last executing test programs: 1m21.135035809s ago: executing program 0 (id=14996): socket$unix(0x1, 0x1, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8ee2, 0x800, 0x1, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300) 1m21.009501439s ago: executing program 0 (id=14997): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 1m20.96676911s ago: executing program 0 (id=14998): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x149) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r0, 0x0, 0x0) 1m20.911601769s ago: executing program 0 (id=14999): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x14a) renameat(r1, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') 1m20.768351632s ago: executing program 0 (id=15001): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5) r1 = socket$nl_rdma(0x10, 0x3, 0x14) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r2, 0xee01) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xee00}) 1m20.184873878s ago: executing program 0 (id=15013): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="04", 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x6, @local, 0x5}}, 0x6, 0x2ffc}, 0x90) 1m20.005052288s ago: executing program 32 (id=15013): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="04", 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x6, @local, 0x5}}, 0x6, 0x2ffc}, 0x90) 3.717505248s ago: executing program 1 (id=16202): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) llistxattr(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000380)=""/138, 0x11) 3.556655783s ago: executing program 1 (id=16203): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000080), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 3.404610267s ago: executing program 1 (id=16206): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830ce0a000000000000a7173985202bbfb61b36f3678de8ea2d0d6616076243", "558edb33", "7c5cec21291a43fe"}, 0x38) 3.098110593s ago: executing program 1 (id=16211): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x5b04, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.617615138s ago: executing program 2 (id=16221): r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r1 = socket(0x2d, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) 2.469237172s ago: executing program 2 (id=16224): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3, r1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000300)={0x8, r3, r1}) 2.350920411s ago: executing program 2 (id=16227): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 2.071687617s ago: executing program 2 (id=16232): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000008c40)=@newtfilter={0x13a0, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x1374, 0x2, [@TCA_FW_POLICE={0xa4, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xebd6, 0x2, 0xffff, 0xeab3, 0x3, {0x3, 0x2, 0x6, 0x3, 0x2, 0x800}, {0x5, 0x2, 0x1, 0x7ff, 0x9}, 0x2, 0x8217, 0x3}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffff319, 0xffffffffffffffff, 0xfff, 0x0, 0x3, {0x3, 0x0, 0x20, 0x3, 0x0, 0xc69}, {0x0, 0x0, 0xc4, 0x0, 0x40, 0x1ff}, 0x7, 0x4a, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2c0a}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_FW_ACT={0x22c, 0x4, [@m_tunnel_key={0xe4, 0xc, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xa1, 0x6, "65d99b23d8268a92d95df38a5c95888f1d0b40c4b3f31084c9666ebce01334b002e128df77afdc486c40145752e95a956dd32d3b9e254b6bd44ba8dacb4864758f260db5fa1912b141f40211be0987033c543a22a7b652e8212665472befdaeac892dc3a47d91416364fd417f6dee09acf71e4ea8accf23f36e63d1d1cf764a909ed2dd02ef348f4b142919340a76f550bd73a0d28a904cc1f271d5f08"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x144, 0x16, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x23}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "2ff161440093adb40306cb3a3b55a549"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x6}]}, {0xe5, 0x6, "18c606275f2ebbd47c1488a31f37bd44c94133160cf348f2920753a36eafa644f2ec7c0c31a32a49e8797890824b6f64b968379609eff73cd211777e1183aea649793f0589215430b00f364ac22d4aa7628f2af3dbaec52706ed3caff26ae62988b0dc56fa7fe031fed2297f1f21efefc56dc23ff867b2c61819c8f54711c1f667283625fade4991209dbcaa900bc31afb5535fdf8e541222f269971a97d4eb4268de600f2aa2f9157f03503b6c058a2c092c4607d281c2ebe35cad7678a0b19d463acf57ebde2b36930c831837e343eb877bb59b0f93b09687ee9ae5a9bf12d60"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FW_ACT={0x10a0, 0x4, [@m_simple={0xd0, 0x3, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x81, 0x1, 0x8, 0x400, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x4, 0x3, 0x0, 0x1f98}}, @TCA_DEF_DATA={0x14, 0x3, '-.)*-/{#-*\xdd-#{[\x00'}, @TCA_DEF_DATA={0x9, 0x3, '%}[(\x00'}]}, {0x51, 0x6, "220a8dc9acf754e14702215c479f5ba62d828777906ee8f093b97071c06886806ed53bc6cc7e6fdfa9ac250a1364d2865b77e6158f92602b7f9817258ed0f46b254694073b748f7c237733c2c5"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x50, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x21, 0x6, "1b87f35759c07c2d63b2a3b927532f336cfd8613be6ecedbffa2608e79"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0xf50c9628ecde09ed}}}}, @m_gact={0xb4, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xd79, 0x9114, 0x4, 0x1, 0x10}}]}, {0x6d, 0x6, "b73819f3b3e4ee90b44cd9c1508f243ecfe078949605bb3ff441f5336ee419cf0ae759144ee2c624bdff6dba6747c40272fd0b19a4554a87d3402c5e562a752f29b41c22d05294c36c78849cb9a1d630698f6bf3a1ec80f97b3ba5ea19e3976cdb8f162e9472e48ffa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_pedit={0xec8, 0xc, 0x0, 0x0, {{0xa}, {0xe9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x5, 0x7, 0x4, 0x80, 0x80000000}, 0x30, 0xb5, [{0x1, 0xfffffffb, 0x80, 0x1, 0x8001, 0x5}, {0x7f, 0x4, 0x9, 0x8, 0x1, 0x6}, {0x7, 0x2, 0xe26, 0xd9, 0x200, 0xa1c}, {0x40, 0x300000, 0x5, 0x7, 0x8, 0x7d32ffe}, {0x45, 0xfffffff5, 0x0, 0x40, 0x5f1, 0xde000}]}, [{0x10001, 0x9618, 0x4, 0xff, 0xff, 0x1}, {0x7, 0xe, 0x8001, 0x2c1c, 0x7fff, 0xfffffffc}, {0x7, 0x4cb, 0xd, 0x7, 0x80, 0xf48c}, {0x800, 0x4, 0x5, 0x5, 0x36, 0x8}, {0x5, 0x7, 0x7, 0x4, 0x0, 0xfff}, {0xf, 0x7bb, 0xf781, 0xcb, 0x1000, 0x192000}, {0x7f, 0x0, 0x1, 0xffff7fff, 0x6}, {0x3, 0x0, 0x3, 0x388abac8, 0x7, 0x7}, {0x12, 0x5, 0x9, 0x1, 0x5, 0x8}, {0x7, 0xa, 0x5, 0x8, 0x8, 0x3}, {0x80000000, 0x2, 0x6, 0x10, 0x1, 0x5}, {0x6, 0x377a, 0x7, 0x5, 0x1, 0xffffffff}, {0x8, 0xffff, 0x5, 0x80000000, 0x40, 0x1}, {0x239c, 0x4, 0x1, 0x5, 0x7fff, 0x4}, {0x5, 0xc7, 0x2f78, 0xfffffffc, 0x80, 0x9}, {0x20, 0x8, 0x0, 0xa, 0x4, 0x1}, {0x8000, 0x6, 0x7, 0x81, 0x9, 0xffffffc0}, {0x10001, 0x9, 0x3, 0xfffffffb, 0x200, 0x6}, {0x4, 0x1, 0x9, 0x2, 0x10, 0x3}, {0x2, 0x4000000, 0x1, 0xffff, 0x8, 0x9}, {0x0, 0x80000000, 0x2, 0x40c2, 0x9, 0x8}, {0x5, 0x9, 0x2, 0x5, 0x8, 0x9}, {0x5c, 0x5, 0xffffffff, 0x0, 0x2}, {0x5, 0x8, 0x800, 0xfffffff8, 0x3, 0x8}, {0x80000001, 0x8001, 0x1, 0x8, 0x9, 0x4f5}, {0x9, 0x101, 0x8, 0x3, 0x8, 0xa5b}, {0x1, 0xfffffffe, 0x6, 0x4, 0x2, 0x82}, {0x9, 0x7, 0x6, 0x6, 0x5, 0x9}, {0x26, 0x7, 0x49, 0x9fd8, 0x90c, 0x7}, {0x8, 0x6, 0xd, 0x4a, 0x1, 0x80}, {0x8, 0x2, 0x5, 0x6, 0xffff, 0x81}, {0x9, 0x3, 0xc, 0xb, 0x5, 0x9}, {0x6, 0x32c4, 0x9, 0x884, 0xfffffff7, 0x57f3}, {0x9, 0x5, 0x5, 0x2, 0xff}, {0x4, 0x1, 0x10000, 0x7, 0x8, 0x1}, {0xfe, 0x2, 0x10001, 0xa937, 0x3, 0x8}, {0x2, 0x693, 0x2, 0x3, 0x1, 0x8}, {0x5, 0x4, 0x41, 0x0, 0xfffffbff, 0x8}, {0x1, 0x7f, 0x7b, 0x7fffffff, 0x3, 0x4}, {0x6, 0x0, 0x247, 0x1, 0x9, 0x9}, {0xf9, 0x1, 0x9, 0x3, 0x1, 0x2}, {0x3, 0x5, 0xa, 0x8, 0x4e, 0x7d1}, {0x7ff, 0x4f9, 0x80000000, 0x7fff, 0x1ff, 0x1000}, {0x5, 0x9d, 0x2, 0x3, 0x8, 0x8}, {0x1927f552, 0x1, 0x4, 0x200, 0x2, 0x4}, {0x5, 0x40, 0x0, 0x5, 0x3be, 0x8}, {0x2, 0x3, 0x0, 0x8, 0x2814, 0x4}, {0x1, 0xc2, 0x7, 0x9, 0x0, 0x100}, {0x81, 0xa, 0x81, 0x10, 0xffff6c88, 0xaa}, {0x9f9, 0x5a2e9935, 0x6, 0x400, 0x3, 0x84e1}, {0x7, 0x9, 0x7, 0x8, 0x3, 0xfffffffc}, {0x2, 0xffff, 0x4, 0x80000000, 0x91, 0x3}, {0xffff, 0x6, 0x1, 0x64, 0x4, 0x9}, {0x5af0, 0x5, 0x1, 0x4, 0x2, 0x2}, {0xac74, 0x0, 0xfffffffa, 0x2, 0x1000, 0xb}, {0x1, 0x0, 0xe, 0x3, 0xc, 0x1}, {0x3ff, 0x80000001, 0x840, 0x6, 0x15f, 0xfffffffa}, {0x1fd, 0x3, 0x0, 0x5, 0x80000001, 0xffffffff}, {0xffffffff, 0x0, 0xfffff629, 0xa9, 0x9, 0x4}, {0x5, 0x80, 0x7ff, 0x9, 0x7, 0x8f}, {0xfffffff9, 0x1, 0x40, 0x1, 0x7, 0x7}, {0x4, 0x3ff, 0x0, 0xfffffffa, 0x3, 0x7}, {0xcd6b, 0x82, 0x4, 0x4, 0x9, 0xfffffff4}, {0xffffff3a, 0x4, 0x8000, 0x2, 0x10001, 0x2}, {0x9, 0x0, 0x6, 0x80000001, 0x0, 0x9}, {0x944e, 0xfffffff7, 0xd, 0x7, 0x2, 0x3}, {0xf940, 0x1ff, 0x10000, 0x2, 0x3, 0x8}, {0x5, 0x3b85d4ca, 0x200, 0x3ff, 0xf, 0x2}, {0x5, 0x4039, 0xe, 0x0, 0xe, 0x1}, {0x81, 0x4, 0x8, 0x600, 0x6, 0x80000001}, {0x5, 0x8, 0x7, 0x5, 0x1000, 0x401}, {0x1ff, 0x6, 0x69f, 0x3, 0x4, 0x7}, {0x3, 0x9, 0x3, 0x2, 0x2, 0x81}, {0x1, 0x2, 0x0, 0x7ae74748, 0x63, 0x1ff}, {0x8, 0x9, 0x101, 0x22c, 0x7, 0x10001}, {0x1, 0x9, 0x4, 0x5, 0x6, 0x4}, {0x7, 0xa, 0x5, 0xfffffe00, 0x7, 0x8}, {0x8, 0x5, 0x4, 0x1, 0x9, 0xcdc}, {0x9, 0x1, 0x9, 0x5, 0xd, 0x9}, {0x3, 0x7, 0x7, 0x1, 0xc96, 0x7000000}, {0xfa, 0x8, 0xfffff4de, 0x4, 0x1c1, 0xf}, {0xfe000000, 0xfffffff6, 0x2eb6, 0x3, 0x4, 0x1}, {0x9, 0x8, 0x3, 0x1b9c, 0x8, 0x2}, {0x8000, 0x3, 0x1ff, 0x3, 0xfffffffa, 0x1}, {0x6, 0x8, 0x2, 0x2, 0x41dc, 0x4}, {0x7, 0x1, 0x2, 0x0, 0x9, 0x1}, {0x9, 0x0, 0x6, 0xc, 0x1ea4, 0x10000}, {0xffffff80, 0xc, 0xd29f, 0x6, 0x0, 0xdd64}, {0x10, 0x3, 0x7fff, 0x1, 0x8, 0x5}, {0x0, 0x7, 0x40, 0x8001, 0x4, 0x6}, {0x1, 0x60, 0x800, 0xf, 0x7, 0x6}, {0x8, 0x3, 0x6, 0x0, 0x55, 0x1}, {0x5, 0x4, 0x4, 0x7f, 0x8000, 0x6}, {0x8, 0x6, 0x2, 0x0, 0x9793, 0xa}, {0x200, 0x3, 0x8, 0xf, 0x5, 0x1}, {0x6, 0x10000, 0x0, 0x6, 0x8, 0x3}, {0x8, 0x2, 0x1, 0x7, 0xfffffffc, 0xaf}, {0x1, 0x2, 0x613, 0x0, 0x100, 0x6}, {0x8, 0x8, 0x8, 0x1, 0x3, 0x8}, {0x7fffffff, 0x2, 0x401, 0x80000000, 0x9da, 0x7}, {0x401, 0x2, 0x5f, 0x0, 0x3, 0x5}, {0x1c0000, 0x1, 0x7, 0x10, 0x0, 0x6315}, {0x3, 0x80, 0x6, 0xb, 0x0, 0x1}, {0x80, 0x8, 0x2, 0xffffffff, 0x8000, 0x4}, {0x0, 0x9, 0xe8, 0x99, 0x6, 0x6}, {0x6, 0x2ee, 0x0, 0x2, 0x10001, 0x7fffffff}, {0x5, 0x8000, 0x1ff, 0x5, 0x7ff, 0xbf4}, {0x4c, 0x9, 0xfffffff3, 0x6, 0xfffffffe, 0x7}, {0x4, 0x50ef6e86, 0x7, 0x200, 0x300, 0x6}, {0x38, 0xef, 0x834, 0x5, 0x2, 0xffff0000}, {0x400, 0x7, 0x2, 0x8, 0x3ba5, 0xd}, {0x6, 0x3, 0x1, 0x0, 0x8fd, 0x100}, {0x0, 0x80000001, 0x2, 0xfffffffb, 0x5}, {0x0, 0xad, 0x2, 0x6, 0x5, 0x1}, {0x0, 0xff, 0x3, 0x0, 0x10001, 0x3}, {0xffffff45, 0x7, 0x2, 0xffff0001, 0x40}, {0x3, 0x1ff, 0x1a4, 0x3, 0xb, 0x1}, {0x4, 0x81, 0x200, 0x0, 0xba8e, 0x1ff}, {0x1ff, 0x60, 0x9, 0x9, 0x5, 0x1ff}, {0x2915, 0x401, 0x80000001, 0x9, 0x1, 0xa9}, {0x2, 0x4, 0x702, 0x4, 0x2, 0x9}, {0x5, 0x2, 0xbb5, 0x2, 0x3, 0x7}, {0x1, 0x4000, 0x474, 0xb, 0x80, 0x7}, {0xe, 0x7e, 0xb2, 0xfff, 0x754a, 0xb}, {0x8, 0x5, 0x13b, 0x8, 0x0, 0xe3}, {0x91, 0xfb3d, 0x4, 0x0, 0x1, 0x1}, {0x20000, 0xf, 0x7, 0x7fff, 0x2, 0x7}, {0x2, 0x4, 0x3ff, 0x2, 0x6}], [{0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x4}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x2}, {0x5}, {0x4}, {0x3}, {0x5}, {0x5}, {0x4}, {0x5}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x2}, {0x5, 0x1}, {0x6}, {0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x1}, {0x4}, {0x1}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x5}, {0x2, 0x1}, {0x2}, {0x3, 0xd6388b92c1ab6c9}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {}, {}, {0x2}, {0x5}, {}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x1}, {0x5}, {0x5}, {0x3}, {0x5}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x13a0}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1.833855054s ago: executing program 3 (id=16235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"d28c6a32b1fbb2a4f3c68375204eb2ad26845c9eb25ff613938a1daeeb618f9c18bf473f8e92dfa778b445665b09c58e8e2455d29a302f3b794664935d5f901a0d4c8437e8a3f45f9a30121cd75709f205b0e6da79ee7c3f4eba3d6ea7a1cd1f8dc281bdb55efe3bd1c70de5ae98c5f4fbbee3042184e012647a59042c1d433c70b6e39032321d713b6433c83b7349c0a69f68e9804bea03e2f2aab3391bb649667eccd51ed7a27768125c40cab9a4312757c1977a4fd64d6a1d89a9404f575a2af8770171fed05807e63f00d42245ac19db7aeb987ed951c60966e2f4e265c5c579199dfc9357fc17e0f2d22a2bfad393ad9fc9f942364e9617df63fb95d23966e02e3795cd4b0a0b9187138b91ab1c926c09c471b5b365b20fae559845d3dd654a9d940e014ef62aa4de41a1f880fc1fe69568dcd523d3e518a4f3499e5dd23b5af3f2ed9673e14eb943776d3dce8b376d3b9961c36731f8de7a36a5aea8e1e728e4707e9d596b00757fed8282e74273bd82907619c636cfa8a5853faffc338fb0e6de763d55f8e239afa4f61dd1ba2ec34d409859f7bcb8a2a725ceb795cd8efb5b601ee99257f0ba3816296057d67c7940839839c6e082b8927f9a26b18a2da987e46de823bc11c94faa214635e3214441c4851d57f9cdebf6e6458ff3ab36439e9b4ca2166abe79a5f577955b02392b5b0c1e887bbf598e1b78bb344eb945701bf9abe9412d1c63addd85fda9a0c8b0aa711775c1e509f01b7e3c8c6960c43038c52aa88f47fd2c4d5d03b5c60388e0db50038d2ea18db14534c7aede0a56d1faf7f0b8e5e1572e69c847819a8e2b128b67493511a0abdea23a90f877a018a2a0ed9414675af77c549a84575bcf6544c797cf75b1ecf61d246a4e111f0002bafd102255c03feb150f018f053e8a57e583800fa579ce3f46cd0c048738de07b3fa36e48db891edcbbf7e7dd8a99b7d74d5d54e9b29e0122d29e0b8f77fe599fd36f6e2967497a88f9e4018601bad4810aea8684dfb88366bce7bc76583a59a04d573f7a38e925e00b431598e4f9a4a9e2d1ee637a6f95d682ddf112edfc280060079e3c000e4d1b5cee6315f667511070795488136ab4aa50ced2ddd57d4993fb11b6fe7cdc8cc48f1f0a18139833b3e1bd04404fa5550640e4140697b8c7ca17dd7e35b8a45817f837060c18172b7f69af33926077cf93791655d1aba016e5a49203594401c3132f22ecc3c15090c216612a24879196aa6d1eddf5734c11902d8d5981d6bdc91d45ec563cf0d3ee79723d9e64628a657900858a0edd77ae44bd771178286c88782be3b4ad212704c424c5bf94bbeb0706701642d25b990c362e45472a7062956911aab63a03af2a31b8eac0fa9cd44404e15def01494aa5e2fee24e6be46dec2e60fc499981fb168e8456eccee5f4735062583e9ef5bdd"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0xb, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x5, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x0, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8f, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0xc, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0x81, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x4, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) 1.717331341s ago: executing program 3 (id=16237): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0x4) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000001c0)='./file0\x00', 0xa4000061) copy_file_range(r1, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0x0) 1.708577124s ago: executing program 3 (id=16238): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x3}, 0x1c) r1 = socket(0x2, 0x80805, 0x0) sendmsg$inet6(r0, &(0x7f0000001cc0)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @private0, 0x1}, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000000180)="af", 0x1}], 0x1}, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r2, 0x10001}, 0x8) 1.67533069s ago: executing program 2 (id=16240): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1018, 0x8) 1.441361224s ago: executing program 4 (id=16245): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x10, 0x9}, {0xf, 0x5}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) write(r0, 0x0, 0x0) 1.391599912s ago: executing program 2 (id=16246): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40015b19, &(0x7f0000000000)={0xffffffff, 0xfffffffe, 0x7, 0xff, 0x1}) write$char_usb(r1, &(0x7f0000002680)="e7", 0x1) 1.282605501s ago: executing program 4 (id=16249): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0xb, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x400}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x30, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x800000000000a00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7, 0x4}, 0x80, 0x0}, 0x0) 1.238341528s ago: executing program 1 (id=16250): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092dd17d39ed975", 'LP3F', "50f641306280c4e9"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, 0x0, 0x0) 1.193154636s ago: executing program 4 (id=16252): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0x8002, 0x0, 0xabed}}], 0x20}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.116899664s ago: executing program 1 (id=16253): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x5, "5fdf97950c"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) 1.116562831s ago: executing program 5 (id=16254): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000004c0)={'macsec0\x00', 0x400}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffbd) 1.090787186s ago: executing program 4 (id=16255): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/172, 0xac}], 0x2}, 0x0) 