last executing test programs: 7.862299251s ago: executing program 1 (id=2820): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 7.583472294s ago: executing program 1 (id=2823): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f00000000c0)="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", 0x284, 0x0, 0x0, 0x0) 7.463729171s ago: executing program 1 (id=2825): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/259], 0x119) write$UHID_INPUT2(r0, &(0x7f0000000080), 0x6) 7.21284052s ago: executing program 1 (id=2828): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0) 7.069867686s ago: executing program 1 (id=2830): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) 6.730076497s ago: executing program 1 (id=2834): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.560186527s ago: executing program 0 (id=2859): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) migrate_pages(0x0, 0x9, 0x0, 0x0) 4.241717314s ago: executing program 0 (id=2864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0) 3.992800339s ago: executing program 0 (id=2869): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fcntl$getown(r0, 0x9) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040c5}, 0x44004) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 2.347368032s ago: executing program 4 (id=2878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a090400000000000000000200000058000480180001800d00010073796e70726f787900000000040002803c0001800e000100696d6d656469617465000000280002801c000280060002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x20000094}, 0x0) 2.32128835s ago: executing program 0 (id=2879): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000080)=@un=@abs, 0x80) 2.145367463s ago: executing program 2 (id=2880): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f00000003c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x8000000000000}, 0x18) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "0000004a650600", "af193cff4810ba5ac120d096eb00000052095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r0) 2.145179937s ago: executing program 3 (id=2881): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = dup2(r0, r0) write$tun(r1, 0x0, 0x46) 2.144596791s ago: executing program 4 (id=2882): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x200, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54ce", 0xd9, 0x805, 0x0, 0x0) 1.98074855s ago: executing program 2 (id=2883): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) migrate_pages(0x0, 0x9, 0x0, 0x0) 1.931050203s ago: executing program 3 (id=2884): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.889183719s ago: executing program 2 (id=2885): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x8) 1.720857282s ago: executing program 3 (id=2886): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r2, 0xa, 0x13) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1.663903143s ago: executing program 2 (id=2887): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, 0x0, 0x48093) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x613) 1.499511351s ago: executing program 2 (id=2888): r0 = io_uring_setup(0x40b0, &(0x7f0000000080)={0x0, 0xe9ce, 0x2, 0x20001, 0x175}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x4003) recvmmsg(r1, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x7fc}], 0x1, 0x22, 0x0) close_range(r0, r1, 0x0) 1.32883514s ago: executing program 0 (id=2889): prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) 1.173438334s ago: executing program 4 (id=2890): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendto$packet(r1, &(0x7f0000000700)=';', 0x1, 0x28000, 0x0, 0x0) 1.133774508s ago: executing program 2 (id=2891): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r3) close_range(r2, 0xffffffffffffffff, 0x100000000000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() syz_io_uring_setup(0x44d, &(0x7f0000000400)={0x0, 0x122d, 0x8, 0x2, 0x73, 0x0, r4}, &(0x7f0000000240), &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x14, 0x0, 0x705, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000009, 0x40010, r4, 0xe6b6a000) 476.364351ms ago: executing program 4 (id=2892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x61680, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 475.739667ms ago: executing program 3 (id=2893): r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$ptp(r1, 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x35, 0x6, 0xd, 0x0, "55ed45353d48cc540179ee61c94e7cad0a39ffdab4267deb9c07c6792690cdc953e584376f69361b7699999ab1404ed1a8c4da1edd17cf0103a6799c3812557d", "6039c372fc904e8bf1bc740f1f10e98d7fa6fa05e19d5206db74fc62395bff9b", [0x8000, 0x8000000000000000]}) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 419.868003ms ago: executing program 4 (id=2894): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) migrate_pages(0x0, 0x9, 0x0, 0x0) 379.980869ms ago: executing program 0 (id=2895): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n 10 [ 778.870081][ T5822] Bluetooth: unknown link type 203 [ 778.882396][ T5822] Bluetooth: hci2: connection err: -111 [ 779.244068][ T823] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 779.404216][ T823] usb 4-1: Using ep0 maxpacket: 8 [ 779.414970][ T823] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.425318][ T823] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 779.562126][ T5927] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 779.578317][ T823] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 779.591577][ T823] usb 4-1: config 0 interface 0 has no altsetting 0 [ 779.601137][ T823] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 779.610628][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.622592][ T823] usb 4-1: Product: syz [ 779.854052][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 780.118997][ T823] usb 4-1: Manufacturer: syz [ 780.125198][ T823] usb 4-1: SerialNumber: syz [ 780.133654][ T823] usb 4-1: config 0 descriptor?? [ 780.133959][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 780.183884][ T823] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 780.212834][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 158, changing to 7 [ 780.254001][ T5945] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 780.366049][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 58261, setting to 1024 [ 780.390828][ T823] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 780.404067][ T823] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 780.406590][ T5927] usb 3-1: New USB device found, idVendor=05e1, idProduct=1008, bcdDevice=25.11 [ 780.421880][ T823] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 780.441536][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.464610][ T5927] usb 3-1: Product: syz [ 780.468806][ T5927] usb 3-1: Manufacturer: syz [ 780.473384][ T5927] usb 3-1: SerialNumber: syz [ 780.484814][ T5927] usb 3-1: config 0 descriptor?? [ 780.516148][ T5945] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.538681][ T5945] usb 1-1: config 0 interface 0 has no altsetting 0 [ 780.553141][ T5945] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 780.583221][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.595665][ T5945] usb 1-1: config 0 descriptor?? [ 780.633509][ T5927] usb 4-1: USB disconnect, device number 89 [ 780.823966][ T823] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 781.046578][ T5945] apple 0003:05AC:027A.0079: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 782.049499][ T5945] usb 3-1: USB disconnect, device number 89 [ 782.161118][T13660] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1876'. [ 782.212286][T13660] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1876'. [ 782.557961][ T5945] usb 1-1: USB disconnect, device number 93 [ 783.648725][T13688] batadv24: entered promiscuous mode [ 783.660517][T13688] 8021q: adding VLAN 0 to HW filter on device batadv24 [ 784.344114][ T9] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 784.847584][T13693] batadv25: entered promiscuous mode [ 784.858893][T13693] 8021q: adding VLAN 0 to HW filter on device batadv25 [ 784.982682][ T9] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.066737][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 785.073433][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 785.113959][T13697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5753 sclass=netlink_route_socket pid=13697 comm=syz.0.1882 [ 785.126993][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.146343][ T9] usb 5-1: config 0 descriptor?? [ 785.224076][ T10] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 785.267390][T13703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1884'. [ 785.380051][ T10] usb 4-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.520910][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 785.738183][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 785.747558][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.775310][ T10] usb 4-1: config 0 descriptor?? [ 785.890102][T13708] MTD: Couldn't look up '/dev/nullb0': -15 [ 786.807736][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 786.814578][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 786.837496][ T9] usb 5-1: USB disconnect, device number 100 [ 787.399483][ T823] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 787.414607][ T5945] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 787.543729][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 787.654357][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 787.754703][T13724] netlink: 'syz.4.1890': attribute type 2 has an invalid length. [ 787.794712][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 787.796420][ T10] usb 4-1: USB disconnect, device number 90 [ 787.826730][ T5945] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 787.844631][ T9] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 787.862454][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 158, changing to 7 [ 787.882548][ T823] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.890802][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 58261, setting to 1024 [ 787.926516][ T823] usb 3-1: config 0 interface 0 has no altsetting 0 [ 787.933386][ T823] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 787.945127][ T5945] usb 1-1: New USB device found, idVendor=05e1, idProduct=1008, bcdDevice=25.11 [ 787.965873][ T823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.973837][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.992395][ T5945] usb 1-1: Product: syz [ 787.994743][ T823] usb 3-1: config 0 descriptor?? [ 787.996746][ T5945] usb 1-1: Manufacturer: syz [ 788.038233][ T5945] usb 1-1: SerialNumber: syz [ 788.055622][ T5945] usb 1-1: config 0 descriptor?? [ 788.055713][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 788.102796][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 788.240255][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 788.345564][ T10] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 788.366120][ T9] usb 2-1: SerialNumber: syz [ 788.410369][T13729] netlink: 'syz.4.1892': attribute type 2 has an invalid length. [ 788.585250][ T823] apple 0003:05AC:027A.007A: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.2-1/input0 [ 788.668843][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 788.683369][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 788.709716][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00 [ 788.730686][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.779149][ T10] usb 4-1: config 0 descriptor?? [ 788.792113][T13726] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 789.061010][T13734] batadv25: entered promiscuous mode [ 789.070365][T13734] 8021q: adding VLAN 0 to HW filter on device batadv25 [ 789.374126][ T5945] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 789.512698][ T9479] usb 1-1: USB disconnect, device number 94 [ 789.682656][ T5945] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.751081][ T5945] usb 5-1: config 0 interface 0 has no altsetting 0 [ 790.017454][ T823] usb 3-1: USB disconnect, device number 90 [ 790.036128][ T5945] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 790.038635][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 790.103016][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.161244][ T9] usb 2-1: USB disconnect, device number 76 [ 790.162468][ T5945] usb 5-1: config 0 descriptor?? [ 790.384619][T13726] 9pnet_fd: Insufficient options for proto=fd [ 790.628142][T13740] batadv22: entered promiscuous mode [ 790.638166][T13740] 8021q: adding VLAN 0 to HW filter on device batadv22 [ 791.096201][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 791.111015][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 791.136231][ T10] usb 4-1: USB disconnect, device number 91 [ 791.263882][ T9479] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 791.540984][ T9479] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.551374][ T9479] usb 1-1: config 0 interface 0 has no altsetting 0 [ 791.959768][ T9479] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 791.983210][ T9479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.007375][ T9479] usb 1-1: config 0 descriptor?? [ 792.130292][T13756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.247028][T13756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.355108][ T5945] usbhid 5-1:0.0: can't add hid device: -71 [ 792.361138][ T5945] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 792.429640][ T5945] usb 5-1: USB disconnect, device number 101 [ 792.446080][ T30] audit: type=1326 audit(2000000543.569:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13759 comm="syz.2.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104f38e929 code=0x7ffc0000 [ 792.479543][ T823] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 793.467504][ T30] audit: type=1326 audit(2000000543.589:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13759 comm="syz.2.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f104f38e929 code=0x7ffc0000 [ 793.528058][ T30] audit: type=1326 audit(2000000543.589:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13759 comm="syz.2.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104f38e929 code=0x7ffc0000 [ 793.555292][ T30] audit: type=1326 audit(2000000543.589:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13759 comm="syz.2.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104f38e929 code=0x7ffc0000 [ 793.579075][ T30] audit: type=1326 audit(2000000543.589:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13759 comm="syz.2.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f104f38e929 code=0x7ffc0000 [ 793.579206][T13763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1900'. [ 793.603041][ T30] audit: type=1326 audit(2000000543.589:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13759 comm="syz.2.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104f38e929 code=0x7ffc0000 [ 793.685671][ T30] audit: type=1326 audit(2000000543.589:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13759 comm="syz.2.