last executing test programs: 1.022401324s ago: executing program 3 (id=5466): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) 878.054419ms ago: executing program 1 (id=5468): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1021, 0xb, 0x13, r0, 0x83000000) 849.051961ms ago: executing program 4 (id=5470): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 798.512265ms ago: executing program 3 (id=5471): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) 735.887437ms ago: executing program 2 (id=5472): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0xfffffffd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x6, 0x400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x4, 0x8, 0x1, 0x7, 0xd}}}]}, 0x34}}, 0x0) 716.280539ms ago: executing program 1 (id=5473): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) flistxattr(r0, &(0x7f00000000c0)=""/198, 0xc6) 677.037605ms ago: executing program 4 (id=5474): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) 638.933846ms ago: executing program 1 (id=5475): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1e, 0x4) 638.219537ms ago: executing program 0 (id=5476): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@RTM_NEWMDB={0x18, 0x55, 0x1e5, 0x70bd28, 0x25dfdbff}, 0x18}}, 0x0) 563.263739ms ago: executing program 0 (id=5477): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) userfaultfd(0x0) 562.458294ms ago: executing program 3 (id=5478): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001040)={0xfc, {"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", 0x1038}}, 0x1006) 545.63203ms ago: executing program 2 (id=5479): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001d00)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x2, 0xfffffffe, 0xb84, 0x9, 0x5, 0x0, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xcf5, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1000, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x2000000, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x800, 0xffffffff, 0x0, 0xffff18e5, 0x0, 0x0, 0xfffff002, 0x0, 0x0, 0x2000400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3, 0x6, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x201, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x4000, 0x20000000, 0x0, 0x0, 0xa2b1, 0x6, 0x0, 0x0, 0xffffffff, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x1000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x1, 0xfffffffd, 0x0, 0xdffffffc, 0x0, 0x7, 0x0, 0xfffffffc, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xdc, 0xffffffffffffffff, 0x7fffffff, 0x6, 0xfffffffd, {0x6, 0x2, 0x1, 0x401, 0x1, 0x22}, {0x9a, 0x0, 0x40, 0x5, 0x400}, 0x5, 0x2, 0x81}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x490}}, 0xc0) 481.898217ms ago: executing program 4 (id=5480): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x52, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff028}]}, 0x10) 463.380304ms ago: executing program 0 (id=5481): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x4b46, &(0x7f0000000140)) 438.128191ms ago: executing program 1 (id=5482): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x4, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) 375.154009ms ago: executing program 4 (id=5483): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000640)=0x6) 374.496958ms ago: executing program 2 (id=5484): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3ff, 0xffffffffffffffa1}}]}]}]}, 0x50}}, 0x0) 328.616243ms ago: executing program 0 (id=5485): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x80044100, 0x40944f9c780000) 302.815494ms ago: executing program 3 (id=5486): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random="010020004e0b"}) 249.171705ms ago: executing program 1 (id=5487): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x4001, 0x3, 0x230, 0x0, 0x700001b, 0x148, 0xe8, 0x148, 0x198, 0x206, 0x240, 0x198, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc0, 0xe8, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}, {{@ip={@loopback, @rand_addr=0x64010102, 0xffffffff, 0xff, 'caif0\x00', 'wg0\x00', {}, {0xff}, 0x1d, 0x0, 0x78}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) 248.454985ms ago: executing program 4 (id=5488): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) iopl(0x0) 145.864568ms ago: executing program 2 (id=5489): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_getaddr={0x17, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x7f, 0x60, 0xfd}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044064}, 0x24008004) 145.628461ms ago: executing program 0 (id=5490): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newlink={0x58, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x40, 0x200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 145.16112ms ago: executing program 3 (id=5491): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x22, 0x0, &(0x7f0000000900)="80f8ad48cc0500000000000c08005ebd6c2135876ab68cc8f459e6b3dde1530f8ba7", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 100.796851ms ago: executing program 2 (id=5492): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000005b80)={'ip6tnl0\x00', 0x0}) 53.17383ms ago: executing program 1 (id=5493): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 21.771748ms ago: executing program 4 (id=5494): r0 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x300) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x40045532, &(0x7f0000003f80)=""/4086) 