T8983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.773158][ T8983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.812143][ T8983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.831103][ T8983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.872685][ T5893] usb usb5-port1: unable to enumerate USB device [ 224.878729][ T8983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.910927][ T9016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1120'. [ 224.950629][ T8983] hsr_slave_0: entered promiscuous mode [ 224.966815][ T8983] hsr_slave_1: entered promiscuous mode [ 225.019327][ T8983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.042667][ T8983] Cannot create hsr debugfs directory [ 225.286494][ T5847] Bluetooth: hci2: command tx timeout [ 225.464730][ T8983] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.489710][ T29] audit: type=1400 audit(1732740096.491:724): avc: denied { getopt } for pid=9028 comm="syz.2.1124" lport=51 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 225.639505][ T8983] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.929417][ T8983] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.660931][ T8983] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.506744][ T8983] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 227.530700][ T5847] Bluetooth: hci2: command tx timeout [ 227.540097][ T8983] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 227.741301][ T8983] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 227.877559][ T8983] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 228.167592][ T8983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.195466][ T8983] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.211305][ T7848] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.218778][ T7848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.316367][ T9085] xfrm0: entered allmulticast mode [ 228.800457][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.807780][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.310341][ T8983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.603680][ T5847] Bluetooth: hci2: command tx timeout [ 229.915593][ T8983] veth0_vlan: entered promiscuous mode [ 229.926079][ T8983] veth1_vlan: entered promiscuous mode [ 229.990569][ T8983] veth0_macvtap: entered promiscuous mode [ 230.003613][ T8983] veth1_macvtap: entered promiscuous mode [ 230.012673][ T9116] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1154'. [ 230.052580][ T9113] team0: entered allmulticast mode [ 230.059523][ T9113] team_slave_0: entered allmulticast mode [ 230.067636][ T9113] team_slave_1: entered allmulticast mode [ 230.111088][ T9117] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1154'. [ 230.122893][ T9117] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1154'. [ 230.137331][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.152216][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.162264][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.172842][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.182867][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.193463][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.203479][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.214343][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.224589][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.241626][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.262660][ T8983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.272472][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.282990][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.292895][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.303403][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.315647][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.326598][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.336513][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.346989][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.356856][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.367510][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.379622][ T8983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.420565][ T8983] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.429795][ T8983] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.442356][ T8983] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.661666][ T8983] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.213948][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.257935][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.298286][ T6482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.329810][ T6482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.367922][ T29] audit: type=1400 audit(1732740102.371:725): avc: denied { mounton } for pid=8983 comm="syz-executor" path="/root/syzkaller.Kna8PP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 231.426986][ T9143] netlink: 'syz.2.1163': attribute type 1 has an invalid length. [ 231.474863][ T9143] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1163'. [ 231.498311][ T29] audit: type=1400 audit(1732740102.501:726): avc: denied { ioctl } for pid=9146 comm="syz.3.1101" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21555 