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104f38e929 code=0x7ffc0000 [ 793.794701][ T30] audit: type=1326 audit(2000000543.589:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13759 comm="syz.2.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f104f38e929 code=0x7ffc0000 [ 793.806699][ T9479] usbhid 1-1:0.0: can't add hid device: -71 [ 793.824238][ T9479] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 793.837095][ T9479] usb 1-1: USB disconnect, device number 95 [ 793.869200][ T30] audit: type=1326 audit(2000000543.589:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13759 comm="syz.2.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104f38e929 code=0x7ffc0000 [ 793.900505][ T30] audit: type=1326 audit(2000000543.589:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13759 comm="syz.2.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104f38e929 code=0x7ffc0000 [ 793.995894][T13771] MTD: Couldn't look up '/dev/nullb0': -15 [ 794.634015][ T823] usb 2-1: device descriptor read/64, error -71 [ 794.706620][T13774] netlink: 'syz.0.1906': attribute type 2 has an invalid length. [ 794.871948][ T9] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 794.923886][ T823] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 795.034518][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 795.049435][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 795.063634][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 158, changing to 7 [ 795.075408][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 58261, setting to 1024 [ 795.088705][ T823] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.098926][ T823] usb 2-1: config 0 interface 0 has no altsetting 0 [ 795.107459][ T823] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 795.118018][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.160861][ T9] usb 5-1: New USB device found, idVendor=05e1, idProduct=1008, bcdDevice=25.11 [ 795.170069][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.179776][ T9] usb 5-1: Product: syz [ 795.187472][ T823] usb 2-1: config 0 descriptor?? [ 795.194953][ T9] usb 5-1: Manufacturer: syz [ 795.216729][ T9] usb 5-1: SerialNumber: syz [ 795.227388][ T9] usb 5-1: config 0 descriptor?? [ 795.372510][T13791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1909'. [ 795.384640][T13791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1909'. [ 795.629032][ T823] apple 0003:05AC:027A.007B: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.1-1/input0 [ 796.990872][ T9479] usb 5-1: USB disconnect, device number 102 [ 797.110380][ T5945] usb 2-1: USB disconnect, device number 78 [ 798.449097][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 798.449114][ T30] audit: type=1400 audit(2000000548.879:800): avc: denied { write } for pid=13813 comm="syz.4.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 798.500198][T13822] binder: BINDER_SET_CONTEXT_MGR already set [ 798.506389][T13822] binder: 13821:13822 ioctl 4018620d 200000000040 returned -16 [ 798.640097][T13828] MTD: Couldn't look up '/dev/nullb0': -15 [ 798.830626][T13805] netlink: 'syz.0.1914': attribute type 2 has an invalid length. [ 798.964141][ T823] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 799.296102][ T823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 799.311382][ T823] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 800.046886][T13838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 800.092385][ T823] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 800.475932][ T823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 800.511400][ T823] usb 3-1: SerialNumber: syz [ 801.229470][ T823] usb 3-1: 0:2 : does not exist [ 801.283076][T13850] dlm: non-version read from control device 8192 [ 801.300337][ T823] usb 3-1: USB disconnect, device number 91 [ 801.400469][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 802.663553][T13864] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1927'. [ 802.677637][T13864] netlink: 'syz.4.1927': attribute type 63 has an invalid length. [ 802.702200][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'. [ 802.783870][ T823] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 803.004116][T13866] binder: BINDER_SET_CONTEXT_MGR already set [ 803.010182][T13866] binder: 13857:13866 ioctl 4018620d 200000000040 returned -16 [ 803.094128][ T9] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 803.114526][ T823] usb 4-1: Using ep0 maxpacket: 32 [ 803.125026][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.146056][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.193974][ T823] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 803.240097][ T823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.277547][ T9] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.294593][ T823] usb 4-1: config 0 descriptor?? [ 803.309859][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 803.323872][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 803.343968][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.381186][ T9] usb 1-1: config 0 descriptor?? [ 803.518088][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1933'. [ 803.531419][T13874] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 804.208012][ T823] savu 0003:1E7D:2D5A.007D: unknown main item tag 0x0 [ 804.208049][ T823] savu 0003:1E7D:2D5A.007D: unknown main item tag 0x0 [ 804.208077][ T823] savu 0003:1E7D:2D5A.007D: unknown main item tag 0x0 [ 804.208103][ T823] savu 0003:1E7D:2D5A.007D: unknown main item tag 0x0 [ 804.208130][ T823] savu 0003:1E7D:2D5A.007D: unknown main item tag 0x0 [ 804.208155][ T823] savu 0003:1E7D:2D5A.007D: unknown main item tag 0x0 [ 804.235420][ T5945] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 804.283271][ T9] apple 0003:05AC:027A.007C: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 804.309071][ T823] savu 0003:1E7D:2D5A.007D: unknown main item tag 0x0 [ 804.322642][ T823] savu 0003:1E7D:2D5A.007D: unknown main item tag 0x0 [ 804.349874][ T823] savu 0003:1E7D:2D5A.007D: hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 804.423411][ T823] usb 4-1: USB disconnect, device number 92 [ 804.423944][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 804.464060][ T5945] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 804.499181][ T5945] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 804.540488][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.601878][ T5945] usb 3-1: Product: syz [ 804.625818][ T5945] usb 3-1: Manufacturer: syz [ 804.642716][T13888] fido_id[13888]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 804.658562][ T5836] Bluetooth: hci3: command 0x0405 tx timeout [ 804.665060][ T5945] usb 3-1: SerialNumber: syz [ 804.676662][ T5945] usb 3-1: config 0 descriptor?? [ 804.905961][ T823] usb 3-1: USB disconnect, device number 92 [ 805.750343][ T5945] usb 1-1: USB disconnect, device number 96 [ 806.294059][ T823] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 806.518901][ T30] audit: type=1400 audit(2000000557.639:801): avc: denied { audit_write } for pid=13910 comm="syz.0.1943" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 806.561916][ T30] audit: type=1400 audit(2000000557.659:802): avc: denied { watch } for pid=13910 comm="syz.0.1943" path="pipe:[43560]" dev="pipefs" ino=43560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 807.468731][ T823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 807.480265][ T823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 807.498580][ T823] usb 2-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00 [ 807.507974][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.539902][ T823] usb 2-1: config 0 descriptor?? [ 807.545642][T13904] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 807.564984][T13913] netlink: 'syz.2.1944': attribute type 2 has an invalid length. [ 808.309537][ T30] audit: type=1326 audit(2000000559.329:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13917 comm="syz.0.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa058e929 code=0x7fc00000 [ 808.804351][T13927] 9pnet_fd: Insufficient options for proto=fd [ 809.030790][T13929] MTD: Couldn't look up '/dev/nullb0': -15 [ 809.395431][ T30] audit: type=1326 audit(2000000559.329:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13917 comm="syz.0.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3aa058e929 code=0x7fc00000 [ 809.472543][ T30] audit: type=1326 audit(2000000559.339:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13917 comm="syz.0.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa058e929 code=0x7fc00000 [ 809.495983][ C1] vkms_vblank_simulate: vblank timer overrun [ 809.527344][T13923] netlink: 'syz.3.1946': attribute type 2 has an invalid length. [ 809.568636][ T30] audit: type=1326 audit(2000000559.339:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13917 comm="syz.0.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa058e929 code=0x7fc00000 [ 809.739855][ T30] audit: type=1326 audit(2000000559.339:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13917 comm="syz.0.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa058e929 code=0x7fc00000 [ 809.763304][ C1] vkms_vblank_simulate: vblank timer overrun [ 809.771536][ T30] audit: type=1326 audit(2000000559.339:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13917 comm="syz.0.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa058e929 code=0x7fc00000 [ 809.794955][ C1] vkms_vblank_simulate: vblank timer overrun [ 809.821770][ T30] audit: type=1326 audit(2000000559.339:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13917 comm="syz.0.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa058e929 code=0x7fc00000 [ 809.845242][ C1] vkms_vblank_simulate: vblank timer overrun [ 810.056431][T13938] input: syz1 as /devices/virtual/input/input95 [ 810.459047][ T30] audit: type=1326 audit(2000000559.339:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13917 comm="syz.0.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa058e929 code=0x7fc00000 [ 810.626226][ T823] usbhid 2-1:0.0: can't add hid device: -71 [ 810.632197][ T823] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 810.677803][ T823] usb 2-1: USB disconnect, device number 79 [ 811.561392][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 811.859009][T13946] ceph: No mds server is up or the cluster is laggy [ 811.885907][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 812.034893][ T5945] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 812.101622][ T5822] Bluetooth: hci3: unexpected event 0x04 length: 12 > 10 [ 812.101654][ T5822] Bluetooth: unknown link type 203 [ 812.116262][ T5822] Bluetooth: hci3: connection err: -111 [ 812.213933][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 812.231796][ T5945] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 812.273585][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 158, changing to 7 [ 812.296127][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 58261, setting to 1024 [ 812.319844][ T5945] usb 3-1: New USB device found, idVendor=05e1, idProduct=1008, bcdDevice=25.11 [ 812.329154][ T9479] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 812.347546][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.355677][ T5927] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 812.375177][ T5945] usb 3-1: Product: syz [ 812.379374][ T5945] usb 3-1: Manufacturer: syz [ 812.393841][ T5945] usb 3-1: SerialNumber: syz [ 812.408805][ T5945] usb 3-1: config 0 descriptor?? [ 812.495374][ T9479] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 812.508792][ T5826] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 812.533837][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 812.540827][ T9479] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 812.550775][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.561096][ T9479] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 812.569211][ T5927] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 812.579311][ T9479] usb 5-1: SerialNumber: syz [ 812.594390][ T5927] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 812.608243][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0 [ 812.617976][ T5927] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 812.633920][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.652296][ T5927] usb 2-1: Product: syz [ 812.657204][ T5927] usb 2-1: Manufacturer: syz [ 812.661867][ T5927] usb 2-1: SerialNumber: syz [ 812.675691][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 812.704490][ T5927] usb 2-1: config 0 descriptor?? [ 812.713828][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 812.738641][ T5927] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 812.753874][ T5826] usb 4-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00 [ 812.773372][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.804635][ T5826] usb 4-1: config 0 descriptor?? [ 812.810830][T13962] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 812.949366][ T5927] snd_usb_toneport 2-1:0.0: set_interface failed [ 812.970367][ T5927] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 812.987878][ T5927] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 813.036309][ T5927] usb 2-1: USB disconnect, device number 80 [ 813.475950][ T9479] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 813.750313][ T9479] usb 5-1: USB disconnect, device number 103 [ 813.841353][ T5927] usb 3-1: USB disconnect, device number 93 [ 813.916912][ T5826] usbhid 4-1:0.0: can't add hid device: -71 [ 813.923032][ T5826] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 813.936561][ T5826] usb 4-1: USB disconnect, device number 93 [ 814.174094][ T823] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 814.334238][ T823] usb 1-1: Using ep0 maxpacket: 8 [ 814.349221][ T823] usb 1-1: unable to get BOS descriptor or descriptor too short [ 814.375112][ T823] usb 1-1: config 1 has an invalid interface number: 11 but max is 0 [ 814.401168][ T823] usb 1-1: config 1 has no interface number 0 [ 814.435076][ T823] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=53.51 [ 814.462538][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.499678][ T823] usb 1-1: Product: syz [ 814.518336][ T823] usb 1-1: Manufacturer: syz [ 814.543342][ T823] usb 1-1: SerialNumber: syz [ 815.673890][ T5826] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 815.994016][ T5826] usb 5-1: Using ep0 maxpacket: 16 [ 816.003278][ T5826] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 816.025831][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 816.039960][ T5826] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 816.087204][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.121047][ T5826] usb 5-1: Product: syz [ 816.155948][ T5826] usb 5-1: Manufacturer: syz [ 816.195500][ T5826] usb 5-1: SerialNumber: syz [ 816.373281][ T5826] usb 5-1: config 0 descriptor?? [ 816.591275][ T5826] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 816.696308][ T5826] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 817.071157][T14002] netlink: 'syz.3.1967': attribute type 2 has an invalid