21.618074ms ago: executing program 3 (id=5495): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000028c0)={0x2020}, 0x2020) 13.719693ms ago: executing program 0 (id=5496): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="000e1f"], 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=5497): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Product: syz [ 348.248954][ T192] usb 1-1: Manufacturer: syz [ 348.248969][ T192] usb 1-1: SerialNumber: syz [ 348.385593][T12998] netlink: Unknown conntrack attr (0) [ 348.596954][ T192] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 348.611768][ T192] usb 1-1: 3:0: failed to get current value for ch 2 (-71) [ 348.614653][ T192] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 348.638063][ T192] usb 1-1: 3:0: cannot get min/max values for control 11 (id 3) [ 348.640433][ T192] usb 1-1: 3:0: cannot get min/max values for control 11 (id 3) [ 348.658393][ T192] usb 1-1: 3:0: cannot get min/max values for control 12 (id 3) [ 348.667854][ T192] usb 1-1: 3:0: cannot get min/max values for control 12 (id 3) [ 348.668718][ T192] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 348.690683][ T192] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 348.757778][ T192] usb 1-1: USB disconnect, device number 89 [ 348.809855][ T6136] udevd[6136]: setting mode of /dev/bus/usb/001/089 to 020664 failed: No such file or directory [ 348.809957][ T6136] udevd[6136]: setting owner of /dev/bus/usb/001/089 to uid=0, gid=0 failed: No such file or directory [ 348.865241][ T6087] udevd[6087]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.765164][ T30] kauditd_printk_skb: 403 callbacks suppressed [ 349.765183][ T30] audit: type=1400 audit(2000524791.296:5495): avc: denied { write } for pid=13058 comm="syz.4.3344" name="ip6_tables_targets" dev="proc" ino=4026533887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 349.786723][ T30] audit: type=1400 audit(2000524791.306:5496): avc: denied { read write } for pid=5740 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.786776][ T30] audit: type=1400 audit(2000524791.316:5497): avc: denied { read write open } for pid=5740 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.786815][ T30] audit: type=1400 audit(2000524791.316:5498): avc: denied { ioctl } for pid=5740 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.801946][ T30] audit: type=1400 audit(2000524791.336:5499): avc: denied { ioctl } for pid=13053 comm="syz.2.3342" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 349.831758][ T30] audit: type=1400 audit(2000524791.366:5500): avc: denied { read write } for pid=5734 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.834405][ T30] audit: type=1400 audit(2000524791.366:5501): avc: denied { open } for pid=5734 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.834686][ T30] audit: type=1400 audit(2000524791.366:5502): avc: denied { ioctl } for pid=5734 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.885485][ T30] audit: type=1400 audit(2000524791.416:5503): avc: denied { ioctl } for pid=13053 comm="syz.2.3342" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 349.958985][ T5714] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 349.998066][ T30] audit: type=1400 audit(2000524791.526:5504): avc: denied { read write } for pid=5747 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 350.058215][T13065] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 350.058246][T13065] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 350.058317][T13065] vhci_hcd vhci_hcd.0: Device attached [ 350.089418][T13062] bond1: entered promiscuous mode [ 350.090234][T13062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 350.104211][T13066] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 350.104568][ T12] vhci_hcd vhci_hcd.0: stop threads [ 350.104597][ T12] vhci_hcd vhci_hcd.0: release socket [ 350.104615][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 350.217604][ T5714] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 350.231551][ T5714] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.231597][ T5714] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.231620][ T5714] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 350.231644][ T5714] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 350.236958][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.236987][ T5714] usb 3-1: Product: syz [ 350.237004][ T5714] usb 3-1: Manufacturer: syz [ 350.237020][ T5714] usb 3-1: SerialNumber: syz [ 350.501158][ T5714] usb 3-1: Not enough endpoints found in device, aborting! [ 350.523025][T13078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3351'. [ 350.747221][ T25] usb 3-1: USB disconnect, device number 126 [ 350.820909][ T5714] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 350.980996][ T5714] usb 5-1: Using ep0 maxpacket: 32 [ 350.983743][ T5714] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 350.984643][ T5714] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 350.984666][ T5714] usb 5-1: config 0 has no interface number 0 [ 350.986637][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.986659][ T5714] usb 5-1: Product: syz [ 350.986675][ T5714] usb 5-1: Manufacturer: syz [ 350.986689][ T5714] usb 5-1: SerialNumber: syz [ 350.989481][ T5714] usb 5-1: config 0 descriptor?? [ 351.056810][ T5714] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 351.056841][ T5714] usb 5-1: selecting invalid altsetting 1 [ 351.056855][ T5714] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 351.089711][ T5714] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 351.090032][ T5714] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 351.090071][ T5714] usb 5-1: media controller created [ 351.102944][ T6380] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 351.137533][ T5714] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 351.261786][ T6380] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 351.265373][ T6380] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.265417][ T6380] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 351.265441][ T6380] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 351.265464][ T6380] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.265503][ T6380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.436812][ T5714] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 351.463390][T13096] netlink: 'syz.2.3360': attribute type 5 has an invalid length. [ 351.521184][ T5714] usb 5-1: USB disconnect, device number 5 [ 351.783005][ T5714] usb 4-1: USB disconnect, device number 6 [ 351.830794][ T5643] syz1: Port: 1 Link DOWN [ 351.830815][ T1281] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.830869][ T1281] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.830897][ T1281] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.830926][ T1281] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.940939][ T6380] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 352.090653][ T6380] usb 3-1: Using ep0 maxpacket: 8 [ 352.092505][ T6380] usb 3-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 352.097100][ T6380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.132439][ T6380] usb 3-1: config 0 descriptor?? [ 352.147070][ T6380] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 352.356316][T13122] netlink: zone id is out of range [ 352.356335][T13122] netlink: zone id is out of range [ 352.356343][T13122] netlink: zone id is out of range [ 352.356351][T13122] netlink: zone id is out of range [ 352.356359][T13122] netlink: zone id is out of range [ 352.356367][T13122] netlink: zone id is out of range [ 352.356663][T13122] netlink: zone id is out of range [ 352.356676][T13122] netlink: zone id is out of range [ 352.356685][T13122] netlink: zone id is out of range [ 352.356693][T13122] netlink: zone id is out of range [ 352.357082][ T6380] cxusb: set interface failed [ 352.357097][ T6380] dvb-usb: bulk message failed: -22 (1/0) [ 352.417096][ T6380] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 352.443182][ T6380] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 352.443227][ T6380] usb 3-1: media controller created [ 352.467037][ T6380] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 352.695450][ T6380] DVB: Unable to find symbol lgdt330x_attach() [ 352.695468][ T6380] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 352.696062][ T6380] dvb-usb: bulk message failed: -22 (1/0) [ 352.696081][ T6380] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 352.736372][ T6380] usb 3-1: USB disconnect, device number 127 [ 352.814653][ T6380] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 353.335467][T13160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3391'. [ 353.694527][T13177] netlink: 'syz.3.3399': attribute type 21 has an invalid length. [ 353.694618][T13177] netlink: 'syz.3.3399': attribute type 1 has an invalid length. [ 353.694632][T13177] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3399'. [ 354.167881][T13199] xt_TCPMSS: Only works on TCP SYN packets [ 354.370803][ T5643] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 354.374988][T13209] netlink: 'syz.3.3414': attribute type 5 has an invalid length. [ 354.521312][ T5643] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 354.522177][ T5643] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.522223][ T5643] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 354.522249][ T5643] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 354.522273][ T5643] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.522311][ T5643] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.685013][T13221] xt_CT: You must specify a L4 protocol and not use inversions on it [ 354.818904][T13230] netlink: 'syz.2.3426': attribute type 4 has an invalid length. [ 354.819704][ T30] kauditd_printk_skb: 394 callbacks suppressed [ 354.819719][ T30] audit: type=1400 audit(2000524796.346:5899): avc: denied { ioctl } for pid=13196 comm="syz.0.3411" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.828126][ T30] audit: type=1400 audit(2000524796.356:5900): avc: denied { read write } for pid=5740 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 354.828439][ T30] audit: type=1400 audit(2000524796.356:5901): avc: denied { read write open } for pid=5740 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 354.829625][ T30] audit: type=1400 audit(2000524796.356:5902): avc: denied { ioctl } for pid=5740 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 354.894259][ T30] audit: type=1400 audit(2000524796.416:5903): avc: denied { module_request } for pid=13223 comm="syz.3.3425" kmod="crypto-rfc4309(ccm(aes))-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 354.910376][ T30] audit: type=1400 audit(2000524796.436:5904): avc: denied { read write } for pid=5736 comm="syz-executor" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 354.910436][ T30] audit: type=1400 audit(2000524796.436:5905): avc: denied { open } for pid=5736 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 354.910469][ T30] audit: type=1400 audit(2000524796.436:5906): avc: denied { ioctl } for pid=5736 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.039670][ T5643] usb 1-1: USB disconnect, device number 90 [ 355.053924][ T30] audit: type=1400 audit(2000524796.586:5907): avc: denied { create } for pid=13233 comm="syz.1.