last executing test programs: 2m57.760655742s ago: executing program 2 (id=2694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000300"], 0x54}}, 0x0) 2m57.613375924s ago: executing program 2 (id=2696): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 2m57.46141081s ago: executing program 2 (id=2699): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r1, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 2m57.408793589s ago: executing program 2 (id=2701): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x0) 2m57.328990271s ago: executing program 2 (id=2702): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 2m57.031215335s ago: executing program 2 (id=2705): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x8, &(0x7f00000009c0)=@framed={{0x18, 0x6, 0x0, 0x11}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m56.792651028s ago: executing program 32 (id=2705): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x8, &(0x7f00000009c0)=@framed={{0x18, 0x6, 0x0, 0x11}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.077815164s ago: executing program 1 (id=5176): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x141a82, 0x13) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) close(0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 3.925110766s ago: executing program 1 (id=5180): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000300)) pselect6(0x40, &(0x7f0000000000)={0x10, 0x25c3, 0x3, 0x4d, 0x1000, 0x8, 0x7, 0x1}, 0x0, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x25a5, 0x0) 3.001861458s ago: executing program 1 (id=5202): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000500fffd0900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000002c0004802800018008000100667764001c0002800800024000000004080003400000000a08000140000500100900010073797a30"], 0xc8}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 2.687427985s ago: executing program 4 (id=5209): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc603606034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.517306461s ago: executing program 4 (id=5211): sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 2.443732242s ago: executing program 4 (id=5213): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=[r0], 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x20, 0x0, 0x0) 2.365698177s ago: executing program 4 (id=5215): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) splice(r0, 0x0, r3, 0x0, 0xbcc, 0x1) write$binfmt_misc(r1, &(0x7f00000005c0)='P', 0x1) 2.240011473s ago: executing program 4 (id=5216): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="041000", 0x3}], 0x1, 0x0, 0x0, 0x20040004}, 0x20004011) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x2404c140) 2.204653405s ago: executing program 5 (id=5217): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x80, 0x700, 0x401, 0x1, {{0x9, 0x4, 0x1, 0x7, 0x24, 0x66, 0x0, 0x80, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xf, 0xd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote]}]}}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.149690016s ago: executing program 5 (id=5218): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000300)={&(0x7f0000000140)={0xa, 0x4e24, 0xd, @remote, 0xe}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000280)="f520", 0x2}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000002900000034000000190000090000000078"], 0x90}, 0x2000c800) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000100)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000002240)={0x0, @in={{0x2, 0x4e24, @local}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0xd}, 0x9c) 2.081483183s ago: executing program 4 (id=5220): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 1.689833883s ago: executing program 1 (id=5222): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.287264864s ago: executing program 5 (id=5225): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x500, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, 0x0, 0x0, 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) 953.533158ms ago: executing program 5 (id=5230): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x114) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 829.448798ms ago: executing program 5 (id=5232): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r1, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd}) 807.308705ms ago: executing program 1 (id=5234): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002d00)=@delchain={0x24, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) recvmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/233, 0xe9}], 0x1}, 0x20) 730.696626ms ago: executing program 0 (id=5235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000480)={0xb, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000007b01"]) 729.803907ms ago: executing program 1 (id=5236): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x2000) read$FUSE(r0, &(0x7f0000001740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f0000000380)={0x28, 0x0, r1, {{0x7, 0x7fffffffffffffff, 0x2}}}, 0x28) 643.623056ms ago: executing program 0 (id=5237): r0 = io_uring_setup(0x3803, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x0, 0x0, 0x2b4}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0xcf, 0x0, 0x0, 0xd, 0xfa, 0x6, 0x9, 0x3, 0x9, 0xd, 0x8, 0x6, 0x29, 0x7}, 0xe) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 473.352023ms ago: executing program 0 (id=5238): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x41982) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 414.185149ms ago: executing program 0 (id=5239): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team_slave_0\x00', 0x4000}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3}) 367.793183ms ago: executing program 0 (id=5240): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 224.76205ms ago: executing program 0 (id=5242): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) 191.119741ms ago: executing program 3 (id=5243): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x6c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x1000000, 0x0}) 126.988719ms ago: executing program 3 (id=5244): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0xf4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001100050003000000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="000200000220010014001a80100004800c000280"], 0x34}}, 0x880) 103.439675ms ago: executing program 3 (id=5245): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="770b0098") 75.578569ms ago: executing program 3 (id=5246): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) 49.560269ms ago: executing program 3 (id=5247): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 18.538323ms ago: executing program 3 (id=5248): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 0s ago: executing program 5 (id=5249): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) kernel console output (not intermixed with test programs): 0, idProduct=6751, bcdDevice=75.8b [ 335.901696][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.913207][ T5957] usb 1-1: config 0 descriptor?? [ 335.920772][ T5957] hso 1-1:0.1: Failed to find BULK IN ep [ 335.985475][T16000] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 336.068457][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 336.098461][ T5914] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 336.139434][ T78] usb 1-1: USB disconnect, device number 40 [ 336.251485][ T5914] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 336.260699][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.269015][ T5914] usb 2-1: Product: syz [ 336.273176][ T5914] usb 2-1: Manufacturer: syz [ 336.277772][ T5914] usb 2-1: SerialNumber: syz [ 336.298453][ T5957] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 336.448441][ T5957] usb 6-1: Using ep0 maxpacket: 16 [ 336.455049][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.468506][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.480396][ T5957] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 336.505434][ T5957] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 336.526197][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.550143][ T5957] usb 6-1: config 0 descriptor?? [ 336.740648][T16021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4180'. [ 336.760028][T16021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4180'. [ 336.985557][ T5957] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0032/input/input56 [ 337.011578][ T5957] microsoft 0003:045E:07DA.0032: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 337.039399][ T30] audit: type=1400 audit(2000000173.078:4704): avc: denied { append } for pid=16034 comm="syz.0.4188" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 337.175263][T16041] syzkaller1: entered promiscuous mode [ 337.181017][T16041] syzkaller1: entered allmulticast mode [ 337.218952][ T5957] usb 6-1: USB disconnect, device number 14 [ 337.316630][ T5914] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 337.327541][ T5914] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 337.338700][ T5914] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 337.351440][ T5914] usb 2-1: USB disconnect, device number 39 [ 337.538386][ T78] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 337.638419][ T24] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 337.700871][ T78] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 337.712146][ T78] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 337.721527][ T78] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.730948][ T78] usb 5-1: config 0 descriptor?? [ 337.736585][T16045] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 337.769377][ T30] audit: type=1400 audit(2000000173.818:4705): avc: denied { mounton } for pid=16051 comm="syz.5.4195" path="/proc/609/cgroup" dev="proc" ino=56954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 337.798450][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 337.805525][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 337.823080][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 337.835962][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 337.847802][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.878486][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 337.887667][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.116173][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 338.128746][ T24] usbtmc 4-1:16.0: can't read capabilities [ 338.165223][ T78] elan 0003:04F3:0755.0033: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 338.278448][T12200] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 338.279269][ T5950] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 338.341058][ T24] usb 4-1: USB disconnect, device number 47 [ 338.370130][ T976] usb 5-1: USB disconnect, device number 43 [ 338.448707][T12200] usb 1-1: Using ep0 maxpacket: 16 [ 338.455612][T12200] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 338.461685][ T5950] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 338.467411][T12200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 338.487660][ T5950] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 338.501186][ T5950] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 338.511213][ T5950] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 338.511370][T12200] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 338.526695][ T5950] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 338.533925][T12200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.557393][ T5950] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 338.568441][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 338.576458][ T5950] usb 2-1: Product: syz [ 338.587108][ T5950] usb 2-1: Manufacturer: syz [ 338.597714][ T5950] cdc_wdm 2-1:1.0: skipping garbage [ 338.605998][ T5950] cdc_wdm 2-1:1.0: skipping garbage [ 338.613284][ T5950] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 338.622349][ T5950] cdc_wdm 2-1:1.0: Unknown control protocol [ 338.648496][T12200] usb 1-1: Product: syz [ 338.652727][T12200] usb 1-1: Manufacturer: syz [ 338.657351][T12200] usb 1-1: SerialNumber: syz [ 338.668953][T12200] usb 1-1: config 0 descriptor?? [ 338.676641][T12200] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 338.686087][T12200] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 339.049266][ T78] usb 2-1: USB disconnect, device number 40 [ 339.350301][T12200] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 339.358163][T12200] em28xx 1-1:0.0: Config register raw data: 0xdc [ 339.429701][ T30] audit: type=1400 audit(2000000175.468:4706): avc: denied { sys_nice } for pid=16091 comm="syz.5.4212" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 339.560542][T12200] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 339.567767][T12200] em28xx 1-1:0.0: No AC97 audio processor [ 339.588910][T12200] usb 1-1: USB disconnect, device number 41 [ 339.595868][T12200] em28xx 1-1:0.0: Disconnecting em28xx [ 339.611906][T12200] em28xx 1-1:0.0: Freeing device [ 339.678947][T16103] netlink: 'syz.5.4216': attribute type 4 has an invalid length. [ 339.700488][T16103] netlink: 209028 bytes leftover after parsing attributes in process `syz.5.4216'. [ 339.728345][ C1] net_ratelimit: 4 callbacks suppressed [ 339.728366][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 339.763312][T16109] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 339.836968][T16115] dvmrp0: entered allmulticast mode [ 339.900829][T16121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 340.151551][ T30] audit: type=1400 audit(2000000176.188:4707): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 340.229919][T16133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.339362][ T30] audit: type=1400 audit(2000000176.388:4708): avc: denied { create } for pid=16135 comm="syz.0.4232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 340.436322][ T30] audit: type=1400 audit(2000000176.428:4709): avc: denied { ioctl } for pid=16135 comm="syz.0.4232" path="socket:[57132]" dev="sockfs" ino=57132 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 340.579874][ T30] audit: type=1400 audit(2000000176.448:4710): avc: denied { bind } for pid=16137 comm="syz.3.4231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 340.724241][ T30] audit: type=1400 audit(2000000176.768:4711): avc: denied { accept } for pid=16147 comm="syz.4.4237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 340.748510][ T5927] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 340.768351][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 340.922043][ T5927] usb 6-1: Using ep0 maxpacket: 16 [ 340.954497][ T5927] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 340.991030][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.007618][ T5927] usb 6-1: Product: syz [ 341.035284][ T5927] usb 6-1: Manufacturer: syz [ 341.048492][ T5927] usb 6-1: SerialNumber: syz [ 341.060250][ T5927] usb 6-1: config 0 descriptor?? [ 341.068563][ T5950] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 341.119552][T16159] loop6: detected capacity change from 0 to 524288000 [ 341.129085][T16159] Buffer I/O error on dev loop6, logical block 0, async page read [ 341.137059][T16159] Buffer I/O error on dev loop6, logical block 0, async page read [ 341.145692][T16159] Buffer I/O error on dev loop6, logical block 0, async page read [ 341.160359][T16159] Buffer I/O error on dev loop6, logical block 0, async page read [ 341.218948][T16159] Buffer I/O error on dev loop6, logical block 0, async page read [ 341.227896][T16159] Buffer I/O error on dev loop6, logical block 0, async page read [ 341.248500][T16159] Buffer I/O error on dev loop6, logical block 0, async page read [ 341.264657][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57088, setting to 8 [ 341.267344][T16159] Buffer I/O error on dev loop6, logical block 0, async page read [ 341.276136][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 341.289421][T16125] syz.1.4225 (16125): drop_caches: 2 [ 341.295152][ T5950] usb 4-1: New USB device found, idVendor=0486, idProduct=0185, bcdDevice= 0.00 [ 