length. [ 817.298952][ T5826] em28xx 5-1:0.0: chip ID is em2882/3 [ 817.554449][T13986] pim6reg1: entered promiscuous mode [ 817.559958][T13986] pim6reg1: entered allmulticast mode [ 818.099562][ T823] usb 1-1: Expected 3 endpoints, found: 0 [ 818.244264][ T823] usb 1-1: USB disconnect, device number 97 [ 818.272240][ T5826] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 818.322527][ T5826] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 818.360462][ T5826] em28xx 5-1:0.0: No AC97 audio processor [ 818.414442][ T5826] usb 5-1: USB disconnect, device number 104 [ 818.435334][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 818.435351][ T30] audit: type=1400 audit(2000000569.549:820): avc: denied { load_policy } for pid=14024 comm="syz.2.1971" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 818.438430][ T5826] em28xx 5-1:0.0: Disconnecting em28xx [ 818.539609][ T5826] em28xx 5-1:0.0: Freeing device [ 818.853978][ T5927] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 819.193839][ T30] audit: type=1800 audit(2000000570.259:821): pid=14037 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1975" name="bus" dev="overlay" ino=2161 res=0 errno=0 [ 819.307750][T14040] netlink: 'syz.3.1976': attribute type 2 has an invalid length. [ 819.393921][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 819.399283][T14025] SELinux: failed to load policy [ 819.423856][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 819.460421][ T5927] usb 2-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00 [ 819.480636][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.517727][ T5927] usb 2-1: config 0 descriptor?? [ 819.523378][T14035] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 821.026169][ T5826] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 821.124956][T14055] input: syz1 as /devices/virtual/input/input96 [ 821.253984][ T5826] usb 4-1: Using ep0 maxpacket: 8 [ 821.326972][ T5826] usb 4-1: config 129 has an invalid interface number: 57 but max is 0 [ 821.520234][ T5826] usb 4-1: config 129 has no interface number 0 [ 821.580793][ T5826] usb 4-1: config 129 interface 57 has no altsetting 0 [ 821.659156][ T5826] usb 4-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=69.4e [ 821.690050][ T5927] usbhid 2-1:0.0: can't add hid device: -71 [ 821.697037][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.706576][ T5927] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 821.738270][ T5826] usb 4-1: Product: Ð [ 821.742533][ T5826] usb 4-1: Manufacturer: à   [ 821.802524][ T5826] usb 4-1: SerialNumber: 㒨ੋï‘텛담閘㭲솚巊뒵䰹褀᤭蠳䧙퇅놴奕웭틄ꉋ⇀≖௬ࠋ㬚벽⊺ऽҳâ»æ‹§â“‡âœë‘Žç°¥é““뱋䊯æ–辉燽ｪ쌞㔫æœè‚¼íŽ¸îšŸéŒ­ï°ªå»›î°Ÿè”¾ê“↲㵿憬⓼襴碇⽊ਉï•ì¢ƒçº±ãŸ [ 821.826123][ C1] vkms_vblank_simulate: vblank timer overrun [ 821.854182][ T5927] usb 2-1: USB disconnect, device number 81 [ 822.607645][T14075] netlink: 'syz.2.1983': attribute type 2 has an invalid length. [ 822.780356][ T5826] gspca_main: spca505-2.14.0 probing 041e:401d [ 822.804076][ T5826] gspca_spca505: reg write: error -71 [ 822.809648][ T5826] spca505 4-1:129.57: probe with driver spca505 failed with error -5 [ 822.899742][ T5826] usb 4-1: USB disconnect, device number 94 [ 823.844499][ T30] audit: type=1800 audit(2000000574.939:822): pid=14097 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1987" name="bus" dev="overlay" ino=2131 res=0 errno=0 [ 824.194131][ T823] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 825.272202][ T823] usb 5-1: Using ep0 maxpacket: 8 [ 825.933102][T14111] input: syz0 as /devices/virtual/input/input97 [ 826.877736][ T10] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 827.319099][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 827.344961][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 827.363415][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 827.412235][ T10] usb 3-1: SerialNumber: syz [ 827.796637][T14133] batadv21: entered promiscuous mode [ 827.808182][T14133] 8021q: adding VLAN 0 to HW filter on device batadv21 [ 827.827091][ T9479] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 827.894466][ T823] usb 5-1: device descriptor read/all, error -71 [ 827.996070][ T9479] usb 4-1: Using ep0 maxpacket: 32 [ 828.015541][ T9479] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.034531][ T9479] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.054574][ T9479] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 828.063654][ T9479] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.091335][ T9479] usb 4-1: config 0 descriptor?? [ 828.134488][ T5826] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 828.286105][ T5826] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.296353][ T5826] usb 2-1: config 0 interface 0 has no altsetting 0 [ 828.302997][ T5826] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 828.314088][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.328549][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 828.328592][ T5826] usb 2-1: config 0 descriptor?? [ 828.370964][ T10] usb 3-1: USB disconnect, device number 94 [ 828.529569][ T9479] savu 0003:1E7D:2D5A.007E: unknown main item tag 0x0 [ 828.546779][ T9479] savu 0003:1E7D:2D5A.007E: unknown main item tag 0x0 [ 828.548912][ T823] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 828.565262][ T9479] savu 0003:1E7D:2D5A.007E: unknown main item tag 0x0 [ 828.572094][ T9479] savu 0003:1E7D:2D5A.007E: unknown main item tag 0x0 [ 828.596426][ T9479] savu 0003:1E7D:2D5A.007E: unknown main item tag 0x0 [ 828.612293][ T9479] savu 0003:1E7D:2D5A.007E: unknown main item tag 0x0 [ 828.627380][ T9479] savu 0003:1E7D:2D5A.007E: unknown main item tag 0x0 [ 828.642265][ T9479] savu 0003:1E7D:2D5A.007E: unknown main item tag 0x0 [ 828.665561][ T9479] savu 0003:1E7D:2D5A.007E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 828.735762][ T823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 828.790892][ T9479] usb 4-1: USB disconnect, device number 95 [ 828.793834][ T823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 828.841953][ T823] usb 5-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00 [ 828.904849][ T823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.906914][T14144] fido_id[14144]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 829.063550][T14147] netlink: 'syz.0.1999': attribute type 2 has an invalid length. [ 829.182394][ T823] usb 5-1: config 0 descriptor?? [ 829.264185][T14138] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 830.247855][ T5826] usbhid 2-1:0.0: can't add hid device: -71 [ 830.254620][ T5826] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 830.267562][ T5826] usb 2-1: USB disconnect, device number 82 [ 830.503137][T14138] 9pnet_fd: Insufficient options for proto=fd [ 830.821230][T14161] MTD: Couldn't look up '/dev/nullb0': -15 [ 832.160234][ T823] usbhid 5-1:0.0: can't add hid device: -71 [ 832.166918][ T823] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 832.186025][ T823] usb 5-1: USB disconnect, device number 106 [ 832.424897][T14170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2005'. [ 832.453965][ T5826] usb 4-1: new low-speed USB device number 96 using dummy_hcd [ 832.633358][ T5826] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 833.189972][ T30] audit: type=1800 audit(2000000583.819:823): pid=14186 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2009" name="bus" dev="overlay" ino=2296 res=0 errno=0 [ 833.241488][ T5826] usb 4-1: config 179 has no interface number 0 [ 833.542142][ T5826] usb 4-1: config 179 interface 65 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 833.598762][ T5826] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 833.618172][ T5826] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x87 has invalid maxpacket 65535, setting to 8 [ 833.989653][ T5826] usb 4-1: config 179 interface 65 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 834.007408][ T5826] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 834.020512][ T5826] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 834.106094][ T5826] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 834.133855][ T9479] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 834.161929][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.251671][ T10] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 834.269826][T14178] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 834.333910][ T9479] usb 1-1: Using ep0 maxpacket: 8 [ 834.546873][T14178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.591418][T14178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.613866][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 834.627520][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.641093][ T823] usb 4-1: USB disconnect, device number 96 [ 834.675779][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.708228][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 834.722428][T14204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2013'. [ 834.762207][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.790968][ T10] usb 2-1: config 0 descriptor?? [ 835.613418][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 835.628623][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 835.728873][ T10] usb 2-1: USB disconnect, device number 83 [ 835.830477][ T9479] usb 1-1: device descriptor read/all, error -71 [ 837.044207][T14222] netlink: 'syz.4.2018': attribute type 2 has an invalid length. [ 837.789838][T14227] netlink: 'syz.3.2019': attribute type 2 has an invalid length. [ 838.050068][ T9479] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 838.069435][T14232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 838.224147][ T9479] usb 1-1: Using ep0 maxpacket: 32 [ 838.235106][ T9479] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 838.265869][ T9479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 158, changing to 7 [ 838.293840][ T9479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 58261, setting to 1024 [ 838.308625][ T9479] usb 1-1: New USB device found, idVendor=05e1, idProduct=1008, bcdDevice=25.11 [ 838.318158][ T9479] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.326570][ T9479] usb 1-1: Product: syz [ 838.331014][ T9479] usb 1-1: Manufacturer: syz [ 838.351311][ T9479] usb 1-1: SerialNumber: syz [ 838.364982][ T9479] usb 1-1: config 0 descriptor?? [ 838.425065][T14242] FAULT_INJECTION: forcing a failure. [ 838.425065][T14242] name failslab, interval 1, probability 0, space 0, times 0 [ 838.438042][T14242] CPU: 1 UID: 0 PID: 14242 Comm: syz.4.2025 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 838.438071][T14242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 838.438084][T14242] Call Trace: [ 838.438091][T14242] [ 838.438099][T14242] dump_stack_lvl+0x16c/0x1f0 [ 838.438135][T14242] should_fail_ex+0x512/0x640 [ 838.438167][T14242] ? fs_reclaim_acquire+0xae/0x150 [ 838.438190][T14242] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 838.438217][T14242] should_failslab+0xc2/0x120 [ 838.438246][T14242] __kmalloc_noprof+0xd2/0x510 [ 838.438278][T14242] tomoyo_realpath_from_path+0xc2/0x6e0 [ 838.438309][T14242] ? tomoyo_profile+0x47/0x60 [ 838.438341][T14242] tomoyo_path_number_perm+0x245/0x580 [ 838.438363][T14242] ? tomoyo_path_number_perm+0x237/0x580 [ 838.438390][T14242] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 838.438416][T14242] ? find_held_lock+0x2b/0x80 [ 838.438469][T14242] ? find_held_lock+0x2b/0x80 [ 838.438492][T14242] ? hook_file_ioctl_common+0x145/0x410 [ 838.438529][T14242] ? __fget_files+0x20e/0x3c0 [ 838.438561][T14242] security_file_ioctl+0x9b/0x240 [ 838.438589][T14242] __x64_sys_ioctl+0xb7/0x210 [ 838.438615][T14242] do_syscall_64+0xcd/0x4c0 [ 838.438646][T14242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.438667][T14242] RIP: 0033:0x7f2a8438e929 [ 838.438685][T14242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 838.438705][T14242] RSP: 002b:00007f2a821d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 838.438725][T14242] RAX: ffffffffffffffda RBX: 00007f2a845b6080 RCX: 00007f2a8438e929 [ 838.438740][T14242] RDX: 0000200000000240 RSI: 0000000000003b86 RDI: 0000000000000005 [ 838.438753][T14242] RBP: 00007f2a821d5090 R08: 0000000000000000 R09: 0000000000000000 [ 838.438766][T14242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.438778][T14242] R13: 0000000000000001 R14: 00007f2a845b6080 R15: 00007ffd35196908 [ 838.438808][T14242] [ 838.438818][T14242] ERROR: Out of memory at tomoyo_realpath_from_path. [ 838.524864][ T10] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 838.593951][ T823] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 838.743982][ T10] usb 3-1: device descriptor read/64, error -71 [ 839.174405][ T10] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 839.344106][T10184] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 839.351776][ T10] usb 3-1: device descriptor read/64, error -71 [ 839.396768][ T823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.410342][ T823] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 839.420053][ T823] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 839.429145][ T823] usb 2-1: Product: syz [ 839.433554][ T823] usb 2-1: Manufacturer: syz [ 839.438597][ T823] usb 2-1: SerialNumber: syz [ 839.451683][ T823] usb 2-1: config 0 descriptor?? [ 839.464604][ T10] usb usb3-port1: attempt power cycle [ 839.487961][ T823] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 839.506934][T10184] usb 4-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.533992][T10184] usb 4-1: config 0 interface 0 has no altsetting 0 [ 839.542112][T10184] usb 4-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 839.546280][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 839.551588][T10184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.592107][T10184] usb 4-1: config 0 descriptor?? [ 839.713629][ T823] usb 2-1: USB disconnect, device number 84 [ 839.844206][ T10] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 839.874693][ T10] usb 3-1: device descriptor read/8, error -71 [ 840.046456][T10184] apple 0003:05AC:027A.007F: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.3-1/input0 [ 840.106298][ T5826] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 840.124251][ T10] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 840.155249][ T10] usb 3-1: device descriptor read/8, error -71 [ 840.274311][ T10] usb usb3-port1: unable to enumerate USB device [ 840.285070][ T5826] usb 5-1: Using ep0 maxpacket: 32 [ 840.298416][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.310580][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.320983][ T5826] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 840.330501][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.347074][ T5826] usb 5-1: config 0 descriptor?? [ 840.462182][ T10] usb 1-1: USB disconnect, device number 100 [ 840.882036][ T5826] usbhid 5-1:0.0: can't add hid device: -71 [ 840.939511][ T5826] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 841.176978][ T5826] usb 5-1: USB disconnect, device number 107 [ 841.333088][ T10] usb 4-1: USB disconnect, device number 97 [ 841.481602][T14261] MTD: