last executing test programs: 8.093966979s ago: executing program 2 (id=1604): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/106, 0x6a}], 0x1, 0x4, 0x3ff, 0x0) 7.953037031s ago: executing program 2 (id=1605): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) listen(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000300)=0x60) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {}, {0x4, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0x1, 0x88a}, 0x28) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) statx(r5, 0x0, 0x1000, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000080000/0xf000)=nil, 0xf000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x4fd201bf827546cd, 0x0) 6.004165611s ago: executing program 2 (id=1618): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0) ptrace(0x10, r2) process_vm_readv(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/79, 0x4f}], 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/99, 0x63}], 0x1, 0x0) 5.650087968s ago: executing program 2 (id=1620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) listen(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000300)=0x60) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {}, {0x4, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0x1, 0x88a}, 0x28) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) statx(r6, 0x0, 0x1000, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000080000/0xf000)=nil, 0xf000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x4fd201bf827546cd, 0x0) 4.344589867s ago: executing program 4 (id=1628): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x28}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.970710941s ago: executing program 4 (id=1629): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 3.764811912s ago: executing program 4 (id=1630): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000680)={0x20, 0x7, 0x4, "af97e17a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000280)={0x0, 0x8, 0x4, "d2be6d10"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.960995515s ago: executing program 0 (id=1632): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x4, 0x180, 0x4, 0xff, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.70943761s ago: executing program 0 (id=1634): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$packet(0x11, 0x3, 0x300) add_key$user(0x0, &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty, 0x2}, 0x1c) r2 = socket(0x28, 0x5, 0x0) sendmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x28, 0x20000811}, 0x4008005) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000092000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) 2.200527502s ago: executing program 3 (id=1637): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x10c) socket(0x29, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x211041, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000400)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m', &(0x7f00000000c0)='a\x9aC\x91\xf7?\x00/1|\xa4i3\x17u\x1f:m\xbbt\x0e\x94\xda\x15x\xb9\x97\xbe\xd3S\xf8\xad\x14f\xeb\xf3C0y\xa0', &(0x7f00000003c0)='+[@-\x00']}) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000004780), 0x80, 0x0) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000047c0)) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x20}}, 0x0) 2.191411812s ago: executing program 2 (id=1638): r0 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r0, 0x409, 0x12) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) 2.009518178s ago: executing program 0 (id=1639): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x3e, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0xffff, 0x8000, 0x4, 0x7, 0x3, 0xf, 0xe95e, 0x200, 0x0, 0xaff5, 0xfffe, 0x3}}, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.450609367s ago: executing program 1 (id=1641): r0 = socket$netlink(0x10, 0x3, 0xb) unshare(0x22020600) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00') r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.418906383s ago: executing program 2 (id=1642): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec70102030109022400010200100009045807028ab53800090506020001000006090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.253058098s ago: executing program 1 (id=1643): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0xda) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000500), &(0x7f00000002c0)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 1.225019698s ago: executing program 3 (id=1644): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@deltclass={0x2c, 0x29, 0x2, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xb}, {0x5, 0xc}, {0xfff2, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xfffffffffffffed1, 0x0, &(0x7f0000000600)="63eced8e46dc3f0adf33c9f7b9869f8a47a3b50dde07f2592219841bbaa2966fb6e98bc17927167a49b442443f72502bfc51ee33d17f145696018426afaa4131ca369e5e29702269ce717233dbeb826ada9624accd5260a34b2988e26e6c9dd506692bdd71a13f17d7771e0000000030520000b53a3479e86ac869f10000909f019cdbe742ab00"/158, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.178312085s ago: executing program 1 (id=1645): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x8, 0xca, 0x0, 0x1000, {[@generic={0x13, 0x5, "2007a9"}, @mptcp=@syn={0x1e, 0xc, 0x3, 0x1, 0x6, 0x6, 0x1}]}}}}}}}, 0x0) 1.117038815s ago: executing program 3 (id=1646): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, r2, r4, 0x80000003, 0xde, 0xfffffffc, 0x0, 0x200, 0xffffffff, 0xc, 0x2000000, 0x40000002}) 1.104793096s ago: executing program 1 (id=1647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2e41d16cd5f466b822000f00d0460f06f245dd48f526263ef2a585f6b92e030000b800000000ba008000000f3041ab0fc73a0fc71f", 0x35}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 937.14855ms ago: executing program 3 (id=1648): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001540)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002480)="099bea362826e0713983066c215b07c69e92c79d90a95ba019b3379e49941f5afea3bea9108c245d74497ab05822c48384df2cfa6c6f33ef019fd0ce98bc5b6934f05dcd846d64da6a716f6fc2aebbdd", 0x50}], 0x1, &(0x7f0000000000)=[@assoc={0x18, 0x117, 0x4, 0x40}], 0x18}], 0x1, 0x880) recvmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f00000001c0)=""/236, 0xec}], 0x2}, 0x10000) 876.777576ms ago: executing program 4 (id=1649): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 867.410202ms ago: executing program 0 (id=1650): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$packet(0x11, 0x3, 0x300) add_key$user(0x0, &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty, 0x2}, 0x1c) r2 = socket(0x28, 0x5, 0x0) sendmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x28, 0x20000811}, 0x4008005) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000092000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) 856.065402ms ago: executing program 3 (id=1651): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 380.10021ms ago: executing program 1 (id=1652): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x0, 0x100}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000028c0)={0x2020}, 0x2020) 325.887057ms ago: executing program 4 (id=1653): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 324.661297ms ago: executing program 0 (id=1654): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x11}}}}}}}, 0x0) 253.675046ms ago: executing program 3 (id=1655): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000f40)=ANY=[@ANYBLOB="0c010000060000000000000000000000040000000000000000000000ff0f000000000000000000002f7379732f06c0a49e4e00000000000000656edf0000000080000100000000008adeb51a38c154cce97c3818f0b5b45830920a254561464beace866339ff36688c24a22cc3a4c9f4c81fa3c277618fc547ad159bfdcc3847ef50bd2a9860eb5dded6d057d3189367185de0fcd00b7bf62cd6a3b1fcbc4738759b48b33b94893149740e9e6dad90d2926929314c67538f347aa4f78f16ee43533b4b6bdc45e01f9ba45985d8807a530cb7f2b27c881b3f8e0a752be8bfdc3ed558e2fd52edc2c85ff00f7f7dc491ca3f8a892459d77503e588909c6b31212b7c1882575b84052fcc49ff00"], 0x10c) socket(0x29, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x211041, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000400)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m', &(0x7f00000000c0)='a\x9aC\x91\xf7?\x00/1|\xa4i3\x17u\x1f:m\xbbt\x0e\x94\xda\x15x\xb9\x97\xbe\xd3S\xf8\xad\x14f\xeb\xf3C0y\xa0', &(0x7f00000003c0)='+[@-\x00']}) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000004780), 0x80, 0x0) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000047c0)) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x20}}, 0x0) 182.026221ms ago: executing program 4 (id=1656): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001280004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be"], 0xfdef) 83.978435ms ago: executing program 0 (id=1657): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000400)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000240)={0x40, 0x5, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x40, 0x7, 0x2, "1110"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=1658): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x7d}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) kernel console output (not intermixed with test programs): recv } for pid=5615 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.73 dest=45950 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 234.782869][ T29] audit: type=1400 audit(1778136719.238:379): avc: denied { mounton } for pid=7831 comm="syz.1.696" path="/136/file1" dev="tmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 235.562343][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 235.569668][ T46] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 235.580409][ T46] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 235.602153][ T46] asix 1-1:0.251: probe with driver asix failed with error -32 [ 235.644696][ T46] usb 1-1: USB disconnect, device number 12 [ 235.653042][ T7851] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 235.929033][ T29] audit: type=1400 audit(1778136720.458:380): avc: denied { mount } for pid=7860 comm="syz.3.706" name="/" dev="pstore" ino=3520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 236.026765][ T7863] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 236.056190][ T29] audit: type=1400 audit(1778136720.488:381): avc: denied { read } for pid=7860 comm="syz.3.706" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 236.079360][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 236.142500][ T29] audit: type=1400 audit(1778136720.488:382): avc: denied { open } for pid=7860 comm="syz.3.706" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 236.192553][ T29] audit: type=1400 audit(1778136720.498:383): avc: denied { ioctl } for pid=7860 comm="syz.3.706" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 236.261221][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 236.281136][ T29] audit: type=1400 audit(1778136720.518:384): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 236.286040][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.676042][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 236.699427][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.715303][ T7869] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 236.748679][ T9] usb 5-1: config 0 descriptor?? [ 236.881627][ T29] audit: type=1400 audit(1778136721.418:385): avc: denied { ioctl } for pid=7875 comm="syz.0.713" path="socket:[17361]" dev="sockfs" ino=17361 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 237.199636][ T9] hid_parser_main: 32 callbacks suppressed [ 237.199654][ T9] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0 [ 237.229615][ T9] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0 [ 237.260002][ T9] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0 [ 237.297134][ T9] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0 [ 237.341032][ T9] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0 [ 237.387647][ T9] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0 [ 237.424427][ T9] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0 [ 237.447188][ T9] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0 [ 237.559210][ T9] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0 [ 237.581363][ T9] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0 [ 237.608017][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.723'. [ 237.637966][ T9] kovaplus 0003:1E7D:2D50.000B: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 237.655318][ T5832] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 237.972764][ T7905] netlink: 'syz.0.724': attribute type 4 has an invalid length. [ 237.996441][ T7905] netlink: 'syz.0.724': attribute type 4 has an invalid length. [ 238.629564][ T9] kovaplus 0003:1E7D:2D50.000B: couldn't init struct kovaplus_device [ 238.671464][ T5832] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 238.693474][ T9] kovaplus 0003:1E7D:2D50.000B: couldn't install mouse [ 238.710574][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.721231][ T9] kovaplus 0003:1E7D:2D50.000B: probe with driver kovaplus failed with error -71 [ 238.731503][ T5832] usb 3-1: Product: syz [ 238.739064][ T5832] usb 3-1: Manufacturer: syz [ 238.766308][ T5832] usb 3-1: SerialNumber: syz [ 238.771255][ T9] usb 5-1: USB disconnect, device number 8 [ 238.824550][ T5832] usb 3-1: config 0 descriptor?? [ 238.861401][ T5832] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 239.077821][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.728'. [ 239.089560][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.728'. [ 239.285145][ T5747] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 239.293875][ T5832] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 239.467127][ T5747] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 239.504463][ T5747] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 239.543988][ T5747] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 239.566269][ T5747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.622690][ T7916] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 239.647703][ T5832] usb 3-1: USB disconnect, device number 7 [ 239.654556][ T5747] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 240.074854][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 240.074871][ T29] audit: type=1400 audit(1778136724.608:392): avc: denied { create } for pid=7936 comm="syz.1.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 240.115934][ T5747] usb 4-1: USB disconnect, device number 12 [ 240.154022][ T29] audit: type=1400 audit(1778136724.638:393): avc: denied { bind } for pid=7936 comm="syz.1.