341.311422][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.321109][T16159] ldm_validate_partition_table(): Disk read failed. [ 341.328876][ T5950] usb 4-1: config 0 descriptor?? [ 341.334025][T16159] Buffer I/O error on dev loop6, logical block 0, async page read [ 341.342807][T16152] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 341.354429][T16159] Buffer I/O error on dev loop6, logical block 0, async page read [ 341.363106][T16159] Dev loop6: unable to read RDB block 0 [ 341.370130][T16159] loop6: unable to read partition table [ 341.376109][T16159] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 341.513640][ T5927] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 341.526503][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 341.537797][ T5927] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 341.548865][ T5927] usb 6-1: media controller created [ 341.558536][ T78] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 341.584027][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 341.716525][ T5927] zl10353_read_register: readreg error (reg=127, ret==0) [ 341.724692][ T5927] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 341.732932][ T78] usb 5-1: Using ep0 maxpacket: 32 [ 341.741074][ T5927] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 341.751587][ T78] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.765278][ T5927] usb 6-1: USB disconnect, device number 15 [ 341.771393][ T78] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.781942][ T5950] hid-generic 0003:0486:0185.0034: hidraw0: USB HID v0.08 Device [HID 0486:0185] on usb-dummy_hcd.3-1/input0 [ 341.788448][ T78] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 341.812941][ T78] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.821062][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 341.829173][ T5927] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 341.843543][ T78] usb 5-1: config 0 descriptor?? [ 342.023035][ T5927] usb 4-1: USB disconnect, device number 48 [ 342.267105][ T78] ft260 0003:0403:6030.0035: unknown main item tag 0x0 [ 342.288337][ T78] ft260 0003:0403:6030.0035: unknown main item tag 0x0 [ 342.468161][ T78] ft260 0003:0403:6030.0035: chip code: 6424 8183 [ 342.601882][T16194] syz.0.4256 (16194): drop_caches: 2 [ 342.672716][T16198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4259'. [ 342.689194][T16198] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4259'. [ 342.698726][T16198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4259'. [ 342.707993][T16198] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4259'. [ 342.779750][T16205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4262'. [ 342.858313][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 342.942544][ T5950] usb 5-1: USB disconnect, device number 44 [ 343.045782][T16225] syzkaller1: entered promiscuous mode [ 343.051628][T16225] syzkaller1: entered allmulticast mode [ 343.227800][ T30] audit: type=1326 audit(2000000179.268:4712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16235 comm="syz.3.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10cef8ebe9 code=0x7ffc0000 [ 343.278867][ T30] audit: type=1326 audit(2000000179.298:4713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16235 comm="syz.3.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10cef8ebe9 code=0x7ffc0000 [ 343.331479][ T30] audit: type=1326 audit(2000000179.298:4714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16235 comm="syz.3.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10cef8ebe9 code=0x7ffc0000 [ 343.365479][ T30] audit: type=1326 audit(2000000179.298:4715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16235 comm="syz.3.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10cef8ebe9 code=0x7ffc0000 [ 343.397178][ T30] audit: type=1326 audit(2000000179.298:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16235 comm="syz.3.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10cef8ebe9 code=0x7ffc0000 [ 343.432244][ T30] audit: type=1326 audit(2000000179.298:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16235 comm="syz.3.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10cef8ebe9 code=0x7ffc0000 [ 343.462596][ T30] audit: type=1326 audit(2000000179.298:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16235 comm="syz.3.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10cef8ebe9 code=0x7ffc0000 [ 343.496503][ T30] audit: type=1326 audit(2000000179.298:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16235 comm="syz.3.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10cef8ebe9 code=0x7ffc0000 [ 343.525670][T16247] syzkaller1: entered promiscuous mode [ 343.527334][ T30] audit: type=1326 audit(2000000179.298:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16235 comm="syz.3.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10cef8ebe9 code=0x7ffc0000 [ 343.538670][T16247] syzkaller1: entered allmulticast mode [ 343.557743][ T30] audit: type=1326 audit(2000000179.298:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16235 comm="syz.3.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f10cef8ebe9 code=0x7ffc0000 [ 343.888433][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 344.068445][ T24] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 344.228433][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 344.234858][ T24] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 344.243634][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.253945][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 344.264544][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 344.273903][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.281969][ T24] usb 2-1: Product: syz [ 344.286147][ T24] usb 2-1: Manufacturer: syz [ 344.290858][ T24] usb 2-1: SerialNumber: syz [ 344.705051][ T24] usb 2-1: 0:2 : does not exist [ 344.922144][T16295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4304'. [ 344.931106][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 345.314766][ T24] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 345.337893][ T24] usb 2-1: USB disconnect, device number 41 [ 345.698322][ T5957] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 345.851572][ T5957] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 345.870374][ T5957] usb 1-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 345.901047][ T5957] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 345.931273][ T5957] usb 1-1: config 1 has no interface number 1 [ 345.937798][ T5957] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 345.956538][ T5957] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.971461][T16321] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 345.982501][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 345.994138][T16321] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 346.015611][ T5957] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 346.035498][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.058565][ T5957] usb 1-1: Product: syz [ 346.062808][ T5957] usb 1-1: Manufacturer: syz [ 346.067400][ T5957] usb 1-1: SerialNumber: syz [ 346.308959][ T5957] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 346.328696][ T5950] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 346.336432][ T5957] usb 1-1: MIDIStreaming interface descriptor not found [ 346.409068][ T5957] usb 1-1: USB disconnect, device number 42 [ 346.519483][ T5950] usb 5-1: Using ep0 maxpacket: 8 [ 346.554606][ T5950] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 346.567354][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.587273][ T5950] usb 5-1: Product: syz [ 346.598320][ T5950] usb 5-1: Manufacturer: syz [ 346.619526][ T5950] usb 5-1: SerialNumber: syz [ 346.629201][ T5950] usb 5-1: config 0 descriptor?? [ 346.640207][ T5950] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 346.968711][T16363] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4332'. [ 347.018320][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 347.049453][T16363] syz.1.4332 (16363) used greatest stack depth: 17768 bytes left [ 347.508489][ T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 347.627401][T16384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4341'. [ 347.655733][ T5950] usb 5-1: USB disconnect, device number 45 [ 347.668850][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 347.681601][ T24] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 347.692127][ T24] usb 2-1: config 0 has no interface number 0 [ 347.701482][ T24] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 347.713642][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.723021][ T24] usb 2-1: Product: syz [ 347.727194][ T24] usb 2-1: Manufacturer: syz [ 347.734623][ T24] usb 2-1: SerialNumber: syz [ 347.737217][T16390] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4344'. [ 347.741950][ T24] usb 2-1: config 0 descriptor?? [ 347.760195][ T24] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 347.928549][ T5957] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 347.963224][ T24] etas_es58x 2-1:0.2: could not parse product info: '424242424242' [ 348.048337][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 348.079297][ T5957] usb 1-1: Using ep0 maxpacket: 16 [ 348.085703][ T5957] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 348.094071][ T5957] usb 1-1: config 1 has no interface number 0 [ 348.100239][ T5957] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 348.110242][ T5957] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 348.120257][ T5957] usb 1-1: config 1 interface 105 has no altsetting 0 [ 348.130785][ T5957] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 348.139862][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.147819][ T5957] usb 1-1: Product: syz [ 348.152949][ T5957] usb 1-1: Manufacturer: syz [ 348.157568][ T5957] usb 1-1: SerialNumber: syz [ 348.165021][T16387] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 348.172886][T16387] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 348.205699][ T976] usb 2-1: USB disconnect, device number 42 [ 348.213486][ T976] etas_es58x 2-1:0.2: Disconnecting syz syz [ 348.578416][ T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 348.588935][T16387] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 348.596206][T16387] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 348.738638][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 348.766517][ T24] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 348.778566][ T24] usb 5-1: config 0 has no interface number 0 [ 348.800147][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 348.813336][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.822389][ T24] usb 5-1: Product: syz [ 348.826615][ T24] usb 5-1: Manufacturer: syz [ 348.831557][ T24] usb 5-1: SerialNumber: syz [ 348.838224][ T24] usb 5-1: config 0 descriptor?? [ 348.845666][ T24] smsc95xx v2.0.0 [ 348.853099][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 348.881954][ T24] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 348.901876][T16409] netlink: 'syz.3.4353': attribute type 39 has an invalid length. [ 349.012982][ T5957] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 349.024276][ T5957] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 349.036865][ T5957] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 349.067165][ T5957] aqc111 1-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a6:9e:ba:0d:a0:10 [ 349.074865][T16399] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4348'. [ 349.084454][ T5957] usb 1-1: USB disconnect, device number 43 [ 349.089234][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 349.102926][T16399] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4348'. [ 349.106861][ T5957] aqc111 1-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 349.143284][ T976] usb 5-1: USB disconnect, device number 46 [ 349.170093][ T5957] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 349.180349][ T5957] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 349.190134][ T24] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 349.190639][ T5957] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 349.334672][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 349.334687][ T30] audit: type=1400 audit(2000000185.378:4725): avc: denied { read } for pid=16420 comm="syz.3.4359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 349.367545][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 349.382167][ T24] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 349.392164][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.405160][ T24] usb 2-1: config 0 descriptor?? [ 349.411710][T16411] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 349.703614][ T30] audit: type=1400 audit(2000000185.748:4726): avc: denied { bind } for pid=16434 comm="syz.0.4364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 349.837372][ T24] elan 0003:04F3:0755.0036: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 349.897251][T16447] all (unregistering): Released all slaves [ 350.034036][T16454] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4372'. [ 350.034152][ T24] usb 2-1: USB disconnect, device number 43 [ 350.048366][ T976] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 350.128376][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 350.221545][ T976] usb 5-1: Using ep0 maxpacket: 32 [ 350.233113][ T976] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 350.248373][ T976] usb 5-1: config 0 has no interface number 0 [ 350.256613][ T976] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 350.276327][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.287974][ T976] usb 5-1: Product: syz [ 350.296027][ T976] usb 5-1: Manufacturer: syz [ 350.308069][ T976] usb 5-1: SerialNumber: syz [ 350.318964][ T976] usb 5-1: config 0 descriptor?? [ 350.326716][ T976] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 350.536210][ T30] audit: type=1400 audit(2000000186.578:4727): avc: denied { remount } for pid=16475 comm="syz.0.4383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 350.538850][ T976] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 350.607079][ T976] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 351.021609][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 351.022323][ T24] usb 5-1: USB disconnect, device number 47 [ 351.089308][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 351.108549][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 351.129611][ T24] quatech2 5-1:0.51: device disconnected [ 351.168348][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 351.330383][ T976] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 351.489050][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 351.495326][ T976] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 351.505346][ T976] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 351.515212][ T976] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 351.525260][ T976] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.540726][ T976] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 351.554379][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.768697][ T976] usb 4-1: GET_CAPABILITIES returned 0 [ 351.775125][ T976] usbtmc 4-1:16.0: can't read capabilities [ 351.976425][ T976] usb 4-1: USB disconnect, device number 49 [ 352.038680][T16535] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4408'. [ 352.047663][T16535] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4408'. [ 352.208330][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 352.356177][T16538] netlink: 'syz.5.4409': attribute type 13 has an invalid length. [ 352.440715][T16538] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 352.522250][T16555] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4416'. [ 353.258314][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 353.347027][T16607] bridge_slave_0: left allmulticast mode [ 353.355624][T16607] bridge_slave_0: left promiscuous mode [ 353.361461][T16607] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.383673][T16607] bridge_slave_1: left allmulticast mode [ 353.395040][T16607] bridge_slave_1: left promiscuous mode [ 