Couldn't look up '/dev/nullb0': -15 [ 842.513876][ T5826] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 843.636742][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 843.648158][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 843.659316][ T5826] usb 2-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00 [ 843.671623][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.545644][ T5826] usb 2-1: config 0 descriptor?? [ 845.562683][ T5826] usb 2-1: can't set config #0, error -71 [ 845.711600][ T5927] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 845.734717][ T5826] usb 2-1: USB disconnect, device number 85 [ 846.265588][T14279] FAULT_INJECTION: forcing a failure. [ 846.265588][T14279] name failslab, interval 1, probability 0, space 0, times 0 [ 846.283991][ T24] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 846.305909][T14279] CPU: 1 UID: 0 PID: 14279 Comm: syz.0.2034 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 846.305928][T14279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 846.305936][T14279] Call Trace: [ 846.305941][T14279] [ 846.305946][T14279] dump_stack_lvl+0x16c/0x1f0 [ 846.305969][T14279] should_fail_ex+0x512/0x640 [ 846.305985][T14279] ? fs_reclaim_acquire+0xae/0x150 [ 846.305998][T14279] ? tomoyo_encode2+0x100/0x3e0 [ 846.306013][T14279] should_failslab+0xc2/0x120 [ 846.306031][T14279] __kmalloc_noprof+0xd2/0x510 [ 846.306049][T14279] tomoyo_encode2+0x100/0x3e0 [ 846.306067][T14279] tomoyo_encode+0x29/0x50 [ 846.306081][T14279] tomoyo_realpath_from_path+0x18f/0x6e0 [ 846.306099][T14279] ? tomoyo_profile+0x47/0x60 [ 846.306118][T14279] tomoyo_path_number_perm+0x245/0x580 [ 846.306130][T14279] ? tomoyo_path_number_perm+0x237/0x580 [ 846.306145][T14279] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 846.306159][T14279] ? find_held_lock+0x2b/0x80 [ 846.306203][T14279] ? find_held_lock+0x2b/0x80 [ 846.306221][T14279] ? hook_file_ioctl_common+0x145/0x410 [ 846.306243][T14279] ? __fget_files+0x20e/0x3c0 [ 846.306262][T14279] security_file_ioctl+0x9b/0x240 [ 846.306278][T14279] __x64_sys_ioctl+0xb7/0x210 [ 846.306293][T14279] do_syscall_64+0xcd/0x4c0 [ 846.306311][T14279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.306323][T14279] RIP: 0033:0x7f3aa058e929 [ 846.306333][T14279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 846.306344][T14279] RSP: 002b:00007f3a9e3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 846.306355][T14279] RAX: ffffffffffffffda RBX: 00007f3aa07b5fa0 RCX: 00007f3aa058e929 [ 846.306363][T14279] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000003 [ 846.306370][T14279] RBP: 00007f3a9e3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 846.306377][T14279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.306384][T14279] R13: 0000000000000000 R14: 00007f3aa07b5fa0 R15: 00007fff7ad32b08 [ 846.306399][T14279] [ 846.306429][T14279] ERROR: Out of memory at tomoyo_realpath_from_path. [ 847.244732][ T5822] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10 [ 847.244765][ T5822] Bluetooth: unknown link type 203 [ 847.257556][ T5822] Bluetooth: hci1: connection err: -111 [ 847.534183][ T5826] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 848.155320][ T9479] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 848.183873][ T5826] usb 5-1: Using ep0 maxpacket: 8 [ 848.214927][ T5826] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.225987][ T5826] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 848.254079][ T5826] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 848.280766][ T5826] usb 5-1: config 0 interface 0 has no altsetting 0 [ 848.296511][ T5826] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 848.308556][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.322622][ T5826] usb 5-1: Product: syz [ 848.326980][ T9479] usb 1-1: Using ep0 maxpacket: 8 [ 848.342736][ T5826] usb 5-1: Manufacturer: syz [ 848.352524][ T9479] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 848.371066][T14304] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 848.374242][ T5826] usb 5-1: SerialNumber: syz [ 848.382676][ T9479] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 848.397732][ T5826] usb 5-1: config 0 descriptor?? [ 848.409883][ T9479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 848.423392][ T5826] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 848.430693][ T9479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 848.442906][ T9479] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 848.461041][T14304] nvme_fabrics: missing parameter 'transport=%s' [ 848.461792][ T9479] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 848.468898][T14304] nvme_fabrics: missing parameter 'nqn=%s' [ 848.483170][T14306] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 848.487048][ T9479] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.514195][ T9479] usb 1-1: Product: syz [ 848.518370][ T9479] usb 1-1: Manufacturer: syz [ 848.523036][ T9479] usb 1-1: SerialNumber: syz [ 848.543282][ T9479] usb 1-1: config 0 descriptor?? [ 848.567519][ T9479] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input98 [ 848.611740][ T5826] snd_usb_toneport 5-1:0.0: set_interface failed [ 848.619627][ T5826] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 848.641099][ T5826] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 848.659322][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 848.668949][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.690754][ T5826] usb 5-1: USB disconnect, device number 108 [ 848.723706][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 848.738740][ T24] pvrusb2: ********** [ 848.742865][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 848.774356][ T24] pvrusb2: Important functionality might not be entirely working. [ 848.782206][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 848.834165][ T10] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 848.841221][ T24] pvrusb2: ********** [ 848.993893][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 849.003167][ T10] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 849.013451][ T10] usb 2-1: config 0 has no interface number 0 [ 849.019850][ T10] usb 2-1: config 0 interface 12 has no altsetting 0 [ 849.029333][ T10] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 849.040217][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.048515][ T10] usb 2-1: Product: syz [ 849.054184][ T2340] pvrusb2: Invalid write control endpoint [ 849.064452][ T10] usb 2-1: Manufacturer: syz [ 849.075917][ T10] usb 2-1: SerialNumber: syz [ 849.094016][ T10] usb 2-1: config 0 descriptor?? [ 849.137101][ T2340] pvrusb2: Invalid write control endpoint [ 849.150358][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 849.160380][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 849.171276][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 849.181736][ T2340] pvrusb2: Device being rendered inoperable [ 849.188190][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 849.195974][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 849.211756][ T2340] pvrusb2: Attached sub-driver cx25840 [ 849.223927][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 849.234610][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 849.274124][T14308] pvrusb2: Attempted to execute control transfer when device not ok [ 849.506902][ T30] audit: type=1326 audit(2000000600.599:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14280 comm="syz.2.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104f38e929 code=0x7fc00000 [ 849.673208][T14318] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2045'. [ 849.705351][T14318] bond_slave_0: entered promiscuous mode [ 849.711807][T14318] bond_slave_1: entered promiscuous mode [ 849.717638][T14318] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 849.847740][T14318] veth1_to_batadv: entered promiscuous mode [ 849.857000][T14318] macsec1: entered promiscuous mode [ 850.477093][ T5826] usb 1-1: USB disconnect, device number 101 [ 850.713835][ T823] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 850.863973][ T30] audit: type=1400 audit(2000000601.979:825): avc: denied { read } for pid=14350 comm="syz.0.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 850.917904][ T30] audit: type=1400 audit(2000000602.039:826): avc: denied { ioctl } for pid=14350 comm="syz.0.2047" path="socket:[45437]" dev="sockfs" ino=45437 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 850.947097][ T823] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.957873][ T823] usb 3-1: config 0 interface 0 has no altsetting 0 [ 850.965009][ T823] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 850.976089][ T823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.996854][ T823] usb 3-1: config 0 descriptor?? [ 851.301536][T10184] usb 4-1: USB disconnect, device number 98 [ 851.450574][T14357] MTD: Couldn't look up '/dev/nullb0': -15 [ 851.621879][ T823] apple 0003:05AC:027A.0080: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.2-1/input0 [ 852.119818][ T10] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 852.263429][ T10] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 852.283395][ T10] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 852.301093][ T10] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 852.340191][ T10] usb 2-1: USB disconnect, device number 86 [ 852.831625][ T5826] usb 3-1: USB disconnect, device number 100 [ 854.063939][ T823] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 854.207731][ T5826] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 854.303008][ T823] usb 4-1: Using ep0 maxpacket: 32 [ 854.371335][ T823] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 854.428733][ T5826] usb 3-1: Using ep0 maxpacket: 16 [ 854.448706][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.459624][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 158, changing to 7 [ 854.459658][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 58261, setting to 1024 [ 854.462412][ T823] usb 4-1: New USB device found, idVendor=05e1, idProduct=1008, bcdDevice=25.11 [ 854.552950][ T5826] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 854.572479][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.583326][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.600837][ T5826] usb 3-1: config 0 descriptor?? [ 854.743861][ T823] usb 4-1: Product: syz [ 854.760803][ T823] usb 4-1: Manufacturer: syz [ 854.858344][ T823] usb 4-1: SerialNumber: syz [ 854.865680][ T5826] usbhid 3-1:0.0: can't add hid device: -32 [ 854.872113][ T5826] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 854.912278][ T823] usb 4-1: config 0 descriptor?? [ 855.012904][T14396] tun0: tun_chr_ioctl cmd 1074025675 [ 855.024134][T14396] tun0: persist enabled [ 855.029811][T14396] tun0: tun_chr_ioctl cmd 1074025675 [ 855.035274][T14396] tun0: persist disabled [ 855.200846][ T10] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 855.378608][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 855.408172][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 855.420834][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 855.431183][ T10] usb 1-1: SerialNumber: syz [ 855.553894][ T823] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 855.840835][T14405] netlink: 'syz.4.2061': attribute type 2 has an invalid length. [ 855.919505][ T823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 855.930698][ T823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 855.942756][ T823] usb 2-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00 [ 855.952250][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.971590][ T823] usb 2-1: config 0 descriptor?? [ 855.988606][T14400] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 856.322518][T10184] usb 4-1: USB disconnect, device number 99 [ 856.347441][ T10] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 856.368160][ T10] usb 1-1: USB disconnect, device number 102 [ 856.478923][T14413] 9pnet_fd: Insufficient options for proto=fd [ 856.778861][ T823] usbhid 2-1:0.0: can't add hid device: -71 [ 856.785086][ T823] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 856.795786][ T823] usb 2-1: USB disconnect, device number 87 [ 857.047431][T14414] netlink: 'syz.3.2063': attribute type 2 has an invalid length. [ 857.189781][ T823] usb 3-1: USB disconnect, device number 101 [ 857.545049][T14420] netlink: 'syz.2.2064': attribute type 2 has an invalid length. [ 858.097636][T14430] batadv26: entered promiscuous mode [ 858.104368][T14430] 8021q: adding VLAN 0 to HW filter on device batadv26 [ 858.465023][T14426] input: syz1 as /devices/virtual/input/input99 [ 859.056806][T14438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2068'. [ 859.333959][ T24] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 859.645941][ T24] usb 4-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.663834][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 859.673890][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 859.703867][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.011684][T14452] batadv22: entered promiscuous mode [ 860.021658][T14452] 8021q: adding VLAN 0 to HW filter on device batadv22 [ 860.403383][ T24] usb 4-1: config 0 descriptor?? [ 860.453983][ T9479] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 861.087180][ T9479] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.103974][ T9479] usb 2-1: config 0 interface 0 has no altsetting 0 [ 861.111434][ T9479] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 861.135406][ T5836] Bluetooth: hci3: command 0x0405 tx timeout [ 861.175778][ T9479] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.286037][ T9479] usb 2-1: config 0 descriptor?? [ 861.431040][ T5826] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 861.435170][T14468] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2076'. [ 861.596406][ T5826] usb 1-1: unable to get BOS descriptor or descriptor too short [ 861.625063][ T5826] usb 1-1: not running at top speed; connect to a high speed hub [ 861.733113][ T5826] usb 1-1: config 9 has an invalid interface number: 76 but max is 0 [ 861.744478][ T5826] usb 1-1: config 9 has no interface number 0 [ 861.759096][ T5826] usb 1-1: config 9 interface 76 has no altsetting 0 [ 861.775704][ T5826] usb 1-1: New USB device found, idVendor=16d8, idProduct=6804, bcdDevice= 7.ff [ 861.797271][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 861.818161][ T5826] usb 1-1: SerialNumber: syz [ 862.127349][ T30] audit: type=1400 audit(2000000613.239:827): avc: denied { execute } for pid=14462 comm="syz.0.2075" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=45843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 862.387484][ T5826] hub 1-1:9.76: bad descriptor, ignoring hub [ 862.451686][ T5826] hub 1-1:9.76: probe with driver hub failed with error -5 [ 862.491922][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 862.507705][ T5826] option 1-1:9.76: GSM modem (1-port) converter detected [ 862.581069][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 862.668255][ T24] usb 4-1: USB disconnect, device number 100 [ 862.695228][ T5826] usb 1-1: USB disconnect, device number 103 [ 862.730261][ T5826] option 1-1:9.76: device disconnected [ 863.014909][ T9479] usbhid 2-1:0.0: can't add hid device: -71 [ 863.020977][ T9479] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 863.653889][ T9479] usb 2-1: USB disconnect, device number 88 [ 864.040718][ T24] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 864.245164][T14513] input: syz1 as /devices/virtual/input/input100 [ 864.274036][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 864.410983][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 864.588846][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 158, changing to 7 [ 864.623230][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 58261, setting to 1024 [ 864.687520][ T24] usb 4-1: New USB device found, idVendor=05e1, idProduct=1008, bcdDevice=25.11 [ 864.703902][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.722053][ T24] usb 4-1: Product: syz [ 864.746127][ T24] usb 4-1: Manufacturer: syz [ 864.760881][ T24] usb 4-1: SerialNumber: syz [ 864.806104][ T24] usb 4-1: config 0 descriptor?? [ 866.552476][T14532] netlink: 'syz.4.2087': attribute type 2 has an invalid length. [ 866.795720][ T9479] usb 4-1: USB disconnect, device number 101 [ 866.988739][ T5836] Bluetooth: hci2: unexpected event 0x04 length: 12 > 10 [ 866.988775][ T5836] Bluetooth: unknown link type 203 [ 867.001280][ T5836] Bluetooth: hci2: connection err: -111 [ 867.233050][T14539] input: syz1 as /devices/virtual/input/input101 [ 867.796401][T14548] batadv26: entered promiscuous mode [ 867.806398][T14548] 8021q: adding VLAN 0 to HW filter on device batadv26 [ 868.240542][ T30] audit: type=1326 audit(2000000619.109:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14537 comm="syz.2.