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 355.057866][ T30] audit: type=1400 audit(2000524796.586:5908): avc: denied { write } for pid=13233 comm="syz.1.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 355.231958][T13241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.741375][T13267] usb usb8: usbfs: process 13267 (syz.4.3441) did not claim interface 0 before use [ 356.855737][T13319] netlink: 'syz.1.3467': attribute type 6 has an invalid length. [ 357.018701][T13322] Process accounting resumed [ 357.242014][T13340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3476'. [ 357.450618][T13340] ovs-system: entered promiscuous mode [ 357.841548][T13362] netlink: 'syz.3.3487': attribute type 3 has an invalid length. [ 357.935747][T13364] comedi comedi1: fl512: I/O port conflict (0xfffff000,16) [ 358.405210][T13391] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3501'. [ 358.721137][T13408] net_ratelimit: 1060 callbacks suppressed [ 358.721160][T13408] openvswitch: netlink: Tunnel attr 151 out of range max 16 [ 359.110155][ T5923] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 359.259831][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 359.262071][ T5923] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.00 [ 359.263197][ T5923] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.263241][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.269011][ T5923] usb 1-1: config 0 descriptor?? [ 359.314277][ T5923] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 359.317953][ T5923] usb 1-1: Detected SIO [ 359.334491][ T5923] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 359.564208][ T5923] usb 1-1: USB disconnect, device number 91 [ 359.585053][ T5923] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 359.585468][ T5923] ftdi_sio 1-1:0.0: device disconnected [ 359.731978][T13458] comedi comedi0: pcl711: I/O base address not correctly aligned [ 359.820489][ T30] kauditd_printk_skb: 504 callbacks suppressed [ 359.820512][ T30] audit: type=1400 audit(2000524801.357:6413): avc: denied { ioctl } for pid=5747 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 359.849322][ T30] audit: type=1400 audit(2000524801.377:6414): avc: denied { read write } for pid=5736 comm="syz-executor" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 359.856835][ T30] audit: type=1400 audit(2000524801.377:6415): avc: denied { read write open } for pid=5736 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 359.857119][ T30] audit: type=1400 audit(2000524801.377:6416): avc: denied { ioctl } for pid=5736 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 360.004321][T13463] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0 [ 360.038438][ T30] audit: type=1400 audit(2000524801.567:6417): avc: denied { read write } for pid=5732 comm="syz-executor" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 360.040450][ T30] audit: type=1400 audit(2000524801.577:6418): avc: denied { open } for pid=5732 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 360.042671][ T30] audit: type=1400 audit(2000524801.577:6419): avc: denied { ioctl } for pid=5732 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 360.061635][ T30] audit: type=1400 audit(2000524801.577:6420): avc: denied { read write } for pid=5747 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 360.061992][ T30] audit: type=1400 audit(2000524801.577:6421): avc: denied { read write open } for pid=5747 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 360.063777][ T30] audit: type=1400 audit(2000524801.577:6422): avc: denied { ioctl } for pid=5747 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 360.559240][T13483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3545'. [ 360.697434][T13488] netlink: 'syz.3.3547': attribute type 1 has an invalid length. [ 360.957589][T13500] netlink: 34 bytes leftover after parsing attributes in process `syz.4.3554'. [ 360.991778][T13504] x_tables: unsorted underflow at hook 1 [ 361.687966][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3571'. [ 361.773110][T13541] can0: slcan on ttyS3. [ 361.776860][T13543] ovs-system: entered promiscuous mode [ 361.901636][T13537] can0 (unregistered): slcan off ttyS3. [ 362.661666][T13592] netlink: 'syz.4.3594': attribute type 28 has an invalid length. [ 362.661697][T13592] netlink: 'syz.4.3594': attribute type 3 has an invalid length. [ 362.661708][T13592] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3594'. [ 362.796735][T13601] block device autoloading is deprecated and will be removed. [ 363.701235][T13642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3612'. [ 363.701293][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3612'. [ 364.464123][T13685] netlink: 'syz.2.3630': attribute type 2 has an invalid length. [ 