353.401162][T16607] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.415315][T16607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.423956][T16607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.432455][T16607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.440778][T16607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.548875][ T78] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 353.708460][ T78] usb 5-1: Using ep0 maxpacket: 16 [ 353.716583][T16627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 353.726113][ T78] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 353.745620][ T78] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.764111][ T78] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.777137][ T78] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.787781][ T78] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.798023][ T78] usb 5-1: Product: syz [ 353.802858][ T78] usb 5-1: Manufacturer: syz [ 353.807620][ T78] usb 5-1: SerialNumber: syz [ 353.867161][T16636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.081100][ T30] audit: type=1400 audit(2000000190.128:4728): avc: denied { watch } for pid=16643 comm="syz.1.4457" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 354.117150][T12200] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 354.229891][ T78] usb 5-1: 0:2 : does not exist [ 354.281214][T12200] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 354.292330][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 354.304857][T16654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4461'. [ 354.318367][T12200] usb 6-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 354.334366][T12200] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.342841][ T30] audit: type=1400 audit(2000000190.368:4729): avc: denied { bind } for pid=16655 comm="syz.3.4462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 354.370648][T12200] usb 6-1: config 0 descriptor?? [ 354.376630][T16634] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 354.380822][T16658] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4463'. [ 354.553510][T16666] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 354.566881][T16666] overlayfs: maximum fs stacking depth exceeded [ 354.765240][ T30] audit: type=1400 audit(2000000446.805:4730): avc: denied { execute } for pid=16675 comm="syz.1.4470" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.812809][T12200] chicony 0003:04F2:1421.0037: hidraw0: USB HID v1.01 Device [HID 04f2:1421] on usb-dummy_hcd.5-1/input0 [ 354.843522][ T78] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 354.880003][ T78] usb 5-1: USB disconnect, device number 48 [ 354.971929][T16682] syzkaller1: left promiscuous mode [ 354.977233][T16682] syzkaller1: left allmulticast mode [ 355.023604][ T5957] usb 6-1: USB disconnect, device number 16 [ 355.085451][T16688] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 355.100674][T16688] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 355.255503][T16697] openvswitch: netlink: IPv4 tun info is not correct [ 355.337966][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 355.613759][T16718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4489'. [ 355.625185][T16718] netlink: 'syz.0.4489': attribute type 7 has an invalid length. [ 355.633631][T16718] netlink: 'syz.0.4489': attribute type 8 has an invalid length. [ 355.642146][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4489'. [ 355.657081][T16718] gretap0: entered promiscuous mode [ 355.663941][T16718] batadv_slave_1: entered promiscuous mode [ 355.671199][T16718] erspan0: entered promiscuous mode [ 356.027664][ T5950] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 356.027715][ T5927] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 356.198513][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 356.205005][ T5950] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 356.208881][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.215813][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.236021][ T5927] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 356.238011][ T5950] usb 1-1: config 0 descriptor?? [ 356.256225][ T5950] cp210x 1-1:0.0: cp210x converter detected [ 356.257566][ T5927] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 356.275679][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.287710][ T5927] usb 2-1: config 0 descriptor?? [ 356.367529][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 356.478544][ T30] audit: type=1400 audit(2000000448.526:4731): avc: denied { remount } for pid=16756 comm="syz.4.4505" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 356.549865][ T5957] usb 2-1: USB disconnect, device number 44 [ 356.659640][ T5950] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 356.806383][ T30] audit: type=1400 audit(2000000448.846:4732): avc: denied { connect } for pid=16769 comm="syz.3.4511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 356.847358][ T5927] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 356.877556][ T5950] usb 1-1: cp210x converter now attached to ttyUSB0 [ 356.990736][ T30] audit: type=1400 audit(2000000449.036:4733): avc: denied { execute } for pid=16780 comm="syz.3.4516" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 357.018011][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 357.024934][ T5927] usb 5-1: config 0 has no interfaces? [ 357.053518][ T5927] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 357.077418][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.085476][ T5927] usb 5-1: Product: syz [ 357.100212][ T5927] usb 5-1: Manufacturer: syz [ 357.100923][ T5950] usb 1-1: USB disconnect, device number 44 [ 357.104830][ T5927] usb 5-1: SerialNumber: syz [ 357.127785][ T5950] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 357.138575][ T5927] usb 5-1: config 0 descriptor?? [ 357.152033][ T5950] cp210x 1-1:0.0: device disconnected [ 357.406934][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 357.432308][ T5950] usb 5-1: USB disconnect, device number 49 [ 358.179346][ T30] audit: type=1400 audit(2000000450.157:4734): avc: denied { watch watch_reads } for pid=16829 comm="syz.4.4536" path="/941/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 358.203009][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.456405][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 358.876838][ T5957] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 359.010284][ T5950] hid-generic 0005:16BF:5505.0038: unknown main item tag 0x0 [ 359.027226][ T5950] hid-generic 0005:16BF:5505.0038: unknown main item tag 0x0 [ 359.049316][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.065275][ T5950] hid-generic 0005:16BF:5505.0038: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 359.078795][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.092519][ T5957] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 359.116355][ T5957] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 359.146184][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.171987][ T5957] usb 2-1: config 0 descriptor?? [ 359.485884][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 359.595705][ T5957] plantronics 0003:047F:FFFF.0039: reserved main item tag 0xd [ 359.613707][ T5957] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 359.748217][T16886] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.760326][T16886] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.796154][ T78] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 359.821382][T12200] usb 2-1: USB disconnect, device number 45 [ 359.846014][T16886] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.856914][T16886] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.927370][T16886] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.938662][T16886] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.959014][ T78] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.969460][ T78] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 359.978784][ T78] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 359.988341][ T78] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.998982][ T78] usb 5-1: config 0 descriptor?? [ 360.006638][ T78] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 360.013453][ T78] dvb-usb: bulk message failed: -22 (3/0) [ 360.025040][ T78] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 360.041734][ T78] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 360.045354][T16886] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.050196][ T78] usb 5-1: media controller created [ 360.063807][T16886] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.067077][ T78] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.086203][ T78] dvb-usb: bulk message failed: -22 (6/0) [ 360.091984][ T78] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 360.100533][ T78] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input59 [ 360.112664][ T78] dvb-usb: schedule remote query interval to 150 msecs. [ 360.119802][ T78] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 360.152329][ T3688] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.162274][ T3688] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.179192][ T3688] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.187744][ T3688] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.214165][ T3688] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.223620][ T3688] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.232182][ T3688] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.241066][ T3688] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.277244][ T78] dvb-usb: bulk message failed: -22 (1/0) [ 360.283368][ T78] dvb-usb: error while querying for an remote control event. [ 360.434134][ T976] usb 5-1: USB disconnect, device number 50 [ 360.456895][ T976] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 360.507747][T16900] syzkaller1: entered promiscuous mode [ 360.513280][T16900] syzkaller1: entered allmulticast mode [ 360.525532][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 360.608422][T16908] netlink: 'syz.1.4567': attribute type 4 has an invalid length. [ 360.825541][ T5950] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 360.978705][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.000045][ T5950] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 361.020223][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.039331][ T5950] usb 1-1: config 0 descriptor?? [ 361.251631][ T5950] usbhid 1-1:0.0: can't add hid device: -71 [ 361.265066][ T5950] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 361.277276][ T5950] usb 1-1: USB disconnect, device number 45 [ 361.325283][ T5858] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 361.564864][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 361.610198][T16928] netlink: 'syz.3.4576': attribute type 22 has an invalid length. [ 361.622182][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4576'. [ 361.676877][T16928] netlink: 'syz.3.4576': attribute type 22 has an invalid length. [ 361.685499][ T3688] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.698868][ T3688] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.707968][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4576'. [ 361.720233][ T3688] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.731334][ T3688] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.750425][ T5950] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 361.936963][ T5950] usb 1-1: Using ep0 maxpacket: 32 [ 361.957197][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.985693][ T5950] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 361.995874][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.009278][ T5950] usb 1-1: config 0 descriptor?? [ 362.032439][ T5950] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 362.043616][ T5950] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 362.246979][T16940] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4582'. [ 362.279629][T16940] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4582'. [ 362.301662][ T30] audit: type=1400 audit(2000000454.349:4735): avc: denied { unmount } for pid=16943 comm="syz.4.4584" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 362.388496][T16946] netlink: 'syz.1.4586': attribute type 1 has an invalid length. [ 362.396500][ T30] audit: type=1326 audit(2000000454.439:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16948 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf4f8ebe9 code=0x50000 [ 362.420444][ T30] audit: type=1326 audit(2000000454.439:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16948 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf4f8ebe9 code=0x50000 [ 362.437412][ T9] usb 1-1: USB disconnect, device number 46 [ 362.444114][ T30] audit: type=1326 audit(2000000454.439:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16948 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf4f8ebe9 code=0x50000 [ 362.457390][ T9] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 362.474005][ T30] audit: type=1326 audit(2000000454.439:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16948 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf4f8ebe9 code=0x50000 [ 362.504052][ T30] audit: type=1326 audit(2000000454.439:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16948 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf4f8ebe9 code=0x50000 [ 362.528609][ T30] audit: type=1326 audit(2000000454.439:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16948 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf4f8ebe9 code=0x50000 [ 362.552715][ T30] audit: type=1326 audit(2000000454.439:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16948 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf4f8ebe9 code=0x50000 [ 362.576367][ T30] audit: type=1326 audit(2000000454.439:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16948 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf4f8ebe9 code=0x50000 [ 362.601207][ T30] audit: type=1326 audit(2000000454.439:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16948 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf4f8ebe9 code=0x50000 [ 362.624586][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 362.634513][ T5950] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 362.653930][T16953] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 362.794309][ T5950] usb 4-1: Using ep0 maxpacket: 8 [ 362.800951][ T5950] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 362.816262][ T5950] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 362.827423][ T5950] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 362.839542][ T5950] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.853082][ T5950] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 362.862376][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.954298][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 362.997027][T16957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4590'. [ 363.008476][T16957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4590'. [ 363.017787][T16957] netlink: 'syz.0.4590': attribute type 20 has an invalid length. [ 363.029546][T16957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4590'. [ 363.038734][T16957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4590'. [ 363.047800][T16957] netlink: 'syz.0.4590': attribute type 20 has an invalid length. [ 363.086339][ T5950] usb 4-1: GET_CAPABILITIES returned 0 [ 363.101114][T16959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4591'. [ 363.102128][ T5950] usbtmc 4-1:16.0: can't read capabilities [ 363.116826][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 363.134978][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.157627][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 218, using maximum allowed: 30 [ 363.168981][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 218 [ 363.184491][ T9] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 363.193875][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.202315][ T9] usb 2-1: Product: syz [ 363.206642][ T9] usb 2-1: Manufacturer: syz [ 363.211583][ T9] usb 2-1: SerialNumber: syz [ 363.218211][ T9] usb 2-1: config 0 descriptor?? [ 363.311367][ T78] usb 4-1: USB disconnect, device number 50 [ 363.445230][ T5950] usb 2-1: USB disconnect, device number 46 [ 363.643965][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 363.703851][ T9] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 363.865533][ T9] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 363.873880][ T9] usb 5-1: config 0 has no interface number 0 [ 363.881912][ T9] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 363.892057][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.902863][ T9] usb 5-1: Product: syz [ 363.907143][ T9] usb 5-1: Manufacturer: syz [ 363.911762][ T9] usb 5-1: SerialNumber: syz [ 363.919137][ T9] usb 5-1: config 0 descriptor?? [ 364.044159][ T48] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 364.143579][ T78] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 364.295558][ T78] usb 4-1: Using ep0 maxpacket: 32 [ 364.304063][ T78] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.316929][ T78] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.326790][ T78] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 364.335950][ T78] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.346233][ T78] usb 4-1: config 0 descriptor?? [ 364.573558][ T976] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 364.683292][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 364.743379][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 364.750182][ T976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.759303][ T78] savu 0003:1E7D:2D5A.003A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 364.760854][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 364.782992][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 364.793980][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 364.803711][ T976] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 364.817906][ T976] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 364.827200][ T976] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 364.835378][ T976] usb 1-1: Manufacturer: syz [ 364.842437][ T976] usb 1-1: config 0 descriptor?? [ 364.936967][ T9] usb 5-1: non-Atmel transceiver xxxx4f0c [ 364.964607][ T5950] usb 4-1: USB disconnect, device number 51 [ 365.124720][ T976] rc_core: IR keymap rc-hauppauge not found [ 365.130784][ T976] Registered IR keymap rc-empty [ 365.139231][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 365.146780][ T9] usb 5-1: Firmware version (0.0) predates our first public release. [ 365.159786][ T9] usb 5-1: Please update to version 0.2 or newer [ 365.167499][ T9] usb 5-1: atusb_probe: initialization failed, error = -19 [ 365.175142][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 365.185759][ T9] usb 5-1: USB disconnect, device number 51 [ 365.204458][ T976] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 365.217447][ T976] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input60 [ 365.231808][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 365.253251][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 365.273368][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 365.294341][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 365.313213][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 365.333615][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 365.353492][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 365.373146][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 365.393026][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 365.413054][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 365.434219][ T976] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 365.443509][ T976] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 365.565675][ T78] usb 1-1: USB disconnect, device number 47 [ 365.617676][T16999] input: syz1 as /devices/virtual/input/input61 [ 365.625075][T16999] input: failed to attach handler leds to device input61, error: -6 [ 365.722774][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 366.442482][ T78] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 366.622981][ T78] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 366.631117][ T78] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 366.682361][ T78] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 366.712273][ T78] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 366.752458][ T78] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 366.761529][ T78] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.769593][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 366.824580][ T78] usb 1-1: config 0 descriptor?? [ 366.832501][T17009] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 367.268319][ T78] plantronics 0003:047F:FFFF.003B: reserved main item tag 0xd [ 367.300743][ T78] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 367.519456][ T976] usb 1-1: USB disconnect, device number 48 [ 367.811716][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 368.311786][ T5950] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 368.501831][ T5950] usb 6-1: Using ep0 maxpacket: 16 [ 368.508637][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.520742][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.541425][ T5950] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 368.598983][ T5950] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 368.633641][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.670573][ T5950] usb 6-1: config 0 descriptor?? [ 368.742671][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 368.742687][ T30] audit: type=1400 audit(2000000460.802:4805): avc: denied { module_load } for pid=17068 comm="syz.1.4632" path="/sys/power/wakeup_count" dev="sysfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 368.801346][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 368.841254][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 368.851219][ T5927] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 368.981213][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 368.988173][ T9] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 369.002658][ T9] usb 5-1: config 0 has no interface number 0 [ 369.003313][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.024388][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 369.030424][ T30] audit: type=1400 audit(2000000461.082:4806): avc: denied { allowed } for pid=17074 comm="syz.1.4633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 369.041203][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.075155][ T5927] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 369.091105][ T9] usb 5-1: Product: syz [ 369.095334][ T9] usb 5-1: Manufacturer: syz [ 369.111309][ T5927] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 369.136480][ T9] usb 5-1: SerialNumber: syz [ 369.144765][ T5950] shield 0003:0955:7214.003C: unknown main item tag 0x0 [ 369.150904][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.155861][ T5950] shield 0003:0955:7214.003C: unknown main item tag 0x0 [ 369.168385][ T9] usb 5-1: config 0 descriptor?? [ 369.168867][ T5927] usb 1-1: config 0 descriptor?? [ 369.175985][ T5950] shield 0003:0955:7214.003C: unknown main item tag 0x0 [ 369.193864][ T9] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 369.211861][ T5950] shield 0003:0955:7214.003C: unknown main item tag 0x0 [ 369.229094][ T5950] shield 0003:0955:7214.003C: unknown main item tag 0x0 [ 369.239875][ T5950] input: HID 0955:7214 Haptics as /devices/virtual/input/input63 [ 369.304867][ T5950] shield 0003:0955:7214.003C: Registered Thunderstrike controller [ 369.320677][ T5950] shield 0003:0955:7214.003C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 369.344961][T17057] netlink: 'syz.5.4626': attribute type 2 has an invalid length. [ 369.356527][T17057] netlink: 244 bytes leftover after parsing attributes in process `syz.5.4626'. [ 369.400711][ T976] shield 0003:0955:7214.003C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 369.420043][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 369.436884][ T5950] usb 6-1: USB disconnect, device number 17 [ 369.446786][ T976] shield 0003:0955:7214.003C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 369.477195][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 369.503150][ T976] shield 0003:0955:7214.003C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 369.532260][ T976] shield 0003:0955:7214.003C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 369.604021][ T5927] kovaplus 0003:1E7D:2D50.003D: unknown main item tag 0x0 [ 369.620879][ T5927] kovaplus 0003:1E7D:2D50.003D: unknown main item tag 0x0 [ 369.634405][ T5927] kovaplus 0003:1E7D:2D50.003D: unknown main item tag 0x0 [ 369.653582][ T5927] kovaplus 0003:1E7D:2D50.003D: unknown main item tag 0x0 [ 369.667145][ T5927] kovaplus 0003:1E7D:2D50.003D: unknown main item tag 0x0 [ 369.689005][ T5927] kovaplus 0003:1E7D:2D50.003D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 369.867886][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 369.875870][ T5950] usb 5-1: USB disconnect, device number 52 [ 369.889652][ T5950] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 369.890680][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 369.932901][ T5950] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 369.959467][ T5950] quatech2 5-1:0.51: device disconnected [ 370.005205][ T5927] kovaplus 0003:1E7D:2D50.003D: couldn't init struct kovaplus_device [ 370.013978][ T5927] kovaplus 0003:1E7D:2D50.003D: couldn't install mouse [ 370.022566][ T5927] kovaplus 0003:1E7D:2D50.003D: probe with driver kovaplus failed with error -5 [ 370.322474][ T5927] usb 1-1: USB disconnect, device number 49 [ 370.744610][ T30] audit: type=1400 audit(2000000462.803:4807): avc: denied { bind } for pid=17098 comm="syz.5.4643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 370.920216][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 371.191322][ T5950] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 371.360066][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 371.374400][ T5950] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 371.388198][ T5950] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.429325][ T5950] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 371.458260][ T5950] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 371.468621][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.489099][ T5950] usb 1-1: Product: syz [ 371.496737][ T5950] usb 1-1: Manufacturer: syz [ 371.507472][ T5950] usb 1-1: SerialNumber: syz [ 371.937949][ T5950] usb 1-1: 0:2 : does not exist [ 371.959652][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 372.919506][T17156] kernel read not supported for file /!sel (pid: 17156 comm: syz.4.4662) [ 372.952487][T17158] Bluetooth: hci0: invalid len left 7, exp >= 131 [ 372.968909][ T5950] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 372.988776][ T30] audit: type=1800 audit(2000000465.034:4808): pid=17156 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.4662" name="!sel" dev="mqueue" ino=64515 res=0 errno=0 [ 373.009930][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 373.043923][ T5950] usb 1-1: USB disconnect, device number 50 [ 373.531153][ T5927] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 373.569014][ T30] audit: type=1400 audit(2000000465.614:4809): avc: denied { read } for pid=17179 comm="syz.3.4671" path="socket:[64548]" dev="sockfs" ino=64548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 373.599335][T17180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4672'. [ 373.731664][ T5927] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.741836][ T5927] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.777441][ T5927] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 373.786985][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 373.797661][ T5927] usb 5-1: SerialNumber: syz [ 373.888946][ T5950] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 374.038685][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 374.069350][ T5927] usb 5-1: 0:2 : does not exist [ 374.078816][ T5950] usb 1-1: Using ep0 maxpacket: 32 [ 374.103656][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.116060][ T5927] usb 5-1: USB disconnect, device number 53 [ 374.122296][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.136182][ T5950] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 374.147986][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.159341][ T5950] usb 1-1: config 0 descriptor?? [ 374.170336][ T5950] hub 1-1:0.0: USB hub found [ 374.207446][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 374.226523][T17191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4677'. [ 374.240209][T17191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4677'. [ 374.252663][T17191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4677'. [ 374.266540][T17189] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 374.268065][T17191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4677'. [ 374.376734][ T5950] hub 1-1:0.0: 1 port detected [ 375.002383][ T5950] hub 1-1:0.0: activate --> -90 [ 375.078182][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 375.405640][ T5950] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 375.405891][T12200] usb 1-1: USB disconnect, device number 51 [ 375.449841][ T5950] usb 1-1-port1: connect-debounce failed [ 375.960757][T17214] kexec: Could not allocate control_code_buffer [ 376.117566][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 377.126324][T17276] overlayfs: upper fs does not support file handles, falling back to index=off. [ 377.157129][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 377.251023][T17281] binder: 17280:17281 ioctl c0306201 2000000001c0 returned -14 [ 377.596925][ T976] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 377.749471][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.765027][ T30] audit: type=1400 audit(2000000469.816:4810): avc: denied { read } for pid=17303 comm="syz.4.4725" lport=44213 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 377.766784][ T976] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 377.788539][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.805032][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.817359][ T976] usb 1-1: config 0 descriptor?? [ 377.844573][ T30] audit: type=1400 audit(2000000469.896:4811): avc: denied { setopt } for pid=17303 comm="syz.4.4725" lport=44213 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 377.936910][ T5950] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 378.036831][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 378.098506][ T5950] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 378.109891][ T5950] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.132736][ T5950] usb 4-1: config 0 interface 0 has no altsetting 0 [ 378.147820][ T5950] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 378.176675][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.196629][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 378.210315][ T5950] usb 4-1: config 0 descriptor?? [ 378.234912][ T976] holtek 0003:1241:5015.003E: item fetching failed at offset 1/5 [ 378.250454][ T976] holtek 0003:1241:5015.003E: parse failed [ 378.257085][ T976] holtek 0003:1241:5015.003E: probe with driver holtek failed with error -22 [ 378.348862][T17334] netlink: 'syz.4.4738': attribute type 19 has an invalid length. [ 378.360664][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.371611][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4738'. [ 378.390651][ T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.390750][T17334] netlink: 'syz.4.4738': attribute type 19 has an invalid length. [ 378.407291][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4738'. [ 378.410071][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.435277][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.447521][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.481554][ T9] usb 1-1: USB disconnect, device number 52 [ 378.531176][T17342] binder: 17340:17342 ioctl c0306201 200000000640 returned -22 [ 378.608021][ T5927] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 