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104f38e929 code=0x7fc00000 [ 868.283889][ T9479] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 868.433902][ T9479] usb 4-1: Using ep0 maxpacket: 8 [ 868.446311][ T9479] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.460384][ T9479] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 868.486214][ T9479] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 868.503909][ T10] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 868.514562][ T9479] usb 4-1: config 0 interface 0 has no altsetting 0 [ 868.534131][ T9479] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 868.553416][ T9479] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.572038][ T9479] usb 4-1: Product: syz [ 868.576483][ T24] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 868.588842][ T9479] usb 4-1: Manufacturer: syz [ 868.596664][ T9479] usb 4-1: SerialNumber: syz [ 868.607425][ T9479] usb 4-1: config 0 descriptor?? [ 868.620834][ T9479] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 868.685898][ T10] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.714062][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 868.720797][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 868.736116][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 868.742047][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.748684][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 868.766390][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00 [ 868.776926][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.777773][ T10] usb 5-1: config 0 descriptor?? [ 868.788430][ T24] usb 3-1: config 0 descriptor?? [ 868.797201][T14550] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 868.804540][ T5826] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 868.829157][ T9479] snd_usb_toneport 4-1:0.0: set_interface failed [ 868.840324][ T9479] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 868.849070][ T9479] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 868.866109][ T9479] usb 4-1: USB disconnect, device number 102 [ 868.963990][ T5927] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 868.986020][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 868.997309][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 869.008628][ T5826] usb 2-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00 [ 869.018508][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.033150][ T5826] usb 2-1: config 0 descriptor?? [ 869.044656][T14552] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 869.134170][ T5927] usb 1-1: Using ep0 maxpacket: 8 [ 869.141783][ T5927] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 869.153087][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.176921][ T5927] pvrusb2: Hardware description: Terratec Grabster AV400 [ 869.191888][ T5927] pvrusb2: ********** [ 869.196643][ T5927] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 869.207267][ T5927] pvrusb2: Important functionality might not be entirely working. [ 869.215522][ T5927] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 869.233199][ T5927] pvrusb2: ********** [ 869.290123][T14555] 9pnet_fd: Insufficient options for proto=fd [ 869.759755][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 869.773710][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 869.774290][ T2340] pvrusb2: Invalid write control endpoint [ 869.820013][ T24] usb 3-1: USB disconnect, device number 102 [ 869.916811][ T2340] pvrusb2: Invalid write control endpoint [ 869.929379][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 869.945309][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 869.959564][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 869.983899][ T2340] pvrusb2: Device being rendered inoperable [ 869.990849][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 870.002126][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 870.011089][T14557] 9pnet_fd: Insufficient options for proto=fd [ 870.018531][ T2340] pvrusb2: Attached sub-driver cx25840 [ 870.046034][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 870.069343][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 870.086925][T14554] pvrusb2: Attempted to execute control transfer when device not ok [ 870.307001][ T24] usb 1-1: USB disconnect, device number 104 [ 870.474309][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 870.578161][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 870.619050][ T10] usb 5-1: USB disconnect, device number 109 [ 870.678716][ T5826] usbhid 2-1:0.0: can't add hid device: -71 [ 870.694870][ T5826] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 870.724172][ T5826] usb 2-1: USB disconnect, device number 89 [ 872.866247][T14577] syz_tun: entered allmulticast mode [ 889.500451][T14586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 889.894053][ T24] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 890.161582][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 890.340478][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 890.384471][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00 [ 890.395122][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.413309][ T24] usb 3-1: config 0 descriptor?? [ 890.443286][T14597] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 891.476535][T14616] 9pnet_fd: Insufficient options for proto=fd [ 891.731879][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 891.753948][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 891.789044][ T24] usb 3-1: USB disconnect, device number 103 [ 891.843894][ T10] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 891.872038][ T823] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 891.936483][T14625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 892.035586][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 892.046788][ T823] usb 4-1: Using ep0 maxpacket: 8 [ 892.056222][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 892.075244][ T823] usb 4-1: unable to get BOS descriptor or descriptor too short [ 892.093854][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00 [ 892.103451][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.113692][ T823] usb 4-1: config 1 has an invalid interface number: 11 but max is 0 [ 892.135210][ T823] usb 4-1: config 1 has no interface number 0 [ 892.142331][ T10] usb 1-1: config 0 descriptor?? [ 892.157050][T14619] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 892.171496][ T823] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=53.51 [ 892.316412][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.334064][ T823] usb 4-1: Product: syz [ 892.339600][ T823] usb 4-1: Manufacturer: syz [ 892.345184][ T823] usb 4-1: SerialNumber: syz [ 892.513938][T14634] batadv23: entered promiscuous mode [ 892.525491][T14634] 8021q: adding VLAN 0 to HW filter on device batadv23 [ 893.064126][ T6746] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 893.184013][ T24] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 893.211210][T14638] 9pnet_fd: Insufficient options for proto=fd [ 893.489678][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 893.501899][ T6746] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.522260][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 893.524746][ T6746] usb 2-1: config 0 interface 0 has no altsetting 0 [ 893.580770][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00 [ 893.584608][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 893.603355][ T6746] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 893.613894][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 893.622581][ T6746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.637738][ T10] usb 1-1: USB disconnect, device number 105 [ 893.658745][ T6746] usb 2-1: config 0 descriptor?? [ 893.783843][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.818712][ T24] usb 3-1: config 0 descriptor?? [ 893.837595][T14637] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 894.502133][ T6746] apple 0003:05AC:027A.0081: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.1-1/input0 [ 895.213959][T14651] 9pnet_fd: Insufficient options for proto=fd [ 895.560811][ T823] usb 4-1: Expected 3 endpoints, found: 0 [ 895.600125][ T823] usb 4-1: USB disconnect, device number 103 [ 895.654813][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 895.683953][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 895.713045][ T24] usb 3-1: USB disconnect, device number 104 [ 895.782240][ T10] usb 2-1: USB disconnect, device number 90 [ 896.323860][T14667] netlink: 'syz.0.2119': attribute type 2 has an invalid length. [ 897.314421][T14674] netlink: 'syz.1.2120': attribute type 2 has an invalid length. [ 897.406553][T14673] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 897.596091][T14673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2122'. [ 897.794760][T14678] batadv27: entered promiscuous mode [ 897.805550][T14678] 8021q: adding VLAN 0 to HW filter on device batadv27 [ 898.111676][T14675] netlink: 'syz.4.2122': attribute type 10 has an invalid length. [ 898.130729][T14675] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 898.263643][T14686] pvfs2: Unknown parameter 'subj_user' [ 898.403884][ T24] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 898.513849][ T5826] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 898.524191][T10184] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 898.563864][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 898.575239][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 898.615191][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.646575][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 898.653648][ T24] pvrusb2: ********** [ 898.673254][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 898.693016][ T5826] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.707722][ T24] pvrusb2: Important functionality might not be entirely working. [ 898.717452][T10184] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 898.718928][ T5826] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 898.743201][T10184] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 898.744553][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 898.778937][T10184] usb 2-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00 [ 898.798757][T10184] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.846674][T10184] usb 2-1: config 0 descriptor?? [ 898.861935][T14688] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 899.053844][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 899.065085][ T24] pvrusb2: ********** [ 899.069574][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 899.085870][ T2340] pvrusb2: Invalid write control endpoint [ 899.091745][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 899.123867][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 899.140865][ T5826] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 899.159722][ T5826] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 899.170066][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.178679][ T5826] usb 5-1: Product: syz [ 899.182938][ T5826] usb 5-1: Manufacturer: syz [ 899.193314][ T5826] usb 5-1: SerialNumber: syz [ 899.224456][ T5826] usb 5-1: config 0 descriptor?? [ 899.231015][T14686] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 899.249780][ T2340] pvrusb2: Invalid write control endpoint [ 899.269421][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 899.286910][ T5826] ati_remote 5-1:0.0: Initializing ati_remote hardware failed. [ 899.316692][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 899.327641][ T5826] ati_remote 5-1:0.0: probe with driver ati_remote failed with error -5 [ 899.606568][T14693] 9pnet_fd: Insufficient options for proto=fd [ 899.674641][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 899.750710][ T2340] pvrusb2: Device being rendered inoperable [ 899.763242][T14682] pvrusb2: Attempted to execute control transfer when device not ok [ 899.779019][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 899.791094][ T10] usb 1-1: USB disconnect, device number 106 [ 899.816515][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 899.837962][T10184] usbhid 2-1:0.0: can't add hid device: -71 [ 899.846960][ T2340] pvrusb2: Attached sub-driver cx25840 [ 899.857323][T10184] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 899.869485][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 899.875738][ T5826] usb 5-1: USB disconnect, device number 110 [ 899.891380][T10184] usb 2-1: USB disconnect, device number 91 [ 899.902691][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 901.300000][T14715] batadv24: entered promiscuous mode [ 901.309722][T14715] 8021q: adding VLAN 0 to HW filter on device batadv24 [ 901.958393][T14707] netlink: 'syz.3.2132': attribute type 2 has an invalid length. [ 902.074141][T10184] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 902.505895][T10184] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.522745][T10184] usb 2-1: config 0 interface 0 has no altsetting 0 [ 902.569461][T14724] netlink: 'syz.4.2135': attribute type 2 has an invalid length. [ 902.578140][ T10] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 902.613893][T10184] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 