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 231.682094][ T5847] Bluetooth: hci2: command tx timeout [ 231.772976][ T9148] uprobe: syz.0.1164:9148 failed to unregister, leaking uprobe [ 232.076165][ T9156] overlayfs: missing 'lowerdir' [ 233.540027][ T9189] overlayfs: missing 'workdir' [ 234.315415][ T9202] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1187'. [ 234.398702][ T9202] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1187'. [ 234.455057][ T9202] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1187'. [ 234.707699][ T9221] overlayfs: missing 'workdir' [ 235.584661][ T9243] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1204'. [ 235.642789][ T9243] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1204'. [ 235.652048][ T9243] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1204'. [ 236.212240][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 236.471816][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 236.487317][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.526303][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.581973][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 236.616711][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.630252][ T9258] overlayfs: missing 'workdir' [ 236.638904][ T9] usb 3-1: config 0 descriptor?? [ 237.317201][ T9] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 237.551300][ T9] ft260 0003:0403:6030.000E: chip code: 0000 0000 [ 237.782936][ T5894] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 238.035559][ T5894] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 238.090420][ T9] ft260 0003:0403:6030.000E: failed to retrieve system status [ 238.099023][ T9] ft260 0003:0403:6030.000E: probe with driver ft260 failed with error -32 [ 238.102745][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.130429][ T5894] usb 2-1: config 0 descriptor?? [ 238.561255][ T5894] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 238.582636][ T5894] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 238.604105][ T5894] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 238.617130][ T5894] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 238.633340][ T5894] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 238.660053][ T5894] playstation 0003:054C:0DF2.000F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 238.704594][ T29] audit: type=1400 audit(1732740109.711:727): avc: denied { write } for pid=9297 comm="syz.3.1225" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 238.840733][ T29] audit: type=1400 audit(1732740109.841:728): avc: denied { write } for pid=9301 comm="syz.4.1227" path="socket:[21865]" dev="sockfs" ino=21865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 238.871812][ T9303] Bluetooth: MGMT ver 1.23 [ 239.083135][ T9307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1225'. [ 239.100450][ T29] audit: type=1400 audit(1732740110.031:729): avc: denied { execute_no_trans } for pid=9297 comm="syz.3.1225" path="/13/file0" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 239.760429][ T1200] usb 3-1: USB disconnect, device number 14 [ 239.936175][ T5894] playstation 0003:054C:0DF2.000F: Failed to retrieve feature with reportID 32: -71 [ 239.981687][ T5894] playstation 0003:054C:0DF2.000F: Failed to retrieve DualSense firmware info: -71 [ 240.002805][ T5894] playstation 0003:054C:0DF2.000F: Failed to get firmware info from DualSense [ 240.028261][ T29] audit: type=1400 audit(1732740111.031:730): avc: denied { read } for pid=9318 comm="syz.2.1233" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 240.041981][ T5894] playstation 0003:054C:0DF2.000F: Failed to create dualsense. [ 240.085082][ T5894] playstation 0003:054C:0DF2.000F: probe with driver playstation failed with error -71 [ 240.112767][ T29] audit: type=1400 audit(1732740111.081:731): avc: denied { open } for pid=9318 comm="syz.2.1233" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 240.117451][ T5894] usb 2-1: USB disconnect, device number 15 [ 240.521717][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 240.694827][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.747178][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.799303][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 240.836740][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.888379][ T9] usb 5-1: config 0 descriptor?? [ 241.901276][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 241.907470][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 241.919225][ T9] usb 5-1: USB disconnect, device number 16 [ 242.109894][ T29] audit: type=1400 audit(1732740113.051:732): avc: denied { nlmsg_write } for pid=9340 comm="syz.3.