364.464150][T13685] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3630'. [ 364.625911][T13682] nvme nvme0: rdma connection establishment failed (-104) [ 364.831293][ T30] kauditd_printk_skb: 604 callbacks suppressed [ 364.831312][ T30] audit: type=1400 audit(2000524806.367:7027): avc: denied { read write open } for pid=5732 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.831354][ T30] audit: type=1400 audit(2000524806.367:7028): avc: denied { ioctl } for pid=5732 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.839341][ T5885] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 364.862285][ T30] audit: type=1400 audit(2000524806.377:7029): avc: denied { read write } for pid=5736 comm="syz-executor" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.864724][ T30] audit: type=1400 audit(2000524806.377:7030): avc: denied { open } for pid=5736 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.865175][ T30] audit: type=1400 audit(2000524806.377:7031): avc: denied { ioctl } for pid=5736 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.883840][ T30] audit: type=1400 audit(2000524806.407:7032): avc: denied { ioctl } for pid=13689 comm="syz.4.3631" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.900214][ T30] audit: type=1400 audit(2000524806.437:7033): avc: denied { ioctl } for pid=13689 comm="syz.4.3631" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.906317][ T30] audit: type=1400 audit(2000524806.437:7034): avc: denied { search } for pid=13697 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.906650][ T30] audit: type=1400 audit(2000524806.437:7035): avc: denied { search } for pid=13697 comm="rm" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.906968][ T30] audit: type=1400 audit(2000524806.437:7036): avc: denied { search } for pid=13697 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.150004][ T5885] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 365.190655][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.190696][ T5885] usb 5-1: Product: syz [ 365.190711][ T5885] usb 5-1: Manufacturer: syz [ 365.190726][ T5885] usb 5-1: SerialNumber: syz [ 365.197700][ T5885] usb 5-1: config 0 descriptor?? [ 365.636272][ T5885] usb 5-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 365.636304][ T5885] f81604 5-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 365.636331][ T5885] f81604 5-1:0.0: probe with driver f81604 failed with error -71 [ 365.668276][ T5885] usb 5-1: USB disconnect, device number 6 [ 366.177470][T13740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3655'. [ 366.870996][ T6380] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 367.013345][T13777] xt_l2tp: invalid flags combination: 8 [ 367.020631][ T6380] usb 3-1: Using ep0 maxpacket: 32 [ 367.055478][ T6380] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 367.147915][ T6380] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 367.147952][ T6380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 367.147977][ T6380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 367.147998][ T6380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 367.148021][ T6380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 367.355886][ T6380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.355921][ T6380] usb 3-1: Product: syz [ 367.355938][ T6380] usb 3-1: Manufacturer: syz [ 367.355954][ T6380] usb 3-1: SerialNumber: syz [ 367.361056][ T6380] usb 3-1: config 0 descriptor?? [ 367.456325][T13787] CacheFiles: Empty directory specified [ 367.486312][T13789] wireguard0: entered promiscuous mode [ 367.486340][T13789] wireguard0: entered allmulticast mode [ 367.658376][T13796] netlink: 'syz.3.3682': attribute type 8 has an invalid length. [ 367.867074][ T6380] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 367.867120][ T6380] input input54: Device does not respond to id packet M [ 367.882335][ T6380] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 367.882381][ T6380] input input54: Device does not respond to id packet P [ 367.884283][ T6380] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 367.884324][ T6380] input input54: Device does not respond to id packet B [ 367.885721][ T6380] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 367.885759][ T6380] input input54: Device does not respond to id packet N [ 367.886701][ T6380] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 367.887722][ T6380] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 367.888045][ T6380] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 367.888362][ T6380] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 367.972523][ T6380] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input54 [ 367.998923][ T5885] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 368.001715][ T6380] usb 3-1: USB disconnect, device number 2 [ 368.150508][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 368.160079][ T5885] usb 1-1: unable to get BOS descriptor or descriptor too short [ 368.160122][ T5885] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40 [ 368.164865][ T5885] usb 1-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 190, changing to 11 [ 368.164900][ T5885] usb 1-1: config 1 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.164927][ T5885] usb 1-1: config 1 interface 0 has no altsetting 0 [ 368.174240][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.174265][ T5885] usb 1-1: Product: syz [ 368.174279][ T5885] usb 1-1: Manufacturer: syz [ 368.174292][ T5885] usb 1-1: SerialNumber: syz [ 368.388888][ T5923] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 368.505047][ T5885] usbhid 1-1:1.0: can't add hid device: -71 [ 368.505164][ T5885] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 368.522276][ T5885] usb 1-1: USB disconnect, device number 92 [ 368.555447][ T5923] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 368.576648][ T5923] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 368.576696][ T5923] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 368.576718][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0 [ 368.588028][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 368.588055][ T5923] usb 4-1: Product: syz [ 368.588070][ T5923] usb 4-1: Manufacturer: syz [ 368.588085][ T5923] usb 4-1: SerialNumber: syz [ 368.598193][ T5923] usb 4-1: config 0 descriptor?? [ 368.607146][ T5923] hub 4-1:0.0: bad descriptor, ignoring hub [ 368.607173][ T5923] hub 4-1:0.0: probe with driver hub failed with error -5 [ 368.630916][ T5923] usb 4-1: selecting invalid altsetting 0 [ 368.855378][T13824] netlink: 'syz.2.3695': attribute type 21 has an invalid length. [ 368.902913][T13821] netlink: Failed to add helper -22 [ 368.902963][T13821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.107232][T13826] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 369.391279][ T5885] usb 4-1: USB disconnect, device number 7 [ 369.852349][ T30] kauditd_printk_skb: 359 callbacks suppressed [ 369.852368][ T30] audit: type=1400 audit(2000524811.388:7396): avc: denied { read write } for pid=5740 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.853081][ T30] audit: type=1400 audit(2000524811.388:7397): avc: denied { read write open } for pid=5740 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.853120][ T30] audit: type=1400 audit(2000524811.388:7398): avc: denied { ioctl } for pid=5740 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.972964][ T30] audit: type=1400 audit(2000524811.508:7399): avc: denied { read write } for pid=5747 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.977224][ T30] audit: type=1400 audit(2000524811.508:7400): avc: denied { open } for pid=5747 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.982835][ T30] audit: type=1400 audit(2000524811.518:7401): avc: denied { ioctl } for pid=5747 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 370.041751][ T30] audit: type=1400 audit(2000524811.578:7402): avc: denied { read write } for pid=5734 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 370.047980][ T30] audit: type=1400 audit(2000524811.578:7403): avc: denied { read write open } for pid=5734 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 370.048029][ T30] audit: type=1400 audit(2000524811.578:7404): avc: denied { ioctl } for pid=5734 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 370.056675][ T30] audit: type=1400 audit(2000524811.588:7405): avc: denied { read write } for pid=5732 comm="syz-executor" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 370.368217][T13861] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 370.835341][T13880] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 371.858278][ T5714] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 372.029148][ T5714] usb 1-1: unable to get BOS descriptor or descriptor too short [ 372.029585][ T5714] usb 1-1: not running at top speed; connect to a high speed hub [ 372.029612][ T5714] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.48 [ 372.034021][ T5714] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.034050][ T5714] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 372.039383][ T5714] usb 1-1: string descriptor 0 read error: -22 [ 372.039488][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.110484][ T5714] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 372.467836][ T5714] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 372.628371][ T25] usb 1-1: USB disconnect, device number 93 [ 372.881852][T13933] ALSA: mixer_oss: invalid OSS volume '' [ 372.881891][T13933] ALSA: mixer_oss: invalid OSS volume ' aü=!ÿšê˹=·+LKWà„MšñŒëÓ:§~' [ 372.881907][T13933] ALSA: mixer_oss: invalid OSS volume 'ƒ%wÀ¹¼Ñº§ˆMò#i¥6[…ìNVLéúÃKK-' [ 372.881919][T13933] ALSA: mixer_oss: invalid OSS volume 'Ú¶ÿÌêZù•ç:Ñ 3.âôF?ºYùð¹Š^x1b' [ 372.881949][T13933] ALSA: mixer_oss: invalid OSS volume ' ”—$i.A<­”g—Õmo鱌‚éÜ)ã&:/“¢Œ' [ 372.881983][T13933] ALSA: mixer_oss: invalid OSS volume 'Ü~)~×ó·Š´¤‹ì}Úìk/FJ°¶éƒ—†]j' [ 372.882015][T13933] ALSA: mixer_oss: invalid OSS volume '§‹' [ 372.882028][T13933] ALSA: mixer_oss: invalid OSS volume 'FµµÈq(ã2÷Äž¾?