last executing test programs: 4m22.104450639s ago: executing program 1 (id=687): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) 4m22.043243199s ago: executing program 1 (id=688): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETVNETLE(r0, 0x400454cc, 0x0) 4m21.874508838s ago: executing program 1 (id=694): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000001640)=[@free_buffer], 0x0, 0x0, 0x0}) 4m21.828192442s ago: executing program 1 (id=695): mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) 4m21.713033858s ago: executing program 1 (id=697): syz_io_uring_setup(0x110, &(0x7f00000001c0)={0x0, 0x10, 0x0, 0x3, 0x80}, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') close(0x3) lseek(r0, 0x4, 0x0) 4m21.443333163s ago: executing program 1 (id=701): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x16) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000c00)={0xffffffd9, 0x4000, 0x0, 0x8316, 0x6, "0300870801e8d2b791f152000e00000600", 0x7fff, 0x7f}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) 4m21.355485506s ago: executing program 32 (id=701): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x16) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000c00)={0xffffffd9, 0x4000, 0x0, 0x8316, 0x6, "0300870801e8d2b791f152000e00000600", 0x7fff, 0x7f}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) 3m53.204797252s ago: executing program 0 (id=1258): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0xcc, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private1}}}]}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 3m53.146763765s ago: executing program 0 (id=1259): mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, &(0x7f0000000040)=0x5, 0x5, 0x2) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 3m53.11458179s ago: executing program 0 (id=1260): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') pread64(r1, &(0x7f00000000c0)=""/144, 0x90, 0x4005e) 3m53.063800734s ago: executing program 0 (id=1261): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 3m53.034217561s ago: executing program 0 (id=1262): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) getrandom(0x0, 0x0, 0x2) 3m52.795968673s ago: executing program 0 (id=1263): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0x9, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x9, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x668a, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x9d46, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x0, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x8, 0x4, 0x8000005, 0x3, 0x8, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x1ff, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x4, 0x2, 0x80004000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x20000007, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x28, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x0, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x10000005, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x8, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x2, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x40, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x7ff, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10002, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x217f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0x9b11, 0x9, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x81, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x1, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0xfffffffc, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x1, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0xe, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 3m52.761201329s ago: executing program 33 (id=1263): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0x9, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x9, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x668a, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x9d46, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x0, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x8, 0x4, 0x8000005, 0x3, 0x8, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x1ff, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x4, 0x2, 0x80004000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x20000007, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x28, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x0, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x10000005, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x8, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x2, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x40, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x7ff, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10002, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x217f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0x9b11, 0x9, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x81, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x1, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0xfffffffc, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x1, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0xe, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 3m11.449012786s ago: executing program 2 (id=2090): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001240), r0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000340)={0x38, r2, 0x1, 0x70bd24, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x8000) 3m11.343961007s ago: executing program 2 (id=2093): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) 3m11.195975703s ago: executing program 2 (id=2098): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x32) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000280)={"54ec36e6", 0x3, 0x6, 0x6, 0x10001, 0x3, "785144b84ef7ebe60630484ac7b0c8", "391f49c1", "cd5ca376", "b4538793", ["1a99d11773947bbc54a7e33f", "7d2dd431950208ccfab8907c", "113bd782b5dd4faa927d715f", "6e36525b23ac564cef69ea62"]}) 3m11.183767861s ago: executing program 2 (id=2099): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x4) 3m11.079856996s ago: executing program 2 (id=2101): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x42, &(0x7f0000000280)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}}}}}}, 0x0) 3m10.792193084s ago: executing program 2 (id=2104): inotify_init1(0x80000) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) 3m10.741355031s ago: executing program 34 (id=2104): inotify_init1(0x80000) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) 1m55.458414909s ago: executing program 4 (id=3832): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x1, 0x0, r0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r1, &(0x7f0000000d40), 0x0}, 0x20) 1m55.372061638s ago: executing program 4 (id=3834): unshare(0x2040600) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7462ec41}]}, &(0x7f00000000c0)='GPL\x00', 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0x7, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) 1m55.371524182s ago: executing program 4 (id=3835): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1m55.349248396s ago: executing program 4 (id=3836): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$cgroup2(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x4000, &(0x7f0000000140)={[{@memory_localevents}]}) 1m55.292037722s ago: executing program 4 (id=3837): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mq_timedsend(r0, &(0x7f0000000600)='m', 0x1, 0x6, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 1m55.069008442s ago: executing program 4 (id=3838): r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)={0x1, 0x0, @c}, 0x29, r0) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='P', 0x1, r0) keyctl$read(0xb, r0, &(0x7f0000002e40)=""/72, 0x4) 1m54.938242312s ago: executing program 35 (id=3838): r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)={0x1, 0x0, @c}, 0x29, r0) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='P', 0x1, r0) keyctl$read(0xb, r0, &(0x7f0000002e40)=""/72, 0x4) 13.302041562s ago: executing program 5 (id=5689): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={@ifindex, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 13.239010575s ago: executing program 5 (id=5690): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x443, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 13.135959329s ago: executing program 5 (id=5692): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8) shutdown(r0, 0x1) 13.116953056s ago: executing program 5 (id=5694): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 12.074271764s ago: executing program 5 (id=5704): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000400)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00') 12.019757345s ago: executing program 5 (id=5706): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1dfb02108098e068886dd000033", 0x0, 0xadf4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.002668142s ago: executing program 3 (id=5892): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f0000004280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) 2.909305752s ago: executing program 3 (id=5895): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 2.69439641s ago: executing program 7 (id=5901): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 2.585532734s ago: executing program 7 (id=5905): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x7e0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) 2.348071866s ago: executing program 8 (id=5910): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}}, 0x0) 2.231924989s ago: executing program 8 (id=5912): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2000000000000326, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) 2.129585158s ago: executing program 3 (id=5914): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x3, r0, 0x5}) 1.864590186s ago: executing program 7 (id=5915): socket(0x200000000000011, 0x2, 0xd) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0xf00) 1.774105924s ago: executing program 7 (id=5918): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000080)={0x0, 0x23, 0x1, "86"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x9, 0x0, 0x0}) 1.247467612s ago: executing program 6 (id=5919): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.247211816s ago: executing program 3 (id=5920): r0 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) ppoll(&(0x7f0000002280)=[{r0, 0x800}], 0x1, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) mq_timedreceive(r0, &(0x7f0000000140)=""/4096, 0x1000, 0x0, 0x0) 1.192866906s ago: executing program 7 (id=5921): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000003600)={0x0, 0x0, 0x0}, 0x40800) r1 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r1, &(0x7f0000000040)=""/4109, 0x100d) 1.192169466s ago: executing program 8 (id=5922): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @empty, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x22, "67e8401632e742b73abf37b53d299531da9c1b5cc6a8df05fe578bc267d49e3c1a95"}, &(0x7f0000000080)=0x2a) 1.132009867s ago: executing program 6 (id=5923): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 1.131604932s ago: executing program 8 (id=5924): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001) 1.108063401s ago: executing program 7 (id=5925): mlockall(0x3) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc000) brk(0x400000ffc020) 1.063621375s ago: executing program 6 (id=5926): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) 1.02188795s ago: executing program 8 (id=5927): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='projid_map\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) creat(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 348.059839ms ago: executing program 3 (id=5928): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x2a1607e8) 341.336408ms ago: executing program 6 (id=5938): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 331.170011ms ago: executing program 3 (id=5929): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 86.76243ms ago: executing program 8 (id=5930): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 84.233898ms ago: executing program 6 (id=5931): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x679a}, 0x94) 0s ago: executing program 6 (id=5932): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x8}) setxattr$system_posix_acl(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) kernel console output (not intermixed with test programs): 0c38 length: 249 > 2 [ 239.746624][T13556] bridge_slave_1: left allmulticast mode [ 239.752750][T13556] bridge_slave_1: left promiscuous mode [ 239.758474][T13556] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.766771][T13556] bridge_slave_0: left promiscuous mode [ 239.772582][T13556] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.976027][T13556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.007326][T13556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.031258][T13556] bond0 (unregistering): Released all slaves [ 240.186406][T13556] IPVS: stopping master sync thread 9562 ... [ 240.209931][ T5918] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 240.319059][T13556] hsr_slave_0: left promiscuous mode [ 240.326656][T13556] hsr_slave_1: left promiscuous mode [ 240.336238][T13556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.355260][T13556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.366845][T13556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.379263][T13556] veth1_macvtap: left promiscuous mode [ 240.384842][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 240.391833][T13556] veth0_macvtap: left promiscuous mode [ 240.397703][T13556] veth1_vlan: left promiscuous mode [ 240.403400][T13556] veth0_vlan: left promiscuous mode [ 240.409110][ T5918] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 240.418608][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.439617][ T5918] pvrusb2: Hardware description: Terratec Grabster AV400 [ 240.456568][ T5918] pvrusb2: ********** [ 240.474691][ T5918] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 240.508736][ T5918] pvrusb2: Important functionality might not be entirely working. [ 240.520592][ T5918] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 240.533524][ T5918] pvrusb2: ********** [ 240.589500][T13556] team0 (unregistering): Port device team_slave_1 removed [ 240.604529][T13556] team0 (unregistering): Port device team_slave_0 removed [ 240.643566][ T2327] pvrusb2: Invalid write control endpoint [ 240.685845][ T2327] pvrusb2: Invalid write control endpoint [ 240.698523][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 240.713721][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 240.721402][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 240.735216][T14830] chnl_net:caif_netlink_parms(): no params data found [ 240.744240][ T2327] pvrusb2: Device being rendered inoperable [ 240.751151][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 240.796365][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 240.812590][ T2327] pvrusb2: Attached sub-driver cx25840 [ 240.825638][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 240.845540][T14837] pvrusb2: Attempted to execute control transfer when device not ok [ 240.855990][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 240.871540][ T5897] usb 4-1: USB disconnect, device number 51 [ 240.919089][T14830] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.938700][T14830] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.962183][T14830] bridge_slave_0: entered allmulticast mode [ 240.977867][T14830] bridge_slave_0: entered promiscuous mode [ 240.994395][T14830] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.014901][T14830] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.030113][T14830] bridge_slave_1: entered allmulticast mode [ 241.079331][T14830] bridge_slave_1: entered promiscuous mode [ 241.151511][T14830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.172367][T14830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.261109][ T975] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 241.332270][T14830] team0: Port device team_slave_0 added [ 241.339355][T14830] team0: Port device team_slave_1 added [ 241.399648][T14830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.409932][ T975] usb 7-1: Using ep0 maxpacket: 32 [ 241.419914][T14830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.448716][T14830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.466882][ T975] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 