378.658855][ T5950] hid-steam 0003:28DE:1102.003F: unknown main item tag 0x0 [ 378.669661][ T5950] hid-steam 0003:28DE:1102.003F: unknown main item tag 0x0 [ 378.678843][ T5950] hid-steam 0003:28DE:1102.003F: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 378.747422][ T5950] hid-steam 0003:28DE:1102.003F: Steam Controller 'XXXXXXXXXX' connected [ 378.760759][ T5950] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.003F/input/input65 [ 378.766390][T12200] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 378.779848][ T5950] hid-steam 0003:28DE:1102.0040: unknown main item tag 0x0 [ 378.780516][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 378.791108][ T5950] hid-steam 0003:28DE:1102.0040: unknown main item tag 0x0 [ 378.795221][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.807889][ T5950] hid-steam 0003:28DE:1102.0040: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 378.811119][ T5927] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 378.833044][ T5927] usb 2-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 378.846317][ T5927] usb 2-1: config 0 interface 0 has no altsetting 1 [ 378.855420][ T5927] usb 2-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 378.865183][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.873894][ T5927] usb 2-1: Product: syz [ 378.880556][ T5927] usb 2-1: Manufacturer: syz [ 378.885203][ T5927] usb 2-1: SerialNumber: syz [ 378.895563][ T5927] usb 2-1: config 0 descriptor?? [ 378.906841][ T5927] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.910664][ T5950] usb 4-1: USB disconnect, device number 52 [ 378.936327][T12200] usb 6-1: Using ep0 maxpacket: 16 [ 378.942908][T12200] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 378.944313][ T5950] hid-steam 0003:28DE:1102.003F: Steam Controller 'XXXXXXXXXX' disconnected [ 378.953340][T12200] usb 6-1: config 0 has no interface number 0 [ 378.968333][T12200] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 378.984377][ T5927] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 378.996884][T12200] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 379.016116][T12200] usb 6-1: config 0 interface 41 has no altsetting 0 [ 379.024664][T12200] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 379.037527][T12200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.045542][T12200] usb 6-1: Product: syz [ 379.049847][T12200] usb 6-1: Manufacturer: syz [ 379.054467][T12200] usb 6-1: SerialNumber: syz [ 379.069123][T12200] usb 6-1: config 0 descriptor?? [ 379.076720][T17343] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 379.084015][T17343] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 379.147282][ T5927] usb 2-1: USB disconnect, device number 47 [ 379.236050][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 379.303253][T17343] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 379.310738][T17343] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 379.406038][ T5914] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 379.561819][ T5914] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 379.573994][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 379.585601][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 379.597694][ T5914] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 379.614503][ T5914] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 379.623895][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.641406][ T5914] usb 1-1: config 0 descriptor?? [ 379.649779][T17369] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 379.821891][T17379] netlink: 'syz.1.4759': attribute type 2 has an invalid length. [ 379.905724][ T5927] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 379.925771][T12200] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 380.058455][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 380.066693][ T5927] usb 4-1: config 127 has an invalid interface number: 171 but max is 1 [ 380.077222][ T5914] plantronics 0003:047F:FFFF.0041: reserved main item tag 0xd [ 380.085797][ T5927] usb 4-1: config 127 has no interface number 1 [ 380.095672][ T5927] usb 4-1: config 127 interface 0 altsetting 10 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 380.108480][ T5927] usb 4-1: config 127 interface 0 altsetting 10 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 380.142041][ T5914] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 380.156673][T12200] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 380.169766][ T5927] usb 4-1: config 127 interface 0 altsetting 10 endpoint 0x8F has invalid wMaxPacketSize 0 [ 380.185136][T12200] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 380.197283][ T5927] usb 4-1: config 127 interface 171 has no altsetting 0 [ 380.205216][T12200] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 380.216062][ T5927] usb 4-1: config 127 interface 0 has no altsetting 0 [ 380.232198][ T5927] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 380.242776][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.254812][ T5927] usb 4-1: Product: syz [ 380.259341][T12200] usb 6-1: USB disconnect, device number 18 [ 380.275571][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 380.292797][ T5927] usb 4-1: Manufacturer: syz [ 380.305873][ T5927] usb 4-1: SerialNumber: syz [ 380.374148][ T5950] usb 1-1: USB disconnect, device number 53 [ 380.539589][ T5927] xr_serial 4-1:127.171: xr_serial converter detected [ 380.551315][ T5927] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 380.558489][ T5927] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 380.572812][ T5927] usb 4-1: USB disconnect, device number 53 [ 380.582024][ T5927] xr_serial 4-1:127.171: device disconnected [ 380.700651][T17400] overlayfs: failed to set uuid (929/file1, err=-1); falling back to uuid=null. [ 380.714394][T17400] overlayfs: failed to verify upper root origin [ 380.815869][ T30] audit: type=1400 audit(2000000472.868:4812): avc: denied { read } for pid=17401 comm="syz.1.4769" path="socket:[64096]" dev="sockfs" ino=64096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 381.260408][T17410] netlink: 'syz.5.4774': attribute type 1 has an invalid length. [ 381.315014][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 381.385691][T17410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.806498][ T5950] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 381.835229][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 381.966282][ T5950] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.987846][ T5950] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 381.997158][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 382.003439][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.012754][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 382.024612][ T9] usb 2-1: config 0 has no interface number 0 [ 382.030737][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 382.038528][ T5950] usb 1-1: Product: syz [ 382.042720][ T5950] usb 1-1: Manufacturer: syz [ 382.049809][ T5950] usb 1-1: SerialNumber: syz [ 382.056527][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 382.064805][ T5927] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 382.066929][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.085202][ T9] usb 2-1: Product: syz [ 382.101583][ T9] usb 2-1: Manufacturer: syz [ 382.111671][ T9] usb 2-1: SerialNumber: syz [ 382.123920][ T9] usb 2-1: config 0 descriptor?? [ 382.135000][ T9] smsc75xx v1.0.0 [ 382.236072][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 382.245852][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.257263][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.267905][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 382.281159][ T5927] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 382.292326][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.302441][ T5927] usb 5-1: config 0 descriptor?? [ 382.354539][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 382.737591][ T5927] shield 0003:0955:7214.0042: unknown main item tag 0x0 [ 382.745185][ T5927] shield 0003:0955:7214.0042: unknown main item tag 0x0 [ 382.752253][ T5927] shield 0003:0955:7214.0042: unknown main item tag 0x0 [ 382.762981][ T5927] shield 0003:0955:7214.0042: unknown main item tag 0x0 [ 382.770379][ T5927] shield 0003:0955:7214.0042: unknown main item tag 0x0 [ 382.782577][ T5927] input: HID 0955:7214 Haptics as /devices/virtual/input/input67 [ 382.806214][ T5927] shield 0003:0955:7214.0042: Registered Thunderstrike controller [ 382.816606][ T5927] shield 0003:0955:7214.0042: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 382.980540][T17435] netlink: 'syz.4.4782': attribute type 2 has an invalid length. [ 382.988458][T17435] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4782'. [ 383.003917][T12200] shield 0003:0955:7214.0042: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 383.004425][ T976] usb 5-1: USB disconnect, device number 54 [ 383.023309][T12200] shield 0003:0955:7214.0042: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 383.042087][T12200] shield 0003:0955:7214.0042: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 383.061231][T12200] shield 0003:0955:7214.0042: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 383.115907][ T5950] cdc_ncm 1-1:1.0: bind() failure [ 383.142953][ T5950] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 383.156080][ T5950] cdc_ncm 1-1:1.1: bind() failure [ 383.194554][T17452] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.217798][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.225010][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.352898][T12200] usb 1-1: USB disconnect, device number 54 [ 383.356506][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 383.370530][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 383.394069][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 383.403226][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 383.436374][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 383.456472][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 383.505561][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 383.524426][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 383.557535][ T9] usb 2-1: USB disconnect, device number 48 [ 384.286933][ T976] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 384.323017][T17479] bridge: RTM_NEWNEIGH with invalid ether address [ 384.433474][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 384.442383][T17488] SELinux: unknown common  [ 384.453304][T17488] SELinux: failed to load policy [ 384.460972][ T976] usb 2-1: Using ep0 maxpacket: 16 [ 384.472323][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.500012][ T976] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 384.548121][ T976] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 384.562330][T17492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 384.576497][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.597692][ T976] usb 2-1: config 0 descriptor?? [ 384.945658][ T976] usbhid 2-1:0.0: can't add hid device: -71 [ 384.978285][ T976] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 384.989558][ T976] usb 2-1: USB disconnect, device number 49 [ 385.393055][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 385.472962][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 385.538332][T12200] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 385.734919][T12200] usb 1-1: Using ep0 maxpacket: 8 [ 385.746546][T12200] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 385.755690][T12200] usb 1-1: config 179 has no interface number 0 [ 385.762019][T12200] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 385.812824][T12200] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 385.824210][T12200] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 385.855377][T12200] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 385.902670][T12200] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 385.911741][T12200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.949987][T17508] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 386.187828][T17529] syz.1.4824: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 386.208330][T17529] CPU: 0 UID: 0 PID: 17529 Comm: syz.1.4824 Not tainted syzkaller #0 PREEMPT(full) [ 386.208356][T17529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 386.208369][T17529] Call Trace: [ 386.208376][T17529] [ 386.208383][T17529] dump_stack_lvl+0x16c/0x1f0 [ 386.208411][T17529] warn_alloc+0x248/0x3a0 [ 386.208433][T17529] ? __pfx_warn_alloc+0x10/0x10 [ 386.208451][T17529] ? __pfx_stack_trace_save+0x10/0x10 [ 386.208486][T17529] ? kasan_save_stack+0x42/0x60 [ 386.208504][T17529] ? kasan_save_stack+0x33/0x60 [ 386.208521][T17529] ? kasan_save_track+0x14/0x30 [ 386.208540][T17529] ? xskq_create+0x52/0x1d0 [ 386.208556][T17529] ? xsk_setsockopt+0x792/0x9a0 [ 386.208580][T17529] ? do_sock_setsockopt+0xf0/0x1d0 [ 386.208606][T17529] ? xskq_create+0xfb/0x1d0 [ 386.208622][T17529] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 386.208658][T17529] ? xskq_create+0xfb/0x1d0 [ 386.208682][T17529] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 386.208716][T17529] ? xskq_create+0xfb/0x1d0 [ 386.208740][T17529] vmalloc_user_noprof+0x9e/0xe0 [ 386.208766][T17529] ? xskq_create+0xfb/0x1d0 [ 386.208784][T17529] xskq_create+0xfb/0x1d0 [ 386.208804][T17529] xsk_setsockopt+0x792/0x9a0 [ 386.208830][T17529] ? __pfx_xsk_setsockopt+0x10/0x10 [ 386.208857][T17529] ? find_held_lock+0x2b/0x80 [ 386.208884][T17529] ? selinux_socket_setsockopt+0x6a/0x80 [ 386.208909][T17529] ? __pfx_xsk_setsockopt+0x10/0x10 [ 386.208936][T17529] do_sock_setsockopt+0xf0/0x1d0 [ 386.208963][T17529] __sys_setsockopt+0x1a0/0x230 [ 386.208984][T17529] __x64_sys_setsockopt+0xbd/0x160 [ 386.209002][T17529] ? do_syscall_64+0x91/0x4c0 [ 386.209022][T17529] ? lockdep_hardirqs_on+0x7c/0x110 [ 386.209042][T17529] do_syscall_64+0xcd/0x4c0 [ 386.209064][T17529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.209083][T17529] RIP: 0033:0x7f3ccfb8ebe9 [ 386.209098][T17529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.209116][T17529] RSP: 002b:00007f3cd09f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 386.209133][T17529] RAX: ffffffffffffffda RBX: 00007f3ccfdb5fa0 RCX: 00007f3ccfb8ebe9 [ 386.209144][T17529] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 386.209154][T17529] RBP: 00007f3ccfc11e19 R08: 0000000000000004 R09: 0000000000000000 [ 386.209165][T17529] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 386.209175][T17529] R13: 00007f3ccfdb6038 R14: 00007f3ccfdb5fa0 R15: 00007ffcba762f68 [ 386.209199][T17529] [ 386.209207][T17529] Mem-Info: [ 386.351615][ T5927] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input68 [ 386.365094][T17529] active_anon:27914 inactive_anon:1 isolated_anon:8 [ 386.365094][T17529] active_file:12167 inactive_file:51851 isolated_file:0 [ 386.365094][T17529] unevictable:752 dirty:484 writeback:0 [ 386.365094][T17529] slab_reclaimable:9455 slab_unreclaimable:129878 [ 386.365094][T17529] mapped:29538 shmem:21084 pagetables:1905 [ 386.365094][T17529] sec_pagetables:0 bounce:0 [ 386.365094][T17529] kernel_misc_reclaimable:0 [ 386.365094][T17529] free:1238917 free_pcp:16271 free_cma:0 [ 386.512484][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 386.534881][T17529] Node 0 active_anon:111556kB inactive_anon:4kB active_file:48612kB inactive_file:207200kB unevictable:1472kB isolated(anon):32kB isolated(file):0kB mapped:118096kB dirty:1936kB writeback:0kB shmem:82800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13076kB pagetables:7704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 386.570739][T17529] Node 1 active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 386.620616][T12200] usb 1-1: USB disconnect, device number 55 [ 386.626845][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 386.626895][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 386.644757][T17529] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 386.674919][T17529] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 386.680881][T17529] Node 0 DMA32 free:1056004kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:111560kB inactive_anon:4kB