last executing test programs: 35.728404055s ago: executing program 3 (id=1220): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x32c6, &(0x7f0000000000)={0x0, 0x8800, 0x0, 0x1, 0x104}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 35.257466358s ago: executing program 3 (id=1233): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000004c0)={0x40, r1, 0x1, 0x8000000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40000000}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x40}}, 0x0) 35.166625949s ago: executing program 3 (id=1235): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 35.065031202s ago: executing program 3 (id=1237): mkdir(&(0x7f0000000100)='./file0\x00', 0x20) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa6d214, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 35.000251103s ago: executing program 3 (id=1238): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) 34.668132079s ago: executing program 3 (id=1246): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000008dff"}) 34.481648694s ago: executing program 32 (id=1246): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000008dff"}) 5.395810959s ago: executing program 1 (id=1698): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 4.438721896s ago: executing program 1 (id=1708): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0xd, "625e81abf2f5246c2f97ff767a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="200119"], 0x0}) 3.018291432s ago: executing program 4 (id=1727): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)='V', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.2507727s ago: executing program 1 (id=1736): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.069866768s ago: executing program 1 (id=1740): r0 = syz_io_uring_setup(0x7dca, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) r1 = io_uring_setup(0x2edd, &(0x7f0000000480)={0x0, 0x168c, 0x1042, 0x80003, 0x0, 0x0, r0}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x17, 0x20000000, r2) 1.85809627s ago: executing program 1 (id=1742): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b942ee3, @void, @value}, 0x90) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000010000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r3], 0x2c}}, 0x0) 1.67022314s ago: executing program 1 (id=1744): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20, 0x0, 0x7}}}}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.498443711s ago: executing program 5 (id=1746): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="20000000000000003000128008000100687372002400028008000200", @ANYRES32=r1, @ANYBLOB="050006000000000008000100", @ANYRES32=r3], 0x50}}, 0x0) 1.438255313s ago: executing program 2 (id=1747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000002c0000e006"]) 1.296370911s ago: executing program 5 (id=1748): socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 1.275573749s ago: executing program 4 (id=1749): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xb1c, 0x401, 0x2, 0x10}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 1.076187655s ago: executing program 2 (id=1751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 997.11638ms ago: executing program 5 (id=1752): openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) r0 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x400000, 0x10100}, &(0x7f0000000200), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xffffffff, 0x403, 0x3}, &(0x7f00000002c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) 984.391641ms ago: executing program 4 (id=1753): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x80, "66864e02"}, 0x3, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) close_range(r1, 0xffffffffffffffff, 0x0) 914.345988ms ago: executing program 0 (id=1754): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb9, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 800.696748ms ago: executing program 5 (id=1755): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000014000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000730000400008000007"]) 791.814786ms ago: executing program 0 (id=1756): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, r3, 0x0, 0x3, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) 754.24572ms ago: executing program 2 (id=1757): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, r0, 0x0) 692.205561ms ago: executing program 4 (id=1758): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) r1 = io_uring_setup(0x57a5, &(0x7f00000002c0)={0x0, 0xc2f, 0x2, 0x40002000, 0x2}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x16, 0x20000002, r2) 564.642365ms ago: executing program 0 (id=1759): r0 = io_uring_setup(0x1a30, &(0x7f0000000380)={0x0, 0x32b6, 0x40, 0x0, 0x35d}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000014080008400000000114000000110001"], 0x6c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 503.764921ms ago: executing program 4 (id=1760): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) dup3(r1, r0, 0x0) 436.839683ms ago: executing program 2 (id=1761): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e24, 0x0, @dev, 0x5}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 392.964856ms ago: executing program 5 (id=1762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2, 0x30, 0xffff, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x5, 0x7, 0x0, 0x8, 0x0, 0x18, {[@window={0x9, 0x3}, @sack={0x5, 0x2}]}}}}}}, 0x3e) 375.03051ms ago: executing program 0 (id=1763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x39d}, {0x9, 0x0, 0x3}]}]}, 0x30}}, 0x0) 267.426577ms ago: executing program 4 (id=1764): syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaa43317829590a7f08004500001c00004e230000"], 0x0) socket$key(0xf, 0x3, 0x2) landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x1}, 0x10, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYRES16=r0], 0x0) 236.474676ms ago: executing program 2 (id=1765): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 152.126953ms ago: executing program 0 (id=1766): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 139.094648ms ago: executing program 5 (id=1767): creat(&(0x7f0000000080)='./file0\x00', 0x2a) r0 = syz_io_uring_setup(0x109, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 74.749488ms ago: executing program 2 (id=1768): mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x4000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) 0s ago: executing program 0 (id=1769): r0 = socket(0x2, 0x80805, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x7a, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0xffff, 0x4) kernel console output (not intermixed with test programs): .085615][ T5867] usb 3-1: config 0 descriptor?? [ 84.098161][ T5867] ch341 3-1:0.0: ch341-uart converter detected [ 84.210007][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.252509][ T29] audit: type=1400 audit(1737490897.290:311): avc: denied { set_context_mgr } for pid=7055 comm="syz.1.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 84.290031][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.316486][ T29] audit: type=1400 audit(1737490897.350:312): avc: denied { setopt } for pid=7057 comm="syz.3.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.882740][ T51] kernel read not supported for file /dsp (pid: 51 comm: kworker/1:1) [ 84.924523][ T5867] usb 3-1: failed to send control message: -71 [ 84.934302][ T5867] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 84.947164][ T5867] usb 3-1: USB disconnect, device number 4 [ 84.954267][ T5867] ch341 3-1:0.0: device disconnected [ 85.091852][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.229046][ T7093] netlink: 92 bytes leftover after parsing attributes in process `syz.0.520'. [ 85.249793][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.569398][ T5865] kernel read not supported for file /usbmon0 (pid: 5865 comm: kworker/0:5) [ 85.829809][ T5868] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.995117][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 86.002422][ T5868] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.017994][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.029126][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 86.045068][ T5868] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 86.055700][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.095783][ T5868] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 86.107531][ T5868] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 86.135814][ T5868] usb 4-1: Manufacturer: syz [ 86.160740][ T5868] usb 4-1: config 0 descriptor?? [ 86.290009][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.490225][ T5868] rc_core: IR keymap rc-hauppauge not found [ 86.496352][ T5868] Registered IR keymap rc-empty [ 86.506710][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 86.529947][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 86.561677][ T5868] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 86.587041][ T5868] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 86.598040][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.617734][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 86.627878][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.644506][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 86.669863][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 86.709678][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 86.740051][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 86.770419][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 86.789720][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 86.820113][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 86.839730][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 86.859859][ T5868] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 86.901769][ T5868] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 86.919578][ T5868] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 86.935903][ T5868] usb 4-1: USB disconnect, device number 4 [ 86.956258][ T7186] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.562'. [ 86.967361][ T7186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.013074][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.329783][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.627930][ T7204] netlink: 'syz.3.569': attribute type 64 has an invalid length. [ 87.637369][ T7204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.569'. [ 87.652619][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.681140][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 87.681155][ T29] audit: type=1400 audit(1737490900.710:335): avc: denied { write } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.759884][ T29] audit: type=1400 audit(1737490900.710:336): avc: denied { remove_name } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.814609][ T29] audit: type=1400 audit(1737490900.710:337): avc: denied { rename } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.845212][ T7208] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.849628][ T29] audit: type=1400 audit(1737490900.710:338): avc: denied { add_name } for pid=5173 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.855673][ T7208] bridge0: entered allmulticast mode [ 87.880076][ T29] audit: type=1400 audit(1737490900.710:339): avc: denied { unlink } for pid=5173 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.908315][ T7213] x_tables: ip_tables: udp match: only valid for protocol 17 [ 87.943539][ T29] audit: type=1400 audit(1737490900.720:340): avc: denied { create } for pid=5173 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.968940][ T29] audit: type=1400 audit(1737490901.000:341): avc: denied { listen } for pid=7215 comm="syz.2.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 88.073930][ T29] audit: type=1400 audit(1737490901.110:342): avc: denied { read } for pid=7223 comm="syz.0.578" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.095264][ T7226] Bluetooth: MGMT ver 1.23 [ 88.106547][ T29] audit: type=1400 audit(1737490901.110:343): avc: denied { open } for pid=7223 comm="syz.0.578" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.249774][ T5867] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 88.374729][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.410153][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 88.427350][ T5867] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 62, changing to 9 [ 88.445040][ T5867] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.456247][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.474775][ T5867] usb 4-1: Product: syz [ 88.493491][ T5867] usb 4-1: Manufacturer: syz [ 88.498161][ T5867] usb 4-1: SerialNumber: syz [ 88.510126][ T29] audit: type=1400 audit(1737490901.550:344): avc: denied { write } for pid=7248 comm="syz.0.591" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 88.698756][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'. [ 88.930066][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.271144][ T7296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7296 comm=syz.4.611 [ 89.337550][ T5867] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 89.345549][ T5867] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 89.379937][ T5867] cdc_ncm 4-1:1.0: bind() failure [ 89.394773][ T5867] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 89.412353][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.419260][ T7302] netlink: 20 bytes leftover after parsing attributes in process `syz.4.614'. [ 89.429942][ T5867] cdc_ncm 4-1:1.1: bind() failure [ 89.448606][ T5867] usb 4-1: USB disconnect, device number 5 [ 89.700834][ T7313] overlayfs: conflicting options: userxattr,metacopy=on [ 90.060028][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.107197][ T7333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.449978][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.469177][ T7351] serio: Serial port ptm0 [ 90.699634][ T7369] netlink: 'syz.1.644': attribute type 8 has an invalid length. [ 91.461611][ T7404] ubi0: attaching mtd0 [ 91.490144][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.493186][ T7404] ubi0: scanning is finished [ 91.522448][ T7404] ubi0: empty MTD device detected [ 91.553814][ T7412] delete_channel: no stack [ 91.677394][ T7404] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 91.696616][ T7404] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 91.717414][ T7404] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 91.729628][ T7404] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 91.761613][ T7422] netlink: 40 bytes leftover after parsing attributes in process `syz.1.667'. [ 91.767785][ T7404] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 91.780840][ T7404] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 91.788851][ T7404] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1503634471 [ 91.838082][ T7404] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 91.877512][ T7418] ubi0: background thread "ubi_bgt0d" started, PID 7418 [ 92.116875][ T7434] tmpfs: Invalid uid '0x00000000ffffffff' [ 92.530450][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.743051][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 92.743066][ T29] audit: type=1400 audit(1737490905.780:375): avc: denied { write } for pid=7470 comm="syz.4.689" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.809675][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.691'. [ 92.915245][ T7482] overlay: Unknown parameter 'reiser\s\' [ 92.949895][ T7484] input: syz0 as /devices/virtual/input/input6 [ 93.078535][ T29] audit: type=1400 audit(1737490906.110:376): avc: denied { setopt } for pid=7489 comm="syz.1.