241.475971][ T975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.504974][ T975] usb 7-1: config 0 descriptor?? [ 241.529489][ T975] gspca_main: sq930x-2.14.0 probing 041e:403c [ 241.582100][T14881] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8 [ 241.602132][T14830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.619261][T14830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.690983][T14830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.772549][ T5859] Bluetooth: hci4: command tx timeout [ 241.792692][T14830] hsr_slave_0: entered promiscuous mode [ 241.811322][T14830] hsr_slave_1: entered promiscuous mode [ 242.110667][T14830] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 242.143592][T14830] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 242.169525][T14830] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 242.181280][ T975] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 242.187219][ T975] sq930x 7-1:0.0: probe with driver sq930x failed with error -71 [ 242.196843][T14830] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 242.206106][ T975] usb 7-1: USB disconnect, device number 39 [ 242.338041][T14830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.353689][T14830] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.406282][T13583] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.413366][T13583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.464361][T13583] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.471481][T13583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.785963][T14830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.901432][T14830] veth0_vlan: entered promiscuous mode [ 242.943323][T14830] veth1_vlan: entered promiscuous mode [ 242.992344][T14830] veth0_macvtap: entered promiscuous mode [ 243.001790][T14830] veth1_macvtap: entered promiscuous mode [ 243.016001][T14830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.033832][T14830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.099249][T13583] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.128352][T13583] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.147789][T13583] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.179431][T13583] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.190125][ T24] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 243.272021][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.285676][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.321552][T13583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.345375][T13583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.351707][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.366740][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3875'. [ 243.378032][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.388468][ T24] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 243.422523][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.451733][ T24] usb 7-1: config 0 descriptor?? [ 243.852083][ T5859] Bluetooth: hci4: command tx timeout [ 243.876649][ T24] cp2112 0003:10C4:EA90.0045: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 244.022094][ T5859] block nbd5: Receive control failed (result -32) [ 244.067392][ T24] cp2112 0003:10C4:EA90.0045: error requesting version [ 244.092465][ T24] cp2112 0003:10C4:EA90.0045: probe with driver cp2112 failed with error -71 [ 244.157683][ T24] usb 7-1: USB disconnect, device number 40 [ 244.519481][ T30] audit: type=1400 audit(1755954246.448:952): avc: denied { write } for pid=14980 comm="syz.7.3897" path="socket:[72476]" dev="sockfs" ino=72476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 244.622834][ T30] audit: type=1400 audit(1755954246.488:953): avc: denied { ioctl } for pid=14983 comm="syz.5.3899" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 245.722977][ T30] audit: type=1326 audit(1755954247.658:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15044 comm="syz.5.3928" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f085f98ebe9 code=0x0 [ 245.930194][ T5859] Bluetooth: hci4: command tx timeout [ 246.713581][T15078] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 246.901589][ T5918] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 247.112199][ T5918] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.140898][ T5918] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 247.170891][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.201844][ T5918] usb 7-1: config 0 descriptor?? [ 247.213230][ T5918] pwc: Askey VC010 type 2 USB webcam detected. [ 247.299990][ T5897] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 247.480745][ T5897] usb 9-1: Using ep0 maxpacket: 16 [ 247.487789][ T5897] usb 9-1: unable to get BOS descriptor or descriptor too short [ 247.496783][ T5897] usb 9-1: config 13 has an invalid interface number: 50 but max is 0 [ 247.509874][ T5897] usb 9-1: config 13 has no interface number 0 [ 247.517103][ T5897] usb 9-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.549881][ T5897] usb 9-1: config 13 interface 50 has no altsetting 0 [ 247.559118][ T5897] usb 9-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 247.568532][ T5897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.580665][ T5897] usb 9-1: Product: syz [ 247.585181][ T5897] usb 9-1: Manufacturer: syz [ 247.589944][ T5897] usb 9-1: SerialNumber: syz [ 247.631614][ T5918] pwc: recv_control_msg error -32 req 02 val 2b00 [ 247.805148][ T5897] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 247.840248][ T5897] usb 9-1: MIDIStreaming interface descriptor not found [ 247.841748][ T5918] pwc: recv_control_msg error -71 req 02 val 2c00 [ 247.881069][ T5918] pwc: recv_control_msg error -71 req 04 val 1000 [ 247.897693][ T5918] pwc: recv_control_msg error -71 req 04 val 1300 [ 247.897899][ T5897] usb 9-1: USB disconnect, device number 2 [ 247.910149][ T5918] pwc: recv_control_msg error -71 req 04 val 1400 [ 247.927079][ T5918] pwc: recv_control_msg error -71 req 02 val 2000 [ 247.963295][ T5918] pwc: recv_control_msg error -71 req 02 val 2100 [ 247.980845][ T5918] pwc: recv_control_msg error -71 req 04 val 1500 [ 247.990905][ T5918] pwc: recv_control_msg error -71 req 02 val 2500 [ 248.005360][ T5918] pwc: recv_control_msg error -71 req 02 val 2400 [ 248.020400][ T5859] Bluetooth: hci4: command tx timeout [ 248.021188][ T5918] pwc: recv_control_msg error -71 req 02 val 2600 [ 248.062755][ T5918] pwc: recv_control_msg error -71 req 02 val 2900 [ 248.082322][ T5918] pwc: recv_control_msg error -71 req 02 val 2800 [ 248.089130][ T5918] pwc: recv_control_msg error -71 req 04 val 1100 [ 248.100140][ T5918] pwc: recv_control_msg error -71 req 04 val 1200 [ 248.117381][ T5918] pwc: Registered as video103. [ 248.129079][ T5918] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input62 [ 248.152989][ T5918] usb 7-1: USB disconnect, device number 41 [ 248.702446][T15127] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3964'. [ 248.730356][ T5897] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 248.738785][T15127] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3964'. [ 248.810535][ T25] block nbd0: Possible stuck request ffff888026815080: control (read@0,1024B). Runtime 180 seconds [ 248.821639][ T25] block nbd0: Possible stuck request ffff888026815240: control (read@1024,1024B). Runtime 180 seconds [ 248.832687][ T25] block nbd0: Possible stuck request ffff888026815400: control (read@2048,1024B). Runtime 180 seconds [ 248.844006][ T25] block nbd0: Possible stuck request ffff8880268155c0: control (read@3072,1024B). Runtime 180 seconds [ 248.910008][ T5897] usb 7-1: Using ep0 maxpacket: 32 [ 248.917082][ T5897] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 248.936290][ T5897] usb 7-1: config 0 has no interface number 0 [ 248.944424][ T5897] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 248.970561][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.978578][ T5897] usb 7-1: Product: syz [ 249.020027][ T5897] usb 7-1: Manufacturer: syz [ 249.024703][ T5897] usb 7-1: SerialNumber: syz [ 249.034172][ T5897] usb 7-1: config 0 descriptor?? [ 249.060700][ T5897] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 249.099885][T10239] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 249.149980][ T975] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 249.248818][ T5897] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 249.264700][T10239] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.276920][ T5897] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 249.286242][T10239] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.297776][T10239] usb 9-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 249.306934][T10239] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.311250][ T5918] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 249.318553][T10239] usb 9-1: config 0 descriptor?? [ 249.343028][ T975] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 249.352223][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.361607][ T975] usb 4-1: config 0 descriptor?? [ 249.371289][ T975] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 249.470027][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 249.477272][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.488385][ T5918] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 249.501781][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.510898][ T5918] usb 6-1: config 0 descriptor?? [ 249.676297][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 249.687349][ T5897] usb 7-1: USB disconnect, device number 42 [ 249.706761][ T5897] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 249.719678][ T5897] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 249.732489][ T5897] quatech2 7-1:0.51: device disconnected [ 249.749786][T10239] hid-led 0003:0FC5:B080.0046: unknown main item tag 0x0 [ 249.933609][ T5918] mcp2221 0003:04D8:00DD.0047: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 249.972134][ T975] gspca_stv06xx: vv6410 sensor detected [ 250.161385][T10239] hid-led 0003:0FC5:B080.0046: probe with driver hid-led failed with error -71 [ 250.172551][T10239] usb 9-1: USB disconnect, device number 3 [ 250.235154][ T975] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 250.248822][ T975] usb 4-1: USB disconnect, device number 52 [ 250.354143][ T5918] usb 6-1: USB disconnect, device number 47 [ 251.109884][T10239] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 251.300023][T10239] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.311992][T10239] usb 9-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 251.329924][ T5918] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 251.338293][T10239] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.350446][T10239] usb 9-1: config 0 descriptor?? [ 251.512318][T15189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.523649][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.550060][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.579962][ T5918] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 251.601265][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.609751][T15191] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3996'. [ 251.624782][ T5918] usb 6-1: config 0 descriptor?? [ 251.626117][T15191] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3996'. [ 251.653253][T15193] veth0: entered promiscuous mode [ 251.663730][T15192] veth0: left promiscuous mode [ 251.783502][ T30] audit: type=1400 audit(1755954253.718:955): avc: denied { create } for pid=15198 comm="syz.6.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 251.803003][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.817745][ T30] audit: type=1400 audit(1755954253.748:956): avc: denied { ioctl } for pid=15198 comm="syz.6.4000" path="socket:[84076]" dev="sockfs" ino=84076 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 251.859125][ T30] audit: type=1400 audit(1755954253.748:957): avc: denied { bind } for pid=15198 comm="syz.6.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 251.974872][T10239] razer 0003:1532:010E.0048: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.8-1/input0 [ 252.067302][ T30] audit: type=1400 audit(1755954253.998:958): avc: denied { write } for pid=15214 comm="syz.6.4007" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 252.101237][ T5918] cp2112 0003:10C4:EA90.0049: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 252.187182][ T975] usb 9-1: USB disconnect, device number 4 [ 252.304566][ T5918] cp2112 0003:10C4:EA90.0049: error requesting version [ 252.312603][ T5918] cp2112 0003:10C4:EA90.0049: probe with driver cp2112 failed with error -71 [ 252.323993][ T5918] usb 6-1: USB disconnect, device number 48 [ 252.843219][ T30] audit: type=1400 audit(1755954254.758:959): avc: denied { write } for pid=15229 comm="syz.6.4013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 253.806252][T15265] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4031'. [ 253.951027][T15276] tipc: Started in network mode [ 253.969114][T15276] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 253.988868][T15276] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 254.004807][T15276] tipc: Enabled bearer , priority 10 [ 254.021692][ T975] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 254.193730][ T975] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.235008][ T975] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.263016][ T975] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 254.290106][ T975] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.313058][ T975] usb 9-1: config 0 descriptor?? [ 254.570117][ T5897] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 254.733383][ T975] cp2112 0003:10C4:EA90.004A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 254.749494][ T5897] usb 6-1: Using ep0 maxpacket: 32 [ 254.758467][ T5897] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 254.780935][ T5897] usb 6-1: config 0 has no interface number 0 [ 254.788629][ T5897] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 254.797936][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.806786][ T5897] usb 6-1: Product: syz [ 254.824253][ T5897] usb 6-1: Manufacturer: syz [ 254.830845][ T5897] usb 6-1: SerialNumber: syz [ 254.836979][ T5897] usb 6-1: config 0 descriptor?? [ 254.860896][ T5897] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 254.933688][ T975] cp2112 0003:10C4:EA90.004A: error requesting version [ 254.948894][ T975] cp2112 0003:10C4:EA90.004A: probe with driver cp2112 failed with error -71 [ 254.981391][ T975] usb 9-1: USB disconnect, device number 5 [ 255.068315][ T5897] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 255.120744][ T5918] tipc: Node number set to 1 [ 255.130508][ T5897] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 255.218036][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.227691][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.551076][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 255.552022][ T24] usb 6-1: USB disconnect, device number 49 [ 255.571209][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 255.611341][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 255.640982][ T24] quatech2 6-1:0.51: device disconnected [ 256.371167][T15406] tipc: Started in network mode [ 256.385218][T15406] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 256.411188][T15406] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 256.423595][T15406] tipc: Enabled bearer , priority 10 [ 257.211594][T15465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.239085][T15465] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 257.542278][ T975] tipc: Node number set to 1 [ 257.826476][T15495] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4116'. [ 258.359399][T15526] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4130'. [ 258.645879][T15550] CUSE: unknown device info "" [ 258.651074][T15550] CUSE: zero length info key specified [ 259.159894][ T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 259.205373][T15580] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4152'. [ 259.214664][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4152'. [ 259.239320][T15582] netlink: 'syz.6.4151': attribute type 3 has an invalid length. [ 259.262019][T15582] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4151'. [ 259.318162][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 259.333293][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 259.347537][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 