active_file:48612kB inactive_file:205888kB unevictable:1536kB writepending:1952kB present:3129332kB managed:2539364kB mlocked:0kB bounce:0kB free_pcp:42288kB local_pcp:23404kB free_cma:0kB [ 386.714562][ T5844] Bluetooth: hci5: command 0x1003 tx timeout [ 386.725521][ T5858] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 386.726499][T17529] lowmem_reserve[]: 0 0 1 1 1 [ 386.759841][T17529] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB [ 386.772277][ T5927] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 386.793409][T17529] lowmem_reserve[]: 0 0 0 0 0 [ 386.801943][T17529] Node 1 Normal free:3885196kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22528kB local_pcp:8832kB free_cma:0kB [ 386.837449][T17529] lowmem_reserve[]: 0 0 0 0 0 [ 386.846697][T17529] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 386.861142][T17529] Node 0 DMA32: 2032*4kB (UM) 811*8kB (UME) 475*16kB (UME) 652*32kB (UME) 202*64kB (UME) 121*128kB (UME) 78*256kB (UME) 32*512kB (UME) 19*1024kB (UME) 9*2048kB (UME) 223*4096kB (UM) = 1059144kB [ 386.880933][T17529] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 386.893270][T17529] Node 1 Normal: 213*4kB (UME) 59*8kB (UE) 52*16kB (UE) 149*32kB (UE) 46*64kB (UME) 10*128kB (UME) 5*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (U) 944*4096kB (M) = 3885196kB [ 386.911935][T17529] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 386.922759][T17529] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 386.932048][T17529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 386.941745][T17529] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 386.952051][T17529] 85099 total pagecache pages [ 386.956841][T17529] 1 pages in swap cache [ 386.961570][T17529] Free swap = 124992kB [ 386.965977][T17529] Total swap = 124996kB [ 386.971327][T17529] 2097051 pages RAM [ 386.975661][T17529] 0 pages HighMem/MovableOnly [ 386.980475][T17529] 430248 pages reserved [ 386.991062][T17529] 0 pages cma reserved [ 387.005223][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 387.011893][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.023256][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 387.036803][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 387.047892][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 387.059262][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 387.070670][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 387.080971][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.096859][ T5927] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 387.110724][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.119264][ T5927] usb 5-1: Product: syz [ 387.123571][ T5927] usb 5-1: Manufacturer: syz [ 387.128182][ T5927] usb 5-1: SerialNumber: syz [ 387.135127][ T5927] usb 5-1: config 0 descriptor?? [ 387.140762][T17537] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 387.154262][ T5927] ati_remote 5-1:0.0: Initializing ati_remote hardware failed. [ 387.164575][ T5927] ati_remote 5-1:0.0: probe with driver ati_remote failed with error -5 [ 387.250135][ T976] libceph: connect (1)[c::]:6789 error -101 [ 387.257207][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 387.307533][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 387.316299][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 387.425359][ T976] usb 5-1: USB disconnect, device number 55 [ 387.527302][ T9] libceph: connect (1)[c::]:6789 error -101 [ 387.534172][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 387.551874][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 387.583197][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 387.589299][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 387.891364][ T30] audit: type=1326 audit(2000000479.951:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="syz.1.4844" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ccfb8ebe9 code=0x0 [ 388.047201][ T9] libceph: connect (1)[c::]:6789 error -101 [ 388.059950][T17565] ceph: No mds server is up or the cluster is laggy [ 388.060046][T17561] ceph: No mds server is up or the cluster is laggy [ 388.080281][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 388.132108][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 388.138279][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 388.211191][T17589] 9pnet_fd: Insufficient options for proto=fd [ 388.391501][ T30] audit: type=1400 audit(2000000480.452:4814): avc: denied { module_load } for pid=17592 comm="syz.0.4850" path="/955/bus" dev="tmpfs" ino=4931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 388.396254][T17593] Invalid ELF header magic: != ELF [ 388.518127][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4854'. [ 388.592476][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 389.457979][ T30] audit: type=1400 audit(2000000481.522:4815): avc: denied { append } for pid=17642 comm="syz.0.4872" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 389.638590][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 390.346650][ T30] audit: type=1326 audit(2000000482.413:4816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17673 comm="syz.4.4884" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcbf4f8ebe9 code=0x0 [ 390.695437][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 390.793486][ T30] audit: type=1400 audit(2000000482.863:4817): avc: denied { sqpoll } for pid=17685 comm="syz.1.4890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 391.015160][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4891'. [ 391.070417][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 391.250370][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 391.274451][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.305564][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.327739][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 391.358476][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.402855][ T9] usb 2-1: config 0 descriptor?? [ 391.576487][T17705] netlink: 'syz.4.4897': attribute type 15 has an invalid length. [ 391.589892][T17705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4897'. [ 391.600488][T17705] netlink: 'syz.4.4897': attribute type 15 has an invalid length. [ 391.610050][T17705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4897'. [ 391.677533][T17707] unknown channel width for channel at 909000KHz? [ 391.702890][T17709] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 391.718949][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 391.738613][T17707] unknown channel width for channel at 909000KHz? [ 391.756582][T17707] unknown channel width for channel at 909000KHz? [ 391.863825][ T9] savu 0003:1E7D:2D5A.0043: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 392.045940][ T9] usb 2-1: USB disconnect, device number 50 [ 392.369562][ T976] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 392.529611][ T976] usb 5-1: Using ep0 maxpacket: 16 [ 392.541148][ T976] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 392.582704][ T976] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 392.611671][ T976] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 392.642049][ T976] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 392.683802][ T976] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 392.719706][ T976] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 392.749296][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 392.755991][ T976] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.778955][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 392.795837][ T976] usb 5-1: SerialNumber: syz [ 392.830830][T17717] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 392.844984][ T976] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 392.855905][ T976] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 393.118823][ T976] usb 5-1: USB disconnect, device number 56 [ 393.788732][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 393.833917][T17744] input: syz1 as /devices/virtual/input/input70 [ 393.881558][T17639] Set syz1 is full, maxelem 65536 reached [ 394.297807][T17757] overlayfs: failed to clone upperpath [ 394.304448][T17761] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 394.350445][T17763] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 394.368559][T17763] overlayfs: missing 'lowerdir' [ 394.828219][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 395.765835][T17782] tty tty1: ldisc open failed (-12), clearing slot 0 [ 395.867702][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 396.005107][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4930'. [ 396.043471][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4930'. [ 396.301312][ T30] audit: type=1400 audit(2000000488.366:4818): avc: denied { share } for pid=17797 comm="syz.3.4933" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 396.538780][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.907254][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 397.115737][ T30] audit: type=1400 audit(2000000489.176:4819): avc: denied { search } for pid=17840 comm="syz.5.4950" name="/" dev="configfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 397.142893][T17839] netlink: 'syz.0.4949': attribute type 6 has an invalid length. [ 397.184891][T17843] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4951'. [ 397.209027][ T30] audit: type=1400 audit(2000000489.206:4820): avc: denied { search } for pid=17840 comm="syz.5.4950" name="/" dev="configfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 397.489902][T17851] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4243739199 (8487478398 ns) > initial count (2409167910 ns). Using initial count to start timer. [ 397.827224][ T5914] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 397.946660][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 397.990108][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 398.004846][ T5914] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 398.020042][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.053670][ T5914] usb 5-1: config 0 descriptor?? [ 398.070609][T17855] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 398.181114][ T5858] Bluetooth: hci0: unexpected event for opcode 0x0c1d [ 398.678737][ T5914] elan 0003:04F3:0755.0044: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 398.788395][ T5914] usb 5-1: USB disconnect, device number 57 [ 398.804192][ T976] libceph: connect (1)[c::]:6789 error -101 [ 398.811778][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 398.925919][T12200] libceph: connect (1)[b::]:6789 error -101 [ 398.986123][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 399.061983][T12200] libceph: mon0 (1)[b::]:6789 connect error [ 399.097343][ T976] libceph: connect (1)[c::]:6789 error -101 [ 399.106570][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 399.314449][T17909] loop2: detected capacity change from 0 to 6 [ 399.322535][T17909] Dev loop2: unable to read RDB block 6 [ 399.344880][T17909] loop2: unable to read partition table [ 399.350947][T12200] libceph: connect (1)[b::]:6789 error -101 [ 399.357075][T12200] libceph: mon0 (1)[b::]:6789 connect error [ 399.376617][T17909] loop2: partition table beyond EOD, truncated [ 399.410054][T17909] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 399.440282][T17902] XFS (nullb0): Invalid superblock magic number [ 399.618471][T17895] ceph: No mds server is up or the cluster is laggy [ 399.618483][T17898] ceph: No mds server is up or the cluster is laggy [ 399.636750][ T9] libceph: connect (1)[c::]:6789 error -101 [ 399.658514][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 399.831997][T17929] overlayfs: failed to clone lowerpath [ 399.852047][T17929] overlayfs: failed to clone upperpath [ 400.025623][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 400.105852][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 400.216597][T12200] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 400.259804][T17951] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.4992'. [ 400.376795][T12200] usb 1-1: Using ep0 maxpacket: 32 [ 400.388993][T12200] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 400.402697][T12200] usb 1-1: config 0 has no interface number 0 [ 400.419044][T12200] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 400.430354][T12200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.440076][T12200] usb 1-1: Product: syz [ 400.444351][T12200] usb 1-1: Manufacturer: syz [ 400.450722][T12200] usb 1-1: SerialNumber: syz [ 400.467689][T12200] usb 1-1: config 0 descriptor?? [ 400.475633][T12200] smsc95xx v2.0.0 [ 400.621434][T17967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17967 comm=syz.4.4999 [ 400.693645][T12200] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 400.727001][T12200] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 400.764140][T12200] usb 1-1: USB disconnect, device number 56 [ 400.874245][T17975] openvswitch: netlink: Multiple metadata blocks provided [ 401.065096][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 401.344191][T12200] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 401.506447][T12200] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 401.514562][T12200] usb 1-1: config 0 has no interface number 0 [ 401.533012][T12200] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 401.545928][T17994] block nbd3: Device being setup by another task [ 401.553297][T17991] block nbd3: NBD_DISCONNECT [ 401.558080][T12200] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 401.571685][T17991] block nbd3: Send disconnect failed -22 [ 401.571687][ T30] audit: type=1400 audit(2000000493.638:4821): avc: denied { write } for pid=17990 comm="syz.3.5010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 401.607445][T12200] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 401.644529][T12200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.655970][T17990] block nbd3: Disconnected due to user request. [ 401.663111][T17990] block nbd3: shutting down sockets [ 401.669447][T12200] usb 1-1: Product: syz [ 401.673619][T12200] usb 1-1: Manufacturer: syz [ 401.686110][T12200] usb 1-1: SerialNumber: syz [ 401.692856][T12200] usb 1-1: config 0 descriptor?? [ 401.712533][T17941] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 401.727011][T17941] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 401.753763][T12200] smsc95xx v2.0.0 [ 401.853509][ T3688] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 401.865648][ T30] audit: type=1400 audit(2000000493.888:4822): avc: denied { ioctl } for pid=18002 comm="syz.3.5014" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 401.952533][T17941] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 401.966357][T17941] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 402.114557][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 402.198690][ T5858] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 402.209419][ T5858] Bluetooth: hci0: Injecting HCI hardware error event [ 402.218892][ T5858] Bluetooth: hci0: hardware error 0x00 [ 402.584874][T12200] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 402.599887][T12200] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 402.610063][T12200] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 402.625389][T12200] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 402.637073][T12200] usb 1-1: USB disconnect, device number 57 [ 402.724325][ T5914] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 402.877675][ T5914] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 402.889127][ T5914] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 402.900542][ T5914] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 402.911843][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.924302][T18024] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 402.933394][ T5914] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 403.144186][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 403.171403][ T5914] usb 4-1: USB disconnect, device number 54 [ 403.781505][T18055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5034'. [ 403.839694][T18055] IPVS: Error joining to the multicast group [ 