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.101908][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.345558][ T7500] [U] ¦ [ 93.444334][ T29] audit: type=1400 audit(1737490906.480:377): avc: denied { create } for pid=7508 comm="syz.2.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 93.495990][ T29] audit: type=1400 audit(1737490906.490:378): avc: denied { setopt } for pid=7508 comm="syz.2.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 93.572884][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.650026][ T5866] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 93.809336][ T29] audit: type=1400 audit(1737490906.840:379): avc: denied { unlink } for pid=7529 comm="syz.2.716" name="#1" dev="tmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.831357][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.838781][ T29] audit: type=1400 audit(1737490906.840:380): avc: denied { mount } for pid=7529 comm="syz.2.716" name="/" dev="overlay" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 93.842840][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 93.871879][ T5866] usb 4-1: config 0 has an invalid interface number: 215 but max is 0 [ 93.884937][ T5866] usb 4-1: config 0 has no interface number 0 [ 93.900041][ T968] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 93.911662][ T5866] usb 4-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 93.923147][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.931315][ T5866] usb 4-1: Product: syz [ 93.935546][ T5866] usb 4-1: Manufacturer: syz [ 93.940212][ T5866] usb 4-1: SerialNumber: syz [ 93.947687][ T5866] usb 4-1: config 0 descriptor?? [ 93.958028][ T5866] io_ti 4-1:0.215: required endpoints missing [ 94.038358][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.719'. [ 94.062832][ T968] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 94.079827][ T968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.106529][ T968] usb 5-1: Product: syz [ 94.111497][ T968] usb 5-1: Manufacturer: syz [ 94.116357][ T968] usb 5-1: SerialNumber: syz [ 94.123264][ T968] usb 5-1: config 0 descriptor?? [ 94.191332][ T7544] input: syz0 as /devices/virtual/input/input8 [ 94.199072][ T29] audit: type=1400 audit(1737490907.230:381): avc: denied { mounton } for pid=7540 comm="syz.1.721" path="/138/file0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 94.232240][ T8] usb 4-1: USB disconnect, device number 6 [ 94.271753][ T29] audit: type=1400 audit(1737490907.310:382): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 94.541882][ T968] usb 5-1: Firmware: major: 118, minor: 209, hardware type: HULUSB (4) [ 94.609876][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.699586][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 94.743070][ T968] usb 5-1: failed to fetch extended address, random address set [ 94.802268][ T968] usb 5-1: USB disconnect, device number 6 [ 94.859747][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 94.866225][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.877942][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 94.900071][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=033e, bcdDevice= 0.00 [ 94.913813][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.924397][ T8] usb 2-1: config 0 descriptor?? [ 95.029628][ T5867] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 95.179605][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 95.187475][ T5867] usb 4-1: config 0 has no interfaces? [ 95.195414][ T5867] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 95.205574][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.214401][ T5867] usb 4-1: Product: syz [ 95.218599][ T5867] usb 4-1: Manufacturer: syz [ 95.223721][ T5867] usb 4-1: SerialNumber: syz [ 95.231798][ T5867] usb 4-1: config 0 descriptor?? [ 95.354142][ T8] wacom 0003:056A:033E.0005: unknown main item tag 0x0 [ 95.379992][ T8] wacom 0003:056A:033E.0005: unknown main item tag 0x0 [ 95.386915][ T8] wacom 0003:056A:033E.0005: unknown main item tag 0x0 [ 95.398532][ T8] wacom 0003:056A:033E.0005: unknown main item tag 0x0 [ 95.405793][ T8] wacom 0003:056A:033E.0005: unknown main item tag 0x0 [ 95.424036][ T8] wacom 0003:056A:033E.0005: Unknown device_type for 'HID 056a:033e'. Assuming pen. [ 95.437480][ T29] audit: type=1400 audit(1737490908.470:383): avc: denied { connect } for pid=7590 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.441427][ T8] wacom 0003:056A:033E.0005: hidraw0: USB HID vff.ff Device [HID 056a:033e] on usb-dummy_hcd.1-1/input0 [ 95.484201][ T29] audit: type=1400 audit(1737490908.470:384): avc: denied { write } for pid=7590 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.512653][ T5867] usb 4-1: USB disconnect, device number 7 [ 95.514668][ T8] input: Wacom Intuos PT M 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:033E.0005/input/input9 [ 95.652446][ T5868] usb 2-1: USB disconnect, device number 8 [ 95.654656][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.130087][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.690284][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.702440][ T7664] debugfs: Invalid gid '0x00000000ffffffff' [ 96.832217][ T7675] netlink: 80 bytes leftover after parsing attributes in process `syz.3.776'. [ 97.098373][ T7688] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.780'. [ 97.250288][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.258435][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.729869][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.751379][ T7723] netlink: 20 bytes leftover after parsing attributes in process `syz.2.798'. [ 97.803930][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 97.803946][ T29] audit: type=1400 audit(1737490910.840:396): avc: denied { block_suspend } for pid=7728 comm="syz.0.801" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 97.831903][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.865609][ T29] audit: type=1400 audit(1737490910.900:397): avc: denied { create } for pid=7730 comm="syz.1.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 98.019844][ T5868] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 98.177056][ T7753] netlink: 132 bytes leftover after parsing attributes in process `syz.3.812'. [ 98.189400][ T7753] netlink: 'syz.3.812': attribute type 10 has an invalid length. [ 98.191014][ T5868] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.227277][ T5868] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 98.246459][ T5868] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.264271][ T7753] team0: Cannot enslave team device to itself [ 98.279853][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.313494][ T7727] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.336993][ T5868] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.381736][ T7761] bond0: option mode: unable to set because the bond device has slaves [ 98.414969][ T29] audit: type=1400 audit(1737490911.450:398): avc: denied { create } for pid=7763 comm="syz.2.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 98.467016][ T29] audit: type=1400 audit(1737490911.500:399): avc: denied { connect } for pid=7763 comm="syz.2.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 98.509858][ T7766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.518015][ T7766] bond0: (slave bond1): Enslaving as an active interface with an up link [ 98.537580][ T29] audit: type=1400 audit(1737490911.570:400): avc: denied { write } for pid=7763 comm="syz.2.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 98.655237][ T5866] usb 5-1: USB disconnect, device number 7 [ 98.715325][ T29] audit: type=1400 audit(1737490911.750:401): avc: denied { ioctl } for pid=7778 comm="syz.1.824" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 98.739608][ T968] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 98.773440][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.901521][ T968] usb 4-1: Using ep0 maxpacket: 16 [ 98.911873][ T968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 98.923507][ T968] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 98.929579][ T5868] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 98.932731][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.948506][ T968] usb 4-1: Product: syz [ 98.952924][ T968] usb 4-1: Manufacturer: syz [ 98.957500][ T968] usb 4-1: SerialNumber: syz [ 98.963246][ T968] usb 4-1: config 0 descriptor?? [ 98.968984][ T968] hub 4-1:0.0: bad descriptor, ignoring hub [ 98.976860][ T968] hub 4-1:0.0: probe with driver hub failed with error -5 [ 98.985227][ T968] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 99.029776][ T5867] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 99.110934][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.121989][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.132731][ T5868] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 99.142042][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.151064][ T5868] usb 1-1: config 0 descriptor?? [ 99.186863][ T5867] usb 2-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 99.197438][ T5867] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.218976][ T29] audit: type=1400 audit(1737490912.250:402): avc: denied { read write } for pid=7770 comm="syz.3.820" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 99.249038][ T5867] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 99.265906][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 99.274780][ T5867] usb 2-1: SerialNumber: syz [ 99.279817][ T29] audit: type=1400 audit(1737490912.280:403): avc: denied { open } for pid=7770 comm="syz.3.820" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 99.353770][ T1214] usb 4-1: USB disconnect, device number 8 [ 99.502863][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.832'. [ 99.525188][ T5867] usb 2-1: invalid UAC_HEADER (v1) [ 99.550594][ T5867] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 99.570649][ T5868] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 99.578360][ T5868] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 99.580149][ T5867] usb 2-1: USB disconnect, device number 9 [ 99.586322][ T5868] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 99.601816][ T5868] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 99.609738][ T5868] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 99.625808][ T5868] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 99.779181][ T5868] playstation 0003:054C:0DF2.0006: Invalid reportID received, expected 9 got 32 [ 99.788561][ T5868] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -22 [ 99.798137][ T5868] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense [ 99.807251][ T5868] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 99.811907][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.827471][ T5868] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -22 [ 100.052239][ T5868] usb 1-1: USB disconnect, device number 5 [ 100.289745][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.392282][ T29] audit: type=1400 audit(1737490913.430:404): avc: denied { append } for pid=7825 comm="syz.1.845" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 100.423522][ T29] audit: type=1400 audit(1737490913.460:405): avc: denied { getopt } for pid=7825 comm="syz.1.