1.041973766s ago: executing program 5 (id=16256): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x9c0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) landlock_restrict_self(r0, 0xa) 907.443001ms ago: executing program 5 (id=16257): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x70bd2b, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 836.980245ms ago: executing program 3 (id=16258): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x5, 0x53, 0xfffff034}, {0x6, 0x4a, 0x6, 0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="4701000000000000ff1183400000000020000000", 0x70, 0x81, &(0x7f0000000340)={0x11, 0x0, r2, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) 816.647565ms ago: executing program 5 (id=16259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x100000a, 0x10012, r2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000038e000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 784.98576ms ago: executing program 3 (id=16260): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) utime(0x0, 0x0) lseek(r1, 0x0, 0x3) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) 596.327974ms ago: executing program 5 (id=16261): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 512.844435ms ago: executing program 5 (id=16262): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c29"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 434.061915ms ago: executing program 3 (id=16263): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) 251.922512ms ago: executing program 4 (id=16264): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xe, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 0s ago: executing program 4 (id=16265): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)='X', 0x1, 0x24008010, &(0x7f000005ffe4)={0xa, 0x0, 0x1, @local, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0xfc, 0xfe, 0x3, 0x0, 0x8, 0xb, 0x0, 0x0, 0xb0, 0xe, 0x0, 0x1, 0x2}, 0xe) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/184, 0xb8}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)=""/219, 0xdb}], 0x1}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x0, 0x0) kernel console output (not intermixed with test programs): lave_0: entered promiscuous mode [ 694.711600][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.725405][ T6531] sctp: [Deprecated]: syz.3.15032 (pid 6531) Use of int in maxseg socket option. [ 694.725405][ T6531] Use struct sctp_assoc_value instead [ 694.728094][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.761799][ T6492] bridge_slave_1: entered allmulticast mode [ 694.776020][ T6492] bridge_slave_1: entered promiscuous mode [ 694.777359][ T6534] xt_hashlimit: size too large, truncated to 1048576 [ 694.814502][ T6492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.826297][ T6492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.881699][ T6492] team0: Port device team_slave_0 added [ 694.897059][ T6492] team0: Port device team_slave_1 added [ 694.947616][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.966811][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.042346][ T6492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.070187][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.099582][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.134335][ T6492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.191787][ T10] lo speed is unknown, defaulting to 1000 [ 695.224604][ T30] audit: type=1400 audit(2000001223.599:3795): avc: denied { read } for pid=6555 comm="syz.1.15045" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 695.263928][ T6492] hsr_slave_0: entered promiscuous mode [ 695.320917][ T6492] hsr_slave_1: entered promiscuous mode [ 695.349189][ T6492] debugfs: 'hsr0' already exists in 'hsr' [ 695.369210][ T6492] Cannot create hsr debugfs directory [ 695.655607][ T6492] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 695.668114][ T6492] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 695.678270][ T6492] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 695.688559][ T6492] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 695.775101][ T6492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.803964][ T6492] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.816525][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.823661][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.837891][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.845009][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.925669][ T6492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 695.960740][ T5816] Bluetooth: hci2: command tx timeout [ 696.247734][ T6492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.380491][ T6610] bond4: invalid ARP target 0.0.0.0 specified for addition [ 696.395332][ T6610] bond4: option arp_ip_target: invalid value (0) [ 696.413103][ T6610] bond4 (unregistering): Released all slaves [ 696.648851][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 696.664662][ T6632] loop7: detected capacity change from 0 to 7 [ 696.676259][ T6492] veth0_vlan: entered promiscuous mode [ 696.715459][ T6492] veth1_vlan: entered promiscuous mode [ 696.739635][ T6632] Dev loop7: unable to read RDB block 7 [ 696.747159][ C1] blk_print_req_error: 6 callbacks suppressed [ 696.747175][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 696.763243][ C1] buffer_io_error: 6 callbacks suppressed [ 696.763253][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 696.779410][ T6632] loop7: unable to read partition table [ 696.794760][ T6492] veth0_macvtap: entered promiscuous mode [ 696.802561][ T6632] loop7: partition table beyond EOD, truncated [ 696.809047][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 696.812441][ T6492] veth1_macvtap: entered promiscuous mode [ 696.823280][ T6632] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 696.902255][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.953944][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.979545][ T1143] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.000938][ T1143] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.030509][ T1143] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.047391][ T1143] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.084871][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 697.156703][ T6650] netlink: 176 bytes leftover after parsing attributes in process `syz.4.15077'. [ 697.170409][T29207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.181120][T29207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.225958][T29207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.254801][T29207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.264347][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 697.275252][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 697.303648][ T30] audit: type=1400 audit(2000001225.783:3796): avc: denied { mounton } for pid=6492 comm="syz-executor" path="/root/syzkaller.mM45Iv/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 697.340079][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 697.351002][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 697.361880][ T30] audit: type=1400 audit(2000001225.783:3797): avc: denied { mounton } for pid=6492 comm="syz-executor" path="/root/syzkaller.mM45Iv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=127342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 697.408361][ T10] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 697.427732][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.438148][ T10] usb 3-1: Product: syz [ 697.459724][ T10] usb 3-1: Manufacturer: syz [ 697.464327][ T10] usb 3-1: SerialNumber: syz [ 697.469553][ T30] audit: type=1400 audit(2000001225.825:3798): avc: denied { mounton } for pid=6492 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 697.509386][ T10] usb 3-1: config 0 descriptor?? [ 697.527423][ T10] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 697.732999][ T10] scsi host1: usb-storage 3-1:0.0 [ 697.785240][ T6678] netlink: 'syz.3.15089': attribute type 83 has an invalid length. [ 697.865572][ T6686] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15092'. [ 697.886143][ T6686] netlink: 43 bytes leftover after parsing attributes in process `syz.1.15092'. [ 697.900693][ T6686] netlink: 'syz.1.15092': attribute type 5 has an invalid length. [ 697.910389][ T6686] netlink: 43 bytes leftover after parsing attributes in process `syz.1.15092'. [ 697.929112][ T24] usb 3-1: USB disconnect, device number 48 [ 697.942133][ T5816] Bluetooth: hci2: command tx timeout [ 698.048137][ T30] audit: type=1326 audit(2000001226.570:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.3.15096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3659c629 code=0x7ffc0000 [ 698.115506][ T30] audit: type=1326 audit(2000001226.570:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.3.15096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3659c629 code=0x7ffc0000 [ 698.169930][ T30] audit: type=1326 audit(2000001226.612:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.3.15096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4d3659c629 code=0x7ffc0000 [ 698.253947][ T30] audit: type=1326 audit(2000001226.612:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.3.15096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4d3659c392 code=0x7ffc0000 [ 698.321781][ T30] audit: type=1326 audit(2000001226.612:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.3.15096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4d3659c392 code=0x7ffc0000 [ 699.029820][ T1562] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 699.181708][ T1562] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 699.201400][ T1562] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.210548][ T1562] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.226270][ T1562] usb 3-1: config 0 interface 0 has no altsetting 0 [ 699.242346][ T6760] erspan0: entered promiscuous mode [ 699.247909][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15125'. [ 699.248208][ T1562] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.275870][ T1562] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.291579][ T1562] usb 3-1: config 0 interface 0 has no altsetting 0 [ 699.299928][ T1562] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.313093][ T1562] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.325418][ T1562] usb 3-1: config 0 interface 0 has no altsetting 0 [ 699.333722][ T1562] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.343565][ T1562] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.356186][ T1562] usb 3-1: config 0 interface 0 has no altsetting 0 [ 699.364429][ T1562] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.373459][ T1562] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.380375][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 699.380388][ T30] audit: type=1400 audit(2000001227.967:3812): avc: denied { map } for pid=6766 comm="syz.3.15128" path="socket:[127548]" dev="sockfs" ino=127548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 699.399462][ T1562] usb 3-1: config 0 interface 0 has no altsetting 0 [ 699.445847][ T1562] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.455525][ T1562] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.490988][ T1562] usb 3-1: config 0 interface 0 has no altsetting 0 [ 699.537541][ T1562] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.551192][ T1562] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.585022][ T1562] usb 3-1: config 0 interface 0 has no altsetting 0 [ 699.613407][ T1562] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.638060][ T1562] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.657974][ T1562] usb 3-1: config 0 interface 0 has no altsetting 0 [ 699.676714][ T1562] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 699.694831][ T1562] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 699.707261][ T1562] usb 3-1: Product: syz [ 699.711423][ T1562] usb 3-1: Manufacturer: syz [ 699.732003][ T1562] usb 3-1: SerialNumber: syz [ 699.743241][ T1562] usb 3-1: config 0 descriptor?? [ 699.758407][ T1562] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 699.928653][ T5816] Bluetooth: hci2: command tx timeout [ 700.009970][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 700.010196][ T24] usb 3-1: USB disconnect, device number 49 [ 700.045914][ T24] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 700.321965][ T1297] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 700.331038][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 700.474748][ T24] hid-generic 0000:0000:0004.0068: unknown main item tag 0x0 [ 700.502455][ T24] hid-generic 0000:0000:0004.0068: unknown main item tag 0x0 [ 700.522136][ T24] hid-generic 0000:0000:0004.0068: unknown main item tag 0x0 [ 700.535561][ T24] hid-generic 0000:0000:0004.0068: unknown main item tag 0x0 [ 700.552278][ T24] hid-generic 0000:0000:0004.0068: unknown main item tag 0x0 [ 700.567010][ T24] hid-generic 0000:0000:0004.0068: unknown main item tag 0x0 [ 700.576423][ T24] hid-generic 0000:0000:0004.0068: unknown main item tag 0x0 [ 700.584452][ T24] hid-generic 0000:0000:0004.0068: unknown main item tag 0x0 [ 700.592970][ T24] hid-generic 0000:0000:0004.0068: unknown main item tag 0x0 [ 700.600733][ T24] hid-generic 0000:0000:0004.0068: unknown main item tag 0x0 [ 700.618014][ T24] hid-generic 0000:0000:0004.0068: hidraw0: HID v0.03 Device [syz1] on syz0 [ 700.723757][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 700.867304][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 700.879991][ T10] usb 6-1: config 0 has no interfaces? [ 700.892275][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 700.911131][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 700.930217][ T10] usb 6-1: SerialNumber: syz [ 700.957255][ T10] usb 6-1: config 0 descriptor?? [ 701.165897][ T9499] usb 6-1: USB disconnect, device number 2 [ 701.304120][ T6842] input: syz0 as /devices/virtual/input/input109 [ 701.907139][ T5816] Bluetooth: hci2: command tx timeout [ 702.750557][ T6903] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15184'. [ 702.924046][ T10] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 703.000109][ T1562] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 703.095708][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 703.117263][ T10] usb 3-1: config 0 has no interface number 0 [ 703.123373][ T10] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 703.159334][ T10] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.170802][ T1562] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.200884][ T1562] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.215798][ T10] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 703.245020][ T10] usb 3-1: config 0 interface 1 has no altsetting 0 [ 703.260684][ T1562] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 703.276870][ T10] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 703.286458][ T1562] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.294439][ T1562] usb 5-1: Product: syz [ 703.314853][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.323458][ T1562] usb 5-1: Manufacturer: syz [ 703.328190][ T6919] tipc: Started in network mode [ 703.334015][ T24] IPVS: starting estimator thread 0... [ 703.338078][ T1562] usb 5-1: SerialNumber: syz [ 703.344010][ T6919] tipc: Node identity ac1414aa, cluster identity 4711 [ 703.344981][ T6919] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 703.390879][ T10] usb 3-1: config 0 descriptor?? [ 703.396937][ T1562] usb 5-1: config 0 descriptor?? [ 703.402131][ T6919] tipc: Enabled bearer , priority 7 [ 703.414221][ T1562] uvcvideo 5-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 703.421805][ T1562] uvcvideo 5-1:0.0: No valid video chain found. [ 703.438307][ T6921] IPVS: using max 42 ests per chain, 100800 per kthread [ 703.476817][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 703.609838][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 703.637477][ T24] usb 5-1: USB disconnect, device number 121 [ 703.743152][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 703.809996][ T1562] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 703.876830][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 703.965113][ T1562] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 703.974504][ T1562] usb 6-1: config 1 has no interface number 0 [ 703.980620][ T1562] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 