last executing test programs: 1.383621982s ago: executing program 2 (id=17289): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r5, 0x0) listen(r3, 0x0) read$FUSE(r2, &(0x7f00000077c0)={0x2020}, 0x2020) 1.360659494s ago: executing program 2 (id=17290): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa07, 0x0) 981.294382ms ago: executing program 0 (id=17304): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x15) 919.149299ms ago: executing program 0 (id=17306): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRESOCT=r1, @ANYRESOCT, @ANYRES8=r0, @ANYBLOB="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"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x12, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840919fdc5a8d"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 855.452485ms ago: executing program 2 (id=17311): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x3d29) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x1000008, 0x11, r2, 0x1e25b000) 855.018544ms ago: executing program 0 (id=17312): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) 805.07616ms ago: executing program 0 (id=17315): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) 712.614389ms ago: executing program 0 (id=17322): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa07, 0x0) 526.247278ms ago: executing program 2 (id=17333): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x60000600) 428.198588ms ago: executing program 2 (id=17340): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 385.297582ms ago: executing program 2 (id=17344): syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x88400) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) wait4(0x0, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES16=r0], 0x0) 357.800135ms ago: executing program 3 (id=17345): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) 318.978909ms ago: executing program 4 (id=17346): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8, @ANYRES64], 0x118) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x11) capset(&(0x7f0000000c00)={0x19980330}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) 318.831459ms ago: executing program 3 (id=17347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, 0x0) 210.591849ms ago: executing program 1 (id=17350): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='binder\x00', 0x0, 0x0) 210.339529ms ago: executing program 3 (id=17351): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0xd4000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) 209.954749ms ago: executing program 1 (id=17352): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) 199.16008ms ago: executing program 3 (id=17353): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 183.607182ms ago: executing program 4 (id=17354): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) brk(0x8000000000000008) 143.943396ms ago: executing program 1 (id=17355): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) 143.685896ms ago: executing program 3 (id=17356): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 143.539006ms ago: executing program 4 (id=17357): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet(0x2, 0x2, 0x1) setuid(0xee00) ioctl$FITHAW(r1, 0xc0045878) 143.367556ms ago: executing program 1 (id=17358): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) 66.795784ms ago: executing program 4 (id=17359): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 66.616114ms ago: executing program 1 (id=17360): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) 66.255724ms ago: executing program 1 (id=17361): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) clock_gettime(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000}}) 63.203564ms ago: executing program 4 (id=17362): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='binder\x00', 0x0, 0x0) 14.696459ms ago: executing program 0 (id=17363): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xd4000006, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) 6.35545ms ago: executing program 4 (id=17364): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone3(&(0x7f0000000180)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 0s ago: executing program 3 (id=17365): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000095000040"]) kernel console output (not intermixed with test programs): erface 105 has no altsetting 0 [ 379.264026][ T19] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 379.283822][ T19] usb 5-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 379.293270][ T19] usb 5-1: Product: syz [ 379.310378][ T19] usb 5-1: Manufacturer: syz [ 379.315062][ T19] usb 5-1: SerialNumber: syz [ 379.344274][ T6] ipheth 4-1:0.196: Unable to find endpoints [ 379.356418][ T6] usb 4-1: USB disconnect, device number 5 [ 379.965996][ T19] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 379.998496][ T19] aqc111: probe of 5-1:1.105 failed with error -71 [ 380.015976][ T19] usb 5-1: USB disconnect, device number 5 [ 380.236889][T27990] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13143'. [ 380.287148][T27997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13146'. [ 381.217590][T28112] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 381.226331][ T6] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 