last executing test programs: 7.652426868s ago: executing program 3 (id=738): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020) 7.533232846s ago: executing program 0 (id=740): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x5ada985dea50982f) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$nl_rdma(0x10, 0x3, 0x14) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x90}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x4000, 0x2}) 7.476020443s ago: executing program 3 (id=741): socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 7.340734247s ago: executing program 0 (id=742): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000600)=ANY=[], 0x342) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', 0x0}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto(r0, 0x0, 0x0, 0x468fd, &(0x7f00000004c0)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x92}, 0x9}, 0x80) 7.307216141s ago: executing program 1 (id=743): socket(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 7.246663776s ago: executing program 3 (id=744): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0xfffffffffffffffd, 0x2, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x24000, 0x0) syz_usb_connect$hid(0x2, 0x83, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x9da, 0x22b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x8, "", [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3f7, 0x0, 0x2b, 0xfe}}}}}]}}]}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.222058693s ago: executing program 0 (id=745): socket$inet_sctp(0x2, 0x5, 0x84) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) 5.850883215s ago: executing program 1 (id=746): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x26, 0x40000000, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./zero\x00', 0x0, 0x0) read(r2, &(0x7f000000b000), 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2000, 0x1000, &(0x7f000000b000/0x1000)=nil}) ioctl(r1, 0x4048aec9, &(0x7f0000000200)="01000000000000000200"/72) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x11, r3, 0x0) ioctl(r1, 0x400caed0, &(0x7f0000000100)="0100000000000000ffffffff") ioctl(r3, 0x4048aecb, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/72) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.421370784s ago: executing program 2 (id=747): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000040)={0x2a0a00300, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0xc0) 5.309366756s ago: executing program 0 (id=749): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) write(r1, &(0x7f0000000500)='1000000', 0x7) 5.156478228s ago: executing program 2 (id=750): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000580)={0x10, 0xd7, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0xfc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.944675398s ago: executing program 2 (id=751): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_usb_connect(0x4, 0x90, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102138d28200819201300000102030109027e0080ffffff000904ae0e051966858f0b240600013a6af75c828205240009000d020000000000000400fdff0606241a8d000809050308000402080607250182070100090509001000a903080725018134000009050c10000408018d0725010007060007250100096f0e09050b1000020fab08090506"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x91ea6c1af182532) renameat2(r0, &(0x7f0000000000)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2) execveat(r0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000280)={[&(0x7f0000000180)='}%-\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00']}, &(0x7f0000000380)={[&(0x7f00000002c0)='GPL\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='+{{\x93\x00']}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x19, 0x16, 0xbd, 0x8, 0x112a, 0x5, 0xdf89, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x5, 0x80, 0x3, "", [{{0x9, 0x4, 0x1, 0x2, 0x0, 0x84, 0xc, 0x4, 0x7f}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) 4.329852373s ago: executing program 1 (id=753): socket(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x112}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xea5bc50b6199d77e) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) 4.104810945s ago: executing program 0 (id=755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x50, 0x12, 0x613, 0x70bd26, 0x25dfdbff, {0x6, 0xff, 0x41, 0x5, {0x4e24, 0x4e22, [0x3, 0xfffffffd, 0x3113, 0xdf4], [0x1007, 0xc8, 0x12, 0x6], 0x0, [0x4, 0x4]}, 0x4, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 2.917457351s ago: executing program 0 (id=757): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl(r0, 0xc0145608, &(0x7f0000000400)="03000000010000000100"/20) ioctl(r0, 0xc0405610, &(0x7f0000000500)="0100"/64) ioctl(r0, 0xc0145608, &(0x7f0000000b00)="00000000010000000100"/20) ioctl(r0, 0xc0145608, &(0x7f0000000600)="03000000010000000400"/20) ioctl(r0, 0xc058560f, &(0x7f0000000700)="000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000400"/80) ioctl(r0, 0xc0145608, &(0x7f0000000b00)="00000000010000000400"/20) 2.900525313s ago: executing program 1 (id=758): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x405, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000f00)='ns/net\x00') sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001200)={0x24, 0x1402, 0x405, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x24}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000600)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1234, 0x0, @loopback}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000700)={0x7, 0x8, 0xfa00, {r3, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000a00)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x1234, 0x0, @loopback}, 0xffffffffffffffff, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000e00)={0xc, 0x8, 0x150, {&(0x7f0000000f00)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000b00)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000e00)={0xc, 0x8, 0x150, {&(0x7f0000000f00)}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000c00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 2.889199236s ago: executing program 3 (id=759): prlimit64(0x0, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="bf"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.653446185s ago: executing program 3 (id=761): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) pipe(&(0x7f0000002680)) r1 = fsopen(0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ftruncate(r2, 0xfffffffffffffeff) capset(0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r3, 0x4b44, 0x0) write$FUSE_DIRENT(r2, 0x0, 0x198) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) read(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000001280)={0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="4016ea000000906a60f5b2b7817cee251e142cae070cfc49351a0f005a3d87da0000f6f112d733195f512fb48294c61ed3ad4ac2a68557859d1b63981d1b4f4967"], 0x0, 0x0}) 2.293031346s ago: executing program 4 (id=764): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) socket$nl_netfilter(0x10, 0x3, 0xc) 2.25294622s ago: executing program 4 (id=765): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x97, 0x8000, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2800c844) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5f, 0x80000) r3 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r3, 0x7, 0x2, r2}) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r4 = eventfd2(0xe5c, 0x801) splice(r3, 0x0, r2, 0x0, 0x0, 0x4) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r4, 0x7, 0x2, r2}) 2.206253181s ago: executing program 2 (id=766): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0x2, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x5, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2.086837333s ago: executing program 4 (id=767): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@setneightbl={0x54, 0x43, 0x400, 0x70bd26, 0x25dfdbfc, {0xa}, [@NDTA_THRESH3={0x8, 0x4, 0x7}, @NDTA_GC_INTERVAL={0xc, 0x8, 0xaae9}, @NDTA_THRESH3={0x8, 0x4, 0x1ff}, @NDTA_THRESH2={0x8, 0x3, 0xfffffff8}, @NDTA_NAME={0xc, 0x1, 'ip6tnl0\x00'}, @NDTA_THRESH1={0x8, 0x2, 0x81}, @NDTA_THRESH1={0x8, 0x2, 0x4}]}, 0x54}, 0x1, 0x20000, 0x0, 0x2400c0d5}, 0x9080) syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x6, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x1, 0x0, 0x5}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000005ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x40) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) sendmsg$kcm(r5, 0x0, 0x40040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x8864000000000000) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x3, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) close(r2) 2.033607546s ago: executing program 2 (id=768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x40a02, 0x0) write$cgroup_pid(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xf24247bec6b34d77, 0x10, r3, 0x64904000) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r4, &(0x7f0000000700)='bind', 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x408, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) epoll_create(0x7) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0xb0000009}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, {0x20000010304, @multicast}, 0x12, {0x2, 0x4e22, @rand_addr=0x64010102}}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x3e, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.990345406s ago: executing program 1 (id=769): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000100)={'aio_iiro_16\x00', [0x100, 0x12, 0xd0, 0x2, 0x2, 0x100, 0x3, 0x7f, 0x5, 0x4000000b, 0x2, 0x7, 0xfffffdff, 0x401, 0x10001, 0x1, 0x9, 0x7f, 0xfe5, 0x403, 0x0, 0xfff, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x20003, 0x9]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x3, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_LABELS_MASK={0xc, 0x17, [0x3ff, 0x7]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2012653d}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x0, 0x1, 0x2, 0x2, 0x1]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x40001) 1.208226834s ago: executing program 4 (id=770): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./work\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./merge\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./lower/file\x00', 0x81c0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./merge\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './lower'}}, {@upperdir={'upperdir', 0x3d, './upper'}}, {@workdir={'workdir', 0x3d, './work'}}, {@index_on}, {@nfs_export_on, 0x0}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./merge\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000300)='file\x00', &(0x7f0000000000)=@raw={0x40, 0x0, {'\x00'/64}}, &(0x7f0000000340), 0x0) close(r0) umount2(&(0x7f0000000380)='./merge\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./merge\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={[{@lowerdir={'lowerdir', 0x3d, './lower'}}, {@upperdir={'upperdir', 0x3d, './upper'}}, {@workdir={'workdir', 0x3d, './work'}}, {@index_on}, {@nfs_export_on, 0x0}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./merge\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=@raw={0x40, 0x0, {'\x00'/64}}, 0x0) 1.134119924s ago: executing program 2 (id=771): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x4000000) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) 966.097043ms ago: executing program 4 (id=772): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) epoll_create1(0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) 953.78973ms ago: executing program 1 (id=773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 284.60132ms ago: executing program 3 (id=774): openat$rfkill(0xffffffffffffff9c, 0x0, 0x109000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000001dc0)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, r5, r6, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=775): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f00000001a0)='1', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb, 0x9, 0x1fd3, 0x6, 0x4000}, 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f000000040000000400000007"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x17, r1}, 0x38) kernel console output (not intermixed with test programs): _u:object_r:cgroup_t tclass=dir permissive=1 [ 191.370548][ T6997] net_ratelimit: 2 callbacks suppressed [ 191.370567][ T6997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.385692][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.792837][ T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.850128][ T7004] binder: 6995:7004 ioctl 4018620d 0 returned -22 [ 191.876424][ T7004] binder: 6995:7004 ioctl c0306201 0 returned -14 [ 192.190332][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.333927][ T7009] Invalid ELF header magic: != ELF [ 192.757118][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.781319][ T30] audit: type=1400 audit(1785917656.823:779): avc: denied { module_load } for pid=6993 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 192.928063][ T30] audit: type=1400 audit(1785917657.403:780): avc: denied { write } for pid=6981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.063723][ T7015] 9p: Bad value for 'rfdno' [ 193.230358][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.418094][ T7016] netlink: 72 bytes leftover after parsing attributes in process `syz.4.261'. [ 193.427410][ T7016] netlink: 'syz.4.261': attribute type 10 has an invalid length. [ 193.698607][ T7018] netlink: 23 bytes leftover after parsing attributes in process `syz.0.262'. [ 194.023210][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.065416][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.149284][ T3268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.158935][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.282061][ T30] audit: type=1400 audit(1785917657.543:781): avc: denied { mount } for pid=7011 comm="syz.3.263" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 194.404350][ T30] audit: type=1400 audit(1785917658.183:782): avc: denied { write } for pid=7007 comm="syz.0.262" path="socket:[13603]" dev="sockfs" ino=13603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 195.202861][ T30] audit: type=1400 audit(1785917658.493:783): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 195.624058][ T30] audit: type=1400 audit(1785917660.053:784): avc: denied { write } for pid=7026 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.086609][ T30] audit: type=1400 audit(1785917660.473:785): avc: denied { wake_alarm } for pid=7039 comm="syz.4.268" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 196.510357][ C0] net_ratelimit: 5 callbacks suppressed [ 196.510376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.802301][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 197.006825][ T7058] futex_wake_op: syz.4.272 tries to shift op by 144; fix this program [ 197.474053][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.550468][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.690964][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.364615][ T7078] CacheFiles: No cache directory specified [ 198.590397][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.996722][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.630296][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.662911][ T30] audit: type=1400 audit(1785917663.773:786): avc: denied { search } for pid=7080 comm="syz.4.277" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 200.054588][ T30] audit: type=1400 audit(1785917663.773:787): avc: denied { write } for pid=7080 comm="syz.4.277" name="v4_end_grace" dev="nfsd" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 200.080479][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.211187][ T3268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.261986][ T30] audit: type=1400 audit(1785917663.773:788): avc: denied { open } for pid=7080 comm="syz.4.277" path="/52/nfsd/v4_end_grace" dev="nfsd" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 200.558993][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.813544][ T7100] zram0: detected capacity change from 0 to 8 [ 201.316324][ T30] audit: type=1400 audit(1785917663.783:789): avc: denied { accept } for pid=7080 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 201.601763][ T29] net_ratelimit: 2 callbacks suppressed [ 201.601796][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.779837][ T30] audit: type=1400 audit(1785917664.003:790): avc: denied { create } for pid=7079 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 202.128730][ T7121] vxfs: unable to read disk superblock at 1 [ 202.136356][ T7121] vxfs: unable to read disk superblock at 8 [ 202.142366][ T7121] vxfs: can't find superblock. [ 202.207333][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.284'. [ 202.524545][ T30] audit: type=1400 audit(1785917667.013:791): avc: denied { map } for pid=7123 comm="syz.2.285" path="socket:[12952]" dev="sockfs" ino=12952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 202.671100][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.766267][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.042890][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.166370][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.070313][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.082047][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.142995][ T30] audit: type=1400 audit(1785917669.603:792): avc: denied { read write } for pid=7143 comm="syz.2.289" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 205.482732][ T30] audit: type=1400 audit(1785917669.623:793): avc: denied { open } for pid=7143 comm="syz.2.289" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 205.879651][ T30] audit: type=1326 audit(1785917670.353:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7150 comm="syz.0.290" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1866f9e0d9 code=0x0 [ 205.934971][ T5716] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 205.971899][ T5716] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 206.110656][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.408098][ T7157] openvswitch: netlink: IP tunnel attribute has 236 unknown bytes. [ 207.030506][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.150568][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.523427][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.112310][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.190328][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.231778][ T30] audit: type=1400 audit(1785917672.723:795): avc: denied { set_context_mgr } for pid=7173 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 208.397407][ T7164] fido_id[7164]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 208.424494][ T30] audit: type=1400 audit(1785917672.723:796): avc: denied { map } for pid=7173 comm="syz.4.295" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 208.463454][ T30] audit: type=1400 audit(1785917672.743:797): avc: denied { call } for pid=7173 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 208.630315][ T5743] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 209.212672][ T30] audit: type=1400 audit(1785917673.693:798): avc: denied { write } for pid=7162 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.235773][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.726718][ T30] audit: type=1400 audit(1785917674.213:799): avc: denied { write } for pid=7196 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.270717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.325240][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.457286][ T5743] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 210.900335][ T5743] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 210.931836][ T5743] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 210.947325][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.976014][ T5743] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 211.005585][ T5743] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 211.030279][ T5743] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 211.081666][ T5743] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 211.320425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.372327][ T5743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 211.405615][ T5743] usb 1-1: Product: syz [ 211.419751][ T5743] usb 1-1: Manufacturer: syz [ 211.445333][ T5743] usb 1-1: can't set config #1, error -71 [ 211.473502][ T5743] usb 1-1: USB disconnect, device number 6 [ 211.845250][ T7209] dummy0: entered allmulticast mode [ 211.852792][ T7209] dummy0: left allmulticast mode [ 212.360306][ C1] net_ratelimit: 1 callbacks suppressed [ 212.360324][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.433182][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.486700][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.630781][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.950477][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.523855][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.670339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.710351][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.014020][ T7240] Cannot find del_set index 4 as target [ 216.019080][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.160402][ T5800] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 216.627136][ T30] audit: type=1400 audit(1785917680.723:800): avc: denied { shutdown } for pid=7247 comm="syz.2.310" laddr=fe80::16 lport=55940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 216.751499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.809676][ T5800] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 217.036324][ T7246] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 217.045118][ T30] audit: type=1400 audit(1785917681.513:801): avc: denied { mounton } for pid=7238 comm="syz.1.309" path="/56/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 217.063297][ T5800] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 217.086978][ T5800] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 217.117436][ T5800] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 217.129857][ T5800] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 217.495504][ T5800] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 217.660437][ T5807] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 217.704311][ T5800] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 217.790309][ C0] net_ratelimit: 2 callbacks suppressed [ 217.790333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.203711][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.210342][ T30] audit: type=1400 audit(1785917681.563:802): avc: denied { read } for pid=7238 comm="syz.1.309" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 218.237167][ T30] audit: type=1400 audit(1785917681.563:803): avc: denied { read } for pid=7238 comm="syz.1.309" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 218.244081][ T5807] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 218.270693][ T30] audit: type=1400 audit(1785917681.563:804): avc: denied { open } for pid=7238 comm="syz.1.309" path="/56/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 218.270738][ T30] audit: type=1400 audit(1785917681.563:805): avc: denied { read } for pid=7238 comm="syz.1.309" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 218.270773][ T30] audit: type=1400 audit(1785917681.563:806): avc: denied { read } for pid=7238 comm="syz.1.309" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 218.270806][ T30] audit: type=1400 audit(1785917681.563:807): avc: denied { getattr } for pid=7238 comm="syz.1.309" name="saved_tgids" dev="tracefs" ino=3350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 218.366451][ T5800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 218.379392][ T5800] usb 1-1: Product: syz [ 218.386229][ T5800] usb 1-1: Manufacturer: syz [ 218.425968][ T7260] trusted_key: encrypted_key: insufficient parameters specified [ 218.444137][ T5807] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 218.462185][ T5800] usb 1-1: can't set config #1, error -71 [ 218.485155][ T5800] usb 1-1: USB disconnect, device number 7 [ 218.531940][ T5807] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 218.542143][ T5807] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 218.553057][ T5807] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 218.591950][ T5807] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 218.592342][ T30] audit: type=1326 audit(1785917683.083:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7262 comm="syz.2.314" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb83c19e0d9 code=0x0 [ 218.604054][ T5807] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 218.639899][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 218.650290][ T4990] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 218.668968][ T5807] usb 4-1: Product: syz [ 218.679104][ T5807] usb 4-1: Manufacturer: syz [ 218.772635][ T7255] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 218.783008][ T7255] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 218.794169][ T7255] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 218.830321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.899680][ T4990] usb 5-1: unable to get BOS descriptor or descriptor too short [ 218.900504][ T7255] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 218.926780][ T4990] usb 5-1: not running at top speed; connect to a high speed hub [ 219.051441][ T7255] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 219.321884][ T7255] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 219.332115][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.343518][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 219.354471][ T5807] usb 4-1: USB2VGA dongle found at address 4 [ 219.361106][ T4990] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.380321][ T30] audit: type=1400 audit(1785917683.863:809): avc: denied { write } for pid=7270 comm="syz.0.315" name="functions" dev="configfs" ino=8294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 219.395450][ T4990] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.414098][ T5807] usb 4-1: Allocated 8 output buffers [ 219.422942][ T4990] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 219.429206][ T7271] zram: Can't change algorithm for initialized device [ 219.432438][ T4990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.451072][ T5807] usb 4-1: Failed to early initialize device [ 219.485243][ T7271] zram: Cannot change disksize for initialized device [ 219.512074][ T4990] usb 5-1: Product: syz [ 219.526903][ T4990] usb 5-1: Manufacturer: syz [ 219.554377][ T4990] usb 5-1: SerialNumber: syz [ 219.844153][ T4990] usb 5-1: can't set config #1, error -71 [ 219.857808][ T7255] usb 4-1: Failed to initialize device [ 219.870506][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.871020][ T4990] usb 5-1: USB disconnect, device number 5 [ 219.898846][ T7255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.311'. [ 219.955344][ T5807] usb 4-1: USB disconnect, device number 4 [ 220.031598][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.049582][ T7276] afs: Unknown parameter '@' [ 220.112608][ T7276] siw: device registration error -23 [ 220.350887][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.910307][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.071677][ T5619] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 221.498235][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.950387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.990485][ C0] net_ratelimit: 1 callbacks suppressed [ 222.990504][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.070414][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.111171][ T7293] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 223.508675][ T7303] 9p: Bad value for 'rfdno' [ 223.810797][ T5807] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 223.830882][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.993421][ T5807] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 224.020625][ T5807] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 224.031693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.054099][ T5807] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 224.120169][ T5807] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 224.133220][ T5807] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 224.170046][ T5807] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 224.207235][ T5807] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 224.226877][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 224.267184][ T5807] usb 4-1: Product: syz [ 224.280282][ T5807] usb 4-1: Manufacturer: syz [ 224.297725][ T7296] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 224.320054][ T7296] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 224.350437][ T7296] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 224.370566][ T7296] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 224.400628][ T7296] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 224.425197][ T7296] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 224.480474][ T5807] usb 4-1: USB2VGA dongle found at address 5 [ 224.698133][ T13] Bluetooth: (null): Invalid header checksum [ 224.705729][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.324'. [ 224.716732][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.327'. [ 224.741932][ T13] Bluetooth: (null): Invalid header checksum [ 224.828312][ T5807] usb 4-1: Allocated 8 output buffers [ 224.853921][ T5807] usb 4-1: Failed to early initialize device [ 224.854218][ T6083] Bluetooth: (null): Invalid header checksum [ 225.070308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.341002][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 225.341043][ T30] audit: type=1400 audit(1785917689.553:821): avc: denied { write } for pid=7312 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 225.366770][ T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.376883][ T6242] Bluetooth: (null): Invalid header checksum [ 225.416703][ T6242] Bluetooth: (null): Invalid header checksum [ 225.443407][ T6242] Bluetooth: (null): Invalid header checksum [ 225.455588][ T5807] usb 4-1: USB disconnect, device number 5 [ 225.461516][ T6242] Bluetooth: (null): Invalid header checksum [ 225.483203][ T6242] Bluetooth: (null): Invalid header checksum [ 225.553939][ T6242] Bluetooth: (null): Invalid header checksum [ 225.621889][ T13] Bluetooth: (null): Invalid header checksum [ 225.658952][ T30] audit: type=1400 audit(1785917690.143:822): avc: denied { connect } for pid=7322 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 225.904822][ T7330] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 225.904822][ T7330] Please contact the netfilter-devel mailing list or update your nftables rules. [ 225.985511][ T7331] Cannot find set identified by id 0 to match [ 226.110502][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.211713][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.448173][ T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.150305][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.208497][ T30] audit: type=1326 audit(1785917691.693:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.1.332" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2bff9e0d9 code=0x0 [ 227.788701][ T30] audit: type=1326 audit(1785917691.863:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.1.332" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2bff9e0d9 code=0x0 [ 228.190306][ C0] net_ratelimit: 1 callbacks suppressed [ 228.190325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.660868][ T7333] ALSA: mixer_oss: invalid OSS volume '' [ 228.963918][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.053674][ T30] audit: type=1400 audit(1785917693.543:825): avc: denied { getopt } for pid=7359 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 229.243658][ T30] audit: type=1400 audit(1785917693.653:826): avc: denied { execute } for pid=7359 comm="syz.0.336" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 229.245294][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.671618][ T6117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.178345][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.670329][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.703841][ T7350] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 231.142665][ T7390] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 231.580849][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.710332][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.955694][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'. [ 231.964836][ T30] audit: type=1400 audit(1785917696.443:827): avc: denied { connect } for pid=7395 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 232.289736][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.496526][ T7407] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 232.600618][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.234547][ T5735] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 233.420285][ T5735] usb 4-1: Using ep0 maxpacket: 8 [ 233.630883][ T805] net_ratelimit: 1 callbacks suppressed [ 233.630895][ T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.678284][ T7408] netlink: 'syz.3.344': attribute type 8 has an invalid length. [ 233.790306][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.830305][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.205016][ T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.348049][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.436778][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.464635][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.585658][ T5735] usb 4-1: unable to get BOS descriptor or descriptor too short [ 235.673060][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.870462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.910307][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.963851][ T5735] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 236.971535][ T5735] usb 4-1: can't read configurations, error -71 [ 237.147233][ T7438] 0x000000000007-0x000000020000 : "" [ 237.189629][ T30] audit: type=1400 audit(1785917701.623:828): avc: denied { write } for pid=7436 comm="syz.3.350" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 237.277836][ T7439] netlink: 'syz.3.350': attribute type 4 has an invalid length. [ 237.462163][ T7438] ftl_cs: FTL header corrupt! [ 237.525240][ T30] audit: type=1400 audit(1785917701.623:829): avc: denied { open } for pid=7436 comm="syz.3.350" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 237.793311][ T30] audit: type=1400 audit(1785917701.633:830): avc: denied { ioctl } for pid=7436 comm="syz.3.350" path="/dev/mtd0" dev="devtmpfs" ino=704 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 238.284567][ T7444] syz_tun: entered allmulticast mode [ 238.458942][ T7448] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 238.649350][ T7453] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 238.814841][ T30] audit: type=1400 audit(1785917703.243:831): avc: denied { mount } for pid=7443 comm="syz.1.352" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 238.990437][ C0] net_ratelimit: 4 callbacks suppressed [ 238.990909][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.192024][ T7443] syz_tun: left allmulticast mode [ 239.241706][ T7453] netlink: 32 bytes leftover after parsing attributes in process `syz.2.349'. [ 239.398173][ T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.700503][ T5743] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 240.000312][ T5743] usb 5-1: Using ep0 maxpacket: 32 [ 240.016747][ T5743] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 240.030305][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.052003][ T5743] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 240.207680][ T5743] usb 5-1: config 0 interface 0 has no altsetting 0 [ 240.225368][ T5743] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 240.340335][ T30] audit: type=1400 audit(1785917704.813:832): avc: denied { read write } for pid=7462 comm="syz.1.355" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 240.447489][ T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.656904][ T5743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.685639][ T5743] usb 5-1: Product: syz [ 240.692017][ T5743] usb 5-1: Manufacturer: syz [ 240.697086][ T5743] usb 5-1: SerialNumber: syz [ 240.703604][ T30] audit: type=1400 audit(1785917704.813:833): avc: denied { open } for pid=7462 comm="syz.1.355" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 240.752568][ T5743] usb 5-1: config 0 descriptor?? [ 241.070295][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.480865][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.523362][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.531816][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.540648][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.551195][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.580756][ T5743] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 241.749674][ T7478] dlm: no local IP address has been set [ 241.758721][ T7478] dlm: cannot start dlm midcomms -107 [ 241.784806][ T5743] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 241.798238][ T30] audit: type=1400 audit(1785917706.283:834): avc: denied { write } for pid=7477 comm="syz.3.358" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 241.844732][ T5743] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32 [ 241.848734][ T7478] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 241.864796][ T30] audit: type=1400 audit(1785917706.283:835): avc: denied { open } for pid=7477 comm="syz.3.358" path="/75/tracing/events/kvm/kvm_hv_stimer_cleanup/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 242.137776][ T7484] capability: warning: `syz.4.354' uses 32-bit capabilities (legacy support in use) [ 243.764472][ T805] usb 5-1: USB disconnect, device number 6 [ 244.021588][ T5807] net_ratelimit: 3 callbacks suppressed [ 244.021606][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.200317][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.317171][ T5619] Bluetooth: hci2: unexpected event for opcode 0x0c0d [ 244.499951][ T7494] siw: device registration error -23 [ 244.770605][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.050291][ T5716] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 245.070793][ T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.230437][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.391405][ T4990] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 245.640421][ T4990] usb 5-1: Using ep0 maxpacket: 32 [ 245.662187][ T4990] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.103704][ T4990] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 246.166919][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.270309][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.294393][ T5716] usb 1-1: unable to get BOS descriptor or descriptor too short [ 246.329369][ T5716] usb 1-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 246.345033][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.506329][ T5716] usb 1-1: Product: syz [ 246.563834][ T5716] usb 1-1: Manufacturer: syz [ 246.619260][ T5716] usb 1-1: SerialNumber: syz [ 246.856494][ T4990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.864666][ T4990] usb 5-1: Product: syz [ 247.309894][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.320295][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.328641][ T4990] usb 5-1: Manufacturer: syz [ 247.333414][ T4990] usb 5-1: SerialNumber: syz [ 247.419567][ T5716] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 247.609872][ T4990] usb 5-1: config 0 descriptor?? [ 247.811500][ T30] audit: type=1400 audit(1785917712.293:836): avc: denied { read } for pid=7523 comm="syz.2.369" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 247.832650][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.906947][ T5716] usb 1-1: USB disconnect, device number 8 [ 248.332908][ T30] audit: type=1400 audit(1785917712.293:837): avc: denied { open } for pid=7523 comm="syz.2.369" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 248.382841][ T30] audit: type=1400 audit(1785917712.293:838): avc: denied { ioctl } for pid=7523 comm="syz.2.369" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 248.418124][ T4990] usb 5-1: can't set config #0, error -71 [ 248.476872][ T4990] usb 5-1: USB disconnect, device number 7 [ 248.678550][ T5619] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 248.686976][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 248.778036][ T6775] udevd[6775]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 248.847224][ T30] audit: type=1400 audit(1785917713.333:839): avc: denied { read write } for pid=7539 comm="syz.2.373" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 248.983494][ T7547] Mount JFS Failure: -22 [ 248.988540][ T7547] jfs_mount failed w/return code = -22 [ 249.207959][ T30] audit: type=1400 audit(1785917713.333:840): avc: denied { open } for pid=7539 comm="syz.2.373" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 249.390439][ C0] net_ratelimit: 2 callbacks suppressed [ 249.390457][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.412449][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.816431][ T30] audit: type=1400 audit(1785917713.393:841): avc: denied { create } for pid=7539 comm="syz.2.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 249.874908][ T30] audit: type=1400 audit(1785917713.443:842): avc: denied { ioctl } for pid=7539 comm="syz.2.373" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 250.122400][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.130313][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.430400][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.782682][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.835230][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.386345][ T7568] hpfs: Bad magic ... probably not HPFS [ 251.395609][ T7568] hpfs: Bad magic ... probably not HPFS [ 251.470533][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.536413][ T5619] Bluetooth: hci2: unexpected event for opcode 0x0407 [ 251.801993][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'. [ 252.169685][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.431161][ T5807] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 252.510301][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.591912][ T5807] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 252.620402][ T5807] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 252.644411][ T5807] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 252.667430][ T5807] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 252.689547][ T5807] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 252.713403][ T5807] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 252.742922][ T5807] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 252.759864][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 252.779988][ T5807] usb 4-1: Product: syz [ 252.792047][ T5807] usb 4-1: Manufacturer: syz [ 252.819614][ T7583] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 252.835164][ T7583] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 252.863038][ T7583] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 252.891797][ T7583] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 252.915382][ T7583] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 252.935931][ T7583] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 252.967382][ T5807] usb 4-1: USB2VGA dongle found at address 8 [ 252.989993][ T5807] usb 4-1: Allocated 8 output buffers [ 253.016477][ T5807] usb 4-1: Failed to early initialize device [ 253.234914][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.257661][ T7583] usb 4-1: Failed to initialize device [ 253.321138][ T7583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.386'. [ 253.339171][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 253.402255][ T5621] usb 4-1: USB disconnect, device number 8 [ 253.560317][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.101101][ T7614] netlink: 'syz.4.392': attribute type 1 has an invalid length. [ 254.371038][ T7614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.590478][ C0] net_ratelimit: 2 callbacks suppressed [ 254.590499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.920603][ T7626] ip6t_srh: unknown srh match flags FF3F [ 255.323290][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.324328][ T30] audit: type=1400 audit(1785917719.773:843): avc: denied { setopt } for pid=7613 comm="syz.4.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 255.456565][ T7620] netlink: 36 bytes leftover after parsing attributes in process `syz.4.392'. [ 255.619423][ T5614] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 255.630285][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.648619][ T5614] Bluetooth: hci2: Injecting HCI hardware error event [ 255.663076][ T5614] Bluetooth: hci2: hardware error 0x00 [ 255.994941][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 256.510117][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.670303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.035853][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.390586][ T7651] zram: Cannot change disksize for initialized device [ 257.561025][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.608044][ T30] audit: type=1400 audit(1785917722.093:844): avc: denied { write } for pid=7645 comm="syz.4.398" name="c.1" dev="configfs" ino=8441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 257.796765][ T6548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.941313][ T30] audit: type=1400 audit(1785917722.093:845): avc: denied { write } for pid=7645 comm="syz.4.398" name="c.1" dev="configfs" ino=8441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 258.145043][ T7648] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 258.594512][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.614071][ T5614] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 258.652426][ T30] audit: type=1400 audit(1785917723.143:846): avc: denied { connect } for pid=7659 comm="syz.4.