last executing test programs: 57.131837491s ago: executing program 3 (id=1348): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newsa={0xf8, 0x10, 0x113, 0x0, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x16, 0x1000}]}, 0xf8}}, 0x0) 55.553272476s ago: executing program 3 (id=1352): setrlimit(0x6, &(0x7f00000000c0)) mlockall(0x1) setreuid(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 51.137796976s ago: executing program 3 (id=1371): r0 = io_uring_setup(0x669, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffe) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f0000000200)="cb", 0xb600, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 49.470401788s ago: executing program 3 (id=1379): timer_create(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x80000000}) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x8902, &(0x7f0000000000)) 49.21039925s ago: executing program 3 (id=1382): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000580)=ANY=[], 0x28) 48.122556956s ago: executing program 3 (id=1386): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rt_tgsigqueueinfo(0x0, 0x0, 0x39, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) io_submit(0x0, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f00000033c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 32.622577609s ago: executing program 0 (id=1424): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7c, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x2, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x400000}}, 0x0, 0xfff9, 0x3, 0x0, 0x20, 0x0, 0x30}, 0x9c) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) truncate(0x0, 0xffffffffffff0001) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x70, 0x14, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x8, 0x0, 0x0]}}, {{0x1c, 0x1, {0xc, 0x40, 0x10}}, {0x4}}]}]}, 0x70}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0xd) pipe(0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) futex(0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffee) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) 31.553408248s ago: executing program 0 (id=1426): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20a2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r5}, 0x10) timer_create(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r6}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3157, 0x0, "78e114100985a79874342a70e113343972d01f"}) write$UHID_INPUT(r3, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x0, 0x2}, 0x48) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', 0x0}) 25.405068794s ago: executing program 0 (id=1431): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000180)}, {&(0x7f0000000700)="f5e022a4", 0x4}], 0x3}}], 0x1, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x4b68, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x4, 0x6, 0x9}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000340)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xb}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x60}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r6, &(0x7f00000001c0), &(0x7f0000000200)=0x10) 24.003525588s ago: executing program 0 (id=1433): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) write$eventfd(r2, &(0x7f00000000c0), 0x8) 23.67063274s ago: executing program 0 (id=1435): getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x2b4b]}, 0x8) syz_io_uring_setup(0x7504, &(0x7f0000000400)={0x0, 0x224c, 0x1, 0x2}, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xc8, &(0x7f0000000780)=""/200}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900674c0002000000000000ff010000000000000000000000000001ac1e000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010001000000000001000000000000004400050000000000000000000000ffffac1414bb0100000033"], 0xfc}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000001980)=[{{&(0x7f0000000280)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac14140019"], 0x28}}], 0x1, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000500)='macvlan1\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r8 = syz_pidfd_open(r0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r8, 0x41015500, 0x0) 22.36851138s ago: executing program 0 (id=1436): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 16.475357279s ago: executing program 4 (id=1454): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r2}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=0x1, r3, 0x2f, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@map=0x1, r1, 0x2f, 0x10, 0xffffffffffffffff, @prog_fd=r3}, 0x20) 15.558431068s ago: executing program 4 (id=1457): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20a2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r5}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r6}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3157, 0x0, "78e114100985a79874342a70e113343972d01f"}) write$UHID_INPUT(r3, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x0, 0x2}, 0x48) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', 0x0}) 10.322353503s ago: executing program 2 (id=1459): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000180)}, {&(0x7f0000000700)="f5e022a4", 0x4}], 0x3}}], 0x1, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x4b68, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x4, 0x6, 0x9}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000340)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xb}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x60}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r6, &(0x7f00000001c0), &(0x7f0000000200)=0x10) 8.938510441s ago: executing program 2 (id=1462): bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x20000005) socket$inet6(0xa, 0x6, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "a1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 8.755287966s ago: executing program 4 (id=1463): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000140)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200), 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084149, &(0x7f0000000180)=0x4) 8.591561367s ago: executing program 1 (id=1464): socket$kcm(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) fsopen(&(0x7f0000000000)='bpf\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$key(0xf, 0x3, 0x2) creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x0) 8.370204016s ago: executing program 4 (id=1465): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0xcc, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x70, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0xcc}, 0x1, 0xf000}, 0x0) 8.063051734s ago: executing program 1 (id=1466): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r2}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=0x1, r3, 0x2f, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@map=0x1, r1, 0x2f, 0x10, 0xffffffffffffffff, @prog_fd=r3}, 0x20) 8.021119655s ago: executing program 2 (id=1467): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) sendmmsg$inet(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)='\x00', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) 7.983342629s ago: executing program 4 (id=1468): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'geneve0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000400), 0x1000) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYRESHEX=r4, @ANYBLOB=',cache=mmap,k']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(0x0, 0x64041, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r5, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) truncate(&(0x7f00000002c0)='./file0\x00', 0x6b14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000000400)={0x0, 0xf000, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r6) 7.621231132s ago: executing program 1 (id=1469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374"], 0x78}}, 0x0) close(r0) 7.22529474s ago: executing program 1 (id=1470): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 6.977312428s ago: executing program 1 (id=1471): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20a2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r5}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r6}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3157, 0x0, "78e114100985a79874342a70e113343972d01f"}) write$UHID_INPUT(r3, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x0, 0x2}, 0x48) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', 0x0}) 1.732620687s ago: executing program 2 (id=1472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) 596.445638ms ago: executing program 2 (id=1473): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000140)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200), 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084149, &(0x7f0000000180)=0x4) 390.863558ms ago: executing program 2 (id=1474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) 334.724948ms ago: executing program 1 (id=1475): bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x20000005) socket$inet6(0xa, 0x6, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000500)='./file0\x00'}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "a1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1476): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0xcc, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x70, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0xcc}, 0x1, 0xf000}, 0x0) kernel console output (not intermixed with test programs): 1) entered forwarding state [ 464.546853][ T5227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.599086][ T5227] usb 2-1: config 0 descriptor?? [ 464.630594][ T8170] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 464.676142][ T5227] hub 2-1:0.0: USB hub found [ 464.866682][ T5327] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 464.870611][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 464.926676][ T5227] hub 2-1:0.0: 2 ports detected [ 465.049103][ T5327] usb 5-1: Using ep0 maxpacket: 8 [ 465.075540][ T5327] usb 5-1: no configurations [ 465.125205][ T5327] usb 5-1: can't read configurations, error -22 [ 465.338474][ T5327] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 465.527774][ T8204] netlink: 60 bytes leftover after parsing attributes in process `syz.0.543'. [ 465.538031][ T8204] netlink: 60 bytes leftover after parsing attributes in process `syz.0.543'. [ 465.601473][ T5327] usb 5-1: Using ep0 maxpacket: 8 [ 465.619407][ T5327] usb 5-1: no configurations [ 465.624049][ T5327] usb 5-1: can't read configurations, error -22 [ 465.640730][ T5327] usb usb5-port1: attempt power cycle [ 465.787170][ T7931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.107118][ T5327] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 466.159583][ T7931] veth0_vlan: entered promiscuous mode [ 466.200881][ T5327] usb 5-1: Using ep0 maxpacket: 8 [ 466.224110][ T5327] usb 5-1: no configurations [ 466.258473][ T5327] usb 5-1: can't read configurations, error -22 [ 466.295370][ T7931] veth1_vlan: entered promiscuous mode [ 466.472244][ T5327] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 466.500777][ T7931] veth0_macvtap: entered promiscuous mode [ 466.547762][ T5327] usb 5-1: Using ep0 maxpacket: 8 [ 466.572571][ T7931] veth1_macvtap: entered promiscuous mode [ 466.580173][ T5327] usb 5-1: no configurations [ 466.592524][ T5327] usb 5-1: can't read configurations, error -22 [ 466.628642][ T5327] usb usb5-port1: unable to enumerate USB device [ 466.634697][ T8217] xt_l2tp: wrong L2TP version: 0 [ 466.681809][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.746605][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.758930][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.802271][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.839148][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.859531][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.875165][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.899529][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.920456][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.951458][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.985429][ T7931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.055781][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.136886][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.154925][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.174231][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.186064][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.825159][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.835241][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.845819][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.856169][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.867657][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.920518][ T7931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.997342][ T7931] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.052039][ T5273] usb 2-1: USB disconnect, device number 8 [ 468.058097][ T5227] hub 2-1:0.0: set hub depth failed [ 468.066692][ T7931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.105559][ T7931] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.114879][ T7931] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.148317][ T29] audit: type=1400 audit(1723296551.448:410): avc: denied { setopt } for pid=8229 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 468.184753][ T8232] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 468.188427][ T8230] netlink: 56 bytes leftover after parsing attributes in process `syz.4.552'. [ 468.233896][ T8230] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 468.258669][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 468.517248][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 468.529710][ T25] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 468.543905][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 468.574158][ T25] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 468.578622][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.596274][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 468.615678][ T25] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.624731][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.629795][ T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 468.649712][ T8238] CIFS: Unable to determine destination address [ 468.716912][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.901127][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.926112][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.973344][ T25] usb 3-1: usb_control_msg returned -71 [ 469.007421][ T25] usbtmc 3-1:16.0: can't read capabilities [ 469.083258][ T25] usb 3-1: USB disconnect, device number 3 [ 469.878335][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 470.246844][ T5275] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 470.492682][ T5275] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.509650][ T5275] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 470.534601][ T5275] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 470.544500][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.552733][ T5275] usb 5-1: Product: syz [ 470.600043][ T5275] usb 5-1: Manufacturer: syz [ 470.605723][ T5275] usb 5-1: SerialNumber: syz [ 471.136083][ T8281] Cannot find del_set index 0 as target [ 471.202140][ T5275] cdc_ncm 5-1:1.0: bind() failure [ 471.213936][ T5275] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 471.228674][ T5275] cdc_ncm 5-1:1.1: bind() failure [ 471.253480][ T5275] usb 5-1: USB disconnect, device number 12 [ 471.414207][ T29] audit: type=1400 audit(1723296554.698:411): avc: denied { setopt } for pid=8286 comm="syz.1.