381.430984][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 381.449978][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 74, setting to 64 [ 381.473030][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 381.490333][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 381.506311][ T6] usb 5-1: SerialNumber: syz [ 381.520999][T28073] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 381.762494][ T6] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 381.769311][ T6] usb-storage 5-1:1.0: USB Mass Storage device detected [ 381.800484][ T6] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 381.830164][ T6] scsi host1: usb-storage 5-1:1.0 [ 381.847492][ T6] usb 5-1: USB disconnect, device number 6 [ 382.256057][T28188] 9pnet_fd: p9_fd_create_unix (28188): problem connecting socket: ./file0: -111 [ 382.332631][T28201] device veth0 entered promiscuous mode [ 382.363899][T28201] device veth0 left promiscuous mode [ 382.854990][T28284] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 384.073478][T28375] netlink: 'syz.2.13322': attribute type 4 has an invalid length. [ 386.256623][ T343] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 386.309918][ T338] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 386.448429][ T343] usb 1-1: Using ep0 maxpacket: 32 [ 386.454822][ T343] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 386.463361][ T343] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.473702][ T343] usb 1-1: config 0 has no interface number 0 [ 386.479951][ T343] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 386.491801][ T343] usb 1-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 386.502813][ T338] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 386.505113][ T343] usb 1-1: config 0 interface 196 has no altsetting 0 [ 386.523041][ T338] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 74, setting to 64 [ 386.524544][ T343] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 386.542937][ T343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.545064][ T338] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 386.551224][ T343] usb 1-1: Product: syz [ 386.564350][ T343] usb 1-1: Manufacturer: syz [ 386.569156][ T343] usb 1-1: SerialNumber: syz [ 386.573424][ T338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 386.577617][ T343] usb 1-1: config 0 descriptor?? [ 386.586955][ T338] usb 2-1: SerialNumber: syz [ 386.598529][T28451] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 386.802299][ T343] ipheth 1-1:0.196: Unable to find endpoints [ 386.820230][T28451] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 386.821524][ T343] usb 1-1: USB disconnect, device number 8 [ 387.053364][ T338] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 387.066645][ T338] usb-storage 2-1:1.0: USB Mass Storage device detected [ 387.089812][ T338] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 387.119888][ T338] scsi host1: usb-storage 2-1:1.0 [ 387.134119][ T338] usb 2-1: USB disconnect, device number 6 [ 387.226412][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 387.226428][ T28] audit: type=1326 audit(1763067385.954:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28458 comm="syz.4.13363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a898f6c9 code=0x7fc00000 [ 387.546135][ T3990] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 387.749681][ T3990] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 387.771474][ T3990] usb 3-1: config 1 has no interface number 0 [ 387.777617][ T3990] usb 3-1: config 1 interface 105 has no altsetting 0 [ 387.807536][ T3990] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 387.823203][ T3990] usb 3-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 387.851060][ T3990] usb 3-1: Product: syz [ 387.862983][ T3990] usb 3-1: Manufacturer: syz [ 387.867727][ T3990] usb 3-1: SerialNumber: syz [ 388.110549][ T3990] aqc111: probe of 3-1:1.105 failed with error -71 [ 388.129273][ T3990] usb 3-1: USB disconnect, device number 8 [ 388.131704][T28536] device veth0 entered promiscuous mode [ 388.152979][T28536] device veth0 left promiscuous mode [ 388.206939][ T24] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 388.381589][T28567] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13414'. [ 388.392221][T28567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13414'. [ 388.416445][T28572] 9pnet_fd: p9_fd_create_unix (28572): problem connecting socket: ./file0: -111 [ 388.427076][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 388.444745][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 74, setting to 64 [ 388.466969][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 388.487893][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 388.505282][ T24] usb 2-1: SerialNumber: syz [ 388.510849][T28526] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 388.734974][T28526] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 388.949619][T28614] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 388.967388][ T24] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 388.984942][ T24] usb-storage 2-1:1.0: USB Mass Storage device detected [ 389.014692][ T24] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 389.069641][ T24] scsi host1: usb-storage 2-1:1.0 [ 389.089290][ T24] usb 2-1: USB disconnect, device number 7 [ 