703.993997][ T10] uclogic 0003:145F:0212.0069: failed retrieving string descriptor #100: -71 [ 704.003258][ T1562] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 704.013245][ T10] uclogic 0003:145F:0212.0069: failed retrieving pen parameters: -71 [ 704.019361][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 704.023297][ T1562] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.040378][ T10] uclogic 0003:145F:0212.0069: pen probing failed: -71 [ 704.047224][ T10] uclogic 0003:145F:0212.0069: failed probing parameters: -71 [ 704.055772][ T10] uclogic 0003:145F:0212.0069: probe with driver uclogic failed with error -71 [ 704.067625][ T1562] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 704.077289][ T1562] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.088130][ T10] usb 3-1: USB disconnect, device number 50 [ 704.094246][ T1562] usb 6-1: Product: syz [ 704.102018][ T1562] usb 6-1: Manufacturer: syz [ 704.106777][ T5897] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 704.117458][ T1562] usb 6-1: SerialNumber: syz [ 704.126744][ T6932] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 704.143453][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 704.257560][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 704.273643][ T5897] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 704.284212][ T5897] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 704.286163][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 704.295621][ T5897] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 704.321494][ T5897] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 704.335382][ T6932] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 704.367003][ T5897] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 704.377659][ T5897] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 704.400369][ T5897] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 704.409418][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.420729][ T24] tipc: Node number set to 2886997162 [ 704.552921][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 704.578816][ T1562] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:03:07 [ 704.630490][ T5897] usb 2-1: GET_CAPABILITIES returned 0 [ 704.636023][ T5897] usbtmc 2-1:16.0: can't read capabilities [ 704.753886][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 704.755029][ T1562] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 704.784604][ T1562] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 704.794329][ T1562] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 704.801599][ T1562] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 704.813839][ T1562] usb 6-1: USB disconnect, device number 3 [ 704.825201][ T1562] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem [ 704.866103][ T5897] usb 2-1: USB disconnect, device number 46 [ 704.887087][ T1562] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 704.906564][ T24] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 704.919628][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.934585][ T24] usb 3-1: config 0 descriptor?? [ 704.950302][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 705.324465][ C1] net_ratelimit: 1 callbacks suppressed [ 705.324481][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 705.339364][ T24] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 705.722014][ T24] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 705.905489][ T5897] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 705.915533][ T24] usb 3-1: USB disconnect, device number 51 [ 706.049043][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 706.062659][ T5897] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 706.077152][ T5897] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 706.098966][ T5897] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 706.120460][ T5897] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 706.137835][ T5897] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 706.151628][ T5897] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 706.162088][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.262184][ T7043] netlink: 80 bytes leftover after parsing attributes in process `syz.4.15250'. [ 706.324639][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 706.365746][ T7049] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 706.400265][ T5897] usb 2-1: GET_CAPABILITIES returned 0 [ 706.418056][ T5897] usbtmc 2-1:16.0: can't read capabilities [ 706.649399][ T7029] usbtmc 2-1:16.0: stb usb_control_msg returned -71 [ 706.650278][ T5873] usb 2-1: USB disconnect, device number 47 [ 706.781862][ T5897] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 706.924779][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 706.925316][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 706.939699][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 706.951341][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 706.964351][ T5897] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 706.973470][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.981427][ T5897] usb 3-1: Product: syz [ 706.985667][ T5897] usb 3-1: Manufacturer: syz [ 706.990691][ T5897] usb 3-1: SerialNumber: syz [ 706.996913][ T5897] usb 3-1: config 0 descriptor?? [ 707.003821][ T5897] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 707.013127][ T5897] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 707.068135][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 707.074482][ T24] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 707.084996][ T24] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 707.096772][ T24] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 707.107922][ T24] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 707.122660][ T24] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 707.131817][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.140035][ T24] usb 6-1: Product: syz [ 707.144221][ T24] usb 6-1: Manufacturer: syz [ 707.148864][ T24] usb 6-1: SerialNumber: syz [ 707.162732][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 707.171741][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input112 [ 707.315397][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 707.362896][ T24] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 707.374281][ T24] (id 0x00) [ 707.439259][ T24] rc_core: IR keymap rc-imon-pad not found [ 707.445214][ T24] Registered IR keymap rc-empty [ 707.450547][ T24] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 707.462637][ T24] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 707.555033][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 707.567799][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input113 [ 707.579325][ T5897] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 707.581951][ T24] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:4> initialized [ 707.595624][ T5897] em28xx 3-1:0.0: Config register raw data: 0x41 [ 707.765398][ T7069] imon:display_open: display port is already open [ 707.802168][ T5873] usb 3-1: USB disconnect, device number 52 [ 707.812220][ T9499] usb 6-1: USB disconnect, device number 4 [ 707.830563][ T5873] em28xx 3-1:0.0: Disconnecting em28xx [ 707.845121][ T5873] em28xx 3-1:0.0: Freeing device [ 708.024993][ T7108] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15279'. [ 708.218254][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15282'. [ 708.237733][ T7115] netlink: 'syz.1.15282': attribute type 20 has an invalid length. [ 708.257597][ T7115] netlink: 'syz.1.15282': attribute type 21 has an invalid length. [ 708.315973][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 708.571451][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15293'. [ 709.064334][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15303'. [ 709.297020][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 709.363719][ T30] audit: type=1326 audit(2000001238.433:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.5.15308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8347b9c629 code=0x7ffc0000 [ 709.390103][ T30] audit: type=1326 audit(2000001238.433:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.5.15308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8347b9c629 code=0x7ffc0000 [ 709.415417][ T30] audit: type=1326 audit(2000001238.444:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.5.15308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8347b9c629 code=0x7ffc0000 [ 709.544591][ T30] audit: type=1326 audit(2000001238.444:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.5.15308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8347b9c629 code=0x7ffc0000 [ 709.568235][ T30] audit: type=1326 audit(2000001238.444:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.5.15308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8347b9c629 code=0x7ffc0000 [ 709.596224][ T30] audit: type=1326 audit(2000001238.444:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.5.15308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8347b9c629 code=0x7ffc0000 [ 709.619823][ T30] audit: type=1326 audit(2000001238.444:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.5.15308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8347b9c629 code=0x7ffc0000 [ 709.693691][ T30] audit: type=1326 audit(2000001238.444:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.5.15308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8347b9c629 code=0x7ffc0000 [ 709.753098][ T30] audit: type=1326 audit(2000001238.444:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.5.15308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f8347b9c629 code=0x7ffc0000 [ 709.828059][ T30] audit: type=1326 audit(2000001238.444:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.5.15308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8347b9c629 code=0x7ffc0000 [ 710.287750][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 710.734931][ T7227] netlink: 'syz.4.15330': attribute type 1 has an invalid length. [ 710.888249][ T7242] netlink: 11 bytes leftover after parsing attributes in process `syz.1.15336'. [ 710.905451][ T7242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15336'. [ 710.915563][ T7242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15336'. [ 711.227726][ T7258] netlink: 256 bytes leftover after parsing attributes in process `syz.5.15344'. [ 711.250005][ T7258] netlink: 256 bytes leftover after parsing attributes in process `syz.5.15344'. [ 711.288262][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 711.532906][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15349'. [ 711.715016][ T7284] netlink: 'syz.2.15352': attribute type 13 has an invalid length. [ 711.723769][ T7284] netlink: 'syz.2.15352': attribute type 17 has an invalid length. [ 711.724973][ T7285] fuse: Bad value for 'fd' [ 711.757423][ T7285] Invalid source name [ 711.761418][ T7285] UBIFS error (pid: 7285): cannot open "./file0", error -22 [ 711.966649][ T7284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.999175][ T7284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 712.177015][ T7304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 712.278168][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 712.349878][ T7310] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 712.802242][ T5873] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 712.975727][ T5873] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 712.990005][ T5873] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 713.008149][ T5873] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 713.017377][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.235744][ T5873] usb 6-1: usb_control_msg returned -32 [ 713.248751][ T5873] usbtmc 6-1:16.0: can't read capabilities [ 713.259911][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 714.175077][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 714.175093][ T30] audit: type=1400 audit(2000001243.504:3865): avc: denied { create } for pid=7378 comm="syz.4.15398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 714.231226][ T30] audit: type=1400 audit(2000001243.525:3866): avc: denied { connect } for pid=7378 comm="syz.4.15398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 714.251261][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 714.288387][ T30] audit: type=1400 audit(2000001243.535:3867): avc: denied { shutdown } for pid=7378 comm="syz.4.15398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 714.364618][ T30] audit: type=1400 audit(2000001243.693:3868): avc: denied { create } for pid=7380 comm="syz.4.15399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 714.393494][ T7374] lo speed is unknown, defaulting to 1000 [ 714.421767][ T30] audit: type=1400 audit(2000001243.745:3869): avc: denied { ioctl } for pid=7380 comm="syz.4.15399" path="socket:[130949]" dev="sockfs" ino=130949 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 714.580879][ T30] audit: type=1400 audit(2000001243.924:3870): avc: denied { setopt } for pid=7385 comm="syz.4.15401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 714.602056][ T30] audit: type=1400 audit(2000001243.955:3871): avc: denied { bind } for pid=7385 comm="syz.4.15401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 714.674679][ T30] audit: type=1400 audit(2000001244.008:3872): avc: denied { read } for pid=7387 comm="syz.1.15402" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 714.707872][ T30] audit: type=1400 audit(2000001244.008:3873): avc: denied { open } for pid=7387 comm="syz.1.15402" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 714.731394][ T30] audit: type=1400 audit(2000001244.018:3874): avc: denied { ioctl } for pid=7387 comm="syz.1.15402" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xaee2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 715.107607][ T5897] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 715.240661][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 715.262489][ T5897] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 715.276983][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15410'. [ 715.286079][ T5897] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 715.286103][ T5897] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 715.286142][ T5897] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 715.286167][ T5897] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 715.287454][ T5897] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 715.346100][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15410'. [ 715.351857][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 715.431449][ T5897] usb 3-1: Product: syz [ 715.435654][ T5897] usb 3-1: Manufacturer: syz [ 715.443139][ T5873] usb 6-1: USB disconnect, device number 5 [ 715.485640][ T5897] cdc_wdm 3-1:1.0: skipping garbage [ 715.503820][ T5897] cdc_wdm 3-1:1.0: skipping garbage [ 715.518568][ T5897] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 715.529779][ T5897] cdc_wdm 3-1:1.0: Unknown control protocol [ 716.231412][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 716.252138][ T9499] usb 3-1: USB disconnect, device number 53 [ 716.676216][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15437'. [ 716.712364][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15437'. [ 716.722505][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15437'. [ 716.732640][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15437'. [ 717.111371][ T7492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.120862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.170243][ T7491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.190767][T29207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.199587][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.231437][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 717.613022][ T7511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=7511 comm=syz.5.15457 [ 717.775752][ T7517] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 717.795287][ T7517] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 717.823997][ T7519] netlink: 'syz.3.15461': attribute type 1 has an invalid length. [ 717.844101][ T7519] netlink: 224 bytes leftover after parsing attributes in process `syz.3.15461'. [ 718.213004][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 718.841345][ T5873] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 718.993822][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 