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 258.674580][ T7648] block device autoloading is deprecated and will be removed. [ 258.830311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.899248][ T7656] Bluetooth: MGMT ver 1.23 [ 258.900295][ T30] audit: type=1400 audit(1785917723.383:847): avc: denied { write } for pid=7655 comm="syz.2.400" path="socket:[14963]" dev="sockfs" ino=14963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 258.997541][ T7668] NILFS (nullb0): couldn't find nilfs on the device [ 259.310384][ T5807] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 259.347364][ T30] audit: type=1400 audit(1785917723.833:848): avc: denied { bind } for pid=7655 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 259.430172][ T7662] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 259.496094][ T5807] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 259.496155][ T5807] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 259.505769][ T5807] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 259.505859][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.505931][ T5807] usb 1-1: Product: syz [ 259.505968][ T5807] usb 1-1: Manufacturer: syz [ 259.506035][ T5807] usb 1-1: SerialNumber: syz [ 259.540319][ T5743] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 259.574327][ T5807] usb 1-1: config 0 descriptor?? [ 259.709458][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.858395][ T5743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 259.858429][ T5743] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.858461][ T5743] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 259.858479][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.871639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.110688][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.203105][ T5743] usb 5-1: config 0 descriptor?? [ 260.756450][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.780279][ T4990] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 260.911913][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.940464][ T4990] usb 4-1: Using ep0 maxpacket: 16 [ 260.953266][ T4990] usb 4-1: config 73 has an invalid interface number: 24 but max is 0 [ 260.970966][ T4990] usb 4-1: config 73 has no interface number 0 [ 260.987920][ T4990] usb 4-1: config 73 interface 24 has no altsetting 0 [ 261.012447][ T4990] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 261.025854][ T4990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.038424][ T4990] usb 4-1: Product: syz [ 261.043484][ T4990] usb 4-1: Manufacturer: syz [ 261.049765][ T4990] usb 4-1: SerialNumber: syz [ 261.292503][ T4990] go7007 4-1:73.24: probe with driver go7007 failed with error -12 [ 261.319880][ T4990] usb 4-1: USB disconnect, device number 9 [ 261.837422][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.849770][ T5807] mos7840 1-1:0.0: required endpoints missing [ 261.864455][ T5807] usb 1-1: USB disconnect, device number 9 [ 261.909880][ T5743] usbhid 5-1:0.0: can't add hid device: -71 [ 261.916512][ T5743] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 261.950706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.956908][ T5743] usb 5-1: USB disconnect, device number 8 [ 261.981342][ T4990] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 262.037234][ T7695] qrtr: Invalid version 0 [ 262.077529][ T7695] input: syz0 as /devices/virtual/input/input9 [ 262.249105][ T4990] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 262.374900][ T7701] syz.0.410 (7701): /proc/7701/oom_adj is deprecated, please use /proc/7701/oom_score_adj instead. [ 262.990297][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.076599][ T4990] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.097474][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.105880][ T4990] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 263.115270][ T4990] usb 2-1: config 0 has no interface number 0 [ 263.121410][ T4990] usb 2-1: config 0 has no interface number 1 [ 263.127537][ T4990] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 263.140080][ T4990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.158611][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.256313][ T4990] usb 2-1: config 0 descriptor?? [ 263.265546][ T4990] usb 2-1: unknown number of interfaces: 2 [ 263.796234][ T5743] usb 2-1: USB disconnect, device number 4 [ 264.366548][ T4990] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 264.433044][ T5619] Bluetooth: hci3: command 0x0406 tx timeout [ 265.080286][ C1] net_ratelimit: 2 callbacks suppressed [ 265.080306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.496076][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.667223][ T4990] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.680061][ T4990] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 265.695558][ T4990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.707123][ T4990] usb 5-1: config 0 descriptor?? [ 265.840483][ T5621] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 265.964029][ T30] audit: type=1400 audit(1785917730.453:849): avc: denied { ioctl } for pid=7711 comm="syz.4.415" path="ipc:[4026532798]" dev="nsfs" ino=4026532798 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 266.025797][ T5621] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 266.073402][ T5621] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 266.106959][ T4990] usb 5-1: string descriptor 0 read error: -71 [ 266.113358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.121993][ T5621] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 266.157225][ T5621] usb 3-1: config 220 has no interface number 2 [ 266.169294][ T4990] cypress_m8 5-1:0.0: DeLorme Earthmate USB converter detected [ 266.193961][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.200612][ T5621] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 266.220478][ T5621] usb 3-1: config 220 interface 0 has no altsetting 0 [ 266.228485][ T4990] earthmate ttyUSB0: required endpoint is missing [ 266.243887][ T5621] usb 3-1: config 220 interface 76 has no altsetting 0 [ 266.254832][ T5621] usb 3-1: config 220 interface 1 has no altsetting 0 [ 266.284934][ T5621] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 266.294969][ T5621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.304515][ T5621] usb 3-1: Product: syz [ 266.309876][ T5621] usb 3-1: Manufacturer: syz [ 266.315639][ T5621] usb 3-1: SerialNumber: syz [ 266.321163][ T4990] usb 5-1: USB disconnect, device number 9 [ 266.333021][ T4990] cypress_m8 5-1:0.0: device disconnected [ 266.516605][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.554318][ T5621] usb 3-1: selecting invalid altsetting 0 [ 266.585157][ T5621] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 266.597590][ T5621] uvcvideo 3-1:220.0: No valid video chain found. [ 266.620017][ T5621] usb 3-1: selecting invalid altsetting 0 [ 266.627260][ T5621] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 266.652270][ T5621] usb 3-1: USB disconnect, device number 7 [ 266.790426][ T7760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.435'. [ 267.160589][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.221568][ T7769] Bluetooth: MGMT ver 1.23 [ 267.628873][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.650996][ T5621] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 267.992819][ T5621] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 268.065754][ T5621] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 268.190367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.674348][ T7784] CacheFiles: No cache directory specified [ 268.848587][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.858378][ T5621] usb 2-1: config 220 has no interface number 2 [ 268.864926][ T5621] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 268.887899][ T5621] usb 2-1: config 220 interface 0 has no altsetting 0 [ 268.912515][ T5621] usb 2-1: config 220 interface 76 has no altsetting 0 [ 269.230275][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.241554][ T5621] usb 2-1: config 220 interface 1 has no altsetting 0 [ 269.334141][ T5621] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 269.345948][ T5621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.355918][ T5621] usb 2-1: Product: syz [ 269.360134][ T5621] usb 2-1: Manufacturer: syz [ 269.376156][ T5621] usb 2-1: SerialNumber: syz [ 269.669451][ T7781] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 270.126206][ T5716] net_ratelimit: 1 callbacks suppressed [ 270.126225][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.128563][ T5621] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 270.270891][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.397345][ T5621] uvcvideo 2-1:220.0: No valid video chain found. [ 270.516923][ T5621] usb 2-1: selecting invalid altsetting 0 [ 270.620144][ T5621] usb 2-1: selecting invalid altsetting 0 [ 270.635183][ T5621] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 270.678336][ T5621] usb 2-1: USB disconnect, device number 5 [ 271.003981][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.173107][ T7824] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.182260][ T7824] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.200972][ T7824] netlink: 148 bytes leftover after parsing attributes in process `syz.4.455'. [ 271.310395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.043600][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.260348][ T5621] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 272.350326][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.443461][ T5621] usb 1-1: Using ep0 maxpacket: 8 [ 272.507322][ T5621] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 272.636811][ T5621] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 272.719503][ T5621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.884390][ T5621] usb 1-1: config 0 descriptor?? [ 273.071884][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.150577][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.351659][ T30] audit: type=1400 audit(1785917737.843:850): avc: denied { connect } for pid=7855 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 273.390509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.416419][ T30] audit: type=1400 audit(1785917737.863:851): avc: denied { ioctl } for pid=7855 comm="syz.3.469" path="socket:[16457]" dev="sockfs" ino=16457 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 273.424798][ T5621] playstation 0003:054C:0BA0.0002: unknown main item tag 0x0 [ 273.470968][ T5621] playstation 0003:054C:0BA0.0002: unknown main item tag 0x0 [ 273.478409][ T5621] playstation 0003:054C:0BA0.0002: unknown main item tag 0x0 [ 273.503970][ T5621] playstation 0003:054C:0BA0.0002: unknown main item tag 0x0 [ 273.519318][ T5621] playstation 0003:054C:0BA0.0002: unknown main item tag 0x0 [ 273.537948][ T5621] playstation 0003:054C:0BA0.0002: unknown main item tag 0x0 [ 273.553669][ T5621] playstation 0003:054C:0BA0.0002: unknown main item tag 0x0 [ 273.564700][ T5621] playstation 0003:054C:0BA0.0002: unknown main item tag 0x0 [ 273.573102][ T5621] playstation 0003:054C:0BA0.0002: unknown main item tag 0x0 [ 273.580767][ T5621] playstation 0003:054C:0BA0.0002: unknown main item tag 0x0 [ 273.588462][ T5621] playstation 0003:054C:0BA0.0002: unbalanced collection at end of report description [ 273.615438][ T5621] playstation 0003:054C:0BA0.0002: Parse failed [ 273.623622][ T5621] playstation 0003:054C:0BA0.0002: probe with driver playstation failed with error -22 [ 273.654918][ T5621] usb 1-1: USB disconnect, device number 10 [ 273.700580][ T5800] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 273.867212][ T7871] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 273.884918][ T4990] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 273.897985][ T5800] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 273.965792][ T30] audit: type=1400 audit(1785917738.373:852): avc: denied { setopt } for pid=7859 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 274.013060][ T30] audit: type=1400 audit(1785917738.373:853): avc: denied { bind } for pid=7859 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 274.075911][ T30] audit: type=1400 audit(1785917738.373:854): avc: denied { node_bind } for pid=7859 comm="syz.1.471" saddr=100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 274.110023][ T30] audit: type=1400 audit(1785917738.373:855): avc: denied { ioctl } for pid=7859 comm="syz.1.471" path="socket:[17435]" dev="sockfs" ino=17435 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 274.136144][ T30] audit: type=1400 audit(1785917738.583:856): avc: denied { map } for pid=7868 comm="syz.3.475" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 274.430379][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.129968][ T5800] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 275.140110][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.150307][ T5800] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 275.160171][ T5800] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 275.213689][ T5800] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 275.260725][ T5800] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 275.334859][ T4990] usb 5-1: config 0 interface 0 altsetting 31 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 275.354546][ T5800] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 275.398381][ T4990] usb 5-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.418024][ T5800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 275.464306][ T5800] usb 3-1: Product: syz [ 275.470303][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.504123][ T29] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 275.519164][ T5800] usb 3-1: Manufacturer: syz [ 275.526999][ T4990] usb 5-1: config 0 interface 0 has no altsetting 0 [ 275.567215][ T4990] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 275.636202][ T7858] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 275.645024][ T4990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.686847][ T7858] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 275.722460][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 275.745371][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.762510][ T7858] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 275.783676][ T4990] usb 5-1: config 0 descriptor?? [ 275.804282][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.816994][ T7858] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 275.874839][ T7858] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 275.902875][ T7864] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 275.910119][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 275.930627][ T7858] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 275.958317][ T29] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 275.976364][ T5800] usb 3-1: USB2VGA dongle found at address 8 [ 275.980761][ T7881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.479'. [ 275.983462][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.007243][ T5800] usb 3-1: Allocated 8 output buffers [ 276.018128][ T29] usb 1-1: config 0 descriptor?? [ 276.025608][ T5800] usb 3-1: Failed to early initialize device [ 276.186699][ T7858] usb 3-1: Failed to initialize device [ 276.192855][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.201078][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.206137][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.470'. [ 276.227870][ T5800] usb 3-1: USB disconnect, device number 8 [ 276.362216][ T4990] uclogic 0003:5543:0003.0003: unexpected long global item [ 276.372187][ T4990] uclogic 0003:5543:0003.0003: parse failed [ 276.378191][ T4990] uclogic 0003:5543:0003.0003: probe with driver uclogic failed with error -22 [ 276.462772][ T29] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 276.478057][ T29] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 276.489654][ T29] microsoft 0003:045E:07DA.0004: no inputs found [ 276.496103][ T29] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 276.520496][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.579798][ T5800] usb 5-1: USB disconnect, device number 10 [ 276.580801][ T5716] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 276.665414][ T29] usb 1-1: USB disconnect, device number 11 [ 276.740271][ T5716] usb 4-1: Using ep0 maxpacket: 16 [ 276.746751][ T5716] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 276.755248][ T5716] usb 4-1: config 0 has no interface number 0 [ 276.761636][ T5716] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 276.772015][ T5716] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 276.792434][ T5716] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 276.802904][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.822664][ T5716] usb 4-1: Product: syz [ 276.830859][ T5716] usb 4-1: Manufacturer: syz [ 276.838764][ T5716] usb 4-1: SerialNumber: syz [ 276.860032][ T5716] usb 4-1: config 0 descriptor?? [ 276.867549][ T7885] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 276.883714][ T7885] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 277.098668][ T7885] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 277.106099][ T7885] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 277.231538][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.243337][ T29] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 277.490481][ T29] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 277.560275][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.598276][ T5716] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 277.609021][ T29] usb 2-1: config 127 has no interface number 0 [ 277.613154][ T5716] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 277.625325][ T5716] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 277.639019][ T5716] asix 4-1:0.34: probe with driver asix failed with error -71 [ 277.654352][ T5716] usb 4-1: USB disconnect, device number 10 [ 278.313127][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.600285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.759043][ T29] usb 2-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 279.236480][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.695474][ T29] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 279.710254][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.722913][ T29] usb 2-1: Product: syz [ 279.751902][ T29] usb 2-1: Manufacturer: syz [ 279.766962][ T29] usb 2-1: SerialNumber: syz [ 279.806411][ T7890] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 279.931775][ T29] asix 2-1:127.57: probe with driver asix failed with error -71 [ 279.973100][ T7927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.495'. [ 280.016616][ T29] usb 2-1: USB disconnect, device number 6 [ 280.216500][ T7942] netlink: 44 bytes leftover after parsing attributes in process `syz.0.501'. [ 280.226047][ T7942] netlink: 15 bytes leftover after parsing attributes in process `syz.0.501'. [ 280.236179][ T7942] netlink: 'syz.0.501': attribute type 6 has an invalid length. [ 280.750684][ T4990] net_ratelimit: 5 callbacks suppressed [ 280.750702][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.831815][ T7435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.907450][ T7956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.505'. [ 281.823209][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.880280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.270574][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.350378][ T4990] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 282.525074][ T4990] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 282.920292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.186691][ T4990] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 283.196690][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.206253][ T4990] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 283.216142][ T4990] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 283.225965][ T4990] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 283.235958][ T4990] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 283.247642][ T4990] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 283.256798][ T4990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 283.264900][ T4990] usb 1-1: Product: syz [ 283.269734][ T4990] usb 1-1: Manufacturer: syz [ 283.301339][ T7970] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 283.315059][ T7970] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 283.374120][ T7970] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 283.463379][ T7970] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 283.545791][ T7970] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 283.643092][ T7970] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 283.960431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.980619][ T4990] usb 1-1: USB2VGA dongle found at address 12 [ 284.160974][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'. [ 284.171162][ T4990] usb 1-1: Allocated 8 output buffers [ 284.280724][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.343185][ T7970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.040319][ T4990] usb 1-1: Failed to early initialize device [ 285.096553][ T4990] usb 1-1: USB disconnect, device number 12 [ 285.475896][ T30] audit: type=1400 audit(1785917749.963:857): avc: denied { append } for pid=8022 comm="syz.0.528" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 285.547711][ T30] audit: type=1400 audit(1785917749.993:858): avc: denied { map } for pid=8022 comm="syz.0.528" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 285.645605][ T30] audit: type=1400 audit(1785917749.993:859): avc: denied { execute } for pid=8022 comm="syz.0.528" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 285.771788][ T4990] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 285.962905][ T4990] usb 5-1: Using ep0 maxpacket: 32 [ 285.988001][ T4990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.019414][ T4990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.040280][ C1] net_ratelimit: 7 callbacks suppressed [ 286.040300][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.112119][ T4990] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 286.201460][ T4990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.360872][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.446555][ T4990] usb 5-1: config 0 descriptor?? [ 287.070486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.390719][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.610738][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 287.737590][ T4990] hid_parser_main: 13 callbacks suppressed [ 287.737611][ T4990] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 287.750521][ T4990] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 287.787215][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=6500, bcdDevice= 1.00 [ 287.813447][ T4990] ft260 0003:0403:6030.0005: chip code: 0000 0000 [ 287.819262][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.858959][ T10] usb 3-1: Product: syz [ 287.873267][ T10] usb 3-1: Manufacturer: syz [ 287.891981][ T10] usb 3-1: SerialNumber: syz [ 287.920599][ T10] em28xx 3-1:1.0: New device syz syz @ 480 Mbps (2040:6500, interface 0, class 0) [ 287.944548][ T10] em28xx 3-1:1.0: DVB interface 0 found: bulk [ 288.018219][ T4990] ft260 0003:0403:6030.0005: failed to retrieve system status [ 288.033395][ T8051] netlink: 'syz.1.538': attribute type 1 has an invalid length. [ 288.043416][ T4990] ft260 0003:0403:6030.0005: probe with driver ft260 failed with error -71 [ 288.064062][ T4990] usb 5-1: USB disconnect, device number 11 [ 288.120278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.136412][ T8051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 288.192608][ T8051] netlink: 36 bytes leftover after parsing attributes in process `syz.1.538'. [ 288.352143][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.430834][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.514354][ T5716] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 289.023559][ T5716] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 289.039757][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.047983][ T5716] usb 2-1: Product: syz [ 289.052581][ T5716] usb 2-1: Manufacturer: syz [ 289.058803][ T5716] usb 2-1: SerialNumber: syz [ 289.150293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.370644][ T10] em28xx 3-1:1.0: unknown em28xx chip ID (0) [ 289.439121][ T8069] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.446642][ T8069] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.459855][ T8069] netlink: 148 bytes leftover after parsing attributes in process `syz.0.541'. [ 289.535918][ T29] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 289.724146][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.765018][ T10] em28xx 3-1:1.0: reading from i2c device at 0xa0 failed (error=-5) [ 289.774419][ T10] em28xx 3-1:1.0: board has no eeprom [ 289.805136][ T29] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 289.813800][ T29] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 289.824733][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 289.833917][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 289.844927][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 289.855248][ T10] em28xx 3-1:1.0: Identified as Hauppauge WinTV HVR 900 (card=10) [ 289.865865][ T10] em28xx 3-1:1.0: dvb set to bulk mode. [ 289.883742][ T29] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 289.888013][ T9] em28xx 3-1:1.0: Binding DVB extension [ 289.893573][ T29] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 289.909273][ T29] usb 5-1: Product: syz [ 289.927622][ T10] usb 3-1: USB disconnect, device number 9 [ 289.942599][ T29] usb 5-1: Manufacturer: syz [ 289.974589][ T10] em28xx 3-1:1.0: Disconnecting em28xx [ 289.980650][ T5716] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 289.985912][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 289.998149][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 290.016700][ T29] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 290.024106][ T29] cdc_wdm 5-1:1.0: Unknown control protocol [ 290.062282][ T9] zl10353_read_register: readreg error (reg=127, ret==-19) [ 290.072970][ T9] em28xx 3-1:1.0: dvb frontend not attached. Can't attach xc3028 [ 290.085989][ T9] em28xx 3-1:1.0: Registering input extension [ 290.092748][ T10] em28xx 3-1:1.0: Closing input extension [ 290.120414][ T29] usb 2-1: USB disconnect, device number 7 [ 290.126309][ T10] em28xx 3-1:1.0: Freeing device [ 290.201059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.213246][ T30] audit: type=1400 audit(1785917754.703:860): avc: denied { read write } for pid=8064 comm="syz.4.542" name="cdc-wdm0" dev="devtmpfs" ino=3084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 290.260270][ T30] audit: type=1400 audit(1785917754.703:861): avc: denied { open } for pid=8064 comm="syz.4.542" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 290.296765][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 290.297657][ T9] usb 5-1: USB disconnect, device number 12 [ 290.303566][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 290.303587][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 290.540372][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 290.692814][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.703811][ T30] audit: type=1400 audit(1785917755.183:862): avc: denied { mounton } for pid=8083 comm="syz.3.547" path="/proc/435/task" dev="proc" ino=17879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 290.751516][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.780963][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 290.797954][ T30] audit: type=1400 audit(1785917755.243:863): avc: denied { associate } for pid=8085 comm="syz.3.547" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 290.829044][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 290.859876][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.885334][ T10] usb 3-1: config 0 descriptor?? [ 291.100830][ T8092] CacheFiles: No cache directory specified [ 291.230271][ C1] net_ratelimit: 2 callbacks suppressed [ 291.230290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.406154][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.631406][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 291.645968][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 291.656456][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 291.668223][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 291.678199][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 291.685951][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 291.694255][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 291.702320][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 291.746011][ T10] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 291.776283][ T10] usb 3-1: USB disconnect, device number 10 [ 291.790733][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.894979][ T8099] fido_id[8099]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 292.270304][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.590807][ T30] audit: type=1400 audit(1785917757.033:864): avc: denied { create } for pid=8104 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 293.039628][ T30] audit: type=1400 audit(1785917757.033:865): avc: denied { write } for pid=8104 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 293.119087][ T4990] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 293.126843][ T5800] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 293.149501][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.310456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.351474][ T4990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 293.364618][ T4990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.375163][ T5800] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 293.386147][ T4990] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.399717][ T5800] usb 2-1: config 0 has no interface number 0 [ 293.407790][ T5800] usb 2-1: config 0 interface 41 has no altsetting 0 [ 293.414699][ T4990] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.424385][ T4990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.434207][ T5800] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 293.443583][ T5800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.453239][ T5800] usb 2-1: Product: syz [ 293.458171][ T4990] usb 4-1: config 0 descriptor?? [ 293.463637][ T5800] usb 2-1: Manufacturer: syz [ 293.469107][ T5800] usb 2-1: SerialNumber: syz [ 293.487145][ T5800] usb 2-1: config 0 descriptor?? [ 293.560314][ T9] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 293.714290][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.725759][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 293.738844][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 293.753086][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 293.763408][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 293.778324][ T9] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 293.787774][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 293.799548][ T9] usb 5-1: Product: syz [ 293.804060][ T9] usb 5-1: Manufacturer: syz [ 293.808737][ T9] usb 5-1: SerialNumber: syz [ 293.825382][ T9] usb 5-1: config 0 descriptor?? [ 293.908497][ T4990] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 294.046428][ T9] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 294.053344][ T9] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 294.191404][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.254335][ T9] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 294.270272][ T9] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 294.290607][ T9] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 294.305968][ T5800] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 294.350285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.431323][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.481269][ T9] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 294.491361][ T9] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 294.498923][ T9] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 294.508547][ T9] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 294.533252][ T5800] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 294.544344][ T5800] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 294.554781][ T5800] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 294.555299][ T9] usb 5-1: USB disconnect, device number 13 [ 294.567554][ T5800] usb 2-1: USB disconnect, device number 8 [ 295.072464][ T29] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 295.088179][ T30] audit: type=1400 audit(1785917759.573:866): avc: denied { ioctl } for pid=8155 comm="syz.1.566" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 295.184651][ T8158] ip6erspan0: entered allmulticast mode [ 295.231457][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 295.252746][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.265953][ T29] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 295.287441][ T29] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 295.315734][ T29] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 295.340912][ T29] usb 3-1: Product: syz [ 295.353593][ T29] usb 3-1: Manufacturer: syz [ 295.370129][ T29] usb 3-1: SerialNumber: syz [ 295.528439][ T29] usb 3-1: config 0 descriptor?? [ 295.589243][ T8154] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 295.726014][ T29] hub 3-1:0.0: bad descriptor, ignoring hub [ 295.805585][ T29] hub 3-1:0.0: probe with driver hub failed with error -5 [ 296.196788][ T5743] usb 4-1: USB disconnect, device number 11 [ 296.262836][ T29] usb 3-1: USB disconnect, device number 11 [ 296.286376][ T4990] net_ratelimit: 1 callbacks suppressed [ 296.286389][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.430635][ T5716] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 296.447342][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.572'. [ 296.458215][ T30] audit: type=1400 audit(1785917760.933:867): avc: denied { nlmsg_read } for pid=8170 comm="syz.1.