389.200236][T28638] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.614703][T28662] 9pnet_fd: p9_fd_create_unix (28662): problem connecting socket: ./file0: -111 [ 389.997305][ T343] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 390.199811][ T343] usb 2-1: Using ep0 maxpacket: 32 [ 390.206233][ T343] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 390.222468][T28691] device veth0 entered promiscuous mode [ 390.225907][ T343] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.228977][T28691] device veth0 left promiscuous mode [ 390.253370][ T343] usb 2-1: config 0 has no interface number 0 [ 390.266382][ T343] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 390.289275][ T343] usb 2-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 390.316368][ T343] usb 2-1: config 0 interface 196 has no altsetting 0 [ 390.333741][ T343] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 390.348930][ T343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.357380][ T343] usb 2-1: Product: syz [ 390.361998][ T343] usb 2-1: Manufacturer: syz [ 390.366844][ T343] usb 2-1: SerialNumber: syz [ 390.387654][ T343] usb 2-1: config 0 descriptor?? [ 390.421996][T28706] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13478'. [ 390.444218][T28706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13478'. [ 390.615101][ T343] ipheth 2-1:0.196: Unable to find endpoints [ 390.624352][ T343] usb 2-1: USB disconnect, device number 8 [ 391.340737][T28746] device veth0 entered promiscuous mode [ 391.348871][T28745] device veth0 left promiscuous mode [ 391.385670][T28748] device veth0 entered promiscuous mode [ 391.391989][T28748] device veth0 left promiscuous mode [ 391.470078][T28759] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 391.787791][ T343] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 391.820140][T28771] netlink: 'syz.1.13508': attribute type 4 has an invalid length. [ 391.991385][ T343] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 392.002615][ T343] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 74, setting to 64 [ 392.014905][ T343] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 392.024298][ T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 392.032505][ T343] usb 1-1: SerialNumber: syz [ 392.038622][T28763] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 392.260864][T28763] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 392.328095][T28788] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 392.492669][ T343] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 392.500663][ T343] usb-storage 1-1:1.0: USB Mass Storage device detected [ 392.506285][T28798] 9pnet_fd: p9_fd_create_unix (28798): problem connecting socket: ./file0: -111 [ 392.527869][ T343] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 392.543838][ T343] scsi host1: usb-storage 1-1:1.0 [ 392.572126][ T343] usb 1-1: USB disconnect, device number 9 [ 393.302207][ T6] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 393.504862][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 393.528035][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 393.549977][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 393.569417][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 393.588408][ T6] usb 5-1: SerialNumber: syz [ 393.598926][ T6] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 393.614817][ T6] usb-storage 5-1:1.0: USB Mass Storage device detected [ 393.625887][T28845] 9pnet_fd: p9_fd_create_unix (28845): problem connecting socket: ./file0: -111 [ 393.632747][T28848] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 393.643181][ T6] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 393.656125][ T6] scsi host1: usb-storage 5-1:1.0 [ 393.814052][ T19] usb 5-1: USB disconnect, device number 7 [ 393.951187][ T6] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 394.144139][ T6] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 394.163159][ T6] usb 2-1: config 1 has no interface number 0 [ 394.169453][ T6] usb 2-1: config 1 interface 105 has no altsetting 0 [ 394.192492][ T6] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 394.212576][ T6] usb 2-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 394.234552][ T6] usb 2-1: Product: syz [ 394.238764][ T6] usb 2-1: Manufacturer: syz [ 394.249673][ T6] usb 2-1: SerialNumber: syz [ 394.691263][ T6] aqc111: probe of 2-1:1.105 failed with error -71 [ 394.708692][ T6] usb 2-1: USB disconnect, device number 9 [ 394.921060][ T24] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 394.951431][T28956] device veth0 entered promiscuous mode [ 394.957183][T28954] device veth0 left promiscuous mode [ 395.124697][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 395.135941][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 395.146703][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 395.155932][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 395.164065][ T24] usb 5-1: SerialNumber: syz [ 395.174215][ T24] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 395.181192][ T24] usb-storage 5-1:1.0: USB Mass Storage device detected [ 395.188993][ T24] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 395.208280][ T24] scsi host1: usb-storage 5-1:1.0 [ 395.230298][ T6] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 395.389764][ T343] usb 