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 471.518108][ T5227] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 471.734303][ T5227] usb 3-1: Using ep0 maxpacket: 8 [ 471.756108][ T5227] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.779157][ T5227] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.789588][ T5227] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 471.810299][ T5227] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 471.827137][ T5276] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 471.830165][ T5227] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 471.860191][ T5227] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 471.942265][ T5227] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 471.955788][ T5227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.976612][ T5227] usb 3-1: Product: syz [ 471.986859][ T5227] usb 3-1: Manufacturer: syz [ 471.995194][ T8299] sctp: [Deprecated]: syz.0.574 (pid 8299) Use of struct sctp_assoc_value in delayed_ack socket option. [ 471.995194][ T8299] Use struct sctp_sack_info instead [ 472.027106][ T5227] usb 3-1: SerialNumber: syz [ 472.057547][ T5276] usb 2-1: Using ep0 maxpacket: 8 [ 472.068442][ T5276] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 472.109069][ T5276] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 472.149482][ T5276] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 472.189672][ T5276] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 472.201501][ T5276] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.263918][ T5276] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 472.292940][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.467521][ T29] audit: type=1400 audit(1723296555.758:412): avc: denied { bind } for pid=8305 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 472.490089][ T5227] cdc_ncm 3-1:1.0: bind() failure [ 472.515868][ T5227] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 472.530760][ T5227] cdc_ncm 3-1:1.1: bind() failure [ 472.558133][ T5227] usb 3-1: USB disconnect, device number 4 [ 473.090974][ T5273] usb 2-1: USB disconnect, device number 9 [ 474.144180][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 474.601828][ T5232] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 478.535354][ T29] audit: type=1400 audit(1723296561.828:413): avc: denied { wake_alarm } for pid=8343 comm="syz.4.591" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 478.608730][ T5232] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 478.618058][ T5232] Bluetooth: hci3: Injecting HCI hardware error event [ 478.630060][ T5237] Bluetooth: hci3: hardware error 0x00 [ 478.861102][ T5273] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 479.330303][ T8345] sctp: [Deprecated]: syz.0.590 (pid 8345) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.330303][ T8345] Use struct sctp_sack_info instead [ 479.548033][ T5273] usb 2-1: Using ep0 maxpacket: 32 [ 479.586362][ T5273] usb 2-1: config 0 has no interfaces? [ 479.603798][ T5273] usb 2-1: New USB device found, idVendor=0eef, idProduct=732a, bcdDevice= 0.00 [ 479.633650][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.664762][ T5273] usb 2-1: config 0 descriptor?? [ 479.713732][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 479.813161][ T8357] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 479.847811][ T8357] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 480.072102][ T5275] usb 2-1: USB disconnect, device number 10 [ 480.466793][ T5273] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 480.668634][ T5273] usb 3-1: Using ep0 maxpacket: 16 [ 480.686767][ T5237] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 480.699558][ T5273] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 480.720957][ T5273] usb 3-1: config 0 has no interface number 0 [ 480.746670][ T5273] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 480.773498][ T5273] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 480.807917][ T5273] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 480.830027][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 480.853541][ T5273] usb 3-1: Product: syz [ 480.864683][ T8374] veth0_vlan: left promiscuous mode [ 480.878190][ T5273] usb 3-1: SerialNumber: syz [ 480.898009][ T5273] usb 3-1: config 0 descriptor?? [ 480.914905][ T5273] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 480.928673][ T8374] veth0_vlan: entered promiscuous mode [ 480.952583][ T5273] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input5 [ 481.004169][ T29] audit: type=1400 audit(1723296564.298:414): avc: denied { read } for pid=4655 comm="acpid" name="event4" dev="devtmpfs" ino=2420 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 481.248579][ T29] audit: type=1400 audit(1723296564.298:415): avc: denied { open } for pid=4655 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2420 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 481.248642][ T29] audit: type=1400 audit(1723296564.298:416): avc: denied { ioctl } for pid=4655 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2420 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 481.541548][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.548959][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.556125][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.563412][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.570510][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.577612][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.584711][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.592571][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.599679][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.606811][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.617216][ T5227] usb 3-1: USB disconnect, device number 5 [ 481.623050][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 481.655692][ T5227] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 481.926786][ T8383] sctp: [Deprecated]: syz.1.605 (pid 8383) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.926786][ T8383] Use struct sctp_sack_info instead [ 482.644427][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'. [ 482.855861][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'. [ 482.935869][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'. [ 482.945248][ T29] audit: type=1400 audit(1723296566.228:417): avc: denied { read } for pid=8397 comm="syz.2.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 483.190388][ T29] audit: type=1400 audit(1723296566.488:418): avc: denied { connect } for pid=8399 comm="syz.1.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 483.226648][ T29] audit: type=1400 audit(1723296566.508:419): avc: denied { read } for pid=8399 comm="syz.1.613" path="socket:[26672]" dev="sockfs" ino=26672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 484.549648][ T29] audit: type=1400 audit(1723296567.848:420): avc: denied { write } for pid=8416 comm="syz.4.618" name="uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 484.736388][ T8428] sctp: [Deprecated]: syz.1.623 (pid 8428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.736388][ T8428] Use struct sctp_sack_info instead [ 484.878387][ T5273] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 484.939493][ T8438] ɶƣ0GCTw: entered promiscuous mode [ 485.079316][ T5273] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 485.151195][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 485.183243][ T5273] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 485.197238][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.205385][ T5273] usb 5-1: Product: syz [ 485.218525][ T5273] usb 5-1: Manufacturer: syz [ 485.238259][ T5273] usb 5-1: SerialNumber: syz [ 485.264163][ T5273] usb 5-1: config 0 descriptor?? [ 485.280167][ T5273] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 485.291675][ T5273] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 485.311144][ T5273] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 485.340205][ T5273] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 485.373046][ T5273] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 485.417631][ T5273] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 485.465153][ T5273] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 485.508458][ T5273] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 485.544066][ T5273] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 485.574264][ T8421] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 485.585085][ T5273] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 485.613445][ T5273] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 485.628009][ T5273] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 485.641741][ T5273] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 485.653876][ T5273] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 485.675234][ T5273] usb 5-1: USB disconnect, device number 13 [ 485.707043][ T5273] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 485.802021][ T5273] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 485.914191][ T5273] keyspan 5-1:0.0: device disconnected [ 485.948778][ T8450] ebt_among: dst integrity fail: 101 [ 486.045155][ T29] audit: type=1400 audit(1723296569.328:421): avc: denied { bind } for pid=8452 comm="syz.2.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 487.501088][ T29] audit: type=1400 audit(1723296570.798:422): avc: denied { read } for pid=8467 comm="syz.0.639" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 487.618946][ T29] audit: type=1400 audit(1723296570.798:423): avc: denied { open } for pid=8467 comm="syz.0.639" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 487.668149][ T29] audit: type=1400 audit(1723296570.798:424): avc: denied { ioctl } for pid=8467 comm="syz.0.639" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 487.772012][ T29] audit: type=1400 audit(1723296571.038:425): avc: denied { view } for pid=8464 comm="syz.1.638" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 488.851482][ T5237] Bluetooth: hci0: command 0x0406 tx timeout [ 488.858885][ T5237] Bluetooth: hci4: command 0x0406 tx timeout [ 489.416095][ T29] audit: type=1400 audit(1723296572.708:426): avc: denied { mount } for pid=8511 comm="syz.2.657" name="/" dev="configfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 489.451797][ T8513] No such timeout policy "syz1" [ 489.648469][ T29] audit: type=1400 audit(1723296572.938:427): avc: denied { audit_read } for pid=8515 comm="syz.0.659" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 490.724939][ T8535] siw: device registration error -23 [ 490.856023][ T29] audit: type=1400 audit(1723296574.108:428): avc: denied { map } for pid=8523 comm="syz.0.664" path="/dev/dri/card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 491.117848][ T29] audit: type=1400 audit(1723296574.408:429): avc: denied { getopt } for pid=8523 comm="syz.0.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 493.337249][ T8553] tipc: Failed to obtain node identity [ 493.353352][ T8553] tipc: Enabling of bearer rejected, failed to enable media [ 494.736652][ T46] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 494.913153][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 495.026543][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 495.040171][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 495.118789][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 495.231561][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 495.247438][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 495.289075][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.339823][ T46] usb 5-1: config 0 descriptor?? [ 495.345841][ T8574] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 495.438784][ T46] hub 5-1:0.0: USB hub found [ 496.618954][ T46] hub 5-1:0.0: 2 ports detected [ 496.714692][ T8593] netlink: 44 bytes leftover after parsing attributes in process `syz.0.688'. [ 498.458893][ T5275] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 498.680067][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.716253][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.740387][ T5275] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 498.770816][ T5275] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 498.791347][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.804858][ T8608] siw: device registration error -23 [ 498.822843][ T5275] usb 1-1: config 0 descriptor?? [ 499.245841][ T46] usb 5-1: reset high-speed USB device number 14 using dummy_hcd [ 499.310642][ T29] audit: type=1400 audit(1723296582.608:430): avc: denied { watch } for pid=8609 comm="syz.3.696" path="/20" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 499.394507][ T29] audit: type=1400 audit(1723296582.608:431): avc: denied { watch_sb watch_reads } for pid=8609 comm="syz.3.696" path="/20" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 499.483028][ T5275] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 499.528956][ T5275] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 499.605445][ T5275] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 499.667160][ T8620] netlink: 44 bytes leftover after parsing attributes in process `syz.2.699'. [ 500.108414][ T25] usb 1-1: USB disconnect, device number 10 [ 500.108815][ T8601] usb 1-1: string descriptor 0 read error: -71 [ 500.139173][ T46] hub 5-1:0.0: set hub depth failed [ 500.151933][ T5278] usb 5-1: USB disconnect, device number 14 [ 500.757465][ T29] audit: type=1400 audit(1723296584.058:432): avc: denied { ioctl } for pid=8641 comm="syz.2.709" path="/dev/rtc0" dev="devtmpfs" ino=838 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 502.133809][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.241442][ T8659] netlink: 44 bytes leftover after parsing attributes in process `syz.2.714'. [ 503.246022][ T5275] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 503.568155][ T5275] usb 2-1: Using ep0 maxpacket: 8 [ 503.577245][ T5275] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.594863][ T5275] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.701506][ T5275] usb 2-1: config 0 interface 0 has no altsetting 0 [ 503.701727][ T5275] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 503.824965][ T8676] syz.2.719: attempt to access beyond end of device [ 503.824965][ T8676] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 503.840059][ T8676] syz.2.719: attempt to access beyond end of device [ 503.840059][ T8676] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 503.853304][ T8676] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 503.877386][ T8676] syz.2.719: attempt to access beyond end of device [ 503.877386][ T8676] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 503.890547][ T8676] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 503.900413][ T8676] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 503.908196][ T8676] UDF-fs: Scanning with blocksize 512 failed [ 503.919831][ T8676] syz.2.719: attempt to access beyond end of device [ 503.919831][ T8676] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 503.933795][ T8676] syz.2.719: attempt to access beyond end of device [ 503.933795][ T8676] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 503.946873][ T8676] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 503.962731][ T8676] syz.2.719: attempt to access beyond end of device [ 503.962731][ T8676] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 503.976238][ T8676] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 503.985930][ T8676] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 503.993703][ T8676] UDF-fs: Scanning with blocksize 1024 failed [ 504.003071][ T8676] syz.2.719: attempt to access beyond end of device [ 504.003071][ T8676] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 504.016750][ T8676] syz.2.719: attempt to access beyond end of device [ 504.016750][ T8676] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 504.029850][ T8676] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 504.040305][ T8676] syz.2.719: attempt to access beyond end of device [ 504.040305][ T8676] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 504.053521][ T8676] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 504.065728][ T8676] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 504.075371][ T8676] UDF-fs: Scanning with blocksize 2048 failed [ 504.082205][ T8676] syz.2.719: attempt to access beyond end of device [ 504.082205][ T8676] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 504.099308][ T8676] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 504.112162][ T8676] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 504.122037][ T8676] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 504.129820][ T8676] UDF-fs: Scanning with blocksize 4096 failed [ 504.130168][ T5239] Bluetooth: hci6: command 0x206a tx timeout [ 504.135971][ T8676] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 504.136924][ T5232] Bluetooth: hci6: Opcode 0x206a failed: -110 [ 504.158590][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.179411][ T5275] usb 2-1: config 0 descriptor?? [ 504.683065][ T5275] corsair-cpro 0003:1B1C:1D00.0003: hidraw0: USB HID v0.00 Device [HID 1b1c:1d00] on usb-dummy_hcd.1-1/input0 [ 504.970711][ T5275] corsair-cpro 0003:1B1C:1D00.0003: probe with driver corsair-cpro failed with error -38 [ 504.999484][ T5275] usb 2-1: USB disconnect, device number 11 [ 505.958337][ T8703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.727'. [ 507.364020][ T8718] Cannot find del_set index 0 as target [ 507.816018][ T29] audit: type=1400 audit(1723296591.098:433): avc: denied { ioctl } for pid=8700 comm="syz.4.728" path="/dev/input/event2" dev="devtmpfs" ino=839 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 508.208477][ T29] audit: type=1400 audit(1723296591.508:434): avc: denied { write } for pid=8726 comm="syz.1.736" lport=45924 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 508.434615][ T29] audit: type=1400 audit(1723296591.728:435): avc: denied { bind } for pid=8734 comm="syz.4.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 508.454910][ C1] vkms_vblank_simulate: vblank timer overrun [ 508.475854][ T8736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.739'. [ 508.777383][ T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 508.926728][ T5305] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 508.996795][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 509.007934][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.019616][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.032326][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 509.043382][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.089835][ T25] usb 2-1: config 0 descriptor?? [ 509.105085][ T25] hub 2-1:0.0: USB hub found [ 509.166931][ T5305] usb 3-1: Using ep0 maxpacket: 8 [ 509.198993][ T5305] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 509.229669][ T5305] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 509.250161][ T46] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 509.260099][ T5305] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 509.292393][ T5305] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 509.335444][ T5305] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.382900][ T5305] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 509.412673][ T5305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.738870][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 509.871605][ T8755] binder: 8737:8755 ioctl 4018620d 0 returned -22 [ 510.464632][ C1] hrtimer: interrupt took 137537 ns [ 510.725796][ T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.740104][ T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.757840][ T46] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 510.773737][ T46] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 510.841663][ T5305] usb 3-1: usb_control_msg returned -32 [ 510.865358][ T46] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 510.877761][ T46] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 510.901610][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 510.913579][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.924495][ T46] usb 5-1: Product: syz [ 510.958473][ T5305] usbtmc 3-1:16.0: can't read capabilities [ 510.961182][ T46] usb 5-1: Manufacturer: syz [ 510.973532][ T46] usb 5-1: SerialNumber: syz [ 511.270957][ T29] audit: type=1400 audit(1723296594.568:436): avc: denied { shutdown } for pid=8750 comm="syz.0.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 511.572275][ T29] audit: type=1400 audit(1723296594.628:437): avc: denied { read } for pid=8750 comm="syz.0.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 511.835124][ T25] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 511.864833][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 511.874330][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 511.983064][ T8762] netlink: 44 bytes leftover after parsing attributes in process `syz.3.745'. [ 511.992463][ T25] usb 2-1: USB disconnect, device number 12 [ 512.143602][ T5305] usb 3-1: USB disconnect, device number 6 [ 512.150396][ T8758] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 512.421262][ T46] cdc_ncm 5-1:1.0: bind() failure [ 512.492794][ T46] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 512.576640][ T46] cdc_ncm 5-1:1.1: bind() failure [ 512.632295][ T8767] sctp: [Deprecated]: syz.1.747 (pid 8767) Use of struct sctp_assoc_value in delayed_ack socket option. [ 512.632295][ T8767] Use struct sctp_sack_info instead [ 512.664696][ T46] usb 5-1: USB disconnect, device number 15 [ 512.871206][ T7763] udevd[7763]: setting mode of /dev/bus/usb/005/015 to 020664 failed: No such file or directory [ 513.023179][ T29] audit: type=1400 audit(1723296596.258:438): avc: denied { mount } for pid=8770 comm="syz.4.748" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 513.691073][ T7763] udevd[7763]: setting owner of /dev/bus/usb/005/015 to uid=0, gid=0 failed: No such file or directory [ 514.271109][ T5275] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 517.146617][ T5275] usb 3-1: Using ep0 maxpacket: 32 [ 517.276632][ T5275] usb 3-1: device descriptor read/all, error -71 [ 518.041356][ T8810] sctp: [Deprecated]: syz.2.763 (pid 8810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 518.041356][ T8810] Use struct sctp_sack_info instead [ 519.273018][ T8824] netlink: 16 bytes leftover after parsing attributes in process `syz.0.767'. [ 519.370520][ T8824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.767'. [ 519.518842][ T5273] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 519.876699][ T5273] usb 4-1: Using ep0 maxpacket: 8 [ 520.396168][ T5273] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.408487][ T5273] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.419003][ T5273] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 520.439831][ T5273] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 520.510254][ T5273] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 520.581150][ T5273] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 520.695276][ T5273] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 520.747865][ T5273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.787341][ T5273] usb 4-1: Product: syz [ 520.804009][ T5273] usb 4-1: Manufacturer: syz [ 520.840892][ T5273] usb 4-1: SerialNumber: syz [ 521.362734][ T5273] cdc_ncm 4-1:1.0: bind() failure [ 521.432236][ T5273] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 521.438936][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 521.491987][ T5273] cdc_ncm 4-1:1.1: bind() failure [ 521.515199][ T5273] usb 4-1: USB disconnect, device number 2 [ 522.669665][ T8863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.781'. [ 522.685246][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.781'. [ 528.796811][ T5275] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 528.986635][ T5275] usb 3-1: Using ep0 maxpacket: 32 [ 528.993899][ T5275] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 529.027625][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.063826][ T5275] usb 3-1: config 0 descriptor?? [ 529.079651][ T5275] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 530.162599][ T5275] gspca_sunplus: reg_w_riv err -110 [ 530.168118][ T5275] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 530.256987][ T8905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.795'. [ 530.391135][ T8887] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 531.003154][ T5275] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 531.038878][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 531.487030][ T5275] usb 1-1: device descriptor read/64, error -32 [ 531.756773][ T5275] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 531.946633][ T5275] usb 1-1: Using ep0 maxpacket: 8 [ 531.961037][ T5275] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.991417][ T5275] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.021955][ T5275] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 532.032789][ T5275] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 532.048235][ T5275] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 532.059458][ T5275] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 532.082612][ T5275] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 532.092080][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.100861][ T5275] usb 1-1: Product: syz [ 532.105343][ T5275] usb 1-1: Manufacturer: syz [ 532.110696][ T5275] usb 1-1: SerialNumber: syz [ 532.358931][ T5275] cdc_ncm 1-1:1.0: bind() failure [ 532.449425][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.802'. [ 532.489964][ T5275] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 533.076786][ T5275] cdc_ncm 1-1:1.1: bind() failure [ 533.109617][ T5227] usb 3-1: USB disconnect, device number 9 [ 533.136969][ T5275] usb 1-1: USB disconnect, device number 12 [ 533.329547][ T8936] input: syz0 as /devices/virtual/input/input7 [ 533.933202][ T8947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.809'. [ 536.675770][ T8975] bio_check_eod: 2 callbacks suppressed [ 536.675823][ T8975] syz.3.817: attempt to access beyond end of device [ 536.675823][ T8975] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 536.697445][ T8975] syz.3.817: attempt to access beyond end of device [ 536.697445][ T8975] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 536.710659][ T8975] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 536.721922][ T8975] syz.3.817: attempt to access beyond end of device [ 536.721922][ T8975] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 536.737600][ T8975] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 536.749256][ T8975] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 536.757236][ T8975] UDF-fs: Scanning with blocksize 512 failed [ 536.769406][ T8975] syz.3.817: attempt to access beyond end of device [ 536.769406][ T8975] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 536.783435][ T8975] syz.3.817: attempt to access beyond end of device [ 536.783435][ T8975] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 536.796713][ T8975] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 536.807473][ T8975] syz.3.817: attempt to access beyond end of device [ 536.807473][ T8975] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 536.820761][ T8975] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 536.832965][ T8975] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 536.842488][ T8975] UDF-fs: Scanning with blocksize 1024 failed [ 536.851778][ T8975] syz.3.817: attempt to access beyond end of device [ 536.851778][ T8975] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 536.865514][ T8975] syz.3.817: attempt to access beyond end of device [ 536.865514][ T8975] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 536.878870][ T8975] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 536.889443][ T8975] syz.3.817: attempt to access beyond end of device [ 536.889443][ T8975] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 536.902549][ T8975] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 536.912246][ T8975] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 536.920022][ T8975] UDF-fs: Scanning with blocksize 2048 failed [ 536.929088][ T8975] syz.3.817: attempt to access beyond end of device [ 536.929088][ T8975] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 536.945188][ T8975] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 536.957191][ T8975] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 536.967485][ T8975] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 536.975137][ T8975] UDF-fs: Scanning with blocksize 4096 failed [ 536.981263][ T8975] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 537.346583][ T5227] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 537.368619][ T29] audit: type=1400 audit(1723296620.638:439): avc: denied { name_bind } for pid=8977 comm="syz.1.820" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 537.566645][ T5227] usb 5-1: Using ep0 maxpacket: 8 [ 537.583063][ T5227] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.619808][ T5227] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.645384][ T5227] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 537.669275][ T5227] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 537.689781][ T5227] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 537.724190][ T5227] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 537.756309][ T5227] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 537.773803][ T5227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.791299][ T5227] usb 5-1: Product: syz [ 537.800352][ T5227] usb 5-1: Manufacturer: syz [ 537.814015][ T5227] usb 5-1: SerialNumber: syz [ 538.054119][ T5227] cdc_ncm 5-1:1.0: bind() failure [ 538.085774][ T5227] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 538.105457][ T5227] cdc_ncm 5-1:1.1: bind() failure [ 538.171371][ T5227] usb 5-1: USB disconnect, device number 16 [ 542.032370][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.831'. [ 