259.367962][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 259.391062][ T24] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 259.405644][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.422385][ T24] usb 9-1: Product: syz [ 259.431005][ T24] usb 9-1: Manufacturer: syz [ 259.439978][ T24] usb 9-1: SerialNumber: syz [ 259.451066][ T24] usb 9-1: config 0 descriptor?? [ 259.669090][ T24] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 259.895287][ T24] usb 9-1: USB disconnect, device number 6 [ 260.243812][T15617] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4169'. [ 260.928237][T15651] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 260.934771][T15651] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 260.935339][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4187'. [ 260.943571][T15651] vhci_hcd vhci_hcd.0: Device attached [ 260.958485][T15657] netlink: 'syz.5.4187': attribute type 21 has an invalid length. [ 260.972717][T15652] vhci_hcd: connection closed [ 260.972866][T13536] vhci_hcd: stop threads [ 260.982076][T13536] vhci_hcd: release socket [ 260.992141][T13536] vhci_hcd: disconnect device [ 261.370167][ T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 261.521902][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.542959][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.554005][ T24] usb 9-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 261.566035][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.578396][ T24] usb 9-1: config 0 descriptor?? [ 261.997585][ T24] arvo 0003:1E7D:30D4.004B: unknown main item tag 0x0 [ 262.020996][ T24] arvo 0003:1E7D:30D4.004B: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.8-1/input0 [ 262.040026][T10239] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 262.191021][T10239] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.204742][T10239] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 262.222662][T15689] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4201'. [ 262.231500][T10239] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 262.231525][T10239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.255225][T10239] usb 4-1: config 0 descriptor?? [ 262.261814][T15689] netlink: 'syz.6.4201': attribute type 21 has an invalid length. [ 262.426532][ T24] usb 9-1: USB disconnect, device number 7 [ 262.478266][T10239] Bluetooth: Can't get state to change to load ram patch err [ 262.501039][T10239] Bluetooth: Loading patch file failed [ 262.506525][T10239] ath3k 4-1:0.0: probe with driver ath3k failed with error -32 [ 262.545134][T10239] usb 4-1: USB disconnect, device number 53 [ 262.669715][T13536] Bluetooth: hci5: Frame reassembly failed (-84) [ 262.679159][T15707] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 262.687338][T13536] Bluetooth: hci5: Frame reassembly failed (-84) [ 263.211796][T10239] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 263.381885][T10239] usb 9-1: config index 0 descriptor too short (expected 6427, got 27) [ 263.390983][T10239] usb 9-1: config 0 has an invalid interface number: 21 but max is 0 [ 263.399095][T10239] usb 9-1: config 0 has no interface number 0 [ 263.406798][T10239] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 263.417623][T10239] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 263.428012][T10239] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 263.448152][T10239] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.458003][T10239] usb 9-1: config 0 descriptor?? [ 264.111711][T10239] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.21/input/input63 [ 264.143342][T10239] input: failed to attach handler kbd to device input63, error: -5 [ 264.341406][T10239] usb 9-1: USB disconnect, device number 8 [ 264.557207][T15750] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4229'. [ 264.730736][ T5169] Bluetooth: hci5: command 0x1003 tx timeout [ 264.731553][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 264.763346][T15760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4234'. [ 264.834430][T15760] nbd: socks must be embedded in a SOCK_ITEM attr [ 265.659965][ T24] usb 6-1: new low-speed USB device number 50 using dummy_hcd [ 265.679627][T15806] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4253'. [ 265.804629][T15806] nbd: socks must be embedded in a SOCK_ITEM attr [ 265.825931][ T24] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 265.848181][ T24] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 265.894814][ T24] usb 6-1: config 0 has no interface number 0 [ 265.911770][ T24] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 265.934365][ T24] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 265.964541][ T24] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 265.992847][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.018593][ T24] usb 6-1: config 0 descriptor?? [ 266.141210][ T5859] block nbd6: Receive control failed (result -32) [ 266.654688][ T24] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input64 [ 266.702877][ T24] input: failed to attach handler kbd to device input64, error: -5 [ 266.913002][ T24] usb 6-1: USB disconnect, device number 50 [ 266.966469][T15836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.287150][T15851] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4275'. [ 267.627139][T15868] vlan2: entered allmulticast mode [ 267.635810][T15868] macvtap0: entered allmulticast mode [ 267.641848][T15868] veth0_macvtap: entered allmulticast mode [ 267.971082][ T30] audit: type=1400 audit(1755954269.908:960): avc: denied { bind } for pid=15892 comm="syz.6.4295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 268.009783][T15893] openvswitch: netlink: IP tunnel dst address not specified [ 268.264331][ T30] audit: type=1400 audit(1755954270.198:961): avc: denied { create } for pid=15907 comm="syz.5.4302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 268.283811][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.320502][ T30] audit: type=1400 audit(1755954270.198:962): avc: denied { listen } for pid=15907 comm="syz.5.4302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 268.343991][ T30] audit: type=1400 audit(1755954270.198:963): avc: denied { accept } for pid=15907 comm="syz.5.4302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 268.507240][T15926] netlink: 'syz.6.4310': attribute type 1 has an invalid length. [ 268.531412][T15926] netlink: 75 bytes leftover after parsing attributes in process `syz.6.4310'. [ 268.746330][T15940] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 268.762763][T15940] batman_adv: batadv0: Adding interface: ip6gretap1 [ 268.769490][T15940] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.798013][T15940] batman_adv: batadv0: Interface activated: ip6gretap1 [ 268.821603][ T30] audit: type=1400 audit(1755954270.758:964): avc: denied { accept } for pid=15941 comm="syz.8.4317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 268.865698][ T30] audit: type=1400 audit(1755954270.778:965): avc: denied { setopt } for pid=15941 comm="syz.8.4317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 268.885072][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.506719][ T30] audit: type=1400 audit(1755954271.438:966): avc: denied { name_connect } for pid=15973 comm="syz.5.4332" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 269.998827][ T30] audit: type=1326 audit(1755954271.928:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15994 comm="syz.8.4341" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f236f38ebe9 code=0x0 [ 270.021592][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.573261][T16020] openvswitch: netlink: IP tunnel dst address not specified [ 271.019574][ T5918] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 271.071025][T16056] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 271.114624][T16056] batman_adv: batadv0: Adding interface: ip6gretap1 [ 271.139769][T16056] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.165677][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.175424][T16056] batman_adv: batadv0: Interface activated: ip6gretap1 [ 271.210459][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 271.223589][ T5918] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.270918][ T5918] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.293246][ T5918] usb 4-1: config 0 interface 0 has no altsetting 0 [ 271.300810][ T5918] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 271.311371][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.323334][ T5918] usb 4-1: config 0 descriptor?? [ 271.359431][ T30] audit: type=1326 audit(1755954273.288:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16070 comm="syz.6.4375" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f551a98ebe9 code=0x0 [ 271.657887][T16085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.747231][ T5918] hid (null): unknown global tag 0xe [ 271.760477][ T5918] hid (null): report_id 27353 is invalid [ 271.786381][ T5918] hid (null): report_id 0 is invalid [ 271.985098][ T975] usb 4-1: USB disconnect, device number 54 [ 273.215379][T16142] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.4410'. [ 273.397161][T16144] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4411'. [ 273.874895][T16169] batman_adv: batadv0: Adding interface: gretap1 [ 273.892906][ T975] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 273.901492][T16169] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.952500][T16172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.010629][T16169] batman_adv: batadv0: Interface activated: gretap1 [ 274.049932][ T975] usb 9-1: Using ep0 maxpacket: 8 [ 274.071640][ T975] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.100776][ T975] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 274.117276][ T975] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.139229][ T975] usb 9-1: config 0 descriptor?? [ 274.168918][ T975] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 274.219952][ T5897] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 274.391048][ T5897] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 274.420025][ T5897] usb 4-1: config 179 has no interface number 0 [ 274.439048][ T5897] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 274.482506][ T5897] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 274.510078][ T5897] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 274.532662][ T5897] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 274.544830][ T5897] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 274.558236][ T5897] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 274.568325][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.578640][T16174] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 274.586794][T16174] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 274.689924][T10239] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 274.766671][T16202] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.4437'. [ 274.827210][ T5904] usb 4-1: USB disconnect, device number 55 [ 274.827210][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 274.864902][T10239] usb 6-1: config 0 has no interfaces? [ 274.873353][T10239] usb 6-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 274.909872][T10239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.939300][T10239] usb 6-1: config 0 descriptor?? [ 274.987788][ T975] gspca_vc032x: reg_w err -71 [ 274.993040][ T975] vc032x 9-1:0.0: probe with driver vc032x failed with error -71 [ 275.015952][ T975] usb 9-1: USB disconnect, device number 9 [ 275.153472][T16190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.162219][T16190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.176733][T10239] usb 6-1: USB disconnect, device number 51 [ 275.273629][ T30] audit: type=1400 audit(1755954277.208:969): avc: denied { unmount } for pid=16223 comm="syz.6.4449" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 275.320185][ T30] audit: type=1400 audit(1755954277.238:970): avc: denied { mounton } for pid=16223 comm="syz.6.4449" path="/621/file0" dev="rpc_pipefs" ino=122913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 275.619965][T10239] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 275.780617][T10239] usb 6-1: Using ep0 maxpacket: 8 [ 275.797275][T10239] usb 6-1: config index 0 descriptor too short (expected 72, got 36) [ 275.815520][T10239] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 275.869390][T10239] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 275.898774][T10239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.922657][T10239] usb 6-1: Product: syz [ 275.926843][T10239] usb 6-1: Manufacturer: syz [ 275.949962][T10239] usb 6-1: SerialNumber: syz [ 276.198915][T10239] usb 6-1: USB disconnect, device number 52 [ 277.485882][T16351] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16351 comm=syz.5.4519 [ 277.536715][ T30] audit: type=1400 audit(1755954279.468:971): avc: denied { map } for pid=16358 comm="syz.8.4512" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 278.133859][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4527'. [ 278.890223][ T25] block nbd0: Possible stuck request ffff888026815080: control (read@0,1024B). Runtime 210 seconds [ 278.901102][ T25] block nbd0: Possible stuck request ffff888026815240: control (read@1024,1024B). Runtime 210 seconds [ 278.912286][ T25] block nbd0: Possible stuck request ffff888026815400: control (read@2048,1024B). Runtime 210 seconds [ 278.923430][ T25] block nbd0: Possible stuck request ffff8880268155c0: control (read@3072,1024B). Runtime 210 seconds [ 280.459878][ T5904] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 280.634110][ T5904] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 280.644751][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.652887][T10239] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 280.662462][ T5904] usb 7-1: Product: syz [ 280.666648][ T5904] usb 7-1: Manufacturer: syz [ 280.671291][ T5904] usb 7-1: SerialNumber: syz [ 280.676938][ T5904] usb 7-1: config 0 descriptor?? [ 280.719880][ T24] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 280.811073][T10239] usb 6-1: Using ep0 maxpacket: 32 [ 280.817619][T10239] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 280.826028][T10239] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 280.834700][T10239] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 280.843701][T10239] usb 6-1: config 1 has no interface number 0 [ 280.851307][T10239] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 280.862244][T10239] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 280.872258][ T24] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 280.875361][T10239] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 280.892710][T10239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.902500][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.916567][T10239] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 280.924174][ T24] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 280.934477][ T24] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 280.942641][ T24] usb 9-1: Manufacturer: syz [ 280.948545][ T24] usb 9-1: config 0 descriptor?? [ 281.001629][ T24] rc_core: IR keymap rc-hauppauge not found [ 281.007594][ T24] Registered IR keymap rc-empty [ 281.016424][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 281.027415][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input65 [ 281.118833][T10239] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 281.166054][T16445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.174853][T16445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.186460][T10239] usb 9-1: USB disconnect, device number 10 [ 281.525684][ T5904] usb 7-1: f81604_write: reg: 105 data: 65 failed: -EPROTO [ 281.533029][ T5904] f81604 7-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 281.541123][ T5904] f81604 7-1:0.0: probe with driver f81604 failed with error -71 [ 281.550697][ T5904] usb 7-1: USB disconnect, device number 43 [ 281.569517][T10239] usb 6-1: USB disconnect, device number 53 [ 281.578536][T10239] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 281.815786][ T30] audit: type=1400 audit(1755954283.748:972): avc: denied { ioctl } for pid=16454 comm="syz.3.4556" path="socket:[135869]" dev="sockfs" ino=135869 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 281.880070][ T30] audit: type=1400 audit(1755954283.808:973): avc: denied { append } for pid=16460 comm="syz.8.4558" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 281.936116][T16463] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16463 