5-1: USB disconnect, device number 8 [ 395.445553][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 395.464779][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 74, setting to 64 [ 395.487093][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 395.496163][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 395.525828][ T6] usb 3-1: SerialNumber: syz [ 395.531941][T28957] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 395.773661][ T60] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 395.774548][T28957] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 395.977581][ T60] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 395.989283][ T60] usb 1-1: config 1 has no interface number 0 [ 396.011409][ T60] usb 1-1: config 1 interface 105 has no altsetting 0 [ 396.021117][ T60] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 396.022886][ T6] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 396.032593][ T60] usb 1-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 396.041490][ T6] usb-storage 3-1:1.0: USB Mass Storage device detected [ 396.046416][ T60] usb 1-1: Product: syz [ 396.057128][ T60] usb 1-1: Manufacturer: syz [ 396.067639][ T6] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 396.068379][ T60] usb 1-1: SerialNumber: syz [ 396.091910][ T6] scsi host1: usb-storage 3-1:1.0 [ 396.112647][ T6] usb 3-1: USB disconnect, device number 9 [ 396.519313][ T60] aqc111: probe of 1-1:1.105 failed with error -71 [ 396.542783][ T60] usb 1-1: USB disconnect, device number 10 [ 397.639827][ T28] audit: type=1400 audit(1763067395.731:2022): avc: denied { setopt } for pid=29087 comm="syz.2.13654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 397.977406][T29136] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.352689][ T60] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 398.566967][ T60] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 398.585892][ T60] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 398.629453][ T60] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 398.650139][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 398.660878][ T60] usb 1-1: SerialNumber: syz [ 398.681630][ T60] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 398.691063][ T60] usb-storage 1-1:1.0: USB Mass Storage device detected [ 398.732088][ T60] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 398.768760][ T60] scsi host1: usb-storage 1-1:1.0 [ 398.788050][T29202] kvm: pic: non byte read [ 398.796933][T29202] kvm: pic: non byte read [ 398.801906][T29202] kvm: pic: single mode not supported [ 398.801920][T29202] kvm: pic: level sensitive irq not supported [ 398.807460][T29202] kvm: pic: non byte read [ 398.818515][T29202] kvm: pic: single mode not supported [ 398.818569][T29202] kvm: pic: non byte read [ 398.828977][T29202] kvm: pic: non byte read [ 398.833898][T29202] kvm: pic: non byte read [ 398.838488][T29202] kvm: pic: single mode not supported [ 398.838501][T29202] kvm: pic: level sensitive irq not supported [ 398.844062][T29202] kvm: pic: non byte read [ 398.854862][T29202] kvm: pic: single mode not supported [ 398.854919][T29202] kvm: pic: non byte read [ 398.866518][T29202] kvm: pic: non byte read [ 398.890714][ T60] usb 1-1: USB disconnect, device number 11 [ 399.166549][T29237] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.343832][ T6] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 399.535672][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 399.542009][ T6] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 399.562346][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.578268][ T6] usb 3-1: config 0 has no interface number 0 [ 399.595158][ T6] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 399.610349][ T6] usb 3-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.642197][ T6] usb 3-1: config 0 interface 196 has no altsetting 0 [ 399.655349][ T6] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 399.674170][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.688215][ T6] usb 3-1: Product: syz [ 399.692464][ T6] usb 3-1: Manufacturer: syz [ 399.706145][ T6] usb 3-1: SerialNumber: syz [ 399.720540][ T6] usb 3-1: config 0 descriptor?? [ 399.897447][T29284] device veth0 entered promiscuous mode [ 399.904215][T29284] device veth0 left promiscuous mode [ 399.911172][T29285] 9pnet_fd: p9_fd_create_unix (29285): problem connecting socket: ./file0: -111 [ 399.952473][ T6] ipheth 3-1:0.196: Unable to find endpoints [ 399.977093][ T6] usb 3-1: USB disconnect, device number 10 [ 400.082479][T29309] device veth0 entered promiscuous mode [ 400.097420][T29309] device veth0 left promiscuous mode [ 400.804487][ T6] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 400.814661][ T60] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 400.996828][ T6] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 401.005054][ T6] usb 3-1: config 1 has no interface number 0 [ 401.011231][ T6] usb 3-1: config 1 interface 105 has no altsetting 0 [ 401.017017][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 401.024440][ T60] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.033794][ T6] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 401.034964][ T60] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.054358][ T60] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 