404.183531][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 404.263688][ T5858] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 404.327318][T18080] capability: warning: `syz.1.5046' uses 32-bit capabilities (legacy support in use) [ 404.373569][ T5914] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 404.452252][T18086] netlink: 'syz.1.5047': attribute type 10 has an invalid length. [ 404.495441][T18086] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.521766][T18086] team0: entered allmulticast mode [ 404.535112][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.552383][T18086] team_slave_0: entered allmulticast mode [ 404.570131][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 404.579254][T18086] team_slave_1: entered allmulticast mode [ 404.598420][ T5914] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 404.614967][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 404.632150][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 404.633944][T18086] bond0: (slave team0): Enslaving as an active interface with an up link [ 404.651173][ T5914] usb 4-1: SerialNumber: syz [ 404.891978][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 404.905654][ T5914] usb 4-1: 0:2 : does not exist [ 404.929228][ T5914] usb 4-1: USB disconnect, device number 55 [ 404.935597][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.973192][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.983098][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 405.165170][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 405.185466][ T9] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 405.201139][ T9] usb 5-1: Manufacturer: syz [ 405.209786][ T9] usb 5-1: config 0 descriptor?? [ 405.223008][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 405.540772][ T30] audit: type=1326 audit(2000000497.600:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18099 comm="syz.5.5053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a718ebe9 code=0x7fc00000 [ 405.575228][T18116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5059'. [ 405.600545][T18117] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.5060'. [ 405.652435][ T9] appleir 0003:05AC:8243.0045: unknown main item tag 0x0 [ 405.676556][ T9] appleir 0003:05AC:8243.0045: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 406.135363][ T30] audit: type=1326 audit(2000000498.211:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18099 comm="syz.5.5053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93a718ebe9 code=0x7fc00000 [ 406.194195][ T5914] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 406.262503][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 406.316204][T18162] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5078'. [ 406.355417][ T5914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.378595][T18168] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 406.392760][ T5914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 406.413126][ T5914] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 406.422316][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 406.430733][ T5914] usb 2-1: SerialNumber: syz [ 406.585739][ T30] audit: type=1400 audit(2000000498.661:4825): avc: denied { write } for pid=18169 comm="syz.3.5082" name="file0" dev="tmpfs" ino=5198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 406.625354][ T30] audit: type=1400 audit(2000000498.661:4826): avc: denied { open } for pid=18169 comm="syz.3.5082" path="/1012/file0" dev="tmpfs" ino=5198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 406.666390][ T5914] usb 2-1: 0:2 : does not exist [ 406.681523][ T5914] usb 2-1: usbmixer: too many channels (61) in unit 5 [ 406.705536][ T5914] usb 2-1: USB disconnect, device number 51 [ 406.826431][ T30] audit: type=1400 audit(2000000498.901:4827): avc: denied { unmount } for pid=18173 comm="syz.5.5084" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 407.301960][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 407.389268][ T9] usb 5-1: USB disconnect, device number 58 [ 407.470090][T18190] netlink: 'syz.1.5091': attribute type 4 has an invalid length. [ 407.535060][T18190] netlink: 'syz.1.5091': attribute type 4 has an invalid length. [ 407.573947][T18192] 9pnet_fd: p9_fd_create_tcp (18192): problem connecting socket to 127.0.0.1 [ 407.875351][T18209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5100'. [ 408.062891][ T30] audit: type=1400 audit(2000000500.141:4828): avc: denied { name_bind } for pid=18217 comm="syz.0.5104" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 408.170125][T18224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.341445][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 408.557499][T18236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5110'. [ 409.380964][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 409.483492][ T5914] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 409.570890][ T5950] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 409.580706][T18287] SELinux: failed to load policy [ 409.645600][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 409.655141][ T5914] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 409.678213][ T5914] usb 5-1: config 0 has no interface number 0 [ 409.686677][ T5914] usb 5-1: config 0 interface 12 has no altsetting 0 [ 409.698574][ T5914] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 409.720855][ T5914] usb 5-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 409.738811][ T5914] usb 5-1: Product: syz [ 409.754165][ T5914] usb 5-1: Manufacturer: syz [ 409.755529][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.769302][ T5914] usb 5-1: SerialNumber: syz [ 409.780091][ T5914] usb 5-1: config 0 descriptor?? [ 409.788229][ T5950] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 409.857972][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.871777][ T5950] usb 4-1: config 0 descriptor?? [ 410.097442][ T5950] usbhid 4-1:0.0: can't add hid device: -71 [ 410.177543][ T5950] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 410.290194][ T5950] usb 4-1: USB disconnect, device number 56 [ 410.420427][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 410.642363][ T5914] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 410.657108][ T5914] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 410.683133][ T5914] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 410.700675][ T5914] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 410.727941][ T5914] usb 5-1: USB disconnect, device number 59 [ 410.890466][ T5950] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 410.960421][ T976] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 411.050283][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 411.062972][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.075329][ T5950] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 411.093920][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.109168][ T5950] usb 4-1: config 0 descriptor?? [ 411.120175][ T976] usb 1-1: Using ep0 maxpacket: 8 [ 411.127770][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 411.141536][ T976] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 411.171915][ T30] audit: type=1326 audit(2000000503.243:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18293 comm="syz.5.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93a712ade9 code=0x7ffc0000 [ 411.195455][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.211257][ T976] usb 1-1: config 0 descriptor?? [ 411.220414][ T30] audit: type=1326 audit(2000000503.243:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18293 comm="syz.5.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a718ebe9 code=0x7ffc0000 [ 411.250228][ T30] audit: type=1326 audit(2000000503.243:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18293 comm="syz.5.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a718ebe9 code=0x7ffc0000 [ 411.299281][ T30] audit: type=1326 audit(2000000503.273:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18293 comm="syz.5.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93a712ade9 code=0x7ffc0000 [ 411.459891][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 411.527445][ T30] audit: type=1326 audit(2000000503.273:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18293 comm="syz.5.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93a712ade9 code=0x7ffc0000 [ 411.528146][ T5950] mcp2221 0003:04D8:00DD.0046: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 411.554231][ T30] audit: type=1326 audit(2000000503.273:4834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18293 comm="syz.5.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a718ebe9 code=0x7ffc0000 [ 411.592645][ T976] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 411.635120][ T30] audit: type=1326 audit(2000000503.273:4835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18293 comm="syz.5.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93a712ade9 code=0x7ffc0000 [ 411.708918][ T30] audit: type=1326 audit(2000000503.273:4836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18293 comm="syz.5.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93a712ade9 code=0x7ffc0000 [ 411.738379][ T30] audit: type=1326 audit(2000000503.273:4837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18293 comm="syz.5.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93a712ade9 code=0x7ffc0000 [ 411.778298][ T30] audit: type=1326 audit(2000000503.273:4838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18293 comm="syz.5.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a718ebe9 code=0x7ffc0000 [ 411.805073][ T30] audit: type=1326 audit(2000000503.273:4839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18293 comm="syz.5.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93a712ade9 code=0x7ffc0000 [ 411.829389][ T30] audit: type=1326 audit(2000000503.273:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18293 comm="syz.5.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93a712ade9 code=0x7ffc0000 [ 411.889815][ T30] audit: type=1326 audit(2000000503.273:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18293 comm="syz.5.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93a712ade9 code=0x7ffc0000 [ 411.927726][ T30] audit: type=1326 audit(2000000503.273:4842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18293 comm="syz.5.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93a712ade9 code=0x7ffc0000 [ 411.942911][ T5950] usb 1-1: USB disconnect, device number 58 [ 411.984153][ T30] audit: type=1326 audit(2000000503.273:4843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18293 comm="syz.5.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a718ebe9 code=0x7ffc0000 [ 412.025616][ T30] audit: type=1326 audit(2000000503.273:4844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18293 comm="syz.5.5133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93a712ade9 code=0x7ffc0000 [ 412.123802][ T976] usb 4-1: USB disconnect, device number 57 [ 412.445168][T18347] netlink: 'syz.5.5156': attribute type 1 has an invalid length. [ 412.499371][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 412.514843][T18347] bond2: entered promiscuous mode [ 412.522042][T18347] 8021q: adding VLAN 0 to HW filter on device bond2 [ 412.538428][T18351] 8021q: adding VLAN 0 to HW filter on device bond2 [ 412.549015][T18351] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 412.559828][T18351] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 412.577597][T18351] bond2: (slave vcan1): making interface the new active one [ 412.585450][T18351] vcan1: entered promiscuous mode [ 412.595045][T18351] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 412.604634][T18350] ªªªªªª: renamed from wg2 (while UP) [ 412.785119][T18361] syzkaller1: left promiscuous mode [ 412.798241][T18361] syzkaller1: left allmulticast mode [ 413.250325][T12200] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 413.433790][T12200] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 413.459513][T12200] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 413.489017][T12200] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 413.498081][T12200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.539531][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 413.749425][T12200] usb 4-1: usb_control_msg returned -32 [ 413.755178][T12200] usbtmc 4-1:16.0: can't read capabilities [ 414.578383][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 414.738695][ T976] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 414.831978][T18469] netlink: 'syz.4.5209': attribute type 3 has an invalid length. [ 414.842667][T18469] netlink: 'syz.4.5209': attribute type 1 has an invalid length. [ 414.854348][T18469] netlink: 'syz.4.5209': attribute type 2 has an invalid length. [ 414.863385][T18469] netlink: 'syz.4.5209': attribute type 8 has an invalid length. [ 414.873341][T18469] netlink: 'syz.4.5209': attribute type 10 has an invalid length. [ 414.881832][T18469] netlink: 'syz.4.5209': attribute type 11 has an invalid length. [ 414.891454][T18469] netlink: 198236 bytes leftover after parsing attributes in process `syz.4.5209'. [ 414.908744][ T976] usb 2-1: Using ep0 maxpacket: 8 [ 414.915931][ T976] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 414.926440][ T976] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 414.937880][ T976] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 414.949727][ T976] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.963211][ T976] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 414.988380][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.246672][ T976] usb 2-1: usb_control_msg returned -32 [ 415.259019][ T976] usbtmc 2-1:16.0: can't read capabilities [ 415.280649][ T976] usb 2-1: USB disconnect, device number 52 [ 415.617832][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 416.013960][ T5950] usb 4-1: USB disconnect, device number 58 [ 416.657290][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 416.703563][ T30] kauditd_printk_skb: 247 callbacks suppressed [ 416.703634][ T30] audit: type=1400 audit(2000000508.776:5092): avc: denied { view } for pid=18531 comm="syz.0.5233" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 417.513549][T18567] [ 417.515898][T18567] ===================================================== [ 417.522820][T18567] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 417.530361][T18567] syzkaller #0 Not tainted [ 417.534760][T18567] ----------------------------------------------------- [ 417.541667][T18567] syz.3.5248/18567 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 417.549372][T18567] ffff8880554d0168 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 417.558070][T18567] [ 417.558070][T18567] and this task is already holding: [ 417.565413][T18567] ffff888028b01028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 417.575227][T18567] which would create a new lock dependency: [ 417.581089][T18567] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 417.589160][T18567] [ 417.589160][T18567] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 417.598589][T18567] (&dev->event_lock#2){..-.}-{3:3} [ 417.598613][T18567] [ 417.598613][T18567] ... which became SOFTIRQ-irq-safe at: [ 417.611459][T18567] lock_acquire+0x179/0x350 [ 417.616064][T18567] _raw_spin_lock_irqsave+0x3a/0x60 [ 417.621341][T18567] input_inject_event+0x9f/0x3b0 [ 417.626381][T18567] led_set_brightness+0x217/0x290 [ 417.631490][T18567] led_trigger_event+0xda/0x270 [ 417.636432][T18567] kbd_bh+0x21b/0x300 [ 417.640482][T18567] tasklet_action_common+0x281/0x400 [ 417.645840][T18567] handle_softirqs+0x216/0x8e0 [ 417.650678][T18567] __irq_exit_rcu+0x109/0x170 [ 417.655439][T18567] irq_exit_rcu+0x9/0x30 [ 417.659752][T18567] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 417.665451][T18567] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 417.671518][T18567] __tasklet_schedule_common+0x10d/0x190 [ 417.677230][T18567] vt_set_leds_compute_shiftstate+0x76/0x80 [ 417.683196][T18567] redraw_screen+0x542/0x760 [ 417.687850][T18567] complete_change_console+0x110/0x600 [ 417.693389][T18567] change_console+0x1ac/0x560 [ 417.698148][T18567] console_callback+0x1a1/0x4c0 [ 417.703067][T18567] process_one_work+0x9cf/0x1b70 [ 417.708070][T18567] worker_thread+0x6c8/0xf10 [ 417.712727][T18567] kthread+0x3c5/0x780 [ 417.716882][T18567] ret_from_fork+0x5d7/0x6f0 [ 417.721557][T18567] ret_from_fork_asm+0x1a/0x30 [ 417.726393][T18567] [ 417.726393][T18567] to a SOFTIRQ-irq-unsafe lock: [ 417.733389][T18567] (tasklist_lock){.