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 243.831635][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1255'. [ 244.581909][ T9396] xfrm0: entered allmulticast mode [ 246.421673][ T5894] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 246.547061][ T9450] team0: entered allmulticast mode [ 246.569542][ T9450] team_slave_0: entered allmulticast mode [ 246.576049][ T9450] team_slave_1: entered allmulticast mode [ 246.581553][ T5894] usb 3-1: device descriptor read/64, error -71 [ 246.821681][ T5894] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 246.977339][ T5894] usb 3-1: device descriptor read/64, error -71 [ 247.112652][ T5894] usb usb3-port1: attempt power cycle [ 247.304257][ T9479] team0: entered allmulticast mode [ 247.310644][ T9479] team_slave_0: entered allmulticast mode [ 247.316911][ T9479] team_slave_1: entered allmulticast mode [ 247.471654][ T5894] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 247.492260][ T5894] usb 3-1: device descriptor read/8, error -71 [ 248.173154][ T5894] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 248.305130][ T5894] usb 3-1: device descriptor read/8, error -71 [ 248.501586][ T5894] usb usb3-port1: unable to enumerate USB device [ 248.894938][ T9522] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1308'. [ 250.294339][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1315'. [ 250.308843][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1315'. [ 250.477143][ T29] audit: type=1400 audit(1732740121.481:733): avc: denied { bind } for pid=9540 comm="syz.4.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 250.574812][ T9544] overlayfs: failed to resolve './file1': -2 [ 250.591574][ T5892] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 251.217676][ T9556] xfrm0: entered allmulticast mode [ 251.373674][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.388475][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.411671][ T5892] usb 4-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 251.420793][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.518223][ T5892] usb 4-1: config 0 descriptor?? [ 251.888793][ T5892] usbhid 4-1:0.0: can't add hid device: -71 [ 251.895568][ T5892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 251.913105][ T5892] usb 4-1: USB disconnect, device number 15 [ 252.143996][ T9574] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.577072][ T9580] : renamed from bond0 (while UP) [ 254.371951][ T5894] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 254.658362][ T5894] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 254.667854][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.695888][ T5894] usb 4-1: config 0 descriptor?? [ 255.424084][ T5894] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 255.432226][ T5894] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 255.445254][ T5894] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 255.453559][ T5894] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 255.461018][ T5894] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 255.496170][ T5894] playstation 0003:054C:0DF2.0010: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 255.651672][ T29] audit: type=1400 audit(1732740126.631:734): avc: denied { mounton } for pid=9618 comm="syz.4.1347" path="/proc/773/task" dev="proc" ino=22455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 255.721260][ T29] audit: type=1326 audit(1732740126.651:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9618 comm="syz.4.1347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5840b80809 code=0x0 [ 256.477769][ T5894] playstation 0003:054C:0DF2.0010: Failed to retrieve feature with reportID 32: -71 [ 256.736466][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.761688][ T5894] playstation 0003:054C:0DF2.0010: Failed to retrieve DualSense firmware info: -71 [ 256.771091][ T5894] playstation 0003:054C:0DF2.0010: Failed to get firmware info from DualSense [ 256.801525][ T5894] playstation 0003:054C:0DF2.0010: Failed to create dualsense. [ 256.822165][ T5894] playstation 0003:054C:0DF2.0010: probe with driver playstation failed with error -71 [ 256.911804][ T5894] usb 4-1: USB disconnect, device number 16 [ 257.011658][ T5892] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 257.316127][ T5892] usb 5-1: device descriptor read/64, error -71 [ 257.954605][ T9652] block nbd2: shutting down sockets [ 258.045511][ T5892] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 258.380756][ T5892] usb 5-1: device descriptor read/64, error -71 [ 258.391146][ T29] audit: type=1400 audit(1732740129.221:736): avc: denied { mount } for pid=9663 comm="syz.3.1364" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 259.038145][ T29] audit: type=1400 audit(1732740130.021:737): avc: denied { ioctl } for pid=9663 comm="syz.3.1364" path="socket:[23554]" dev="sockfs" ino=23554 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 259.137345][ T5892] usb usb5-port1: attempt power cycle [ 259.361666][ T5891] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 259.481671][ T5892] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 259.513972][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 259.531762][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 259.540857][ T5892] usb 5-1: device descriptor read/8, error -71 [ 259.571196][ T5891] usb 4-1: New USB device found, idVendor=0830, idProduct=0480, bcdDevice=d2.9e [ 259.604409][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.630937][ T5891] usb 4-1: Product: syz [ 259.642152][ T5891] usb 4-1: Manufacturer: syz [ 259.646941][ T5891] usb 4-1: SerialNumber: syz [ 259.670175][ T5891] usb 4-1: config 0 descriptor?? [ 259.705281][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 259.715650][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.781557][ T5892] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 259.843788][ T9] usb 3-1: config 0 descriptor?? [ 260.031581][ T5892] usb 5-1: device not accepting address 20, error -71 [ 260.049810][ T5892] usb usb5-port1: unable to enumerate USB device [ 260.382729][ T9] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 260.390217][ T9] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 260.420307][ T9] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 260.429200][ T9] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 260.438046][ T9] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 260.467845][ T9] playstation 0003:054C:0DF2.0011: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 260.913027][ T9] playstation 0003:054C:0DF2.0011: Failed to retrieve feature with reportID 32: -71 [ 261.051845][ T29] audit: type=1400 audit(1732740132.011:738): avc: denied { mount } for pid=9704 comm="syz.4.1375" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 261.276784][ T29] audit: type=1400 audit(1732740132.041:739): avc: denied { unmount } for pid=9704 comm="syz.4.1375" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 261.396443][ T9] playstation 0003:054C:0DF2.0011: Failed to retrieve DualSense firmware info: -71 [ 261.459676][ T9] playstation 0003:054C:0DF2.0011: Failed to get firmware info from DualSense [ 261.469323][ T9] playstation 0003:054C:0DF2.0011: Failed to create dualsense. [ 261.480746][ T9] playstation 0003:054C:0DF2.0011: probe with driver playstation failed with error -71 [ 261.504782][ T9] usb 3-1: USB disconnect, device number 19 [ 261.692109][ T5892] usb 4-1: USB disconnect, device number 17 [ 262.781566][ T29] audit: type=1400 audit(1732740133.621:740): avc: denied { unmount } for pid=8983 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 264.898900][ T29] audit: type=1400 audit(1732740135.901:741): avc: denied { bind } for pid=9764 comm="syz.0.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 267.553458][ T9801] binder: 9794:9801 ioctl c0306201 0 returned -14 [ 268.067811][ T9814] xfrm0: entered allmulticast mode [ 273.791645][ T1200] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 274.113726][ T1200] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 274.122319][ T1200] usb 2-1: config 0 has no interface number 0 [ 274.128536][ T1200] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.140458][ T1200] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.150719][ T1200] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 274.160013][ T1200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.187186][ T1200] usb 2-1: config 0 descriptor?? [ 274.681179][ T1200] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0012/input/input23 [ 274.803919][ T1200] holtek_kbd 0003:04D9:A055.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 274.867947][ T5891] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 275.101709][ T1200] usb 2-1: USB disconnect, device number 16 [ 275.294484][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.310118][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.321189][ T5891] usb 4-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 275.331582][ T5921] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 275.339722][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.367508][ T5891] usb 4-1: config 0 descriptor?? [ 275.492754][ T5921] usb 5-1: no configurations [ 275.497416][ T5921] usb 5-1: can't read configurations, error -22 [ 275.751620][ T5921] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 275.800711][ T5891] usbhid 4-1:0.0: can't add hid device: -71 [ 275.977253][ T5921] usb 5-1: no configurations [ 276.017935][ T5921] usb 5-1: can't read configurations, error -22 [ 276.124797][ T5921] usb usb5-port1: attempt power cycle [ 276.302315][ T5891] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 276.312352][ T5891] usb 4-1: USB disconnect, device number 18 [ 276.672241][ T5921] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 276.845758][ T5921] usb 5-1: no configurations [ 276.856789][ T5921] usb 5-1: can't read configurations, error -22 [ 277.011704][ T5921] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 277.058013][ T5921] usb 5-1: no configurations [ 277.063874][ T9957] uprobe: syz.2.1461:9957 failed to unregister, leaking uprobe [ 277.073146][ T5921] usb 5-1: can't read configurations, error -22 [ 277.077826][ T29] audit: type=1400 audit(1732740148.081:742): avc: denied { listen } for pid=9958 comm="syz.0.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 277.081850][ T5921] usb usb5-port1: unable to enumerate USB device [ 277.119783][ T29] audit: type=1400 audit(1732740148.111:743): avc: denied { accept } for pid=9958 comm="syz.0.