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.770238][ T968] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 100.849711][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.932574][ T968] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 100.951665][ T968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.977939][ T968] usb 5-1: config 0 descriptor?? [ 101.206478][ T968] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 101.227673][ T968] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 101.424712][ T968] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 101.441134][ T968] [drm] Initialized udl on minor 2 [ 101.618257][ T7893] vlan2: entered promiscuous mode [ 101.626155][ T7893] syz_tun: entered promiscuous mode [ 101.640095][ T7893] vlan2: entered allmulticast mode [ 101.657172][ T7893] syz_tun: entered allmulticast mode [ 101.665939][ T7893] team0: Device vlan2 is up. Set it down before adding it as a team port [ 101.687381][ T7893] syz_tun: left allmulticast mode [ 101.699700][ T7893] syz_tun: left promiscuous mode [ 101.810518][ T968] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 101.830169][ T968] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 101.853667][ T5866] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 101.868469][ T968] usb 5-1: USB disconnect, device number 8 [ 101.876950][ T5866] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 101.892049][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.966087][ T7907] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 102.026742][ T7912] rtc_cmos 00:00: Alarms can be up to one day in the future [ 102.379697][ T5868] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 102.512083][ T7950] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 102.522416][ T7950] macvtap1: entered promiscuous mode [ 102.528628][ T7949] netlink: 'syz.4.901': attribute type 1 has an invalid length. [ 102.528690][ T7950] macvtap1: entered allmulticast mode [ 102.542592][ T7950] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 102.550978][ T7949] netlink: 224 bytes leftover after parsing attributes in process `syz.4.901'. [ 102.562361][ T7950] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 102.572887][ T5868] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 102.586703][ T7950] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 102.599913][ T5868] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.609227][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 102.634667][ T5868] usb 2-1: SerialNumber: syz [ 102.817941][ T7965] bridge0: entered promiscuous mode [ 102.829875][ T7965] macvlan2: entered promiscuous mode [ 102.845360][ T7965] macvlan2: entered allmulticast mode [ 102.855449][ T7965] bridge0: entered allmulticast mode [ 102.929930][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.050266][ T7974] mac80211_hwsim hwsim9 wlan1: vlans aren't supported yet for dev_uc|mc_add() [ 103.310152][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 103.326570][ T7988] UHID_CREATE from different security context by process 389 (syz.3.919), this is not allowed. [ 103.338148][ T8] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.348188][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.455942][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 103.455958][ T29] audit: type=1400 audit(1737490916.490:410): avc: denied { ioctl } for pid=7993 comm="syz.0.922" path="socket:[17567]" dev="sockfs" ino=17567 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 103.507882][ T5868] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 103.522680][ T5868] usb 2-1: USB disconnect, device number 10 [ 103.903805][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 103.955033][ T8019] bond1 (unregistering): Released all slaves [ 103.969852][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.138444][ T29] audit: type=1400 audit(1737490917.170:411): avc: denied { ioctl } for pid=8028 comm="syz.0.937" path="socket:[17635]" dev="sockfs" ino=17635 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 104.188442][ T8033] netlink: 2716 bytes leftover after parsing attributes in process `syz.1.939'. [ 104.448827][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 104.468586][ T8051] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 104.558679][ T8057] bpf: Bad value for 'uid' [ 104.625959][ T8064] netlink: 44 bytes leftover after parsing attributes in process `syz.2.954'. [ 104.669802][ T5868] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 104.819615][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 104.840578][ T5868] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 104.859554][ T5868] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.895520][ T5868] usb 4-1: config 0 has no interface number 0 [ 104.910292][ T5868] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.935405][ T5868] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 104.946945][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.960596][ T5868] usb 4-1: config 0 descriptor?? [ 104.980669][ T5868] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 105.009853][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.217636][ T5868] usb 4-1: USB disconnect, device number 9 [ 105.392890][ T8102] netlink: 'syz.0.971': attribute type 21 has an invalid length. [ 105.414655][ T8102] netlink: 128 bytes leftover after parsing attributes in process `syz.0.971'. [ 105.428790][ T8102] netlink: 'syz.0.971': attribute type 5 has an invalid length. [ 105.440244][ T8102] netlink: 'syz.0.971': attribute type 6 has an invalid length. [ 105.454582][ T8102] netlink: 3 bytes leftover after parsing attributes in process `syz.0.971'. [ 105.579843][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.747031][ T8] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 105.758182][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.780168][ T8] usb 3-1: Product: syz [ 105.784444][ T8] usb 3-1: Manufacturer: syz [ 105.789048][ T8] usb 3-1: SerialNumber: syz [ 105.805876][ T8119] netlink: 'syz.3.978': attribute type 8 has an invalid length. [ 105.809585][ T8] usb 3-1: config 0 descriptor?? [ 105.814990][ T8119] netlink: 163260 bytes leftover after parsing attributes in process `syz.3.978'. [ 105.849617][ T5868] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 106.016309][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.045884][ T8] int51x1 3-1:0.0: probe with driver int51x1 failed with error -22 [ 106.050055][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.070119][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.095006][ T5868] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 106.119591][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.131638][ T5868] usb 5-1: config 0 descriptor?? [ 106.147947][ T8131] libceph: resolve '0.0' (ret=-3): failed [ 106.198274][ T29] audit: type=1400 audit(1737490919.230:412): avc: denied { setopt } for pid=8135 comm="syz.0.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 106.239044][ T8] IPVS: starting estimator thread 0... [ 106.275253][ T8] usb 3-1: USB disconnect, device number 5 [ 106.349945][ T8139] IPVS: using max 32 ests per chain, 76800 per kthread [ 106.379736][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.553087][ T5868] elo 0003:04E7:0009.0008: unknown main item tag 0x0 [ 106.563849][ T5868] elo 0003:04E7:0009.0008: unknown main item tag 0x0 [ 106.572070][ T5868] elo 0003:04E7:0009.0008: unknown main item tag 0x0 [ 106.579177][ T5868] elo 0003:04E7:0009.0008: unknown main item tag 0x0 [ 106.591175][ T5868] elo 0003:04E7:0009.0008: unknown main item tag 0x0 [ 106.597983][ T5868] elo 0003:04E7:0009.0008: unknown main item tag 0x0 [ 106.602464][ T8157] netem: incorrect gi model size [ 106.607812][ T5868] elo 0003:04E7:0009.0008: unknown main item tag 0x0 [ 106.612275][ T8157] netem: change failed [ 106.620168][ T5868] elo 0003:04E7:0009.0008: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.4-1/input0 [ 106.788907][ T5868] usb 5-1: USB disconnect, device number 9 [ 106.860389][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.039604][ T29] audit: type=1400 audit(1737490920.070:413): avc: denied { mount } for pid=8177 comm="syz.1.1003" name="/" dev="ramfs" ino=17392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 107.099980][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.123526][ T29] audit: type=1400 audit(1737490920.160:414): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 107.189839][ T29] audit: type=1400 audit(1737490920.200:415): avc: denied { read } for pid=8183 comm="syz.3.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.812849][ T29] audit: type=1400 audit(1737490920.850:416): avc: denied { getopt } for pid=8220 comm="syz.0.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.129883][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.483534][ T29] audit: type=1400 audit(1737490921.520:417): avc: denied { bind } for pid=8250 comm="syz.3.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 108.559658][ T29] audit: type=1400 audit(1737490921.550:418): avc: denied { listen } for pid=8250 comm="syz.3.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 108.640125][ T8247] syz.0.1034 (8247) used greatest stack depth: 20240 bytes left [ 108.899975][ T8241] mmap: syz.4.1031 (8241) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.923336][ T8276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1046'. [ 108.949829][ T5867] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 109.009314][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1049'. [ 109.109881][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 109.122693][ T5867] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 109.131453][ T5867] usb 2-1: config 179 has no interface number 0 [ 109.137719][ T5867] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 109.154123][ T29] audit: type=1326 audit(1737490922.190:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.2.1053" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16f4d85d29 code=0x0 [ 109.177484][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.196817][ T5867] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 109.223819][ T5867] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 109.238154][ T5867] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 109.269629][ T5867] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 109.306479][ T5867] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 109.329685][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.354062][ T8265] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.411415][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.536768][ T8314] sp0: Synchronizing with TNC [ 109.655488][ T968] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input13 [ 109.678560][ T8316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1064'. [ 109.762527][ T5821] Bluetooth: hci3: link tx timeout [ 109.768485][ T5821] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.781405][ T5821] Bluetooth: hci3: link tx timeout [ 109.786877][ T5821] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.794918][ T5821] Bluetooth: hci3: link tx timeout [ 109.800306][ T5821] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.808390][ T5821] Bluetooth: hci3: link tx timeout [ 109.813744][ T5821] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.821778][ T5821] Bluetooth: hci3: link tx timeout [ 109.826960][ T5821] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.884196][ T5867] usb 2-1: USB disconnect, device number 11 [ 109.890558][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 109.890598][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 109.923435][ T5867] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 110.003427][ T8331] bond0: entered allmulticast mode [ 110.016758][ T8331] bond_slave_0: entered allmulticast mode [ 110.030303][ T8331] bond_slave_1: entered allmulticast mode [ 110.210117][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.218989][ T8329] ubi0: detaching mtd0 [ 110.257967][ T8329] ubi0: mtd0 is detached [ 110.307824][ T8342] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 110.486041][ T8346] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.511570][ T29] audit: type=1400 audit(1737490923.550:420): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 110.683641][ T5821] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 111.252889][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.253157][ T8387] capability: warning: `syz.3.1094' uses 32-bit capabilities (legacy support in use) [ 111.339682][ T29] audit: type=1400 audit(1737490924.380:421): avc: denied { write } for pid=8390 comm="syz.0.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.530349][ T8401] netlink: 'syz.1.1102': attribute type 1 has an invalid length. [ 111.672999][ T29] audit: type=1400 audit(1737490924.710:422): avc: denied { nlmsg_write } for pid=8410 comm="syz.1.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 111.760123][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'. [ 111.777726][ T8416] veth1_macvtap: left promiscuous mode [ 111.810759][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 111.870042][ T968] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 111.877662][ T29] audit: type=1400 audit(1737490924.900:423): avc: denied { read } for pid=8417 comm="syz.4.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.041249][ T968] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.059647][ T968] usb 1-1: config 0 has no interfaces? [ 112.081071][ T968] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 112.099560][ T968] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 112.122269][ T968] usb 1-1: Product: syz [ 112.126457][ T968] usb 1-1: Manufacturer: syz [ 112.133141][ T968] usb 1-1: SerialNumber: syz [ 112.140540][ T968] usb 1-1: config 0 descriptor?? [ 112.259706][ T5868] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 112.290553][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.344034][ T8449] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.379821][ T5865] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 112.426720][ T5868] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 112.446141][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.448081][ T29] audit: type=1400 audit(1737490925.470:424): avc: denied { search } for pid=8450 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.454671][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.496363][ T5868] usb 2-1: Product: syz [ 112.508098][ T5868] usb 2-1: Manufacturer: syz [ 112.518216][ T5868] usb 2-1: SerialNumber: syz [ 112.539371][ T5868] usb 2-1: config 0 descriptor?? [ 112.549100][ T29] audit: type=1400 audit(1737490925.520:425): avc: denied { read } for pid=8452 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.614882][ T5865] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 112.639346][ T5865] usb 4-1: config 0 has no interface number 0 [ 112.644006][ T29] audit: type=1400 audit(1737490925.520:426): avc: denied { open } for pid=8452 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.647131][ T8] usb 1-1: USB disconnect, device number 6 [ 112.670389][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.699639][ T5865] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 112.726865][ T5865] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 112.759118][ T5865] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 112.768515][ T5868] int51x1 2-1:0.0: probe with driver int51x1 failed with error -71 [ 112.792273][ T5868] usb 2-1: USB disconnect, device number 12 [ 112.807476][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.827860][ T5865] usb 4-1: config 0 descriptor?? [ 112.834293][ T8436] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 112.856121][ T5865] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 112.999094][ T5818] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 113.057927][ T5868] usb 4-1: USB disconnect, device number 10 [ 113.329990][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.504805][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1137'. [ 113.508414][ T8504] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1138'. [ 113.529420][ T8506] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1137'. [ 113.554347][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1137'. [ 113.604003][ T8506] vlan2: entered allmulticast mode [ 113.735584][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 113.735600][ T29] audit: type=1400 audit(1737490926.770:439): avc: denied { ioctl } for pid=8520 