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 240.179446][ T5733] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 240.266076][ T7940] netlink: 'syz.1.738': attribute type 1 has an invalid length. [ 240.283280][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'. [ 240.381247][ T5733] usb 1-1: config index 0 descriptor too short (expected 1572, got 36) [ 240.403333][ T5733] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.423315][ T5733] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 240.439178][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.461240][ T5733] usb 1-1: Product: syz [ 240.471809][ T5733] usb 1-1: Manufacturer: syz [ 240.479930][ T5733] usb 1-1: SerialNumber: syz [ 240.520621][ T5733] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input22 [ 240.675102][ T5719] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 240.732846][ T4963] bcm5974 1-1:1.0: could not read from device [ 240.747204][ T4963] bcm5974 1-1:1.0: could not read from device [ 240.761901][ T5733] bcm5974 1-1:1.0: could not read from device [ 240.768788][ T5832] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 240.794493][ T5733] input: failed to attach handler mousedev to device input22, error: -5 [ 240.814100][ T4963] bcm5974 1-1:1.0: could not read from device [ 240.821952][ T5733] usb 1-1: USB disconnect, device number 13 [ 240.829680][ T4963] bcm5974 1-1:1.0: could not read from device [ 240.847461][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 240.862060][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.873299][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.884355][ T5719] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 240.899983][ T5719] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 240.912600][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.935127][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 240.946387][ T5832] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.972509][ T5719] usb 2-1: config 0 descriptor?? [ 240.985307][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 241.015920][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 241.031269][ T5832] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 241.044183][ T5832] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.062517][ T5832] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 241.072833][ T5832] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 241.086603][ T5832] usb 3-1: Manufacturer: syz [ 241.107597][ T5832] usb 3-1: config 0 descriptor?? [ 241.211375][ T29] audit: type=1400 audit(1778136725.748:394): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 241.385875][ T5832] rc_core: IR keymap rc-hauppauge not found [ 241.396454][ T5832] Registered IR keymap rc-empty [ 241.397969][ T7945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.406657][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 241.435562][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 241.438269][ T7945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.516255][ T5832] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 241.556975][ T5747] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 241.597119][ T5832] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input23 [ 241.790579][ T5747] usb 4-1: Using ep0 maxpacket: 8 [ 241.881966][ T5747] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.917768][ T5747] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.936480][ T5747] usb 4-1: config 0 interface 0 has no altsetting 0 [ 241.959513][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 241.960653][ T5747] usb 4-1: New USB device found, idVendor=045e, idProduct=00ec, bcdDevice= 0.02 [ 241.986148][ T5719] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 242.002925][ T5719] microsoft 0003:045E:07DA.000C: no inputs found [ 242.009452][ T5719] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 242.020853][ T5747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.036511][ T5747] usb 4-1: config 0 descriptor?? [ 242.055411][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.077239][ T29] audit: type=1400 audit(1778136726.588:395): avc: denied { bind } for pid=7960 comm="syz.0.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 242.095149][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.106889][ T5719] usb 2-1: USB disconnect, device number 11 [ 242.147445][ T29] audit: type=1400 audit(1778136726.598:396): avc: denied { node_bind } for pid=7960 comm="syz.0.746" saddr=100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 242.165223][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.206724][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.251599][ T7962] fido_id[7962]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 242.267419][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.295268][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.327228][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.357152][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.391444][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.417765][ T5832] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 242.436291][ T5832] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 242.465669][ T5832] usb 3-1: USB disconnect, device number 8 [ 242.603131][ T5747] hid (null): unknown global tag 0xc [ 242.614668][ T5747] hid-generic 0003:045E:00EC.000D: collection stack underflow [ 242.627107][ T5747] hid-generic 0003:045E:00EC.000D: item 0 1 0 12 parsing failed [ 242.635566][ T5747] hid-generic 0003:045E:00EC.000D: probe with driver hid-generic failed with error -22 [ 242.665794][ T46] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 242.907247][ T7974] netlink: 'syz.1.750': attribute type 4 has an invalid length. [ 242.940627][ T7974] netlink: 'syz.1.750': attribute type 4 has an invalid length. [ 243.131497][ T46] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 243.150557][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.172933][ T46] usb 1-1: Product: syz [ 243.177601][ T46] usb 1-1: Manufacturer: syz [ 243.182325][ T46] usb 1-1: SerialNumber: syz [ 243.204402][ T46] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 243.238994][ T5719] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 243.262580][ T5733] usb 4-1: USB disconnect, device number 13 [ 243.350349][ T7976] netlink: 40 bytes leftover after parsing attributes in process `syz.2.751'. [ 243.391149][ T7976] netlink: 'syz.2.751': attribute type 1 has an invalid length. [ 243.409734][ T29] audit: type=1400 audit(1778136727.948:397): avc: denied { read } for pid=7977 comm="syz.1.752" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 243.503958][ T29] audit: type=1400 audit(1778136727.948:398): avc: denied { open } for pid=7977 comm="syz.1.752" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 243.532302][ T29] audit: type=1400 audit(1778136727.958:399): avc: denied { ioctl } for pid=7977 comm="syz.1.752" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 243.673158][ T7986] warning: `syz.2.756' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 243.798764][ T29] audit: type=1400 audit(1778136728.338:400): avc: denied { create } for pid=7988 comm="syz.2.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 243.821905][ T29] audit: type=1400 audit(1778136728.358:401): avc: denied { bind } for pid=7988 comm="syz.2.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 243.895337][ T5733] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 243.931115][ T46] usb 1-1: USB disconnect, device number 14 [ 244.066120][ T5733] usb 2-1: Using ep0 maxpacket: 16 [ 244.088387][ T5733] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.120740][ T5733] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.134570][ T5733] usb 2-1: config 0 interface 0 has no altsetting 0 [ 244.142627][ T5733] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 244.152621][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.174763][ T5733] usb 2-1: config 0 descriptor?? [ 244.585293][ T5719] usb 1-1: Service connection timeout for: 256 [ 244.592284][ T5719] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 244.620860][ T5719] ath9k_htc: Failed to initialize the device [ 244.647679][ T46] usb 1-1: ath9k_htc: USB layer deinitialized [ 244.669303][ T5746] hid_parser_main: 222 callbacks suppressed [ 244.669326][ T5746] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 244.695394][ T5746] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 244.748789][ T5746] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 244.917647][ T5746] usb 2-1: USB disconnect, device number 12 [ 244.941048][ T8007] fido_id[8007]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 246.554447][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.773'. [ 246.587501][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.773'. [ 246.781068][ T8034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.774'. [ 246.871425][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 246.871441][ T29] audit: type=1400 audit(1778136731.408:406): avc: denied { accept } for pid=8035 comm="syz.2.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 247.345117][ T46] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 247.804536][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 248.213077][ T8063] trusted_key: encrypted_key: insufficient parameters specified [ 248.285275][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 248.483104][ T46] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.520194][ T46] usb 3-1: config 0 interface 0 has no altsetting 0 [ 248.528781][ T46] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 248.559478][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.607949][ T46] usb 3-1: config 0 descriptor?? [ 249.394512][ T46] mcp2221 0003:04D8:00DD.0010: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 249.477470][ T8097] trusted_key: encrypted_key: insufficient parameters specified [ 249.515288][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 249.805944][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 249.837027][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 249.862650][ T24] usb 1-1: config 8 has an invalid interface number: 180 but max is 0 [ 249.877427][ T46] usb 3-1: USB disconnect, device number 9 [ 249.886635][ T24] usb 1-1: config 8 has no interface number 0 [ 249.903997][ T24] usb 1-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=98.9a [ 249.920744][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.944767][ T24] usb 1-1: Product: syz [ 249.957476][ T24] usb 1-1: Manufacturer: syz [ 249.964153][ T24] usb 1-1: SerialNumber: syz [ 250.090590][ T8103] geneve2: entered promiscuous mode [ 250.536626][ T24] usb 1-1: unsupported MDLM descriptors [ 250.562671][ T24] usb 1-1: USB disconnect, device number 15 [ 250.685642][ T46] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 250.936288][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 250.937675][ T8129] trusted_key: encrypted_key: insufficient parameters specified [ 251.099914][ T46] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 251.115888][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.128968][ T46] pvrusb2: Hardware description: Terratec Grabster AV400 [ 251.145120][ T46] pvrusb2: ********** [ 251.149326][ T46] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 251.160069][ T46] pvrusb2: Important functionality might not be entirely working. [ 251.168252][ T46] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 251.200308][ T46] pvrusb2: ********** [ 251.436785][ T2359] pvrusb2: Invalid write control endpoint [ 251.582560][ T8137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.814'. [ 251.944311][ T2359] pvrusb2: Invalid write control endpoint [ 251.950771][ T2359] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 251.962642][ T2359] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 251.979584][ T2359] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 252.001948][ T24] usb 2-1: USB disconnect, device number 13 [ 252.010107][ T2359] pvrusb2: Device being rendered inoperable [ 252.022027][ T2359] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 252.034865][ T2359] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 252.051363][ T2359] pvrusb2: Attached sub-driver cx25840 [ 252.058194][ T2359] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 252.086364][ T2359] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 252.283954][ T29] audit: type=1400 audit(1778136736.818:407): avc: denied { read } for pid=8145 comm="syz.2.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 252.295583][ T8143] loop5: detected capacity change from 0 to 7 [ 252.372223][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.381767][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.401090][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.405372][ T29] audit: type=1400 audit(1778136736.938:408): avc: denied { mount } for pid=8149 comm="syz.2.821" name="/" dev="ramfs" ino=18254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 252.410279][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.449562][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.458831][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.474588][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.483793][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.498132][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.507334][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.515978][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.525173][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.537061][ T29] audit: type=1400 audit(1778136737.078:409): avc: denied { unmount } for pid=5623 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 252.537108][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.537143][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.575262][ T8143] ldm_validate_partition_table(): Disk read failed. [ 252.614552][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.623809][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.636228][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.645505][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.657920][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.667191][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.678287][ T8143] Dev loop5: unable to read RDB block 0 [ 252.694104][ T8143] loop5: unable to read partition table [ 252.775359][ T8143] loop5: partition table beyond EOD, truncated [ 252.813999][ T8157] trusted_key: encrypted_key: insufficient parameters specified [ 252.850475][ T8143] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 253.067983][ T8156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.823'. [ 253.079215][ T29] audit: type=1400 audit(1778136737.608:410): avc: denied { watch } for pid=8160 comm="syz.1.826" path="/167" dev="tmpfs" ino=893 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 253.522851][ T29] audit: type=1400 audit(1778136738.058:411): avc: denied { mount } for pid=8175 comm="syz.4.832" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 253.584644][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.829'. [ 253.935244][ T29] audit: type=1400 audit(1778136738.468:412): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 253.998854][ T29] audit: type=1400 audit(1778136738.538:413): avc: denied { append } for pid=8181 comm="syz.2.835" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 254.222660][ T5832] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 254.267557][ T8192] trusted_key: encrypted_key: insufficient parameters specified [ 254.461037][ T8189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.836'. [ 254.544327][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 254.676399][ T5832] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 254.854367][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'. [ 254.879389][ T29] audit: type=1400 audit(1778136739.408:414): avc: denied { connect } for pid=8200 comm="syz.2.