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 296.635956][ T5716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.695312][ T5716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.760326][ T5716] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 296.858382][ T5716] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 296.938748][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.990670][ T29] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 297.115648][ T5716] usb 1-1: config 0 descriptor?? [ 297.420670][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.470757][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.571878][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 297.593381][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 297.611534][ T29] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 297.631506][ T29] usb 3-1: can't read configurations, error -71 [ 297.660038][ T5716] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 297.886267][ T8198] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.895521][ T8198] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.112120][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.432075][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.150277][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.472148][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.552517][ T30] audit: type=1400 audit(1785917764.033:868): avc: denied { cmd } for pid=8247 comm="syz.2.594" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 300.200374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.405529][ T4990] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 300.843460][ T5716] usb 1-1: USB disconnect, device number 13 [ 300.844430][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.888071][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.959722][ T30] audit: type=1400 audit(1785917765.443:869): avc: denied { append } for pid=8270 comm="syz.3.603" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.972720][ T8272] loop5: detected capacity change from 0 to 6 [ 301.002515][ T8272] Dev loop5: unable to read RDB block 6 [ 301.012814][ T8272] loop5: unable to read partition table [ 301.018794][ T4990] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 301.020902][ T8272] loop5: partition table beyond EOD, [ 301.032819][ T4990] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 301.043257][ T8273] gretap0: entered promiscuous mode [ 301.049618][ T4990] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 301.065531][ T4990] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 301.072403][ T8275] input: syz0 as /devices/virtual/input/input12 [ 301.083708][ T8272] truncated [ 301.087293][ T4990] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 301.097469][ T8272] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 301.106960][ T5716] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 301.125451][ T4990] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 301.159903][ T4990] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 301.189296][ T4990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 301.209502][ T4990] usb 3-1: Product: syz [ 301.214104][ T4990] usb 3-1: Manufacturer: syz [ 301.236551][ T8257] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 301.248303][ T8257] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 301.255140][ T8280] netlink: 27 bytes leftover after parsing attributes in process `syz.3.607'. [ 301.273916][ T5716] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 301.285405][ T8257] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 301.302117][ T5716] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.312840][ T8257] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 301.317122][ T5743] net_ratelimit: 1 callbacks suppressed [ 301.317136][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.356447][ T8257] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 301.357435][ T5716] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 301.389538][ T8257] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 301.416076][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.432721][ T4990] usb 3-1: USB2VGA dongle found at address 14 [ 301.452391][ T4990] usb 3-1: Allocated 8 output buffers [ 301.471230][ T4990] usb 3-1: Failed to early initialize device [ 301.569817][ T30] audit: type=1800 audit(1785917766.053:870): pid=8295 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.611" name="file0" dev="overlay" ino=698 res=0 errno=0 [ 301.654539][ T8257] usb 3-1: Failed to initialize device [ 301.666061][ T5716] usb 1-1: GET_CAPABILITIES returned 0 [ 301.677145][ T8257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.597'. [ 301.691882][ T5716] usbtmc 1-1:16.0: can't read capabilities [ 301.737044][ T5743] usb 3-1: USB disconnect, device number 14 [ 302.002724][ T8304] netlink: 'syz.4.614': attribute type 1 has an invalid length. [ 302.053024][ T8304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 302.060365][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.077149][ T8307] bond2: (slave geneve2): making interface the new active one [ 302.086747][ T8307] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 302.280351][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.070520][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.104851][ T4990] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 303.320302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.993140][ T5743] usb 1-1: USB disconnect, device number 14 [ 304.245480][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.360624][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.708203][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.870416][ T4990] usb 3-1: Using ep0 maxpacket: 8 [ 304.892992][ T4990] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 304.905963][ T4990] usb 3-1: config 0 has no interface number 0 [ 304.984511][ T4990] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 305.131957][ T4990] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 305.225535][ T4990] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 305.310551][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.321517][ T4990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.390310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.400459][ T5621] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 305.508193][ T4990] usb 3-1: config 0 descriptor?? [ 305.570965][ T5621] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 305.682884][ T5621] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 32 [ 305.749801][ T4990] usb 3-1: can't set config #0, error -71 [ 305.770315][ T5621] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 305.805618][ T4990] usb 3-1: USB disconnect, device number 15 [ 305.843870][ T5621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.898907][ T8340] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 305.919017][ T8340] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 305.943481][ T5621] cyberjack 4-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 305.977828][ T5621] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 306.035370][ T7435] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 306.190374][ T4990] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 306.255067][ T5622] usb 4-1: USB disconnect, device number 12 [ 306.272737][ T5622] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 306.284913][ T5622] cyberjack 4-1:1.0: device disconnected [ 306.290784][ T5621] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 306.340280][ T4990] usb 3-1: Using ep0 maxpacket: 32 [ 306.347029][ T4990] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 306.357804][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.374741][ T4990] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 306.384308][ T4990] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 306.392771][ T4990] usb 3-1: Product: syz [ 306.396986][ T4990] usb 3-1: Manufacturer: syz [ 306.401958][ T4990] usb 3-1: SerialNumber: syz [ 306.410900][ T4990] usb 3-1: config 0 descriptor?? [ 306.419920][ T8349] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 306.433158][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.437589][ T4990] hub 3-1:0.0: bad descriptor, ignoring hub [ 306.449264][ T4990] hub 3-1:0.0: probe with driver hub failed with error -5 [ 306.463235][ T5621] usb 1-1: unable to get BOS descriptor or descriptor too short [ 306.481309][ T5621] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 306.498361][ T5621] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 306.511126][ T5621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.520638][ T5621] usb 1-1: Product: syz [ 306.530278][ T5621] usb 1-1: Manufacturer: syz [ 306.538915][ T5621] usb 1-1: SerialNumber: syz [ 306.768330][ T8363] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 306.971777][ T5621] usb 1-1: USB disconnect, device number 15 [ 307.130403][ T5743] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 307.149287][ T6775] udevd[6775]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 307.302410][ T5743] usb 4-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 307.320270][ T5743] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 307.333912][ T5743] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 307.356155][ T5743] usb 4-1: config 0 interface 0 has no altsetting 0 [ 307.370258][ T5743] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 307.381095][ T5743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.390718][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.405257][ T5743] usb 4-1: config 0 descriptor?? [ 307.413764][ T8367] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 307.480448][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.525686][ T7435] raw-gadget.1 gadget.2: failed to queue suspend event [ 307.662435][ T8349] raw-gadget.1 gadget.2: failed to queue resume event [ 307.778741][ T6242] raw-gadget.1 gadget.2: failed to queue suspend event [ 307.903950][ T8349] raw-gadget.1 gadget.2: failed to queue resume event [ 307.945200][ T48] raw-gadget.1 gadget.2: failed to queue suspend event [ 308.012832][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.095309][ T5743] hid_parser_main: 7 callbacks suppressed [ 308.095333][ T5743] playstation 0003:054C:05C4.0009: unknown main item tag 0x0 [ 308.109273][ T5743] playstation 0003:054C:05C4.0009: reserved main item tag 0xe [ 308.120651][ T5743] playstation 0003:054C:05C4.0009: unknown main item tag 0x2 [ 308.130895][ T8349] raw-gadget.1 gadget.2: failed to queue resume event [ 308.151011][ T5743] playstation 0003:054C:05C4.0009: hidraw0: USB HID v0.0c Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 308.183179][ T48] raw-gadget.1 gadget.2: failed to queue suspend event [ 308.264788][ T5743] playstation 0003:054C:05C4.0009: Invalid byte count transferred, expected 16 got 0 [ 308.293712][ T8349] raw-gadget.1 gadget.2: failed to queue resume event [ 308.310028][ T5743] playstation 0003:054C:05C4.0009: Failed to retrieve DualShock4 pairing info: -22 [ 308.324443][ T5743] playstation 0003:054C:05C4.0009: Failed to get MAC address from DualShock4 [ 308.338055][ T5743] playstation 0003:054C:05C4.0009: Failed to create dualshock4. [ 308.339973][ T7435] raw-gadget.1 gadget.2: failed to queue suspend event [ 308.425606][ T5743] playstation 0003:054C:05C4.0009: probe with driver playstation failed with error -22 [ 308.462752][ T8349] raw-gadget.1 gadget.2: failed to queue resume event [ 308.520275][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.572137][ T5743] usb 4-1: USB disconnect, device number 13 [ 308.589556][ T6242] raw-gadget.1 gadget.2: failed to queue suspend event [ 308.645805][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.654588][ T5622] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 308.690371][ T8349] raw-gadget.1 gadget.2: failed to queue resume event [ 308.729747][ T6242] raw-gadget.1 gadget.2: failed to queue suspend event [ 308.810757][ T5622] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 308.815350][ T8349] raw-gadget.1 gadget.2: failed to queue resume event [ 308.822740][ T5622] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.836112][ T5622] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.850776][ T5622] usb 1-1: config 0 interface 0 has no altsetting 0 [ 308.856565][ T7201] raw-gadget.1 gadget.2: failed to queue suspend event [ 308.858165][ T5622] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.875544][ T5622] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.887053][ T5622] usb 1-1: config 0 interface 0 has no altsetting 0 [ 308.902426][ T5622] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.917052][ T5622] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.933443][ T5622] usb 1-1: config 0 interface 0 has no altsetting 0 [ 308.941355][ T5622] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 308.950407][ T8349] raw-gadget.1 gadget.2: failed to queue resume event [ 308.963471][ T5622] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 308.976047][ T5622] usb 1-1: config 0 interface 0 has no altsetting 0 [ 308.982460][ T7201] raw-gadget.1 gadget.2: failed to queue suspend event [ 308.984294][ T5622] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.004432][ T5622] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.029360][ T8349] raw-gadget.1 gadget.2: failed to queue disconnect event [ 309.040444][ T5622] usb 1-1: config 0 interface 0 has no altsetting 0 [ 309.066454][ T5622] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.091768][ T5622] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.103702][ T5622] usb 1-1: config 0 interface 0 has no altsetting 0 [ 309.111724][ T5622] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.121248][ T5622] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.137239][ T30] audit: type=1400 audit(1785917773.623:871): avc: denied { read } for pid=8398 comm="syz.2.