902.708694][T10184] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.729125][T10184] usb 2-1: config 0 descriptor?? [ 902.735003][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 902.741517][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 902.750995][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.792657][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 902.845350][ T10] pvrusb2: ********** [ 902.849601][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 902.884489][ T10] pvrusb2: Important functionality might not be entirely working. [ 902.935443][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 902.951460][ T10] pvrusb2: ********** [ 903.054099][ T2340] pvrusb2: Invalid write control endpoint [ 903.103996][ T24] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 903.131707][ T2340] pvrusb2: Invalid write control endpoint [ 903.257357][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 903.273908][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 903.290162][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 903.312659][ T2340] pvrusb2: Device being rendered inoperable [ 903.326052][T14722] pvrusb2: Attempted to execute control transfer when device not ok [ 903.334581][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 903.344043][ T5927] usb 4-1: USB disconnect, device number 104 [ 903.370370][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 903.395641][ T2340] pvrusb2: Attached sub-driver cx25840 [ 903.410002][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 903.434758][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 904.477737][T10184] usbhid 2-1:0.0: can't add hid device: -71 [ 904.485026][T10184] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 904.499067][T10184] usb 2-1: USB disconnect, device number 92 [ 906.508077][T14744] pim6reg1: entered promiscuous mode [ 906.513440][T14744] pim6reg1: entered allmulticast mode [ 906.521811][T14758] veth1_macvtap: left promiscuous mode [ 906.527948][T14758] macsec0: entered allmulticast mode [ 906.657822][T14775] pim6reg1: entered promiscuous mode [ 906.663268][T14775] pim6reg1: entered allmulticast mode [ 907.808140][T14819] veth0_vlan: entered allmulticast mode [ 907.854291][T14821] ÿÿÿÿÿÿ: renamed from vlan1 [ 908.335175][T14840] syzkaller0: entered promiscuous mode [ 908.341437][T14840] syzkaller0: entered allmulticast mode [ 908.610445][ T30] audit: type=1800 audit(2000000659.709:829): pid=14861 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2186" name="bus" dev="overlay" ino=2396 res=0 errno=0 [ 910.973492][T14865] wg2: entered promiscuous mode [ 911.003971][T14865] wg2: entered allmulticast mode [ 914.095782][T14956] usb usb1: usbfs: process 14956 (syz.1.2227) did not claim interface 0 before use [ 914.492592][T14962] SELinux: failed to load policy [ 916.373857][ T30] audit: type=1326 audit(2000000667.479:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.3.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 916.433145][ T30] audit: type=1326 audit(2000000667.479:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.3.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 916.518602][ T30] audit: type=1326 audit(2000000667.479:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.3.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 916.643748][ T30] audit: type=1326 audit(2000000667.479:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.3.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 916.676638][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2237'. [ 916.686254][ T30] audit: type=1326 audit(2000000667.479:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.3.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 916.725390][ T30] audit: type=1326 audit(2000000667.479:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.3.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 916.839748][ T30] audit: type=1326 audit(2000000667.479:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.3.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 916.971091][ T30] audit: type=1326 audit(2000000668.089:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14988 comm="syz.4.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8438e929 code=0x7ffc0000 [ 917.031705][ T30] audit: type=1326 audit(2000000668.089:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14988 comm="syz.4.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8438e929 code=0x7ffc0000 [ 917.076116][ T30] audit: type=1326 audit(2000000668.089:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14988 comm="syz.4.2240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a8438e929 code=0x7ffc0000 [ 917.976754][T15029] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2257'. [ 918.798089][T15054] lo speed is unknown, defaulting to 1000 [ 918.854211][T15054] lo speed is unknown, defaulting to 1000 [ 918.886054][T15054] lo speed is unknown, defaulting to 1000 [ 918.972266][T15054] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 919.141648][T15054] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 919.330513][T15054] lo speed is unknown, defaulting to 1000 [ 919.388035][T15054] lo speed is unknown, defaulting to 1000 [ 919.415807][T15054] lo speed is unknown, defaulting to 1000 [ 919.438115][T15054] lo speed is unknown, defaulting to 1000 [ 919.466189][T15054] lo speed is unknown, defaulting to 1000 [ 919.576238][T15063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2268'. [ 919.766160][T15069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2271'. [ 920.326184][T15089] 9pnet_fd: Insufficient options for proto=fd [ 920.887643][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2282'. [ 920.975185][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2282'. [ 921.110663][T15099] lo speed is unknown, defaulting to 1000 [ 921.232255][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2282'. [ 921.263103][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2282'. [ 924.541602][T15165] lo speed is unknown, defaulting to 1000 [ 924.767675][T15176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2310'. [ 924.829749][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 924.829766][ T30] audit: type=1400 audit(2000000675.949:901): avc: denied { ioctl } for pid=15170 comm="syz.1.2310" path="socket:[48797]" dev="sockfs" ino=48797 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 925.173474][ T30] audit: type=1400 audit(2000000676.289:902): avc: denied { mount } for pid=15185 comm="syz.0.2316" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 925.334857][ T30] audit: type=1400 audit(2000000676.369:903): avc: denied { execmem } for pid=15185 comm="syz.0.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 925.435468][ T30] audit: type=1400 audit(2000000676.459:904): avc: denied { name_connect } for pid=15187 comm="syz.4.2315" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 926.880888][T15214] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 926.966333][T15083] Set syz1 is full, maxelem 65536 reached [ 927.224395][T15220] syz.0.2328: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 927.273743][T15224] xt_hashlimit: max too large, truncated to 1048576 [ 927.306405][T15220] CPU: 0 UID: 0 PID: 15220 Comm: syz.0.2328 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 927.306442][T15220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 927.306457][T15220] Call Trace: [ 927.306473][T15220] [ 927.306484][T15220] dump_stack_lvl+0x16c/0x1f0 [ 927.306524][T15220] warn_alloc+0x248/0x3a0 [ 927.306555][T15220] ? __pfx_warn_alloc+0x10/0x10 [ 927.306580][T15220] ? __pfx_stack_trace_save+0x10/0x10 [ 927.306611][T15220] ? stack_depot_save_flags+0x28/0xa40 [ 927.306649][T15220] ? kasan_save_stack+0x42/0x60 [ 927.306675][T15220] ? kasan_save_stack+0x33/0x60 [ 927.306699][T15220] ? kasan_save_track+0x14/0x30 [ 927.306724][T15220] ? xskq_create+0x52/0x1d0 [ 927.306749][T15220] ? xsk_setsockopt+0x640/0x840 [ 927.306773][T15220] ? do_sock_setsockopt+0x221/0x470 [ 927.306798][T15220] ? xskq_create+0xfb/0x1d0 [ 927.306826][T15220] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 927.306862][T15220] ? xskq_create+0xfb/0x1d0 [ 927.306897][T15220] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 927.306933][T15220] ? xskq_create+0xfb/0x1d0 [ 927.306960][T15220] vmalloc_user_noprof+0x9e/0xe0 [ 927.306983][T15220] ? xskq_create+0xfb/0x1d0 [ 927.307010][T15220] xskq_create+0xfb/0x1d0 [ 927.307040][T15220] xsk_setsockopt+0x640/0x840 [ 927.307069][T15220] ? __pfx_xsk_setsockopt+0x10/0x10 [ 927.307094][T15220] ? __lock_acquire+0x622/0x1c90 [ 927.307133][T15220] ? selinux_socket_setsockopt+0x6a/0x80 [ 927.307162][T15220] ? __pfx_xsk_setsockopt+0x10/0x10 [ 927.307189][T15220] do_sock_setsockopt+0x221/0x470 [ 927.307211][T15220] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 927.307254][T15220] __sys_setsockopt+0x1a0/0x230 [ 927.307290][T15220] __x64_sys_setsockopt+0xbd/0x160 [ 927.307318][T15220] ? do_syscall_64+0x91/0x4c0 [ 927.307360][T15220] ? lockdep_hardirqs_on+0x7c/0x110 [ 927.307389][T15220] do_syscall_64+0xcd/0x4c0 [ 927.307421][T15220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.307441][T15220] RIP: 0033:0x7f3aa058e929 [ 927.307460][T15220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 927.307490][T15220] RSP: 002b:00007f3a9e3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 927.307509][T15220] RAX: ffffffffffffffda RBX: 00007f3aa07b5fa0 RCX: 00007f3aa058e929 [ 927.307523][T15220] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 927.307537][T15220] RBP: 00007f3aa0610b39 R08: 0000000000000004 R09: 0000000000000000 [ 927.307550][T15220] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 927.307563][T15220] R13: 0000000000000000 R14: 00007f3aa07b5fa0 R15: 00007fff7ad32b08 [ 927.307590][T15220] [ 927.307599][T15220] Mem-Info: [ 927.584029][T15220] active_anon:7099 inactive_anon:0 isolated_anon:0 [ 927.584029][T15220] active_file:12496 inactive_file:40911 isolated_file:0 [ 927.584029][T15220] unevictable:768 dirty:321 writeback:0 [ 927.584029][T15220] slab_reclaimable:11592 slab_unreclaimable:119539 [ 927.584029][T15220] mapped:30543 shmem:1358 pagetables:1257 [ 927.584029][T15220] sec_pagetables:0 bounce:0 [ 927.584029][T15220] kernel_misc_reclaimable:0 [ 927.584029][T15220] free:1283963 free_pcp:15134 free_cma:0 [ 927.734172][T15220] Node 0 active_anon:28176kB inactive_anon:0kB active_file:49904kB inactive_file:163420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122152kB dirty:1284kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12496kB pagetables:4644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 927.826444][ T30] audit: type=1326 audit(2000000678.939:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15237 comm="syz.4.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8438e929 code=0x7ffc0000 [ 927.851205][T15220] Node 1 active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 927.895247][T15220] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 927.903994][ T30] audit: type=1326 audit(2000000678.939:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15237 comm="syz.4.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8438e929 code=0x7ffc0000 [ 927.950079][T15220] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 928.004842][ T30] audit: type=1326 audit(2000000678.949:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15237 comm="syz.4.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a8438e929 code=0x7ffc0000 [ 928.065307][T15220] Node 0 DMA32 free:1210996kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28460kB inactive_anon:0kB active_file:49904kB inactive_file:162096kB unevictable:1536kB writepending:1384kB present:3129332kB managed:2540632kB mlocked:0kB bounce:0kB free_pcp:49984kB local_pcp:21604kB free_cma:0kB [ 928.124185][ T30] audit: type=1326 audit(2000000678.949:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15237 comm="syz.4.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8438e929 code=0x7ffc0000 [ 928.157499][T15220] lowmem_reserve[]: 0 0 1 1 1 [ 928.185132][T15220] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB [ 928.204746][ T30] audit: type=1326 audit(2000000678.949:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15237 comm="syz.4.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8438e929 code=0x7ffc0000 [ 928.261864][T15220] lowmem_reserve[]: 0 0 0 0 0 [ 928.296514][T15220] Node 1 Normal free:3912736kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:232kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:6368kB local_pcp:448kB free_cma:0kB [ 928.377648][T15220] lowmem_reserve[]: 0 0 0 0 0 [ 928.414038][T15220] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 928.433854][ T30] audit: type=1326 audit(2000000678.969:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15237 comm="syz.4.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a8438e929 code=0x7ffc0000 [ 928.494705][T15220] Node 0 DMA32: 816*4kB (ME) 867*8kB (UM) 556*16kB (M) 333*32kB (ME) 176*64kB (UME) 45*128kB (UME) 21*256kB (UME) 12*512kB (ME) 7*1024kB (UM) 4*2048kB (U) 279*4096kB (UM) = 1216440kB [ 928.571070][T15220] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 928.628880][T15220] Node 1 Normal: 186*4kB (UE) 47*8kB (UE) 32*16kB (UME) 246*32kB (UE) 106*64kB (UME) 21*128kB (UME) 6*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3912736kB [ 928.689370][T15220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 928.735537][T15220] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 928.797740][T15220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 928.841969][T15220] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 928.881351][T15220] 54762 total pagecache pages [ 928.899140][T15220] 0 pages in swap cache [ 928.903350][T15220] Free swap = 124996kB [ 928.935427][T15220] Total swap = 124996kB [ 928.939648][T15220] 2097051 pages RAM [ 928.954229][T15220] 0 pages HighMem/MovableOnly [ 928.958953][T15220] 429915 pages reserved [ 928.978093][T15220] 0 pages cma reserved [ 930.520570][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 930.520589][ T30] audit: type=1326 audit(2000000681.639:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15345 comm="syz.3.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 930.650661][ T30] audit: type=1326 audit(2000000681.669:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15345 comm="syz.3.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 930.746258][ T30] audit: type=1326 audit(2000000681.699:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15345 comm="syz.3.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 930.833849][ T30] audit: type=1326 audit(2000000681.699:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15345 comm="syz.3.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 930.924508][ T30] audit: type=1326 audit(2000000681.699:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15345 comm="syz.3.