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.935244][ T46] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 255.064477][ T29] audit: type=1400 audit(1778136739.598:415): avc: denied { write } for pid=8208 comm="syz.1.846" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 255.125096][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 255.150178][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.176747][ T46] usb 1-1: config 0 has no interfaces? [ 255.193347][ T46] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 255.218830][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.256019][ T46] usb 1-1: config 0 descriptor?? [ 255.510317][ T8223] trusted_key: encrypted_key: insufficient parameters specified [ 255.699610][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.735716][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.760457][ T8195] dlm: plock device version mismatch: kernel (1.2.0), user (68223748.0.0) [ 255.771185][ T5733] usb 1-1: USB disconnect, device number 16 [ 256.463745][ T8234] binder: 8233:8234 ioctl c018620c 200000000000 returned -22 [ 256.492498][ T8236] netlink: 'syz.1.857': attribute type 11 has an invalid length. [ 256.510030][ T8236] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.857'. [ 257.136992][ T5832] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 257.252463][ T8248] trusted_key: encrypted_key: insufficient parameters specified [ 257.515302][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 257.526961][ T5832] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 257.558224][ T5832] usb 1-1: config 0 has no interface number 0 [ 257.702712][ T8260] xt_cgroup: path and classid specified [ 257.761194][ T5832] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 257.835317][ T5719] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 257.837993][ T5832] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 257.937108][ T5832] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 257.951171][ T5832] usb 1-1: config 0 interface 196 has no altsetting 0 [ 257.962076][ T5832] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 257.971601][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.007748][ T5832] usb 1-1: Product: syz [ 258.020562][ T5832] usb 1-1: Manufacturer: syz [ 258.027036][ T5832] usb 1-1: SerialNumber: syz [ 258.036575][ T5719] usb 3-1: Using ep0 maxpacket: 16 [ 258.045177][ T5832] usb 1-1: config 0 descriptor?? [ 258.059914][ T8242] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 258.060352][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.108208][ T5719] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 258.124295][ T5719] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 258.135512][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.147558][ T5719] usb 3-1: config 0 descriptor?? [ 258.367744][ T8272] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 258.375589][ T8252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.410184][ T8252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.662891][ T5719] apple 0003:05AC:0241.0012: unknown main item tag 0x0 [ 258.679497][ T5719] apple 0003:05AC:0241.0012: unknown main item tag 0x0 [ 258.688721][ T5719] apple 0003:05AC:0241.0012: unknown main item tag 0x0 [ 258.692373][ T5832] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 258.696501][ T5719] apple 0003:05AC:0241.0012: unknown main item tag 0x0 [ 258.710994][ T5719] apple 0003:05AC:0241.0012: unknown main item tag 0x0 [ 258.719054][ T5719] apple 0003:05AC:0241.0012: unknown main item tag 0x0 [ 258.728739][ T5719] apple 0003:05AC:0241.0012: unknown main item tag 0x0 [ 258.746901][ T5719] apple 0003:05AC:0241.0012: unknown main item tag 0x0 [ 258.756503][ T5719] apple 0003:05AC:0241.0012: unknown main item tag 0x0 [ 258.763607][ T5719] apple 0003:05AC:0241.0012: item fetching failed at offset 32/41 [ 258.778771][ T5719] apple 0003:05AC:0241.0012: parse failed [ 258.790728][ T5719] apple 0003:05AC:0241.0012: probe with driver apple failed with error -22 [ 258.803822][ T5832] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 258.958502][ T29] audit: type=1400 audit(1778136743.498:416): avc: denied { search } for pid=5275 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.000082][ T5832] usb 1-1: USB disconnect, device number 17 [ 259.019045][ T5719] usb 3-1: USB disconnect, device number 10 [ 259.025113][ T29] audit: type=1400 audit(1778136743.498:417): avc: denied { search } for pid=5275 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.025157][ T29] audit: type=1400 audit(1778136743.498:418): avc: denied { search } for pid=5275 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.158569][ T29] audit: type=1400 audit(1778136743.498:419): avc: denied { read } for pid=5275 comm="dhcpcd" name="n31" dev="tmpfs" ino=4351 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 259.184883][ T5832] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 259.253843][ T29] audit: type=1400 audit(1778136743.498:420): avc: denied { open } for pid=5275 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=4351 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 259.306909][ T29] audit: type=1400 audit(1778136743.498:421): avc: denied { getattr } for pid=5275 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=4351 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 259.309509][ T46] kernel write not supported for file [eventfd] (pid: 46 comm: kworker/1:1) [ 259.379126][ T29] audit: type=1400 audit(1778136743.838:422): avc: denied { read } for pid=8293 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.468667][ T29] audit: type=1400 audit(1778136743.838:423): avc: denied { read open } for pid=8293 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.497942][ T29] audit: type=1400 audit(1778136743.838:424): avc: denied { getattr } for pid=8293 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.804694][ T8310] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 260.379387][ T29] audit: type=1400 audit(1778136744.918:425): avc: denied { write } for pid=8291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.104137][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.893'. [ 261.541996][ T8348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.894'. [ 261.932067][ T8357] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 262.732053][ T8387] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 263.911086][ T8414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.912'. [ 264.228474][ T8417] SELinux: failed to load policy [ 264.470519][ T8428] use of bytesused == 0 is deprecated and will be removed in the future, [ 264.488510][ T8428] use the actual size instead. [ 264.846297][ T5712] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 265.115218][ T5712] usb 2-1: Using ep0 maxpacket: 16 [ 265.248753][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.925'. [ 265.276225][ T5712] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 265.480762][ T8458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.927'. [ 265.582202][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.613976][ T5712] usb 2-1: Product: syz [ 265.625063][ T5712] usb 2-1: Manufacturer: syz [ 265.629948][ T5712] usb 2-1: SerialNumber: syz [ 265.649681][ T5712] usb 2-1: config 0 descriptor?? [ 265.665328][ T5712] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 266.100461][ T5712] usb 2-1: clie_3_5_startup: get interface number failed: -71 [ 266.123753][ T5712] visor 2-1:0.0: probe with driver visor failed with error -71 [ 266.175718][ T5712] usb 2-1: USB disconnect, device number 14 [ 266.649532][ T8479] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 267.217785][ T8491] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 267.389078][ T8493] bpf: Bad value for 'gid' [ 267.419754][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 267.419766][ T29] audit: type=1400 audit(1778136751.958:438): avc: denied { bind } for pid=8496 comm="syz.1.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 267.543894][ T29] audit: type=1400 audit(1778136752.078:439): avc: denied { block_suspend } for pid=8502 comm="syz.1.946" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 268.153757][ T29] audit: type=1400 audit(1778136752.688:440): avc: denied { bind } for pid=8522 comm="syz.2.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 268.210241][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.953'. [ 268.257021][ T29] audit: type=1400 audit(1778136752.688:441): avc: denied { node_bind } for pid=8522 comm="syz.2.955" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 268.320768][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.953'. [ 268.332478][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.953'. [ 268.652175][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.953'. [ 268.717526][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.953'. [ 268.825431][ T8535] syz_tun: entered allmulticast mode [ 268.857706][ T8534] syz_tun: left allmulticast mode [ 269.092432][ T8546] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 270.210484][ T8565] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 270.291048][ T29] audit: type=1400 audit(1778136754.828:442): avc: denied { getopt } for pid=8579 comm="syz.1.977" lport=48 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 270.443121][ T8583] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 270.635180][ T5746] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 270.771373][ T29] audit: type=1400 audit(1778136755.308:443): avc: denied { create } for pid=8585 comm="syz.1.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 270.840250][ T29] audit: type=1400 audit(1778136755.348:444): avc: denied { ioctl } for pid=8585 comm="syz.1.980" path="socket:[21174]" dev="sockfs" ino=21174 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 270.866929][ T5746] usb 4-1: Using ep0 maxpacket: 8 [ 270.889607][ T5746] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 270.900280][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.925128][ T5746] usb 4-1: Product: syz [ 270.933055][ T5746] usb 4-1: Manufacturer: syz [ 270.943086][ T5746] usb 4-1: SerialNumber: syz [ 270.956834][ T8593] netlink: 'syz.0.983': attribute type 1 has an invalid length. [ 270.968264][ T8593] netlink: 'syz.0.983': attribute type 2 has an invalid length. [ 270.979772][ T5746] usb 4-1: config 0 descriptor?? [ 270.994516][ T5746] gspca_main: se401-2.14.0 probing 047d:5003 [ 271.002217][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 271.303682][ T8604] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 271.310248][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.988'. [ 271.616967][ T5746] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 271.645127][ T29] audit: type=1400 audit(1778136756.178:445): avc: denied { read } for pid=4963 comm="acpid" name="event4" dev="devtmpfs" ino=3047 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 271.718286][ T29] audit: type=1400 audit(1778136756.178:446): avc: denied { open } for pid=4963 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3047 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 271.771228][ T29] audit: type=1400 audit(1778136756.178:447): avc: denied { ioctl } for pid=4963 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3047 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 271.829302][ T5733] usb 4-1: USB disconnect, device number 14 [ 272.495086][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 272.495104][ T29] audit: type=1400 audit(1778136757.008:451): avc: denied { create } for pid=8631 comm="syz.2.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 272.563796][ T29] audit: type=1400 audit(1778136757.058:452): avc: denied { ioctl } for pid=8631 comm="syz.2.1001" path="socket:[21310]" dev="sockfs" ino=21310 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 272.628388][ T29] audit: type=1400 audit(1778136757.058:453): avc: denied { bind } for pid=8631 comm="syz.2.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 272.796500][ T29] audit: type=1400 audit(1778136757.338:454): avc: denied { accept } for pid=8636 comm="syz.2.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 272.936268][ T5733] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 273.018559][ T8659] dlm: no locking on control device [ 273.040569][ T8654] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 273.116821][ T5733] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 273.127447][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.176069][ T5733] usb 5-1: config 0 descriptor?? [ 273.200872][ T5733] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 273.468658][ T29] audit: type=1400 audit(1778136758.008:455): avc: denied { read write } for pid=8664 comm="syz.1.1011" name="cgroup.max.descendants" dev="cgroup2" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 273.494180][ T29] audit: type=1400 audit(1778136758.028:456): avc: denied { open } for pid=8664 comm="syz.1.1011" path="" dev="cgroup2" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 273.526448][ T29] audit: type=1400 audit(1778136758.068:457): avc: denied { ioctl } for pid=8664 comm="syz.1.1011" path="" dev="cgroup2" ino=195 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 273.875116][ T5832] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 274.001494][ T8672] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 274.254904][ T5733] usb 5-1: USB disconnect, device number 9 [ 274.261917][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 274.280370][ T5832] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.293704][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 274.300181][ T8674] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1015'. [ 274.327411][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 274.354361][ T5832] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 274.372459][ T5832] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.399648][ T5832] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 274.416842][ T5832] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 274.424976][ T5832] usb 3-1: Manufacturer: syz [ 274.440566][ T5832] usb 3-1: config 0 descriptor?? [ 274.644752][ T29] audit: type=1400 audit(1778136759.178:458): avc: denied { append } for pid=8680 comm="syz.1.1018" path="socket:[21659]" dev="sockfs" ino=21659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 274.777207][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1020'. [ 274.817870][ T5832] rc_core: IR keymap rc-hauppauge not found [ 274.860435][ T5832] Registered IR keymap rc-empty [ 274.875442][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.911607][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.958618][ T5832] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 274.974164][ T5832] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input26 [ 275.000419][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 275.035254][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 275.055185][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 275.085536][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 275.105118][ T5733] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 275.121427][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 275.145108][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 275.177113][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 275.205791][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 275.236638][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 