719.002200][ T5873] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.014023][ T5873] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 719.027294][ T5873] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 719.036622][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.044941][ T5873] usb 2-1: Product: syz [ 719.049144][ T5873] usb 2-1: Manufacturer: syz [ 719.054077][ T5873] usb 2-1: SerialNumber: syz [ 719.212719][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 719.260042][ T7570] xt_hashlimit: size too large, truncated to 1048576 [ 719.317498][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 719.348516][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15494'. [ 719.395661][ T5873] cdc_ncm 2-1:1.0: bind() failure [ 719.407121][ T5873] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 719.413954][ T5873] cdc_ncm 2-1:1.1: bind() failure [ 719.427607][ T5873] usb 2-1: USB disconnect, device number 48 [ 719.474901][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 719.486823][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 719.501162][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 719.511208][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.524447][ T7589] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 719.535033][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 719.925755][ T10] usb 6-1: USB disconnect, device number 6 [ 720.116630][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 720.116649][ T30] audit: type=1400 audit(2000001249.729:3962): avc: denied { execute_no_trans } for pid=7616 comm="syz.4.15503" path="/2944/file0" dev="tmpfs" ino=14924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 720.193903][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 720.214246][ T30] audit: type=1400 audit(2000001249.729:3963): avc: denied { remount } for pid=7616 comm="syz.4.15503" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 720.302402][ T30] audit: type=1400 audit(2000001249.939:3964): avc: denied { create } for pid=7620 comm="syz.4.15505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 720.329330][ T30] audit: type=1400 audit(2000001249.939:3965): avc: denied { write } for pid=7620 comm="syz.4.15505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 720.409783][ T30] audit: type=1400 audit(2000001250.044:3966): avc: denied { create } for pid=7625 comm="syz.4.15507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 720.984630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 720.993211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 721.001703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 721.010324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 721.018811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 721.027357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 721.036020][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 721.068789][ T7635] xt_hashlimit: size too large, truncated to 1048576 [ 721.120321][ T30] audit: type=1400 audit(2000001250.044:3967): avc: denied { sys_admin } for pid=7625 comm="syz.4.15507" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 721.185027][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 721.842258][ T5897] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 721.849926][ T30] audit: type=1400 audit(2000001251.545:3968): avc: denied { write } for pid=7662 comm="syz.4.15523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 722.016524][ T5897] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 722.042535][ T5897] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 722.067443][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 722.077083][ T5897] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 722.090282][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 722.098482][ T5897] usb 3-1: Product: syz [ 722.103504][ T5897] usb 3-1: Manufacturer: syz [ 722.108143][ T5897] usb 3-1: SerialNumber: syz [ 722.128592][ T5897] usb 3-1: config 0 descriptor?? [ 722.147818][ T5897] hub 3-1:0.0: bad descriptor, ignoring hub [ 722.162644][ T5897] hub 3-1:0.0: probe with driver hub failed with error -5 [ 722.175515][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 722.196777][ T5897] usb 3-1: selecting invalid altsetting 0 [ 722.256694][ T30] audit: type=1400 audit(2000001251.986:3969): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 722.324491][ T30] audit: type=1400 audit(2000001251.986:3970): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 722.545503][ T30] audit: type=1400 audit(2000001252.280:3971): avc: denied { name_bind } for pid=7682 comm="syz.1.15531" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 722.803323][ T7694] netlink: 'syz.3.15534': attribute type 9 has an invalid length. [ 722.829204][ T7694] netlink: 'syz.3.15534': attribute type 11 has an invalid length. [ 722.854729][ T7694] netlink: 'syz.3.15534': attribute type 12 has an invalid length. [ 722.865900][ T7649] usb 3-1: reset high-speed USB device number 54 using dummy_hcd [ 722.870923][ T2696] block nbd0: Possible stuck request ffff888027f30000: control (read@0,1024B). Runtime 180 seconds [ 722.889770][ T2696] block nbd0: Possible stuck request ffff888027f30200: control (read@1024,1024B). Runtime 180 seconds [ 722.901307][ T2696] block nbd0: Possible stuck request ffff888027f30400: control (read@2048,1024B). Runtime 180 seconds [ 722.912708][ T2696] block nbd0: Possible stuck request ffff888027f30600: control (read@3072,1024B). Runtime 180 seconds [ 722.914751][ T7694] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.15534'. [ 722.964434][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15534'. [ 723.175454][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 723.350174][ T7706] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.15540'. [ 723.465833][ T9499] usb 3-1: USB disconnect, device number 54 [ 723.674592][ T7721] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.15546'. [ 724.013333][ T5897] kernel read not supported for file /6488/net/igmp (pid: 5897 comm: kworker/0:6) [ 724.105806][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15553'. [ 724.166130][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 724.299774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 724.308231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 724.316753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 724.325293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 724.623665][ T1562] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 724.777299][ T1562] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 724.796708][ T1562] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.840911][ T1562] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.862755][ T1562] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 724.893484][ T1562] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 724.910884][ T1562] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 724.936993][ T1562] usb 2-1: Manufacturer: syz [ 724.956400][ T1562] usb 2-1: config 0 descriptor?? [ 725.047944][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 725.047959][ T30] audit: type=1400 audit(2000001254.915:3985): avc: denied { create } for pid=7763 comm="syz.2.15563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 725.080696][ T30] audit: type=1400 audit(2000001254.946:3986): avc: denied { read } for pid=7763 comm="syz.2.15563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 725.147553][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 725.298738][ T30] audit: type=1400 audit(2000001255.177:3987): avc: denied { ioctl } for pid=7771 comm="syz.4.15566" path="socket:[133388]" dev="sockfs" ino=133388 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 725.368385][ T1562] hid_parser_main: 91 callbacks suppressed [ 725.368405][ T1562] appleir 0003:05AC:8243.006A: unknown main item tag 0x0 [ 725.401372][ T1562] appleir 0003:05AC:8243.006A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 725.495737][ T30] audit: type=1400 audit(2000001255.387:3988): avc: denied { write } for pid=7779 comm="syz.4.15569" path="socket:[132611]" dev="sockfs" ino=132611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 725.639318][ T24] usb 2-1: USB disconnect, device number 49 [ 725.664765][ T30] audit: type=1400 audit(2000001255.566:3989): avc: denied { ioctl } for pid=7785 comm="syz.5.15572" path="socket:[132621]" dev="sockfs" ino=132621 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 725.728071][ T7791] batadv_slave_0: entered promiscuous mode [ 725.733740][ T30] audit: type=1400 audit(2000001255.597:3990): avc: denied { bind } for pid=7785 comm="syz.5.15572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 725.750444][ T7791] batadv_slave_0: left promiscuous mode [ 725.811797][ T30] audit: type=1400 audit(2000001255.713:3991): avc: denied { mounton } for pid=7781 comm="syz.3.15570" path="/proc/7227/task" dev="proc" ino=132619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 725.887393][ T30] audit: type=1400 audit(2000001255.713:3992): avc: denied { mount } for pid=7781 comm="syz.3.15570" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 725.925579][ T7793] kernel read not supported for file /cpuacct.usage_percpu (pid: 7793 comm: syz.5.15574) [ 725.958746][ T30] audit: type=1800 audit(2000001255.860:3993): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.15574" name="cpuacct.usage_percpu" dev="mqueue" ino=133427 res=0 errno=0 [ 725.996403][ T30] audit: type=1400 audit(2000001255.912:3994): avc: denied { read write } for pid=7795 comm="syz.2.15576" name="video0" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 726.138067][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 726.318868][ T24] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 726.473292][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 726.482030][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.508629][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.534274][ T24] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 726.553379][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.577985][ T24] usb 3-1: config 0 descriptor?? [ 726.796899][ T9499] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 726.995720][ T9499] usb 5-1: Using ep0 maxpacket: 32 [ 727.001510][ T24] hid-multitouch 0003:1FD2:6007.006B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 727.020413][ T9499] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 727.036279][ T9499] usb 5-1: config 0 has no interface number 0 [ 727.056085][ T9499] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 727.066404][ T9499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.079598][ T9499] usb 5-1: Product: syz [ 727.091451][ T9499] usb 5-1: Manufacturer: syz [ 727.096142][ T9499] usb 5-1: SerialNumber: syz [ 727.106485][ T9499] usb 5-1: config 0 descriptor?? [ 727.138930][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 727.209364][ T1562] usb 3-1: USB disconnect, device number 55 [ 727.509750][ T9499] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 727.528921][ T9499] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 727.663333][ T5816] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 727.673266][ T5816] Bluetooth: hci2: Injecting HCI hardware error event [ 727.683256][T26164] Bluetooth: hci2: hardware error 0x00 [ 727.923227][ T9499] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 727.934526][ T9499] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 727.947980][ T9499] usb 5-1: USB disconnect, device number 122 [ 727.996089][ T1562] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 728.128735][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 728.150275][ T1562] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 728.165058][ T1562] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.183590][ T1562] usb 3-1: config 0 descriptor?? [ 729.081740][ C1] hrtimer: interrupt took 21624 ns [ 729.085394][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15605'. [ 729.109882][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 729.162649][ T1562] usb 3-1: Cannot set autoneg [ 729.178884][ T1562] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 729.292385][ T1562] libceph: connect (1)[c::]:6789 error -101 [ 729.301822][ T1562] libceph: mon0 (1)[c::]:6789 connect error [ 729.329919][ T7877] ceph: No mds server is up or the cluster is laggy [ 729.356960][ T1562] usb 3-1: USB disconnect, device number 56 [ 729.655735][T26164] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 729.978165][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 729.978181][ T30] audit: type=1400 audit(2000001260.090:4010): avc: denied { ioctl } for pid=7901 comm="syz.4.15616" path="socket:[132982]" dev="sockfs" ino=132982 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 730.084563][ T7907] netlink: 'syz.3.15619': attribute type 1 has an invalid length. [ 730.101087][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 730.156037][ T7907] 8021q: adding VLAN 0 to HW filter on device bond4 [ 730.209449][ T7909] bond4: (slave geneve0): making interface the new active one [ 730.257827][ T7909] bond4: (slave geneve0): Enslaving as an active interface with an up link [ 730.296071][ T30] audit: type=1400 audit(2000001260.426:4011): avc: denied { read write } for pid=7913 comm="syz.1.15621" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 730.325576][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 730.358120][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 730.363954][ T10] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 730.385751][ T30] audit: type=1400 audit(2000001260.458:4012): avc: denied { open } for pid=7913 comm="syz.1.15621" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 730.387352][ T10] hid-generic 0000:0000:0000.006C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 730.425848][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 730.465511][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 730.541486][ T7921] fuse: Bad value for 'fd' [ 730.597403][ T30] audit: type=1400 audit(2000001260.741:4013): avc: denied { create } for pid=7922 comm="syz.4.15625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 730.643875][ T30] audit: type=1400 audit(2000001260.752:4014): avc: denied { setopt } for pid=7922 comm="syz.4.15625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 730.683446][ T30] audit: type=1400 audit(2000001260.752:4015): avc: denied { connect } for pid=7922 comm="syz.4.15625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 730.739231][ T9499] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 730.768245][ T30] audit: type=1400 audit(2000001260.752:4016): avc: denied { bind } for pid=7922 comm="syz.4.15625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 730.833016][ T30] audit: type=1400 audit(2000001260.983:4017): avc: denied { mount } for pid=7931 comm="syz.3.15629" name="/" dev="autofs" ino=133642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 730.874520][ T30] audit: type=1400 audit(2000001261.035:4018): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 730.901355][ T9499] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.921486][ T9499] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.949586][ T9499] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 730.977240][ T9499] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 730.996301][ T9499] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.041575][ T9499] usb 3-1: config 0 descriptor?? [ 731.100713][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 731.144582][ T30] audit: type=1326 audit(2000001261.319:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7939 comm="syz.1.15632" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ae4f9c629 code=0x0 [ 731.465546][ T9499] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 731.478672][ T9499] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 731.482698][ T7956] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 731.486466][ T9499] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 731.500916][ T9499] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 731.508381][ T9499] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 731.511552][ T7956] binder: 7954:7956 ioctl 4018620d 2000000000c0 returned -1 [ 731.515907][ T9499] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 731.530629][ T9499] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 731.538068][ T9499] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 731.545704][ T9499] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 731.561101][ T9499] plantronics 0003:047F:FFFF.006D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 731.743239][ T10] usb 3-1: USB disconnect, device number 57 [ 732.091839][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 732.131761][ T7988] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 732.414291][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15655'. [ 732.620320][ T7997] bond1: Unable to set down delay as MII monitoring is disabled [ 732.671158][ T8004] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15657'. [ 732.718405][ T7997] bond1 (unregistering): Released all slaves [ 732.824354][ T8008] netlink: 'syz.3.15658': attribute type 9 has an invalid length. [ 732.870369][ T8008] netlink: 'syz.3.15658': attribute type 11 has an invalid length. [ 732.891973][ T8008] netlink: 'syz.3.15658': attribute type 12 has an invalid length. [ 732.904130][ T8012] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.15661'. [ 732.928967][ T8008] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.15658'. [ 732.963616][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15658'. [ 733.073030][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 733.182013][ T8016] netlink: 'syz.4.15663': attribute type 1 has an invalid length. [ 733.196640][ T8016] netlink: 'syz.4.15663': attribute type 2 has an invalid length. [ 733.219948][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15663'. [ 733.430516][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15672'. [ 733.516319][ T8040] kvm: user requested TSC rate below hardware speed [ 733.541211][ T8040] kvm: user requested TSC rate below hardware speed [ 733.885222][ T8056] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.15681'. [ 734.053194][ T8058] lo speed is unknown, defaulting to 1000 [ 734.063375][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 734.718729][ T8079] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.15691'. [ 734.728372][ T8079] netlink: Unknown conntrack attr (0) [ 734.760571][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 734.760585][ T30] audit: type=1400 audit(2000001265.119:4045): avc: denied { bind } for pid=8080 comm="syz.4.15690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 735.044072][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15697'. [ 735.055097][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15697'. [ 735.064428][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 735.145089][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15697'. [ 735.162885][ T36] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.171998][ T36] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.182492][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15697'. [ 735.183352][ T36] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.201467][ T36] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.212311][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15697'. [ 735.222688][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15697'. [ 735.245464][ T30] audit: type=1326 audit(2000001265.612:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8100 comm="syz.2.15698" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd99939c629 code=0x0 [ 735.337614][ T30] audit: type=1400 audit(2000001265.717:4047): avc: denied { append } for pid=8103 comm="syz.5.15699" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 735.580152][ T8110] netlink: 44 bytes leftover after parsing attributes in process `syz.5.15702'. [ 735.671294][ T8112] netlink: 44 bytes leftover after parsing attributes in process `syz.5.15703'. [ 736.044888][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 736.187466][ T30] audit: type=1400 audit(2000001266.599:4048): avc: denied { execute } for pid=8132 comm="syz.1.15709" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=135181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 736.425591][ T30] audit: type=1400 audit(2000001266.694:4049): avc: denied { read } for pid=8132 comm="syz.1.15709" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 736.525644][ T30] audit: type=1400 audit(2000001266.694:4050): avc: denied { open } for pid=8132 comm="syz.1.15709" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 737.044801][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 737.418780][ T30] audit: type=1400 audit(2000001267.901:4051): avc: denied { sqpoll } for pid=8185 comm="syz.3.15734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 737.478606][ T30] audit: type=1400 audit(2000001267.943:4052): avc: denied { bind } for pid=8185 comm="syz.3.15734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 737.527361][ T30] audit: type=1400 audit(2000001267.943:4053): avc: denied { listen } for pid=8185 comm="syz.3.15734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 737.548444][ T30] audit: type=1400 audit(2000001267.943:4054): avc: denied { accept } for pid=8185 comm="syz.3.15734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 737.874216][ T1562] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 738.026130][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 738.035556][ T1562] usb 5-1: Using ep0 maxpacket: 8 [ 738.048717][ T1562] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 738.068064][ T1562] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 738.087062][ T1562] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 738.109620][ T1562] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 738.135869][ T1562] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 738.162159][ T1562] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 738.188451][ T1562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.434979][ T1562] usb 5-1: usb_control_msg returned -32 [ 738.454181][ T1562] usbtmc 5-1:16.0: can't read capabilities [ 738.615032][ T8201] lo speed is unknown, defaulting to 1000 [ 739.016688][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 739.194092][ T8249] usbtmc 5-1:16.0: usb_clear_halt returned -32 [ 739.386154][ T10] usb 5-1: USB disconnect, device number 123 [ 740.007738][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 740.065241][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 740.065258][ T30] audit: type=1400 audit(2000001270.683:4067): avc: denied { read } for pid=8283 comm="syz.4.15762" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 740.159609][ T30] audit: type=1400 audit(2000001270.714:4068): avc: denied { open } for pid=8283 comm="syz.4.15762" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 740.350292][ T30] audit: type=1326 audit(2000001270.977:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8289 comm="syz.3.15764" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d3659c629 code=0x0 [ 740.389919][ T1559] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 740.554687][ T1559] usb 3-1: Using ep0 maxpacket: 8 [ 740.588816][ T1559] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 740.609620][ T1559] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 740.636285][ T30] audit: type=1400 audit(2000001271.250:4070): avc: denied { watch } for pid=8295 comm="syz.4.15766" path="/3010/file0" dev="tmpfs" ino=15262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 740.665614][ T1559] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 740.684938][ T1559] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 740.696541][ T1559] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 740.707018][ T1559] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 740.731147][ T1559] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.759020][ T1559] usb 3-1: config 0 descriptor?? [ 740.771059][ T8287] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 740.998015][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 741.061476][ T5816] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 741.068849][ T5816] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 741.076324][ T5816] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 741.083138][ T5816] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 741.090183][ T5816] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 741.097077][ T5816] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 741.104063][ T5816] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 741.110919][ T5816] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 741.117819][ T5816] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 741.124705][ T5816] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 741.252977][T26164] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 741.261828][ T1562] usb 3-1: USB disconnect, device number 58 [ 741.456118][ T30] audit: type=1400 audit(2000001272.142:4071): avc: denied { create } for pid=8313 comm="syz.3.15773" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 741.505237][ T30] audit: type=1400 audit(2000001272.142:4072): avc: denied { unlink } for pid=8313 comm="syz.3.15773" name="file0" dev="tmpfs" ino=17740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 741.538336][ T30] audit: type=1400 audit(2000001272.226:4073): avc: denied { watch_reads } for pid=8315 comm="syz.5.15774" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 741.866607][ T30] audit: type=1400 audit(2000001272.573:4074): avc: denied { read write } for pid=8329 comm="syz.2.15780" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 741.944285][ T30] audit: type=1400 audit(2000001272.573:4075): avc: denied { open } for pid=8329 comm="syz.2.15780" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 741.998064][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 742.048261][ T30] audit: type=1400 audit(2000001272.604:4076): avc: denied { map } for pid=8329 comm="syz.2.15780" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 742.989031][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 743.093631][ T9499] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 743.245948][ T9499] usb 5-1: Using ep0 maxpacket: 32 [ 743.256700][ T9499] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 743.265241][ T9499] usb 5-1: config 0 has no interface number 0 [ 743.271334][ T9499] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 743.292598][ T9499] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 743.302756][ T9499] usb 5-1: config 0 interface 85 has no altsetting 0 [ 743.323718][ T9499] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 743.334388][ T9499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.351176][ T9499] usb 5-1: Product: syz [ 743.355393][ T9499] usb 5-1: Manufacturer: syz [ 743.359994][ T9499] usb 5-1: SerialNumber: syz [ 743.374394][ T9499] usb 5-1: config 0 descriptor?? [ 743.650533][ T8369] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 743.970068][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 744.951592][ T9499] appletouch 5-1:0.85: Failed to request geyser raw mode [ 744.970369][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 744.991114][ T9499] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 745.058671][ T9499] usb 5-1: USB disconnect, device number 124 [ 745.130275][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 745.130290][ T30] audit: type=1400 audit(2000001275.995:4078): avc: denied { watch_reads } for pid=8376 comm="syz.2.15800" path="pipe:[135655]" dev="pipefs" ino=135655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 745.277396][ T8386] __nla_validate_parse: 1 callbacks suppressed [ 745.277413][ T8386] netlink: 208 bytes leftover after parsing attributes in process `syz.2.15803'. [ 745.288247][ T8388] netlink: 'syz.5.15804': attribute type 10 has an invalid length. [ 745.313442][ T8388] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.328787][ T8388] bond0: (slave team0): Enslaving as an active interface with an up link [ 745.342514][ T8386] netlink: 208 bytes leftover after parsing attributes in process `syz.2.15803'. [ 745.409159][ T10] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 745.565263][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 745.575420][ T10] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 745.589245][ T10] usb 2-1: config 1 has no interface number 0 [ 745.619321][ T10] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 745.634788][ T10] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 745.645316][ T10] usb 2-1: config 1 interface 105 has no altsetting 0 [ 745.665710][ T10] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 745.665980][ T8404] netlink: 'syz.5.15812': attribute type 29 has an invalid length. [ 745.674753][ T10] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 745.712558][ T10] usb 2-1: Product: syz [ 745.722836][ T10] usb 2-1: Manufacturer: syz [ 745.730871][ T10] usb 2-1: SerialNumber: syz [ 745.745990][ T8377] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 745.754132][ T8404] netlink: 'syz.5.15812': attribute type 29 has an invalid length. [ 745.757011][ T8377] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 745.795068][ T8404] netlink: 'syz.5.15812': attribute type 32 has an invalid length. [ 745.826521][ T8404] netlink: 500 bytes leftover after parsing attributes in process `syz.5.15812'. [ 745.929480][ T1559] Process accounting resumed [ 745.951485][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 745.961685][ T8414] Process accounting resumed [ 745.968383][ T8402] binder: 8401:8402 ioctl c0306201 200000001a80 returned -14 [ 746.167997][ T8377] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 746.175950][ T8377] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 746.210655][ T1559] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 746.284401][ T30] audit: type=1400 audit(2000001277.202:4079): avc: denied { ioctl } for pid=8433 comm="syz.4.15824" path="socket:[136618]" dev="sockfs" ino=136618 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 746.359450][ T1559] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.380503][ T1559] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 746.406159][ T1559] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 746.427597][ T1559] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.452783][ T1559] usb 3-1: config 0 descriptor?? [ 746.582820][ T10] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 746.792377][ T10] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 746.822591][ T10] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, d6:05:90:fc:20:02 [ 746.843412][ T10] usb 2-1: USB disconnect, device number 50 [ 746.852486][ T30] audit: type=1400 audit(2000001277.811:4080): avc: denied { read } for pid=8451 comm="syz.5.15830" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 746.877746][ T10] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 746.926935][ T1559] kovaplus 0003:1E7D:2D50.006E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 746.951098][ T30] audit: type=1400 audit(2000001277.811:4081): avc: denied { open } for pid=8451 comm="syz.5.15830" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 746.975384][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 747.096358][ T10] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 747.107583][ T1559] usb 3-1: USB disconnect, device number 59 [ 747.120121][ T10] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 747.166407][ T10] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 747.534801][ T30] audit: type=1400 audit(2000001278.514:4082): avc: denied { create } for pid=8480 comm="syz.3.15838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 747.598148][ T30] audit: type=1400 audit(2000001278.567:4083): avc: denied { connect } for pid=8480 comm="syz.3.15838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 747.717078][ T30] audit: type=1400 audit(2000001278.567:4084): avc: denied { write } for pid=8480 comm="syz.3.15838" path="socket:[136817]" dev="sockfs" ino=136817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 747.743674][ T1562] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 747.765998][ T8487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.811352][ T8487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.840222][ T8487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.871316][ T8487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.879678][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.942084][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 747.949259][ T1562] usb 6-1: Using ep0 maxpacket: 16 [ 747.962116][ T30] audit: type=1400 audit(2000001278.955:4085): avc: denied { ioctl } for pid=8488 