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 309.144316][ T5743] usb 3-1: USB disconnect, device number 16 [ 309.550330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.710396][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.352462][ T5622] usb 1-1: config 0 interface 0 has no altsetting 0 [ 310.359157][ T30] audit: type=1400 audit(1785917774.843:872): avc: denied { map } for pid=8409 comm="syz.2.649" path="/dev/comedi2" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.383371][ T5622] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 310.392408][ T5622] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 310.403462][ T5622] usb 1-1: config 0 interface 0 has no altsetting 0 [ 310.412695][ T5622] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 310.430339][ T5622] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 310.438722][ T5622] usb 1-1: Product: syz [ 310.443014][ T5622] usb 1-1: Manufacturer: syz [ 310.447603][ T5622] usb 1-1: SerialNumber: syz [ 310.457722][ T5622] usb 1-1: config 0 descriptor?? [ 310.478916][ T5622] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 310.535146][ T5622] usb 1-1: USB disconnect, device number 16 [ 310.545104][ T5622] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 310.590442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.774050][ T5743] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 311.553931][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.556352][ T5621] net_ratelimit: 2 callbacks suppressed [ 311.556367][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.561408][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.630273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.814807][ T5743] usb 3-1: Using ep0 maxpacket: 8 [ 312.102922][ T5743] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 312.111385][ T5743] usb 3-1: config 179 has no interface number 0 [ 312.117683][ T5743] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 312.128958][ T5743] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 312.140391][ T5743] usb 3-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 312.157754][ T5743] usb 3-1: config 179 interface 65 has no altsetting 0 [ 312.164709][ T5743] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 312.178053][ T5743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.190884][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.268060][ T30] audit: type=1400 audit(1785917776.753:873): avc: denied { create } for pid=8435 comm="syz.1.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 312.402574][ T8432] tipc: Resetting bearer [ 312.408938][ T8414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.422795][ T8414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.502694][ T8444] rdma_rxe: rxe_newlink: failed to add lo [ 312.512608][ T5621] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 312.766095][ T8432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.787824][ T8432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.957470][ T5621] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 312.984563][ T5621] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 313.013054][ T6548] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.015823][ T5621] usb 4-1: config 0 interface 0 has no altsetting 0 [ 313.050248][ T5743] usb 3-1: USB disconnect, device number 17 [ 313.056573][ T5621] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 313.057947][ T6548] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.079412][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 313.098637][ T5621] usb 4-1: Product: syz [ 313.102906][ T5621] usb 4-1: Manufacturer: syz [ 313.107511][ T5621] usb 4-1: SerialNumber: syz [ 313.117683][ T6548] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.131303][ T5621] usb 4-1: config 0 descriptor?? [ 313.140014][ T6548] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.186412][ T5621] usb 4-1: selecting invalid altsetting 0 [ 313.255871][ T8451] netlink: 56 bytes leftover after parsing attributes in process `syz.1.663'. [ 313.318643][ T30] audit: type=1400 audit(1785917777.803:874): avc: denied { append } for pid=8452 comm="syz.0.664" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 313.354373][ T8453] input: syz0 as /devices/virtual/input/input13 [ 313.512079][ T5621] usb 4-1: USB disconnect, device number 14 [ 314.188463][ T8462] netlink: 'syz.2.667': attribute type 1 has an invalid length. [ 314.362222][ T8464] bond1: (slave veth0_to_bond): making interface the new active one [ 314.372380][ T8464] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 314.457480][ T30] audit: type=1400 audit(1785917778.943:875): avc: denied { connect } for pid=8475 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 314.508577][ T30] audit: type=1400 audit(1785917778.943:876): avc: denied { write } for pid=8475 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 314.790299][ T30] audit: type=1400 audit(1785917779.273:877): avc: denied { map } for pid=8489 comm="syz.1.675" path="/dev/sg0" dev="devtmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 314.817380][ T30] audit: type=1400 audit(1785917779.283:878): avc: denied { execute } for pid=8489 comm="syz.1.675" path="/dev/sg0" dev="devtmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 314.910590][ T5621] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 315.001593][ T5716] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 315.184273][ T5716] usb 4-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 315.188447][ T30] audit: type=1400 audit(1785917779.573:879): avc: denied { append } for pid=8501 comm="syz.1.680" name="uprobe_events" dev="tracefs" ino=1063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 315.221534][ T5621] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.232257][ T5621] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 315.241845][ T5621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.249892][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.253910][ T5621] usb 5-1: config 0 descriptor?? [ 315.269266][ T5716] usb 4-1: Product: syz [ 315.287155][ T5621] pwc: Askey VC010 type 2 USB webcam detected. [ 315.371401][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.378912][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.399815][ T8508] netlink: 148 bytes leftover after parsing attributes in process `syz.2.679'. [ 315.647088][ T5716] usb 4-1: Manufacturer: syz [ 315.651783][ T5716] usb 4-1: SerialNumber: syz [ 315.662700][ T8502] event trace: Could not enable event p [ 315.741660][ T30] audit: type=1400 audit(1785917780.233:880): avc: denied { ioctl } for pid=8484 comm="syz.4.673" path="socket:[19992]" dev="sockfs" ino=19992 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 315.755794][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.673'. [ 315.978944][ T5621] pwc: recv_control_msg error -71 req 02 val 2b00 [ 316.008041][ T5621] pwc: recv_control_msg error -71 req 02 val 2700 [ 316.018275][ T5621] pwc: recv_control_msg error -71 req 02 val 2c00 [ 316.032234][ T5621] pwc: recv_control_msg error -71 req 04 val 1000 [ 316.041516][ T5621] pwc: recv_control_msg error -71 req 04 val 1300 [ 316.049973][ T5621] pwc: recv_control_msg error -71 req 04 val 1400 [ 316.058978][ T5621] pwc: recv_control_msg error -71 req 02 val 2000 [ 316.068045][ T5621] pwc: recv_control_msg error -71 req 02 val 2100 [ 316.075959][ T5621] pwc: recv_control_msg error -71 req 04 val 1500 [ 316.085110][ T5621] pwc: recv_control_msg error -71 req 02 val 2500 [ 316.093747][ T5621] pwc: recv_control_msg error -71 req 02 val 2400 [ 316.110785][ T5621] pwc: recv_control_msg error -71 req 02 val 2600 [ 316.121470][ T5621] pwc: recv_control_msg error -71 req 02 val 2900 [ 316.129519][ T5621] pwc: recv_control_msg error -71 req 02 val 2800 [ 316.139458][ T5621] pwc: recv_control_msg error -71 req 04 val 1100 [ 316.147406][ T5621] pwc: recv_control_msg error -71 req 04 val 1200 [ 316.156025][ T5621] videodev: could not get a free minor [ 316.161849][ T5621] pwc: Failed to register as video device (-23). [ 316.176473][ T5621] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -23 [ 316.199584][ T5621] usb 5-1: USB disconnect, device number 14 [ 316.719320][ T8528] CacheFiles: No cache directory specified [ 317.034593][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.688'. [ 317.556327][ T5716] usb 4-1: USB disconnect, device number 15 [ 317.637224][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 319.896003][ T8572] input: syz1 as /devices/virtual/input/input14 [ 321.411154][ T30] audit: type=1400 audit(1785917785.613:881): avc: denied { write } for pid=8581 comm="syz.2.705" name="functions" dev="configfs" ino=8294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 321.608326][ T30] audit: type=1400 audit(1785917785.653:882): avc: denied { write } for pid=8581 comm="syz.2.705" name="c.1" dev="configfs" ino=8441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 321.850321][ T5743] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 322.034200][ T5743] usb 1-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 322.100306][ T5800] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 322.686567][ T5743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.928271][ T5743] usb 1-1: Product: syz [ 322.946175][ T5743] usb 1-1: Manufacturer: syz [ 322.958957][ T5743] usb 1-1: SerialNumber: syz [ 322.985302][ T5743] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 323.055616][ T5800] usb 4-1: config 0 has no interfaces? [ 323.115848][ T5800] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 323.599752][ T5743] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 323.785669][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 325.264215][ T5743] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 325.406526][ T5743] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 325.437062][ T5800] usb 4-1: Product: syz [ 325.441340][ T5800] usb 4-1: Manufacturer: syz [ 325.445939][ T5800] usb 4-1: SerialNumber: syz [ 325.472779][ T5800] usb 4-1: config 0 descriptor?? [ 325.478074][ T5800] usb 4-1: can't set config #0, error -71 [ 325.500588][ T5743] usb 1-1: media controller created [ 325.543026][ T5743] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 325.550342][ T30] audit: type=1400 audit(1785917790.023:883): avc: denied { listen } for pid=8615 comm="syz.3.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 325.645685][ T5743] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 325.652058][ T8618] ucma_write: process 533 (syz.3.713) changed security contexts after opening file descriptor, this is not allowed. [ 325.688378][ T5743] usb 1-1: USB disconnect, device number 17 [ 325.861025][ T5800] usb 4-1: USB disconnect, device number 16 [ 326.388482][ T8628] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 2, id = 0 [ 327.283599][ T5800] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 327.634346][ T5800] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 327.691921][ T5800] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 327.752209][ T5800] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 327.811386][ T5800] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 327.867712][ T5800] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 327.941947][ T5800] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 328.029260][ T5800] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 328.084132][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 328.123337][ T5800] usb 4-1: Product: syz [ 328.151014][ T5800] usb 4-1: Manufacturer: syz [ 328.281503][ T8635] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 328.333293][ T8635] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 328.390469][ T8635] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 328.424277][ T8635] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 328.456619][ T8635] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 329.130219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 329.230205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 329.616756][ T5800] usb 4-1: can't set config #1, error -71 [ 329.645419][ T5800] usb 4-1: USB disconnect, device number 17 [ 329.780492][ T8664] syzkaller0: entered promiscuous mode [ 329.786217][ T8664] syzkaller0: entered allmulticast mode [ 330.185466][ T8676] trusted_key: encrypted_key: insufficient parameters specified [ 331.509663][ T30] audit: type=1400 audit(1785917795.993:884): avc: denied { read } for pid=8722 comm="syz.0.742" path="socket:[19412]" dev="sockfs" ino=19412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 331.610157][ T30] audit: type=1400 audit(1785917796.043:885): avc: denied { write } for pid=8687 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.293216][ T30] audit: type=1400 audit(1785917796.783:886): avc: denied { write } for pid=8727 comm="syz.1.743" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 333.212384][ T30] audit: type=1400 audit(1785917797.463:887): avc: denied { write } for pid=8733 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.484449][ T8744] ip6gre1: entered promiscuous mode [ 333.509941][ T8744] ip6gre1: entered allmulticast mode [ 333.530279][ T5849] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 333.572515][ T8749] syzkaller0: entered promiscuous mode [ 333.592921][ T8749] syzkaller0: entered allmulticast mode [ 333.702631][ T5849] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 333.714347][ T5849] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1015, setting to 64 [ 333.749807][ T5849] usb 4-1: config 0 interface 0 has no altsetting 0 [ 333.774112][ T5849] usb 4-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 333.792035][ T30] audit: type=1400 audit(1785917798.273:888): avc: denied { write } for pid=8741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.798826][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.881293][ T5849] usb 4-1: config 0 descriptor?? [ 333.913871][ T8739] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 334.035667][ T30] audit: type=1400 audit(1785917798.523:889): avc: denied { write } for pid=8767 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.182666][ T5622] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 334.212064][ T5849] usbhid 4-1:0.0: can't add hid device: -71 [ 334.240426][ T5849] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 334.267880][ T5849] usb 4-1: USB disconnect, device number 18 [ 334.343871][ T5622] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 334.372284][ T5622] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.399389][ T5622] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 334.419458][ T5622] usb 3-1: config 1 has no interface number 1 [ 334.435820][ T5622] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 334.473846][ T5622] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid maxpacket 12901, setting to 64 [ 334.484883][ T30] audit: type=1400 audit(1785917798.963:890): avc: denied { name_bind } for pid=8773 comm="syz.1.753" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 334.515749][ T5622] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 334.526722][ T5622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.536787][ T5622] usb 3-1: Product: syz [ 334.541505][ T5622] usb 3-1: Manufacturer: syz [ 334.547995][ T5622] usb 3-1: SerialNumber: syz [ 335.330209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 335.410210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 335.480208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 335.500211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 335.875406][ T8764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.912508][ T8764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.958656][ T5622] usb 3-1: Failed to set altset [ 335.975370][ T5622] usb 3-1: 0:2: cannot create sequencer device [ 335.985290][ T30] audit: type=1400 audit(1785917800.473:891): avc: denied { set_context_mgr } for pid=8786 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 336.015857][ T5622] usb 3-1: Failed to set altset [ 336.042130][ T8788] binder_alloc: 8786: binder_alloc_buf, no vma [ 336.044392][ T30] audit: type=1400 audit(1785917800.473:892): avc: denied { call } for pid=8786 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 336.109224][ T5622] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 336.128175][ T8791] syzkaller0: entered promiscuous mode [ 336.137041][ T5622] usb 3-1: USB disconnect, device number 18 [ 