275.275675][ T5832] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 275.287239][ T5733] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.343187][ T5832] mceusb 3-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 275.352825][ T5733] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.364927][ T5832] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 275.376500][ T5733] usb 5-1: config 1 interface 0 has no altsetting 0 [ 275.411285][ T5733] usb 5-1: string descriptor 0 read error: -22 [ 275.422325][ T5733] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.40 [ 275.440641][ T5832] usb 3-1: USB disconnect, device number 11 [ 275.454501][ T29] audit: type=1400 audit(1778136759.978:459): avc: denied { write } for pid=8706 comm="syz.1.1029" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 275.456329][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.681908][ T29] audit: type=1400 audit(1778136760.218:460): avc: denied { append } for pid=8712 comm="syz.0.1032" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 276.030666][ T5733] hid_parser_main: 4 callbacks suppressed [ 276.030684][ T5733] glorious 0003:258A:0033.0013: unknown main item tag 0x0 [ 276.063087][ T5733] glorious 0003:258A:0033.0013: unknown main item tag 0x0 [ 276.074772][ T5733] glorious 0003:258A:0033.0013: unknown main item tag 0x0 [ 276.085969][ T5733] glorious 0003:258A:0033.0013: unknown main item tag 0x0 [ 276.093636][ T5733] glorious 0003:258A:0033.0013: unknown main item tag 0x0 [ 276.106418][ T5733] glorious 0003:258A:0033.0013: unknown main item tag 0x0 [ 276.114163][ T5733] glorious 0003:258A:0033.0013: unknown main item tag 0x0 [ 276.124423][ T5733] glorious 0003:258A:0033.0013: unknown main item tag 0x0 [ 276.134694][ T5733] glorious 0003:258A:0033.0013: unknown main item tag 0x0 [ 276.142173][ T5733] glorious 0003:258A:0033.0013: unknown main item tag 0x0 [ 276.164264][ T5733] glorious 0003:258A:0033.0013: unexpected long global item [ 276.202694][ T5733] glorious 0003:258A:0033.0013: probe with driver glorious failed with error -22 [ 276.237802][ T5733] usb 5-1: USB disconnect, device number 10 [ 276.421143][ T8729] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1041'. [ 276.685077][ T8738] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 277.379116][ T5832] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 277.595143][ T8770] netlink: 'syz.3.1054': attribute type 4 has an invalid length. [ 277.628791][ T8770] netlink: 'syz.3.1054': attribute type 4 has an invalid length. [ 278.037467][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 278.037483][ T29] audit: type=1400 audit(1778136762.578:465): avc: denied { write } for pid=8767 comm="syz.2.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 278.105700][ T5832] usb 5-1: config 0 has no interfaces? [ 278.119584][ T5832] usb 5-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 278.162802][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.265112][ T5832] usb 5-1: config 0 descriptor?? [ 278.713070][ T8752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.788550][ T8752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.796944][ T46] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 278.952466][ T5046] usb 5-1: USB disconnect, device number 11 [ 278.987422][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.018427][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.034718][ T46] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 279.046342][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 279.055721][ T46] usb 3-1: SerialNumber: syz [ 279.099324][ T46] usb 3-1: 0:2 : does not exist [ 279.395152][ T5046] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 279.543371][ T8802] input: syz0 as /devices/virtual/input/input27 [ 279.625297][ T5046] usb 5-1: Using ep0 maxpacket: 8 [ 279.649127][ T5733] usb 3-1: USB disconnect, device number 12 [ 279.668299][ T5046] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 279.686605][ T5046] usb 5-1: config 0 has no interface number 0 [ 279.706240][ T5046] usb 5-1: config 0 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 279.731022][ T5046] usb 5-1: config 0 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 279.742523][ T5046] usb 5-1: config 0 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 279.771786][ T5046] usb 5-1: config 0 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 279.804204][ T5046] usb 5-1: config 0 interface 1 has no altsetting 0 [ 279.818052][ T5046] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 279.827908][ T5046] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.845135][ T5046] usb 5-1: config 0 descriptor?? [ 280.230467][ T5046] usb 5-1: USB disconnect, device number 12 [ 280.629519][ T8828] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.1079'. [ 281.043100][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1082'. [ 281.510321][ T8842] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 281.607832][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1086'. [ 281.894791][ T29] audit: type=1400 audit(1778136766.428:466): avc: denied { watch_reads } for pid=8856 comm="syz.3.1092" path="/214" dev="tmpfs" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 282.658588][ T29] audit: type=1400 audit(1778136767.198:467): avc: denied { ioctl } for pid=8871 comm="syz.0.1097" path="socket:[22952]" dev="sockfs" ino=22952 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 283.291279][ T29] audit: type=1400 audit(1778136767.818:468): avc: denied { write } for pid=8886 comm="syz.3.1102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 283.802665][ T29] audit: type=1400 audit(1778136768.338:469): avc: denied { map } for pid=8896 comm="syz.1.1106" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 283.837557][ T29] audit: type=1400 audit(1778136768.338:470): avc: denied { execute } for pid=8896 comm="syz.1.1106" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 284.426372][ T29] audit: type=1400 audit(1778136768.968:471): avc: denied { ioctl } for pid=8913 comm="syz.1.1114" path="net:[4026532815]" dev="nsfs" ino=4026532815 ioctlcmd=0x510b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 284.563822][ T29] audit: type=1400 audit(1778136769.098:472): avc: denied { ioctl } for pid=8916 comm="syz.1.1115" path="socket:[22411]" dev="sockfs" ino=22411 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 284.687711][ T8908] nbd0: detected capacity change from 0 to 128 [ 284.758789][ T8922] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 284.774703][ T4929] block nbd0: Receive control failed (result -104) [ 284.783120][ T50] block nbd0: Receive control failed (result -32) [ 284.807954][ T5616] block nbd0: Receive control failed (result -32) [ 285.527764][ T8935] input: syz0 as /devices/virtual/input/input28 [ 286.427644][ T8959] loop2: detected capacity change from 0 to 7 [ 286.486237][ T8959] Dev loop2: unable to read RDB block 7 [ 286.502928][ T8959] loop2: unable to read partition table [ 286.517677][ T8959] loop2: partition table beyond EOD, truncated [ 286.530477][ T8959] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 287.469565][ T8983] netlink: 'syz.0.1141': attribute type 4 has an invalid length. [ 287.503507][ T8983] netlink: 'syz.0.1141': attribute type 4 has an invalid length. [ 288.675094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 289.143272][ T9001] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1149'. [ 289.625749][ T9003] xt_hashlimit: size too large, truncated to 1048576 [ 289.885115][ T5719] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 290.058346][ T5719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.077392][ T29] audit: type=1400 audit(1778136774.618:473): avc: denied { setopt } for pid=9016 comm="syz.2.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 290.099146][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 290.109221][ T5719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.123166][ T5719] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 290.145190][ T5719] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 290.302624][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.310550][ T5733] hid_parser_main: 246 callbacks suppressed [ 290.310573][ T5733] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 290.314533][ T5719] usb 1-1: config 0 descriptor?? [ 290.428368][ T5733] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 291.046175][ T5719] plantronics 0003:047F:FFFF.0015: reserved main item tag 0xd [ 291.260323][ T5719] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 291.351974][ T5719] usb 1-1: USB disconnect, device number 18 [ 291.465762][ T5046] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 291.474677][ T9035] fido_id[9035]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 291.658012][ T5046] usb 4-1: config 0 has no interfaces? [ 291.665619][ T5046] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 291.688609][ T5046] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 291.719115][ T5046] usb 4-1: Manufacturer: syz [ 291.730539][ T5046] usb 4-1: config 0 descriptor?? [ 291.925081][ T5719] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 291.980686][ T5046] usb 4-1: USB disconnect, device number 15 [ 291.991565][ T5746] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 292.086549][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.121297][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.141800][ T5719] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 292.155742][ T5719] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 292.166964][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.192982][ T5746] usb 3-1: Using ep0 maxpacket: 8 [ 292.203306][ T5719] usb 2-1: config 0 descriptor?? [ 292.226338][ T5746] usb 3-1: unable to get BOS descriptor or descriptor too short [ 292.242805][ T5746] usb 3-1: config 117 has an invalid interface number: 163 but max is 0 [ 292.253531][ T5746] usb 3-1: config 117 has no interface number 0 [ 292.262677][ T5746] usb 3-1: config 117 interface 163 has no altsetting 0 [ 292.275520][ T5746] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 292.285034][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.313306][ T5746] usb 3-1: Product: syz [ 292.322559][ T5746] usb 3-1: Manufacturer: syz [ 292.334434][ T5746] usb 3-1: SerialNumber: syz [ 292.640402][ T5719] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 292.664345][ T5719] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 292.689061][ T5719] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 292.710843][ T5719] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 292.730651][ T5719] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 292.770074][ T5719] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 294.240802][ T5733] usb 3-1: USB disconnect, device number 13 [ 294.271533][ T5733] f81534a_ctrl 3-1:117.163: failed to enable ports: -19 [ 294.406244][ T9079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1177'. [ 294.514414][ T9082] xt_hashlimit: size too large, truncated to 1048576 [ 295.039390][ T9043] usb 2-1: string descriptor 0 read error: -2 [ 295.455025][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1183'. [ 296.307863][ T9116] syz_tun: entered allmulticast mode [ 296.314892][ T9116] syz_tun: left allmulticast mode [ 296.338639][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 296.348011][ T5719] usb 2-1: reset high-speed USB device number 15 using dummy_hcd [ 296.394769][ T5719] usb 2-1: device reset changed ep0 maxpacket size! [ 296.434055][ T5712] usb 2-1: USB disconnect, device number 15 [ 296.517499][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.541456][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.583273][ T24] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 296.604719][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.632032][ T24] usb 5-1: config 0 descriptor?? [ 296.637196][ T5712] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 296.647560][ T9130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1198'. [ 296.805194][ T5712] usb 2-1: Using ep0 maxpacket: 8 [ 296.827288][ T5712] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 296.838937][ T5712] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 296.860577][ T5712] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 296.873587][ T5712] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.890462][ T5712] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 296.933400][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.100674][ T29] audit: type=1400 audit(1778136781.638:474): avc: denied { name_connect } for pid=9141 comm="syz.3.1202" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 297.151759][ T29] audit: type=1400 audit(1778136781.638:475): avc: denied { accept } for pid=9141 comm="syz.3.1202" laddr=fe80::13 lport=47650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 297.185172][ T5712] usb 2-1: GET_CAPABILITIES returned 0 [ 297.194820][ T5712] usbtmc 2-1:16.0: can't read capabilities [ 297.537550][ T24] hid-led 0003:27B8:01ED.0017: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 297.636709][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1203'. [ 298.051592][ T9104] usb 2-1: usbtmc_ioctl_clear_in_halt returned -32 [ 298.140131][ T5733] usb 2-1: USB disconnect, device number 16 [ 298.285111][ T24] hid-led 0003:27B8:01ED.0017: ThingM blink(1) initialized [ 298.333629][ T24] usb 5-1: USB disconnect, device number 13 [ 298.814750][ T29] audit: type=1400 audit(1778136783.348:476): avc: denied { read } for pid=9163 comm="syz.1.1208" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 298.962724][ T29] audit: type=1400 audit(1778136783.498:477): avc: denied { name_bind } for pid=9168 comm="syz.4.1210" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 299.038894][ T29] audit: type=1400 audit(1778136783.498:478): avc: denied { node_bind } for pid=9168 comm="syz.4.1210" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 299.250944][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 299.496957][ T5712] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 299.665475][ T5712] usb 3-1: Using ep0 maxpacket: 16 [ 299.680340][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.707496][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.733692][ T5712] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 299.766163][ T5712] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 299.801604][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.840825][ T5712] usb 3-1: config 0 descriptor?? [ 300.283994][ T5712] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0018/input/input30 [ 300.586518][ T5712] appleir 0003:05AC:8241.0018: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 300.649788][ T5712] usb 3-1: USB disconnect, device number 14 [ 300.768725][ T9214] fido_id[9214]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 300.960607][ T9219] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 301.140733][ T29] audit: type=1400 audit(1778136785.678:479): avc: denied { getopt } for pid=9200 comm="syz.0.