401.054445][ T6] usb 3-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 401.063741][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.080233][ T60] usb 1-1: Product: syz [ 401.080945][ T6] usb 3-1: Product: syz [ 401.084897][ T60] usb 1-1: Manufacturer: syz [ 401.094079][ T60] usb 1-1: SerialNumber: syz [ 401.099619][ T6] usb 3-1: Manufacturer: syz [ 401.104292][ T6] usb 3-1: SerialNumber: syz [ 401.319095][ T60] usb 1-1: 0:2 : does not exist [ 401.329272][ T60] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 401.335202][ T6] aqc111: probe of 3-1:1.105 failed with error -71 [ 401.350862][ T60] usb 1-1: USB disconnect, device number 12 [ 401.355592][ T6] usb 3-1: USB disconnect, device number 11 [ 401.373054][T29409] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 401.495004][T29440] 9pnet_fd: p9_fd_create_unix (29440): problem connecting socket: ./file0: -111 [ 401.514938][T29442] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 401.533279][T29444] device veth0 entered promiscuous mode [ 401.539091][T29443] device veth0 left promiscuous mode [ 401.656471][ T343] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 401.849450][ T343] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 401.860479][ T343] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 74, setting to 64 [ 401.872899][ T343] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 401.880759][T29460] netlink: 'syz.0.13826': attribute type 6 has an invalid length. [ 401.888886][ T343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 401.899682][ T343] usb 2-1: SerialNumber: syz [ 401.911141][T29411] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 401.932042][T29470] device veth0 entered promiscuous mode [ 401.938574][T29469] device veth0 left promiscuous mode [ 402.014727][T29482] netlink: 'syz.0.13837': attribute type 4 has an invalid length. [ 402.047467][T29486] device veth0 entered promiscuous mode [ 402.054124][T29486] device veth0 left promiscuous mode [ 402.140757][T29411] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 402.373514][ T343] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 402.381969][ T343] usb-storage 2-1:1.0: USB Mass Storage device detected [ 402.413531][ T343] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 402.429916][ T343] scsi host1: usb-storage 2-1:1.0 [ 402.447325][ T343] usb 2-1: USB disconnect, device number 10 [ 402.541818][T29560] netlink: 'syz.0.13873': attribute type 4 has an invalid length. [ 402.985013][T29572] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.022384][ T60] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 404.226005][ T60] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 404.249210][ T60] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 74, setting to 64 [ 404.269065][ T60] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 404.294325][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 404.317539][ T60] usb 1-1: SerialNumber: syz [ 404.336091][T29603] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 404.401921][T29625] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13897'. [ 404.438026][T29625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13897'. [ 404.479308][T29625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13897'. [ 404.512628][T29625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13897'. [ 404.557355][T29603] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 404.787496][ T60] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 404.805277][ T60] usb-storage 1-1:1.0: USB Mass Storage device detected [ 404.834219][ T60] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 404.869442][ T60] scsi host1: usb-storage 1-1:1.0 [ 404.882242][ T60] usb 1-1: USB disconnect, device number 13 [ 405.456770][T29683] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13930'. [ 405.466203][T29683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13930'. [ 405.475864][T29683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13930'. [ 405.492176][T29683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13930'. [ 405.873191][T29707] 9pnet_fd: Insufficient options for proto=fd [ 406.039950][T29722] 9pnet_fd: p9_fd_create_unix (29722): problem connecting socket: ./file0: -111 [ 406.150216][T29730] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.368696][T29742] device veth0 entered promiscuous mode [ 406.374430][T29741] device veth0 left promiscuous mode [ 407.146672][T29786] device veth0 entered promiscuous mode [ 407.159316][T29785] device veth0 left promiscuous mode [ 407.312948][T29807] netlink: 'syz.0.13987': attribute type 6 has an invalid length. [ 407.346056][T29813] 9pnet_fd: Insufficient options for proto=fd [ 408.290110][T29871] netlink: 'syz.0.14018': attribute type 6 has an invalid length. [ 408.473750][T29892] device veth0 entered promiscuous mode [ 408.488682][T29892] device veth0 left promiscuous mode [ 409.863483][T29945] 9pnet_virtio: no channels available for device ./file0 [ 409.960594][T29949] device veth0 entered promiscuous mode [ 409.982488][T29948] device veth0 left promiscuous mode [ 410.181755][T29963] 9pnet_virtio: no channels available for device ./file0 [ 410.242727][T29967] device veth0 entered promiscuous mode [ 410.257658][T29966] device veth0 left promiscuous mode [ 410.573888][T29985] netlink: 