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 278.661771][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 279.241655][ T5892] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 279.381665][ T5921] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 279.401597][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 279.408343][ T5892] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 279.416722][ T5892] usb 1-1: config 179 has no interface number 0 [ 279.423120][ T5892] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 279.434378][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.446870][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.457308][ T5892] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 279.481602][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 279.490799][ T5892] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 279.502125][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.510888][ T5892] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 279.525545][ T9] usb 5-1: config 0 descriptor?? [ 279.533794][ T5892] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 279.545043][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.554784][ T5921] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 279.565144][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.575521][ T5921] usb 2-1: config 0 descriptor?? [ 279.584429][ T9982] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 279.858655][ T5892] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input24 [ 279.940951][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 279.949531][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 280.003221][ T9] usb 5-1: USB disconnect, device number 25 [ 280.170192][ T5921] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 280.195060][ T5921] usb 2-1: USB disconnect, device number 17 [ 280.205379][ T5891] usb 1-1: USB disconnect, device number 16 [ 280.205450][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 280.220092][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 280.250909][ T5891] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 282.618320][ T29] audit: type=1400 audit(1732740153.621:744): avc: denied { watch watch_reads } for pid=10031 comm="syz.2.1486" path="/276" dev="tmpfs" ino=1438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 283.782206][T10057] uprobe: syz.1.1493:10057 failed to unregister, leaking uprobe [ 290.524867][ T5921] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 290.763519][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.785676][ T5921] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 290.814844][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.855966][ T5921] usb 5-1: config 0 descriptor?? [ 292.326836][ T5921] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 292.341987][ T5921] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0013/input/input25 [ 292.435429][ T5921] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 292.675278][ T29] audit: type=1400 audit(1732740163.661:745): avc: denied { connect } for pid=10180 comm="syz.1.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 292.679586][ T5891] usb 5-1: USB disconnect, device number 26 [ 292.754365][ T29] audit: type=1400 audit(1732740163.671:746): avc: denied { ioctl } for pid=10180 comm="syz.1.1537" path="socket:[25536]" dev="sockfs" ino=25536 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 292.864825][ T29] audit: type=1400 audit(1732740163.711:747): avc: denied { write } for pid=10180 comm="syz.1.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 293.050958][ T29] audit: type=1400 audit(1732740163.711:748): avc: denied { write } for pid=10180 comm="syz.1.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 294.825568][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1547'. [ 299.173287][T10263] nbd3: detected capacity change from 0 to 512 [ 299.198401][ T6122] block nbd3: Send control failed (result -89) [ 299.219540][ T6122] block nbd3: Request send failed, requeueing [ 299.260204][ T5847] block nbd3: Receive control failed (result -32) [ 299.297102][ T58] block nbd3: Dead connection, failed to find a fallback [ 299.306950][ T58] block nbd3: shutting down sockets [ 299.315180][ T58] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.343091][T10275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1567'. [ 299.365321][ T58] Buffer I/O error on dev nbd3, logical block 0, async page read [ 299.704073][T10273] nbd3: detected capacity change from 512 to 20 [ 299.768979][ T6122] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.784729][ T6122] Buffer I/O error on dev nbd3, logical block 0, async page read [ 299.803918][ T6122] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.815769][ T6122] Buffer I/O error on dev nbd3, logical block 0, async page read [ 299.831828][ T6122] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.842402][ T6122] Buffer I/O error on dev nbd3, logical block 0, async page read [ 299.852975][ T6122] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.862300][ T6122] Buffer I/O error on dev nbd3, logical block 0, async page read [ 299.870389][ T6122] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.879654][ T6122] Buffer I/O error on dev nbd3, logical block 0, async page read [ 299.888275][ T6122] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.897559][ T6122] Buffer I/O error on dev nbd3, logical block 0, async page read [ 299.905680][ T6122] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 299.914929][ T6122] Buffer I/O error on dev nbd3, logical block 0, async page read [ 299.923323][ T6122] ldm_validate_partition_table(): Disk read failed. [ 299.981154][ T6122] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.031790][ T29] audit: type=1400 audit(1732740171.001:749): avc: denied { write } for pid=5193 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.120312][ T29] audit: type=1400 audit(1732740171.001:750): avc: denied { remove_name } for pid=5193 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.156489][ T6122] Buffer I/O error on dev nbd3, logical block 0, async page read [ 300.230269][ T6122] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.496365][ T5891] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 300.568468][ T6122] Buffer I/O error on dev nbd3, logical block 0, async page read [ 300.581479][ T29] audit: type=1400 audit(1732740171.001:751): avc: denied { add_name } for pid=5193 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.625576][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1573'. [ 300.637817][ T6122] Dev nbd3: unable to read RDB block 0 [ 300.665281][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.665394][ T6122] nbd3: unable to read partition table [ 300.694877][ T6122] nbd3: partition table beyond EOD, truncated [ 300.864465][ T5891] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 300.905697][ T5891] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 300.956573][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.122067][ T5891] usb 2-1: config 0 descriptor?? [ 301.126943][ T6122] ldm_validate_partition_table(): Disk read failed. [ 301.134844][ T6122] Dev nbd3: unable to read RDB block 0 [ 301.868355][ T6122] nbd3: unable to read partition table [ 301.881287][ T6122] nbd3: partition table beyond EOD, truncated [ 302.284779][ T29] audit: type=1400 audit(1732740173.291:752): avc: denied { ioctl } for pid=10313 comm="syz.4.1583" path="socket:[26757]" dev="sockfs" ino=26757 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 303.025293][ T5892] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 303.034781][ T1200] usb 2-1: USB disconnect, device number 18 [ 303.141626][ T29] audit: type=1400 audit(1732740174.151:753): avc: denied { read } for pid=5196 comm="acpid" name="event4" dev="devtmpfs" ino=2992 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 303.171167][ T29] audit: type=1400 audit(1732740174.171:754): avc: denied { open } for pid=5196 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2992 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 303.215083][ T29] audit: type=1400 audit(1732740174.171:755): avc: denied { ioctl } for pid=5196 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2992 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 303.244975][ T5892] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 303.253936][ T5892] usb 1-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 303.718917][ T5892] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 303.728067][ T5892] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 303.900947][ T5892] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 303.929057][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 303.939008][ T5892] usb 1-1: Product: syz [ 303.945093][ T5892] usb 1-1: Manufacturer: syz [ 304.147740][ T5892] cdc_wdm 1-1:1.0: skipping garbage [ 304.165511][ T5892] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 304.339811][ T5892] usb 1-1: USB disconnect, device number 17 [ 304.748078][T10344] mmap: syz.4.1592 (10344) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 305.156353][ T29] audit: type=1326 audit(1732740176.151:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10351 comm="syz.1.1594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c01780809 code=0x0 [ 305.272734][ T1200] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 305.381653][ T29] audit: type=1400 audit(1732740176.291:757): avc: denied { ioctl } for pid=10356 comm="syz.0.1596" path="socket:[26816]" dev="sockfs" ino=26816 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 305.489665][ T1200] usb 3-1: unable to get BOS descriptor or descriptor too short [ 305.531144][ T1200] usb 3-1: config 3 has an invalid interface number: 19 but max is 0 [ 305.598327][ T1200] usb 3-1: config 3 has an invalid interface number: 4 but max is 0 [ 305.654991][ T1200] usb 3-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 305.677122][ T1200] usb 3-1: config 3 has no interface number 0 [ 305.695135][ T1200] usb 3-1: config 3 has no interface number 1 [ 305.705488][ T1200] usb 3-1: config 3 interface 19 altsetting 9 endpoint 0x6 has invalid maxpacket 1040, setting to 64 [ 305.717886][ T1200] usb 3-1: config 3 interface 19 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 305.731736][ T1200] usb 3-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 305.742984][ T1200] usb 3-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 305.753557][ T1200] usb 3-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 305.763831][ T1200] usb 3-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 305.776837][ T1200] usb 3-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 305.791086][ T1200] usb 3-1: config 3 interface 19 has no altsetting 0 [ 305.797922][ T1200] usb 3-1: config 3 interface 4 has no altsetting 0 [ 305.836476][ T1200] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=13.f5 [ 305.846718][ T1200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.887837][ T1200] usb 3-1: Product: syz [ 305.900148][ T1200] usb 3-1: Manufacturer: syz [ 305.912367][ T1200] usb 3-1: SerialNumber: syz [ 306.138864][ T1200] pl2303 3-1:3.19: required