comm="syz.4.1142" path="socket:[19138]" dev="sockfs" ino=19138 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.004515][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.032783][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.043519][ T8542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.219661][ T968] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 114.269925][ T5867] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 114.339813][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 114.370455][ T968] usb 4-1: Using ep0 maxpacket: 8 [ 114.375875][ T51] net_ratelimit: 2 callbacks suppressed [ 114.375888][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.395656][ T968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.406400][ T968] usb 4-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 114.415642][ T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.429357][ T968] usb 4-1: config 0 descriptor?? [ 114.439246][ T5867] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 114.452877][ T5867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.465037][ T5867] usb 2-1: config 0 has no interface number 0 [ 114.471491][ T5867] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 114.481966][ T5867] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.497008][ T5867] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 114.501556][ T8] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 114.506392][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.522607][ T5867] usb 2-1: Product: syz [ 114.526899][ T5867] usb 2-1: Manufacturer: syz [ 114.533971][ T8] usb 1-1: config 0 has no interface number 0 [ 114.541978][ T8] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.546398][ T5867] usb 2-1: SerialNumber: syz [ 114.554025][ T8] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.568134][ T8] usb 1-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 114.569342][ T5867] usb 2-1: config 0 descriptor?? [ 114.578589][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.593938][ T8] usb 1-1: config 0 descriptor?? [ 114.707194][ T968] usbhid 4-1:0.0: can't add hid device: -71 [ 114.715283][ T968] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 114.728081][ T968] usb 4-1: USB disconnect, device number 11 [ 114.828736][ T8564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1157'. [ 115.009667][ T8] uclogic 0003:28BD:0905.0009: Interface probing failed: -22 [ 115.017860][ T8] uclogic 0003:28BD:0905.0009: interface is invalid, ignoring [ 115.219298][ T5867] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.117/input/input14 [ 115.289982][ T5866] usb 1-1: USB disconnect, device number 7 [ 115.416293][ T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.494215][ T968] usb 2-1: USB disconnect, device number 13 [ 115.499755][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.567731][ T8598] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 115.812130][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.155790][ T29] audit: type=1400 audit(1737490929.190:440): avc: denied { setopt } for pid=8628 comm="syz.4.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 116.156142][ T8628] delete_channel: no stack [ 116.202003][ T29] audit: type=1400 audit(1737490929.230:441): avc: denied { read } for pid=8632 comm="syz.1.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 116.221214][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.241389][ T968] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 116.284323][ T29] audit: type=1400 audit(1737490929.320:442): avc: denied { read } for pid=8636 comm="syz.2.1191" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.410790][ T968] usb 1-1: Using ep0 maxpacket: 32 [ 116.420919][ T968] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 116.438375][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.447986][ T968] usb 1-1: config 0 descriptor?? [ 116.455823][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.469186][ T968] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 116.489699][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 116.667000][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.694506][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.716514][ T8] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 116.726416][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.736636][ T8] usb 2-1: config 0 descriptor?? [ 117.158518][ T8] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 117.168000][ T8] hid-thrustmaster 0003:044F:B65D.000A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 117.195143][ T8] hid-thrustmaster 0003:044F:B65D.000A: Wrong number of endpoints? [ 117.203560][ T29] audit: type=1400 audit(1737490930.240:443): avc: denied { create } for pid=8660 comm="syz.2.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.278108][ T29] audit: type=1400 audit(1737490930.270:444): avc: denied { connect } for pid=8660 comm="syz.2.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.298012][ T968] gspca_vc032x: reg_w err -71 [ 117.308118][ T968] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.318211][ T968] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.328338][ T29] audit: type=1400 audit(1737490930.270:445): avc: denied { bind } for pid=8660 comm="syz.2.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.348460][ T968] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.356843][ T968] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.361939][ C0] hid-thrustmaster 0003:044F:B65D.000A: Unknown packet type 0x693e, unable to proceed further with wheel init [ 117.362573][ T968] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.381327][ T29] audit: type=1400 audit(1737490930.270:446): avc: denied { write } for pid=8660 comm="syz.2.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.400996][ T968] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.406334][ T968] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.412901][ T968] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.418273][ T968] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.424890][ T968] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.430629][ T968] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.437260][ T968] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.479589][ T968] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.484908][ T968] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.490713][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.501082][ T968] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.506554][ T968] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.511749][ T8675] netlink: 'syz.3.1208': attribute type 1 has an invalid length. [ 117.512352][ T29] audit: type=1400 audit(1737490930.560:447): avc: denied { getopt } for pid=8672 comm="syz.4.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.541389][ T968] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.547257][ T968] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.560163][ T968] gspca_vc032x: Unknown sensor... [ 117.565237][ T968] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 117.580488][ T8] usb 2-1: USB disconnect, device number 14 [ 117.584114][ T968] usb 1-1: USB disconnect, device number 8 [ 117.599611][ T5866] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 117.750191][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 117.762927][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 117.791309][ T5866] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 117.815518][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.829430][ T5866] usb 3-1: Product: syz [ 117.834782][ T5866] usb 3-1: Manufacturer: syz [ 117.839827][ T5866] usb 3-1: SerialNumber: syz [ 117.847014][ T5866] usb 3-1: config 0 descriptor?? [ 117.855966][ T5866] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 117.865998][ T5866] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 117.951699][ T8693] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1217'. [ 118.111679][ T8699] syz.0.1219: attempt to access beyond end of device [ 118.111679][ T8699] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 118.116861][ T29] audit: type=1400 audit(1737490931.140:448): avc: denied { mounton } for pid=8698 comm="syz.0.1219" path="/262/file0" dev="tmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 118.125715][ T8699] FAT-fs (loop1): unable to read boot sector [ 118.459629][ T5866] em28xx 3-1:0.0: chip ID is em2710/2820 [ 118.626309][ T8726] ptrace attach of "./syz-executor exec"[5814] was attempted by "./syz-executor exec"[8726] [ 118.724662][ T5866] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 118.739933][ T5866] em28xx 3-1:0.0: board has no eeprom [ 118.785664][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 118.785679][ T29] audit: type=1400 audit(1737490931.820:452): avc: denied { connect } for pid=8733 comm="syz.4.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.822366][ T5866] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 118.839835][ T5866] em28xx 3-1:0.0: dvb set to bulk mode. [ 118.859800][ T5866] usb 3-1: USB disconnect, device number 6 [ 118.877133][ T5866] em28xx 3-1:0.0: Disconnecting em28xx [ 118.886298][ T25] em28xx 3-1:0.0: Binding DVB extension [ 118.938678][ T25] em28xx 3-1:0.0: Registering input extension [ 118.957664][ T5866] em28xx 3-1:0.0: Closing input extension [ 118.997516][ T5866] em28xx 3-1:0.0: Freeing device [ 119.453189][ T29] audit: type=1400 audit(1737490932.490:453): avc: denied { connect } for pid=8763 comm="syz.1.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.651873][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 119.748782][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.756147][ T5864] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 119.771969][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.780370][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.798134][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.806528][ T5821] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 119.814098][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.826858][ T29] audit: type=1400 audit(1737490932.860:454): avc: denied { mounton } for pid=8781 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 119.936513][ T5864] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 119.954838][ T8792] syzkaller1: entered promiscuous mode [ 119.964816][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.974262][ T8792] syzkaller1: entered allmulticast mode [ 119.989424][ T5864] usb 5-1: config 0 descriptor?? [ 120.005405][ T5864] cp210x 5-1:0.0: cp210x converter detected [ 120.276599][ T8781] chnl_net:caif_netlink_parms(): no params data found [ 120.459917][ T8781] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.474484][ T8781] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.485494][ T8781] bridge_slave_0: entered allmulticast mode [ 120.496171][ T8781] bridge_slave_0: entered promiscuous mode [ 120.504661][ T5864] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 120.521004][ T8781] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.528664][ T8781] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.547176][ T8781] bridge_slave_1: entered allmulticast mode [ 120.557810][ T8781] bridge_slave_1: entered promiscuous mode [ 120.600855][ T8818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1270'. [ 120.617025][ T8781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.630081][ T8818] netlink: 'syz.1.1270': attribute type 7 has an invalid length. [ 120.640495][ T8818] netlink: 'syz.1.1270': attribute type 8 has an invalid length. [ 120.648306][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 120.656984][ T8781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.673964][ T8817] mac80211_hwsim hwsim8 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 120.725096][ T8781] team0: Port device team_slave_0 added [ 120.737468][ T5864] usb 5-1: cp210x converter now attached to ttyUSB0 [ 120.752107][ T8781] team0: Port device team_slave_1 added [ 120.775238][ T8781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.785612][ T8781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.815107][ T8781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.827388][ T8781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.835102][ T8781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.863660][ T8781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.905069][ T8781] hsr_slave_0: entered promiscuous mode [ 120.911894][ T8781] hsr_slave_1: entered promiscuous mode [ 120.919000][ T8781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.927951][ T8781] Cannot create hsr debugfs directory [ 120.927950][ T5866] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.939620][ T25] usb 5-1: USB disconnect, device number 10 [ 120.953215][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 121.000636][ T25] cp210x 5-1:0.0: device disconnected [ 121.074676][ T5866] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.076133][ T8781] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 121.088497][ T5866] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 121.111483][ T8781] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 121.115257][ T5866] usb 3-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 121.128388][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.137634][ T8781] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 121.139202][ T8820] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 121.154324][ T5866] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 121.154562][ T8781] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 121.185158][ T8835] 8021q: VLANs not supported on lo [ 121.245559][ T8781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.271473][ T8781] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.282056][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.289129][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.304364][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.311464][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.370203][ T29] audit: type=1400 audit(1737490934.410:455): avc: denied { map } for pid=8838 comm="syz.0.1281" path="socket:[20154]" dev="sockfs" ino=20154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 121.385664][ T8820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.405579][ T8820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.509753][ T29] audit: type=1400 audit(1737490934.540:456): avc: denied { bind } for pid=8844 comm="syz.4.