'syz.4.14070': attribute type 6 has an invalid length. [ 411.290743][ T291] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 411.338832][ T28] audit: type=1400 audit(1763067408.586:2023): avc: denied { accept } for pid=30051 comm="syz.0.14102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 411.375948][ T343] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 411.494253][ T291] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 411.513272][ T291] usb 4-1: config 1 has no interface number 0 [ 411.519624][ T291] usb 4-1: config 1 interface 105 has no altsetting 0 [ 411.537234][ T291] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 411.557131][ T291] usb 4-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 411.565725][ T291] usb 4-1: Product: syz [ 411.578445][ T343] usb 3-1: Using ep0 maxpacket: 32 [ 411.583719][ T291] usb 4-1: Manufacturer: syz [ 411.589279][ T343] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 411.602868][ T291] usb 4-1: SerialNumber: syz [ 411.607869][ T343] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.629293][ T343] usb 3-1: config 0 has no interface number 0 [ 411.642418][ T343] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 411.665087][ T343] usb 3-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.695657][ T343] usb 3-1: config 0 interface 196 has no altsetting 0 [ 411.714764][ T343] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 411.727980][ T343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.746869][ T343] usb 3-1: Product: syz [ 411.755656][ T343] usb 3-1: Manufacturer: syz [ 411.770261][ T343] usb 3-1: SerialNumber: syz [ 411.775825][ T343] usb 3-1: config 0 descriptor?? [ 411.829717][T30062] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.850142][ T291] aqc111: probe of 4-1:1.105 failed with error -71 [ 411.868161][ T291] usb 4-1: USB disconnect, device number 6 [ 411.995226][ T343] ipheth 3-1:0.196: Unable to find endpoints [ 412.004828][ T343] usb 3-1: USB disconnect, device number 12 [ 412.331871][T30112] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.694413][T30141] netlink: 'syz.1.14143': attribute type 4 has an invalid length. [ 412.910611][ T343] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 413.026243][T30155] netlink: 'syz.1.14149': attribute type 6 has an invalid length. [ 413.102525][ T343] usb 3-1: Using ep0 maxpacket: 16 [ 413.115191][ T343] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.128797][ T343] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.149519][ T343] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 413.159311][ T343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.169928][ T343] usb 3-1: Product: syz [ 413.174649][ T343] usb 3-1: Manufacturer: syz [ 413.179797][ T343] usb 3-1: SerialNumber: syz [ 413.405360][ T343] usb 3-1: 0:2 : does not exist [ 413.434616][ T343] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 413.459721][ T343] usb 3-1: USB disconnect, device number 13 [ 413.957172][T30195] overlayfs: failed to resolve './file1': -2 [ 414.051397][T30207] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14173'. [ 414.084664][T30207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14173'. [ 414.104391][T30207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14173'. [ 414.136248][T30207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14173'. [ 414.644073][T30256] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.443605][T30391] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.450787][T30391] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.458343][T30391] device bridge_slave_0 entered promiscuous mode [ 417.465738][T30391] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.473099][T30391] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.481121][T30391] device bridge_slave_1 entered promiscuous mode [ 417.609308][T30391] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.616423][T30391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.623747][T30391] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.630780][T30391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.658048][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 417.667930][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.675630][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.695115][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 417.703605][ T6042] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.710685][ T6042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.719325][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 417.727635][ T6042] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.734799][ T6042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.742258][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 417.762165][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 417.775643][T30391] device veth0_vlan entered promiscuous mode [ 417.782323][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 417.790564][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 417.799675][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 417.807386][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 417.822543][T30391] device veth1_macvtap entered promiscuous mode [ 417.831515][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 