+.+}-{3:3} [ 417.733410][T18567] [ 417.733410][T18567] ... which became SOFTIRQ-irq-unsafe at: [ 417.746018][T18567] ... [ 417.746026][T18567] lock_acquire+0x179/0x350 [ 417.753183][T18567] _raw_read_lock+0x5f/0x70 [ 417.757759][T18567] __do_wait+0x105/0x890 [ 417.762074][T18567] do_wait+0x21e/0x5a0 [ 417.766216][T18567] kernel_wait+0x9f/0x160 [ 417.770609][T18567] call_usermodehelper_exec_work+0xf1/0x170 [ 417.776570][T18567] process_one_work+0x9cf/0x1b70 [ 417.781591][T18567] worker_thread+0x6c8/0xf10 [ 417.786266][T18567] kthread+0x3c5/0x780 [ 417.790399][T18567] ret_from_fork+0x5d7/0x6f0 [ 417.795053][T18567] ret_from_fork_asm+0x1a/0x30 [ 417.799899][T18567] [ 417.799899][T18567] other info that might help us debug this: [ 417.799899][T18567] [ 417.810191][T18567] Chain exists of: [ 417.810191][T18567] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 417.810191][T18567] [ 417.823730][T18567] Possible interrupt unsafe locking scenario: [ 417.823730][T18567] [ 417.832022][T18567] CPU0 CPU1 [ 417.837362][T18567] ---- ---- [ 417.842702][T18567] lock(tasklist_lock); [ 417.846922][T18567] local_irq_disable(); [ 417.853652][T18567] lock(&dev->event_lock#2); [ 417.860832][T18567] lock(&client->buffer_lock); [ 417.868195][T18567] [ 417.871650][T18567] lock(&dev->event_lock#2); [ 417.876482][T18567] [ 417.876482][T18567] *** DEADLOCK *** [ 417.876482][T18567] [ 417.884603][T18567] 7 locks held by syz.3.5248/18567: [ 417.889775][T18567] #0: ffff88802ae92118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 417.898901][T18567] #1: ffff8881417d0230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 417.908991][T18567] #2: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 417.918631][T18567] #3: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 417.928179][T18567] #4: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 417.937306][T18567] #5: ffff888028b01028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 417.947582][T18567] #6: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 417.956632][T18567] [ 417.956632][T18567] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 417.967013][T18567] -> (&dev->event_lock#2){..-.}-{3:3} { [ 417.972642][T18567] IN-SOFTIRQ-W at: [ 417.976690][T18567] lock_acquire+0x179/0x350 [ 417.983009][T18567] _raw_spin_lock_irqsave+0x3a/0x60 [ 417.990012][T18567] input_inject_event+0x9f/0x3b0 [ 417.996775][T18567] led_set_brightness+0x217/0x290 [ 418.003631][T18567] led_trigger_event+0xda/0x270 [ 418.010307][T18567] kbd_bh+0x21b/0x300 [ 418.016097][T18567] tasklet_action_common+0x281/0x400 [ 418.023189][T18567] handle_softirqs+0x216/0x8e0 [ 418.029758][T18567] __irq_exit_rcu+0x109/0x170 [ 418.036238][T18567] irq_exit_rcu+0x9/0x30 [ 418.042290][T18567] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 418.049723][T18567] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 418.057522][T18567] __tasklet_schedule_common+0x10d/0x190 [ 418.064962][T18567] vt_set_leds_compute_shiftstate+0x76/0x80 [ 418.072662][T18567] redraw_screen+0x542/0x760 [ 418.079058][T18567] complete_change_console+0x110/0x600 [ 418.086329][T18567] change_console+0x1ac/0x560 [ 418.092812][T18567] console_callback+0x1a1/0x4c0 [ 418.099465][T18567] process_one_work+0x9cf/0x1b70 [ 418.106204][T18567] worker_thread+0x6c8/0xf10 [ 418.112597][T18567] kthread+0x3c5/0x780 [ 418.118468][T18567] ret_from_fork+0x5d7/0x6f0 [ 418.124859][T18567] ret_from_fork_asm+0x1a/0x30 [ 418.131429][T18567] INITIAL USE at: [ 418.135388][T18567] lock_acquire+0x179/0x350 [ 418.141611][T18567] _raw_spin_lock_irqsave+0x3a/0x60 [ 418.148525][T18567] input_inject_event+0x9f/0x3b0 [ 418.155185][T18567] led_set_brightness+0x217/0x290 [ 418.161928][T18567] kbd_led_trigger_activate+0xcb/0x110 [ 418.169101][T18567] led_trigger_set+0x59a/0xc50 [ 418.175592][T18567] led_trigger_set_default+0x1e0/0x2e0 [ 418.182772][T18567] led_classdev_register_ext+0x7b8/0xa10 [ 418.190125][T18567] input_leds_connect+0x552/0x8e0 [ 418.196887][T18567] input_attach_handler.isra.0+0x173/0x250 [ 418.204499][T18567] input_register_device+0xab9/0x1180 [ 418.211591][T18567] atkbd_connect+0x5f8/0xa40 [ 418.217896][T18567] serio_driver_probe+0x7f/0xd0 [ 418.224478][T18567] really_probe+0x241/0xa90 [ 418.230699][T18567] __driver_probe_device+0x1de/0x440 [ 418.237703][T18567] driver_probe_device+0x4c/0x1b0 [ 418.244463][T18567] __driver_attach+0x283/0x580 [ 418.250948][T18567] bus_for_each_dev+0x13e/0x1d0 [ 418.257525][T18567] serio_handle_event+0x335/0xc30 [ 418.264273][T18567] process_one_work+0x9cf/0x1b70 [ 418.270938][T18567] worker_thread+0x6c8/0xf10 [ 418.277243][T18567] kthread+0x3c5/0x780 [ 418.283041][T18567] ret_from_fork+0x5d7/0x6f0 [ 418.289346][T18567] ret_from_fork_asm+0x1a/0x30 [ 418.295833][T18567] } [ 418.298396][T18567] ... key at: [] __key.7+0x0/0x40 [ 418.306013][T18567] -> (&client->buffer_lock){....}-{3:3} { [ 418.311726][T18567] INITIAL USE at: [ 418.315597][T18567] lock_acquire+0x179/0x350 [ 418.321649][T18567] _raw_spin_lock_irq+0x36/0x50 [ 418.328042][T18567] evdev_read+0x436/0xee0 [ 418.333923][T18567] vfs_readv+0x5be/0x8b0 [ 418.339705][T18567] do_readv+0x28c/0x340 [ 418.345399][T18567] do_syscall_64+0xcd/0x4c0 [ 418.351458][T18567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.358991][T18567] } [ 418.361465][T18567] ... key at: [] __key.1+0x0/0x40 [ 418.368578][T18567] ... acquired at: [ 418.372364][T18567] _raw_spin_lock+0x2e/0x40 [ 418.377028][T18567] evdev_pass_values+0x10e/0x9b0 [ 418.382139][T18567] evdev_events+0x1bb/0x390 [ 418.386813][T18567] input_pass_values+0x74b/0x880 [ 418.391915][T18567] input_handle_event+0xf00/0x14d0 [ 418.397194][T18567] input_inject_event+0x1e8/0x3b0 [ 418.402376][T18567] evdev_write+0x457/0x750 [ 418.406952][T18567] vfs_write+0x29d/0x11d0 [ 418.411431][T18567] ksys_write+0x1f8/0x250 [ 418.415910][T18567] do_syscall_64+0xcd/0x4c0 [ 418.420571][T18567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.426616][T18567] [ 418.428918][T18567] [ 418.428918][T18567] the dependencies between the lock to be acquired [ 418.428925][T18567] and SOFTIRQ-irq-unsafe lock: [ 418.442392][T18567] -> (tasklist_lock){.+.+}-{3:3} { [ 418.447670][T18567] HARDIRQ-ON-R at: [ 418.451798][T18567] lock_acquire+0x179/0x350 [ 418.458302][T18567] _raw_read_lock+0x5f/0x70 [ 418.464783][T18567] __do_wait+0x105/0x890 [ 418.471011][T18567] do_wait+0x21e/0x5a0 [ 418.477065][T18567] kernel_wait+0x9f/0x160 [ 418.483375][T18567] call_usermodehelper_exec_work+0xf1/0x170 [ 418.491251][T18567] process_one_work+0x9cf/0x1b70 [ 418.498167][T18567] worker_thread+0x6c8/0xf10 [ 418.504741][T18567] kthread+0x3c5/0x780 [ 418.510792][T18567] ret_from_fork+0x5d7/0x6f0 [ 418.517360][T18567] ret_from_fork_asm+0x1a/0x30 [ 418.524123][T18567] SOFTIRQ-ON-R at: [ 418.528255][T18567] lock_acquire+0x179/0x350 [ 418.534756][T18567] _raw_read_lock+0x5f/0x70 [ 418.541239][T18567] __do_wait+0x105/0x890 [ 418.547476][T18567] do_wait+0x21e/0x5a0 [ 418.553529][T18567] kernel_wait+0x9f/0x160 [ 418.559868][T18567] call_usermodehelper_exec_work+0xf1/0x170 [ 418.567740][T18567] process_one_work+0x9cf/0x1b70 [ 418.574655][T18567] worker_thread+0x6c8/0xf10 [ 418.581219][T18567] kthread+0x3c5/0x780 [ 418.587267][T18567] ret_from_fork+0x5d7/0x6f0 [ 418.593833][T18567] ret_from_fork_asm+0x1a/0x30 [ 418.600578][T18567] INITIAL USE at: [ 418.604625][T18567] lock_acquire+0x179/0x350 [ 418.611024][T18567] _raw_write_lock_irq+0x36/0x50 [ 418.617851][T18567] copy_process+0x4caf/0x7690 [ 418.624420][T18567] kernel_clone+0xfc/0x930 [ 418.630741][T18567] user_mode_thread+0xc7/0x110 [ 418.637433][T18567] rest_init+0x23/0x2b0 [ 418.643482][T18567] start_kernel+0x3ee/0x4d0 [ 418.649885][T18567] x86_64_start_reservations+0x18/0x30 [ 418.657247][T18567] x86_64_start_kernel+0x130/0x190 [ 418.664245][T18567] common_startup_64+0x13e/0x148 [ 418.671072][T18567] INITIAL READ USE at: [ 418.675553][T18567] lock_acquire+0x179/0x350 [ 418.682384][T18567] _raw_read_lock+0x5f/0x70 [ 418.689208][T18567] __do_wait+0x105/0x890 [ 418.695781][T18567] do_wait+0x21e/0x5a0 [ 418.702178][T18567] kernel_wait+0x9f/0x160 [ 418.708841][T18567] call_usermodehelper_exec_work+0xf1/0x170 [ 418.717077][T18567] process_one_work+0x9cf/0x1b70 [ 418.724346][T18567] worker_thread+0x6c8/0xf10 [ 418.731262][T18567] kthread+0x3c5/0x780 [ 418.737656][T18567] ret_from_fork+0x5d7/0x6f0 [ 418.744590][T18567] ret_from_fork_asm+0x1a/0x30 [ 418.751680][T18567] } [ 418.754329][T18567] ... key at: [] tasklist_lock+0x18/0x40 [ 418.762203][T18567] ... acquired at: [ 418.766163][T18567] _raw_read_lock+0x5f/0x70 [ 418.770834][T18567] send_sigurg+0xed/0xc80 [ 418.775329][T18567] sk_send_sigurg+0x76/0x360 [ 418.780068][T18567] unix_stream_sendmsg+0xfa5/0x1340 [ 418.785428][T18567] ____sys_sendmsg+0xa98/0xc70 [ 418.790349][T18567] ___sys_sendmsg+0x134/0x1d0 [ 418.795178][T18567] __sys_sendmmsg+0x200/0x420 [ 418.800007][T18567] __x64_sys_sendmmsg+0x9c/0x100 [ 418.805096][T18567] do_syscall_64+0xcd/0x4c0 [ 418.809755][T18567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.815802][T18567] [ 418.818101][T18567] -> (&f_owner->lock){....}-{3:3} { [ 418.823376][T18567] INITIAL USE at: [ 418.827332][T18567] lock_acquire+0x179/0x350 [ 418.833641][T18567] _raw_write_lock_irq+0x36/0x50 [ 418.840294][T18567] __f_setown+0x61/0x3c0 [ 418.846254][T18567] fcntl_dirnotify+0x7b1/0xb60 [ 418.852734][T18567] do_fcntl+0xe62/0x15a0 [ 418.858692][T18567] __x64_sys_fcntl+0x163/0x200 [ 418.865172][T18567] do_syscall_64+0xcd/0x4c0 [ 418.871388][T18567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.879008][T18567] INITIAL READ USE at: [ 418.883409][T18567] lock_acquire+0x179/0x350 [ 418.890065][T18567] _raw_read_lock_irqsave+0x74/0x90 [ 418.897421][T18567] send_sigio+0x31/0x3e0 [ 418.903843][T18567] dnotify_handle_event+0x15e/0x2b0 [ 418.911212][T18567] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 418.919777][T18567] fsnotify+0x13d6/0x1dc0 [ 418.926255][T18567] path_openat+0x1b50/0x2cb0 [ 418.932995][T18567] do_filp_open+0x20b/0x470 [ 418.939648][T18567] do_sys_openat2+0x11b/0x1d0 [ 418.946483][T18567] __x64_sys_open+0x153/0x1e0 [ 418.953311][T18567] do_syscall_64+0xcd/0x4c0 [ 418.959969][T18567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.968019][T18567] } [ 418.970591][T18567] ... key at: [] __key.1+0x0/0x40 [ 418.977794][T18567] ... acquired at: [ 418.981673][T18567] _raw_read_lock_irqsave+0x74/0x90 [ 418.987027][T18567] send_sigio+0x31/0x3e0 [ 418.991426][T18567] kill_fasync+0x214/0x510 [ 418.995998][T18567] lease_break_callback+0x23/0x30 [ 419.001180][T18567] __break_lease+0x674/0x1810 [ 419.006012][T18567] do_dentry_open+0x91f/0x1530 [ 419.010950][T18567] vfs_open+0x82/0x3f0 [ 419.015193][T18567] path_openat+0x1de4/0x2cb0 [ 419.019935][T18567] do_filp_open+0x20b/0x470 [ 419.024590][T18567] do_sys_openat2+0x11b/0x1d0 [ 419.029441][T18567] __x64_sys_open+0x153/0x1e0 [ 419.034276][T18567] do_syscall_64+0xcd/0x4c0 [ 419.038934][T18567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.044983][T18567] [ 419.047282][T18567] -> (&new->fa_lock){....}-{3:3} { [ 419.052385][T18567] INITIAL USE at: [ 419.056252][T18567] lock_acquire+0x179/0x350 [ 419.062304][T18567] _raw_write_lock_irq+0x36/0x50 [ 419.068802][T18567] fasync_remove_entry+0xb2/0x1e0 [ 419.075371][T18567] fasync_helper+0xaf/0xd0 [ 419.081331][T18567] pipe_fasync+0x117/0x200 [ 419.087291][T18567] __fput+0x968/0xb70 [ 419.092820][T18567] task_work_run+0x14d/0x240 [ 419.098952][T18567] exit_to_user_mode_loop+0xeb/0x110 [ 419.105780][T18567] do_syscall_64+0x3f6/0x4c0 [ 419.111916][T18567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.119350][T18567] INITIAL READ USE at: [ 419.123653][T18567] lock_acquire+0x179/0x350 [ 419.130139][T18567] _raw_read_lock_irqsave+0x74/0x90 [ 419.137401][T18567] kill_fasync+0x138/0x510 [ 419.143798][T18567] anon_pipe_write+0x418/0x1a90 [ 419.150625][T18567] vfs_write+0x7d0/0x11d0 [ 419.156931][T18567] ksys_write+0x1f8/0x250 [ 419.163252][T18567] do_syscall_64+0xcd/0x4c0 [ 419.169734][T18567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.177602][T18567] } [ 419.180077][T18567] ... key at: [] __key.0+0x0/0x40 [ 419.187170][T18567] ... acquired at: [ 419.190947][T18567] lock_acquire+0x179/0x350 [ 419.195607][T18567] _raw_read_lock_irqsave+0x74/0x90 [ 419.200958][T18567] kill_fasync+0x138/0x510 [ 419.205533][T18567] evdev_pass_values+0x619/0x9b0 [ 419.210628][T18567] evdev_events+0x1bb/0x390 [ 419.215290][T18567] input_pass_values+0x74b/0x880 [ 419.220386][T18567] input_handle_event+0xf00/0x14d0 [ 419.225655][T18567] input_inject_event+0x1e8/0x3b0 [ 419.230835][T18567] evdev_write+0x457/0x750 [ 419.235407][T18567] vfs_write+0x29d/0x11d0 [ 419.239889][T18567] ksys_write+0x1f8/0x250 [ 419.244370][T18567] do_syscall_64+0xcd/0x4c0 [ 419.249029][T18567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.255074][T18567] [ 419.257400][T18567] [ 419.257400][T18567] stack backtrace: [ 419.263266][T18567] CPU: 1 UID: 0 PID: 18567 Comm: syz.3.5248 Not tainted syzkaller #0 PREEMPT(full) [ 419.263284][T18567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 419.263293][T18567] Call Trace: [ 419.263298][T18567] [ 419.263304][T18567] dump_stack_lvl+0x116/0x1f0 [ 419.263320][T18567] check_irq_usage+0x7dc/0x920 [ 419.263345][T18567] ? check_path.constprop.0+0x24/0x50 [ 419.263367][T18567] ? __lock_acquire+0x12bc/0x1ce0 [ 419.263387][T18567] __lock_acquire+0x12bc/0x1ce0 [ 419.263412][T18567] lock_acquire+0x179/0x350 [ 419.263432][T18567] ? kill_fasync+0x138/0x510 [ 419.263454][T18567] _raw_read_lock_irqsave+0x74/0x90 [ 419.263468][T18567] ? kill_fasync+0x138/0x510 [ 419.263487][T18567] kill_fasync+0x138/0x510 [ 419.263506][T18567] evdev_pass_values+0x619/0x9b0 [ 419.263528][T18567] evdev_events+0x1bb/0x390 [ 419.263547][T18567] input_pass_values+0x74b/0x880 [ 419.263568][T18567] input_handle_event+0xf00/0x14d0 [ 419.263586][T18567] ? _copy_from_user+0x59/0xd0 [ 419.263606][T18567] input_inject_event+0x1e8/0x3b0 [ 419.263627][T18567] evdev_write+0x457/0x750 [ 419.263647][T18567] ? __pfx_evdev_write+0x10/0x10 [ 419.263667][T18567] ? bpf_lsm_file_permission+0x9/0x10 [ 419.263686][T18567] ? security_file_permission+0x71/0x210 [ 419.263707][T18567] ? rw_verify_area+0xcf/0x6c0 [ 419.263728][T18567] ? __pfx_evdev_write+0x10/0x10 [ 419.263747][T18567] vfs_write+0x29d/0x11d0 [ 419.263762][T18567] ? __pfx_vfs_write+0x10/0x10 [ 419.263776][T18567] ? find_held_lock+0x2b/0x80 [ 419.263792][T18567] ? __fget_files+0x204/0x3c0 [ 419.263809][T18567] ? __fget_files+0x20e/0x3c0 [ 419.263825][T18567] ksys_write+0x1f8/0x250 [ 419.263839][T18567] ? __pfx_ksys_write+0x10/0x10 [ 419.263855][T18567] do_syscall_64+0xcd/0x4c0 [ 419.263871][T18567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.263885][T18567] RIP: 0033:0x7f10cef8ebe9 [ 419.263897][T18567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.263912][T18567] RSP: 002b:00007f10cfd9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 419.263925][T18567] RAX: ffffffffffffffda RBX: 00007f10cf1b5fa0 RCX: 00007f10cef8ebe9 [ 419.263935][T18567] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 419.263943][T18567] RBP: 00007f10cf011e19 R08: 0000000000000000 R09: 0000000000000000 [ 419.263952][T18567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.263960][T18567] R13: 00007f10cf1b6038 R14: 00007f10cf1b5fa0 R15: 00007ffe9538b408 [ 419.263974][T18567] [ 419.513983][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 420.575782][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 421.614855][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 422.654491][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 423.693813][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 424.733318][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 425.772782][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 426.812263][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available