comm="syz.1.15840" path="socket:[136821]" dev="sockfs" ino=136821 ioctlcmd=0x9419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 748.034968][ T1562] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.051855][ T1562] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.069606][ T30] audit: type=1400 audit(2000001279.029:4086): avc: denied { mount } for pid=8501 comm="syz.4.15844" name="/" dev="hugetlbfs" ino=135853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 748.102084][ T1562] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 748.258959][ T1562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.269299][ T1562] usb 6-1: config 0 descriptor?? [ 748.302395][ T8514] gre3: entered promiscuous mode [ 748.323396][ T8514] gre3: entered allmulticast mode [ 748.428680][ T9499] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 748.581900][ T9499] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.606801][ T9499] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.626238][ T9499] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 748.640221][ T9499] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 748.653555][ T9499] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.664633][ T9499] usb 5-1: config 0 descriptor?? [ 748.666953][ T1562] apple 0003:05AC:024B.006F: fixing up MacBook JIS keyboard report descriptor [ 748.682986][ T1562] apple 0003:05AC:024B.006F: unknown global tag 0xe [ 748.704990][ T1562] apple 0003:05AC:024B.006F: item 0 1 1 14 parsing failed [ 748.712625][ T1562] apple 0003:05AC:024B.006F: parse failed [ 748.724353][ T1562] apple 0003:05AC:024B.006F: probe with driver apple failed with error -22 [ 748.836800][ T8539] netlink: 'syz.1.15856': attribute type 1 has an invalid length. [ 748.864211][ T30] audit: type=1400 audit(2000001279.911:4088): avc: denied { create } for pid=8541 comm="syz.3.15858" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 748.871034][ T24] usb 6-1: USB disconnect, device number 7 [ 748.931619][ T8539] bond5: entered promiscuous mode [ 748.936811][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 748.946937][ T8539] 8021q: adding VLAN 0 to HW filter on device bond5 [ 748.966163][ T8543] 8021q: adding VLAN 0 to HW filter on device bond5 [ 748.989401][ T8543] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 749.012804][ T8543] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 749.043312][ T8543] bond5: (slave vti0): making interface the new active one [ 749.063539][ T8543] vti0: entered promiscuous mode [ 749.079383][ T8543] bond5: (slave vti0): Enslaving as an active interface with an up link [ 749.084710][ T8509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.103646][ T8509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.151998][ T9499] usbhid 5-1:0.0: can't add hid device: -71 [ 749.157997][ T9499] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 749.182971][ T9499] usb 5-1: USB disconnect, device number 125 [ 749.237206][ T8545] netlink: 104 bytes leftover after parsing attributes in process `syz.3.15859'. [ 749.923365][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 750.294374][ T8626] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.15888'. [ 750.625498][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 750.625514][ T30] audit: type=1400 audit(2000001281.769:4095): avc: denied { read } for pid=8641 comm="syz.4.15897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 750.675492][ T30] audit: type=1400 audit(2000001281.811:4096): avc: denied { write } for pid=8641 comm="syz.4.15897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 750.852133][ T30] audit: type=1400 audit(2000001282.000:4097): avc: denied { bind } for pid=8651 comm="syz.5.15901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 750.905402][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 751.006354][ T30] audit: type=1400 audit(2000001282.031:4098): avc: denied { name_bind } for pid=8651 comm="syz.5.15901" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 751.112553][ T30] audit: type=1400 audit(2000001282.031:4099): avc: denied { node_bind } for pid=8651 comm="syz.5.15901" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 751.372126][ T8670] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15908'. [ 751.428563][ T8670] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15908'. [ 751.515819][ T2696] block nbd0: Possible stuck request ffff888027f30000: control (read@0,1024B). Runtime 210 seconds [ 751.527194][ T2696] block nbd0: Possible stuck request ffff888027f30200: control (read@1024,1024B). Runtime 210 seconds [ 751.538301][ T2696] block nbd0: Possible stuck request ffff888027f30400: control (read@2048,1024B). Runtime 210 seconds [ 751.549343][ T2696] block nbd0: Possible stuck request ffff888027f30600: control (read@3072,1024B). Runtime 210 seconds [ 751.822861][ T30] audit: type=1326 audit(2000001283.029:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8676 comm="syz.5.15912" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8347b9c629 code=0x0 [ 751.904694][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 751.908993][ T8668] lo speed is unknown, defaulting to 1000 [ 752.076741][ T8687] 9p: Bad value for 'rfdno' [ 752.238070][ T24] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 752.381105][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 752.389278][ T24] usb 5-1: config 0 has no interfaces? [ 752.397249][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 752.419163][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.435267][ T24] usb 5-1: Product: syz [ 752.455007][ T24] usb 5-1: Manufacturer: syz [ 752.466620][ T24] usb 5-1: SerialNumber: syz [ 752.495365][ T24] usb 5-1: config 0 descriptor?? [ 752.723877][ T30] audit: type=1400 audit(2000001283.952:4101): avc: denied { mounton } for pid=8684 comm="syz.4.15915" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 752.749363][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 752.762949][ T24] usb 5-1: USB disconnect, device number 126 [ 752.886049][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 753.116180][ T8715] netlink: 'syz.3.15927': attribute type 4 has an invalid length. [ 753.134646][ T8715] netlink: 'syz.3.15927': attribute type 4 has an invalid length. [ 753.559107][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15937'. [ 753.706238][ T8746] netlink: 'syz.4.15939': attribute type 3 has an invalid length. [ 753.714173][ T8746] netlink: 'syz.4.15939': attribute type 3 has an invalid length. [ 753.788081][ T8753] netlink: 'syz.3.15942': attribute type 30 has an invalid length. [ 753.836202][ T8757] netlink: 'syz.3.15942': attribute type 30 has an invalid length. [ 753.862893][ T30] audit: type=1400 audit(2000001285.160:4102): avc: denied { read } for pid=8754 comm="syz.4.15943" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 753.886441][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 753.896549][ T30] audit: type=1400 audit(2000001285.160:4103): avc: denied { open } for pid=8754 comm="syz.4.15943" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 753.920994][ T30] audit: type=1400 audit(2000001285.202:4104): avc: denied { ioctl } for pid=8754 comm="syz.4.15943" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 753.987029][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15944'. [ 754.135902][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880589eb400: rx timeout, send abort [ 754.146856][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880589eb400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 754.192052][ T8769] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15949'. [ 754.469914][T30010] udevd[30010]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 754.518270][T30010] udevd[30010]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 754.543763][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 754.706887][ T24] usb 6-1: config 0 has an invalid interface number: 93 but max is 0 [ 754.724515][ T24] usb 6-1: config 0 has no interface number 0 [ 754.733918][ T24] usb 6-1: config 0 interface 93 has no altsetting 0 [ 754.750665][ T24] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 754.763863][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.789515][ T24] usb 6-1: config 0 descriptor?? [ 754.811574][ T24] cp210x 6-1:0.93: cp210x converter detected [ 754.876674][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 755.124592][ T8833] netlink: 67 bytes leftover after parsing attributes in process `syz.2.15975'. [ 755.202751][ T24] cp210x 6-1:0.93: failed to get vendor val 0x000e size 3: -32 [ 755.245199][ T8837] team0: No ports can be present during mode change [ 755.407948][ T24] cp210x 6-1:0.93: GPIO initialisation failed: -19 [ 755.423576][ T24] usb 6-1: cp210x converter now attached to ttyUSB0 [ 755.450854][ T8846] usb usb8: usbfs: process 8846 (syz.2.15981) did not claim interface 0 before use [ 755.516771][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 755.516786][ T30] audit: type=1400 audit(2000001286.902:4114): avc: denied { write } for pid=8845 comm="syz.2.15981" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 755.605377][ T5897] usb 6-1: USB disconnect, device number 8 [ 755.628532][ T5897] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 755.647134][ T5897] cp210x 6-1:0.93: device disconnected [ 755.775454][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15986'. [ 755.779034][ T30] audit: type=1400 audit(2000001287.175:4115): avc: denied { ioctl } for pid=8860 comm="syz.3.15987" path="socket:[138387]" dev="sockfs" ino=138387 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 755.789716][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15986'. [ 755.834562][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15986'. [ 755.844069][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15986'. [ 755.867322][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 755.882476][ T30] audit: type=1400 audit(2000001287.280:4116): avc: denied { listen } for pid=8865 comm="syz.3.15989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 755.908273][ T30] audit: type=1400 audit(2000001287.312:4117): avc: denied { accept } for pid=8865 comm="syz.3.15989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 756.024077][ T8875] netlink: 'syz.1.15993': attribute type 1 has an invalid length. [ 756.087783][ T8875] 8021q: adding VLAN 0 to HW filter on device bond6 [ 756.125645][ T8879] bond6: (slave geneve4): making interface the new active one [ 756.136369][ T8879] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 756.351500][ T1562] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 756.390927][ T30] audit: type=1400 audit(2000001287.795:4118): avc: denied { append } for pid=8897 comm="syz.2.16003" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 756.544599][ T8904] netlink: 'syz.3.16004': attribute type 15 has an invalid length. [ 756.552513][ T8904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16004'. [ 756.577076][ T1562] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 756.591709][ T1562] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.605397][ T1562] usb 5-1: config 0 has no interface number 0 [ 756.620443][ T1562] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 756.645500][ T1562] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 756.667508][ T1562] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 756.688892][ T1562] usb 5-1: config 0 interface 52 has no altsetting 0 [ 756.695596][ T30] audit: type=1400 audit(2000001288.131:4119): avc: denied { mount } for pid=8913 comm="syz.5.16009" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 756.724370][ T1562] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 756.744651][ T1562] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 756.753292][ T30] audit: type=1400 audit(2000001288.173:4120): avc: denied { ioctl } for pid=8912 comm="syz.2.16010" path="socket:[138518]" dev="sockfs" ino=138518 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 756.778786][ T1562] usb 5-1: Manufacturer: syz [ 756.785637][ T1562] usb 5-1: config 0 descriptor?? [ 756.823170][ T1562] hub 5-1:0.52: bad descriptor, ignoring hub [ 756.829168][ T1562] hub 5-1:0.52: probe with driver hub failed with error -5 [ 756.858191][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 756.874390][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16012'. [ 756.946423][ T8922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 757.017992][ T1562] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 757.033410][ T1562] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -5 [ 757.124987][ T24] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 757.196176][ T8935] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16017'. [ 757.205813][ T8930] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16017'. [ 757.307270][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 11: 69, using maximum allowed: 30 [ 757.327764][ T24] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.344921][ T24] usb 3-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 69 [ 757.358765][ T1562] usb 5-1: USB disconnect, device number 127 [ 757.359018][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 757.371978][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=00e2, bcdDevice= 0.00 [ 757.381641][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.394327][ T24] usb 3-1: config 0 descriptor?? [ 757.418154][ T30] audit: type=1400 audit(2000001288.897:4121): avc: denied { write } for pid=8941 comm="syz.1.16022" name="event2" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 757.441759][ T1559] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 757.612271][ T1559] usb 6-1: Using ep0 maxpacket: 32 [ 757.623084][ T1559] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 757.633617][ T1559] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.641882][ T1559] usb 6-1: Product: syz [ 757.646124][ T1559] usb 6-1: Manufacturer: syz [ 757.650848][ T1559] usb 6-1: SerialNumber: syz [ 757.657560][ T1559] usb 6-1: config 0 descriptor?? [ 757.664803][ T1559] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 757.673260][ T1559] dvb-usb: bulk message failed: -22 (4/0) [ 757.677358][ T8952] nbd1: detected capacity change from 0 to 63 [ 757.679514][ T1559] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 757.687878][ T8953] block nbd1: NBD_DISCONNECT [ 757.696605][ T1559] dvb-usb: bulk message failed: -22 (5/0) [ 757.705986][ T1559] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 757.722458][ T1559] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 757.722458][ T8953] block nbd1: Disconnected due to user request. [ 757.732573][ T1559] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 757.740865][ T8953] block nbd1: shutting down sockets [ 757.766701][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 757.776242][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 757.778510][ T1559] usb 6-1: media controller created [ 757.785123][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 757.798784][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 757.806570][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 757.816052][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 757.823843][ C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 757.833323][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 757.838046][ T1559] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 757.849542][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 757.857539][T18691] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 757.860307][ T8934] dvb-usb: bulk message failed: -22 (14/0) [ 757.875760][ T8934] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 757.880513][T18691] Buffer I/O error on dev nbd1, logical block 0, async page read [ 757.886107][ T8934] ttusb2: i2c transfer failed. [ 757.916077][T18691] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 757.926095][T18691] Buffer I/O error on dev nbd1, logical block 1, async page read [ 757.934461][T18691] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 757.945816][T18691] Buffer I/O error on dev nbd1, logical block 2, async page read [ 757.953564][T18691] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 757.963823][T18691] Buffer I/O error on dev nbd1, logical block 3, async page read [ 757.965211][ T1559] usb 6-1: selecting invalid altsetting 3 [ 757.971577][T18691] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 757.988061][T18691] Buffer I/O error on dev nbd1, logical block 