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 301.164645][ T9231] input: syz0 as /devices/virtual/input/input31 [ 301.782819][ T9243] xt_cgroup: path and classid specified [ 302.355894][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'. [ 303.010843][ T9264] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 303.634325][ T9274] trusted_key: encrypted_key: insufficient parameters specified [ 303.944583][ T9293] input: syz1 as /devices/virtual/input/input32 [ 304.284445][ T9306] netlink: 'syz.1.1257': attribute type 4 has an invalid length. [ 304.659736][ T9303] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 304.829058][ T9310] netlink: 49 bytes leftover after parsing attributes in process `syz.4.1261'. [ 304.912822][ T9310] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1261'. [ 304.964639][ T9310] netlink: 49 bytes leftover after parsing attributes in process `syz.4.1261'. [ 305.962363][ T9327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1267'. [ 306.257296][ T5712] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 306.427684][ T5712] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 306.448612][ T5712] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 307.064792][ T5712] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 307.081411][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.101961][ T5712] usb 5-1: Product: syz [ 307.117163][ T5712] usb 5-1: Manufacturer: syz [ 307.127364][ T5712] usb 5-1: SerialNumber: syz [ 307.146159][ T5712] usb 5-1: config 0 descriptor?? [ 307.408374][ T9345] xt_hashlimit: size too large, truncated to 1048576 [ 307.744967][ T9353] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 308.024145][ T5712] mos7840 5-1:0.0: required endpoints missing [ 308.051750][ T5712] usb 5-1: USB disconnect, device number 14 [ 308.442859][ T29] audit: type=1400 audit(1778136792.978:480): avc: denied { bind } for pid=9363 comm="syz.2.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 308.545159][ T5712] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 308.696980][ T9373] netlink: 'syz.4.1285': attribute type 1 has an invalid length. [ 308.709383][ T5712] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.720038][ T9373] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1285'. [ 308.729644][ T5712] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.751748][ T9373] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.761764][ T9373] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.770585][ T5712] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 308.779992][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.995822][ T9379] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 309.077514][ T5712] usb 4-1: usb_control_msg returned -32 [ 309.093615][ T5712] usbtmc 4-1:16.0: can't read capabilities [ 309.181695][ T9385] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 309.373452][ T29] audit: type=1400 audit(1778136793.908:481): avc: denied { mounton } for pid=9390 comm="syz.4.1293" path="/254/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 309.600857][ T5046] IPVS: starting estimator thread 0... [ 309.645502][ T29] audit: type=1400 audit(1778136794.178:482): avc: denied { ioctl } for pid=9396 comm="syz.2.1295" path="socket:[25189]" dev="sockfs" ino=25189 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 309.755165][ T9399] IPVS: using max 43 ests per chain, 103200 per kthread [ 310.330604][ T9425] erspan0: entered promiscuous mode [ 310.369359][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1307'. [ 310.851304][ T9435] syzkaller1: entered promiscuous mode [ 310.867062][ T9435] syzkaller1: entered allmulticast mode [ 311.316023][ T5746] usb 4-1: USB disconnect, device number 16 [ 311.466831][ T9451] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1317'. [ 311.525134][ T5046] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 311.635862][ T9453] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 311.688148][ T5046] usb 3-1: Using ep0 maxpacket: 8 [ 311.702544][ T5046] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 311.716241][ T5046] usb 3-1: config 179 has no interface number 0 [ 311.723657][ T5046] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 311.738540][ T5046] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 311.751735][ T5046] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 311.776947][ T5046] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 311.843838][ T5046] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 311.858972][ T5046] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 311.884838][ T5046] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.922892][ T9444] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 311.953255][ T9461] overlayfs: overlapping lowerdir path [ 311.971312][ T9461] overlayfs: overlapping lowerdir path [ 312.382582][ T29] audit: type=1400 audit(1778136796.558:483): avc: denied { egress } for pid=0 comm="swapper/0" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 312.519728][ T29] audit: type=1400 audit(1778136796.558:484): avc: denied { sendto } for pid=0 comm="swapper/0" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 312.701578][ T5746] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input33 [ 312.917692][ T9444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.935815][ T9444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.319764][ T5712] usb 3-1: USB disconnect, device number 15 [ 313.319789][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 313.334844][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 313.567822][ T46] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 313.741641][ T46] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 313.767971][ T46] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 313.787929][ T46] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 313.797385][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.821467][ T9479] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 313.842337][ T46] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 314.138304][ T46] usb 2-1: USB disconnect, device number 17 [ 314.216066][ T9489] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.1333'. [ 314.234898][ T9488] netlink: 'syz.2.1334': attribute type 29 has an invalid length. [ 314.277206][ T9488] netlink: 'syz.2.1334': attribute type 29 has an invalid length. [ 314.294481][ T9488] netlink: 508 bytes leftover after parsing attributes in process `syz.2.1334'. [ 314.560822][ T29] audit: type=1400 audit(1778136799.098:485): avc: denied { mounton } for pid=9497 comm="syz.3.1338" path="/263/file0" dev="tmpfs" ino=1381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 314.636192][ T29] audit: type=1400 audit(1778136799.178:486): avc: denied { mount } for pid=9497 comm="syz.3.1338" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 314.733837][ T29] audit: type=1400 audit(1778136799.268:487): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 314.745090][ T46] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 314.900669][ T9506] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1340'. [ 314.949730][ T46] usb 2-1: config 0 has no interfaces? [ 314.971657][ T46] usb 2-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 314.997868][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.025227][ T46] usb 2-1: Product: syz [ 315.030947][ T46] usb 2-1: Manufacturer: syz [ 315.046916][ T46] usb 2-1: SerialNumber: syz [ 315.057862][ T46] usb 2-1: config 0 descriptor?? [ 315.216124][ T4990] block nbd0: Connection timed out, retrying (0/3 alive) [ 315.228862][ T4990] block nbd0: Dead connection, failed to find a fallback [ 315.239783][ T4990] block nbd0: shutting down sockets [ 315.248365][ T4990] blk_print_req_error: 10 callbacks suppressed [ 315.248383][ T4990] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.269165][ T4990] buffer_io_error: 10 callbacks suppressed [ 315.269182][ T4990] Buffer I/O error on dev nbd0, logical block 0, async page read [ 315.284956][ T5622] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.298861][ T5622] Buffer I/O error on dev nbd0, logical block 0, async page read [ 315.307598][ T5622] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.316789][ T5622] Buffer I/O error on dev nbd0, logical block 0, async page read [ 315.336103][ T5622] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.345229][ T5622] Buffer I/O error on dev nbd0, logical block 0, async page read [ 315.364175][ T5622] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.373414][ T5622] Buffer I/O error on dev nbd0, logical block 0, async page read [ 315.381809][ T5622] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.391028][ T5622] Buffer I/O error on dev nbd0, logical block 0, async page read [ 315.399014][ T5622] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.408337][ T5622] Buffer I/O error on dev nbd0, logical block 0, async page read [ 315.416374][ T5622] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.425567][ T5622] Buffer I/O error on dev nbd0, logical block 0, async page read [ 315.433699][ T5622] ldm_validate_partition_table(): Disk read failed. [ 315.441499][ T5622] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.450694][ T5622] Buffer I/O error on dev nbd0, logical block 0, async page read [ 315.464930][ T5622] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.543768][ T46] usb 2-1: USB disconnect, device number 18 [ 315.568969][ T5622] Buffer I/O error on dev nbd0, logical block 0, async page read [ 315.711285][ T5622] Dev nbd0: unable to read RDB block 0 [ 315.766646][ T5622] nbd0: unable to read partition table [ 315.769159][ T9521] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 315.819003][ T5622] ldm_validate_partition_table(): Disk read failed. [ 315.837116][ T5622] Dev nbd0: unable to read RDB block 0 [ 315.852081][ T5622] nbd0: unable to read partition table [ 316.140113][ T9526] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 316.242258][ T29] audit: type=1400 audit(1778136800.778:488): avc: denied { name_bind } for pid=9529 comm="syz.0.1350" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 316.459245][ T9537] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1352'. [ 316.515682][ T9537] xt_cgroup: path and classid specified [ 317.143801][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.151256][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.265061][ T5746] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 317.437419][ T5746] usb 1-1: config 255 has an invalid interface number: 11 but max is 0 [ 317.454549][ T5746] usb 1-1: config 255 has no interface number 0 [ 317.481972][ T5746] usb 1-1: config 255 interface 11 has no altsetting 0 [ 317.503674][ T5746] usb 1-1: New USB device found, idVendor=15c2, idProduct=003d, bcdDevice=bd.9c [ 317.516530][ T5746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.528303][ T5746] usb 1-1: Product: syz [ 317.532619][ T5746] usb 1-1: Manufacturer: syz [ 317.539610][ T5746] usb 1-1: SerialNumber: syz [ 318.658958][ T5746] imon 1-1:255.11: unable to register, err -19 [ 318.672076][ T5746] usb 1-1: USB disconnect, device number 19 [ 319.318518][ T29] audit: type=1400 audit(1778136803.858:489): avc: denied { ioctl } for pid=9565 comm="syz.1.1363" path="socket:[26826]" dev="sockfs" ino=26826 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 319.619540][ T9583] loop9: detected capacity change from 0 to 1 [ 319.677823][ T9583] Dev loop9: unable to read RDB block 1 [ 319.705047][ T9583] loop9: unable to read partition table [ 319.722442][ T9583] loop9: partition table beyond EOD, truncated [ 319.735176][ T9583] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 319.805660][ T5747] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 319.987396][ T5747] usb 3-1: unable to get BOS descriptor or descriptor too short [ 320.016571][ T5747] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 320.045544][ T5747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.072841][ T5747] usb 3-1: Product: syz [ 320.086336][ T5747] usb 3-1: Manufacturer: syz [ 320.098015][ T5747] usb 3-1: SerialNumber: syz [ 320.139971][ T5747] usb 3-1: selecting invalid altsetting 1 [ 320.208890][ T5747] usb 3-1: unit 6 not found! [ 320.552819][ T9602] evm: overlay not supported [ 320.569163][ T29] audit: type=1400 audit(1778136805.078:490): avc: denied { unlink } for pid=9601 comm="syz.3.1378" name="#1" dev="tmpfs" ino=1429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 320.576138][ T5747] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 320.654685][ T5747] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 320.740786][ T5747] usb 3-1: selecting invalid altsetting 1 [ 320.750263][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1380'. [ 320.763449][ T5747] usb 3-1: unit 6 not found! [ 320.793053][ T5747] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 320.823597][ T5747] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 320.863521][ T5747] usb 3-1: selecting invalid altsetting 1 [ 320.893212][ T5747] usb 3-1: unit 6 not found! [ 320.913074][ T5747] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 321.086243][ T9614] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 321.424823][ T5747] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 321.487982][ T5747] usb 3-1: USB disconnect, device number 16 [ 321.615137][ T9624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1388'. [ 321.775811][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.565676][ T5747] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 322.711037][ T9644] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 322.898211][ T29] audit: type=1400 audit(1778136807.328:491): avc: denied { mount } for pid=9639 comm="syz.1.1394" name="/" dev="autofs" ino=27048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 322.974579][ T5747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.060793][ T5747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.062840][ T9650] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 323.075951][ T29] audit: type=1400 audit(1778136807.608:492): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 323.228178][ T5747] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 323.253804][ T5747] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 323.384366][ T9648] overlayfs: overlapping lowerdir path [ 323.400922][ T5747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.410394][ T9648] overlayfs: overlapping lowerdir path [ 323.730061][ T5747] usb 3-1: config 0 descriptor?? [ 324.085229][ T5719] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 324.178053][ T5747] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 324.245833][ T5719] usb 1-1: Using ep0 maxpacket: 32 [ 324.259203][ T5719] usb 1-1: config 139 has an invalid interface number: 49 but max is 0 [ 324.275249][ T5719] usb 1-1: config 139 has no interface number 0 [ 324.296447][ T5719] usb 1-1: config 139 interface 49 has no altsetting 0 [ 324.318779][ T5719] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 324.338874][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.362888][ T5719] usb 1-1: Product: syz [ 324.374745][ T5719] usb 1-1: Manufacturer: syz [ 324.388132][ T5719] usb 1-1: SerialNumber: syz [ 324.781318][ T9679] netlink: 'syz.1.1406': attribute type 4 has an invalid length. [ 325.214603][ T5719] radio-usb-si4713 1-1:139.49: Si4713 development board discovered: (10C4:8244) [ 325.511438][ T29] audit: type=1400 audit(1778136810.048:493): avc: denied { module_request } for pid=9684 comm="syz.1.1409" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 325.827608][ T5719] radio-usb-si4713 1-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 325.841753][ T5719] usbhid 1-1:139.49: couldn't find an input interrupt endpoint [ 325.873639][ T9690] overlayfs: overlapping lowerdir path [ 325.881065][ T9690] overlayfs: overlapping lowerdir path [ 326.198988][ T5719] usb 1-1: USB disconnect, device number 20 [ 326.371426][ T9695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 326.399269][ T5746] usb 3-1: USB disconnect, device number 17 [ 327.071985][ T29] audit: type=1400 audit(1778136811.608:494): avc: denied { bind } for pid=9712 comm="syz.1.