542.047568][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.831'. [ 542.338206][ T9002] batadv_slave_0: entered promiscuous mode [ 542.367407][ T5232] Bluetooth: hci2: command 0x0406 tx timeout [ 542.376079][ T5239] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 542.911288][ T8994] batadv_slave_0: left promiscuous mode [ 544.269205][ T9061] Cannot find del_set index 0 as target [ 544.291287][ T5239] Bluetooth: hci0: unexpected event 0x30 length: 8 > 3 [ 545.567249][ T29] audit: type=1400 audit(1723296628.868:440): avc: denied { ioctl } for pid=9084 comm="syz.1.860" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 546.447074][ T9105] sctp: [Deprecated]: syz.1.869 (pid 9105) Use of struct sctp_assoc_value in delayed_ack socket option. [ 546.447074][ T9105] Use struct sctp_sack_info instead [ 547.266603][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 547.293950][ T9128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.880'. [ 547.485777][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 547.513685][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 547.562565][ T25] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 547.629342][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.658298][ T25] usb 4-1: Product: syz [ 547.677213][ T25] usb 4-1: Manufacturer: syz [ 547.702819][ T25] usb 4-1: SerialNumber: syz [ 547.737813][ T25] usb 4-1: config 0 descriptor?? [ 547.761679][ T9117] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 547.801249][ T25] hub 4-1:0.0: bad descriptor, ignoring hub [ 547.834637][ T25] hub 4-1:0.0: probe with driver hub failed with error -5 [ 547.890092][ T25] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 548.208123][ T29] audit: type=1400 audit(1723296631.498:441): avc: denied { map } for pid=9115 comm="syz.3.875" path="socket:[29499]" dev="sockfs" ino=29499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 548.232001][ T25] usb 4-1: USB disconnect, device number 3 [ 548.232058][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 548.545737][ T9155] : renamed from pim6reg1 [ 548.886067][ T9163] netlink: 20 bytes leftover after parsing attributes in process `syz.1.896'. [ 550.695415][ T9197] Cannot find del_set index 0 as target [ 550.797681][ T29] audit: type=1400 audit(1723296634.098:442): avc: denied { mounton } for pid=9193 comm="syz.3.905" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 550.827465][ T9196] SELinux: security_context_str_to_sid (user_,o) failed with errno=-22 [ 551.687579][ T9208] binder: Unknown parameter 'd' [ 554.679886][ T9246] SELinux: Context is not valid (left unmapped). [ 557.867055][ T29] audit: type=1400 audit(1723296640.518:443): avc: denied { getopt } for pid=9259 comm="syz.2.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 558.246622][ T29] audit: type=1400 audit(1723296640.518:444): avc: denied { ioctl } for pid=9259 comm="syz.2.926" path="socket:[29834]" dev="sockfs" ino=29834 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 559.073373][ T29] audit: type=1400 audit(1723296642.358:445): avc: denied { setopt } for pid=9288 comm="syz.2.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 559.556886][ T5278] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 559.592251][ T29] audit: type=1400 audit(1723296642.888:446): avc: denied { bind } for pid=9299 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 559.662457][ T29] audit: type=1400 audit(1723296642.908:447): avc: denied { listen } for pid=9299 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 559.758807][ T5278] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.789406][ T5278] usb 1-1: config 0 has no interfaces? [ 559.855553][ T5278] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 559.900459][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.969698][ T5278] usb 1-1: Product: syz [ 559.979190][ T5278] usb 1-1: Manufacturer: syz [ 559.991537][ T5278] usb 1-1: SerialNumber: syz [ 560.032894][ T5278] usb 1-1: config 0 descriptor?? [ 561.186598][ T5277] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 561.378968][ T9338] Cannot find del_set index 0 as target [ 561.572132][ T5277] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 561.958204][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.998214][ T5277] usb 5-1: config 0 descriptor?? [ 562.316603][ T5278] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 562.332625][ T25] usb 1-1: USB disconnect, device number 13 [ 562.499519][ T5278] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.551211][ T5278] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 562.584868][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.617966][ T5278] usb 2-1: Product: syz [ 562.622208][ T5278] usb 2-1: Manufacturer: syz [ 562.666600][ T5278] usb 2-1: SerialNumber: syz [ 562.666676][ T5275] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 562.705285][ T5278] usb 2-1: config 0 descriptor?? [ 562.794838][ T5278] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 562.876509][ T9348] netlink: 'syz.2.957': attribute type 12 has an invalid length. [ 562.937106][ T5275] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.001086][ T5275] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 563.041655][ T5275] usb 4-1: config 1 has no interface number 0 [ 563.108821][ T5275] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 563.232416][ T5275] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 563.254393][ T9346] batadv_slave_0: entered promiscuous mode [ 563.274038][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.328314][ T5278] usb 2-1: USB disconnect, device number 13 [ 563.365880][ T5275] usb 4-1: Product: syz [ 563.378180][ T5275] usb 4-1: Manufacturer: syz [ 563.394564][ T5275] usb 4-1: SerialNumber: syz [ 563.444733][ T5275] usb 4-1: selecting invalid altsetting 1 [ 563.577132][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.655593][ T9341] batadv_slave_0: left promiscuous mode [ 563.676697][ T5277] usb 5-1: Cannot set autoneg [ 563.681779][ T5277] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 565.231918][ T5275] cdc_ncm 4-1:1.1: bind() failure [ 565.267397][ T5275] usb 4-1: USB disconnect, device number 4 [ 565.331419][ T5278] usb 5-1: USB disconnect, device number 17 [ 565.681555][ T5232] Bluetooth: hci6: command 0x206a tx timeout [ 565.741877][ T9368] sctp: [Deprecated]: syz.0.962 (pid 9368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 565.741877][ T9368] Use struct sctp_sack_info instead [ 566.776679][ T29] audit: type=1400 audit(1723296650.068:448): avc: denied { create } for pid=9379 comm="syz.4.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 566.883269][ T9386] input: syz0 as /devices/virtual/input/input9 [ 567.042976][ T5227] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 567.147889][ T5275] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 567.284941][ T5227] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.462264][ T5227] usb 2-1: config 0 has no interfaces? [ 567.480471][ T5227] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 567.500419][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.601517][ T5227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.620330][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.635582][ T5227] usb 2-1: Product: syz [ 567.657600][ T5227] usb 2-1: Manufacturer: syz [ 567.669569][ T5275] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 567.680871][ T5227] usb 2-1: SerialNumber: syz [ 567.717412][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.731588][ T5227] usb 2-1: config 0 descriptor?? [ 567.833708][ T5275] usb 4-1: config 0 descriptor?? [ 569.627743][ T5239] Bluetooth: hci0: unexpected event for opcode 0x2011 [ 569.694872][ T25] usb 2-1: USB disconnect, device number 14 [ 569.869322][ T29] audit: type=1400 audit(1723296653.168:449): avc: denied { create } for pid=9420 comm="syz.2.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 569.917008][ T5275] usbhid 4-1:0.0: can't add hid device: -71 [ 569.949051][ T5275] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 569.993705][ T5275] usb 4-1: USB disconnect, device number 5 [ 570.016566][ T5278] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 570.219888][ T29] audit: type=1400 audit(1723296653.518:450): avc: denied { ioctl } for pid=9420 comm="syz.2.980" path="socket:[30112]" dev="sockfs" ino=30112 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 570.277080][ T5277] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 570.293698][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.305577][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.318532][ T29] audit: type=1400 audit(1723296653.558:451): avc: denied { connect } for pid=9423 comm="syz.1.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 570.345654][ T5278] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 570.355560][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.397863][ T5278] usb 1-1: config 0 descriptor?? [ 570.479333][ T5277] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.500234][ T5277] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 570.553817][ T5277] usb 5-1: config 1 has no interface number 0 [ 570.592219][ T5277] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 570.636810][ T5277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.665646][ T5277] usb 5-1: Product: syz [ 570.691812][ T5277] usb 5-1: Manufacturer: syz [ 570.706778][ T5277] usb 5-1: SerialNumber: syz [ 570.818430][ T5278] pantherlord 0003:0F30:0111.0004: item fetching failed at offset 6/7 [ 570.999244][ T5278] pantherlord 0003:0F30:0111.0004: parse failed [ 571.010023][ T5278] pantherlord 0003:0F30:0111.0004: probe with driver pantherlord failed with error -22 [ 571.049387][ T29] audit: type=1400 audit(1723296654.328:452): avc: denied { setattr } for pid=9418 comm="syz.0.979" name="" dev="pipefs" ino=28660 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 572.024730][ T9421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.075642][ T9421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.292410][ T5277] usb 5-1: USB disconnect, device number 18 [ 572.422071][ T29] audit: type=1400 audit(1723296655.718:453): avc: denied { connect } for pid=9447 comm="syz.3.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 572.485052][ T29] audit: type=1400 audit(1723296655.768:454): avc: denied { watch } for pid=9447 comm="syz.3.985" path="/62" dev="tmpfs" ino=327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 572.495809][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'. [ 572.610003][ T5305] usb 1-1: USB disconnect, device number 14 [ 573.115996][ T9469] netlink: 'syz.2.991': attribute type 4 has an invalid length. [ 573.134089][ T9469] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.991'. [ 573.366883][ T5275] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 573.576596][ T5275] usb 2-1: Using ep0 maxpacket: 16 [ 573.614105][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 573.646688][ T5239] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 573.655644][ T5239] Bluetooth: hci0: Injecting HCI hardware error event [ 573.664434][ T5232] Bluetooth: hci0: hardware error 0x00 [ 573.676588][ T5277] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 573.724702][ T5275] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 573.765065][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 573.801687][ T5275] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 573.855902][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.903100][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.942860][ T5275] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 573.969956][ T5275] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 573.984664][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.992849][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.992916][ T5277] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 573.992948][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.997702][ T5277] usb 5-1: config 0 descriptor?? [ 574.122279][ T5275] usb 2-1: Product: syz [ 574.135775][ T5275] usb 2-1: Manufacturer: syz [ 574.160451][ T5275] usb 2-1: SerialNumber: syz [ 574.194636][ T5275] usb 2-1: config 0 descriptor?? [ 574.282242][ T5275] mcba_usb 2-1:0.0 can0: couldn't setup read URBs [ 574.300085][ T5275] mcba_usb 2-1:0.0 can0: couldn't start device: -90 [ 574.347874][ T9477] Invalid logical block size (2) [ 574.367448][ T5278] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 574.468360][ T5275] mcba_usb 2-1:0.0: probe with driver mcba_usb failed with error -90 [ 574.554773][ T5275] usb 2-1: USB disconnect, device number 15 [ 574.599920][ T5278] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 574.625305][ T9473] vlan0: entered promiscuous mode [ 574.641459][ T9473] vlan0: entered allmulticast mode [ 574.682174][ T5278] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 574.719566][ T5278] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 574.746217][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.803152][ T9475] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 574.823018][ T9475] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 574.864050][ T5278] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 574.934603][ T5277] usbhid 5-1:0.0: can't add hid device: -71 [ 574.959627][ T5277] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 575.016776][ T5305] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 575.018779][ T5277] usb 5-1: USB disconnect, device number 19 [ 575.076704][ T5227] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 575.287040][ T5305] usb 4-1: Using ep0 maxpacket: 8 [ 575.315993][ T5227] usb 3-1: device descriptor read/64, error -71 [ 575.338360][ T5305] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 575.380914][ T5305] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 575.423776][ T9475] usb usb8: usbfs: process 9475 (syz.0.997) did not claim interface 0 before use [ 575.449058][ T5305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 575.501607][ T5305] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 575.543172][ T5305] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 575.572240][ T5305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.600941][ T5305] usb 4-1: Product: syz [ 575.605173][ T5305] usb 4-1: Manufacturer: syz [ 575.626636][ T5227] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 575.636297][ T5305] usb 4-1: SerialNumber: syz [ 575.670690][ T5305] usb 4-1: config 0 descriptor?? [ 575.712429][ T5275] usb 1-1: USB disconnect, device number 15 [ 575.726911][ T5232] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 575.748538][ T5305] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 575.818273][ T5227] usb 3-1: device descriptor read/64, error -71 [ 575.961524][ T5227] usb usb3-port1: attempt power cycle [ 576.035716][ T5305] imon:send_packet: packet tx failed (-71) [ 576.098109][ T5305] imon 4-1:0.0: panel buttons/knobs setup failed [ 576.387157][ T5227] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 576.407252][ T5305] rc_core: IR keymap rc-imon-pad not found [ 576.433512][ T5305] Registered IR keymap rc-empty [ 576.455770][ T5305] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 576.506776][ T5227] usb 3-1: device descriptor read/8, error -71 [ 576.514195][ T5305] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 