0, async page read [ 757.995887][T18691] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 758.008425][T18691] Buffer I/O error on dev nbd1, logical block 1, async page read [ 758.014688][ T1559] ttusb2: set interface to alts=3 failed [ 758.016781][T18691] ldm_validate_partition_table(): Disk read failed. [ 758.028982][T18691] Dev nbd1: unable to read RDB block 0 [ 758.032896][ T24] usb 3-1: USB disconnect, device number 60 [ 758.081804][T18691] nbd1: unable to read partition table [ 758.091736][ T1559] DVB: Unable to find symbol tda10086_attach() [ 758.109226][ T1559] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 758.109323][T18691] ldm_validate_partition_table(): Disk read failed. [ 758.127284][ T1559] dvb-usb: bulk message failed: -22 (4/0) [ 758.133220][ T1559] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 758.147931][T18691] Dev nbd1: unable to read RDB block 0 [ 758.151355][ T1559] dvb-usb: bulk message failed: -22 (5/0) [ 758.160452][T18691] nbd1: unable to read partition table [ 758.163357][ T1559] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 758.189693][ T1559] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 758.221599][ T1559] usb 6-1: USB disconnect, device number 9 [ 758.286458][ T1559] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 758.696602][ T8988] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 758.832435][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 758.852183][ T1297] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 758.861202][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.875196][ T8983] lo speed is unknown, defaulting to 1000 [ 759.152238][ T30] audit: type=1400 audit(2000001290.713:4122): avc: denied { read write } for pid=9005 comm="syz.2.16047" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 759.166388][ T1562] kernel write not supported for file /ppp (pid: 1562 comm: kworker/0:5) [ 759.175774][ T30] audit: type=1400 audit(2000001290.713:4123): avc: denied { open } for pid=9005 comm="syz.2.16047" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 759.361467][ T9018] xt_hashlimit: size too large, truncated to 1048576 [ 759.512494][ T9023] netlink: 'syz.2.16054': attribute type 9 has an invalid length. [ 759.524839][ T9023] netlink: 'syz.2.16054': attribute type 11 has an invalid length. [ 759.533654][ T9023] netlink: 'syz.2.16054': attribute type 12 has an invalid length. [ 759.541751][ T9023] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.16054'. [ 759.830047][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 759.950911][ T9046] fuse: Bad value for 'fd' [ 760.103161][ T9055] trusted_key: syz.4.16068 sent an empty control message without MSG_MORE. [ 760.255897][ T9064] __nla_validate_parse: 5 callbacks suppressed [ 760.255912][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16072'. [ 760.280497][ T9064] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16072'. [ 760.297219][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16072'. [ 760.306680][ T9064] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16072'. [ 760.423609][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 760.423625][ T30] audit: type=1400 audit(2000001292.057:4132): avc: denied { ioctl } for pid=9067 comm="syz.5.16074" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 760.820740][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 760.936185][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16089'. [ 760.999310][ T9108] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 761.466224][ T9130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.783361][ T9158] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16114'. [ 761.801858][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 761.856309][ T1559] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 761.935341][ T1560] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 761.971532][T18691] udevd[18691]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 762.053633][ T1559] usb 3-1: Using ep0 maxpacket: 32 [ 762.097647][ T1559] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 762.118916][ T1559] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 762.156026][ T1560] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 762.167602][ T1559] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 762.182251][ T1560] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 762.211815][ T1559] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 762.246773][ T1560] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 762.256401][ T1559] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 762.275148][ T1560] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.286839][ T1559] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 762.297549][ T9152] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 762.305684][ T1559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.317062][ T1560] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 762.327108][ T1559] usb 3-1: Product: syz [ 762.331266][ T1559] usb 3-1: Manufacturer: syz [ 762.342505][ T1559] usb 3-1: SerialNumber: syz [ 762.382798][ T1559] usb 3-1: config 0 descriptor?? [ 762.383098][ T5897] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 762.501833][ T24] usb 5-1: USB disconnect, device number 2 [ 762.547622][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.560458][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.570391][ T5897] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 762.583459][ T5897] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 762.592977][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.603201][ T5897] usb 6-1: config 0 descriptor?? [ 762.620977][ T1560] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 762.763926][ T1560] usb 2-1: Using ep0 maxpacket: 8 [ 762.770359][ T1560] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 762.779685][ T1560] usb 2-1: config 0 has no interface number 0 [ 762.785844][ T1560] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 762.796731][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 762.804673][ T1559] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 762.810917][ T1559] input input116: Device does not respond to id packet M [ 762.818155][ T1560] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 762.830011][ T1560] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 762.841324][ T1559] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 762.847321][ T1559] input input116: Device does not respond to id packet P [ 762.854583][ T1560] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 762.867683][ T1560] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 762.877137][ T1560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.887069][ T1559] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 762.893109][ T1559] input input116: Device does not respond to id packet B [ 762.900750][ T1560] usb 2-1: config 0 descriptor?? [ 762.915449][ T1560] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 763.009091][ T5897] plantronics 0003:047F:FFFF.0071: reserved main item tag 0xd [ 763.030926][ T5897] plantronics 0003:047F:FFFF.0071: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 763.101858][ T1559] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 763.117019][ T1559] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 763.129171][ T1559] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 763.140870][ T1559] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 763.161259][ T1559] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input116 [ 763.176920][ T30] audit: type=1400 audit(2000001294.944:4133): avc: denied { read } for pid=5163 comm="acpid" name="js0" dev="devtmpfs" ino=6267 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 763.215850][ T1559] usb 3-1: USB disconnect, device number 61 [ 763.229855][ T10] usb 2-1: USB disconnect, device number 51 [ 763.246928][ T30] audit: type=1400 audit(2000001294.944:4134): avc: denied { open } for pid=5163 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=6267 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 763.275141][ T10] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 763.317405][ T30] audit: type=1400 audit(2000001294.944:4135): avc: denied { ioctl } for pid=5163 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=6267 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 763.356573][ T1560] usb 6-1: USB disconnect, device number 10 [ 763.422882][ T9182] kvm: MONITOR instruction emulated as NOP! [ 763.554027][ T30] audit: type=1400 audit(2000001295.332:4136): avc: denied { load_policy } for pid=9185 comm="syz.3.16124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 763.561689][ T9186] SELinux: failed to load policy [ 763.736858][ T30] audit: type=1400 audit(2000001295.521:4137): avc: denied { create } for pid=9197 comm="syz.3.16130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 763.792755][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 763.809610][ T30] audit: type=1400 audit(2000001295.563:4138): avc: denied { read } for pid=9197 comm="syz.3.16130" path="socket:[139234]" dev="sockfs" ino=139234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 763.821659][ T9202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16132'. [ 764.164505][ T1560] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 764.277207][ T9225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16142'. [ 764.341241][ T1560] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 764.370615][ T1560] usb 5-1: config 0 has no interface number 0 [ 764.402691][ T1560] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 764.461786][ T1560] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 764.481555][ T9240] SELinux: failed to load policy [ 764.506468][ T1560] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 764.554039][ T1560] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.576524][ T1560] usb 5-1: config 0 descriptor?? [ 764.603424][ T9207] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 764.625304][T30010] udevd[30010]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 764.653651][ T1560] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 764.694233][ T30] audit: type=1400 audit(2000001296.529:4139): avc: denied { mounton } for pid=9247 comm="syz.5.16152" path="/197/file0" dev="tmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 764.774221][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 764.882496][ T1560] usb 5-1: USB disconnect, device number 3 [ 765.274571][ T9259] lo speed is unknown, defaulting to 1000 [ 765.469553][ T1562] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 765.488897][ T10] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 765.621845][ T1562] usb 6-1: Using ep0 maxpacket: 8 [ 765.630001][ T1562] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 765.638901][ T1562] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 765.663520][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 765.669836][ T30] audit: type=1400 audit(2000001297.547:4140): avc: denied { watch } for pid=9291 comm="syz.1.16170" path="/2936/net_prio.prioidx" dev="tmpfs" ino=14868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 765.688554][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 765.702862][ T30] audit: type=1400 audit(2000001297.547:4141): avc: denied { watch_sb } for pid=9291 comm="syz.1.16170" path="/2936/net_prio.prioidx" dev="tmpfs" ino=14868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 765.717829][ T1562] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 765.765412][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 765.774022][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 765.782877][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.793215][ T1562] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 765.810849][ T1562] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 765.821612][ T1562] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 765.835553][ T1562] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 765.844966][ T1562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.845094][ T9278] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 765.881852][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 766.082374][ T1562] usb 6-1: usb_control_msg returned -32 [ 766.101967][ T1562] usbtmc 6-1:16.0: can't read capabilities [ 766.238208][ T1559] usb 3-1: USB disconnect, device number 62 [ 766.375754][ T30] audit: type=1400 audit(2000001298.272:4142): avc: denied { name_connect } for pid=9308 comm="syz.3.16177" dest=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 766.482321][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 766.517083][ T9310] usbtmc 6-1:16.0: Unable to send data, error -71 [ 766.568014][ T9301] lo speed is unknown, defaulting to 1000 [ 766.764664][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 767.336201][ T24] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 767.517828][ T5873] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 767.525427][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 767.537301][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 767.548535][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 767.556962][ T24] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 767.566425][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.574471][ T24] usb 3-1: Product: syz [ 767.578767][ T24] usb 3-1: Manufacturer: syz [ 767.583389][ T24] usb 3-1: SerialNumber: syz [ 767.592415][ T24] usb 3-1: config 0 descriptor?? [ 767.707631][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 767.716232][ T5873] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 767.727566][ T5873] usb 5-1: config 0 has no interface number 0 [ 767.733720][ T5873] usb 5-1: config 0 interface 184 has no altsetting 0 [ 767.755320][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 767.774507][ T5873] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 767.793435][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.801418][ T5873] usb 5-1: Product: syz [ 767.826660][ T24] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input118 [ 767.850623][ T5873] usb 5-1: Manufacturer: syz [ 767.855216][ T5873] usb 5-1: SerialNumber: syz [ 767.887450][ T5873] usb 5-1: config 0 descriptor?? [ 768.102495][ T24] rc_core: IR keymap rc-imon-pad not found [ 768.121799][ T24] Registered IR keymap rc-empty [ 768.138679][ T1560] usb 6-1: USB disconnect, device number 11 [ 768.158772][ T24] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 768.192066][ T24] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 768.253777][ T24] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 768.267283][ T24] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input119 [ 768.282574][ T24] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:63> initialized [ 768.640303][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 768.649338][ T1560] usb 3-1: USB disconnect, device number 63 [ 768.745971][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 769.081372][ T5873] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 769.096531][ T5873] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 769.107117][ T5873] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 769.118892][ T5873] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 769.130939][ T5873] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 769.146352][ T5873] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 769.165823][ T5873] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 769.179366][ T5873] usb 5-1: USB disconnect, device number 4 [ 769.429617][ T30] audit: type=1326 audit(2000001301.505:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9343 comm="syz.3.16189" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d3659c629 code=0x0 [ 769.465063][ T30] audit: type=1400 audit(2000001301.537:4144): avc: denied { watch_mount } for pid=9345 comm="syz.2.16190" path="/3253" dev="tmpfs" ino=16452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 769.597145][ T9353] netlink: 9 bytes leftover after parsing attributes in process `syz.5.16193'. [ 769.681298][ T9353] netlink: 9 bytes leftover after parsing attributes in process `syz.5.16193'. [ 769.736761][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 769.778933][ T9359] netlink: 'syz.1.16195': attribute type 1 has an invalid length. [ 769.789802][ T9359] netlink: 68 bytes leftover after parsing attributes in process `syz.1.16195'. [ 