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 327.155125][ T5712] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 327.328552][ T5712] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 327.350620][ T5712] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 327.362125][ T5712] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 327.371731][ T5712] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 327.386959][ T5712] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 327.401473][ T5712] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 327.402375][ T9731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1428'. [ 327.415067][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 327.443818][ T5712] usb 4-1: Product: syz [ 327.457961][ T5712] usb 4-1: Manufacturer: syz [ 327.480768][ T5712] cdc_wdm 4-1:1.0: skipping garbage [ 327.486750][ T5747] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 327.502427][ T5712] cdc_wdm 4-1:1.0: skipping garbage [ 327.585066][ T5712] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 327.637631][ T5712] cdc_wdm 4-1:1.0: Unknown control protocol [ 327.742873][ T5747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.843738][ T5747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.902356][ T5747] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 327.950259][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.978448][ T5747] usb 2-1: config 0 descriptor?? [ 328.079770][ T29] audit: type=1400 audit(1778136812.618:495): avc: denied { read write } for pid=9704 comm="syz.3.1417" name="cdc-wdm0" dev="devtmpfs" ino=3171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 328.135129][ T29] audit: type=1400 audit(1778136812.618:496): avc: denied { open } for pid=9704 comm="syz.3.1417" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 328.344823][ T5712] usb 4-1: USB disconnect, device number 17 [ 328.414493][ T5747] arvo 0003:1E7D:30D4.001A: item fetching failed at offset 3/7 [ 328.433084][ T5747] arvo 0003:1E7D:30D4.001A: parse failed [ 328.439943][ T5747] arvo 0003:1E7D:30D4.001A: probe with driver arvo failed with error -22 [ 328.788493][ T5746] usb 2-1: USB disconnect, device number 19 [ 328.906101][ T5747] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 328.947229][ T9753] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 329.077270][ T5747] usb 5-1: Using ep0 maxpacket: 8 [ 329.093313][ T5747] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 329.103873][ T29] audit: type=1400 audit(1778136813.648:497): avc: denied { ioctl } for pid=9758 comm="syz.3.1439" path="socket:[27239]" dev="sockfs" ino=27239 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 329.137008][ T5747] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 329.155101][ T5747] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 329.169072][ T5747] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 329.179364][ T5747] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 329.195566][ T5747] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 329.204694][ T5747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.733733][ T9768] overlayfs: conflicting lowerdir path [ 329.747073][ T9768] overlayfs: conflicting lowerdir path [ 329.998704][ T9772] kvm: apic: phys broadcast and lowest prio [ 330.185024][ T29] audit: type=1400 audit(1778136814.718:498): avc: denied { write } for pid=9775 comm="syz.3.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 330.241843][ T29] audit: type=1400 audit(1778136814.778:499): avc: denied { read } for pid=9778 comm="syz.2.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 330.358403][ T9787] usbtmc 5-1:16.0: simple control status returned 0 [ 330.394427][ T9790] netlink: 'syz.1.1451': attribute type 3 has an invalid length. [ 330.560206][ T5046] usb 5-1: USB disconnect, device number 15 [ 330.595254][ T5747] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 330.765353][ T5747] usb 1-1: Using ep0 maxpacket: 16 [ 330.834562][ T9802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1456'. [ 330.841914][ T5747] usb 1-1: config index 0 descriptor too short (expected 52, got 36) [ 330.889488][ T5747] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 330.956640][ T5747] usb 1-1: config 0 has no interface number 0 [ 330.982941][ T5747] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 331.010346][ T5747] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 331.037158][ T5747] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 331.054173][ T5747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.063552][ T5747] usb 1-1: Product: syz [ 331.070878][ T5747] usb 1-1: Manufacturer: syz [ 331.077645][ T5747] usb 1-1: SerialNumber: syz [ 331.191436][ T9802] xt_cgroup: path and classid specified [ 331.244624][ T5747] usb 1-1: config 0 descriptor?? [ 331.250305][ T9807] input: syz1 as /devices/virtual/input/input35 [ 331.274220][ T9788] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 331.315626][ T9788] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 331.402989][ T29] audit: type=1400 audit(1778136815.938:500): avc: denied { map } for pid=9812 comm="syz.3.1460" path="socket:[28294]" dev="sockfs" ino=28294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 331.556361][ T9788] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 331.563826][ T9788] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 331.585108][ T5719] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 331.746913][ T5719] usb 5-1: Using ep0 maxpacket: 16 [ 331.773780][ T5719] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 331.810327][ T5719] usb 5-1: config 0 has no interface number 0 [ 331.823749][ T5719] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 331.856115][ T5719] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 331.887220][ T5719] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 331.919813][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.939881][ T5719] usb 5-1: Product: syz [ 331.956918][ T5719] usb 5-1: Manufacturer: syz [ 331.966934][ T5719] usb 5-1: SerialNumber: syz [ 331.992816][ T5719] usb 5-1: config 0 descriptor?? [ 332.013102][ T5747] asix 1-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 332.026451][ T5747] asix 1-1:0.251: probe with driver asix failed with error -524 [ 332.041345][ T9811] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 332.058920][ T9811] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 332.279065][ T9811] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 332.286732][ T9811] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 332.309108][ T5747] usb 1-1: USB disconnect, device number 21 [ 332.758251][ T5719] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 333.265071][ T46] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 333.383123][ T5616] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 333.416703][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 333.434600][ T46] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 333.446614][ T46] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 333.457013][ T46] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 333.493696][ T46] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 333.527677][ T46] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.747943][ T5719] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 333.772775][ T46] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 333.793973][ T5719] asix 5-1:0.34: probe with driver asix failed with error -71 [ 333.802832][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.940178][ T9858] netlink: 'syz.1.1475': attribute type 4 has an invalid length. [ 334.484718][ T5719] usb 5-1: USB disconnect, device number 16 [ 334.817135][ T46] usb 4-1: usb_control_msg returned -32 [ 334.824133][ T46] usbtmc 4-1:16.0: can't read capabilities [ 335.060854][ T9871] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1482'. [ 335.105838][ T46] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 335.106930][ T5746] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 335.295125][ T9876] xt_cgroup: path and classid specified [ 335.345038][ T46] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 335.377618][ T46] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 335.383675][ T5746] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 335.405657][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 335.405779][ T9873] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 335.416458][ T46] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 335.439006][ T5746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.466157][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 335.475295][ T5746] usb 2-1: config 0 descriptor?? [ 335.479119][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 335.497360][ T46] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 335.511698][ T46] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.536657][ T46] usb 3-1: Product: syz [ 335.544541][ T5747] usb 4-1: USB disconnect, device number 18 [ 335.558420][ T46] usb 3-1: Manufacturer: syz [ 335.580207][ T9864] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 335.599241][ T46] cdc_wdm 3-1:1.0: skipping garbage [ 335.605099][ T46] cdc_wdm 3-1:1.0: skipping garbage [ 335.632317][ T46] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 335.640560][ T46] cdc_wdm 3-1:1.0: Unknown control protocol [ 335.821376][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 335.828300][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 335.834790][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 335.841419][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 335.848122][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 335.854741][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 335.861466][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 335.868088][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 335.875076][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 335.881786][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 335.888566][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 335.895191][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 335.901530][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 335.908138][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 335.914483][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 335.921098][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 335.927572][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 335.934195][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 335.940487][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 335.947538][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 336.037434][ T5747] usb 3-1: USB disconnect, device number 18 [ 336.038656][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 336.046359][ T9864] cdc_wdm 3-1:1.0: Tx URB error: -19 [ 337.018612][ T9887] netlink: 'syz.4.1488': attribute type 4 has an invalid length. [ 337.212127][ T9893] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 337.424593][ T9892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.448265][ T5746] usb 2-1: Cannot set autoneg [ 337.459263][ T5746] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 337.506020][ T5746] usb 2-1: USB disconnect, device number 20 [ 337.941869][ T29] audit: type=1400 audit(1778136822.478:501): avc: denied { map } for pid=9900 comm="syz.0.1493" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 337.974284][ T5733] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 338.038687][ T29] audit: type=1400 audit(1778136822.578:502): avc: denied { setopt } for pid=9902 comm="syz.4.1494" lport=43674 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 338.167360][ T5733] usb 3-1: config 1 interface 0 has no altsetting 0 [ 338.178856][ T5733] usb 3-1: string descriptor 0 read error: -22 [ 338.186104][ T5733] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 338.195855][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.369642][ T9912] overlayfs: conflicting lowerdir path [ 338.385115][ T5747] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 338.394020][ T9912] overlayfs: conflicting lowerdir path [ 338.576646][ T5747] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 338.585964][ T5747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.768201][ T5747] usb 4-1: config 0 descriptor?? [ 338.783845][ T5747] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 338.787358][ T5733] hid_mf 0003:0079:1801.001B: unknown main item tag 0x0 [ 338.827819][ T5733] hid_mf 0003:0079:1801.001B: unknown main item tag 0x0 [ 338.845090][ T5733] hid_mf 0003:0079:1801.001B: unknown main item tag 0x0 [ 338.863460][ T5733] hid_mf 0003:0079:1801.001B: unknown main item tag 0x0 [ 338.887692][ T5733] hid_mf 0003:0079:1801.001B: unknown main item tag 0x0 [ 338.934519][ T5733] hid_mf 0003:0079:1801.001B: unknown main item tag 0x0 [ 338.959788][ T5733] hid_mf 0003:0079:1801.001B: unknown main item tag 0x0 [ 338.979084][ T5733] hid_mf 0003:0079:1801.001B: unknown main item tag 0x0 [ 338.990265][ T5747] gp8psk: usb in 128 operation failed. [ 338.995058][ T5733] hid_mf 0003:0079:1801.001B: unknown main item tag 0x0 [ 339.014333][ T5733] hid_mf 0003:0079:1801.001B: unknown main item tag 0x0 [ 339.138818][ T5733] hid_mf 0003:0079:1801.001B: hidraw0: USB HID vf.ff Device [HID 0079:1801] on usb-dummy_hcd.2-1/input0 [ 339.160550][ T5733] hid_mf 0003:0079:1801.001B: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 339.203534][ T5733] usb 3-1: USB disconnect, device number 19 [ 339.216716][ T5747] gp8psk: usb in 146 operation failed. [ 339.242715][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 339.269524][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 339.300658][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 339.313922][ T9923] fido_id[9923]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 339.334286][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 339.353625][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 339.372986][ T29] audit: type=1400 audit(1778136823.908:503): avc: denied { setopt } for pid=9925 comm="syz.4.