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 932.123510][T15413] lo speed is unknown, defaulting to 1000 [ 932.952592][ T30] audit: type=1326 audit(2000000684.069:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15439 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa058e929 code=0x7ffc0000 [ 933.025433][ T30] audit: type=1326 audit(2000000684.099:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15439 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa058e929 code=0x7ffc0000 [ 933.121269][ T30] audit: type=1326 audit(2000000684.099:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15439 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3aa058e929 code=0x7ffc0000 [ 933.203920][ T30] audit: type=1326 audit(2000000684.099:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15439 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa058e929 code=0x7ffc0000 [ 933.293464][ T30] audit: type=1326 audit(2000000684.099:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15439 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa058e929 code=0x7ffc0000 [ 933.553299][T15464] xt_CT: No such helper "snmp_trap" [ 934.533717][T15470] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 934.574050][T15470] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 934.580116][T15470] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 934.598168][T15470] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 934.606582][T15470] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 935.156082][T15508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2441'. [ 935.206965][T15503] xt_CT: No such helper "snmp_trap" [ 935.670011][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 935.670030][ T30] audit: type=1326 audit(2000000686.789:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15533 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104f38e929 code=0x7ffc0000 [ 935.768174][ T30] audit: type=1326 audit(2000000686.789:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15533 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f104f38e929 code=0x7ffc0000 [ 935.802688][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 935.830968][ T30] audit: type=1326 audit(2000000686.789:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15533 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104f38e929 code=0x7ffc0000 [ 935.876555][ T30] audit: type=1326 audit(2000000686.829:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15533 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f104f38e929 code=0x7ffc0000 [ 935.919011][ T30] audit: type=1326 audit(2000000686.829:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15533 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104f38e929 code=0x7ffc0000 [ 936.677600][ T5822] Bluetooth: hci3: command 0x0405 tx timeout [ 936.677611][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 936.677651][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 937.260265][ T30] audit: type=1326 audit(2000000688.379:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15575 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 937.297778][ T30] audit: type=1326 audit(2000000688.379:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15575 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 937.341651][ T30] audit: type=1326 audit(2000000688.449:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15575 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 937.407618][T15576] netlink: 516 bytes leftover after parsing attributes in process `syz.3.2471'. [ 937.418658][ T30] audit: type=1326 audit(2000000688.449:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15575 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 937.470093][T15588] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2476'. [ 937.493999][ T30] audit: type=1326 audit(2000000688.449:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15575 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 938.111783][T15619] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2489'. [ 938.739054][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 939.674533][T15680] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2514'. [ 939.832738][T15680] lo speed is unknown, defaulting to 1000 [ 940.719609][T15706] tc_dump_action: action bad kind [ 941.236100][T15718] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2528'. [ 941.417616][T15718] lo speed is unknown, defaulting to 1000 [ 943.000700][T15758] xt_connbytes: Forcing CT accounting to be enabled [ 943.075122][T15758] set match dimension is over the limit! [ 943.899550][T15782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2550'. [ 944.005504][T15782] lo speed is unknown, defaulting to 1000 [ 944.257823][T15792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2553'. [ 944.511397][T15796] SELinux: failed to load policy [ 944.915165][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 944.915184][ T30] audit: type=1400 audit(2000000696.029:1038): avc: denied { map } for pid=15807 comm="+}[@" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 945.164464][T15826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2571'. [ 945.392314][T15832] lo speed is unknown, defaulting to 1000 [ 945.692521][T15858] xt_CT: No such helper "snmp_trap" [ 946.053259][T15879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2591'. [ 946.067222][T15877] tipc: Started in network mode [ 946.072132][T15877] tipc: Node identity ac14140f, cluster identity 4711 [ 946.096016][T15877] tipc: New replicast peer: 0.0.255.255 [ 946.109766][T15877] tipc: Enabled bearer , priority 10 [ 946.590681][T15895] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2596'. [ 947.147823][ T30] audit: type=1400 audit(2000000698.269:1039): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 947.225997][T10184] tipc: Node number set to 2886997007 [ 947.308013][T15910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2605'. [ 947.370416][T15912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2603'. [ 947.801366][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2618'. [ 948.194116][ T30] audit: type=1400 audit(2000000699.309:1040): avc: denied { relabelfrom } for pid=15962 comm="syz.0.2629" name="" dev="pipefs" ino=51464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 948.588367][T15984] random: crng reseeded on system resumption [ 948.653078][T15984] netlink: 'syz.4.2636': attribute type 8 has an invalid length. [ 948.879361][T15995] lo speed is unknown, defaulting to 1000 [ 950.397714][T16071] rdma_op ffff8880329881f0 conn xmit_rdma 0000000000000000 [ 951.033275][T16104] rdma_op ffff888053f759f0 conn xmit_rdma 0000000000000000 [ 951.344417][T16120] ip6tnl1: entered allmulticast mode [ 951.391671][T16120] atomic_op ffff888141685998 conn xmit_atomic 0000000000000000 [ 951.505371][T16129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2695'. [ 951.593966][T16129] IPVS: Error joining to the multicast group [ 952.119256][T16145] rdma_op ffff88807709c1f0 conn xmit_rdma 0000000000000000 [ 953.287180][T16182] lo speed is unknown, defaulting to 1000 [ 954.626031][T16194] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 954.635445][T16194] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 954.645248][T16194] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 954.659999][ T30] audit: type=1800 audit(2000000705.749:1041): pid=16194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.4.2722" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 955.317387][ T30] audit: type=1326 audit(2000000706.439:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.1.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce9f8e929 code=0x7ffc0000 [ 955.567003][T16227] lo speed is unknown, defaulting to 1000 [ 955.794048][ T30] audit: type=1326 audit(2000000706.469:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.1.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce9f8e929 code=0x7ffc0000 [ 955.824800][ T30] audit: type=1326 audit(2000000706.949:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.1.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ce9f8e929 code=0x7ffc0000 [ 955.873856][ T30] audit: type=1326 audit(2000000706.949:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.1.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce9f8e929 code=0x7ffc0000 [ 955.943924][ T30] audit: type=1326 audit(2000000706.949:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.1.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce9f8e929 code=0x7ffc0000 [ 957.242905][T16266] lo speed is unknown, defaulting to 1000 [ 957.871020][ T30] audit: type=1326 audit(2000000708.989:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16279 comm="syz.3.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 957.964257][ T30] audit: type=1326 audit(2000000709.019:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16279 comm="syz.3.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 958.019549][ T30] audit: type=1326 audit(2000000709.029:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16279 comm="syz.3.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 958.092276][ T30] audit: type=1326 audit(2000000709.029:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16279 comm="syz.3.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 958.477021][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2763'. [ 958.547435][T16301] xt_CT: You must specify a L4 protocol and not use inversions on it [ 959.959543][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 959.959560][ T30] audit: type=1326 audit(2000000711.079:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.3.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 959.991356][ T30] audit: type=1326 audit(2000000711.079:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.3.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 960.020553][ T30] audit: type=1326 audit(2000000711.119:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.3.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 960.044787][ T30] audit: type=1326 audit(2000000711.119:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.3.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 960.068993][ T30] audit: type=1326 audit(2000000711.119:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.3.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 960.093168][ T30] audit: type=1326 audit(2000000711.119:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.3.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 960.118322][ T30] audit: type=1326 audit(2000000711.219:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.3.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 960.145015][ T30] audit: type=1326 audit(2000000711.219:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.3.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 960.168657][ T30] audit: type=1326 audit(2000000711.219:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.3.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 960.193510][ T30] audit: type=1326 audit(2000000711.219:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.3.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fe5d138e929 code=0x7ffc0000 [ 960.699164][T16332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2776'. [ 961.121577][T16341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2778'. [ 961.748806][T16341] syz.0.2778 (16341) used greatest stack depth: 18896 bytes left [ 961.824192][T16346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2779'. [ 962.055840][T16346] lo speed is unknown, defaulting to 1000 [ 964.276862][T16422] SELinux: failed to load policy [ 965.032198][T16450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2819'. [ 965.391757][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 965.391775][ T30] audit: type=1326 audit(2000000716.509:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16464 comm="syz.0.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa058e929 code=0x7ffc0000 [ 965.405321][T16466] SELinux: failed to load policy [ 965.517448][ T30] audit: type=1326 audit(2000000716.509:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16464 comm="syz.0.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa058e929 code=0x7ffc0000 [ 965.587827][ T30] audit: type=1326 audit(2000000716.509:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16464 comm="syz.0.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3aa058e929 code=0x7ffc0000 [ 965.663443][ T30] audit: type=1326 audit(2000000716.509:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16464 comm="syz.0.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa058e929 code=0x7ffc0000 [ 965.739173][ T30] audit: type=1326 audit(2000000716.509:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16464 comm="syz.0.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa058e929 code=0x7ffc0000 [ 965.828198][ T30] audit: type=1326 audit(2000000716.509:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16464 comm="syz.0.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3aa058e929 code=0x7ffc0000 [ 965.920088][ T30] audit: type=1326 audit(2000000716.509:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16464 comm="syz.0.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa058e929 code=0x7ffc0000 [ 966.019504][ T30] audit: type=1326 audit(2000000716.509:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16464 comm="syz.0.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa058e929 code=0x7ffc0000 [ 966.106321][ T30] audit: type=1326 audit(2000000716.509:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16464 comm="syz.0.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f3aa058e929 code=0x7ffc0000 [ 966.172617][ T30] audit: type=1326 audit(2000000716.509:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16464 comm="syz.0.