769.840191][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16199'. [ 769.888860][ T9363] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16199'. [ 770.099999][ T9374] netlink: 'syz.5.16201': attribute type 11 has an invalid length. [ 770.226387][ T30] audit: type=1400 audit(2000001302.334:4145): avc: denied { mounton } for pid=9377 comm="syz.5.16204" path="/file0" dev="ramfs" ino=140724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 770.341931][ T30] audit: type=1326 audit(2000001302.460:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="syz.3.16205" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d3659c629 code=0x0 [ 770.380405][ T9365] bond0: (slave netdevsim0): Releasing backup interface [ 770.415847][ T30] audit: type=1400 audit(2000001302.544:4147): avc: denied { mount } for pid=9387 comm="syz.2.16208" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 770.486285][ T30] audit: type=1400 audit(2000001302.618:4148): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 770.570556][ T9396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.579301][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.664399][ T9402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.727348][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 770.853050][ T1560] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 770.922488][ T30] audit: type=1400 audit(2000001303.069:4149): avc: denied { ioctl } for pid=9415 comm="syz.2.16219" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 770.948918][ T9416] input: syz0 as /devices/virtual/input/input120 [ 771.042464][ T1560] usb 2-1: Using ep0 maxpacket: 8 [ 771.049433][ T1560] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 771.057679][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 771.065648][ T1560] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 771.076744][ T1560] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 771.087084][ T1560] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 771.090089][ T30] audit: type=1400 audit(2000001303.258:4150): avc: denied { create } for pid=9420 comm="syz.2.16221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 771.097219][ T1560] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 771.132582][ T1560] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 771.146747][ T30] audit: type=1400 audit(2000001303.300:4151): avc: denied { connect } for pid=9420 comm="syz.2.16221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 771.156104][ T1560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.205360][ T30] audit: type=1400 audit(2000001303.300:4152): avc: denied { bind } for pid=9420 comm="syz.2.16221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 771.242533][ T24] usb 6-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 771.259718][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.275065][ T24] usb 6-1: Product: syz [ 771.279256][ T24] usb 6-1: Manufacturer: syz [ 771.284667][ T24] usb 6-1: SerialNumber: syz [ 771.304172][ T24] usb 6-1: config 0 descriptor?? [ 771.323689][ T24] ti_usb_3410_5052 6-1:0.0: required endpoints missing [ 771.381819][ T9434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.390924][ T9434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.408451][ T1560] usb 2-1: usb_control_msg returned -32 [ 771.422991][ T9434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.426705][ T1560] usbtmc 2-1:16.0: can't read capabilities [ 771.507369][ T9433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.558338][ T9433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.569072][ T1562] usb 6-1: USB disconnect, device number 12 [ 771.664981][ T9400] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 771.680631][ T9443] 9pnet: p9_errstr2errno: server reported unknown error di3 [ 771.756653][ T30] audit: type=1400 audit(2000001303.951:4153): avc: denied { name_bind 0x1000000 } for pid=9448 comm="syz.3.16233" path="socket:[139815]" dev="sockfs" ino=139815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 771.817847][ T30] audit: type=1400 audit(2000001304.014:4154): avc: denied { name_bind } for pid=9451 comm="syz.4.16234" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 771.873090][ T1560] usb 2-1: USB disconnect, device number 52 [ 772.075512][ T30] audit: type=1400 audit(2000001304.287:4155): avc: denied { read } for pid=9461 comm="syz.4.16239" lport=41273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 772.370890][ T30] audit: type=1400 audit(2000001304.592:4156): avc: denied { getopt } for pid=9482 comm="syz.5.16247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 772.566201][ T5897] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 772.631547][ T9497] SELinux: failed to load policy [ 772.677820][ T1562] libceph: connect (1)[c::]:6789 error -101 [ 772.683939][ T1562] libceph: mon0 (1)[c::]:6789 connect error [ 772.718530][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 772.724618][ T9502] ceph: No mds server is up or the cluster is laggy [ 772.731771][ T5897] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 772.752996][ T5897] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 772.775293][ T5897] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 772.788444][ T5897] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 772.802303][ T5897] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 772.813536][ T1560] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 772.822252][ T5897] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 772.838615][ T5897] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 772.848218][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.957870][ T1560] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.971030][ T1560] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.996714][ T1560] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 773.014906][ T1560] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 773.024245][ T1560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.037077][ T1560] usb 2-1: config 0 descriptor?? [ 773.063680][ T5897] usb 3-1: usb_control_msg returned -32 [ 773.069275][ T5897] usbtmc 3-1:16.0: can't read capabilities [ 773.402296][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 773.432742][ T9522] usbtmc 3-1:16.0: Unable to send data, error -71 [ 773.464557][ T1560] plantronics 0003:047F:FFFF.0072: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 773.471459][ T9522] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 773.531425][ T5897] usb 3-1: USB disconnect, device number 64 [ 773.730023][ T36] ================================================================== [ 773.738110][ T36] BUG: KASAN: slab-use-after-free in nf_hook_entry_head+0x302/0x320 [ 773.746081][ T36] Read of size 8 at addr ffff88802e764108 by task kworker/u8:2/36 [ 773.753869][ T36] [ 773.756187][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 773.756212][ T36] Tainted: [L]=SOFTLOCKUP [ 773.756219][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 773.756230][ T36] Workqueue: netns cleanup_net [ 773.756251][ T36] Call Trace: [ 773.756258][ T36] [ 773.756265][ T36] dump_stack_lvl+0x100/0x190 [ 773.756293][ T36] print_report+0x156/0x4c9 [ 773.756318][ T36] ? __virt_addr_valid+0x81/0x620 [ 773.756343][ T36] ? __phys_addr+0xe8/0x180 [ 773.756368][ T36] ? nf_hook_entry_head+0x302/0x320 [ 773.756385][ T36] kasan_report+0xdf/0x1e0 [ 773.756411][ T36] ? nf_hook_entry_head+0x302/0x320 [ 773.756431][ T36] nf_hook_entry_head+0x302/0x320 [ 773.756448][ T36] __nf_unregister_net_hook+0x7e/0x6a0 [ 773.756468][ T36] nf_unregister_net_hook+0xda/0x120 [ 773.756486][ T36] __nft_unregister_flowtable_net_hooks+0xf7/0x3f0 [ 773.756508][ T36] ? find_held_lock+0x2b/0x80 [ 773.756530][ T36] __nft_release_hook+0x243/0x360 [ 773.756549][ T36] nf_tables_pre_exit_net+0xc5/0x120 [ 773.756569][ T36] ? __pfx_nf_tables_pre_exit_net+0x10/0x10 [ 773.756590][ T36] ops_undo_list+0x187/0xab0 [ 773.756609][ T36] ? __pfx_ops_undo_list+0x10/0x10 [ 773.756626][ T36] ? cleanup_net+0x332/0x920 [ 773.756644][ T36] ? cleanup_net+0x332/0x920 [ 773.756663][ T36] ? idr_destroy+0x62/0x2e0 [ 773.756688][ T36] cleanup_net+0x499/0x920 [ 773.756708][ T36] ? __pfx_cleanup_net+0x10/0x10 [ 773.756729][ T36] ? rcu_is_watching+0x12/0xc0 [ 773.756751][ T36] process_one_work+0x9d7/0x1920 [ 773.756778][ T36] ? __pfx_process_one_work+0x10/0x10 [ 773.756799][ T36] ? __pfx_cleanup_net+0x10/0x10 [ 773.756820][ T36] worker_thread+0x5da/0xe40 [ 773.756842][ T36] ? kthread+0x13a/0x450 [ 773.756856][ T36] ? __pfx_worker_thread+0x10/0x10 [ 773.756873][ T36] kthread+0x370/0x450 [ 773.756888][ T36] ? __pfx_kthread+0x10/0x10 [ 773.756904][ T36] ret_from_fork+0x754/0xd80 [ 773.756921][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 773.756938][ T36] ? __switch_to+0x7b4/0x1120 [ 773.756958][ T36] ? __pfx_kthread+0x10/0x10 [ 773.756975][ T36] ret_from_fork_asm+0x1a/0x30 [ 773.757001][ T36] [ 773.757008][ T36] [ 773.972736][ T36] Allocated by task 9312: [ 773.977042][ T36] kasan_save_stack+0x30/0x50 [ 773.981702][ T36] kasan_save_track+0x14/0x30 [ 773.986357][ T36] __kasan_kmalloc+0xaa/0xb0 [ 773.990927][ T36] __kmalloc_node_track_caller_noprof+0x304/0x850 [ 773.997324][ T36] krealloc_node_align_noprof+0x30a/0x3e0 [ 774.003024][ T36] copy_array.constprop.0+0x93/0x110 [ 774.008291][ T36] copy_verifier_state+0xad8/0x1010 [ 774.013480][ T36] do_check_common+0x632d/0xcb00 [ 774.018398][ T36] bpf_check+0xbd53/0xcd50 [ 774.022795][ T36] bpf_prog_load+0x1c86/0x2c20 [ 774.027557][ T36] __sys_bpf+0x223a/0x4b90 [ 774.031950][ T36] __x64_sys_bpf+0x7b/0xc0 [ 774.036341][ T36] do_syscall_64+0x106/0xf80 [ 774.040908][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.046779][ T36] [ 774.049078][ T36] Freed by task 9312: [ 774.053032][ T36] kasan_save_stack+0x30/0x50 [ 774.057694][ T36] kasan_save_track+0x14/0x30 [ 774.062352][ T36] kasan_save_free_info+0x3b/0x70 [ 774.067355][ T36] __kasan_slab_free+0x5f/0x80 [ 774.072102][ T36] kfree+0x1f6/0x6b0 [ 774.075999][ T36] free_verifier_state+0x99/0x270 [ 774.081021][ T36] do_check_common+0x2917/0xcb00 [ 774.085940][ T36] bpf_check+0xbd53/0xcd50 [ 774.090338][ T36] bpf_prog_load+0x1c86/0x2c20 [ 774.095088][ T36] __sys_bpf+0x223a/0x4b90 [ 774.099478][ T36] __x64_sys_bpf+0x7b/0xc0 [ 774.103871][ T36] do_syscall_64+0x106/0xf80 [ 774.108436][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.114304][ T36] [ 774.116605][ T36] The buggy address belongs to the object at ffff88802e764000 [ 774.116605][ T36] which belongs to the cache kmalloc-cg-8k of size 8192 [ 774.130904][ T36] The buggy address is located 264 bytes inside of [ 774.130904][ T36] freed 8192-byte region [ffff88802e764000, ffff88802e766000) [ 774.144775][ T36] [ 774.147074][ T36] The buggy address belongs to the physical page: [ 774.153456][ T36] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e760 [ 774.162188][ T36] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 774.170659][ T36] memcg:ffff88802d708b01 [ 774.174873][ T36] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 774.182391][ T36] page_type: f5(slab) [ 774.186350][ T36] raw: 00fff00000000040 ffff88813fe56640 dead000000000100 dead000000000122 [ 774.194918][ T36] raw: 0000000000000000 0000000800020002 00000000f5000000 ffff88802d708b01 [ 774.203482][ T36] head: 00fff00000000040 ffff88813fe56640 dead000000000100 dead000000000122 [ 774.212139][ T36] head: 0000000000000000 0000000800020002 00000000f5000000 ffff88802d708b01 [ 774.220787][ T36] head: 00fff00000000003 ffffea0000b9d801 00000000ffffffff 00000000ffffffff [ 774.229433][ T36] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 774.238074][ T36] page dumped because: kasan: bad access detected [ 774.244459][ T36] page_owner tracks the page as allocated [ 774.250146][ T36] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5811, tgid 5811 (syz-executor), ts 60833043834, free_ts 47273777943 [ 774.273214][ T36] post_alloc_hook+0x153/0x170 [ 774.277957][ T36] get_page_from_freelist+0x111d/0x3140 [ 774.283481][ T36] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 774.289353][ T36] new_slab+0xa6/0x6d0 [ 774.293396][ T36] refill_objects+0x26b/0x400 [ 774.298051][ T36] __pcs_replace_empty_main+0x19f/0x600 [ 774.303577][ T36] __kvmalloc_node_noprof+0x7da/0xa00 [ 774.308929][ T36] alloc_netdev_mqs+0xd7/0x14f0 [ 774.313755][ T36] rtnl_create_link+0xc13/0xf80 [ 774.318582][ T36] rtnl_newlink+0x13b8/0x2380 [ 774.323232][ T36] rtnetlink_rcv_msg+0x95e/0xe90 [ 774.328145][ T36] netlink_rcv_skb+0x159/0x420 [ 774.332897][ T36] netlink_unicast+0x5aa/0x870 [ 774.337639][ T36] netlink_sendmsg+0x8b0/0xda0 [ 774.342383][ T36] __sys_sendto+0x4aa/0x520 [ 774.346869][ T36] __x64_sys_sendto+0xe0/0x1c0 [ 774.351613][ T36] page last free pid 5768 tgid 5768 stack trace: [ 774.357912][ T36] __free_frozen_pages+0x7e1/0x10d0 [ 774.363086][ T36] qlist_free_all+0x47/0xe0 [ 774.367569][ T36] kasan_quarantine_reduce+0x1a0/0x1f0 [ 774.373007][ T36] __kasan_slab_alloc+0x69/0x90 [ 774.377839][ T36] kmem_cache_alloc_noprof+0x241/0x6e0 [ 774.383278][ T36] __anon_vma_prepare+0xae/0x5e0 [ 774.388192][ T36] __vmf_anon_prepare+0x11f/0x250 [ 774.393191][ T36] do_anonymous_page+0x552/0x1fb0 [ 774.398194][ T36] __handle_mm_fault+0x1d42/0x2b60 [ 774.403284][ T36] handle_mm_fault+0x36d/0xa20 [ 774.408024][ T36] do_user_addr_fault+0x5a3/0x12f0 [ 774.413112][ T36] exc_page_fault+0x6f/0xd0 [ 774.417588][ T36] asm_exc_page_fault+0x26/0x30 [ 774.422417][ T36] [ 774.424714][ T36] Memory state around the buggy address: [ 774.430318][ T36] ffff88802e764000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 774.438365][ T36] ffff88802e764080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 774.446402][ T36] >ffff88802e764100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 774.454433][ T36] ^ [ 774.458734][ T36] ffff88802e764180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 774.466777][ T36] ffff88802e764200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 774.474809][ T36] ================================================================== [ 774.579536][ T36] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 774.586761][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 774.597600][ T36] Tainted: [L]=SOFTLOCKUP [ 774.601915][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 774.611963][ T36] Workqueue: netns cleanup_net [ 774.616722][ T36] Call Trace: [ 774.619981][ T36] [ 774.622890][ T36] dump_stack_lvl+0x100/0x190 [ 774.627555][ T36] vpanic+0x552/0x970 [ 774.631516][ T36] ? __pfx_vpanic+0x10/0x10 [ 774.636000][ T36] ? nf_hook_entry_head+0x302/0x320 [ 774.641175][ T36] panic+0xd1/0xe0 [ 774.644874][ T36] ? __pfx_panic+0x10/0x10 [ 774.649270][ T36] ? nf_hook_entry_head+0x302/0x320 [ 774.654445][ T36] ? preempt_schedule_common+0x42/0xc0 [ 774.659903][ T36] ? check_panic_on_warn+0x1f/0x90 [ 774.665000][ T36] check_panic_on_warn.cold+0x19/0x34 [ 774.670351][ T36] end_report.part.0+0x3a/0x90 [ 774.675098][ T36] kasan_report.cold+0xe/0x18 [ 774.679759][ T36] ? nf_hook_entry_head+0x302/0x320 [ 774.684936][ T36] nf_hook_entry_head+0x302/0x320 [ 774.689940][ T36] __nf_unregister_net_hook+0x7e/0x6a0 [ 774.695380][ T36] nf_unregister_net_hook+0xda/0x120 [ 774.700644][ T36] __nft_unregister_flowtable_net_hooks+0xf7/0x3f0 [ 774.707123][ T36] ? find_held_lock+0x2b/0x80 [ 774.711783][ T36] __nft_release_hook+0x243/0x360 [ 774.716784][ T36] nf_tables_pre_exit_net+0xc5/0x120 [ 774.722050][ T36] ? __pfx_nf_tables_pre_exit_net+0x10/0x10 [ 774.727922][ T36] ops_undo_list+0x187/0xab0 [ 774.732491][ T36] ? __pfx_ops_undo_list+0x10/0x10 [ 774.737578][ T36] ? cleanup_net+0x332/0x920 [ 774.742145][ T36] ? cleanup_net+0x332/0x920 [ 774.746713][ T36] ? idr_destroy+0x62/0x2e0 [ 774.751198][ T36] cleanup_net+0x499/0x920 [ 774.755594][ T36] ? __pfx_cleanup_net+0x10/0x10 [ 774.760513][ T36] ? rcu_is_watching+0x12/0xc0 [ 774.765258][ T36] process_one_work+0x9d7/0x1920 [ 774.770178][ T36] ? __pfx_process_one_work+0x10/0x10 [ 774.775529][ T36] ? __pfx_cleanup_net+0x10/0x10 [ 774.780446][ T36] worker_thread+0x5da/0xe40 [ 774.785020][ T36] ? kthread+0x13a/0x450 [ 774.789240][ T36] ? __pfx_worker_thread+0x10/0x10 [ 774.794329][ T36] kthread+0x370/0x450 [ 774.798374][ T36] ? __pfx_kthread+0x10/0x10 [ 774.802942][ T36] ret_from_fork+0x754/0xd80 [ 774.807513][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 774.812603][ T36] ? __switch_to+0x7b4/0x1120 [ 774.817260][ T36] ? __pfx_kthread+0x10/0x10 [ 774.821828][ T36] ret_from_fork_asm+0x1a/0x30 [ 774.826574][ T36] [ 774.829823][ T36] Kernel Offset: disabled [ 774.834119][ T36] Rebooting in 86400 seconds..