576.555777][ T5305] imon:send_packet: packet tx failed (-71) [ 576.611758][ T5305] imon 4-1:0.0: remote input dev register failed [ 576.618602][ T5305] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 576.786668][ T5227] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 576.828732][ T5227] usb 3-1: device descriptor read/8, error -71 [ 576.883719][ T5305] imon 4-1:0.0: unable to initialize intf0, err 0 [ 576.890408][ T5305] imon:imon_probe: failed to initialize context! [ 576.897500][ T5305] imon 4-1:0.0: unable to register, err -19 [ 576.945322][ T5305] usb 4-1: USB disconnect, device number 6 [ 576.953908][ T5227] usb usb3-port1: unable to enumerate USB device [ 577.073601][ T9501] batadv_slave_0: entered promiscuous mode [ 577.375742][ T9496] batadv_slave_0: left promiscuous mode [ 578.606849][ T5232] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 578.621627][ T5232] Bluetooth: hci2: command 0x0406 tx timeout [ 578.976645][ T25] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 579.153837][ T9535] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1020'. [ 579.279575][ T9539] dns_resolver: Unsupported content type (98) [ 579.446612][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 579.957290][ T9539] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 579.982265][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 7 [ 580.121971][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 9272, setting to 1024 [ 580.166599][ T25] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 580.181405][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.212548][ T25] usb 2-1: Product: syz [ 580.217241][ T9541] capability: warning: `syz.2.1017' uses 32-bit capabilities (legacy support in use) [ 580.232026][ T25] usb 2-1: Manufacturer: syz [ 580.241263][ T25] usb 2-1: SerialNumber: syz [ 580.260666][ T29] audit: type=1326 audit(1723296663.528:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9537 comm="syz.0.1019" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd74c7779f9 code=0x0 [ 580.284599][ T25] usb 2-1: config 0 descriptor?? [ 580.333791][ T9550] dlm: non-version read from control device 231 [ 580.337270][ T35] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 581.209254][ T9563] batadv_slave_0: entered promiscuous mode [ 581.322028][ T5305] usb 2-1: USB disconnect, device number 16 [ 581.642907][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 582.507169][ T25] usb 3-1: device descriptor read/64, error -71 [ 582.547590][ T9557] batadv_slave_0: left promiscuous mode [ 582.651399][ T9578] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 582.657967][ T9578] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 582.685670][ T9578] vhci_hcd vhci_hcd.0: Device attached [ 582.786591][ T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 582.956750][ T25] usb 3-1: device descriptor read/64, error -71 [ 582.996684][ T5277] usb 16-1: SetAddress Request (2) to port 0 [ 583.027254][ T5277] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 583.107013][ T25] usb usb3-port1: attempt power cycle [ 583.206639][ T5278] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 583.407441][ T5305] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 583.450500][ T5278] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.462502][ T5278] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 583.497050][ T5278] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 583.546675][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 583.558444][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.577603][ T5278] usb 1-1: Product: syz [ 583.581926][ T5278] usb 1-1: Manufacturer: syz [ 583.598653][ T5305] usb 4-1: device descriptor read/64, error -71 [ 583.606564][ T5278] usb 1-1: SerialNumber: syz [ 583.612388][ T25] usb 3-1: device descriptor read/8, error -71 [ 583.652098][ T5278] usb 1-1: config 0 descriptor?? [ 583.887121][ T5305] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 583.918659][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 583.952306][ T9596] bond0: (slave bond_slave_0): Releasing backup interface [ 583.967797][ T5227] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 583.971104][ T25] usb 3-1: device descriptor read/8, error -71 [ 584.050083][ T5305] usb 4-1: device descriptor read/64, error -71 [ 584.122728][ T25] usb usb3-port1: unable to enumerate USB device [ 584.177877][ T5305] usb usb4-port1: attempt power cycle [ 584.190566][ T5227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.232997][ T5227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.259017][ T5227] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 584.271506][ T5227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.297227][ T5227] usb 5-1: config 0 descriptor?? [ 584.616601][ T5305] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 584.665153][ T5227] usbhid 5-1:0.0: can't add hid device: -71 [ 584.708779][ T5227] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 584.779672][ T5227] usb 5-1: USB disconnect, device number 20 [ 584.808637][ T5305] usb 4-1: device descriptor read/8, error -71 [ 584.861988][ T9586] vhci_hcd: connection reset by peer [ 584.890026][ T62] vhci_hcd: stop threads [ 584.894420][ T62] vhci_hcd: release socket [ 584.930591][ T62] vhci_hcd: disconnect device [ 586.151800][ T5227] usb 1-1: USB disconnect, device number 16 [ 586.467128][ T29] audit: type=1400 audit(1723296669.758:456): avc: denied { map } for pid=9632 comm="syz.4.1048" path="socket:[30519]" dev="sockfs" ino=30519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 586.835226][ T9636] batadv_slave_0: entered promiscuous mode [ 588.141872][ T5277] usb 16-1: device descriptor read/8, error -110 [ 588.307540][ T9624] batadv_slave_0: left promiscuous mode [ 588.335250][ T9651] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 588.341798][ T9651] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 588.446568][ T5232] Bluetooth: hci2: command 0x0406 tx timeout [ 588.476913][ T5239] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 588.816064][ T5277] usb usb16-port1: attempt power cycle [ 588.930205][ T9651] vhci_hcd vhci_hcd.0: Device attached [ 589.248104][ T25] usb 10-1: SetAddress Request (2) to port 0 [ 589.254222][ T25] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 589.439700][ T9652] vhci_hcd: connection closed [ 589.439996][ T35] vhci_hcd: stop threads [ 589.488141][ T5277] usb usb16-port1: unable to enumerate USB device [ 589.523487][ T9661] syz.2.1056 (9661): attempted to duplicate a private mapping with mremap. This is not supported. [ 589.698658][ T35] vhci_hcd: release socket [ 589.723467][ T35] vhci_hcd: disconnect device [ 590.346632][ T5278] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 590.710920][ T5278] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 590.744408][ T5278] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 590.813742][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.886610][ T5278] usb 2-1: Product: syz [ 590.905687][ T5278] usb 2-1: Manufacturer: syz [ 590.922162][ T5278] usb 2-1: SerialNumber: syz [ 590.990573][ T5278] usb 2-1: config 0 descriptor?? [ 591.366763][ T5278] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 591.602384][ T5278] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 591.643364][ T5278] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 591.682574][ T5278] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 591.709371][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.762767][ T9682] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 591.811691][ T9682] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 592.054613][ T5278] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 592.410458][ T9697] 9pnet_fd: Insufficient options for proto=fd [ 592.876795][ T5278] usb 2-1: USB disconnect, device number 17 [ 594.176855][ T8] usb 4-1: USB disconnect, device number 11 [ 594.232732][ T9722] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1073'. [ 594.238267][ T9719] nvme_fabrics: unknown parameter or missing value ']' in ctrl creation request [ 594.484281][ T25] usb 10-1: device descriptor read/8, error -110 [ 594.958229][ T25] usb usb10-port1: attempt power cycle [ 595.090999][ T9728] batadv_slave_0: entered promiscuous mode [ 595.660096][ T9725] batadv_slave_0: left promiscuous mode [ 595.858293][ T25] usb usb10-port1: unable to enumerate USB device [ 598.704790][ T29] audit: type=1400 audit(1723296681.998:457): avc: denied { connect } for pid=9768 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 599.606649][ T5305] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 599.906759][ T5305] usb 2-1: Using ep0 maxpacket: 32 [ 599.935890][ T5305] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 600.832777][ T5305] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 600.864196][ T5305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.888728][ T5305] usb 2-1: Product: syz [ 600.896171][ T5305] usb 2-1: Manufacturer: syz [ 600.906879][ T5305] usb 2-1: SerialNumber: syz [ 600.930495][ T5305] usb 2-1: config 0 descriptor?? [ 600.961760][ T9785] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 600.995813][ T5305] hub 2-1:0.0: bad descriptor, ignoring hub [ 601.022366][ T5305] hub 2-1:0.0: probe with driver hub failed with error -5 [ 601.051857][ T5305] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 601.234820][ T9800] netlink: 'syz.0.1097': attribute type 10 has an invalid length. [ 601.234849][ T9800] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1097'. [ 601.234881][ T9800] lo: entered promiscuous mode [ 601.235104][ T9800] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 601.262720][ T5305] usb 2-1: USB disconnect, device number 18 [ 601.269756][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 601.676547][ T29] audit: type=1400 audit(1723296684.968:458): avc: denied { write } for pid=9803 comm="syz.2.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 602.307820][ T5305] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 603.264107][ T5305] usb 1-1: device descriptor read/64, error -71 [ 603.556590][ T5305] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 603.726803][ T5305] usb 1-1: device descriptor read/64, error -71 [ 603.857318][ T5305] usb usb1-port1: attempt power cycle [ 604.228630][ T9844] nvme_fabrics: unknown parameter or missing value ']' in ctrl creation request [ 604.289531][ T5305] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 604.347682][ T5305] usb 1-1: device descriptor read/8, error -71 [ 604.385211][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'. [ 604.396528][ T5227] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 604.607410][ T5227] usb 2-1: Using ep0 maxpacket: 8 [ 604.616800][ T5227] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 604.646122][ T5227] usb 2-1: config 246 descriptor has 1 excess byte, ignoring [ 604.658334][ T5305] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 604.675543][ T5227] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 604.702665][ T5227] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 604.728608][ T5305] usb 1-1: device descriptor read/8, error -71 [ 604.745584][ T5227] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 604.757174][ T5227] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 604.769212][ T5227] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 604.781794][ T5227] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 604.792292][ T5227] usb 2-1: config 246 descriptor has 1 excess byte, ignoring [ 604.802436][ T5227] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 604.821992][ T5227] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 604.839480][ T5227] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 604.850951][ T5227] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 604.863065][ T5305] usb usb1-port1: unable to enumerate USB device [ 604.870640][ T5227] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 604.886617][ T5278] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 604.900556][ T5227] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 604.916163][ T5227] usb 2-1: config 246 descriptor has 1 excess byte, ignoring [ 604.933208][ T5227] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 604.942759][ T5227] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 604.961750][ T5227] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 604.973278][ T5227] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 604.986570][ T5277] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 604.998115][ T5227] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 605.050131][ T5227] usb 2-1: string descriptor 0 read error: -22 [ 605.070461][ T5227] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 605.095432][ T5227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.123353][ T5278] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 605.149722][ T5227] adutux 2-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 605.175788][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.202361][ T5277] usb 5-1: Using ep0 maxpacket: 8 [ 605.208041][ T5278] usb 3-1: Product: syz [ 605.213343][ T5278] usb 3-1: Manufacturer: syz [ 605.219253][ T5278] usb 3-1: SerialNumber: syz [ 605.219751][ T5277] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 605.547866][ T5277] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 605.559314][ T5278] usb 3-1: config 0 descriptor?? [ 605.569541][ T5277] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 605.584165][ T5278] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 605.592540][ T5277] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 605.603194][ T5277] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 605.617163][ T5277] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 605.626675][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.945959][ T5278] gspca_sunplus: reg_r err -32 [ 605.959444][ T5227] usb 2-1: USB disconnect, device number 19 [ 606.727223][ T5277] usb 5-1: USB disconnect, device number 21 [ 606.807933][ T5278] usb 3-1: USB disconnect, device number 18 [ 608.663621][ T9881] nvme_fabrics: unknown parameter or missing value ']' in ctrl creation request [ 608.864926][ T29] audit: type=1400 audit(1723296692.159:459): avc: denied { mount } for pid=9882 comm="syz.0.1133" name="/" dev="autofs" ino=32236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 609.039046][ T29] audit: type=1400 audit(1723296692.229:460): avc: denied { mounton } for pid=9882 comm="syz.0.1133" path="/205/file1/file0" dev="autofs" ino=32244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 609.096592][ T29] audit: type=1400 audit(1723296692.299:461): avc: denied { map } for pid=9885 comm="syz.1.1135" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 609.306564][ T5278] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 609.501241][ T5278] usb 5-1: Using ep0 maxpacket: 8 [ 609.526075][ T5278] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.545374][ T5278] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.552551][ T8] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 609.572731][ T5278] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 609.605744][ T5278] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 609.763109][ T5278] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 