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 339.392956][ T5747] gp8psk: failed to get FW version [ 339.398671][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 339.412402][ T5747] gp8psk: FPGA Version = 52 [ 339.427309][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 339.445153][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 339.484746][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 339.810029][ T5747] gp8psk: usb in 138 operation failed. [ 339.931767][ T5747] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 340.153313][ T5747] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 340.200483][ T5747] usb 4-1: USB disconnect, device number 19 [ 340.576807][ T9945] vivid-000: disconnect [ 340.650566][ T9942] vivid-000: reconnect [ 340.748187][ T9947] overlayfs: overlapping lowerdir path [ 340.757852][ T9947] overlayfs: overlapping lowerdir path [ 341.371274][ T9958] __nla_validate_parse: 44 callbacks suppressed [ 341.371321][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1515'. [ 341.436465][ T9959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1513'. [ 341.501614][ T5733] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 341.751823][ T9967] xt_cgroup: path and classid specified [ 341.767922][ T5733] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 341.830608][ T5733] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 341.841746][ T5733] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 341.851119][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.879367][ T9950] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 341.890833][ T5733] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 342.109175][ T29] audit: type=1400 audit(1778136826.648:504): avc: denied { mount } for pid=9972 comm="syz.2.1519" name="/" dev="configfs" ino=1145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 342.156761][ T29] audit: type=1400 audit(1778136826.648:505): avc: denied { search } for pid=9972 comm="syz.2.1519" name="/" dev="configfs" ino=1145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 342.185085][ T5747] usb 5-1: USB disconnect, device number 17 [ 342.202920][ T29] audit: type=1400 audit(1778136826.648:506): avc: denied { search } for pid=9972 comm="syz.2.1519" name="/" dev="configfs" ino=1145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 342.248681][ T29] audit: type=1400 audit(1778136826.648:507): avc: denied { read } for pid=9972 comm="syz.2.1519" name="/" dev="configfs" ino=1145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 342.306997][ T29] audit: type=1400 audit(1778136826.648:508): avc: denied { read open } for pid=9972 comm="syz.2.1519" path="/" dev="configfs" ino=1145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 342.982157][ T9989] netlink: 'syz.3.1523': attribute type 4 has an invalid length. [ 343.298209][ T5733] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 343.485133][ T5733] usb 3-1: Using ep0 maxpacket: 16 [ 343.502709][ T5733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.525171][ T5733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.548768][ T5733] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 343.576301][ T5733] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 343.595141][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.620868][ T5733] usb 3-1: config 0 descriptor?? [ 343.890397][ T5746] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 344.138119][T10008] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 344.140308][T10011] tls_set_device_offload_rx: netdev not found [ 344.215127][ T5746] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 344.288333][ T5733] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001C/input/input37 [ 344.299872][ T5746] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 344.313155][ T5746] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.333600][ T5733] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 344.370093][ T5746] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 344.397304][ T5746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.412193][ T5733] usb 3-1: USB disconnect, device number 20 [ 344.549357][ T5746] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 344.590932][T10014] fido_id[10014]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 344.593657][ T5746] usb 1-1: invalid MIDI out EP 0 [ 344.926750][ T5746] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 344.955546][ T5746] usb 1-1: USB disconnect, device number 22 [ 345.696215][T10029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1540'. [ 345.790893][T10030] xt_cgroup: path and classid specified [ 347.031657][ T5746] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 347.258129][ T5746] usb 4-1: unable to get BOS descriptor or descriptor too short [ 347.296867][ T5746] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 347.581720][ T5746] usb 4-1: can't read configurations, error -71 [ 348.470563][ T29] audit: type=1400 audit(1778136833.008:509): avc: denied { listen } for pid=10072 comm="syz.3.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 348.534157][ T29] audit: type=1400 audit(1778136833.008:510): avc: denied { accept } for pid=10072 comm="syz.3.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 348.909329][T10081] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 349.380148][T10088] overlayfs: overlapping lowerdir path [ 349.399819][T10088] overlayfs: overlapping lowerdir path [ 349.698305][ T5746] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 349.747991][T10091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1562'. [ 349.867264][ T5746] usb 2-1: Using ep0 maxpacket: 16 [ 349.874840][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.899864][ T5746] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 349.934672][ T5746] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 349.986108][ T5746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.047707][ T5746] usb 2-1: config 0 descriptor?? [ 350.159823][T10092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1562'. [ 350.195162][T10092] nbd: nbd64 already in use [ 350.493525][ T5746] HID 045e:07da: Invalid code 65791 type 1 [ 350.549298][ T5746] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001D/input/input40 [ 350.625519][ T5746] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 350.694921][ T29] audit: type=1400 audit(1778136835.228:511): avc: denied { getopt } for pid=10107 comm="syz.3.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 350.736499][ T5622] udevd[5622]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 351.512172][ T5746] usb 2-1: USB disconnect, device number 21 [ 351.610845][T10127] netlink: 'syz.0.1573': attribute type 4 has an invalid length. [ 352.005277][ T5733] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 352.080083][T10129] netlink: 'syz.2.1574': attribute type 2 has an invalid length. [ 352.092906][T10129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1574'. [ 352.238750][ T5733] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 352.273672][ T5733] usb 5-1: config 0 interface 0 has no altsetting 0 [ 352.295238][ T5733] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 352.308831][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 352.318048][ T5733] usb 5-1: Product: syz [ 352.322387][ T5733] usb 5-1: Manufacturer: syz [ 352.327155][ T5733] usb 5-1: SerialNumber: syz [ 352.352716][ T5733] usb 5-1: config 0 descriptor?? [ 352.379121][T10124] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 352.399279][ T5733] usb 5-1: selecting invalid altsetting 0 [ 352.674620][T10124] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 352.734509][T10145] overlayfs: missing 'lowerdir' [ 353.130192][T10150] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1581'. [ 353.156374][ T29] audit: type=1400 audit(1778136837.658:512): avc: denied { bind } for pid=10148 comm="syz.0.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 353.182295][ T5733] usb 5-1: USB disconnect, device number 18 [ 353.258140][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.916666][T10167] netlink: 'syz.0.1586': attribute type 4 has an invalid length. [ 354.266243][ T5733] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 354.427835][ T5733] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 354.453926][ T5733] usb 5-1: config 0 has no interface number 0 [ 354.469419][ T5733] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 354.484046][ T5733] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 354.501187][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.517315][ T5733] usb 5-1: Product: syz [ 354.526842][ T5733] usb 5-1: Manufacturer: syz [ 354.546212][ T5733] usb 5-1: SerialNumber: syz [ 354.570952][ T5733] usb 5-1: config 0 descriptor?? [ 354.588180][T10158] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 354.688519][ T5733] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 1e:44:47:bd:95:12 [ 354.706610][ T5832] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 354.792376][ T29] audit: type=1400 audit(1778136839.328:513): avc: denied { read } for pid=5275 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 354.866388][ T5832] usb 4-1: Using ep0 maxpacket: 32 [ 354.872949][ T5832] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 354.903473][ T5832] usb 4-1: config 0 has no interface number 0 [ 354.928435][ T5832] usb 4-1: config 0 interface 184 has no altsetting 0 [ 354.956916][ T5832] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 354.980899][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.995993][ T5832] usb 4-1: Product: syz [ 355.012598][ T5832] usb 4-1: Manufacturer: syz [ 355.032534][ T5832] usb 4-1: SerialNumber: syz [ 355.051141][ T5832] usb 4-1: config 0 descriptor?? [ 355.565601][ T5747] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 355.591398][ T29] audit: type=1400 audit(1778136840.128:514): avc: denied { write } for pid=10185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.715721][ T29] audit: type=1400 audit(1778136840.258:515): avc: denied { write } for pid=10216 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.756817][ T5747] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.773006][ T5747] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.797902][ T5747] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 355.825125][ T5747] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 355.838930][ T5747] usb 1-1: Manufacturer: syz [ 355.856503][ T5747] usb 1-1: config 0 descriptor?? [ 355.887389][ T5719] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 355.943780][T10224] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1600'. [ 356.071319][ T5719] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 356.099310][ T5733] usb 5-1: USB disconnect, device number 19 [ 356.113942][ T5719] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 356.117153][ T5733] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 356.147734][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.171554][ T5719] usb 2-1: Product: syz [ 356.181379][ T5719] usb 2-1: Manufacturer: syz [ 356.195437][ T5719] usb 2-1: SerialNumber: syz [ 356.216527][ T5719] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 356.296284][ T5832] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 356.327766][ T5832] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 356.354366][ T5832] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 356.384254][ T5832] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 356.412221][ T5832] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 356.451867][ T5832] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 356.472386][ T5832] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 356.487910][ T5832] usb 4-1: USB disconnect, device number 22 [ 356.596986][ T29] audit: type=1400 audit(1778136841.138:516): avc: denied { write } for pid=10226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.768903][ T29] audit: type=1400 audit(1778136841.308:517): avc: denied { write } for pid=10248 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.907506][ T5747] uclogic 0003:256C:006D.001E: v1 frame probing failed: -71 [ 356.948375][ T5747] uclogic 0003:256C:006D.001E: failed probing parameters: -71 [ 356.973411][ T5747] uclogic 0003:256C:006D.001E: probe with driver uclogic failed with error -71 [ 357.004749][T10258] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1607'. [ 357.033512][ T5747] usb 1-1: USB disconnect, device number 23 [ 357.255498][ T5719] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 357.458466][ T46] usb 2-1: USB disconnect, device number 22 [ 357.599308][ T29] audit: type=1400 audit(1778136842.138:518): avc: denied { write } for pid=10256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.626280][ T5719] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 357.732024][ T29] audit: type=1400 audit(1778136842.268:519): avc: denied { write } for pid=10280 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.845689][ T5719] usb 4-1: Using ep0 maxpacket: 8 [ 357.856882][ T5719] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 357.874620][ T5719] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 357.908891][ T5719] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 357.931423][ T5719] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 357.937067][ T29] audit: type=1400 audit(1778136842.468:520): avc: denied { mounton } for pid=10284 comm="syz.0.1613" path="/proc/864/task" dev="proc" ino=30332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 358.016636][ T5719] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 358.053406][ T5719] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.128008][ T5719] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 358.155589][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.295119][ T46] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 358.420326][ T5719] usb 4-1: usb_control_msg returned -32 [ 358.445148][ T5719] usbtmc 4-1:16.0: can't read capabilities [ 358.475885][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 358.492140][T10303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1617'. [ 358.510538][ T46] usb 1-1: config 0 has no interfaces? [ 358.532773][ T46] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 358.548698][ T29] audit: type=1400 audit(1778136843.088:521): avc: denied { create } for pid=10305 comm="syz.2.