endpoints missing [ 306.149988][ T1200] pl2303 3-1:3.4: required interrupt-in endpoint missing [ 306.166510][ T1200] usb 3-1: USB disconnect, device number 20 [ 306.321655][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 306.501685][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 306.531596][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 306.539963][ T9] usb 2-1: config 179 has no interface number 0 [ 306.567147][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 306.615278][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 306.627994][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 306.658310][ T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 306.688068][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 306.709254][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.740643][T10369] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 306.960118][ T5891] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 307.000895][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input29 [ 307.129039][ T5891] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 307.258594][ T1200] usb 2-1: USB disconnect, device number 19 [ 307.258594][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 307.279043][ T1200] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 307.444451][ T5891] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 307.677079][ T5891] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.686928][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.695391][ T5891] usb 1-1: Product: syz [ 307.699598][ T5891] usb 1-1: Manufacturer: syz [ 307.704741][ T5891] usb 1-1: SerialNumber: syz [ 308.009567][T10371] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 308.832177][T10371] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 309.043572][ T5891] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 309.275683][ T5891] cdc_ncm 1-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 309.294448][T10366] Set syz1 is full, maxelem 65536 reached [ 309.338654][ T5891] usb 1-1: USB disconnect, device number 18 [ 309.405652][ T5891] cdc_ncm 1-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 416.341396][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 416.348656][ C0] rcu: 1-...!: (0 ticks this GP) idle=6bdc/1/0x4000000000000000 softirq=30670/30670 fqs=0 [ 416.359995][ C0] rcu: (detected by 0, t=10506 jiffies, g=29229, q=2863 ncpus=2) [ 416.367845][ C0] Sending NMI from CPU 0 to CPUs 1: [ 416.367894][ C1] NMI backtrace for cpu 1 [ 416.367930][ C1] CPU: 1 UID: 0 PID: 5842 Comm: syz-executor Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 416.367950][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 416.367959][ C1] RIP: 0010:__lock_acquire+0x1a0/0x3c40 [ 416.368006][ C1] Code: 0a 00 00 48 c7 c6 a0 18 88 9a 48 c1 ee 03 89 44 24 08 48 b8 00 00 00 00 00 fc ff df 0f b6 34 06 48 c7 c0 a0 18 88 9a 83 e0 07 <83> c0 03 40 38 f0 7c 09 40 84 f6 0f 85 52 2c 00 00 83 7c 24 08 2f [ 416.368020][ C1] RSP: 0018:ffffc90000a18b48 EFLAGS: 00000046 [ 416.368040][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 416.368049][ C1] RDX: ffffffff96e88aa8 RSI: 0000000000000004 RDI: ffffffff8e1bba88 [ 416.368057][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 416.368069][ C1] R10: ffffffff9060bed7 R11: 0000000000000004 R12: ffffffff8e1bba80 [ 416.368077][ C1] R13: ffff8880327c8000 R14: 0000000000000000 R15: 0000000000000000 [ 416.368086][ C1] FS: 00005555850b0500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 416.368100][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 416.368110][ C1] CR2: 00007fcf90460500 CR3: 000000005f482000 CR4: 00000000003526f0 [ 416.368118][ C1] DR0: 0040000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 416.368126][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 416.368134][ C1] Call Trace: [ 416.368141][ C1] [ 416.368150][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 416.368177][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 416.368196][ C1] ? nmi_handle+0x1a7/0x5c0 [ 416.368213][ C1] ? __lock_acquire+0x1a0/0x3c40 [ 416.368228][ C1] ? default_do_nmi+0x6a/0x160 [ 416.368244][ C1] ? exc_nmi+0x170/0x1e0 [ 416.368257][ C1] ? end_repeat_nmi+0xf/0x53 [ 416.368284][ C1] ? __lock_acquire+0x1a0/0x3c40 [ 416.368298][ C1] ? __lock_acquire+0x1a0/0x3c40 [ 416.368313][ C1] ? __lock_acquire+0x1a0/0x3c40 [ 416.368327][ C1] [ 416.368331][ C1] [ 416.368339][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 416.368354][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 416.368370][ C1] lock_acquire.part.0+0x11b/0x380 [ 416.368384][ C1] ? advance_sched+0x679/0xc60 [ 416.368406][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 416.368421][ C1] ? rcu_is_watching+0x12/0xc0 [ 416.368441][ C1] ? trace_lock_acquire+0x146/0x1e0 [ 416.368461][ C1] ? advance_sched+0x679/0xc60 [ 416.368475][ C1] ? lock_acquire+0x2f/0xb0 [ 416.368488][ C1] ? advance_sched+0x679/0xc60 [ 416.368503][ C1] advance_sched+0x67f/0xc60 [ 416.368519][ C1] ? advance_sched+0x679/0xc60 [ 416.368536][ C1] ? __pfx_advance_sched+0x10/0x10 [ 416.368550][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 416.368572][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 416.368588][ C1] ? read_tsc+0x9/0x20 [ 416.368609][ C1] hrtimer_interrupt+0x392/0x8e0 [ 416.368630][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 416.368648][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 416.368667][ C1] [ 416.368671][ C1] [ 416.368676][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 416.368696][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 416.368718][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 66 4d 39 f6 48 89 df e8 ce cc 39 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 55 c2 2a f6 65 8b 05 86 bd d1 74 85 c0 74 16 5b [ 416.368730][ C1] RSP: 0018:ffffc90003697778 EFLAGS: 00000246 [ 416.368742][ C1] RAX: 0000000000000006 RBX: ffffffff9aa06178 RCX: 1ffffffff2dd3d6c [ 416.368754][ C1] RDX: 0000000000000000 RSI: ffffffff8b6cdee0 RDI: ffffffff8bd1e240 [ 416.368764][ C1] RBP: 0000000000000286 R08: 0000000000000001 R09: fffffbfff2dd0d9f [ 416.368773][ C1] R10: ffffffff96e86cff R11: 0000000000000004 R12: ffffffff9aa06170 [ 416.368781][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888030811a00 [ 416.368795][ C1] debug_check_no_obj_freed+0x327/0x600 [ 416.368819][ C1] ? kasan_save_stack+0x42/0x60 [ 416.368839][ C1] ? mas_alloc_nodes+0x18b/0x8b0 [ 416.368857][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 416.368873][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.368895][ C1] kmem_cache_free+0x2d4/0x4c0 [ 416.368914][ C1] ? mt_destroy_walk+0xbb0/0xfe0 [ 416.368931][ C1] mt_destroy_walk+0xbb0/0xfe0 [ 416.368957][ C1] ? __pfx_mt_destroy_walk+0x10/0x10 [ 416.368974][ C1] ? rcu_is_watching+0x12/0xc0 [ 416.368992][ C1] mas_new_root+0x556/0x660 [ 416.369009][ C1] mas_wr_store_entry+0xa5f/0x24b0 [ 416.369031][ C1] mas_erase+0xed0/0x12a0 [ 416.369046][ C1] ? __pfx_mas_erase+0x10/0x10 [ 416.369058][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 416.369075][ C1] ? lock_acquire+0x2f/0xb0 [ 416.369088][ C1] ? mtree_erase+0xbe/0x110 [ 416.369102][ C1] mtree_erase+0xc8/0x110 [ 416.369114][ C1] ? __pfx_mtree_erase+0x10/0x10 [ 416.369129][ C1] ? __pfx_may_link+0x10/0x10 [ 416.369152][ C1] simple_offset_remove+0x4f/0x90 [ 416.369171][ C1] shmem_unlink+0xdf/0x350 [ 416.369193][ C1] vfs_unlink+0x2fb/0x9b0 [ 416.369214][ C1] do_unlinkat+0x570/0x760 [ 416.369230][ C1] ? __virt_addr_valid+0x5e/0x590 [ 416.369249][ C1] ? __pfx_do_unlinkat+0x10/0x10 [ 416.369263][ C1] ? __check_object_size+0x488/0x710 [ 416.369285][ C1] ? getname_flags.part.0+0x1c5/0x550 [ 416.369303][ C1] __x64_sys_unlink+0xc5/0x110 [ 416.369317][ C1] do_syscall_64+0xcd/0x250 [ 416.369338][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.369356][ C1] RIP: 0033:0x7f4c0177fdb7 [ 416.369375][ C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.369386][ C1] RSP: 002b:00007ffed49fc288 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 416.369400][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4c0177fdb7 [ 416.369408][ C1] RDX: 00007ffed49fc2b0 RSI: 00007ffed49fc340 RDI: 00007ffed49fc340 [ 416.369417][ C1] RBP: 00007ffed49fc340 R08: 0000000000000000 R09: 0000000000000000 [ 416.369425][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffed49fd3c0 [ 416.369434][ C1] R13: 00007f4c017f37dc R14: 000000000004b912 R15: 00007ffed49fd400 [ 416.369446][ C1] [ 416.369870][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g29229 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 416.989482][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=18719 [ 416.997381][ C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g29229 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 417.008740][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 417.018698][ C0] rcu: RCU grace-period kthread stack dump: [ 417.024575][ C0] task:rcu_preempt state:I stack:27488 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 417.034778][ C0] Call Trace: [ 417.038053][ C0] [ 417.040984][ C0] __schedule+0xe58/0x5ad0 [ 417.045411][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 417.050620][ C0] ? __pfx___schedule+0x10/0x10 [ 417.055470][ C0] ? schedule+0x298/0x350 [ 417.059807][ C0] ? __pfx_lock_release+0x10/0x10 [ 417.064834][ C0] ? lock_acquire+0x2f/0xb0 [ 417.069334][ C0] ? schedule+0x1fd/0x350 [ 417.073667][ C0] schedule+0xe7/0x350 [ 417.077738][ C0] schedule_timeout+0x124/0x280 [ 417.082589][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 417.087957][ C0] ? __pfx_process_timeout+0x10/0x10 [ 417.093596][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 417.099402][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 417.104866][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 417.109635][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 417.114917][ C0] ? rcu_gp_init+0xc82/0x1630 [ 417.119618][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 417.124914][ C0] rcu_gp_kthread+0x271/0x380 [ 417.129592][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 417.134789][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 417.139992][ C0] ? __kthread_parkme+0x148/0x220 [ 417.145022][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 417.150218][ C0] kthread+0x2c1/0x3a0 [ 417.154290][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 417.159485][ C0] ? __pfx_kthread+0x10/0x10 [ 417.164076][ C0] ret_from_fork+0x45/0x80 [ 417.168488][ C0] ? __pfx_kthread+0x10/0x10 [ 417.173079][ C0] ret_from_fork_asm+0x1a/0x30 [ 417.177855][ C0]