609.836776][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 609.848833][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.866583][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 609.880576][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 609.893591][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 609.907895][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 609.923035][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 609.951504][ T5278] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 609.952633][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 610.006614][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 610.015198][ T8] usb 2-1: SerialNumber: syz [ 610.023094][ T5278] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 610.038212][ T8] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 610.053460][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.075196][ T8] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 610.085553][ T5278] usb 5-1: Product: syz [ 610.090837][ T5278] usb 5-1: Manufacturer: syz [ 610.103780][ T5278] usb 5-1: SerialNumber: syz [ 610.993506][ T9887] batadv0: entered promiscuous mode [ 611.026792][ T9887] macsec1: entered promiscuous mode [ 611.068173][ T9887] batadv0: left promiscuous mode [ 611.252753][ T8] usb 2-1: USB disconnect, device number 20 [ 611.389166][ T29] audit: type=1400 audit(1723296694.689:462): avc: denied { unmount } for pid=6626 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 611.893288][ T5278] cdc_ncm 5-1:1.0: bind() failure [ 611.962282][ T5278] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 612.016564][ T5278] cdc_ncm 5-1:1.1: bind() failure [ 612.058730][ T5278] usb 5-1: USB disconnect, device number 22 [ 613.746830][ T5227] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 614.091198][ T5227] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 614.114805][ T5227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.129968][ T5227] usb 5-1: Product: syz [ 614.145199][ T5227] usb 5-1: Manufacturer: syz [ 614.153289][ T5227] usb 5-1: SerialNumber: syz [ 614.191165][ T5227] usb 5-1: config 0 descriptor?? [ 614.217037][ T5227] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 614.454935][ T5227] gspca_sunplus: reg_r err -32 [ 614.496194][ T5227] usb 5-1: USB disconnect, device number 23 [ 616.066831][ T29] audit: type=1400 audit(1723296699.359:463): avc: denied { write } for pid=9982 comm="syz.1.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 618.087930][ T29] audit: type=1400 audit(1723296701.379:464): avc: denied { setattr } for pid=9999 comm="syz.2.1173" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 618.144029][ T29] audit: type=1400 audit(1723296701.429:465): avc: denied { read } for pid=9999 comm="syz.2.1173" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 618.167796][ T29] audit: type=1400 audit(1723296701.439:466): avc: denied { open } for pid=9999 comm="syz.2.1173" path="/208/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 618.535300][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'. [ 618.898238][ T5227] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 619.109878][ T5227] usb 5-1: Using ep0 maxpacket: 8 [ 619.165801][ T5227] usb 5-1: config 16 has an invalid descriptor of length 48, skipping remainder of the config [ 619.187172][ T5227] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 619.219198][ T5227] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 619.250094][ T5227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.295375][ T5227] usbtmc 5-1:16.0: bulk endpoints not found [ 619.866668][T10046] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1192'. [ 620.144335][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'. [ 620.941452][T10064] kvm: emulating exchange as write [ 621.151527][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 621.269846][T10068] siw: device registration error -23 [ 621.682702][ T5227] usb 5-1: USB disconnect, device number 24 [ 621.862414][ T29] audit: type=1400 audit(1723296705.149:467): avc: denied { ioctl } for pid=10070 comm="syz.4.1204" path="socket:[34045]" dev="sockfs" ino=34045 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 622.134601][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1206'. [ 622.331616][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 622.580534][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 622.629202][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 622.679534][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 622.688778][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 622.696293][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 623.508957][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.646584][ T5227] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 623.683567][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.880573][ T5227] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 623.905669][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.907009][ T5227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.943760][ T5227] usb 5-1: Product: syz [ 623.949130][ T5227] usb 5-1: Manufacturer: syz [ 623.954401][ T5227] usb 5-1: SerialNumber: syz [ 623.980208][ T5227] usb 5-1: config 0 descriptor?? [ 623.999618][ T5227] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 624.036753][ T5305] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 624.109645][ T11] team0: Port device netdevsim0 removed [ 624.121888][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.236327][ T5227] gspca_sunplus: reg_r err -32 [ 624.242068][ T5305] usb 4-1: Using ep0 maxpacket: 8 [ 624.298310][ T5305] usb 4-1: config 16 has an invalid descriptor of length 48, skipping remainder of the config [ 624.334253][ T5227] usb 5-1: USB disconnect, device number 25 [ 624.387549][ T5305] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 624.469783][ T5305] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 624.510084][ T5305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.548937][ T5305] usbtmc 4-1:16.0: bulk endpoints not found [ 624.766902][ T5239] Bluetooth: hci1: command tx timeout [ 624.977134][ T5227] kernel write not supported for file /snd/seq (pid: 5227 comm: kworker/0:3) [ 625.014104][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.332993][ T11] bridge_slave_1: left allmulticast mode [ 625.349474][ T11] bridge_slave_1: left promiscuous mode [ 625.355405][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.449536][ T11] bridge_slave_0: left allmulticast mode [ 625.455238][ T11] bridge_slave_0: left promiscuous mode [ 625.496827][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.847614][ T5239] Bluetooth: hci1: command tx timeout [ 626.897927][ T5276] usb 4-1: USB disconnect, device number 12 [ 627.467374][T10160] cgroup: noprefix used incorrectly [ 628.754643][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.780704][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.926762][ T5239] Bluetooth: hci1: command tx timeout [ 628.939844][ T11] bond0 (unregistering): Released all slaves [ 629.834733][T10082] chnl_net:caif_netlink_parms(): no params data found [ 630.536597][ T11] ɶƣ0GCTw: left promiscuous mode [ 630.659573][ T11] IPVS: stopping master sync thread 8232 ... [ 631.006685][ T5227] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 631.006990][ T5239] Bluetooth: hci1: command tx timeout [ 631.226598][ T5227] usb 5-1: Using ep0 maxpacket: 8 [ 631.252433][ T5227] usb 5-1: config 16 has an invalid descriptor of length 48, skipping remainder of the config [ 631.283430][ T5227] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 631.308978][T10082] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.336645][T10082] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.339535][ T5227] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 631.375448][ T5227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.395865][ T5227] usbtmc 5-1:16.0: bulk endpoints not found [ 631.560413][T10082] bridge_slave_0: entered allmulticast mode [ 631.577775][T10082] bridge_slave_0: entered promiscuous mode [ 631.633755][ T11] hsr_slave_0: left promiscuous mode [ 631.640861][ T11] hsr_slave_1: left promiscuous mode [ 631.669585][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.698375][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.711171][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.758479][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.829457][ T11] veth1_macvtap: left promiscuous mode [ 631.845804][ T11] veth0_macvtap: left promiscuous mode [ 631.872924][ T11] veth1_vlan: left promiscuous mode [ 631.892913][ T11] veth0_vlan: left promiscuous mode [ 632.345646][ T29] audit: type=1400 audit(1723296715.639:468): avc: denied { watch_mount } for pid=10211 comm="syz.3.1241" path="/101" dev="tmpfs" ino=530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 633.074760][ T11] team0 (unregistering): Port device team_slave_1 removed [ 633.168161][ T11] team0 (unregistering): Port device team_slave_0 removed [ 633.771690][ T5273] usb 5-1: USB disconnect, device number 26 [ 634.926005][T10082] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.955836][T10082] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.982923][T10082] bridge_slave_1: entered allmulticast mode [ 635.014222][T10082] bridge_slave_1: entered promiscuous mode [ 635.373503][T10220] ip6gretap0 speed is unknown, defaulting to 1000 [ 635.574863][T10220] ip6gretap0 speed is unknown, defaulting to 1000 [ 635.590051][T10082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.721915][T10082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.517661][T10220] ip6gretap0 speed is unknown, defaulting to 1000 [ 636.619877][T10220] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 636.818679][T10082] team0: Port device team_slave_0 added [ 636.825532][T10220] ip6gretap0 speed is unknown, defaulting to 1000 [ 636.869267][T10082] team0: Port device team_slave_1 added [ 637.138142][T10220] ip6gretap0 speed is unknown, defaulting to 1000 [ 637.515958][T10220] ip6gretap0 speed is unknown, defaulting to 1000 [ 637.536843][T10082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.554209][T10082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.766735][ T5305] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 637.871095][T10082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.951998][T10220] ip6gretap0 speed is unknown, defaulting to 1000 [ 638.028129][ T5305] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 638.037077][ T5305] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.066596][ T5305] usb 3-1: config 0 has no interface number 0 [ 638.082893][ T5305] usb 3-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 638.115074][ T5305] usb 3-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 638.145995][ T5305] usb 3-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 638.167546][ T5305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.186870][ T5305] usb 3-1: Product: syz [ 638.194243][ T5305] usb 3-1: Manufacturer: syz [ 638.211559][ T5305] usb 3-1: SerialNumber: syz [ 638.226688][ T5305] usb 3-1: config 0 descriptor?? [ 638.244072][ T5305] HFC-S_USB 3-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 638.314513][T10082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.344216][T10082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.396471][T10082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.434276][T10220] ip6gretap0 speed is unknown, defaulting to 1000 [ 638.449361][T10220] ip6gretap0 speed is unknown, defaulting to 1000 [ 638.740425][ T8] usb 3-1: USB disconnect, device number 19 [ 638.833654][T10082] hsr_slave_0: entered promiscuous mode [ 638.925455][T10082] hsr_slave_1: entered promiscuous mode [ 639.916500][ T29] audit: type=1400 audit(1723296723.209:469): avc: denied { read } for pid=10276 comm="syz.2.1259" name="btrfs-control" dev="devtmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 640.036559][ T29] audit: type=1400 audit(1723296723.209:470): avc: denied { open } for pid=10276 comm="syz.2.1259" path="/dev/btrfs-control" dev="devtmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 640.112600][ T29] audit: type=1400 audit(1723296723.299:471): avc: denied { write } for pid=10276 comm="syz.2.1259" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 640.215838][ T29] audit: type=1400 audit(1723296723.299:472): avc: denied { open } for pid=10276 comm="syz.2.1259" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 642.016851][ T5305] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 642.090810][ T35] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 642.179218][T10314] Invalid logical block size (2) [ 642.251582][ T5305] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 642.279474][ T5305] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.322048][ T5305] usb 2-1: config 0 has no interface number 0 [ 642.333641][ T5305] usb 2-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 642.348407][ T5305] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 642.383832][ T5305] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 642.426395][ T5305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.486825][ T5305] usb 2-1: Product: syz [ 642.501972][ T5305] usb 2-1: Manufacturer: syz [ 642.533815][ T5305] usb 2-1: SerialNumber: syz [ 642.564704][ T5305] usb 2-1: config 0 descriptor?? [ 642.613132][ T5305] HFC-S_USB 2-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 642.866147][T10082] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 642.967328][T10082] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 643.244408][T10082] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 643.314967][T10082] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 643.353676][ T5305] usb 2-1: USB disconnect, device number 21 [ 644.425711][T10082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.512840][T10082] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.565474][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.572844][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.654215][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.661473][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.895521][T10082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 645.022537][T10358] Invalid logical block size (2) [ 645.838976][ T2963] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 646.006389][T10082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.264551][T10082] veth0_vlan: entered promiscuous mode [ 646.681644][T10082] veth1_vlan: entered promiscuous mode [ 646.844999][T10082] veth0_macvtap: entered promiscuous mode [ 646.890592][T10082] veth1_macvtap: entered promiscuous mode [ 646.962155][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.016505][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.026348][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.056897][ T29] audit: type=1400 audit(1723296730.349:473): avc: denied { write } for pid=10396 comm="syz.1.1286" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 647.112207][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.134709][ T29] audit: type=1400 audit(1723296730.419:474): avc: denied { write } for pid=4652 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.156585][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.240789][ T29] audit: type=1400 audit(1723296730.419:475): avc: denied { remove_name } for pid=4652 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.297459][ T29] audit: type=1400 audit(1723296730.419:476): avc: denied { add_name } for pid=4652 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.321399][T10400] Invalid logical block size (2) [ 647.466547][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.575112][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.599146][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.609299][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.645910][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.721312][T10082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.756004][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.774867][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.793995][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.824549][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.839920][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.860177][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.872593][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.885211][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.905631][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.917282][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.953983][T10082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.967409][ T5305] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 648.062482][T10414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1293'. [ 648.152278][T10415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1293'. [ 648.170712][ T5305] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 648.213204][T10082] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.220571][ T5305] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.229650][T10082] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.253870][ T5305] usb 4-1: config 0 has no interface number 0 [ 648.254093][T10082] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.276172][ T5305] usb 4-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 648.277447][T10082] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.307484][ T5305] usb 4-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 648.418612][ T5305] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 648.463923][ T5305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.502562][ T5305] usb 4-1: Product: syz [ 648.536895][ T5305] usb 4-1: Manufacturer: syz [ 648.560456][ T5305] usb 4-1: SerialNumber: syz [ 648.583745][ T5305] usb 4-1: config 0 descriptor?? [ 648.631801][ T5305] HFC-S_USB 4-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 648.870129][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.922222][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.070230][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.110083][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.219595][ T5276] usb 4-1: USB disconnect, device number 13 [ 650.002557][ T29] audit: type=1326 audit(1723296733.299:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.4.1302" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e609779f9 code=0x0 [ 650.055863][ T5273] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 650.256764][ T5273] usb 2-1: device descriptor read/64, error -71 [ 650.547413][ T5273] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 650.776749][ T5273] usb 2-1: device descriptor read/64, error -71 [ 650.806840][T10427] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 650.835166][ T29] audit: type=1326 audit(1723296734.119:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10476 comm="syz.3.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b65b779f9 code=0x7ffc0000 [ 650.868192][ T29] audit: type=1326 audit(1723296734.119:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10476 comm="syz.3.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b65b779f9 code=0x7ffc0000 [ 650.906264][T10480] overlayfs: failed to resolve './file0': -2 [ 650.927582][ T5273] usb usb2-port1: attempt power cycle [ 650.939805][ T29] audit: type=1326 audit(1723296734.129:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10476 comm="syz.3.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3b65b779f9 code=0x7ffc0000 [ 651.016695][T10427] usb 3-1: Using ep0 maxpacket: 8 [ 651.041335][T10427] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 651.105190][ T29] audit: type=1326 audit(1723296734.159:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10476 comm="syz.3.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b65b779f9 code=0x7ffc0000 [ 651.114123][T10427] usb 3-1: config 0 has no interface number 0 [ 651.184477][T10427] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 651.266577][ T29] audit: type=1326 audit(1723296734.159:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10476 comm="syz.3.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b65b779f9 code=0x7ffc0000 [ 651.310848][T10427] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.403824][ T5273] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 651.413598][T10427] usb 3-1: config 0 descriptor?? [ 651.457698][ T5273] usb 2-1: device descriptor read/8, error -71 [ 651.559141][T10427] viperboard 3-1:0.143: version 0.00 found at bus 003 address 020 [ 651.665045][T10427] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 651.675227][T10427] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 651.730471][ T5273] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 651.740807][T10427] usb 3-1: USB disconnect, device number 20 [ 651.808201][ T5273] usb 2-1: device descriptor read/8, error -71 [ 651.970989][ T5273] usb usb2-port1: unable to enumerate USB device [ 653.590631][T10427] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 653.800829][T10427] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 653.821865][T10427] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.864338][T10427] usb 5-1: config 0 has no interface number 0 [ 653.894170][T10427] usb 5-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 653.956184][T10427] usb 5-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 654.024640][T10427] usb 5-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 654.059252][T10427] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.081173][T10427] usb 5-1: Product: syz [ 654.085396][T10427] usb 5-1: Manufacturer: syz [ 654.113592][T10427] usb 5-1: SerialNumber: syz [ 654.144515][T10427] usb 5-1: config 0 descriptor?? [ 654.178759][T10427] HFC-S_USB 5-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 654.215189][ T5239] Bluetooth: hci4: unexpected event 0x30 length: 8 > 3 [ 654.530433][ T5305] usb 5-1: USB disconnect, device number 27 [ 654.586841][T10427] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 654.667910][T10539] overlayfs: failed to resolve './file0': -2 [ 654.816611][T10427] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 654.841249][T10427] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.872461][T10427] usb 1-1: Product: syz [ 654.890976][T10427] usb 1-1: Manufacturer: syz [ 654.919055][T10427] usb 1-1: SerialNumber: syz [ 654.944822][T10427] usb 1-1: config 0 descriptor?? [ 654.988853][T10427] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 655.335707][T10548] bpf: Bad value for 'uid' [ 655.352003][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 655.352017][ T29] audit: type=1400 audit(1723296738.619:487): avc: denied { getopt } for pid=10547 comm="syz.2.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 655.429167][ T5276] usb 1-1: USB disconnect, device number 21 [ 656.491591][T10560] Driver unsupported XDP return value 0 on prog (id 188) dev N/A, expect packet loss! [ 656.996976][T10577] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 657.025113][T10577] VFS: Can't find a romfs filesystem on dev nullb0. [ 657.025113][T10577] [ 657.122455][T10580] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1334'. [ 657.193401][ T29] audit: type=1400 audit(1723296740.489:488): avc: denied { connect } for pid=10576 comm="syz.0.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 657.973279][ T62] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 659.016752][T10625] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 659.281714][T10625] VFS: Can't find a romfs filesystem on dev nullb0. [ 659.281714][T10625] [ 660.449182][T10635] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 661.398991][ T5519] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 663.491148][ T29] audit: type=1400 audit(1723296746.789:489): avc: denied { write } for pid=10666 comm="syz.2.1361" path="socket:[36114]" dev="sockfs" ino=36114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 664.181086][T10683] xt_HMARK: spi-set and port-set can't be combined [ 664.198276][T10683] netlink: 'syz.0.1364': attribute type 2 has an invalid length. [ 664.209892][T10683] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge_slave_0 [ 664.287782][ T5275] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 664.956988][ T5275] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 664.976232][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.986348][ T5275] usb 5-1: Product: syz [ 664.997230][ T5275] usb 5-1: Manufacturer: syz [ 665.001887][ T5275] usb 5-1: SerialNumber: syz [ 665.297293][ T5275] usb 5-1: config 0 descriptor?? [ 665.329187][T10691] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 665.343051][T10691] VFS: Can't find a romfs filesystem on dev nullb0. [ 665.343051][T10691] [ 665.364519][ T5275] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 665.708588][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1370'. [ 665.721672][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1370'. [ 665.753603][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1370'. [ 665.812825][ T5275] usb 5-1: USB disconnect, device number 28 [ 667.223952][T10716] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 667.463868][T10718] ip6gretap0 speed is unknown, defaulting to 1000 [ 669.357878][T10739] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1384'. [ 669.436562][T10739] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 672.456162][ T29] audit: type=1400 audit(1723296755.099:490): avc: denied { append } for pid=10765 comm="syz.0.1394" name="rtc0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 673.835584][T10782] ip6gretap0 speed is unknown, defaulting to 1000 [ 674.556854][T10427] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 674.698643][ T5305] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 674.760047][T10427] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 674.777670][T10427] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.798729][T10427] usb 3-1: config 0 descriptor?? [ 674.808975][T10427] cp210x 3-1:0.0: cp210x converter detected [ 674.887365][ T5305] usb 1-1: Using ep0 maxpacket: 32 [ 674.902002][ T5305] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.917792][ T5275] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 674.945409][ T5305] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 674.963022][ T5305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.974768][ T5305] usb 1-1: Product: syz [ 674.979167][ T5305] usb 1-1: Manufacturer: syz [ 674.983818][ T5305] usb 1-1: SerialNumber: syz [ 674.997166][ T5305] usb 1-1: config 0 descriptor?? [ 675.006896][ T5305] hub 1-1:0.0: bad descriptor, ignoring hub [ 675.029533][ T5305] hub 1-1:0.0: probe with driver hub failed with error -5 [ 675.141361][ T5275] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 675.152258][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.161470][ T5275] usb 2-1: Product: syz [ 675.165731][ T5275] usb 2-1: Manufacturer: syz [ 675.176144][ T5275] usb 2-1: SerialNumber: syz [ 675.200148][ T5275] usb 2-1: config 0 descriptor?? [ 675.229182][ T5275] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 675.249560][T10427] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 675.272661][T10427] usb 3-1: cp210x converter now attached to ttyUSB0 [ 675.357833][ T5305] usb 1-1: USB disconnect, device number 22 [ 675.528116][T10815] 9pnet_fd: Insufficient options for proto=fd [ 675.615034][ T5275] usb 3-1: USB disconnect, device number 21 [ 675.661365][ T5278] usb 2-1: USB disconnect, device number 26 [ 675.703860][ T5275] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 675.756225][ T5275] cp210x 3-1:0.0: device disconnected [ 675.806012][T10815] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1412'. [ 682.077660][T10829] sctp: [Deprecated]: syz.0.1417 (pid 10829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 682.077660][T10829] Use struct sctp_sack_info instead [ 682.844083][T10833] ip6gretap0 speed is unknown, defaulting to 1000 [ 682.865159][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 682.877329][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 682.887441][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 683.051867][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 683.062746][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 683.072422][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 684.020509][ T8334] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.165161][T10837] ip6gretap0 speed is unknown, defaulting to 1000 [ 684.381242][ T8334] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.434001][T10859] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 684.487791][ T5275] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 684.583598][ T8334] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.723113][ T5275] usb 5-1: Using ep0 maxpacket: 32 [ 684.754243][ T5275] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.871737][ T5275] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 684.873393][ T8334] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.969755][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.004963][ T5275] usb 5-1: Product: syz [ 685.021236][ T5275] usb 5-1: Manufacturer: syz [ 685.044715][ T5275] usb 5-1: SerialNumber: syz [ 685.084139][ T5275] usb 5-1: config 0 descriptor?? [ 685.106264][ T5275] hub 5-1:0.0: bad descriptor, ignoring hub [ 685.117623][ T5275] hub 5-1:0.0: probe with driver hub failed with error -5 [ 685.166929][ T5239] Bluetooth: hci3: command tx timeout [ 685.202411][T10863] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1425'. [ 685.458863][ T5275] usb 5-1: USB disconnect, device number 29 [ 686.454663][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.382270][ T5239] Bluetooth: hci3: command tx timeout [ 690.621055][ T8334] bridge_slave_1: left allmulticast mode [ 690.630993][ T8334] bridge_slave_1: left promiscuous mode [ 690.651107][ T8334] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.723415][ T8334] bridge_slave_0: left allmulticast mode [ 690.769815][ T8334] bridge_slave_0: left promiscuous mode [ 690.781313][ T8334] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.994285][T10884] sctp: [Deprecated]: syz.4.1429 (pid 10884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 690.994285][T10884] Use struct sctp_sack_info instead [ 692.551625][ T5239] Bluetooth: hci3: command tx timeout [ 693.110367][T10896] 9pnet_fd: Insufficient options for proto=fd [ 