comm=syz.3.4559 [ 282.178528][T16483] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4570'. [ 282.416528][T16501] input: syz0 as /devices/virtual/input/input66 [ 282.584329][T16515] input: syz0 as /devices/virtual/input/input67 [ 282.660406][T16518] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4586'. [ 282.672784][T16518] netlink: 120 bytes leftover after parsing attributes in process `syz.8.4586'. [ 282.682613][T16518] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4586'. [ 282.700119][ T24] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 282.864261][ T24] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 282.895848][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.919702][ T24] usb 4-1: Product: syz [ 282.949257][ T24] usb 4-1: Manufacturer: syz [ 282.959316][ T24] usb 4-1: SerialNumber: syz [ 282.975840][ T24] usb 4-1: config 0 descriptor?? [ 283.172412][ T30] audit: type=1400 audit(1755954285.108:974): avc: denied { setattr } for pid=16546 comm="syz.5.4597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 283.664960][T16574] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4610'. [ 283.809698][ T24] usb 4-1: f81604_write: reg: 105 data: 65 failed: -EPROTO [ 283.823297][ T24] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 283.831401][ T24] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 283.846918][ T24] usb 4-1: USB disconnect, device number 56 [ 283.992823][T10239] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 284.162108][T10239] usb 9-1: config 0 has no interfaces? [ 284.174673][T10239] usb 9-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 284.210240][T10239] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.219247][T10239] usb 9-1: config 0 descriptor?? [ 284.441322][T16576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.450183][T16576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.462294][ T5904] usb 9-1: USB disconnect, device number 11 [ 284.621607][ T24] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 284.791216][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 284.802483][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 284.813379][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 284.823325][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 284.833533][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 284.843184][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.880097][ T24] usb 7-1: config 0 descriptor?? [ 284.909886][ T5904] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 285.061106][ T5904] usb 9-1: Using ep0 maxpacket: 8 [ 285.072338][ T5904] usb 9-1: config index 0 descriptor too short (expected 72, got 36) [ 285.080982][ T5904] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 285.101963][ T24] hdpvr 7-1:0.0: firmware version 0x51 dated [ 285.118049][ T24] hdpvr 7-1:0.0: untested firmware, the driver might not work. [ 285.141292][ T5904] usb 9-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 285.160906][ T5904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.169128][ T5904] usb 9-1: Product: syz [ 285.169432][ T30] audit: type=1400 audit(1755954287.098:975): avc: denied { append } for pid=16626 comm="syz.5.4636" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 285.196476][ T5904] usb 9-1: Manufacturer: syz [ 285.196493][ T5904] usb 9-1: SerialNumber: syz [ 285.303070][ T24] hdpvr 7-1:0.0: device init failed [ 285.309581][ T24] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 285.335732][ T24] usb 7-1: USB disconnect, device number 44 [ 285.384763][T16635] veth0_vlan: left promiscuous mode [ 285.495086][ T5904] usb 9-1: USB disconnect, device number 12 [ 285.631264][T16642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4643'. [ 285.653453][T16642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4643'. [ 286.145823][T16675] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4658'. [ 286.161617][T16675] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4658'. [ 286.189554][T16679] netlink: 'syz.5.4659': attribute type 5 has an invalid length. [ 286.710008][ T5904] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 286.769888][ T5897] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 286.784703][T16717] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4677'. [ 286.870191][ T5904] usb 7-1: config 0 has no interfaces? [ 286.879384][ T5904] usb 7-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 286.898137][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.919320][ T5904] usb 7-1: config 0 descriptor?? [ 286.951237][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 286.964573][ T5897] usb 4-1: config index 0 descriptor too short (expected 1810, got 18) [ 286.983366][ T5897] usb 4-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 287.020291][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.040235][ T5897] usb 4-1: config 0 descriptor?? [ 287.052507][ T5897] gspca_main: etoms-2.14.0 probing 102c:6151 [ 287.152971][T16695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.168169][T16695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.178800][ T5904] usb 7-1: USB disconnect, device number 45 [ 287.240091][T10239] kernel read not supported for file /dsp1 (pid: 10239 comm: kworker/0:7) [ 287.258633][T16700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.278954][T16700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.355869][ T5897] usb 4-1: USB disconnect, device number 57 [ 287.580404][ T10] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 287.620107][ T5904] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 287.651900][T16752] SELinux: failed to load policy [ 287.740018][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 287.750821][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.761859][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.774977][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 287.789999][ T5904] usb 7-1: Using ep0 maxpacket: 8 [ 287.802759][ T5904] usb 7-1: config index 0 descriptor too short (expected 72, got 36) [ 287.811728][ T10] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 287.820813][ T5904] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 287.822357][ T5904] usb 7-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 287.843810][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.882062][ T10] usb 6-1: config 0 descriptor?? [ 287.887076][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.910091][ T5904] usb 7-1: Product: syz [ 287.924419][ T5904] usb 7-1: Manufacturer: syz [ 287.938218][ T5904] usb 7-1: SerialNumber: syz [ 288.073172][T16768] netlink: 'syz.8.4702': attribute type 5 has an invalid length. [ 288.195360][ T5904] usb 7-1: USB disconnect, device number 46 [ 288.211002][ T5918] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 288.311304][ T10] shield 0003:0955:7214.004D: unknown main item tag 0x0 [ 288.318395][ T10] shield 0003:0955:7214.004D: unknown main item tag 0x0 [ 288.336116][ T10] shield 0003:0955:7214.004D: item fetching failed at offset 3/5 [ 288.351359][ T10] shield 0003:0955:7214.004D: Parse failed [ 288.357292][ T10] shield 0003:0955:7214.004D: probe with driver shield failed with error -22 [ 288.359897][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 288.382626][ T5918] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.392073][ T5918] usb 4-1: config 0 has no interface number 0 [ 288.398176][ T5918] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.419642][ T5918] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.430463][ T5918] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 288.439535][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.448875][ T5918] usb 4-1: config 0 descriptor?? [ 288.545105][ T43] usb 6-1: USB disconnect, device number 54 [ 289.008030][T16799] netlink: 'syz.6.4715': attribute type 1 has an invalid length. [ 289.015978][T16799] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4715'. [ 289.086485][ T5918] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.004E/input/input68 [ 289.116493][ T5918] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.004E/input/input69 [ 289.133917][ T5918] uclogic 0003:28BD:0071.004E: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1 [ 289.196389][T16803] SELinux: failed to load policy [ 289.292106][ T975] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 289.347356][ T5904] usb 4-1: USB disconnect, device number 58 [ 289.416212][T16815] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4723'. [ 289.471777][ T975] usb 7-1: Using ep0 maxpacket: 32 [ 289.483470][ T975] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 289.492981][ T975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.501374][ T975] usb 7-1: Product: syz [ 289.505740][ T975] usb 7-1: Manufacturer: syz [ 289.510442][ T975] usb 7-1: SerialNumber: syz [ 289.516197][ T975] usb 7-1: config 0 descriptor?? [ 289.579984][ T5918] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 289.593896][T16823] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4727'. [ 289.604226][T16823] netem: unknown loss type 0 [ 289.709447][T16829] netlink: 'syz.5.4730': attribute type 1 has an invalid length. [ 289.718332][T16829] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4730'. [ 289.742659][ T5918] usb 9-1: Using ep0 maxpacket: 16 [ 289.762507][ T5918] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.774893][ T5918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 289.787334][ T5918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 289.797186][ T5918] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 289.807798][ T5918] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.822222][ T5918] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 289.831555][ T5918] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 289.839556][ T5918] usb 9-1: Manufacturer: syz [ 289.845316][ T5918] usb 9-1: config 0 descriptor?? [ 290.120341][ T5918] rc_core: IR keymap rc-hauppauge not found [ 290.128483][ T5918] Registered IR keymap rc-empty [ 290.134135][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 290.142287][ T975] peak_usb 7-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 290.160458][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 290.160906][ T975] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 290.175802][ T975] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 290.202319][ T5918] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 290.220045][ T975] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22 [ 290.226457][ T5918] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input70 [ 290.257221][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 290.292020][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 290.320009][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 290.334959][T16853] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4739'. [ 290.344107][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 290.359961][ T5904] kernel read not supported for file /dsp1 (pid: 5904 comm: kworker/1:3) [ 290.413462][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 290.422589][ T975] usb 7-1: USB disconnect, device number 47 [ 290.439953][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 290.497788][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 290.540137][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 290.561408][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 290.600900][ T5918] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 290.625709][T16867] binder: 16866:16867 ioctl 40046205 0 returned -22 [ 290.629848][ T5918] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 290.640757][ T5918] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 290.653323][ T5918] usb 9-1: USB disconnect, device number 13 [ 290.809885][ T5897] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 290.972245][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 290.989056][ T5897] usb 6-1: config index 0 descriptor too short (expected 1810, got 18) [ 291.011516][ T5897] usb 6-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 291.039876][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.068505][ T5897] usb 6-1: config 0 descriptor?? [ 291.101642][ T5897] gspca_main: etoms-2.14.0 probing 102c:6151 [ 291.206628][T16885] input: syz0 as /devices/virtual/input/input71 [ 291.215095][T16885] input: failed to attach handler leds to device input71, error: -6 [ 291.302873][T16865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.314885][T16865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.359507][ T5897] usb 6-1: USB disconnect, device number 55 [ 291.432954][T16894] binder: 16893:16894 ioctl 40046205 0 returned -22 [ 291.440726][ T5918] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 291.599865][ T5918] usb 7-1: Using ep0 maxpacket: 8 [ 291.608340][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.651921][ T5918] usb 7-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 291.676949][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.707008][ T5918] usb 7-1: config 0 descriptor?? [ 291.884012][T16921] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 291.931089][ T30] audit: type=1400 audit(1755954293.858:976): avc: denied { append } for pid=16922 comm="syz.5.4771" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 291.985586][T16925] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4773'. [ 292.128849][ T5918] kye 0003:0458:501A.004F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 292.156435][ T5918] kye 0003:0458:501A.004F: unknown main item tag 0x0 [ 292.169156][ T5918] kye 0003:0458:501A.004F: unknown main item tag 0x0 [ 292.188313][ T5918] kye 0003:0458:501A.004F: item fetching failed at offset 2/7 [ 292.205764][ T5918] kye 0003:0458:501A.004F: parse failed [ 292.245509][ T5918] kye 0003:0458:501A.004F: probe with driver kye failed with error -22 [ 292.374200][ T24] usb 7-1: USB disconnect, device number 48 [ 292.393705][T16958] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4787'. [ 292.612483][ T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 292.614577][T16974] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4794'. [ 292.691393][T16979] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 292.780624][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 292.800898][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.821056][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.830886][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 292.843682][ T10] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 292.854406][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.870195][ T10] usb 4-1: config 0 descriptor?? [ 292.923392][T16987] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4801'. [ 292.967828][T16989] input: syz0 as /devices/virtual/input/input72 [ 292.976580][T16989] input: failed to attach handler leds to device input72, error: -6 [ 293.029921][ T24] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 293.181562][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.196473][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.208792][ T24] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 293.218723][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.229200][ T24] usb 9-1: config 0 descriptor?? [ 293.286911][ T10] shield 0003:0955:7214.0050: unknown main item tag 0x0 [ 293.305917][ T10] shield 0003:0955:7214.0050: unknown main item tag 0x0 [ 293.320058][ T10] shield 0003:0955:7214.0050: item fetching failed at offset 3/5 [ 293.332980][ T10] shield 0003:0955:7214.0050: Parse failed [ 293.339152][ T10] shield 0003:0955:7214.0050: probe with driver shield failed with error -22 [ 293.514607][ T5904] usb 4-1: USB disconnect, device number 59 [ 293.659977][ T5918] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 293.820209][ T5918] usb 6-1: Using ep0 maxpacket: 8 [ 293.826471][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.836475][ T5918] usb 6-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 293.845721][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.854657][ T24] usb 9-1: language id specifier not provided by device, defaulting to English [ 293.868198][ T5918] usb 6-1: config 0 descriptor?? [ 294.068504][ T24] uclogic 0003:256C:006D.0051: failed retrieving Huion firmware version: -71 [ 294.104562][ T24] uclogic 0003:256C:006D.0051: failed probing parameters: -71 [ 294.130743][ T24] uclogic 0003:256C:006D.0051: probe with driver uclogic failed with error -71 [ 294.162052][ T24] usb 9-1: USB disconnect, device number 14 [ 294.304083][ T5918] kye 