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 358.575146][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.630675][ T46] usb 1-1: config 0 descriptor?? [ 358.667167][ T29] audit: type=1400 audit(1778136843.198:522): avc: denied { write } for pid=10283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.855146][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 358.870164][T10314] usbtmc 4-1:16.0: Unable to send data, error -71 [ 358.878233][T10307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1617'. [ 358.906946][T10314] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 358.933691][T10307] nbd: device at index 64 is going down [ 358.961670][ T5832] usb 4-1: USB disconnect, device number 23 [ 359.021761][ T5746] usb 1-1: USB disconnect, device number 24 [ 359.150670][ T7800] udevd[7800]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 359.180369][T10323] overlayfs: conflicting lowerdir path [ 359.189081][T10323] overlayfs: conflicting lowerdir path [ 359.537075][ T5622] udevd[5622]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 359.765055][ T5747] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 359.804614][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'. [ 359.938446][ T5747] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 359.963784][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.995206][ T5747] usb 2-1: config 0 descriptor?? [ 360.042022][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 360.042040][ T29] audit: type=1400 audit(1778136844.578:524): avc: denied { write } for pid=10325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.075247][ T46] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 360.257842][ T46] usb 4-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.262267][ T29] audit: type=1400 audit(1778136844.798:525): avc: denied { write } for pid=10354 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.322254][ T46] usb 4-1: config 1 interface 0 has no altsetting 0 [ 360.348695][ T46] usb 4-1: string descriptor 0 read error: -22 [ 360.360355][ T46] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.40 [ 360.383990][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.848814][ T46] hid_parser_main: 4007 callbacks suppressed [ 360.848862][ T46] belkin 0003:050D:3201.001F: unknown main item tag 0x0 [ 360.890560][ T46] belkin 0003:050D:3201.001F: unknown main item tag 0x0 [ 360.903485][ T46] belkin 0003:050D:3201.001F: unknown main item tag 0x0 [ 360.911368][ T46] belkin 0003:050D:3201.001F: unknown main item tag 0x0 [ 360.919099][ T46] belkin 0003:050D:3201.001F: unknown main item tag 0x0 [ 360.926866][ T46] belkin 0003:050D:3201.001F: unknown main item tag 0x0 [ 360.934205][ T46] belkin 0003:050D:3201.001F: unknown main item tag 0x0 [ 360.942116][ T46] belkin 0003:050D:3201.001F: unknown main item tag 0x0 [ 360.949858][ T46] belkin 0003:050D:3201.001F: unknown main item tag 0x0 [ 360.958674][ T46] belkin 0003:050D:3201.001F: unknown main item tag 0x0 [ 361.005049][ T5832] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 361.165030][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 361.178457][ T5832] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 361.200107][ T5832] usb 5-1: config 0 has no interface number 0 [ 361.222095][ T5832] usb 5-1: config 0 interface 184 has no altsetting 0 [ 361.230677][ T5747] usb 2-1: Cannot set autoneg [ 361.235876][ T46] belkin 0003:050D:3201.001F: hiddev0,hidraw0: USB HID v0.01 Device [HID 050d:3201] on usb-dummy_hcd.3-1/input0 [ 361.244751][ T5832] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 361.253566][ T5747] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 361.278714][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.302557][ T46] usb 4-1: USB disconnect, device number 24 [ 361.305735][ T5832] usb 5-1: Product: syz [ 361.321922][ T5747] usb 2-1: USB disconnect, device number 23 [ 361.342348][ T5832] usb 5-1: Manufacturer: syz [ 361.360118][ T5832] usb 5-1: SerialNumber: syz [ 361.391550][ T5832] usb 5-1: config 0 descriptor?? [ 361.466352][T10363] fido_id[10363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 361.894367][T10371] overlayfs: missing 'lowerdir' [ 362.956646][ T5832] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 362.974383][ T5832] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 362.995555][ T5832] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 363.011661][ T5832] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 363.032381][ T5832] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 363.043380][ T5832] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 363.062444][ T5832] usb 5-1: USB disconnect, device number 20 [ 363.078661][ T29] audit: type=1400 audit(1778136847.618:526): avc: denied { create } for pid=10387 comm="syz.1.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 363.475079][ T5746] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 363.635191][ T5746] usb 3-1: Using ep0 maxpacket: 32 [ 363.666101][ T5746] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 363.686946][ T5746] usb 3-1: config 2 has no interface number 0 [ 363.708880][ T5746] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 363.727977][T10409] overlayfs: missing 'lowerdir' [ 363.762324][ T5746] usb 3-1: config 2 interface 88 has no altsetting 0 [ 364.066665][ T5746] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 364.091472][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.117890][ T5746] usb 3-1: Product: syz [ 364.128417][ T5746] usb 3-1: Manufacturer: syz [ 364.150394][ T5746] usb 3-1: SerialNumber: syz [ 364.187007][T10390] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 364.189917][T10416] input: syz0 as /devices/virtual/input/input41 [ 364.465605][T10390] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 364.482329][ C0] ================================================================== [ 364.490449][ C0] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0xa51/0xb30 [ 364.498463][ C0] Read of size 2 at addr ffff88815688cd74 by task syz.4.1656/10423 [ 364.506360][ C0] [ 364.508691][ C0] CPU: 0 UID: 0 PID: 10423 Comm: syz.4.1656 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.508719][ C0] Tainted: [L]=SOFTLOCKUP [ 364.508726][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 364.508741][ C0] Call Trace: [ 364.508748][ C0] [ 364.508755][ C0] dump_stack_lvl+0x100/0x190 [ 364.508785][ C0] print_report+0x13d/0x4b0 [ 364.508812][ C0] ? __virt_addr_valid+0x239/0x430 [ 364.508835][ C0] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 364.508855][ C0] kasan_report+0xdf/0x1d0 [ 364.508893][ C0] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 364.508920][ C0] qdisc_pkt_len_segs_init+0xa51/0xb30 [ 364.508941][ C0] __netif_receive_skb_core.constprop.0+0x1144/0x3530 [ 364.508971][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 364.508997][ C0] ? __kasan_check_byte+0x13/0x50 [ 364.509017][ C0] ? rcu_is_watching+0x12/0xc0 [ 364.509047][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 364.509073][ C0] ? __kasan_check_byte+0x13/0x50 [ 364.509093][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 364.509119][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 364.509139][ C0] ? rcu_is_watching+0x12/0xc0 [ 364.509166][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 364.509188][ C0] ? lock_release+0x245/0x310 [ 364.509211][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 364.509237][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 364.509265][ C0] __netif_receive_skb_list_core+0x353/0x940 [ 364.509291][ C0] ? stack_trace_save+0x8e/0xc0 [ 364.509311][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 364.509337][ C0] ? lock_acquire+0x1b1/0x370 [ 364.509364][ C0] netif_receive_skb_list_internal+0x722/0xd40 [ 364.509393][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 364.509421][ C0] ? __lock_acquire+0x4a5/0x2630 [ 364.509445][ C0] ? dev_gro_receive+0x238/0x3060 [ 364.509475][ C0] napi_complete_done+0x221/0x940 [ 364.509502][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 364.509527][ C0] ? find_held_lock+0x2b/0x80 [ 364.509543][ C0] ? gro_cell_poll+0x441/0x690 [ 364.509569][ C0] ? gro_cell_poll+0x441/0x690 [ 364.509597][ C0] gro_cell_poll+0x46e/0x690 [ 364.509624][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 364.509649][ C0] net_rx_action+0xa40/0xf20 [ 364.509677][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 364.509703][ C0] ? hrtimer_bases_first+0x1a0/0x210 [ 364.509729][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 364.509751][ C0] ? sched_clock+0x38/0x60 [ 364.509771][ C0] ? sched_clock_cpu+0x6c/0x570 [ 364.509798][ C0] ? sched_clock+0x38/0x60 [ 364.509818][ C0] ? rcu_is_watching+0x12/0xc0 [ 364.509846][ C0] handle_softirqs+0x1ea/0xa00 [ 364.509873][ C0] ? __sysvec_apic_timer_interrupt+0x10b/0x460 [ 364.509906][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 364.509931][ C0] ? irqtime_account_irq+0x176/0x2d0 [ 364.509955][ C0] ? tun_rx_batched.isra.0+0x402/0x750 [ 364.509978][ C0] do_softirq+0xac/0xe0 [ 364.510003][ C0] [ 364.510009][ C0] [ 364.510015][ C0] __local_bh_enable_ip+0xf8/0x120 [ 364.510043][ C0] tun_rx_batched.isra.0+0x407/0x750 [ 364.510066][ C0] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 364.510091][ C0] ? rcu_is_watching+0x12/0xc0 [ 364.510117][ C0] ? tun_get_user+0x1cc8/0x3c20 [ 364.510141][ C0] tun_get_user+0x1e31/0x3c20 [ 364.510170][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 364.510194][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 364.510218][ C0] ? find_held_lock+0x2b/0x80 [ 364.510235][ C0] ? tun_get+0x191/0x370 [ 364.510255][ C0] ? tun_get+0x191/0x370 [ 364.510279][ C0] tun_chr_write_iter+0xdc/0x200 [ 364.510305][ C0] vfs_write+0x6ac/0x1070 [ 364.510325][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 364.510351][ C0] ? __pfx_vfs_write+0x10/0x10 [ 364.510369][ C0] ? find_held_lock+0x2b/0x80 [ 364.510394][ C0] ksys_write+0x12a/0x250 [ 364.510413][ C0] ? __pfx_ksys_write+0x10/0x10 [ 364.510433][ C0] ? rcu_is_watching+0x12/0xc0 [ 364.510462][ C0] do_syscall_64+0x10b/0xf80 [ 364.510484][ C0] ? clear_bhb_loop+0x40/0x90 [ 364.510505][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.510524][ C0] RIP: 0033:0x7f700759cdd9 [ 364.510544][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.510564][ C0] RSP: 002b:00007f70083ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 364.510583][ C0] RAX: ffffffffffffffda RBX: 00007f7007815fa0 RCX: 00007f700759cdd9 [ 364.510595][ C0] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 0000000000000005 [ 364.510607][ C0] RBP: 00007f7007632d69 R08: 0000000000000000 R09: 0000000000000000 [ 364.510618][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.510630][ C0] R13: 00007f7007816038 R14: 00007f7007815fa0 R15: 00007ffc1b1ee0f8 [ 364.510648][ C0] [ 364.510654][ C0] [ 364.985776][ C0] The buggy address belongs to the physical page: [ 364.992171][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x15688c [ 365.001007][ C0] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 365.008196][ C0] raw: 057ff00000000000 ffffea00055a2308 ffffea00055a2308 0000000000000000 [ 365.016777][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 365.025339][ C0] page dumped because: kasan: bad access detected [ 365.031734][ C0] page_owner info is not present (never set?) [ 365.037774][ C0] [ 365.040077][ C0] Memory state around the buggy address: [ 365.045683][ C0] ffff88815688cc00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 365.053725][ C0] ffff88815688cc80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 365.061771][ C0] >ffff88815688cd00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 365.069819][ C0] ^ [ 365.077529][ C0] ffff88815688cd80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 365.085576][ C0] ffff88815688ce00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 365.093613][ C0] ================================================================== [ 365.101775][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 365.108978][ C0] CPU: 0 UID: 0 PID: 10423 Comm: syz.4.1656 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.119934][ C0] Tainted: [L]=SOFTLOCKUP [ 365.124264][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 365.134331][ C0] Call Trace: [ 365.137622][ C0] [ 365.140469][ C0] dump_stack_lvl+0x100/0x190 [ 365.145170][ C0] vpanic+0x552/0x970 [ 365.149170][ C0] ? __pfx_vpanic+0x10/0x10 [ 365.153695][ C0] ? rcu_is_watching+0x12/0xc0 [ 365.158496][ C0] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 365.164149][ C0] panic+0xd1/0xe0 [ 365.167893][ C0] ? __pfx_panic+0x10/0x10 [ 365.172333][ C0] ? check_panic_on_warn+0x1f/0x90 [ 365.177470][ C0] check_panic_on_warn.cold+0x19/0x34 [ 365.182862][ C0] end_report.part.0+0x3a/0x90 [ 365.187645][ C0] kasan_report.cold+0xe/0x18 [ 365.192366][ C0] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 365.198032][ C0] qdisc_pkt_len_segs_init+0xa51/0xb30 [ 365.203528][ C0] __netif_receive_skb_core.constprop.0+0x1144/0x3530 [ 365.210329][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 365.215298][ C0] ? __kasan_check_byte+0x13/0x50 [ 365.220347][ C0] ? rcu_is_watching+0x12/0xc0 [ 365.225144][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 365.232281][ C0] ? __kasan_check_byte+0x13/0x50 [ 365.237324][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 365.242549][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 365.248723][ C0] ? rcu_is_watching+0x12/0xc0 [ 365.253545][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 365.258776][ C0] ? lock_release+0x245/0x310 [ 365.263482][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 365.268274][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 365.274455][ C0] __netif_receive_skb_list_core+0x353/0x940 [ 365.280469][ C0] ? stack_trace_save+0x8e/0xc0 [ 365.285343][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 365.291879][ C0] ? lock_acquire+0x1b1/0x370 [ 365.296583][ C0] netif_receive_skb_list_internal+0x722/0xd40 [ 365.302761][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 365.309478][ C0] ? __lock_acquire+0x4a5/0x2630 [ 365.314448][ C0] ? dev_gro_receive+0x238/0x3060 [ 365.319505][ C0] napi_complete_done+0x221/0x940 [ 365.324561][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 365.330126][ C0] ? find_held_lock+0x2b/0x80 [ 365.334826][ C0] ? gro_cell_poll+0x441/0x690 [ 365.339614][ C0] ? gro_cell_poll+0x441/0x690 [ 365.344402][ C0] gro_cell_poll+0x46e/0x690 [ 365.349013][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 365.354381][ C0] net_rx_action+0xa40/0xf20 [ 365.358963][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 365.364064][ C0] ? hrtimer_bases_first+0x1a0/0x210 [ 365.369338][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 365.374525][ C0] ? sched_clock+0x38/0x60 [ 365.378930][ C0] ? sched_clock_cpu+0x6c/0x570 [ 365.383781][ C0] ? sched_clock+0x38/0x60 [ 365.388180][ C0] ? rcu_is_watching+0x12/0xc0 [ 365.392931][ C0] handle_softirqs+0x1ea/0xa00 [ 365.397685][ C0] ? __sysvec_apic_timer_interrupt+0x10b/0x460 [ 365.403832][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 365.409104][ C0] ? irqtime_account_irq+0x176/0x2d0 [ 365.414381][ C0] ? tun_rx_batched.isra.0+0x402/0x750 [ 365.419829][ C0] do_softirq+0xac/0xe0 [ 365.423995][ C0] [ 365.426906][ C0] [ 365.429828][ C0] __local_bh_enable_ip+0xf8/0x120 [ 365.434929][ C0] tun_rx_batched.isra.0+0x407/0x750 [ 365.440216][ C0] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 365.446010][ C0] ? rcu_is_watching+0x12/0xc0 [ 365.450763][ C0] ? tun_get_user+0x1cc8/0x3c20 [ 365.455602][ C0] tun_get_user+0x1e31/0x3c20 [ 365.460272][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 365.465300][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 365.470749][ C0] ? find_held_lock+0x2b/0x80 [ 365.475414][ C0] ? tun_get+0x191/0x370 [ 365.479686][ C0] ? tun_get+0x191/0x370 [ 365.483931][ C0] tun_chr_write_iter+0xdc/0x200 [ 365.488864][ C0] vfs_write+0x6ac/0x1070 [ 365.493186][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 365.498722][ C0] ? __pfx_vfs_write+0x10/0x10 [ 365.503488][ C0] ? find_held_lock+0x2b/0x80 [ 365.508168][ C0] ksys_write+0x12a/0x250 [ 365.512579][ C0] ? __pfx_ksys_write+0x10/0x10 [ 365.517410][ C0] ? rcu_is_watching+0x12/0xc0 [ 365.522162][ C0] do_syscall_64+0x10b/0xf80 [ 365.526772][ C0] ? clear_bhb_loop+0x40/0x90 [ 365.531435][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.537330][ C0] RIP: 0033:0x7f700759cdd9 [ 365.541723][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.561323][ C0] RSP: 002b:00007f70083ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 365.569729][ C0] RAX: ffffffffffffffda RBX: 00007f7007815fa0 RCX: 00007f700759cdd9 [ 365.577719][ C0] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 0000000000000005 [ 365.585701][ C0] RBP: 00007f7007632d69 R08: 0000000000000000 R09: 0000000000000000 [ 365.593673][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.601651][ C0] R13: 00007f7007816038 R14: 00007f7007815fa0 R15: 00007ffc1b1ee0f8 [ 365.609635][ C0] [ 365.613120][ C0] Kernel Offset: disabled [ 365.617431][ C0] Rebooting in 86400 seconds..