693.354975][T10896] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1432'. [ 693.459483][ T8] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 693.659275][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.703850][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.723310][ T8] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 693.733166][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.761834][ T8] usb 5-1: config 0 descriptor?? [ 694.022398][T10909] ip6t_srh: unknown srh match flags 4000 [ 694.164937][ T8334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.183557][ T8334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.196346][ T8334] bond0 (unregistering): Released all slaves [ 694.231271][T10837] chnl_net:caif_netlink_parms(): no params data found [ 694.273736][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 694.292679][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 694.323703][ T8] usb 5-1: USB disconnect, device number 30 [ 694.455298][T10914] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 694.594369][T10918] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1437'. [ 694.766925][ T5239] Bluetooth: hci3: command tx timeout [ 695.438109][T10920] ip6gretap0 speed is unknown, defaulting to 1000 [ 695.479469][T10837] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.518368][T10837] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.573717][T10837] bridge_slave_0: entered allmulticast mode [ 695.586676][ T8] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 695.592017][T10837] bridge_slave_0: entered promiscuous mode [ 695.672221][ T8334] hsr_slave_0: left promiscuous mode [ 695.686319][ T8334] hsr_slave_1: left promiscuous mode [ 695.693215][ T8334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.701828][ T8334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.718737][ T8334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.726417][ T8334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.766686][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 695.776707][ T8334] veth1_macvtap: left promiscuous mode [ 695.782857][ T8334] veth0_macvtap: left promiscuous mode [ 695.784917][ T8] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 695.799045][ T8334] veth1_vlan: left promiscuous mode [ 695.804810][ T8334] veth0_vlan: left promiscuous mode [ 695.813403][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.829779][ T8] usb 5-1: Product: syz [ 695.834296][ T8] usb 5-1: Manufacturer: syz [ 695.839752][ T8] usb 5-1: SerialNumber: syz [ 695.853823][ T8] usb 5-1: config 0 descriptor?? [ 696.374673][T10941] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 696.381256][T10941] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 696.426835][T10941] vhci_hcd vhci_hcd.0: Device attached [ 696.779925][T10427] usb 11-1: new high-speed USB device number 5 using vhci_hcd [ 696.789796][ T8] (unnamed net_device) (uninitialized): Assigned a random MAC address: be:71:b7:bf:75:d1 [ 696.975514][T10943] vhci_hcd: connection reset by peer [ 697.001290][ T62] vhci_hcd: stop threads [ 697.020668][ T62] vhci_hcd: release socket [ 697.044248][ T62] vhci_hcd: disconnect device [ 697.569998][T10951] could not allocate digest TFM handle mcryptd(mcryptd(wp512-generic)) [ 697.875760][T10962] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1448'. [ 698.900246][T10965] 9pnet_fd: Insufficient options for proto=fd [ 699.126202][T10971] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1450'. [ 699.144004][T10971] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1450'. [ 699.803072][ T8334] team0 (unregistering): Port device team_slave_1 removed [ 699.903044][ T8334] team0 (unregistering): Port device team_slave_0 removed [ 700.929204][T10837] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.956025][T10837] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.970507][T10837] bridge_slave_1: entered allmulticast mode [ 701.014796][T10837] bridge_slave_1: entered promiscuous mode [ 701.130541][ T8] rtl8150 5-1:0.0: eth5: rtl8150 is detected [ 701.215032][ T8] usb 5-1: USB disconnect, device number 31 [ 701.322999][T10837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.918277][T10427] vhci_hcd: vhci_device speed not set [ 706.318544][T10837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.792435][T10997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1460'. [ 706.996365][T10997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1460'. [ 707.948333][T10837] team0: Port device team_slave_0 added [ 707.973379][T10837] team0: Port device team_slave_1 added [ 708.371600][T10837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.406595][T10837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.499512][T10837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.538916][T10837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.548179][T10837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.591966][T10837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.621548][ T5232] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 708.628791][T11020] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1465'. [ 708.648181][ T5232] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 708.651220][ T2941] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 708.675891][ T5232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 708.717146][ T5232] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 708.736627][ T5232] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 708.744333][ T5232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 709.077423][T10837] hsr_slave_0: entered promiscuous mode [ 709.124857][T10837] hsr_slave_1: entered promiscuous mode [ 709.148628][T10837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 709.166194][T10837] Cannot create hsr debugfs directory [ 709.395316][T11030] 9pnet_fd: Insufficient options for proto=fd [ 709.454580][T11018] ip6gretap0 speed is unknown, defaulting to 1000 [ 709.473962][T11035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1469'. [ 709.486546][T11035] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1469'. [ 709.702527][T11030] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1468'. [ 714.197153][ T5232] Bluetooth: hci6: command tx timeout [ 717.096716][ T5232] Bluetooth: hci6: command tx timeout [ 717.139713][T11071] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1476'. [ 719.166588][ T5232] Bluetooth: hci6: command tx timeout [ 721.246621][ T5232] Bluetooth: hci6: command tx timeout [ 747.987310][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 806.293676][ T5232] Bluetooth: hci3: command 0x0406 tx timeout [ 822.146333][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 822.153325][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5519/1:b..l [ 822.161717][ C0] rcu: (detected by 0, t=10502 jiffies, g=65093, q=111 ncpus=2) [ 822.169503][ C0] task:kworker/u8:11 state:R running task stack:23536 pid:5519 tgid:5519 ppid:2 flags:0x00004000 [ 822.182231][ C0] Workqueue: bat_events batadv_nc_worker [ 822.187872][ C0] Call Trace: [ 822.191134][ C0] [ 822.194047][ C0] __schedule+0xe37/0x5490 [ 822.198455][ C0] ? __pfx_mark_lock+0x10/0x10 [ 822.203202][ C0] ? __pfx_mark_lock+0x10/0x10 [ 822.207949][ C0] ? mark_lock+0xb5/0xc60 [ 822.212259][ C0] ? __pfx___schedule+0x10/0x10 [ 822.217094][ C0] ? __pfx_mark_lock+0x10/0x10 [ 822.221847][ C0] ? mark_held_locks+0x9f/0xe0 [ 822.226601][ C0] preempt_schedule_irq+0x51/0x90 [ 822.232502][ C0] irqentry_exit+0x36/0x90 [ 822.236913][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 822.242896][ C0] RIP: 0010:lock_acquire+0x1f2/0x560 [ 822.248179][ C0] Code: c1 05 aa 11 9a 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 822.267790][ C0] RSP: 0018:ffffc900033c7aa0 EFLAGS: 00000206 [ 822.273847][ C0] RAX: dffffc0000000000 RBX: 1ffff92000678f56 RCX: 0000000000000001 [ 822.281817][ C0] RDX: 0000000000000001 RSI: ffffffff8b4cc800 RDI: ffffffff8bb08a40 [ 822.289781][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff28c5ad8 [ 822.297747][ C0] R10: ffffffff9462d6c7 R11: 0000000000000000 R12: 0000000000000000 [ 822.305700][ C0] R13: 0000000000000000 R14: ffffffff8ddb5ca0 R15: 0000000000000000 [ 822.313663][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 822.318678][ C0] ? batadv_nc_worker+0x8e9/0x10f0 [ 822.323815][ C0] ? __pfx_lock_release+0x10/0x10 [ 822.328847][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 822.334038][ C0] batadv_nc_worker+0x16e/0x10f0 [ 822.338983][ C0] ? batadv_nc_worker+0x168/0x10f0 [ 822.344100][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 822.349554][ C0] ? __pfx_lock_release+0x10/0x10 [ 822.354568][ C0] process_one_work+0x9c5/0x1b40 [ 822.359496][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 822.364885][ C0] ? __pfx_process_one_work+0x10/0x10 [ 822.370271][ C0] ? assign_work+0x1a0/0x250 [ 822.374856][ C0] worker_thread+0x6c8/0xf20 [ 822.379471][ C0] ? __kthread_parkme+0x148/0x220 [ 822.384487][ C0] ? __pfx_worker_thread+0x10/0x10 [ 822.389590][ C0] kthread+0x2c1/0x3a0 [ 822.393667][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 822.398880][ C0] ? __pfx_kthread+0x10/0x10 [ 822.403473][ C0] ret_from_fork+0x45/0x80 [ 822.407886][ C0] ? __pfx_kthread+0x10/0x10 [ 822.412632][ C0] ret_from_fork_asm+0x1a/0x30 [ 822.417384][ C0] [ 822.420516][ C0] rcu: rcu_preempt kthread starved for 9835 jiffies! g65093 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 822.431709][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 822.441673][ C0] rcu: RCU grace-period kthread stack dump: [ 822.447549][ C0] task:rcu_preempt state:R running task stack:28032 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 822.459264][ C0] Call Trace: [ 822.462524][ C0] [ 822.465440][ C0] __schedule+0xe37/0x5490 [ 822.469849][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 822.475038][ C0] ? __pfx___schedule+0x10/0x10 [ 822.479871][ C0] ? schedule+0x298/0x350 [ 822.484185][ C0] ? __pfx_lock_release+0x10/0x10 [ 822.489194][ C0] ? __pfx___mod_timer+0x10/0x10 [ 822.494116][ C0] ? lock_acquire+0x1b1/0x560 [ 822.498866][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 822.504398][ C0] schedule+0xe7/0x350 [ 822.508453][ C0] schedule_timeout+0x136/0x2a0 [ 822.513286][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 822.518661][ C0] ? __pfx_process_timeout+0x10/0x10 [ 822.523950][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 822.529759][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 822.535210][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 822.539960][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 822.545224][ C0] ? rcu_gp_init+0xc82/0x1630 [ 822.549884][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 822.555066][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 822.560946][ C0] rcu_gp_kthread+0x271/0x380 [ 822.565614][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 822.570818][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 822.576002][ C0] ? __kthread_parkme+0x148/0x220 [ 822.581017][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 822.586198][ C0] kthread+0x2c1/0x3a0 [ 822.590251][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 822.595434][ C0] ? __pfx_kthread+0x10/0x10 [ 822.600008][ C0] ret_from_fork+0x45/0x80 [ 822.604436][ C0] ? __pfx_kthread+0x10/0x10 [ 822.609011][ C0] ret_from_fork_asm+0x1a/0x30 [ 822.613765][ C0] [ 822.616767][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 822.623086][ C0] Sending NMI from CPU 0 to CPUs 1: [ 822.628294][ C1] NMI backtrace for cpu 1 [ 822.628309][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 822.628335][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 822.628348][ C1] RIP: 0010:kasan_check_range+0x111/0x1a0 [ 822.628384][ C1] Code: 44 89 c2 e8 a1 ea ff ff 83 f0 01 5b 5d 41 5c c3 cc cc cc cc 48 85 d2 74 4f 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 41 80 38 00 <74> f2 eb b2 41 bc 08 00 00 00 45 29 dc 49 8d 14 2c eb 0c 48 83 c0 [ 822.628404][ C1] RSP: 0018:ffffc90000a18e18 EFLAGS: 00000046 [ 822.628421][ C1] RAX: ffffed10057c02c8 RBX: ffffed10057c02c9 RCX: ffffffff8168e603 [ 822.628437][ C1] RDX: ffffed10057c02c9 RSI: 0000000000000004 RDI: ffff88802be01640 [ 822.628451][ C1] RBP: ffffed10057c02c8 R08: 0000000000000000 R09: ffffed10057c02c8 [ 822.628466][ C1] R10: ffff88802be01643 R11: 0000000000000000 R12: 0000000000000246 [ 822.628480][ C1] R13: ffff88802be01640 R14: ffff88802be01628 R15: ffff88802be01600 [ 822.628495][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 822.628518][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 822.628534][ C1] CR2: 000055ed0b2c2cc8 CR3: 000000000db7c000 CR4: 00000000003506f0 [ 822.628549][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 822.628562][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 822.628576][ C1] Call Trace: [ 822.628583][ C1] [ 822.628590][ C1] ? show_regs+0x8c/0xa0 [ 822.628623][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 822.628652][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 822.628682][ C1] ? nmi_handle+0x1a9/0x5c0 [ 822.628703][ C1] ? kasan_check_range+0x111/0x1a0 [ 822.628733][ C1] ? default_do_nmi+0x6a/0x160 [ 822.628766][ C1] ? exc_nmi+0x170/0x1e0 [ 822.628796][ C1] ? end_repeat_nmi+0xf/0x53 [ 822.628830][ C1] ? do_raw_spin_unlock+0x53/0x230 [ 822.628866][ C1] ? kasan_check_range+0x111/0x1a0 [ 822.628896][ C1] ? kasan_check_range+0x111/0x1a0 [ 822.628926][ C1] ? kasan_check_range+0x111/0x1a0 [ 822.628956][ C1] [ 822.628963][ C1] [ 822.628970][ C1] do_raw_spin_unlock+0x53/0x230 [ 822.629000][ C1] _raw_spin_unlock_irqrestore+0x22/0x80 [ 822.629027][ C1] skb_dequeue+0x126/0x180 [ 822.629056][ C1] ieee80211_handle_queued_frames+0x3b/0x130 [ 822.629081][ C1] tasklet_action_common.constprop.0+0x24c/0x3e0 [ 822.629118][ C1] handle_softirqs+0x216/0x8f0 [ 822.629149][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 822.629181][ C1] irq_exit_rcu+0xbb/0x120 [ 822.629211][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 822.629236][ C1] [ 822.629242][ C1] [ 822.629249][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 822.629282][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 822.629314][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 18 b7 f1 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d c8 ce a9 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 822.629334][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 822.629350][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b120709 [ 822.629364][ C1] RDX: 0000000000000001 RSI: ffff888019ade800 RDI: ffff888019ade864 [ 822.629379][ C1] RBP: ffff888019ade864 R08: 0000000000000001 R09: ffffed1017266fd9 [ 822.629394][ C1] R10: ffff8880b9337ecb R11: 0000000000000000 R12: ffff888019b53000 [ 822.629408][ C1] R13: ffffffff8e951880 R14: 0000000000000001 R15: 0000000000000000 [ 822.629424][ C1] ? ct_kernel_exit+0x139/0x190 [ 822.629451][ C1] acpi_idle_enter+0xc5/0x160 [ 822.629482][ C1] cpuidle_enter_state+0x85/0x500 [ 822.629510][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 822.629542][ C1] cpuidle_enter+0x4e/0xa0 [ 822.629571][ C1] do_idle+0x313/0x3f0 [ 822.629596][ C1] ? __pfx_do_idle+0x10/0x10 [ 822.629621][ C1] cpu_startup_entry+0x4f/0x60 [ 822.629646][ C1] start_secondary+0x220/0x2b0 [ 822.629675][ C1] ? __pfx_start_secondary+0x10/0x10 [ 822.629704][ C1] common_startup_64+0x13e/0x148 [ 822.629731][ C1]