336.144259][ T8791] syzkaller0: entered allmulticast mode [ 336.174551][ T8791] 0: reclassify loop, rule prio 0, protocol 800 [ 336.358640][ T8798] netlink: 'syz.4.763': attribute type 1 has an invalid length. [ 336.390156][ T8798] 8021q: adding VLAN 0 to HW filter on device bond3 [ 336.400260][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 336.430566][ T8798] bond3: (slave geneve3): making interface the new active one [ 336.440494][ T8798] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 336.560378][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 336.580427][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 336.594227][ T10] usb 4-1: config 0 has no interface number 0 [ 336.607593][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 336.622336][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.640218][ T10] usb 4-1: Product: syz [ 336.645085][ T10] usb 4-1: Manufacturer: syz [ 336.649700][ T10] usb 4-1: SerialNumber: syz [ 336.658516][ T10] usb 4-1: config 0 descriptor?? [ 336.750803][ T5849] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 336.878608][ T8819] CacheFiles: No cache directory specified [ 337.453930][ T5849] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 337.466581][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 337.477032][ T5849] usb 1-1: Product: syz [ 337.481441][ T5849] usb 1-1: Manufacturer: syz [ 337.498297][ T5849] input: Samsung SUR40 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input15 [ 337.574277][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 337.603076][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 337.623835][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 337.638065][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 337.696391][ T10] usb 4-1: USB disconnect, device number 19 [ 337.759914][ T8826] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.779323][ T8824] overlayfs: failed to decode file handle (len=16, type=0, flags=0, err=-22) [ 338.000363][ T5622] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 338.227328][ T5622] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 338.295213][ T5622] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 338.354709][ T5622] usb 3-1: Product: syz [ 338.388072][ T5622] usb 3-1: SerialNumber: syz [ 338.477591][ T5622] usb 3-1: config 0 descriptor?? [ 338.770479][ T5849] videodev: could not get a free minor [ 338.780269][ T5849] sur40 1-1:1.0: Unable to register video subdevice. [ 338.792560][ T4962] ================================================================== [ 338.792560][ T5849] sur40 1-1:1.0: probe with driver sur40 failed with error -23 [ 338.798626][ T5849] usb 1-1: USB disconnect, device number 18 [ 338.800634][ T4962] BUG: KASAN: slab-use-after-free in sur40_open+0x46c/0x500 [ 338.800661][ T4962] Read of size 8 at addr ffff8880348bc000 by task acpid/4962 [ 338.800675][ T4962] [ 338.800687][ T4962] CPU: 1 UID: 0 PID: 4962 Comm: acpid Tainted: G L syzkaller #0 PREEMPT(full) [ 338.800709][ T4962] Tainted: [L]=SOFTLOCKUP [ 338.800714][ T4962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 338.800724][ T4962] Call Trace: [ 338.800729][ T4962] [ 338.800735][ T4962] dump_stack_lvl+0x100/0x190 [ 338.800755][ T4962] print_report+0x13d/0x4b0 [ 338.800776][ T4962] ? __virt_addr_valid+0x239/0x430 [ 338.800797][ T4962] ? sur40_open+0x46c/0x500 [ 338.800812][ T4962] kasan_report+0xdf/0x1c0 [ 338.800832][ T4962] ? sur40_open+0x46c/0x500 [ 338.800850][ T4962] ? __pfx_sur40_open+0x10/0x10 [ 338.800866][ T4962] sur40_open+0x46c/0x500 [ 338.800882][ T4962] input_open_device+0x24c/0x3d0 [ 338.800900][ T4962] evdev_open+0x52f/0x690 [ 338.800922][ T4962] ? __pfx_evdev_open+0x10/0x10 [ 338.800942][ T4962] chrdev_open+0x234/0x6a0 [ 338.800958][ T4962] ? __pfx_chrdev_open+0x10/0x10 [ 338.800974][ T4962] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 338.800996][ T4962] do_dentry_open+0x6ab/0x14d0 [ 338.801010][ T4962] ? __pfx_chrdev_open+0x10/0x10 [ 338.801027][ T4962] vfs_open+0x82/0x3f0 [ 338.801050][ T4962] path_openat+0x2873/0x4280 [ 338.801069][ T4962] ? __pfx_path_openat+0x10/0x10 [ 338.801087][ T4962] do_file_open+0x20e/0x430 [ 338.801103][ T4962] ? __pfx_do_file_open+0x10/0x10 [ 338.801125][ T4962] ? alloc_fd+0x471/0x7a0 [ 338.801142][ T4962] ? do_getname+0x191/0x390 [ 338.801161][ T4962] do_sys_openat2+0x10f/0x1e0 [ 338.801179][ T4962] ? __pfx_do_sys_openat2+0x10/0x10 [ 338.801196][ T4962] ? __x64_sys_rt_sigprocmask+0x28f/0x410 [ 338.801215][ T4962] ? rcu_is_watching+0x12/0xc0 [ 338.801237][ T4962] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.801254][ T4962] ? lockdep_hardirqs_on+0x78/0x100 [ 338.801273][ T4962] __x64_sys_openat+0x12d/0x210 [ 338.801292][ T4962] ? __pfx___x64_sys_openat+0x10/0x10 [ 338.801313][ T4962] do_syscall_64+0x115/0x870 [ 338.801331][ T4962] ? clear_bhb_loop+0x40/0x90 [ 338.801348][ T4962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.801363][ T4962] RIP: 0033:0x7ff28005f407 [ 338.801376][ T4962] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 338.801391][ T4962] RSP: 002b:00007ffe8bc8b840 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 338.801407][ T4962] RAX: ffffffffffffffda RBX: 00007ff27ffd5780 RCX: 00007ff28005f407 [ 338.801417][ T4962] RDX: 0000000000080800 RSI: 00007ffe8bc8ba50 RDI: ffffffffffffff9c [ 338.801427][ T4962] RBP: 00007ffe8bc8ba50 R08: 0000000000000000 R09: 0000000000000000 [ 338.801436][ T4962] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000040 [ 338.801445][ T4962] R13: 00007ffe8bc8bb50 R14: 00005616a26a87fe R15: 00007ffe8bc8bb70 [ 338.801460][ T4962] [ 338.801465][ T4962] [ 339.102955][ T4962] Allocated by task 5849: [ 339.107260][ T4962] kasan_save_stack+0x30/0x50 [ 339.111920][ T4962] kasan_save_track+0x14/0x30 [ 339.116576][ T4962] __kasan_kmalloc+0xaa/0xb0 [ 339.121143][ T4962] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 339.126500][ T4962] sur40_probe+0x1a8/0x1580 [ 339.130988][ T4962] usb_probe_interface+0x303/0x8f0 [ 339.136089][ T4962] really_probe+0x241/0xa60 [ 339.140576][ T4962] __driver_probe_device+0x20e/0x450 [ 339.145839][ T4962] driver_probe_device+0x4a/0x140 [ 339.150841][ T4962] __device_attach_driver+0x1df/0x320 [ 339.156193][ T4962] bus_for_each_drv+0x159/0x1e0 [ 339.161021][ T4962] __device_attach+0x1e4/0x4d0 [ 339.165766][ T4962] device_initial_probe+0xaf/0xd0 [ 339.170769][ T4962] bus_probe_device+0x64/0x160 [ 339.175510][ T4962] device_add+0x121d/0x1970 [ 339.179993][ T4962] usb_set_configuration+0xd97/0x1c60 [ 339.185358][ T4962] usb_generic_driver_probe+0xa1/0xe0 [ 339.190712][ T4962] usb_probe_device+0xef/0x400 [ 339.195469][ T4962] really_probe+0x241/0xa60 [ 339.199955][ T4962] __driver_probe_device+0x20e/0x450 [ 339.205221][ T4962] driver_probe_device+0x4a/0x140 [ 339.210224][ T4962] __device_attach_driver+0x1df/0x320 [ 339.215578][ T4962] bus_for_each_drv+0x159/0x1e0 [ 339.220404][ T4962] __device_attach+0x1e4/0x4d0 [ 339.225148][ T4962] device_initial_probe+0xaf/0xd0 [ 339.230165][ T4962] bus_probe_device+0x64/0x160 [ 339.234912][ T4962] device_add+0x121d/0x1970 [ 339.239396][ T4962] usb_new_device.cold+0x685/0x115c [ 339.244578][ T4962] hub_event+0x30a3/0x4a60 [ 339.248974][ T4962] process_one_work+0xa23/0x1940 [ 339.253890][ T4962] worker_thread+0x5ef/0xe50 [ 339.258474][ T4962] kthread+0x370/0x450 [ 339.262521][ T4962] ret_from_fork+0x72b/0xd50 [ 339.267091][ T4962] ret_from_fork_asm+0x1a/0x30 [ 339.271836][ T4962] [ 339.274136][ T4962] Freed by task 5849: [ 339.278091][ T4962] kasan_save_stack+0x30/0x50 [ 339.282747][ T4962] kasan_save_track+0x14/0x30 [ 339.287403][ T4962] kasan_save_free_info+0x3b/0x70 [ 339.292412][ T4962] __kasan_slab_free+0x5f/0x80 [ 339.297156][ T4962] kfree+0x22b/0x6c0 [ 339.301035][ T4962] sur40_probe+0xc36/0x1580 [ 339.305519][ T4962] usb_probe_interface+0x303/0x8f0 [ 339.310618][ T4962] really_probe+0x241/0xa60 [ 339.315104][ T4962] __driver_probe_device+0x20e/0x450 [ 339.320369][ T4962] driver_probe_device+0x4a/0x140 [ 339.325374][ T4962] __device_attach_driver+0x1df/0x320 [ 339.330727][ T4962] bus_for_each_drv+0x159/0x1e0 [ 339.335578][ T4962] __device_attach+0x1e4/0x4d0 [ 339.340332][ T4962] device_initial_probe+0xaf/0xd0 [ 339.345335][ T4962] bus_probe_device+0x64/0x160 [ 339.350077][ T4962] device_add+0x121d/0x1970 [ 339.354566][ T4962] usb_set_configuration+0xd97/0x1c60 [ 339.359916][ T4962] usb_generic_driver_probe+0xa1/0xe0 [ 339.365267][ T4962] usb_probe_device+0xef/0x400 [ 339.370013][ T4962] really_probe+0x241/0xa60 [ 339.374496][ T4962] __driver_probe_device+0x20e/0x450 [ 339.379762][ T4962] driver_probe_device+0x4a/0x140 [ 339.384765][ T4962] __device_attach_driver+0x1df/0x320 [ 339.390117][ T4962] bus_for_each_drv+0x159/0x1e0 [ 339.394944][ T4962] __device_attach+0x1e4/0x4d0 [ 339.399691][ T4962] device_initial_probe+0xaf/0xd0 [ 339.404696][ T4962] bus_probe_device+0x64/0x160 [ 339.409440][ T4962] device_add+0x121d/0x1970 [ 339.413925][ T4962] usb_new_device.cold+0x685/0x115c [ 339.419103][ T4962] hub_event+0x30a3/0x4a60 [ 339.423498][ T4962] process_one_work+0xa23/0x1940 [ 339.428413][ T4962] worker_thread+0x5ef/0xe50 [ 339.432982][ T4962] kthread+0x370/0x450 [ 339.437025][ T4962] ret_from_fork+0x72b/0xd50 [ 339.441598][ T4962] ret_from_fork_asm+0x1a/0x30 [ 339.446344][ T4962] [ 339.448647][ T4962] The buggy address belongs to the object at ffff8880348bc000 [ 339.448647][ T4962] which belongs to the cache kmalloc-4k of size 4096 [ 339.462674][ T4962] The buggy address is located 0 bytes inside of [ 339.462674][ T4962] freed 4096-byte region [ffff8880348bc000, ffff8880348bd000) [ 339.476373][ T4962] [ 339.478677][ T4962] The buggy address belongs to the physical page: [ 339.485063][ T4962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x348b8 [ 339.493799][ T4962] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 339.502272][ T4962] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 339.509792][ T4962] page_type: f5(slab) [ 339.513840][ T4962] raw: 00fff00000000040 ffff88813fe28140 dead000000000100 dead000000000122 [ 339.522402][ T4962] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 339.530963][ T4962] head: 00fff00000000040 ffff88813fe28140 dead000000000100 dead000000000122 [ 339.539627][ T4962] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 339.548276][ T4962] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 339.556925][ T4962] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 339.565574][ T4962] page dumped because: kasan: bad access detected [ 339.571961][ T4962] page_owner tracks the page as allocated [ 339.577664][ T4962] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4986, tgid 4986 (udevd), ts 33823379463, free_ts 33253616465 [ 339.597618][ T4962] post_alloc_hook+0xfd/0x120 [ 339.602291][ T4962] get_page_from_freelist+0xf48/0x3530 [ 339.607733][ T4962] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 339.613602][ T4962] new_slab+0xa2/0x640 [ 339.617696][ T4962] refill_objects+0xe3/0x410 [ 339.622286][ T4962] __pcs_replace_empty_main+0x376/0x680 [ 339.627834][ T4962] __kmalloc_noprof+0x66d/0x820 [ 339.632678][ T4962] tomoyo_realpath_from_path+0xb6/0x690 [ 339.638200][ T4962] tomoyo_path_perm+0x276/0x460 [ 339.643035][ T4962] security_inode_getattr+0x116/0x280 [ 339.648394][ T4962] vfs_fstat+0x4b/0xe0 [ 339.652442][ T4962] __do_sys_newfstat+0x8b/0x110 [ 339.657274][ T4962] do_syscall_64+0x115/0x870 [ 339.661861][ T4962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.667732][ T4962] page last free pid 4985 tgid 4985 stack trace: [ 339.674032][ T4962] __free_frozen_pages+0x79f/0x1090 [ 339.679230][ T4962] qlist_free_all+0x47/0xf0 [ 339.683713][ T4962] kasan_quarantine_reduce+0x1a0/0x1f0 [ 339.689149][ T4962] __kasan_slab_alloc+0x69/0x90 [ 339.693982][ T4962] __kmalloc_node_track_caller_noprof+0x2cd/0x830 [ 339.700378][ T4962] memdup_user+0x2a/0xe0 [ 339.704619][ T4962] proc_pid_attr_write+0x22f/0x780 [ 339.709706][ T4962] vfs_write+0x2aa/0x1050 [ 339.714020][ T4962] ksys_write+0x12a/0x250 [ 339.718325][ T4962] do_syscall_64+0x115/0x870 [ 339.722893][ T4962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.728762][ T4962] [ 339.731063][ T4962] Memory state around the buggy address: [ 339.736666][ T4962] ffff8880348bbf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 339.744704][ T4962] ffff8880348bbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 339.752749][ T4962] >ffff8880348bc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 339.760800][ T4962] ^ [ 339.764855][ T4962] ffff8880348bc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 339.772894][ T4962] ffff8880348bc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 339.780930][ T4962] ================================================================== [ 339.812339][ T5622] hso 3-1:0.0: Failed to find INT IN ep [ 339.818336][ T4962] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 339.825544][ T4962] CPU: 1 UID: 0 PID: 4962 Comm: acpid Tainted: G L syzkaller #0 PREEMPT(full) [ 339.835956][ T4962] Tainted: [L]=SOFTLOCKUP [ 339.840273][ T4962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 339.850328][ T4962] Call Trace: [ 339.853605][ T4962] [ 339.856531][ T4962] dump_stack_lvl+0x100/0x190 [ 339.861216][ T4962] vpanic+0x552/0x970 [ 339.865200][ T4962] ? __pfx_vpanic+0x10/0x10 [ 339.869704][ T4962] ? sur40_open+0x46c/0x500 [ 339.874202][ T4962] panic+0xd1/0xe0 [ 339.877916][ T4962] ? __pfx_panic+0x10/0x10 [ 339.882331][ T4962] ? sur40_open+0x46c/0x500 [ 339.886831][ T4962] ? preempt_schedule_common+0x42/0xc0 [ 339.892290][ T4962] ? check_panic_on_warn+0x1f/0x90 [ 339.897398][ T4962] check_panic_on_warn.cold+0x19/0x34 [ 339.902769][ T4962] end_report.part.0+0x3a/0x90 [ 339.907537][ T4962] kasan_report.cold+0xe/0x18 [ 339.912213][ T4962] ? sur40_open+0x46c/0x500 [ 339.916714][ T4962] ? __pfx_sur40_open+0x10/0x10 [ 339.921557][ T4962] sur40_open+0x46c/0x500 [ 339.925882][ T4962] input_open_device+0x24c/0x3d0 [ 339.930827][ T4962] evdev_open+0x52f/0x690 [ 339.935147][ T4962] ? __pfx_evdev_open+0x10/0x10 [ 339.939978][ T4962] chrdev_open+0x234/0x6a0 [ 339.944378][ T4962] ? __pfx_chrdev_open+0x10/0x10 [ 339.949296][ T4962] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 339.955606][ T4962] do_dentry_open+0x6ab/0x14d0 [ 339.960345][ T4962] ? __pfx_chrdev_open+0x10/0x10 [ 339.965262][ T4962] vfs_open+0x82/0x3f0 [ 339.969331][ T4962] path_openat+0x2873/0x4280 [ 339.973903][ T4962] ? __pfx_path_openat+0x10/0x10 [ 339.978824][ T4962] do_file_open+0x20e/0x430 [ 339.983306][ T4962] ? __pfx_do_file_open+0x10/0x10 [ 339.988314][ T4962] ? alloc_fd+0x471/0x7a0 [ 339.992624][ T4962] ? do_getname+0x191/0x390 [ 339.997111][ T4962] do_sys_openat2+0x10f/0x1e0 [ 340.001769][ T4962] ? __pfx_do_sys_openat2+0x10/0x10 [ 340.006954][ T4962] ? __x64_sys_rt_sigprocmask+0x28f/0x410 [ 340.012657][ T4962] ? rcu_is_watching+0x12/0xc0 [ 340.017410][ T4962] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.022587][ T4962] ? lockdep_hardirqs_on+0x78/0x100 [ 340.027766][ T4962] __x64_sys_openat+0x12d/0x210 [ 340.032602][ T4962] ? __pfx___x64_sys_openat+0x10/0x10 [ 340.037958][ T4962] do_syscall_64+0x115/0x870 [ 340.042528][ T4962] ? clear_bhb_loop+0x40/0x90 [ 340.047198][ T4962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.053073][ T4962] RIP: 0033:0x7ff28005f407 [ 340.057467][ T4962] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 340.077056][ T4962] RSP: 002b:00007ffe8bc8b840 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 340.085451][ T4962] RAX: ffffffffffffffda RBX: 00007ff27ffd5780 RCX: 00007ff28005f407 [ 340.093403][ T4962] RDX: 0000000000080800 RSI: 00007ffe8bc8ba50 RDI: ffffffffffffff9c [ 340.101370][ T4962] RBP: 00007ffe8bc8ba50 R08: 0000000000000000 R09: 0000000000000000 [ 340.109320][ T4962] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000040 [ 340.117271][ T4962] R13: 00007ffe8bc8bb50 R14: 00005616a26a87fe R15: 00007ffe8bc8bb70 [ 340.125241][ T4962] [ 340.128432][ T4962] Kernel Offset: disabled [ 340.133165][ T4962] Rebooting in 86400 seconds..