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa058e929 code=0x7ffc0000 [ 966.261701][T16491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2834'. [ 967.482679][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 967.494288][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 967.502234][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 967.511307][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 967.525618][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 967.747210][T14337] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.868560][T16525] lo speed is unknown, defaulting to 1000 [ 967.968603][T14337] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.088377][T14337] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.265327][T14337] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.566858][T16525] chnl_net:caif_netlink_parms(): no params data found [ 968.828381][T16586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2866'. [ 968.859958][T16586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2866'. [ 969.104078][T16525] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.111925][T16525] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.124026][T16525] bridge_slave_0: entered allmulticast mode [ 969.131651][T16525] bridge_slave_0: entered promiscuous mode [ 969.148612][T16525] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.156024][T16525] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.163386][T16525] bridge_slave_1: entered allmulticast mode [ 969.233862][T16600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2869'. [ 969.636099][ T5836] Bluetooth: hci3: command tx timeout [ 969.647546][T16525] bridge_slave_1: entered promiscuous mode [ 970.331175][T14337] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 970.341267][T14337] bond0 (unregistering): Released all slaves [ 970.357991][T14337] bond1 (unregistering): Released all slaves [ 970.375373][T14337] bond2 (unregistering): Released all slaves [ 970.402805][T16600] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 970.412481][T16600] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 970.414275][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 970.414289][ T30] audit: type=1400 audit(2000000721.519:1256): avc: denied { firmware_load } for pid=16591 comm="syz.0.2869" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 970.422502][T16600] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 970.699829][T16525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.766664][T14337] : left promiscuous mode [ 970.862785][T16525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.099526][T16525] team0: Port device team_slave_0 added [ 971.258653][T16525] team0: Port device team_slave_1 added [ 971.550371][T16525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.572232][T16525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.694394][ T5836] Bluetooth: hci3: command tx timeout [ 971.787485][T16525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.800482][T16525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.807744][T16525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.844221][T16525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.554113][T14337] hsr_slave_0: left promiscuous mode [ 972.587031][T14337] hsr_slave_1: left promiscuous mode [ 972.615929][T16669] loop8: detected capacity change from 0 to 16384 [ 972.739055][T14337] veth1_macvtap: left promiscuous mode [ 972.759978][T14337] veth0_macvtap: left promiscuous mode [ 972.783802][T14337] veth1_vlan: left promiscuous mode [ 972.823423][T14337] veth0_vlan: left promiscuous mode [ 972.854653][T16671] loop8: detected capacity change from 16384 to 16298 [ 972.896133][T16671] [ 972.898508][T16671] ====================================================== [ 972.905526][T16671] WARNING: possible circular locking dependency detected [ 972.912531][T16671] 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 Not tainted [ 972.919625][T16671] ------------------------------------------------------ [ 972.926624][T16671] syz.0.2895/16671 is trying to acquire lock: [ 972.932674][T16671] ffffffff908b2ee8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xb36/0x1870 [ 972.942437][T16671] [ 972.942437][T16671] but task is already holding lock: [ 972.949792][T16671] ffff8880266bec40 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 972.961032][T16671] [ 972.961032][T16671] which lock already depends on the new lock. [ 972.961032][T16671] [ 972.971426][T16671] [ 972.971426][T16671] the existing dependency chain (in reverse order) is: [ 972.980441][T16671] [ 972.980441][T16671] -> #2 (&q->q_usage_counter(io)#25){++++}-{0:0}: [ 972.989073][T16671] blk_alloc_queue+0x619/0x760 [ 972.994360][T16671] blk_mq_alloc_queue+0x175/0x290 [ 972.999906][T16671] __blk_mq_alloc_disk+0x29/0x120 [ 973.005454][T16671] loop_add+0x49e/0xb70 [ 973.010125][T16671] loop_init+0x164/0x270 [ 973.014891][T16671] do_one_initcall+0x120/0x6e0 [ 973.020170][T16671] kernel_init_freeable+0x5c2/0x900 [ 973.025887][T16671] kernel_init+0x1c/0x2b0 [ 973.030732][T16671] ret_from_fork+0x5d4/0x6f0 [ 973.035843][T16671] ret_from_fork_asm+0x1a/0x30 [ 973.041120][T16671] [ 973.041120][T16671] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 973.048330][T16671] fs_reclaim_acquire+0x102/0x150 [ 973.053881][T16671] kmem_cache_alloc_node_noprof+0x57/0x3b0 [ 973.060215][T16671] __alloc_skb+0x2b2/0x380 [ 973.065153][T16671] alloc_uevent_skb+0x7d/0x210 [ 973.070438][T16671] kobject_uevent_env+0xca4/0x1870 [ 973.076064][T16671] kobject_synth_uevent+0x7d4/0x8a0 [ 973.081794][T16671] bus_uevent_store+0x3d/0x90 [ 973.087009][T16671] bus_attr_store+0x71/0xb0 [ 973.092047][T16671] sysfs_kf_write+0xf2/0x150 [ 973.097175][T16671] kernfs_fop_write_iter+0x351/0x510 [ 973.102994][T16671] vfs_write+0x6c7/0x1150 [ 973.107845][T16671] ksys_write+0x12a/0x250 [ 973.112705][T16671] do_syscall_64+0xcd/0x4c0 [ 973.117757][T16671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.124165][T16671] [ 973.124165][T16671] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 973.131987][T16671] __lock_acquire+0x126f/0x1c90 [ 973.137378][T16671] lock_acquire+0x179/0x350 [ 973.142423][T16671] __mutex_lock+0x199/0xb90 [ 973.147459][T16671] kobject_uevent_env+0xb36/0x1870 [ 973.153085][T16671] set_capacity_and_notify+0x1ca/0x240 [ 973.159061][T16671] loop_set_status+0x94c/0xb90 [ 973.164342][T16671] loop_set_status_old+0x162/0x1d0 [ 973.169969][T16671] lo_ioctl+0xb3f/0x2760 [ 973.174727][T16671] blkdev_ioctl+0x274/0x6d0 [ 973.179743][T16671] __x64_sys_ioctl+0x18b/0x210 [ 973.185021][T16671] do_syscall_64+0xcd/0x4c0 [ 973.190047][T16671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.196468][T16671] [ 973.196468][T16671] other info that might help us debug this: [ 973.196468][T16671] [ 973.206691][T16671] Chain exists of: [ 973.206691][T16671] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#25 [ 973.206691][T16671] [ 973.220439][T16671] Possible unsafe locking scenario: [ 973.220439][T16671] [ 973.227890][T16671] CPU0 CPU1 [ 973.233252][T16671] ---- ---- [ 973.238607][T16671] lock(&q->q_usage_counter(io)#25); [ 973.243986][T16671] lock(fs_reclaim); [ 973.250499][T16671] lock(&q->q_usage_counter(io)#25); [ 973.258403][T16671] lock(uevent_sock_mutex); [ 973.262997][T16671] [ 973.262997][T16671] *** DEADLOCK *** [ 973.262997][T16671] [ 973.271141][T16671] 3 locks held by syz.0.2895/16671: [ 973.276331][T16671] #0: ffff888142b08400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2c/0xb90 [ 973.285749][T16671] #1: ffff8880266bec40 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 973.297441][T16671] #2: ffff8880266bec78 (&q->q_usage_counter(queue)#21){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 973.309395][T16671] [ 973.309395][T16671] stack backtrace: [ 973.315274][T16671] CPU: 0 UID: 0 PID: 16671 Comm: syz.0.2895 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 973.315300][T16671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 973.315312][T16671] Call Trace: [ 973.315321][T16671] [ 973.315331][T16671] dump_stack_lvl+0x116/0x1f0 [ 973.315363][T16671] print_circular_bug+0x275/0x350 [ 973.315393][T16671] check_noncircular+0x14c/0x170 [ 973.315423][T16671] __lock_acquire+0x126f/0x1c90 [ 973.315455][T16671] lock_acquire+0x179/0x350 [ 973.315481][T16671] ? kobject_uevent_env+0xb36/0x1870 [ 973.315503][T16671] ? __pfx___might_resched+0x10/0x10 [ 973.315529][T16671] __mutex_lock+0x199/0xb90 [ 973.315558][T16671] ? kobject_uevent_env+0xb36/0x1870 [ 973.315591][T16671] ? kobject_uevent_env+0xb36/0x1870 [ 973.315617][T16671] ? __pfx___mutex_lock+0x10/0x10 [ 973.315648][T16671] ? __asan_memcpy+0x3c/0x60 [ 973.315669][T16671] ? kobject_get_path+0x8e/0x2a0 [ 973.315688][T16671] ? kobject_uevent_env+0xb36/0x1870 [ 973.315707][T16671] kobject_uevent_env+0xb36/0x1870 [ 973.315729][T16671] ? set_capacity_and_notify+0xce/0x240 [ 973.315754][T16671] set_capacity_and_notify+0x1ca/0x240 [ 973.315776][T16671] ? __pfx_set_capacity_and_notify+0x10/0x10 [ 973.315798][T16671] ? __asan_memcpy+0x3c/0x60 [ 973.315819][T16671] loop_set_status+0x94c/0xb90 [ 973.315844][T16671] loop_set_status_old+0x162/0x1d0 [ 973.315865][T16671] ? __pfx_loop_set_status_old+0x10/0x10 [ 973.315885][T16671] ? __lock_acquire+0x622/0x1c90 [ 973.315918][T16671] ? find_held_lock+0x2b/0x80 [ 973.315939][T16671] ? is_bpf_text_address+0x8a/0x1a0 [ 973.315974][T16671] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 973.315996][T16671] lo_ioctl+0xb3f/0x2760 [ 973.316016][T16671] ? __lock_acquire+0xb8a/0x1c90 [ 973.316045][T16671] ? __lock_acquire+0x622/0x1c90 [ 973.316077][T16671] ? __pfx_lo_ioctl+0x10/0x10 [ 973.316096][T16671] ? find_held_lock+0x2b/0x80 [ 973.316117][T16671] ? avc_has_extended_perms+0x33a/0x1090 [ 973.316138][T16671] ? avc_has_extended_perms+0x47c/0x1090 [ 973.316160][T16671] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 973.316179][T16671] ? kasan_quarantine_put+0x10a/0x240 [ 973.316201][T16671] ? lockdep_hardirqs_on+0x7c/0x110 [ 973.316229][T16671] ? find_held_lock+0x2b/0x80 [ 973.316253][T16671] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 973.316274][T16671] ? blkdev_common_ioctl+0x1dd/0x2480 [ 973.316294][T16671] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 973.316315][T16671] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 973.316336][T16671] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 973.316359][T16671] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 973.316386][T16671] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 973.316413][T16671] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 973.316445][T16671] ? __pfx_lo_ioctl+0x10/0x10 [ 973.316464][T16671] blkdev_ioctl+0x274/0x6d0 [ 973.316483][T16671] ? __pfx_blkdev_ioctl+0x10/0x10 [ 973.316502][T16671] ? selinux_file_ioctl+0x180/0x270 [ 973.316526][T16671] ? selinux_file_ioctl+0xb4/0x270 [ 973.316550][T16671] ? __pfx_blkdev_ioctl+0x10/0x10 [ 973.316570][T16671] __x64_sys_ioctl+0x18b/0x210 [ 973.316591][T16671] do_syscall_64+0xcd/0x4c0 [ 973.316626][T16671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.316646][T16671] RIP: 0033:0x7f3aa058e929 [ 973.316663][T16671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 973.316682][T16671] RSP: 002b:00007f3a9e3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 973.316700][T16671] RAX: ffffffffffffffda RBX: 00007f3aa07b6080 RCX: 00007f3aa058e929 [ 973.316714][T16671] RDX: 00002000000001c0 RSI: 0000000000004c02 RDI: 0000000000000004 [ 973.316726][T16671] RBP: 00007f3aa0610b39 R08: 0000000000000000 R09: 0000000000000000 [ 973.316738][T16671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 973.316750][T16671] R13: 0000000000000001 R14: 00007f3aa07b6080 R15: 00007fff7ad32b08 [ 973.316769][T16671] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 973.775796][ T5836] Bluetooth: hci3: command tx timeout [ 973.913813][ C1] I/O error, dev loop8, sector 16376 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 975.291379][ T5817] syz_tun (unregistering): left allmulticast mode [ 975.328814][T15640] syz_tun (unregistering): left allmulticast mode [ 975.350817][T15493] syz_tun (unregistering): left allmulticast mode [ 975.563530][T16678] syz_tun (unregistering): left allmulticast mode [ 976.510805][T14337] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.580733][T14337] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.649415][T14337] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.702534][T14337] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.803913][T14337] bridge_slave_1: left allmulticast mode [ 976.809600][T14337] bridge_slave_1: left promiscuous mode [ 976.823970][T14337] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.850497][T14337] bridge_slave_0: left allmulticast mode [ 976.858724][T14337] bridge_slave_0: left promiscuous mode [ 976.871572][T14337] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.884432][T14337] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 977.029862][T14337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 977.056033][T14337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 977.078712][T14337] bond0 (unregistering): Released all slaves [ 977.117557][T14337] batman_adv: batadv0: Removing interface: ip6gretap1 [ 977.180668][T14337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 977.194921][T14337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 977.205338][T14337] bond0 (unregistering): Released all slaves [ 977.217168][T14337] bond1 (unregistering): Released all slaves [ 977.307190][T14337] : left promiscuous mode [ 977.385525][T14337] IPVS: stopping master sync thread 11843 ... [ 977.511339][T14337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 977.536836][T14337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.574443][T14337] hsr_slave_0: left promiscuous mode [ 977.584612][T14337] hsr_slave_1: left promiscuous mode [ 977.594170][T14337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 977.601589][T14337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 977.614292][T14337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 977.621693][T14337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.634063][T14337] veth1_macvtap: left promiscuous mode [ 977.639583][T14337] veth0_macvtap: left promiscuous mode [ 977.645416][T14337] veth1_vlan: left promiscuous mode [ 977.758311][T14337] team0 (unregistering): Port device team_slave_1 removed [ 977.786523][T14337] team0 (unregistering): Port device team_slave_0 removed [ 978.160167][T14337] team0 (unregistering): Port device team_slave_1 removed [ 978.194256][T14337] team0 (unregistering): Port device team_slave_0 removed [ 980.058715][T14337] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.118717][T14337] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.169209][T14337] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.277174][T14337] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.395720][T14337] bond_slave_0: left promiscuous mode [ 980.401186][T14337] bond_slave_1: left promiscuous mode [ 980.582947][T14337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 980.598594][T14337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.608664][T14337] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 980.619307][T14337] bond0 (unregistering): Released all slaves [ 980.630522][T14337] bond1 (unregistering): Released all slaves [ 980.641157][T14337] bond2 (unregistering): Released all slaves [ 980.651545][T14337] bond3 (unregistering): Released all slaves [ 980.668599][T14337] bond4 (unregistering): Released all slaves [ 980.729785][T14337] : left promiscuous mode [ 980.795293][T14337] IPVS: stopping master sync thread 10409 ... [ 981.027040][T14337] hsr_slave_0: left promiscuous mode [ 981.043922][T14337] hsr_slave_1: left promiscuous mode [ 981.050794][T14337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.074054][T14337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.084704][T14337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.092125][T14337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.111992][T14337] veth1_to_batadv: left promiscuous mode [ 981.117947][T14337] veth1_macvtap: left promiscuous mode [ 981.123435][T14337] veth0_macvtap: left promiscuous mode [ 981.129878][T14337] veth1_vlan: left promiscuous mode [ 981.135312][T14337] veth0_vlan: left promiscuous mode [ 981.409495][T14337] team0 (unregistering): Port device team_slave_1 removed [ 981.439374][T14337] team0 (unregistering): Port device team_slave_0 removed [ 982.840315][T14337] IPVS: stop unused estimator thread 0...