0003:0458:501A.0052: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 294.322128][ T5918] kye 0003:0458:501A.0052: unknown main item tag 0x0 [ 294.328839][ T5918] kye 0003:0458:501A.0052: unknown main item tag 0x0 [ 294.337682][ T5918] kye 0003:0458:501A.0052: item fetching failed at offset 2/7 [ 294.345809][ T5918] kye 0003:0458:501A.0052: parse failed [ 294.352146][ T5918] kye 0003:0458:501A.0052: probe with driver kye failed with error -22 [ 294.528966][ T5918] usb 6-1: USB disconnect, device number 56 [ 294.882280][T17050] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 295.117586][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4840'. [ 295.162466][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4840'. [ 295.482650][T17088] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4849'. [ 295.521000][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4849'. [ 295.720349][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4856'. [ 295.762284][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4856'. [ 295.834685][ T30] audit: type=1400 audit(1755954299.766:977): avc: denied { read } for pid=17106 comm="syz.5.4858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 295.859951][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 295.979913][ T5897] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 296.031535][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 296.037802][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.047817][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 296.088105][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.092176][T17120] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4865'. [ 296.127639][ T10] usb 4-1: config 0 descriptor?? [ 296.139976][ T5897] usb 7-1: Using ep0 maxpacket: 16 [ 296.146412][ T5897] usb 7-1: config index 0 descriptor too short (expected 1810, got 18) [ 296.171504][ T5897] usb 7-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 296.199873][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.211211][ T5897] usb 7-1: config 0 descriptor?? [ 296.217929][ T5897] gspca_main: etoms-2.14.0 probing 102c:6151 [ 296.425013][T17103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.446395][T17103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.498082][ T5897] usb 7-1: USB disconnect, device number 49 [ 296.528692][T17148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4876'. [ 296.553596][ T10] kye 0003:0458:501A.0053: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 296.560690][ T24] kernel write not supported for file /snd/midiC2D0 (pid: 24 comm: kworker/1:0) [ 296.604374][ T10] kye 0003:0458:501A.0053: unknown main item tag 0x0 [ 296.613296][ T10] kye 0003:0458:501A.0053: unknown main item tag 0x0 [ 296.623021][ T10] kye 0003:0458:501A.0053: item fetching failed at offset 2/7 [ 296.630816][ T10] kye 0003:0458:501A.0053: parse failed [ 296.636732][ T10] kye 0003:0458:501A.0053: probe with driver kye failed with error -22 [ 296.786680][ T10] usb 4-1: USB disconnect, device number 60 [ 297.322504][ T30] audit: type=1400 audit(1755954301.256:978): avc: denied { module_load } for pid=17173 comm="syz.6.4888" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 297.519665][T17183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4892'. [ 297.571007][T17183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4892'. [ 298.042120][T17206] netlink: 'syz.3.4902': attribute type 6 has an invalid length. [ 298.079873][ T30] audit: type=1400 audit(1755954302.006:979): avc: denied { setopt } for pid=17209 comm="syz.6.4905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 298.193793][T17213] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.999249][T17241] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 299.039722][T17241] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 299.265230][ T24] kernel write not supported for file /snd/midiC2D0 (pid: 24 comm: kworker/1:0) [ 299.299874][T17261] can0: slcan on ttyS3. [ 299.352215][T17261] can0 (unregistered): slcan off ttyS3. [ 299.786361][T17285] input: syz1 as /devices/virtual/input/input74 [ 299.798019][T17287] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 300.184886][T17301] __nla_validate_parse: 11 callbacks suppressed [ 300.184902][T17301] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4947'. [ 300.240861][T17305] can0: slcan on ttyS3. [ 300.285445][T17305] can0 (unregistered): slcan off ttyS3. [ 300.352358][T17311] netlink: 'syz.6.4961': attribute type 1 has an invalid length. [ 300.381261][T17311] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4961'. [ 300.381281][T17311] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4961'. [ 300.465970][T17315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4952'. [ 300.656558][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4960'. [ 300.685613][ T30] audit: type=1400 audit(1755954304.616:980): avc: denied { listen } for pid=17334 comm="syz.8.4962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 300.725377][T17339] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 300.735666][T17339] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 300.763204][T17340] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4964'. [ 300.816649][ T30] audit: type=1326 audit(1755954304.746:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17341 comm="syz.3.4965" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb1f38ebe9 code=0x0 [ 300.953696][ T30] audit: type=1400 audit(1755954304.886:982): avc: denied { create } for pid=17352 comm="syz.8.4970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 301.009660][ T30] audit: type=1400 audit(1755954304.886:983): avc: denied { sys_admin } for pid=17352 comm="syz.8.4970" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 301.030652][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.302921][T17360] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 301.309457][T17360] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 301.332676][T17360] vhci_hcd vhci_hcd.0: Device attached [ 301.343191][T17361] usbip_core: unknown command [ 301.348090][T17361] vhci_hcd: unknown pdu 2648949368 [ 301.370784][T17361] usbip_core: unknown command [ 301.375821][ T2967] vhci_hcd: stop threads [ 301.384291][ T2967] vhci_hcd: release socket [ 301.395308][ T2967] vhci_hcd: disconnect device [ 301.541421][T17371] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4977'. [ 301.697773][T17374] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4988'. [ 301.953802][T17383] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4981'. [ 302.210819][T17398] netlink: 'syz.3.4989': attribute type 1 has an invalid length. [ 302.228942][T17398] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4989'. [ 302.549924][ T24] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 302.712819][ T24] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 302.721553][ T24] usb 9-1: config 0 has no interface number 0 [ 302.731895][ T24] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 302.741296][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.755680][ T24] usb 9-1: config 0 descriptor?? [ 302.765495][ T24] usb 9-1: selecting invalid altsetting 1 [ 302.777542][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 302.784941][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 302.838701][ T24] DVB: Unable to find symbol cx22700_attach() [ 302.900160][ T24] DVB: Unable to find symbol tda10046_attach() [ 302.916356][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 302.947660][ T30] audit: type=1400 audit(1755954306.876:984): avc: denied { getopt } for pid=17435 comm="syz.7.5007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 302.992865][ T5897] usb 9-1: USB disconnect, device number 15 [ 303.341123][ T5859] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 303.945178][ T5859] Bluetooth: hci4: link tx timeout [ 303.950567][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.958428][ T5859] Bluetooth: hci4: link tx timeout [ 303.963726][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.971500][ T5859] Bluetooth: hci4: link tx timeout [ 303.976603][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.984448][ T5859] Bluetooth: hci4: link tx timeout [ 303.989549][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.997295][ T5859] Bluetooth: hci4: link tx timeout [ 304.002539][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.586526][ T30] audit: type=1326 audit(1755954309.516:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17571 comm="syz.6.5066" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f551a98ebe9 code=0x0 [ 305.632660][ T5897] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 305.817947][ T5897] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 305.827096][ T5897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.838200][ T5897] usb 9-1: config 0 descriptor?? [ 305.845759][ T5897] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 306.010196][ T5859] Bluetooth: hci4: command 0x0406 tx timeout [ 306.057926][ T5897] gp8psk: usb in 128 operation failed. [ 306.276987][ T5897] gp8psk: FW Version = 0.00.0 (0x0) Build 2000/00/00 [ 306.484535][ T5897] gp8psk: usb in 149 operation failed. [ 306.492065][ T5897] gp8psk: failed to get FPGA version [ 306.499860][ T5897] gp8psk: usb in 138 operation failed. [ 306.505322][ T5897] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 306.529935][ T5897] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 306.540108][ T5897] usb 9-1: USB disconnect, device number 16 [ 307.082633][ T30] audit: type=1400 audit(1755954311.006:986): avc: denied { execstack } for pid=17596 comm="syz.6.5086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 307.104147][T17597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.371786][ T5169] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 307.380222][ T5169] Bluetooth: hci3: Injecting HCI hardware error event [ 307.387189][ T5859] Bluetooth: hci3: hardware error 0x00 [ 307.992698][ T30] audit: type=1400 audit(1755954311.926:987): avc: denied { watch watch_reads } for pid=17653 comm="syz.8.5103" path="pipe:[64252]" dev="pipefs" ino=64252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 308.016774][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.040018][T17654] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 308.564343][ T30] audit: type=1400 audit(1755954312.496:988): avc: denied { write } for pid=17694 comm="syz.5.5122" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 308.849982][T10239] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 308.960544][T17707] pimreg: entered allmulticast mode [ 308.971396][ T25] block nbd0: Possible stuck request ffff888026815080: control (read@0,1024B). Runtime 240 seconds [ 308.982266][ T25] block nbd0: Possible stuck request ffff888026815240: control (read@1024,1024B). Runtime 240 seconds [ 308.993451][ T25] block nbd0: Possible stuck request ffff888026815400: control (read@2048,1024B). Runtime 240 seconds [ 309.004584][ T25] block nbd0: Possible stuck request ffff8880268155c0: control (read@3072,1024B). Runtime 240 seconds [ 309.016078][T17707] pimreg: left allmulticast mode [ 309.021015][T10239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 309.021049][T10239] usb 4-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 309.021069][T10239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.022349][T10239] usb 4-1: config 0 descriptor?? [ 309.449908][ T5859] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 309.477121][T10239] elecom 0003:056E:00E6.0054: unknown main item tag 0x0 [ 309.488841][T10239] elecom 0003:056E:00E6.0054: unknown main item tag 0x0 [ 309.530698][T10239] elecom 0003:056E:00E6.0054: unknown main item tag 0x1 [ 309.566231][T10239] elecom 0003:056E:00E6.0054: unexpected long global item [ 309.590294][T10239] elecom 0003:056E:00E6.0054: probe with driver elecom failed with error -22 [ 309.765788][T10239] usb 4-1: USB disconnect, device number 61 [ 311.357274][T17739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.753288][ T30] audit: type=1400 audit(1755954315.686:989): avc: denied { create } for pid=17762 comm="syz.8.5154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 311.781386][T10239] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 311.803930][ T30] audit: type=1400 audit(1755954315.706:990): avc: denied { getopt } for pid=17762 comm="syz.8.5154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 311.859950][ T5904] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 311.941623][T10239] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 311.962049][T10239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.971379][T10239] usb 4-1: config 0 descriptor?? [ 311.979100][T10239] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 311.990125][ T10] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 312.028807][ T5904] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 312.039503][ T5904] usb 6-1: config 0 has no interface number 0 [ 312.054138][ T5904] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 312.064056][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.078514][T17770] __nla_validate_parse: 2 callbacks suppressed [ 312.078530][T17770] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5157'. [ 312.084041][ T5904] usb 6-1: Product: syz [ 312.128640][ T5904] usb 6-1: Manufacturer: syz [ 312.138804][ T5904] usb 6-1: SerialNumber: syz [ 312.156823][ T5904] usb 6-1: config 0 descriptor?? [ 312.169996][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 312.176684][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.210366][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.222908][T10239] gp8psk: usb in 128 operation failed. [ 312.249728][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 312.269309][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.286489][ T10] usb 7-1: config 0 descriptor?? [ 312.291898][ T30] audit: type=1326 audit(1755954316.226:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17775 comm="syz.7.5160" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7908b8ebe9 code=0x0 [ 312.375923][ T5904] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 312.390169][ T5904] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 312.411024][ T5904] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 312.423660][ T5904] usb 6-1: media controller created [ 312.437358][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 312.440856][T10239] gp8psk: FW Version = 0.00.0 (0x0) Build 2000/00/00 [ 312.654241][T10239] gp8psk: usb in 149 operation failed. [ 312.659914][T10239] gp8psk: failed to get FPGA version [ 312.665564][T10239] gp8psk: usb in 138 operation failed. [ 312.671181][T10239] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 312.681734][T10239] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 312.693406][T10239] usb 4-1: USB disconnect, device number 62 [ 312.733297][ T10] apple 0003:05AC:029C.0055: unknown main item tag 0x0 [ 312.741326][ T10] apple 0003:05AC:029C.0055: unknown main item tag 0x0 [ 312.748275][ T10] apple 0003:05AC:029C.0055: unknown main item tag 0x0 [ 312.758370][ T10] apple 0003:05AC:029C.0055: unknown main item tag 0x0 [ 312.773229][ T10] apple 0003:05AC:029C.0055: unknown main item tag 0x0 [ 312.787539][ T10] apple 0003:05AC:029C.0055: unknown main item tag 0x0 [ 312.798046][ T10] apple 0003:05AC:029C.0055: unknown main item tag 0x0 [ 312.820781][ T10] apple 0003:05AC:029C.0055: hidraw0: USB HID v0.00 Device [HID 05ac:029c] on usb-dummy_hcd.6-1/input0 [ 312.937333][ T10] usb 7-1: USB disconnect, device number 50 [ 313.185008][T17787] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5164'. [ 313.418723][T17801] netlink: 'syz.8.5169': attribute type 1 has an invalid length. [ 313.530370][ T5904] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 313.574939][ T5904] usb 6-1: USB disconnect, device number 57 [ 313.729993][ T5918] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 313.750960][T10239] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 313.903582][ T5918] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 313.918111][ T5918] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.921697][T10239] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.927014][ T5918] usb 9-1: Product: syz [ 313.942888][ T5918] usb 9-1: Manufacturer: syz [ 313.947498][ T5918] usb 9-1: SerialNumber: syz [ 313.952828][T10239] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.953187][ T5918] usb 9-1: config 0 descriptor?? [ 313.983136][T10239] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 314.009898][T10239] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.032717][T10239] usb 7-1: config 0 descriptor?? [ 314.032739][T17822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5180'. [ 314.133800][T17826] input: syz0 as /devices/virtual/input/input75 [ 314.257224][ T5918] usb 9-1: USB disconnect, device number 17 [ 314.654102][T10239] hid-led 0003:27B8:01ED.0056: probe with driver hid-led failed with error -71 [ 314.688931][T10239] usb 7-1: USB disconnect, device number 51 [ 314.696843][T17862] netlink: 'syz.7.5199': attribute type 2 has an invalid length. [ 314.707286][T17862] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5199'. [ 315.250013][T10239] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 315.429542][T10239] usb 4-1: Using ep0 maxpacket: 8 [ 315.440475][T10239] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 315.465438][T10239] usb 4-1: config 179 has no interface number 0 [ 315.481827][T10239] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 315.505833][T10239] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 315.559852][T10239] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 315.589834][T10239] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 315.633887][T10239] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 315.652799][T10239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.670695][T17882] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 315.710659][ T975] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 315.879843][ T975] usb 9-1: Using ep0 maxpacket: 16 [ 315.896347][ T975] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 315.913018][ T24] usb 4-1: USB disconnect, device number 63 [ 315.921708][ T975] usb 9-1: config 0 has no interface number 0 [ 315.933793][ T30] audit: type=1326 audit(1755954319.866:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.6.