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.531142][ T29] audit: type=1400 audit(1737490934.550:457): avc: denied { node_bind } for pid=8844 comm="syz.4.1283" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 121.605316][ T25] usb 3-1: USB disconnect, device number 7 [ 121.616860][ T8781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.808250][ T8861] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1288'. [ 121.851982][ T8781] veth0_vlan: entered promiscuous mode [ 121.861803][ T8781] veth1_vlan: entered promiscuous mode [ 121.891864][ T8781] veth0_macvtap: entered promiscuous mode [ 121.900223][ T5821] Bluetooth: hci2: command tx timeout [ 121.913598][ T8781] veth1_macvtap: entered promiscuous mode [ 121.943181][ T8781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.954075][ T8781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.964102][ T8] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 121.993894][ T8781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.019587][ T8781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.037425][ T8781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.048929][ T8781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.054996][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1292'. [ 122.067516][ T8781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.079137][ T8781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.089222][ T8781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.100286][ T8781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.111490][ T8781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.132794][ T8781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.150453][ T8781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.161078][ T8781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.172073][ T8] usb 1-1: config 0 has no interfaces? [ 122.177691][ T8781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.194682][ T8781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.210763][ T8781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.210873][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.231837][ T8781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.238014][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.244751][ T8781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.266558][ T8] usb 1-1: Product: syz [ 122.280244][ T8781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.284140][ T8] usb 1-1: Manufacturer: syz [ 122.309112][ T8] usb 1-1: SerialNumber: syz [ 122.330526][ T8] usb 1-1: config 0 descriptor?? [ 122.354782][ T8781] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.377261][ T8781] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.406402][ T8781] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.424478][ T8781] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.498451][ T3423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.516802][ T3423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.551311][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.571498][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.586721][ T8] usb 1-1: USB disconnect, device number 9 [ 122.593730][ T29] audit: type=1400 audit(1737490935.620:458): avc: denied { mounton } for pid=8781 comm="syz-executor" path="/root/syzkaller.w9hqjy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 122.690708][ T25] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 122.853320][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 122.862989][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.873815][ T25] usb 3-1: config 0 descriptor?? [ 122.885097][ T25] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 122.900892][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 122.925994][ T25] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 122.945674][ T25] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 122.964226][ T25] usb 3-1: media controller created [ 122.973975][ T25] dvb-usb: bulk message failed: -22 (5/0) [ 122.990020][ T25] dvb-usb: MAC address reading failed. [ 123.002713][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.036309][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 123.050179][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 123.064134][ T25] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 123.081166][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 123.120833][ T25] dvb-usb: schedule remote query interval to 100 msecs. [ 123.137976][ T25] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 123.159146][ T25] usb 3-1: USB disconnect, device number 8 [ 123.241172][ T25] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 123.425241][ T29] audit: type=1400 audit(1737490936.460:459): avc: denied { create } for pid=8929 comm="syz.4.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 123.458444][ T29] audit: type=1400 audit(1737490936.490:460): avc: denied { sys_admin } for pid=8929 comm="syz.4.1315" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 123.503752][ T3423] wlan0: Trigger new scan to find an IBSS to join [ 123.569834][ T29] audit: type=1400 audit(1737490936.590:461): avc: denied { sys_ptrace } for pid=8929 comm="syz.4.1315" capability=19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 123.720623][ T8942] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1321'. [ 123.764484][ T8942] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1321'. [ 123.992210][ T5821] Bluetooth: hci2: command tx timeout [ 124.036525][ T29] audit: type=1400 audit(1737490937.070:462): avc: denied { write } for pid=8954 comm="syz.5.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 124.067502][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 124.159647][ T5868] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 124.240123][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 124.259780][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.273401][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.305209][ T8] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 124.324405][ T5868] usb 3-1: config 0 has no interfaces? [ 124.335820][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.338330][ T8962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.344038][ T5868] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 124.344064][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.348077][ T5868] usb 3-1: config 0 descriptor?? [ 124.375855][ T8] usb 1-1: Product: syz [ 124.385451][ T8] usb 1-1: Manufacturer: syz [ 124.394744][ T8] usb 1-1: SerialNumber: syz [ 124.404580][ T8] usb 1-1: config 0 descriptor?? [ 124.416394][ T8] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 124.470288][ T8] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 124.561731][ T8965] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1330'. [ 124.579659][ T8965] gretap0: entered promiscuous mode [ 124.681537][ T968] usb 3-1: USB disconnect, device number 9 [ 124.704525][ T25] usb 1-1: USB disconnect, device number 10 [ 125.139584][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 125.299989][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 125.307102][ T25] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.336516][ T25] usb 3-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 125.362095][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.369748][ T25] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 125.384794][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.401148][ T25] usb 3-1: config 0 descriptor?? [ 125.459669][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 125.540523][ T29] audit: type=1400 audit(1737490938.580:463): avc: denied { bind } for pid=9010 comm="syz.4.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.632619][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 125.659247][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.690838][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.710180][ T8] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 125.719328][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.743996][ T8] usb 2-1: config 0 descriptor?? [ 125.816476][ T25] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0 [ 125.834304][ T25] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0 [ 125.845638][ T25] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0 [ 125.862549][ T25] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0 [ 125.873553][ T29] audit: type=1326 audit(1737490938.910:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9020 comm="syz.0.1353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feae2585d29 code=0x0 [ 125.918264][ T25] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0 [ 125.982354][ T29] audit: type=1400 audit(1737490939.020:465): avc: denied { mounton } for pid=9020 comm="syz.0.1353" path="/proc/636/task/637/ns" dev="proc" ino=22758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 125.990339][ T25] hid-picolcd 0003:04D8:F002.000B: No report with id 0xf4 found [ 126.023584][ T29] audit: type=1400 audit(1737490939.060:466): avc: denied { connect } for pid=9024 comm="syz.4.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 126.041361][ T25] hid-picolcd 0003:04D8:F002.000B: No report with id 0xf3 found [ 126.056275][ T5821] Bluetooth: hci2: command tx timeout [ 126.065924][ T25] usb 3-1: USB disconnect, device number 10 [ 126.175772][ T8] elan 0003:04F3:0755.000C: unknown main item tag 0x0 [ 126.202988][ T8] elan 0003:04F3:0755.000C: unknown main item tag 0x0 [ 126.222148][ T8] elan 0003:04F3:0755.000C: unknown main item tag 0x0 [ 126.239136][ T8] elan 0003:04F3:0755.000C: unknown main item tag 0x0 [ 126.255573][ T8] elan 0003:04F3:0755.000C: unknown main item tag 0x0 [ 126.268639][ T5818] Bluetooth: hci5: sending frame failed (-49) [ 126.278913][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 126.286269][ T8] elan 0003:04F3:0755.000C: failed to start in urb: -90 [ 126.287800][ T8] elan 0003:04F3:0755.000C: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 126.406153][ T968] usb 2-1: USB disconnect, device number 15 [ 126.531657][ T12] wlan0: Trigger new scan to find an IBSS to join [ 126.816484][ T29] audit: type=1400 audit(1737490939.850:467): avc: denied { name_bind } for pid=9039 comm="syz.0.1361" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 127.145289][ T9052] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 127.797174][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 127.973059][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.985149][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.004756][ T9086] tipc: Started in network mode [ 128.004762][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.017973][ T9086] tipc: Node identity 7, cluster identity 4711 [ 128.030057][ T9086] tipc: Node number set to 7 [ 128.031993][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.037152][ T9086] tipc: Cannot configure node identity twice [ 128.047414][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.098292][ T25] usb 1-1: config 0 descriptor?? [ 128.129960][ T5821] Bluetooth: hci2: command tx timeout [ 128.184729][ T9091] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.207734][ T9091] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.214867][ T9091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.249568][ T5864] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 128.419698][ T5864] usb 2-1: Using ep0 maxpacket: 32 [ 128.428986][ T5864] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 128.448715][ T5864] usb 2-1: config 0 has no interface number 0 [ 128.473090][ T5864] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 128.482282][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.495333][ T5864] usb 2-1: Product: syz [ 128.499966][ T5864] usb 2-1: Manufacturer: syz [ 128.504568][ T5864] usb 2-1: SerialNumber: syz [ 128.510883][ T5864] usb 2-1: config 0 descriptor?? [ 128.520989][ T5864] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 128.524555][ T25] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 128.528479][ T5864] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 128.546321][ T25] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 128.565987][ T25] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 128.704164][ T8] IPVS: starting estimator thread 0... [ 128.716505][ T9112] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 128.747105][ T9112] tipc: Enabled bearer , priority 10 [ 128.772881][ T3479] tipc: Subscription rejected, illegal request [ 128.774069][ T5864] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 128.797047][ T5864] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 128.800560][ T9113] IPVS: using max 38 ests per chain, 91200 per kthread [ 128.821189][ T5864] usb 2-1: USB disconnect, device number 16 [ 128.854584][ T25] usb 1-1: USB disconnect, device number 11 [ 128.859663][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 128.884724][ T9117] vcan0: entered allmulticast mode [ 128.908617][ T9117] vcan0 (unregistering): left allmulticast mode [ 129.129650][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 129.491808][ T3423] wlan0: Creating new IBSS network, BSSID ae:ca:38:eb:98:bd [ 129.553117][ T29] audit: type=1400 audit(1737490942.590:468): avc: denied { ioctl } for pid=9146 comm="syz.5.1409" path="/dev/sg0" dev="devtmpfs" ino=725 ioctlcmd=0x227e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 129.659702][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 129.842314][ T9159] delete_channel: no stack [ 129.847740][ T29] audit: type=1400 audit(1737490942.870:469): avc: denied { bind } for pid=9159 comm="syz.1.