åsÒï È[œ'|¾' [ 372.882062][T13933] ALSA: mixer_oss: invalid OSS volume '³§Û}`K’ƈãZ>_|¯#X³d#>zž^a¨' [ 372.882072][T13933] ALSA: mixer_oss: invalid OSS volume '*‹Ümo‹É×G%BuZkÂÄ@¤ª–m¸Iv¯Ó [ 469.555153][T17669] dump_stack_lvl+0x100/0x190 [ 469.555181][T17669] print_report+0x13d/0x4b0 [ 469.555207][T17669] ? __virt_addr_valid+0x239/0x430 [ 469.555227][T17669] ? string+0x471/0x4d0 [ 469.555247][T17669] kasan_report+0xdf/0x1c0 [ 469.555273][T17669] ? string+0x471/0x4d0 [ 469.555295][T17669] string+0x471/0x4d0 [ 469.555315][T17669] ? __pfx_string+0x10/0x10 [ 469.555337][T17669] vsnprintf+0x422/0x1300 [ 469.555362][T17669] ? __pfx_vsnprintf+0x10/0x10 [ 469.555387][T17669] seq_printf+0x1a4/0x250 May 24 05:21:51 [ 469.555406][T17669] ? __kasan_kmalloc+0xaa/0xb0 syzkaller kern.a[ 469.555426][T17669] ? __pfx_seq_printf+0x10/0x10 lert kernel: [ [ 469.555447][T17669] ? __asan_memcpy+0x3c/0x60 469.557035][T176[ 469.555464][T17669] ? kobject_get_path+0x8d/0x2c0 69] page_owner t[ 469.555493][T17669] input_devices_seq_show+0x1bf/0x1130 racks the page a[ 469.555522][T17669] ? __pfx_input_devices_seq_show+0x10/0x10 s allocated[ 469.555551][T17669] ? seq_list_start+0x7a/0xc0 [ 469.555569][T17669] seq_read_iter+0xbce/0x1270 [ 469.555593][T17669] seq_read+0x344/0x4d0 [ 469.555613][T17669] ? __pfx_seq_read+0x10/0x10 [ 469.555634][T17669] ? lock_acquire+0x1d1/0x380 [ 469.555652][T17669] ? fdget_pos+0x2aa/0x380 [ 469.555676][T17669] ? selinux_file_permission+0x8f/0x6d0 [ 469.555698][T17669] ? __pfx_seq_read+0x10/0x10 [ 469.555718][T17669] proc_reg_read+0x240/0x330 [ 469.555744][T17669] ? __pfx_proc_reg_read+0x10/0x10 [ 469.555769][T17669] vfs_read+0x1e4/0xb40 [ 469.555787][T17669] ? lock_acquire+0x1d1/0x380 [ 469.555811][T17669] ? __fget_files+0x34/0x3d0 [ 469.555831][T17669] ? __pfx_ ** replaying previous printk message ** [ 469.555831][T17669] ? __pfx_vfs_read+0x10/0x10 [ 469.555848][T17669] ? find_held_lock+0x2b/0x80 [ 469.555872][T17669] ? __fget_files+0x215/0x3d0 [ 469.555894][T17669] ? __fget_files+0x21f/0x3d0 [ 469.555919][T17669] ksys_read+0x12a/0x250 [ 469.555941][T17669] ? __pfx_ksys_read+0x10/0x10 [ 469.555963][T17669] do_syscall_64+0x123/0x790 [ 469.555988][T17669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.556006][T17669] RIP: 0033:0x7f2f8179e159 [ 469.556020][T17669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.556038][T17669] RSP: 002b:00007f2f82625028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 469.556058][T17669] RAX: ffffffffffffffda RBX: 00007f2f81a25fa0 RCX: 00007f2f8179e159 [ 469.556070][T17669] RDX: 0000000000002020 RSI: 00002000000028c0 RDI: 0000000000000003 [ 469.556081][T17669] RBP: 00007f2f8183503b R08: 0000000000000000 R09: 0000000000000000 [ 469.556093][T17669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.556103][T17669] R13: 00007f2f81a26038 R14: 00007f2f81a25fa0 R15: 00007ffcea5d81a8 [ 469.556120][T17669] [ 469.556128][T17669] [ 469.556132][T17669] Allocated by task 5734: [ 469.556141][T17669] kasan_save_stack+0x30/0x50 [ 469.556160][T17669] kasan_save_track+0x14/0x30 [ 469.556175][T17669] __kasan_kmalloc+0xaa/0xb0 [ 469.556192][T17669] __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 469.556211][T17669] kmalloc_reserve+0xe8/0x350 [ 469.556236][T17669] __alloc_skb+0x185/0x710 [ 469.556253][T17669] audit_log_start+0x350/0x930 [ 469.556269][T17669] common_lsm_audit+0xb2/0x2b0 [ 469.556287][T17669] slow_avc_audit+0x186/0x210 [ 469.556308][T17669] audit_inode_permission+0x1ea/0x2a0 [ 469.556329][T17669] selinux_inode_permission+0x7ed/0x1130 [ 469.556352][T17669] security_inode_permission+0xda/0x250 [ 469.556369][T17669] inode_permission+0x36c/0x620 [ 469.556394][T17669] may_open+0x2b8/0x480 [ 469.556417][T17669] path_openat+0x51f/0x2440 [ 469.556438][T17669] do_file_open+0x20e/0x430 [ 469.556458][T17669] do_sys_openat2+0x10f/0x1e0 [ 469.556481][T17669] __x64_sys_openat+0x12d/0x210 [ 469.556505][T17669] do_syscall_64+0x123/0x790 [ 469.556526][T17669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.556543][T17669] [ 469.556547][T17669] Freed by task 30: [ 469.556555][T17669] kasan_save_stack+0x30/0x50 [ 469.556570][T17669] kasan_save_track+0x14/0x30 [ 469.556586][T17669] kasan_save_free_info+0x3b/0x70 [ 469.556608][T17669] __kasan_slab_free+0x5f/0x80 [ 469.556625][T17669] kfree+0x22b/0x6d0 [ 469.556646][T17669] skb_free_head+0xb9/0x160 [ 469.556661][T17669] skb_release_data+0x6c5/0x8e0 [ 469.556680][T17669] sk_skb_reason_drop+0x102/0x1b0 [ 469.556700][T17669] kauditd_hold_skb+0x144/0x210 [ 469.556723][T17669] kauditd_send_queue+0x232/0x2e0 [ 469.556745][T17669] kauditd_thread+0x645/0xb30 [ 469.556769][T17669] kthread+0x373/0x450 [ 469.556796][T17669] ret_from_fork+0x730/0xd60 [ 469.556815][T17669] ret_from_fork_asm+0x1a/0x30 [ 469.556833][T17669] [ 469.556838][T17669] The buggy address belongs to the object at ffff888020eaf000 [ 469.556838][T17669] which belongs to the cache kmalloc-2k of size 2048 [ 469.556855][T17669] The buggy address is located 1880 bytes inside of [ 469.556855][T17669] freed 2048-byte region [ffff888020eaf000, ffff888020eaf800) [ 469.556872][T17669] [ 469.556877][T17669] The buggy address belongs to the physical page: [ 469.556885][T17669] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20ea8 [ 469.556900][T17669] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 469.556913][T17669] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 469.556927][T17669] page_type: f5(slab) [ 469.556942][T17669] raw: 00fff00000000040 ffff88801c034000 dead000000000100 dead000000000122 [ 469.556956][T17669] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 469.556971][T17669] head: 00fff00000000040 ffff88801c034000 dead000000000100 dead000000000122 [ 469.556985][T17669] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 469.557001][T17669] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 469.557017][T17669] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 469.557026][T17669] page dumped because: kasan: bad access detected [ 469.557035][T17669] page_owner tracks the page as allocated [ 469.557040][T17669] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5734, tgid 5734 (syz-executor), ts 75567722679 [ 469.557067][T17669] post_alloc_hook+0xfd/0x120 [ 469.557091][T17669] get_page_from_freelist+0x110d/0x35d0 [ 469.557117][T17669] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 469.557134][T17669] new_slab+0xa9/0x6e0 [ 469.557157][T17669] refill_objects+0xe3/0x410 [ 469.557171][T17669] __pcs_replace_empty_main+0x35e/0x650 [ 469.557195][T17669] __kmalloc_node_track_caller_noprof+0x6a8/0x870 [ 469.557214][T17669] kmalloc_reserve+0xe8/0x350 [ 469.557238][T17669] pskb_expand_head+0x249/0x10e0 [ 469.557256][T17669] netlink_trim+0x22d/0x2f0 [ 469.557278][T17669] netlink_broadcast_filtered+0x6d/0xf20 [ 469.557294][T17669] nlmsg_notify+0xb1/0x290 [ 469.557311][T17669] rtmsg_ifinfo+0x177/0x1b0 [ 469.557333][T17669] __dev_notify_flags+0x362/0x4b0 [ 469.557349][T17669] netif_change_flags+0x108/0x160 [ 469.557365][T17669] do_setlink.isra.0+0x1ac4/0x3e60 [ 469.557386][T17669] page last free pid 6020 tgid 6020 ts 75564937813 stack trace: [ 469.557398][T17669] __free_frozen_pages+0x79f/0x10f0 [ 469.557420][T17669] qlist_free_all+0x47/0xf0 [ 469.557436][T17669] kasan_quarantine_reduce+0x1a0/0x1f0 [ 469.557453][T17669] __kasan_slab_alloc+0x69/0x90 [ 469.557474][T17669] kmem_cache_alloc_noprof+0x269/0x6a0 [ 469.557489][T17669] do_getname+0x35/0x390 [ 469.557511][T17669] __x64_sys_symlinkat+0x7c/0xe0 [ 469.557531][T17669] do_syscall_64+0x123/0x790 [ 469.557551][T17669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.557567][T17669] [ 469.557571][T17669] Memory state around the buggy address: [ 469.557579][T17669] ffff888020eaf600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 469.557592][T17669] ffff888020eaf680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 469.557604][T17669] >ffff888020eaf700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 469.557614][T17669] ^ [ 469.557623][T17669] ffff888020eaf780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 469.557636][T17669] ffff888020eaf800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 469.557646][T17669] ================================================================== [ 469.773879][T17669] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 470.418526][T17669] CPU: 0 UID: 0 PID: 17669 Comm: syz.3.5495 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.429445][T17669] Tainted: [L]=SOFTLOCKUP [ 470.433749][T17669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 470.443799][T17669] Call Trace: [ 470.447062][T17669] [ 470.449975][T17669] dump_stack_lvl+0x100/0x190 [ 470.454646][T17669] vpanic+0x553/0x970 [ 470.458611][T17669] ? __pfx_vpanic+0x10/0x10 [ 470.463096][T17669] ? mark_held_locks+0x40/0x70 [ 470.467843][T17669] ? string+0x471/0x4d0 [ 470.471982][T17669] panic+0xd1/0xe0 [ 470.475684][T17669] ? __pfx_panic+0x10/0x10 [ 470.480094][T17669] ? string+0x471/0x4d0 [ 470.484244][T17669] ? preempt_schedule_common+0x3c/0xb0 [ 470.489695][T17669] check_panic_on_warn.cold+0x19/0x34 [ 470.495051][T17669] end_report.part.0+0x3a/0x90 [ 470.499802][T17669] kasan_report.cold+0xe/0x18 [ 470.504466][T17669] ? string+0x471/0x4d0 [ 470.508605][T17669] string+0x471/0x4d0 [ 470.512572][T17669] ? __pfx_string+0x10/0x10 [ 470.517063][T17669] vsnprintf+0x422/0x1300 [ 470.521379][T17669] ? __pfx_vsnprintf+0x10/0x10 [ 470.526131][T17669] seq_printf+0x1a4/0x250 [ 470.530445][T17669] ? __kasan_kmalloc+0xaa/0xb0 [ 470.535191][T17669] ? __pfx_seq_printf+0x10/0x10 [ 470.540029][T17669] ? __asan_memcpy+0x3c/0x60 [ 470.544613][T17669] ? kobject_get_path+0x8d/0x2c0 [ 470.549541][T17669] input_devices_seq_show+0x1bf/0x1130 [ 470.554994][T17669] ? __pfx_input_devices_seq_show+0x10/0x10 [ 470.560890][T17669] ? seq_list_start+0x7a/0xc0 [ 470.565551][T17669] seq_read_iter+0xbce/0x1270 [ 470.570213][T17669] seq_read+0x344/0x4d0 [ 470.574353][T17669] ? __pfx_seq_read+0x10/0x10 [ 470.579029][T17669] ? lock_acquire+0x1d1/0x380 [ 470.583690][T17669] ? fdget_pos+0x2aa/0x380 [ 470.588096][T17669] ? selinux_file_permission+0x8f/0x6d0 [ 470.593640][T17669] ? __pfx_seq_read+0x10/0x10 [ 470.598300][T17669] proc_reg_read+0x240/0x330 [ 470.602879][T17669] ? __pfx_proc_reg_read+0x10/0x10 [ 470.607980][T17669] vfs_read+0x1e4/0xb40 [ 470.612117][T17669] ? lock_acquire+0x1d1/0x380 [ 470.616776][T17669] ? __fget_files+0x34/0x3d0 [ 470.621352][T17669] ? __pfx_vfs_read+0x10/0x10 [ 470.626009][T17669] ? find_held_lock+0x2b/0x80 [ 470.630675][T17669] ? __fget_files+0x215/0x3d0 [ 470.635337][T17669] ? __fget_files+0x21f/0x3d0 [ 470.639999][T17669] ksys_read+0x12a/0x250 [ 470.644225][T17669] ? __pfx_ksys_read+0x10/0x10 [ 470.648971][T17669] do_syscall_64+0x123/0x790 [ 470.653550][T17669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.659426][T17669] RIP: 0033:0x7f2f8179e159 [ 470.663824][T17669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.683425][T17669] RSP: 002b:00007f2f82625028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 470.691823][T17669] RAX: ffffffffffffffda RBX: 00007f2f81a25fa0 RCX: 00007f2f8179e159 [ 470.699776][T17669] RDX: 0000000000002020 RSI: 00002000000028c0 RDI: 0000000000000003 [ 470.707728][T17669] RBP: 00007f2f8183503b R08: 0000000000000000 R09: 0000000000000000 [ 470.715680][T17669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.723644][T17669] R13: 00007f2f81a26038 R14: 00007f2f81a25fa0 R15: 00007ffcea5d81a8 [ 470.731605][T17669] [ 470.734816][T17669] Kernel Offset: disabled [ 470.739116][T17669] Rebooting in 86400 seconds..