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551a98ebe9 code=0x7ffc0000 [ 315.980322][ T975] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 315.993687][ T30] audit: type=1326 audit(1755954319.866:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.6.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551a98ebe9 code=0x7ffc0000 [ 316.017061][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.019916][ T975] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.027128][ T30] audit: type=1326 audit(1755954319.866:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.6.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f551a98ebe9 code=0x7ffc0000 [ 316.069964][ T975] usb 9-1: Product: syz [ 316.074153][ T975] usb 9-1: Manufacturer: syz [ 316.078731][ T975] usb 9-1: SerialNumber: syz [ 316.104098][ T30] audit: type=1326 audit(1755954319.866:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.6.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551a98ebe9 code=0x7ffc0000 [ 316.148933][ T975] usb 9-1: config 0 descriptor?? [ 316.158302][ T30] audit: type=1326 audit(1755954319.866:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.6.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551a98ebe9 code=0x7ffc0000 [ 316.181705][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.189486][ T975] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 316.198887][ T30] audit: type=1326 audit(1755954319.896:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.6.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f551a98ebe9 code=0x7ffc0000 [ 316.233816][ T30] audit: type=1326 audit(1755954319.896:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.6.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551a98ebe9 code=0x7ffc0000 [ 316.268877][ T30] audit: type=1326 audit(1755954319.896:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.6.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551a98ebe9 code=0x7ffc0000 [ 316.295057][ T30] audit: type=1326 audit(1755954319.896:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.6.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f551a98ebe9 code=0x7ffc0000 [ 316.346302][T17932] netlink: 'syz.6.5232': attribute type 322 has an invalid length. [ 316.379715][ T30] audit: type=1326 audit(1755954319.896:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17915 comm="syz.6.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551a98ebe9 code=0x7ffc0000 [ 316.480057][ T5897] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 316.483436][T17938] binder: 17936:17938 ioctl c0306201 200000000640 returned -22 [ 316.630003][ T5897] usb 6-1: Using ep0 maxpacket: 8 [ 316.641165][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.654761][ T5897] usb 6-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 316.658379][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.674085][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.674798][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.688958][ T5897] usb 6-1: config 0 descriptor?? [ 316.798398][ T24] hid_parser_main: 1264 callbacks suppressed [ 316.798417][ T24] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 316.855622][ T24] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 316.875433][ T24] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 316.899842][ T24] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 316.907467][ T24] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 316.915543][ T24] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 316.924592][ T24] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 316.932223][ T24] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 316.939991][ T24] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 316.947395][ T24] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 316.956201][ T24] hid-generic 0000:0000:0000.0057: hidraw0: HID v0.03 Device [syz1] on syz1 [ 317.029179][ T975] gspca_spca1528: reg_w err -71 [ 317.046018][T17967] sctp: [Deprecated]: syz.7.5247 (pid 17967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 317.046018][T17967] Use struct sctp_sack_info instead [ 317.062540][ T975] spca1528 9-1:0.1: probe with driver spca1528 failed with error -71 [ 317.072205][ T975] usb 9-1: USB disconnect, device number 18 [ 317.092135][T17969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5249'. [ 317.128319][ T5897] kye 0003:0458:501A.0058: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 317.161595][ T5897] kye 0003:0458:501A.0058: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.5-1/input0 [ 317.184448][ T5897] kye 0003:0458:501A.0058: tablet-enabling feature report not found [ 317.203634][ T5897] kye 0003:0458:501A.0058: tablet enabling failed [ 317.346373][ T975] usb 6-1: USB disconnect, device number 58 [ 317.592346][T17985] netlink: 'syz.8.5257': attribute type 14 has an invalid length. [ 317.615185][T17986] netlink: 'syz.7.5256': attribute type 1 has an invalid length. [ 317.644183][T17986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.770402][T17994] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 317.776536][T17994] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 317.967113][T18006] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5267'. [ 317.976473][T18006] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5267'. [ 317.997338][T18006] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5267'. [ 318.007418][T18006] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5267'. [ 318.700105][ T5897] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 318.874011][ T5897] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.899882][ T5897] usb 9-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 318.909024][ T5897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.918101][ T5897] usb 9-1: config 0 descriptor?? [ 319.351636][ T5897] itetech 0003:258A:6A88.0059: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.8-1/input0 [ 319.531671][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 319.537824][ T5169] Bluetooth: hci5: command 0x1003 tx timeout [ 319.578343][ T5918] usb 9-1: USB disconnect, device number 19 [ 319.790497][T18068] dummy0: entered allmulticast mode [ 319.849950][ T5859] Bluetooth: hci4: command 0x0406 tx timeout [ 321.021879][T18119] SELinux: failed to load policy [ 321.180045][T18128] netlink: 748 bytes leftover after parsing attributes in process `syz.7.5321'. [ 321.218850][T18128] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 321.796946][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 321.796961][ T30] audit: type=1326 audit(1755954325.726:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18142 comm="syz.5.5328" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f085f98ebe9 code=0x0 [ 321.880727][ T24] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 321.930844][ T5859] Bluetooth: hci4: command 0x0406 tx timeout [ 322.059992][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 322.072018][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.084775][ T24] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 322.095151][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.104522][ T24] usb 7-1: config 0 descriptor?? [ 322.370863][T18159] sctp: [Deprecated]: syz.8.5335 (pid 18159) Use of int in max_burst socket option. [ 322.370863][T18159] Use struct sctp_assoc_value instead [ 322.487707][ T30] audit: type=1400 audit(1755954326.416:1010): avc: denied { ioctl } for pid=18164 comm="syz.8.5338" path="socket:[205403]" dev="sockfs" ino=205403 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 322.519577][ T24] mcp2221 0003:04D8:00DD.005A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 322.595416][ T5918] libceph: connect (1)[c::]:6789 error -101 [ 322.619639][ T5918] libceph: mon0 (1)[c::]:6789 connect error [ 322.634525][ T5918] libceph: connect (1)[c::]:6789 error -101 [ 322.645993][ T5918] libceph: mon0 (1)[c::]:6789 connect error [ 322.695479][T18177] tun0: tun_chr_ioctl cmd 1074025675 [ 322.702560][T18177] tun0: persist disabled [ 322.911391][ T5918] libceph: connect (1)[c::]:6789 error -101 [ 322.922028][ T5918] libceph: mon0 (1)[c::]:6789 connect error [ 322.936156][ T975] usb 7-1: USB disconnect, device number 52 [ 323.030076][ T5897] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 323.192977][ T5897] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 323.202170][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.210312][ T5897] usb 6-1: Product: syz [ 323.214464][ T5897] usb 6-1: Manufacturer: syz [ 323.219047][ T5897] usb 6-1: SerialNumber: syz [ 323.234406][ T5897] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 323.248028][ T975] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 323.429251][T18171] ceph: No mds server is up or the cluster is laggy [ 323.450211][ T5918] libceph: connect (1)[c::]:6789 error -101 [ 323.457650][ T5918] libceph: mon0 (1)[c::]:6789 connect error [ 324.855561][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5359'. [ 324.932781][T18212] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5359'. [ 324.986627][T13583] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.089927][T13583] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.098669][T13583] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.223147][T18219] macsec1: entered promiscuous mode [ 325.320009][ T10] usb 6-1: USB disconnect, device number 59 [ 325.321113][T13583] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.327116][ T975] usb 6-1: Service connection timeout for: 256 [ 325.349886][ T975] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 325.357969][ T975] ath9k_htc: Failed to initialize the device [ 325.364915][ T10] usb 6-1: ath9k_htc: USB layer deinitialized [ 325.450084][ T5918] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 325.555995][T18231] netlink: 'syz.7.5369': attribute type 10 has an invalid length. [ 325.565834][ T30] audit: type=1400 audit(1755954329.496:1011): avc: denied { mounton } for pid=18229 comm="syz.8.5368" path=2F70726F632F3730372F6E65742F70666B6579202864656C6574656429 dev="proc" ino=4026534414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 325.604547][T18231] bridge0: port 3(netdevsim0) entered blocking state [ 325.609856][ T5918] usb 7-1: Using ep0 maxpacket: 16 [ 325.632738][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.654268][T18231] bridge0: port 3(netdevsim0) entered disabled state [ 325.660731][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.680160][T18231] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 325.698145][ T5918] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 325.700401][T18236] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5370'. [ 325.738868][ T5918] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 325.740405][T18231] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 325.766073][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.801754][ T5918] usb 7-1: config 0 descriptor?? [ 325.805791][T18236] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.159114][T18181] Set syz1 is full, maxelem 65536 reached [ 326.238433][ T5918] microsoft 0003:045E:07DA.005B: ignoring exceeding usage max [ 326.266973][ T5918] hid_parser_main: 80 callbacks suppressed [ 326.266993][ T5918] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 326.293157][T18266] netlink: 'syz.5.5386': attribute type 10 has an invalid length. [ 326.335604][ T5918] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 326.353130][ T5918] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 326.373295][ T5918] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 326.395167][ T5918] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 326.435683][ T5918] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.005B/input/input76 [ 326.492246][T18275] kvm: apic: phys broadcast and lowest prio [ 326.593214][ T5918] microsoft 0003:045E:07DA.005B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 326.619098][ T5918] usb 7-1: USB disconnect, device number 53 [ 326.812342][ T30] audit: type=1400 audit(1755954330.736:1012): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 327.260120][ T5918] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 327.313550][T18322] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5411'. [ 327.349528][T18322] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.431074][ T5918] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 327.448116][ T5918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.479870][ T5918] usb 4-1: config 0 has no interface number 0 [ 327.498407][ T5918] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 327.539009][ T5918] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.576887][T18337] netlink: 88 bytes leftover after parsing attributes in process `syz.6.5417'. [ 327.578920][ T5918] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 327.596855][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.605774][ T5918] usb 4-1: Product: syz [ 327.610946][ T5918] usb 4-1: Manufacturer: syz [ 327.615583][ T5918] usb 4-1: SerialNumber: syz [ 327.647477][ T5918] usb 4-1: config 0 descriptor?? [ 327.686930][T18340] macsec2: entered promiscuous mode [ 327.727428][ T30] audit: type=1400 audit(1755954331.656:1013): avc: denied { listen } for pid=18342 comm="syz.6.5421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 328.285391][ T5918] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.117/input/input77 [ 328.390971][T18365] batadv_slave_0: entered promiscuous mode [ 328.411628][T18363] batadv_slave_0: left promiscuous mode [ 328.527081][T18375] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5436'. [ 328.569206][ T975] usb 4-1: USB disconnect, device number 64 [ 328.647821][ T30] audit: type=1400 audit(1755954332.576:1014): avc: denied { write } for pid=18378 comm="syz.6.5438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 329.059862][ T5918] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 329.175212][T18404] IPVS: persistence engine module ip_vs_pe_ not found [ 329.229845][ T5918] usb 7-1: Using ep0 maxpacket: 32 [ 329.236263][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.265719][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.285761][ T5918] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 329.321532][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.349102][ T30] audit: type=1400 audit(1755954333.276:1015): avc: denied { ioctl } for pid=18414 comm="syz.5.5454" path="socket:[215147]" dev="sockfs" ino=215147 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 329.374880][ T5918] usb 7-1: config 0 descriptor?? [ 329.531446][T18430] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5461'. [ 329.659957][ T975] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 329.792570][ T5918] savu 0003:1E7D:2D5A.005C: unknown main item tag 0x5 [ 329.821049][ T975] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.829900][ T5918] savu 0003:1E7D:2D5A.005C: bogus close delimiter [ 329.833393][ T975] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 329.837529][ T5918] savu 0003:1E7D:2D5A.005C: item 0 0 2 10 parsing failed [ 329.865813][ T975] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 329.876500][ T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.886076][ T975] usb 6-1: Product: syz [ 329.895060][ T5918] savu 0003:1E7D:2D5A.005C: parse failed [ 329.899836][ T975] usb 6-1: Manufacturer: syz [ 329.915019][ T5918] savu 0003:1E7D:2D5A.005C: probe with driver savu failed with error -22 [ 329.915973][ T975] usb 6-1: SerialNumber: syz [ 330.074963][T18445] bridge1: entered allmulticast mode [ 330.092702][ T5918] usb 7-1: USB disconnect, device number 54 [ 330.163741][T18424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.175337][T18424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.241360][ T975] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 330.272176][ T975] usb 6-1: USB disconnect, device number 60 [ 330.889906][ T5904] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 331.041554][ T5904] usb 6-1: Using ep0 maxpacket: 8 [ 331.051888][ T5904] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 331.066862][ T5904] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 331.097651][ T5904] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 331.099830][ T10] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 331.130301][ T5904] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 331.159892][ T5904] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 331.190028][ T5904] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.210756][ T5169] Bluetooth: hci4: command 0x0406 tx timeout [ 331.227039][ T5904] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 331.242419][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.294315][ T10] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 331.311593][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.338104][ T10] usb 4-1: config 0 descriptor?? [ 331.510629][ T5904] usb 6-1: usb_control_msg returned -71 [ 331.516265][ T5904] usbtmc 6-1:16.0: can't read capabilities [ 331.525229][ T5904] usb 6-1: USB disconnect, device number 61 [ 331.552733][ T10] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 331.753781][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 331.777872][ T10] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 331.789914][ T10] [drm] Initialized udl on minor 2 [ 331.812790][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 331.826431][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 331.833363][T10239] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 331.863148][T10239] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 331.873361][ T10] usb 4-1: USB disconnect, device number 65 [ 331.879577][T10239] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 332.523342][T18495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5492'. [ 332.603967][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5497'. [ 332.742382][ T30] audit: type=1400 audit(1755954336.666:1016): avc: denied { getopt } for pid=18514 comm="syz.6.5504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 332.837958][T18443] Set syz1 is full, maxelem 65536 reached [ 332.851751][T18523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.921531][ T5904] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 333.040045][ T30] audit: type=1400 audit(1755954336.936:1017): avc: denied { node_bind } for pid=18528 comm="syz.7.5509" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 333.107838][ T5904] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.130908][ T5904] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 333.174414][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.192525][ T5904] usb 6-1: config 0 descriptor?? [ 333.199363][ T5904] pwc: Askey VC010 type 2 USB webcam detected. [ 333.573614][T18548] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5517'. [ 333.590034][ T10] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 333.602832][T18550] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.622577][ T5904] pwc: recv_control_msg error -32 req 02 val 2b00 [ 333.642091][T18552] unsupported nla_type 52263 [ 333.697513][T18550] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.755500][ T10] usb 4-1: config 0 has an invalid interface number: 93 but max is 0 [ 333.779294][T18550] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.787632][ T10] usb 4-1: config 0 has no interface number 0 [ 333.823625][ T10] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 333.848088][ T5904] pwc: recv_control_msg error -71 req 02 val 2c00 [ 333.853121][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.859181][ T5904] pwc: recv_control_msg error -71 req 04 val 1000 [ 333.874639][T18550] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.878678][ T10] usb 4-1: Product: syz [ 333.885580][ T5904] pwc: recv_control_msg error -71 req 04 val 1300 [ 333.897441][ T10] usb 4-1: Manufacturer: syz [ 333.907990][ T10] usb 4-1: SerialNumber: syz [ 333.913594][ T5904] pwc: recv_control_msg error -71 req 04 val 1400 [ 333.931535][ T5904] pwc: recv_control_msg error -71 req 02 val 2000 [ 333.934430][ T10] usb 4-1: config 0 descriptor?? [ 333.960188][ T5904] pwc: recv_control_msg error -71 req 02 val 2100 [ 333.990684][ T5904] pwc: recv_control_msg error -71 req 04 val 1500 [ 334.004137][ T5904] pwc: recv_control_msg error -71 req 02 val 2500 [ 334.020291][ T5904] pwc: recv_control_msg error -71 req 02 val 2400 [ 334.037182][ T5904] pwc: recv_control_msg error -71 req 02 val 2600 [ 334.047260][ T5904] pwc: recv_control_msg error -71 req 02 val 2900 [ 334.057503][T13551] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.060067][ T5904] pwc: recv_control_msg error -71 req 02 val 2800 [ 334.079840][T13551] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.106549][T13551] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.119986][ T5904] pwc: recv_control_msg error -71 req 04 val 1100 [ 334.132162][T13551] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.151497][ T5904] pwc: recv_control_msg error -71 req 04 val 1200 [ 334.159687][ T5904] pwc: Registered as video103. [ 334.180630][ T5904] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input78 [ 334.203574][ T10] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 334.215520][ T5904] usb 6-1: USB disconnect, device number 62 [ 334.246285][ T10] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 334.266289][ T10] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 334.299877][ T10] usb 4-1: media controller created [ 334.321007][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.405117][ T10] DVB: Unable to find symbol dib7000p_attach() [ 334.414047][ T10] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 334.425300][ T10] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 334.434792][ T10] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 334.447284][ T10] usb 4-1: media controller created [ 334.471253][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.483215][ T10] dib0700: the master dib7090 has to be initialized first [ 334.492103][ T10] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 334.501621][T18575] netlink: 'syz.5.5529': attribute type 25 has an invalid length. [ 334.509522][T18575] netlink: 'syz.5.5529': attribute type 8 has an invalid length. [ 334.640294][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 334.646566][ T10] Registered IR keymap rc-empty [ 334.663499][ T10] dvb-usb: could not initialize remote control. [ 334.724589][ T10] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 334.766875][ T10] usb 4-1: USB disconnect, device number 66 [ 334.787878][ T10] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 334.865057][ T30] audit: type=1404 audit(1755954338.796:1018): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 334.922490][ T30] audit: type=1400 audit(1755954338.826:1019): avc: denied { read write } for pid=10998 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 335.004175][ T30] audit: type=1400 audit(1755954338.876:1020): avc: denied { read write } for pid=18589 comm="syz.7.5535" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 335.044360][ T30] audit: type=1400 audit(1755954338.926:1021): avc: denied { read write } for pid=9029 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 335.151103][ T30] audit: type=1400 audit(1755954338.956:1022): avc: denied { read write } for pid=7632 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 335.215964][T18604] vlan4: entered promiscuous mode [ 335.222605][T18604] bridge0: entered promiscuous mode [ 335.228018][T18604] vlan4: entered allmulticast mode [ 335.267570][T18604] bridge0: entered allmulticast mode [ 335.303378][ T30] audit: type=1400 audit(1755954338.976:1023): avc: denied { read write } for pid=9029 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 335.433327][ T30] audit: type=1400 audit(1755954339.016:1024): avc: denied { create } for pid=18594 comm="syz.6.5538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 335.537622][T18614] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5549'. [ 335.568854][ T30] audit: type=1400 audit(1755954339.016:1025): avc: denied { map_create } for pid=18594 comm="syz.6.5538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 335.599370][T18620] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5549'. [ 335.693412][T18623] veth0_to_team: entered promiscuous mode [ 335.699190][T18623] veth0_to_team: entered allmulticast mode [ 335.919661][T18640] netlink: 'syz.5.5558': attribute type 8 has an invalid length. [ 337.763648][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 337.763664][ T30] audit: type=1400 audit(1755954341.696:1117): avc: denied { read write } for pid=18719 comm="syz.7.5595" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 337.835385][ T30] audit: type=1400 audit(1755954341.736:1118): avc: denied { read write } for pid=14830 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 337.926717][ T30] audit: type=1400 audit(1755954341.746:1119): avc: denied { read write } for pid=10998 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 337.950973][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.994792][ T30] audit: type=1400 audit(1755954341.856:1120): avc: denied { read write } for pid=7632 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 338.132525][ T30] audit: type=1400 audit(1755954341.906:1121): avc: denied { read write } for pid=14830 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 338.207760][ T30] audit: type=1400 audit(1755954342.046:1122): avc: denied { read write } for pid=7632 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 338.322928][ T30] audit: type=1400 audit(1755954342.076:1123): avc: denied { read write } for pid=5845 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 338.411569][ T30] audit: type=1400 audit(1755954342.096:1124): avc: denied { read } for pid=18732 comm="syz.5.5601" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 338.508204][ T30] audit: type=1400 audit(1755954342.126:1125): avc: denied { map_create } for pid=18734 comm="syz.3.5602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 338.568403][ T30] audit: type=1400 audit(1755954342.126:1126): avc: denied { prog_load } for pid=18734 comm="syz.3.5602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 338.815648][T18780] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5624'. [ 339.044603][T18791] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5628'. [ 339.053953][ T25] block nbd0: Possible stuck request ffff888026815080: control (read@0,1024B). Runtime 270 seconds [ 339.064960][ T25] block nbd0: Possible stuck request ffff888026815240: control (read@1024,1024B). Runtime 270 seconds [ 339.076122][ T25] block nbd0: Possible stuck request ffff888026815400: control (read@2048,1024B). Runtime 270 seconds [ 339.087206][ T25] block nbd0: Possible stuck request ffff8880268155c0: control (read@3072,1024B). Runtime 270 seconds [ 339.429198][T18817] sock: sock_set_timeout: `syz.3.5641' (pid 18817) tries to set negative timeout [ 340.877221][T18902] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5681'. [ 341.940556][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 342.776404][ T30] kauditd_printk_skb: 587 callbacks suppressed [ 342.776420][ T30] audit: type=1400 audit(1755954346.706:1714): avc: denied { setattr } for pid=7632 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 342.854214][ T7632] audit: audit_backlog=65 > audit_backlog_limit=64 [ 342.859888][ T30] audit: type=1400 audit(1755954346.706:1715): avc: denied { setattr } for pid=7632 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 342.883798][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.909948][ T7632] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 342.917626][ T7632] audit: backlog limit exceeded [ 342.938711][ T9029] audit: audit_backlog=65 > audit_backlog_limit=64 [ 342.959913][ T9029] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 342.960319][ T7632] audit: audit_backlog=65 > audit_backlog_limit=64 [ 342.975890][T18978] audit: audit_backlog=65 > audit_backlog_limit=64 [ 342.982532][T18978] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 345.693135][T19130] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5789'. [ 345.741827][T19130] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5789'. [ 346.809215][T19174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.852674][T19174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.033870][T13580] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.056371][T13580] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.087658][T13580] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 347.109941][T13536] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.118869][T13536] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.169959][T13536] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 347.178835][T13536] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.230164][T13536] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.239055][T13536] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 347.263209][T19194] netlink: 'syz.3.5819': attribute type 4 has an invalid length. [ 347.321323][T19195] sch_fq: defrate 0 ignored. [ 347.334360][T13536] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.380164][T13536] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.389054][T13536] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 347.431387][T19201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5823'. [ 347.781483][ T30] kauditd_printk_skb: 5206 callbacks suppressed [ 347.781499][ T30] audit: type=1400 audit(1755954351.716:6849): avc: denied { read write } for pid=14830 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 347.812010][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.825960][ T9029] audit: audit_backlog=65 > audit_backlog_limit=64 [ 347.848999][ T9029] audit: audit_lost=28 audit_rate_limit=0 audit_backlog_limit=64 [ 347.856990][ T7632] audit: audit_backlog=65 > audit_backlog_limit=64 [ 347.866477][ T7632] audit: audit_lost=29 audit_rate_limit=0 audit_backlog_limit=64 [ 347.876871][T14830] audit: audit_backlog=65 > audit_backlog_limit=64 [ 347.884009][ T30] audit: type=1400 audit(1755954351.716:6850): avc: denied { read write } for pid=10998 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 347.912330][ T7632] audit: backlog limit exceeded [ 347.917975][ T7632] audit: audit_backlog=65 > audit_backlog_limit=64 [ 347.926303][ T9029] audit: backlog limit exceeded [ 347.939873][T19230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19230 comm=syz.7.5837 [ 348.710519][T19260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 348.717799][T19260] IPv6: NLM_F_CREATE should be set when creating new route [ 348.725031][T19260] IPv6: NLM_F_CREATE should be set when creating new route [ 348.812091][T19260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 348.965375][T19270] bond0: entered promiscuous mode [ 348.983203][T19270] bond_slave_0: entered promiscuous mode [ 349.014493][T19270] bond_slave_1: entered promiscuous mode [ 349.042210][T19270] bond0: left promiscuous mode [ 349.047015][T19270] bond_slave_0: left promiscuous mode [ 349.097826][T19270] bond_slave_1: left promiscuous mode [ 349.281898][T19281] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5860'. [ 349.863018][T19305] bond0: entered promiscuous mode [ 349.879936][T19305] bond_slave_0: entered promiscuous mode [ 349.900228][T19305] bond_slave_1: entered promiscuous mode [ 349.917672][T19305] bond0: left promiscuous mode [ 349.929365][T19305] bond_slave_0: left promiscuous mode [ 349.941613][T19305] bond_slave_1: left promiscuous mode [ 350.884774][T19329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.923669][T19329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.030447][T19329] veth0_macvtap: left allmulticast mode [ 351.074894][T13536] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.114000][T13536] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 351.150067][T13536] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.167188][T13536] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 351.195062][T13536] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.245191][T13536] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 351.277718][T13536] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.319055][T13536] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 352.790129][ T30] kauditd_printk_skb: 5570 callbacks suppressed [ 352.790144][ T30] audit: type=1400 audit(1755954356.726:12276): avc: denied { setattr } for pid=7632 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 352.842425][ T7632] audit: audit_backlog=65 > audit_backlog_limit=64 [ 352.849030][ T30] audit: type=1400 audit(1755954356.756:12277): avc: denied { setattr } for pid=7632 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 352.872501][ T7632] audit: audit_lost=79 audit_rate_limit=0 audit_backlog_limit=64 [ 352.881846][ T7632] audit: backlog limit exceeded [ 352.888008][ T7632] audit: audit_backlog=65 > audit_backlog_limit=64 [ 352.896096][ T7632] audit: audit_lost=80 audit_rate_limit=0 audit_backlog_limit=64 [ 352.923150][ T30] audit: type=1400 audit(1755954356.756:12278): avc: denied { setattr } for pid=7632 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 352.956774][ T7632] audit: backlog limit exceeded [ 352.970775][ T7632] audit: audit_backlog=65 > audit_backlog_limit=64 [ 354.410032][ T31] INFO: task poweroff:13235 blocked for more than 143 seconds. [ 354.439821][ T31] Not tainted syzkaller #0 [ 354.458202][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 354.487378][ T31] task:poweroff state:D stack:25656 pid:13235 tgid:13235 ppid:5203 task_flags:0x400000 flags:0x00004002 [ 354.529930][ T31] Call Trace: [ 354.533236][ T31] [ 354.536176][ T31] __schedule+0x1190/0x5de0 [ 354.551633][ T31] ? __flush_work+0x7f2/0xcc0 [ 354.556363][ T31] ? __pfx___schedule+0x10/0x10 [ 354.561306][ T31] ? inode_to_bdi+0x9e/0x160 [ 354.565901][ T31] ? filemap_fdatawrite_wbc+0x81/0x160 [ 354.571861][ T31] ? schedule+0x2d7/0x3a0 [ 354.576195][ T31] ? rcu_is_watching+0x12/0xc0 [ 354.589834][ T31] ? lock_release+0x201/0x2f0 [ 354.599816][ T31] ? sync_bdevs+0xfd/0x360 [ 354.604266][ T31] schedule+0xe7/0x3a0 [ 354.617930][ T31] schedule_preempt_disabled+0x13/0x30 [ 354.631033][ T31] __mutex_lock+0x81b/0x1060 [ 354.645827][ T31] ? sync_bdevs+0x1a9/0x360 [ 354.655920][ T31] ? rcu_is_watching+0x12/0xc0 [ 354.669839][ T31] ? sync_bdevs+0xfd/0x360 [ 354.689811][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 354.694868][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 354.719835][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 354.725157][ T31] ? iput+0xd3/0x880 [ 354.729061][ T31] ? sync_bdevs+0xfd/0x360 [ 354.742164][ T31] sync_bdevs+0xfd/0x360 [ 354.751435][ T31] ksys_sync+0xb2/0x150 [ 354.755679][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 354.769927][ T31] ? do_user_addr_fault+0x843/0x1370 [ 354.785040][ T31] ? rcu_is_watching+0x12/0xc0 [ 354.798853][ T31] __do_sys_sync+0xe/0x20 [ 354.812160][ T31] do_syscall_64+0xcd/0x4c0 [ 354.825474][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.839863][ T31] RIP: 0033:0x7f08a1b2ff37 [ 354.848730][ T31] RSP: 002b:00007ffcf2377e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 354.876505][ T31] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f08a1b2ff37 [ 354.892546][ T31] RDX: ffffffffffffff88 RSI: 00007f08a1cc8e51 RDI: 00000000ffffff9c [ 354.911077][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 354.923547][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.939860][ T31] R13: 00007ffcf2377fc8 R14: 00007f08a1d12000 R15: 000056355482dd98 [ 354.955453][ T31] [ 354.960789][ T31] INFO: lockdep is turned off. [ 354.974011][ T31] NMI backtrace for cpu 0 [ 354.974026][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 354.974046][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.974057][ T31] Call Trace: [ 354.974063][ T31] [ 354.974069][ T31] dump_stack_lvl+0x116/0x1f0 [ 354.974092][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 354.974114][ T31] ? watchdog+0xd17/0x1260 [ 354.974133][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 354.974160][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 354.974185][ T31] watchdog+0xf0e/0x1260 [ 354.974206][ T31] ? __pfx_watchdog+0x10/0x10 [ 354.974224][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 354.974242][ T31] ? __kthread_parkme+0x19e/0x250 [ 354.974267][ T31] ? __pfx_watchdog+0x10/0x10 [ 354.974286][ T31] kthread+0x3c2/0x780 [ 354.974303][ T31] ? __pfx_kthread+0x10/0x10 [ 354.974320][ T31] ? rcu_is_watching+0x12/0xc0 [ 354.974342][ T31] ? __pfx_kthread+0x10/0x10 [ 354.974359][ T31] ret_from_fork+0x5d7/0x6f0 [ 354.974375][ T31] ? __pfx_kthread+0x10/0x10 [ 354.974392][ T31] ret_from_fork_asm+0x1a/0x30 [ 354.974419][ T31] [ 354.974425][ T31] Sending NMI from CPU 0 to CPUs 1: [ 355.095980][ C1] NMI backtrace for cpu 1 [ 355.095995][ C1] CPU: 1 UID: 0 PID: 13566 Comm: kworker/u8:48 Not tainted syzkaller #0 PREEMPT(full) [ 355.096017][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.096026][ C1] Workqueue: krdsd rds_connect_worker [ 355.096048][ C1] RIP: 0010:lock_release+0x4b/0x2f0 [ 355.096070][ C1] Code: 44 24 10 31 c0 0f 1f 44 00 00 65 8b 05 d2 7f 3e 12 83 f8 07 0f 87 38 02 00 00 89 c0 48 0f a3 05 1b 80 13 0f 0f 82 b1 01 00 00 <8b> 3d e3 b1 13 0f 85 ff 0f 84 25 01 00 00 65 8b 05 38 c1 3e 12 85 [ 355.096083][ C1] RSP: 0018:ffffc90000a081b0 EFLAGS: 00000002 [ 355.096093][ C1] RAX: 0000000000000001 RBX: ffffffff9b09d0d8 RCX: 1ffff1100c5b8ee3 [ 355.096103][ C1] RDX: 0000000000000000 RSI: ffffffff8c162880 RDI: ffffffff8df5de68 [ 355.096111][ C1] RBP: 0000000000000206 R08: 0000000000000001 R09: fffff52000141030 [ 355.096120][ C1] R10: 0000000000000206 R11: 0000000000002c10 R12: ffffffff84eb0395 [ 355.096128][ C1] R13: ffff888030af50d8 R14: ffffffff8bafed40 R15: 1ffff92000141046 [ 355.096137][ C1] FS: 0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000 [ 355.096152][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.096161][ C1] CR2: 00007fcb20194990 CR3: 00000000778df000 CR4: 00000000003526f0 [ 355.096171][ C1] Call Trace: [ 355.096175][ C1] [ 355.096183][ C1] _raw_spin_unlock_irqrestore+0x1a/0x80 [ 355.096204][ C1] debug_object_assert_init+0x1c5/0x2f0 [ 355.096226][ C1] ? __pfx_debug_object_assert_init+0x10/0x10 [ 355.096245][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 355.096260][ C1] ? rcu_is_watching+0x12/0xc0 [ 355.096277][ C1] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 355.096298][ C1] __mod_timer+0xad/0xd30 [ 355.096310][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 355.096328][ C1] ? lock_release+0x201/0x2f0 [ 355.096346][ C1] ? __pfx___mod_timer+0x10/0x10 [ 355.096358][ C1] ? _raw_spin_unlock+0x28/0x50 [ 355.096376][ C1] ? inet_ehash_insert+0x42a/0x10a0 [ 355.096395][ C1] ? __pfx_reqsk_timer_handler+0x10/0x10 [ 355.096410][ C1] ? lockdep_init_map_type+0x5c/0x280 [ 355.096424][ C1] inet_csk_reqsk_queue_hash_add+0x137/0x1e0 [ 355.096439][ C1] ? __pfx_inet_csk_reqsk_queue_hash_add+0x10/0x10 [ 355.096458][ C1] tcp_conn_request+0x1d99/0x33b0 [ 355.096476][ C1] ? tcp_v4_rcv+0x2ee1/0x4640 [ 355.096496][ C1] ? __ip_finish_output.part.0+0x160/0x350 [ 355.096513][ C1] ? __pfx_tcp_conn_request+0x10/0x10 [ 355.096529][ C1] ? tcp_close+0x28/0x120 [ 355.096547][ C1] ? rds_tcp_accept_one+0x31c/0xac0 [ 355.096565][ C1] ? rds_tcp_accept_worker+0x59/0x80 [ 355.096582][ C1] ? process_one_work+0x9cf/0x1b70 [ 355.096596][ C1] ? worker_thread+0x6c8/0xf10 [ 355.096609][ C1] ? kthread+0x3c2/0x780 [ 355.096625][ C1] ? selinux_socket_sock_rcv_skb+0x187/0x720 [ 355.096645][ C1] ? tcp_v4_conn_request+0xc5/0x260 [ 355.096661][ C1] ? skb_release_data+0x79a/0x9e0 [ 355.096675][ C1] tcp_v4_conn_request+0xc5/0x260 [ 355.096692][ C1] tcp_v6_conn_request+0x2f1/0x470 [ 355.096711][ C1] tcp_rcv_state_process+0xa66/0x4ec0 [ 355.096728][ C1] ? rcu_is_watching+0x12/0xc0 [ 355.096755][ C1] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 355.096775][ C1] ? lock_release+0x201/0x2f0 [ 355.096795][ C1] ? sk_filter_trim_cap+0x11e/0xa70 [ 355.096812][ C1] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 355.096826][ C1] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 355.096840][ C1] ? __inet_lookup_listener+0x321/0x3b0 [ 355.096860][ C1] ? tcp_v4_do_rcv+0x1ad/0xa90 [ 355.096877][ C1] tcp_v4_do_rcv+0x1ad/0xa90 [ 355.096894][ C1] tcp_v4_rcv+0x3f3a/0x4640 [ 355.096917][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 355.096936][ C1] ? __pfx_raw_local_deliver+0x10/0x10 [ 355.096955][ C1] ? rcu_is_watching+0x12/0xc0 [ 355.096969][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 355.096987][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 355.097001][ C1] ip_local_deliver_finish+0x3f2/0x720 [ 355.097019][ C1] ip_local_deliver+0x18e/0x1f0 [ 355.097032][ C1] ip_rcv+0x2e0/0x600 [ 355.097044][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 355.097055][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 355.097075][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 355.097095][ C1] ? lock_acquire+0x2cd/0x350 [ 355.097113][ C1] ? process_backlog+0x3f0/0x15e0 [ 355.097131][ C1] ? rcu_is_watching+0x12/0xc0 [ 355.097147][ C1] ? process_backlog+0x3f0/0x15e0 [ 355.097165][ C1] __netif_receive_skb+0x1d/0x160 [ 355.097183][ C1] process_backlog+0x442/0x15e0 [ 355.097204][ C1] __napi_poll.constprop.0+0xba/0x550 [ 355.097222][ C1] ? rcu_is_watching+0x12/0xc0 [ 355.097238][ C1] net_rx_action+0xa9f/0xfe0 [ 355.097260][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 355.097280][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 355.097293][ C1] ? sched_clock+0x38/0x60 [ 355.097311][ C1] ? sched_clock_cpu+0x6c/0x530 [ 355.097331][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 355.097346][ C1] handle_softirqs+0x216/0x8e0 [ 355.097364][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 355.097379][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 355.097397][ C1] ? __dev_queue_xmit+0xaf1/0x4490 [ 355.097415][ C1] do_softirq+0xb2/0xf0 [ 355.097430][ C1] [ 355.097434][ C1] [ 355.097440][ C1] __local_bh_enable_ip+0x100/0x120 [ 355.097455][ C1] ? __dev_queue_xmit+0xaf1/0x4490 [ 355.097478][ C1] __dev_queue_xmit+0xb06/0x4490 [ 355.097497][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 355.097511][ C1] ? rcu_is_watching+0x12/0xc0 [ 355.097526][ C1] ? lock_release+0x201/0x2f0 [ 355.097544][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 355.097562][ C1] ? selinux_ip_postroute+0x710/0xde0 [ 355.097576][ C1] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 355.097588][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 355.097606][ C1] ? arch_stack_walk+0x94/0x100 [ 355.097626][ C1] ? __ip_finish_output.part.0+0x1b4/0x350 [ 355.097641][ C1] ? rcu_is_watching+0x12/0xc0 [ 355.097656][ C1] ? rcu_is_watching+0x12/0xc0 [ 355.097672][ C1] ip_finish_output2+0xc38/0x21a0 [ 355.097689][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 355.097704][ C1] ? ip_skb_dst_mtu+0x5b6/0xc70 [ 355.097717][ C1] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 355.097731][ C1] ? __pfx_ip_finish_output+0x10/0x10 [ 355.097745][ C1] ? lock_acquire+0x2cd/0x350 [ 355.097764][ C1] __ip_finish_output.part.0+0x1b4/0x350 [ 355.097780][ C1] ip_output+0x35e/0xa10 [ 355.097795][ C1] __ip_queue_xmit+0x1d30/0x2620 [ 355.097811][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 355.097826][ C1] __tcp_transmit_skb+0x265f/0x3df0 [ 355.097846][ C1] ? kmalloc_reserve+0x18b/0x2c0 [ 355.097863][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 355.097882][ C1] ? __build_skb_around+0x278/0x3b0 [ 355.097903][ C1] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 355.097917][ C1] ? read_tsc+0x9/0x20 [ 355.097932][ C1] ? ktime_get+0x1a7/0x310 [ 355.097951][ C1] tcp_connect+0x2e82/0x4e10 [ 355.097972][ C1] ? rcu_is_watching+0x12/0xc0 [ 355.097987][ C1] ? __pfx_tcp_connect+0x10/0x10 [ 355.098009][ C1] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 355.098030][ C1] tcp_v4_connect+0x153a/0x1bb0 [ 355.098049][ C1] ? __pfx_tcp_v4_connect+0x10/0x10 [ 355.098065][ C1] ? inet_csk_get_port+0xead/0x2890 [ 355.098078][ C1] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 355.098093][ C1] ? inet_csk_get_port+0xead/0x2890 [ 355.098108][ C1] __inet_stream_connect+0x914/0xf60 [ 355.098126][ C1] ? tcp_release_cb+0x272/0x4f0 [ 355.098137][ C1] ? __pfx_tcp_release_cb+0x10/0x10 [ 355.098150][ C1] ? __pfx___inet_stream_connect+0x10/0x10 [ 355.098167][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 355.098181][ C1] ? __pfx___might_resched+0x10/0x10 [ 355.098197][ C1] ? inet_stream_connect+0x43/0xa0 [ 355.098213][ C1] ? rcu_is_watching+0x12/0xc0 [ 355.098228][ C1] ? inet_stream_connect+0x43/0xa0 [ 355.098244][ C1] ? rcu_is_watching+0x12/0xc0 [ 355.098259][ C1] ? inet_stream_connect+0x43/0xa0 [ 355.098277][ C1] inet_stream_connect+0x57/0xa0 [ 355.098294][ C1] kernel_connect+0x107/0x180 [ 355.098309][ C1] ? __pfx_kernel_connect+0x10/0x10 [ 355.098326][ C1] ? rcu_is_watching+0x12/0xc0 [ 355.098341][ C1] ? rds_tcp_conn_path_connect+0x429/0x7f0 [ 355.098359][ C1] ? rcu_is_watching+0x12/0xc0 [ 355.098374][ C1] ? rds_tcp_conn_path_connect+0x429/0x7f0 [ 355.098393][ C1] rds_tcp_conn_path_connect+0x43e/0x7f0 [ 355.098413][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 355.098431][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 355.098450][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 355.098468][ C1] ? pwq_dec_nr_in_flight+0x965/0xed0 [ 355.098482][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 355.098500][ C1] ? rcu_is_watching+0x12/0xc0 [ 355.098515][ C1] ? lock_acquire+0x2cd/0x350 [ 355.098533][ C1] ? rcu_is_watching+0x12/0xc0 [ 355.098549][ C1] rds_connect_worker+0x1af/0x2c0 [ 355.098565][ C1] process_one_work+0x9cf/0x1b70 [ 355.098581][ C1] ? __pfx_rds_shutdown_worker+0x10/0x10 [ 355.098597][ C1] ? __pfx_process_one_work+0x10/0x10 [ 355.098613][ C1] ? assign_work+0x1a0/0x250 [ 355.098627][ C1] worker_thread+0x6c8/0xf10 [ 355.098644][ C1] ? __pfx_worker_thread+0x10/0x10 [ 355.098658][ C1] kthread+0x3c2/0x780 [ 355.098670][ C1] ? __pfx_kthread+0x10/0x10 [ 355.098682][ C1] ? ret_from_fork+0x25/0x6f0 [ 355.098694][ C1] ? rcu_is_watching+0x12/0xc0 [ 355.098709][ C1] ? rcu_is_watching+0x12/0xc0 [ 355.098724][ C1] ? __pfx_kthread+0x10/0x10 [ 355.098737][ C1] ret_from_fork+0x5d7/0x6f0 [ 355.098749][ C1] ? __pfx_kthread+0x10/0x10 [ 355.098762][ C1] ret_from_fork_asm+0x1a/0x30 [ 355.098781][ C1] [ 356.039653][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 356.046529][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 356.055634][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.065687][ T31] Call Trace: [ 356.068963][ T31] [ 356.071894][ T31] dump_stack_lvl+0x3d/0x1f0 [ 356.076482][ T31] vpanic+0x6e8/0x7a0 [ 356.080471][ T31] ? __pfx_vpanic+0x10/0x10 [ 356.084988][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 356.090882][ T31] panic+0xca/0xd0 [ 356.094609][ T31] ? __pfx_panic+0x10/0x10 [ 356.099030][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 356.104405][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 356.110564][ T31] ? watchdog+0xd78/0x1260 [ 356.114977][ T31] ? watchdog+0xd6b/0x1260 [ 356.119402][ T31] watchdog+0xd89/0x1260 [ 356.123646][ T31] ? __pfx_watchdog+0x10/0x10 [ 356.128322][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 356.133523][ T31] ? __kthread_parkme+0x19e/0x250 [ 356.138552][ T31] ? __pfx_watchdog+0x10/0x10 [ 356.143225][ T31] kthread+0x3c2/0x780 [ 356.147291][ T31] ? __pfx_kthread+0x10/0x10 [ 356.151881][ T31] ? rcu_is_watching+0x12/0xc0 [ 356.156645][ T31] ? __pfx_kthread+0x10/0x10 [ 356.161230][ T31] ret_from_fork+0x5d7/0x6f0 [ 356.165816][ T31] ? __pfx_kthread+0x10/0x10 [ 356.170406][ T31] ret_from_fork_asm+0x1a/0x30 [ 356.175179][ T31] [ 356.178371][ T31] Kernel Offset: disabled [ 356.182671][ T31] Rebooting in 86400 seconds..