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 130.350569][ T5866] kernel read not supported for file /vga_arbiter (pid: 5866 comm: kworker/1:3) [ 130.540359][ T9201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9201 comm=syz.2.1433 [ 130.699546][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 130.900101][ T9220] netlink: 'syz.1.1441': attribute type 12 has an invalid length. [ 130.938537][ T9220] netlink: 'syz.1.1441': attribute type 29 has an invalid length. [ 130.973826][ T9220] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1441'. [ 130.991857][ T9220] netlink: 'syz.1.1441': attribute type 2 has an invalid length. [ 131.000531][ T9220] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1441'. [ 131.094155][ T9211] geneve0: entered promiscuous mode [ 131.099429][ T9211] geneve0: entered allmulticast mode [ 131.319702][ T29] audit: type=1400 audit(1737490944.360:470): avc: denied { write } for pid=9229 comm="syz.1.1443" path="socket:[22334]" dev="sockfs" ino=22334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 131.396169][ T5866] kernel write not supported for file /667/attr/exec (pid: 5866 comm: kworker/1:3) [ 131.716499][ T9246] netlink: 'syz.5.1452': attribute type 10 has an invalid length. [ 131.724742][ T29] audit: type=1400 audit(1737490944.770:471): avc: denied { read } for pid=9247 comm="syz.0.1453" path="socket:[22372]" dev="sockfs" ino=22372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.747869][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 131.760397][ T9246] syz_tun: entered promiscuous mode [ 131.837657][ T9246] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 132.451050][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.457364][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.769627][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 132.785494][ T29] audit: type=1326 audit(1737490945.820:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9289 comm="syz.0.1471" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feae2585d29 code=0x0 [ 132.835710][ T9288] sctp: [Deprecated]: syz.4.1470 (pid 9288) Use of int in maxseg socket option. [ 132.835710][ T9288] Use struct sctp_assoc_value instead [ 132.848102][ T29] audit: type=1400 audit(1737490945.870:473): avc: denied { setopt } for pid=9287 comm="syz.4.1470" lport=51961 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 132.930684][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1472'. [ 133.241019][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1480'. [ 133.264232][ T9311] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1480'. [ 133.392002][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1483'. [ 133.730163][ T5864] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 133.766611][ T9343] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1493'. [ 133.819621][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 133.899715][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 133.911101][ T5864] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.929554][ T5864] usb 5-1: config 0 has no interface number 0 [ 133.935658][ T5864] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.951731][ T5864] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 133.966526][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.977045][ T5864] usb 5-1: config 0 descriptor?? [ 133.999259][ T5864] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 134.206529][ T5864] usb 5-1: USB disconnect, device number 11 [ 134.710163][ T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 134.849603][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.871761][ T25] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 134.880101][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.927847][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.957850][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 134.974228][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.988719][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.999107][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.055968][ T25] usb 1-1: config 0 descriptor?? [ 135.069060][ T9367] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 135.190241][ T5866] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 135.349646][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 135.369327][ T5866] usb 3-1: config 0 interface 0 has no altsetting 0 [ 135.395390][ T5866] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 135.420213][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.445386][ T5866] usb 3-1: Product: syz [ 135.450094][ T5866] usb 3-1: Manufacturer: syz [ 135.455163][ T5866] usb 3-1: SerialNumber: syz [ 135.461635][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 135.472869][ T5866] usb 3-1: config 0 descriptor?? [ 135.497678][ T25] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 135.517204][ T25] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 135.540839][ T25] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 135.771744][ T968] usb 1-1: USB disconnect, device number 12 [ 135.889588][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 135.910791][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1512'. [ 135.980444][ T5866] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 136.007724][ T5866] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 136.045870][ T5866] usb 3-1: USB disconnect, device number 11 [ 136.657155][ T29] audit: type=1400 audit(1737490949.690:474): avc: denied { create } for pid=9426 comm="syz.2.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 136.698688][ T9429] ip6tnl0: entered promiscuous mode [ 136.711277][ T9429] vlan2: entered promiscuous mode [ 136.724061][ T29] audit: type=1400 audit(1737490949.720:475): avc: denied { setopt } for pid=9426 comm="syz.2.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 136.754010][ T9429] ip6tnl0: left promiscuous mode [ 136.819197][ T29] audit: type=1400 audit(1737490949.850:476): avc: denied { connect } for pid=9430 comm="syz.2.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 136.940129][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 137.113751][ T29] audit: type=1400 audit(1737490950.150:477): avc: denied { mounton } for pid=9446 comm="syz.2.1538" path="/314/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 137.136178][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.272063][ T9451] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1541'. [ 137.639613][ T5866] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 137.697730][ T9469] netlink: 'syz.4.1549': attribute type 1 has an invalid length. [ 137.716617][ T9469] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.1549'. [ 137.810756][ T5866] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 137.830559][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 137.848823][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 137.849569][ T5864] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 137.879796][ T5866] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.909702][ T5866] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.944544][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.969568][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 137.974352][ T5866] usb 6-1: config 0 descriptor?? [ 138.073064][ T5864] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 138.085248][ T5864] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 138.106576][ T5864] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 138.144761][ T5864] usb 1-1: config 1 has no interface number 0 [ 138.164594][ T5864] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 138.192005][ T5864] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 138.219669][ T5864] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 138.239341][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.283339][ T5864] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 138.338845][ T9487] netlink: 'syz.4.1557': attribute type 1 has an invalid length. [ 138.403430][ T5866] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 138.431466][ T5866] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 138.477577][ T5864] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 138.665401][ T968] usb 6-1: USB disconnect, device number 2 [ 138.695722][ T5864] usb 1-1: USB disconnect, device number 13 [ 138.700068][ T25] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 138.707310][ T5864] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 138.709694][ T5866] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 138.869574][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 138.874798][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 138.882073][ T25] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 138.891283][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 138.902842][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.911462][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 138.925627][ T25] usb 2-1: config 0 descriptor?? [ 138.932464][ T5866] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 138.947248][ T25] as10x_usb: device has been detected [ 138.952718][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.961043][ T25] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 138.970240][ T5866] usb 3-1: Product: syz [ 138.974402][ T5866] usb 3-1: Manufacturer: syz [ 138.978987][ T5866] usb 3-1: SerialNumber: syz [ 138.987426][ T25] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 138.998130][ T5866] usb 3-1: config 0 descriptor?? [ 139.009621][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 139.011644][ T25] as10x_usb: error during firmware upload part1 [ 139.016846][ T5865] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 139.023385][ T25] Registered device nBox DVB-T Dongle [ 139.034189][ T5866] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 139.051524][ T5866] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 139.141890][ T5864] usb 2-1: USB disconnect, device number 17 [ 139.157783][ T5864] Unregistered device nBox DVB-T Dongle [ 139.158507][ T5864] as10x_usb: device has been disconnected [ 139.190349][ T5865] usb 5-1: Using ep0 maxpacket: 8 [ 139.200417][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.219872][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.230316][ T5865] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 139.239372][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.255784][ T5865] usb 5-1: config 0 descriptor?? [ 139.296456][ T29] audit: type=1400 audit(1737490952.330:478): avc: denied { write } for pid=9501 comm="syz.0.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 139.298385][ T9502] lo speed is unknown, defaulting to 1000 [ 139.331438][ T9502] lo speed is unknown, defaulting to 1000 [ 139.338763][ T9502] lo speed is unknown, defaulting to 1000 [ 139.355254][ T9503] »»»»»»: renamed from lo (while UP) [ 139.426273][ T5867] »»»»»» speed is unknown, defaulting to 1000 [ 139.433761][ T9502] infiniband sz1: set active [ 139.438623][ T9502] infiniband sz1: added »»»»»» [ 139.460120][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 139.485080][ T9502] RDS/IB: sz1: added [ 139.490553][ T9502] smc: adding ib device sz1 with port count 1 [ 139.496899][ T9502] smc: ib device sz1 port 1 has pnetid [ 139.505168][ T968] »»»»»» speed is unknown, defaulting to 1000 [ 139.513808][ T9502] »»»»»» speed is unknown, defaulting to 1000 [ 139.606437][ T9502] »»»»»» speed is unknown, defaulting to 1000 [ 139.619675][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 139.627177][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 62, changing to 9 [ 139.638795][ T25] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 139.656889][ T25] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 139.667130][ T5866] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 139.669595][ T5864] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 139.674575][ T5866] em28xx 3-1:0.0: Config register raw data: 0x41 [ 139.688811][ T25] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.697285][ T5865] lenovo 0003:17EF:6062.0010: item fetching failed at offset 2/5 [ 139.701511][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.714064][ T25] usb 6-1: Product: syz [ 139.718239][ T25] usb 6-1: Manufacturer: syz [ 139.722916][ T25] usb 6-1: SerialNumber: syz [ 139.733104][ T9502] »»»»»» speed is unknown, defaulting to 1000 [ 139.758088][ T5865] lenovo 0003:17EF:6062.0010: hid_parse failed [ 139.769554][ T5865] lenovo 0003:17EF:6062.0010: probe with driver lenovo failed with error -22 [ 139.811545][ T9502] »»»»»» speed is unknown, defaulting to 1000 [ 139.859828][ T5864] usb 2-1: Using ep0 maxpacket: 32 [ 139.870880][ T5864] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 139.890288][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.915682][ T5864] usb 2-1: config 0 descriptor?? [ 139.928276][ T9502] »»»»»» speed is unknown, defaulting to 1000 [ 139.942165][ T5864] as10x_usb: device has been detected [ 139.945249][ T968] usb 5-1: USB disconnect, device number 12 [ 139.947808][ T5864] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 139.980381][ T5866] usb 3-1: USB disconnect, device number 12 [ 139.986965][ T5864] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 139.987381][ T5866] em28xx 3-1:0.0: Disconnecting em28xx [ 140.003931][ T5866] em28xx 3-1:0.0: Freeing device [ 140.011920][ T5864] as10x_usb: error during firmware upload part1 [ 140.018392][ T5864] Registered device nBox DVB-T Dongle [ 140.059601][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 140.081941][ T9502] »»»»»» speed is unknown, defaulting to 1000 [ 140.159469][ T5864] usb 2-1: USB disconnect, device number 18 [ 140.189890][ T5864] Unregistered device nBox DVB-T Dongle [ 140.197199][ T5864] as10x_usb: device has been disconnected [ 140.509731][ T5868] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 140.681029][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.697285][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.708323][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 140.718207][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.731888][ T5868] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.740990][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.750461][ T5868] usb 1-1: config 0 descriptor?? [ 140.775165][ T25] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 140.802951][ T25] cdc_ncm 6-1:1.0: bind() failure [ 140.815376][ T25] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 140.822595][ T25] cdc_ncm 6-1:1.1: bind() failure [ 140.834385][ T25] usb 6-1: USB disconnect, device number 3 [ 140.869180][ T9528] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1572'. [ 141.099554][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 141.166706][ T5868] plantronics 0003:047F:FFFF.0011: ignoring exceeding usage max [ 141.181494][ T5868] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 141.192547][ T5868] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 141.380033][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1581'. [ 141.400412][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'. [ 141.942727][ T29] audit: type=1400 audit(1737490954.980:479): avc: denied { bind } for pid=9573 comm="syz.1.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.024228][ T29] audit: type=1400 audit(1737490954.980:480): avc: denied { remount } for pid=9572 comm="syz.2.1593" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 142.061401][ T29] audit: type=1400 audit(1737490955.070:481): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 142.139602][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 142.279188][ T29] audit: type=1400 audit(1737490955.310:482): avc: denied { relabelfrom } for pid=9585 comm="syz.5.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 142.309396][ T29] audit: type=1400 audit(1737490955.330:483): avc: denied { relabelto } for pid=9585 comm="syz.5.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 142.349688][ T5866] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 142.492712][ T29] audit: type=1400 audit(1737490955.530:484): avc: denied { bind } for pid=9589 comm="syz.2.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 142.509679][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 142.551138][ T5866] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 142.577791][ T5866] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 142.592879][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.602190][ T5866] usb 2-1: Product: syz [ 142.606486][ T5866] usb 2-1: Manufacturer: syz [ 142.623579][ T5866] usb 2-1: SerialNumber: syz [ 142.643032][ T5866] usb 2-1: config 0 descriptor?? [ 142.650333][ T5866] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 142.663668][ T5866] usb 2-1: Detected FT232R [ 142.759189][ T29] audit: type=1400 audit(1737490955.790:485): avc: denied { module_request } for pid=9599 comm="syz.5.1606" kmod=7463705FFFFFFFFF scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 142.864240][ T5866] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 142.887895][ T9606] »»»»»» speed is unknown, defaulting to 1000 [ 142.895338][ T9607] could not open pipe file descriptor [ 142.959570][ T5868] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 143.088362][ T5866] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 143.128958][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 143.154770][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.169600][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 143.176996][ T5868] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 143.192614][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.204239][ T5868] usb 5-1: config 0 descriptor?? [ 143.237457][ T25] usb 1-1: USB disconnect, device number 14 [ 143.307360][ T8] usb 2-1: USB disconnect, device number 19 [ 143.324595][ T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 143.339852][ T8] ftdi_sio 2-1:0.0: device disconnected [ 143.584189][ T29] audit: type=1400 audit(1737490956.620:486): avc: denied { connect } for pid=9623 comm="syz.5.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.644637][ T29] audit: type=1400 audit(1737490956.640:487): avc: denied { setopt } for pid=9623 comm="syz.5.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.670594][ T5868] nzxt-kraken2 0003:1E71:170E.0012: unknown main item tag 0x0 [ 143.678416][ T9626] syzkaller1: entered promiscuous mode [ 143.683990][ T9626] syzkaller1: entered allmulticast mode [ 143.690041][ T5868] nzxt-kraken2 0003:1E71:170E.0012: unknown main item tag 0x0 [ 143.702529][ T5868] nzxt-kraken2 0003:1E71:170E.0012: item fetching failed at offset 2/5 [ 143.718050][ T5868] nzxt-kraken2 0003:1E71:170E.0012: hid parse failed with -22 [ 143.755082][ T5868] nzxt-kraken2 0003:1E71:170E.0012: probe with driver nzxt-kraken2 failed with error -22 [ 143.870438][ T5866] usb 5-1: USB disconnect, device number 13 [ 144.209632][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 144.430056][ T5866] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 144.516191][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1635'. [ 144.623638][ T5864] hid-generic 0000:0003:0000.0013: unknown main item tag 0x0 [ 144.629639][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 144.631579][ T5864] hid-generic 0000:0003:0000.0013: unknown main item tag 0x0 [ 144.648592][ T5864] hid-generic 0000:0003:0000.0013: unknown main item tag 0x0 [ 144.648753][ T5866] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 144.656434][ T5864] hid-generic 0000:0003:0000.0013: unknown main item tag 0x0 [ 144.656456][ T5864] hid-generic 0000:0003:0000.0013: unknown main item tag 0x0 [ 144.656475][ T5864] hid-generic 0000:0003:0000.0013: unknown main item tag 0x0 [ 144.656493][ T5864] hid-generic 0000:0003:0000.0013: unknown main item tag 0x0 [ 144.656511][ T5864] hid-generic 0000:0003:0000.0013: unknown main item tag 0x0 [ 144.656528][ T5864] hid-generic 0000:0003:0000.0013: unknown main item tag 0x0 [ 144.656547][ T5864] hid-generic 0000:0003:0000.0013: unknown main item tag 0x0 [ 144.656565][ T5864] hid-generic 0000:0003:0000.0013: unknown main item tag 0x0 [ 144.656583][ T5864] hid-generic 0000:0003:0000.0013: unknown main item tag 0x0 [ 144.656601][ T5864] hid-generic 0000:0003:0000.0013: unknown main item tag 0x0 [ 144.680860][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.702239][ T5866] usb 2-1: config 0 descriptor?? [ 144.703843][ T5864] hid-generic 0000:0003:0000.0013: unknown main item tag 0x0 [ 144.764649][ T5864] hid-generic 0000:0003:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz1 [ 144.833422][ T5868] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 144.869797][ T51] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 144.924466][ T5866] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 144.978161][ T5864] kernel write not supported for file bpf-map (pid: 5864 comm: kworker/0:4) [ 145.025907][ T5868] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.031089][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.046291][ T5868] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.065593][ T51] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 145.067453][ T5868] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 145.083246][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.104435][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 145.113969][ T5868] usb 1-1: SerialNumber: syz [ 145.130474][ T29] audit: type=1400 audit(1737490958.170:488): avc: denied { write } for pid=9696 comm="syz.5.1647" name="file0" dev="tmpfs" ino=498 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 145.153894][ T51] usb 5-1: config 0 descriptor?? [ 145.259707][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 145.374707][ T5868] usb 1-1: 0:2 : does not exist [ 145.394950][ T5868] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 145.424893][ T5868] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 145.442666][ T5868] usb 1-1: USB disconnect, device number 15 [ 145.570456][ T51] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 145.591132][ T51] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0014/input/input19 [ 145.756181][ T51] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 145.867297][ T5866] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 145.887830][ T5866] asix 2-1:0.0: probe with driver asix failed with error -71 [ 145.921338][ T5866] usb 2-1: USB disconnect, device number 20 [ 146.190809][ T51] usb 5-1: USB disconnect, device number 14 [ 146.299546][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 146.579683][ T5868] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 146.706343][ T9739] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 146.766772][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.798179][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.852097][ T5868] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 146.869603][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.897662][ T5868] usb 6-1: config 0 descriptor?? [ 147.107314][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 147.107328][ T29] audit: type=1400 audit(1737490960.140:490): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 Stopping sshd: [ 147.133157][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.244108][ T29] audit: type=1400 audit(1737490960.280:491): avc: denied { read } for pid=9768 comm="syz.0.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 147.329569][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 147.367245][ T29] audit: type=1400 audit(1737490960.400:492): avc: denied { execmem } for pid=9776 comm="syz.2.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 147.744569][ T29] audit: type=1400 audit(1737490960.780:493): avc: denied { name_connect } for pid=9791 comm="syz.0.1686" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 147.766557][ C0] vkms_vblank_simulate: vblank timer overrun Connection to 10.128.0.5 closed by remote host. [ 147.843983][ T29] audit: type=1400 audit(1737490960.870:494): avc: denied { listen } for pid=9791 comm="syz.0.1686" lport=36139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 OK [ 147.955506][ T29] audit: type=1400 audit(1737490960.880:495): avc: denied { setopt } for pid=9791 comm="syz.0.1686" lport=36139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.986059][ T5868] uclogic 0003:256C:006D.0015: failed retrieving Huion firmware version: -71 [ 148.010060][ T5868] uclogic 0003:256C:006D.0015: failed probing parameters: -71 [ 148.017669][ T29] audit: type=1400 audit(1737490960.880:496): avc: denied { accept } for pid=9791 comm="syz.0.1686" lport=36139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.057314][ T5868] uclogic 0003:256C:006D.0015: probe with driver uclogic failed with error -71 [ 148.072237][ T5868] usb 6-1: USB disconnect, device number 4 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5484) [ 148.252628][ T29] audit: type=1400 audit(1737490961.290:497): avc: denied { create } for pid=9810 comm="syz.2.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.324103][ T29] audit: type=1400 audit(1737490961.320:498): avc: denied { getopt } for pid=9810 comm="syz.2.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 Stopping network: [ 148.369585][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 148.549532][ T29] audit: type=1400 audit(1737490961.580:499): avc: denied { read write } for pid=9825 comm="ip" path="/dev/console" dev="rootfs" ino=1045 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 148.685974][ T9833] vlan0: entered promiscuous mode [ 148.695644][ T9833] vlan0: entered allmulticast mode [ 148.710823][ T5864] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 148.735034][ T9833] veth0_vlan: entered allmulticast mode [ 148.759433][ T9833] team0: Port device vlan0 added [ 148.782516][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1701'. [ 148.890530][ T5864] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config OK [ 148.919566][ T5864] usb 5-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 148.945830][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.967382][ T5864] usb 5-1: config 0 descriptor?? [ 148.972550][ T5868] usb 1-1: new full-speed USB device number 16 using dummy_hcd Stopping iptables: OK [ 149.060617][ T9854] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1704'. [ 149.082459][ T9854] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1704'. Stopping system message bus: [ 149.161261][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 149.186822][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.224925][ T5864] usb 5-1: USB disconnect, device number 15 [ 149.243002][ T5868] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 149.282065][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.301513][ T5868] usb 1-1: config 0 descriptor?? [ 149.409594][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available done [ 149.720876][ T5868] smartjoyplus 0003:0B43:0003.0016: unbalanced collection at end of report description [ 149.742026][ T5868] smartjoyplus 0003:0B43:0003.0016: parse failed [ 149.742387][ T51] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 149.748402][ T5868] smartjoyplus 0003:0B43:0003.0016: probe with driver smartjoyplus failed with error -22 [ 149.909685][ T51] usb 2-1: Using ep0 maxpacket: 32 [ 149.941527][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.966282][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.977377][ T51] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 149.978176][ T5868] usb 1-1: USB disconnect, device number 16 [ 149.994725][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.044950][ T51] usb 2-1: config 0 descriptor?? killall: udevd: no process kille[ 150.160842][ T9893] openvswitch: netlink: nsh attr 0 has unexpected len 108 expected 0 d [ 150.193311][ T9893] openvswitch: netlink: Flow actions may not be safe on all matching packets. Stopping klogd: [ 150.459548][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 150.467222][ T51] ft260 0003:0403:6030.0017: unknown main item tag 0x0 [ 150.471291][ T9911] »»»»»» speed is unknown, defaulting to 1000 OK Stopping acpid: [ 150.665996][ T51] ft260 0003:0403:6030.0017: chip code: 5e81 abf2 [ 150.672666][ T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 150.759260][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1726'. [ 150.789690][ T9922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1726'. [ 150.823861][ T9922] vlan3: entered allmulticast mode [ 150.846623][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.866626][ T51] ft260 0003:0403:6030.0017: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 150.885534][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.905247][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.988529][ T25] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.998026][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.019936][ T25] usb 6-1: config 0 descriptor?? [ 151.068222][ T51] ft260 0003:0403:6030.0017: failed to retrieve status: -71, no wakeup [ 151.079775][ T5864] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 151.087879][ T51] ft260 0003:0403:6030.0017: failed to retrieve status: -71 [ 151.112488][ T9934] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.119683][ T51] ft260 0003:0403:6030.0017: failed to reset I2C controller: -71 [ 151.152065][ T51] usb 2-1: USB disconnect, device number 21 [ 151.242033][ T5864] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 151.253639][ T5864] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.269664][ T5864] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.284472][ T5864] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.307361][ T5864] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.329545][ T5864] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.340829][ T5864] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.349296][ T5864] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.358749][ T5864] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.372187][ T5864] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.379850][ T5864] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.388765][ T5864] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.400794][ T5864] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.409733][ T5864] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.422304][ T5864] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.434325][ T5864] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.435607][ T25] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 151.449878][ T25] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 151.457921][ T5864] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.461024][ T25] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 151.476618][ T5864] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.490103][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 151.499326][ T5864] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.506877][ T5864] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.515993][ T5864] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.527046][ T5864] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.535657][ T5864] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.545208][ T5864] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.556426][ T5864] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.572522][ T5864] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 151.584568][ T5864] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 151.593012][ T5864] usb 5-1: Product: syz [ 151.597177][ T5864] usb 5-1: Manufacturer: syz [ 151.602348][ T5864] usb 5-1: SerialNumber: syz [ 151.610376][ T5864] usb 5-1: config 0 descriptor?? [ 151.625248][ T5864] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 OK Stopping syslogd: [ 151.832477][ T5864] usb 6-1: USB disconnect, device number 5 [ 151.952621][ T5865] usb 5-1: USB disconnect, device number 16 [ 151.960700][ T5865] yurex 5-1:0.0: USB YUREX #1 now disconnected OK umount: can't remount debugfs read-only [ 152.279735][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 152.279750][ T29] audit: type=1400 audit(1737490965.320:542): avc: denied { read } for pid=9973 comm="syz.2.1745" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 152.320667][ T29] audit: type=1400 audit(1737490965.320:543): avc: denied { open } for pid=9973 comm="syz.2.1745" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 152.367309][ T29] audit: type=1400 audit(1737490965.350:544): avc: denied { ioctl } for pid=9973 comm="syz.2.1745" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 152.412593][ T9976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1746'. [ 152.428453][ T9976] team0: entered promiscuous mode [ 152.433717][ T9976] team_slave_0: entered promiscuous mode [ 152.440179][ T9976] team_slave_1: entered promiscuous mode [ 152.447555][ T9976] batadv_slave_1: entered promiscuous mode [ 152.469747][ T25] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 152.489313][ T29] audit: type=1400 audit(1737490965.520:545): avc: denied { read } for pid=9977 comm="syz.2.1747" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 152.529595][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 152.534908][ T29] audit: type=1400 audit(1737490965.520:546): avc: denied { open } for pid=9977 comm="syz.2.1747" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 152.573573][ T29] audit: type=1400 audit(1737490965.530:547): avc: denied { ioctl } for pid=9977 comm="syz.2.1747" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 152.597989][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.653195][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 152.662415][ T25] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 152.678827][ T25] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.718773][ T25] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.742304][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 152.765386][ T25] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 152.830451][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.855049][ T25] usb 2-1: config 0 descriptor?? [ 152.873496][ T9987] syzkaller1: entered promiscuous mode [ 152.879263][ T9987] syzkaller1: entered allmulticast mode [ 153.210047][ T29] audit: type=1400 audit(1737490966.240:548): avc: denied { map } for pid=10000 comm="syz.2.1757" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 153.325662][ T29] audit: type=1400 audit(1737490966.240:549): avc: denied { execute } for pid=10000 comm="syz.2.1757" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 153.337120][ T25] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0019/input/input20 [ 153.451491][ T25] sony 0003:054C:03D5.0019: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 153.569780][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 153.650774][ T25] usb 2-1: USB disconnect, device number 22 [ 153.745190][ T29] audit: type=1400 audit(1737490966.780:550): avc: denied { node_bind } for pid=10022 comm="syz.2.1765" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 153.804088][ T29] audit: type=1400 audit(1737490966.810:551): avc: denied { setopt } for pid=10023 comm="syz.0.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 153.959605][ T5864] usb 5-1: new high-speed USB device number 17 using dummy_hcd Sent SIGTERM to all processes [ 154.622535][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 154.732291][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.764374][ T8902] bond0: (slave syz_tun): Releasing backup interface [ 154.821373][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.907195][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.965035][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.036286][ T11] bridge_slave_1: left allmulticast mode [ 155.042479][ T11] bridge_slave_1: left promiscuous mode [ 155.049788][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.061062][ T11] bridge_slave_0: left allmulticast mode [ 155.066725][ T11] bridge_slave_0: left promiscuous mode [ 155.072802][ T11] bridge0: port 1(bridge_slave_0) entered disabled state Sent SIGKILL to all processes Requesting system poweroff [ 155.358096][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.370383][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.382712][ T11] bond0 (unregistering): (slave bond1): Releasing backup interface [ 155.391200][ T11] bond0 (unregistering): Released all slaves [ 155.470588][ T11] bond1 (unregistering): Released all slaves [ 155.649712][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 155.757312][ T11] hsr_slave_0: left promiscuous mode [ 155.766672][ T11] hsr_slave_1: left promiscuous mode [ 155.772524][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.780023][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.792574][ T11] veth1_macvtap: left promiscuous mode [ 155.798333][ T11] veth0_macvtap: left promiscuous mode [ 155.803918][ T11] veth1_vlan: left promiscuous mode [ 155.809298][ T11] veth0_vlan: left promiscuous mode [ 156.056875][ T11] team0 (unregistering): Port device team_slave_1 removed [ 156.091760][ T11] team0 (unregistering): Port device team_slave_0 removed [ 156.699577][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 156.736619][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.824101][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.898932][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.957290][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.041289][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.111247][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.181412][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.250118][T10031] ================================================================== [ 157.250890][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.258186][T10031] BUG: KASAN: slab-use-after-free in notifier_call_chain+0x3bf/0x410 [ 157.276452][T10031] Read of size 8 at addr ffff888079ec18d0 by task init/10031 [ 157.283809][T10031] [ 157.286107][T10031] CPU: 0 UID: 0 PID: 10031 Comm: init Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 157.295966][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 157.305992][T10031] Call Trace: [ 157.309250][T10031] [ 157.312164][T10031] dump_stack_lvl+0x116/0x1f0 [ 157.316865][T10031] print_report+0xc3/0x620 [ 157.321276][T10031] ? __virt_addr_valid+0x5e/0x590 [ 157.326294][T10031] ? __phys_addr+0xc6/0x150 [ 157.330796][T10031] kasan_report+0xd9/0x110 [ 157.335214][T10031] ? notifier_call_chain+0x3bf/0x410 [ 157.340519][T10031] ? notifier_call_chain+0x3bf/0x410 [ 157.345783][T10031] notifier_call_chain+0x3bf/0x410 [ 157.350880][T10031] ? __pfx_bcache_reboot+0x10/0x10 [ 157.356006][T10031] blocking_notifier_call_chain+0x69/0xa0 [ 157.362411][T10031] kernel_power_off+0x1c/0xb0 [ 157.367070][T10031] __do_sys_reboot+0x376/0x3e0 [ 157.371823][T10031] ? __pfx___do_sys_reboot+0x10/0x10 [ 157.377124][T10031] ? xfd_validate_state+0x5d/0x180 [ 157.382221][T10031] do_syscall_64+0xcd/0x250 [ 157.386698][T10031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.392578][T10031] RIP: 0033:0x7f16b8c208b4 [ 157.396986][T10031] Code: f0 ff ff 73 01 c3 48 8b 0d 71 55 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 89 fa be 69 19 12 28 bf ad de e1 fe b8 a9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 45 55 0d 00 f7 d8 64 89 02 48 83 [ 157.416571][T10031] RSP: 002b:00007ffd643fab38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a9 [ 157.424959][T10031] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00007f16b8c208b4 [ 157.432914][T10031] RDX: 000000004321fedc RSI: 0000000028121969 RDI: 00000000fee1dead [ 157.440873][T10031] RBP: 000000004321fedc R08: 0000000000000000 R09: 0000000000000000 [ 157.448816][T10031] R10: 00007ffd643fab10 R11: 0000000000000246 R12: 0000000000000000 [ 157.456760][T10031] R13: 00007ffd643fab98 R14: 0000558c495e8169 R15: 00007f16b8dfea80 [ 157.464708][T10031] [ 157.467700][T10031] [ 157.470004][T10031] Allocated by task 9906: [ 157.474312][T10031] kasan_save_stack+0x33/0x60 [ 157.478963][T10031] kasan_save_track+0x14/0x30 [ 157.483611][T10031] __kasan_kmalloc+0xaa/0xb0 [ 157.488178][T10031] tomoyo_init_log+0xcb3/0x2170 [ 157.493011][T10031] tomoyo_supervisor+0x30c/0xea0 [ 157.497942][T10031] tomoyo_env_perm+0x193/0x210 [ 157.502676][T10031] tomoyo_find_next_domain+0xe8e/0x2070 [ 157.508188][T10031] tomoyo_bprm_check_security+0x12e/0x1d0 [ 157.513897][T10031] security_bprm_check+0x1b9/0x1e0 [ 157.518979][T10031] bprm_execve+0x63e/0x1550 [ 157.523450][T10031] do_execveat_common.isra.0+0x4a2/0x610 [ 157.529051][T10031] __x64_sys_execve+0x8c/0xb0 [ 157.533696][T10031] do_syscall_64+0xcd/0x250 [ 157.538168][T10031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.544035][T10031] [ 157.546327][T10031] Freed by task 9906: [ 157.550281][T10031] kasan_save_stack+0x33/0x60 [ 157.554947][T10031] kasan_save_track+0x14/0x30 [ 157.559601][T10031] kasan_save_free_info+0x3b/0x60 [ 157.564618][T10031] __kasan_slab_free+0x51/0x70 [ 157.569351][T10031] kfree+0x14f/0x4b0 [ 157.573229][T10031] tomoyo_init_log+0x1531/0x2170 [ 157.575130][ T3574] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 157.578167][T10031] tomoyo_supervisor+0x30c/0xea0 [ 157.578197][T10031] tomoyo_env_perm+0x193/0x210 [ 157.598005][T10031] tomoyo_find_next_domain+0xe8e/0x2070 [ 157.603529][T10031] tomoyo_bprm_check_security+0x12e/0x1d0 [ 157.609237][T10031] security_bprm_check+0x1b9/0x1e0 [ 157.614337][T10031] bprm_execve+0x63e/0x1550 [ 157.618839][T10031] do_execveat_common.isra.0+0x4a2/0x610 [ 157.624470][T10031] __x64_sys_execve+0x8c/0xb0 [ 157.629139][T10031] do_syscall_64+0xcd/0x250 [ 157.633628][T10031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.639511][T10031] [ 157.641816][T10031] The buggy address belongs to the object at ffff888079ec0000 [ 157.641816][T10031] which belongs to the cache kmalloc-8k of size 8192 [ 157.655855][T10031] The buggy address is located 6352 bytes inside of [ 157.655855][T10031] freed 8192-byte region [ffff888079ec0000, ffff888079ec2000) [ 157.669810][T10031] [ 157.672125][T10031] The buggy address belongs to the physical page: [ 157.678517][T10031] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79ec0 [ 157.687246][T10031] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 157.695715][T10031] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 157.703231][T10031] page_type: f5(slab) [ 157.707183][T10031] raw: 00fff00000000040 ffff88801b042280 ffffea0000952c00 dead000000000002 [ 157.715740][T10031] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 157.724292][T10031] head: 00fff00000000040 ffff88801b042280 ffffea0000952c00 dead000000000002 [ 157.732942][T10031] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 157.741603][T10031] head: 00fff00000000003 ffffea0001e7b001 ffffffffffffffff 0000000000000000 [ 157.750254][T10031] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 157.758904][T10031] page dumped because: kasan: bad access detected [ 157.765283][T10031] page_owner tracks the page as allocated [ 157.770971][T10031] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 11, tgid 11 (kworker/u8:0), ts 79439730945, free_ts 76905984232 [ 157.789900][T10031] post_alloc_hook+0x2d1/0x350 [ 157.794660][T10031] get_page_from_freelist+0xfce/0x2f80 [ 157.800092][T10031] __alloc_pages_noprof+0x221/0x2470 [ 157.805347][T10031] alloc_pages_mpol_noprof+0x2c8/0x620 [ 157.810783][T10031] new_slab+0x2c9/0x410 [ 157.814936][T10031] ___slab_alloc+0xd75/0x17a0 [ 157.819590][T10031] __slab_alloc.constprop.0+0x56/0xb0 [ 157.824951][T10031] __kmalloc_noprof+0x2ec/0x510 [ 157.829780][T10031] n_hdlc_tty_receive+0x223/0x280 [ 157.834801][T10031] tty_ldisc_receive_buf+0x153/0x190 [ 157.840054][T10031] tty_port_default_receive_buf+0x70/0xb0 [ 157.845755][T10031] flush_to_ldisc+0x264/0x780 [ 157.850409][T10031] process_one_work+0x9c5/0x1ba0 [ 157.855333][T10031] worker_thread+0x6c8/0xf00 [ 157.859898][T10031] kthread+0x2c1/0x3a0 [ 157.863955][T10031] ret_from_fork+0x45/0x80 [ 157.868341][T10031] page last free pid 6691 tgid 6691 stack trace: [ 157.874635][T10031] free_unref_page+0x661/0x1080 [ 157.879456][T10031] __folio_put+0x32a/0x450 [ 157.883854][T10031] put_page+0x21e/0x280 [ 157.887987][T10031] skb_release_data+0x4d7/0x730 [ 157.892821][T10031] kfree_skb_list_reason+0x2c6/0x4c0 [ 157.898094][T10031] skb_release_data+0x553/0x730 [