417.843754][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 417.864695][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 418.070388][ T8] device bridge_slave_1 left promiscuous mode [ 418.086010][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.112042][ T8] device bridge_slave_0 left promiscuous mode [ 418.131887][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.156185][ T8] device veth1_macvtap left promiscuous mode [ 418.170339][ T8] device veth0_vlan left promiscuous mode [ 418.350203][T30420] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.466431][ T28] audit: type=1400 audit(1763067415.276:2024): avc: denied { bind } for pid=30433 comm="syz.2.14276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 418.521935][ T28] audit: type=1400 audit(1763067415.295:2025): avc: denied { setopt } for pid=30433 comm="syz.2.14276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 418.832346][T30461] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.024894][T30490] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.672795][T30564] device sit0 entered promiscuous mode [ 419.690239][T30564] netlink: 'syz.4.14337': attribute type 1 has an invalid length. [ 419.712823][T30564] netlink: 1 bytes leftover after parsing attributes in process `syz.4.14337'. [ 420.479289][ T28] audit: type=1400 audit(1763067417.162:2026): avc: denied { getopt } for pid=30629 comm="syz.0.14368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 420.584172][T30642] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.612329][T30644] netlink: 'syz.0.14376': attribute type 6 has an invalid length. [ 420.910593][T30672] netlink: 'syz.2.14389': attribute type 6 has an invalid length. [ 421.159419][ T291] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 421.353192][ T291] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 421.364826][ T291] usb 5-1: config 1 has no interface number 0 [ 421.377997][ T291] usb 5-1: config 1 interface 105 has no altsetting 0 [ 421.394450][ T291] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 421.413036][ T291] usb 5-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 421.430956][ T291] usb 5-1: Product: syz [ 421.440932][ T291] usb 5-1: Manufacturer: syz [ 421.450237][ T291] usb 5-1: SerialNumber: syz [ 421.680794][ T291] aqc111: probe of 5-1:1.105 failed with error -71 [ 421.701555][ T291] usb 5-1: USB disconnect, device number 9 [ 422.236727][T30743] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14421'. [ 422.256825][T30743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14421'. [ 422.266953][T30743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14421'. [ 422.276714][T30743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14421'. [ 422.310083][T30750] netlink: 'syz.4.14425': attribute type 6 has an invalid length. [ 422.374497][ T291] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 422.587542][ T291] usb 3-1: Using ep0 maxpacket: 16 [ 422.597049][ T291] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.619261][T30796] device veth0 entered promiscuous mode [ 422.622950][ T291] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.631269][T30795] device veth0 left promiscuous mode [ 422.643618][ T291] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.653645][ T291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.662276][ T291] usb 3-1: Product: syz [ 422.666715][ T291] usb 3-1: Manufacturer: syz [ 422.671522][ T291] usb 3-1: SerialNumber: syz [ 422.832622][ T338] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 422.903209][ T291] usb 3-1: 0:2 : does not exist [ 422.912476][ T291] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 422.932355][ T291] usb 3-1: USB disconnect, device number 14 [ 422.945450][T20366] udevd[20366]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 422.992561][ T19] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 423.045739][ T338] usb 5-1: Using ep0 maxpacket: 32 [ 423.052098][T30845] netlink: 'syz.3.14469': attribute type 6 has an invalid length. [ 423.061275][ T338] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 423.074175][ T338] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.086101][ T338] usb 5-1: config 0 has no interface number 0 [ 423.093058][ T338] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 423.103399][ T338] usb 5-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.117105][ T338] usb 5-1: config 0 interface 196 has no altsetting 0 [ 423.134644][ T338] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 423.145160][ T338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.153679][ T338] usb 5-1: Product: syz [ 423.158016][ T338] usb 5-1: Manufacturer: syz [ 423.162760][ T338] usb 5-1: SerialNumber: syz [ 423.168491][ T338] usb 5-1: config 0 descriptor?? [ 423.196214][ T19] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 423.214077][ T19] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 423.237998][ T19] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 423.257905][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 423.279409][ T19] usb 1-1: SerialNumber: syz [ 423.285864][ T19] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 423.301690][ T19] usb-storage 1-1:1.0: USB Mass Storage device detected [ 423.332034][ T19] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 423.344389][ T19] scsi host1: usb-storage 1-1:1.0 [ 423.410980][ T338] ipheth 5-1:0.196: Unable to find endpoints [ 423.427071][T30869] netlink: 'syz.3.14480': attribute type 6 has an invalid length. [ 423.435483][ T338] usb 5-1: USB disconnect, device number 10 [ 423.501726][ T19] usb 1-1: USB disconnect, device number 14 [ 423.729699][T30899] netlink: 'syz.2.14492': attribute type 6 has an invalid length. [ 424.090211][ T19] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 424.292668][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 424.299064][ T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.320079][ T19] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.342971][ T19] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.367263][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.375401][ T19] usb 3-1: Product: syz [ 424.399234][ T19] usb 3-1: Manufacturer: syz [ 424.404633][ T19] usb 3-1: SerialNumber: syz [ 424.559109][ T291] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 424.642070][ T19] usb 3-1: 0:2 : does not exist [ 424.657254][ T19] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 424.681201][ T19] usb 3-1: USB disconnect, device number 15 [ 424.762702][ T291] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 424.770987][ T291] usb 5-1: config 1 has no interface number 0 [ 424.777912][ T291] usb 5-1: config 1 interface 105 has no altsetting 0 [ 424.786598][ T291] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 424.795927][ T291] usb 5-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 424.804676][ T291] usb 5-1: Product: syz [ 424.808934][ T291] usb 5-1: Manufacturer: syz [ 424.813621][ T291] usb 5-1: SerialNumber: syz [ 424.898909][T30957] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14518'. [ 424.908060][T30957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14518'. [ 424.917673][T30957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14518'. [ 424.927224][T30957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14518'. [ 424.953430][ T338] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 425.035229][ T291] aqc111: probe of 5-1:1.105 failed with error -71 [ 425.050627][ T291] usb 5-1: USB disconnect, device number 11 [ 425.157054][ T338] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 425.186237][ T338] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 425.211556][ T338] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 425.224941][ T338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 425.244225][ T338] usb 2-1: SerialNumber: syz [ 425.260245][ T338] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 425.270882][ T338] usb-storage 2-1:1.0: USB Mass Storage device detected [ 425.310765][ T338] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 425.330025][ T338] scsi host1: usb-storage 2-1:1.0 [ 425.430929][T30991] device sit0 entered promiscuous mode [ 425.447530][T30991] netlink: 'syz.2.14532': attribute type 1 has an invalid length. [ 425.467107][T30991] netlink: 1 bytes leftover after parsing attributes in process `syz.2.14532'. [ 425.474127][ T60] usb 2-1: USB disconnect, device number 11 [ 426.042391][ T3990] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 426.129871][T31055] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.253616][ T3990] usb 3-1: Using ep0 maxpacket: 32 [ 426.264211][ T3990] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 426.272536][ T3990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.304171][ T3990] usb 3-1: config 0 has no interface number 0 [ 426.310332][ T3990] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 426.328211][ T3990] usb 3-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 426.360183][ T3990] usb 3-1: config 0 interface 196 has no altsetting 0 [ 426.372955][ T3990] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 426.392152][ T3990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.400413][ T3990] usb 3-1: Product: syz [ 426.404886][ T3990] usb 3-1: Manufacturer: syz [ 426.409489][ T3990] usb 3-1: SerialNumber: syz [ 426.417813][ T3990] usb 3-1: config 0 descriptor?? [ 426.598559][T31075] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.638443][ T3990] ipheth 3-1:0.196: Unable to find endpoints [ 426.654112][ T3990] usb 3-1: USB disconnect, device number 16 [ 427.390337][T31133] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.706324][T31155] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14610'. [ 427.724334][T31155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14610'. [ 427.744124][T31155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14610'. [ 427.762680][T31155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14610'. [ 427.850805][T31159] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.656931][ T343] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 431.859429][ T343] usb 2-1: Using ep0 maxpacket: 16 [ 431.865710][ T343] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.895043][ T343] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 431.919447][ T343] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 431.937920][ T343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.954053][ T343] usb 2-1: Product: syz [ 431.962909][ T343] usb 2-1: Manufacturer: syz [ 431.972118][ T343] usb 2-1: SerialNumber: syz [ 432.092730][T31348] netlink: 'syz.2.14700': attribute type 1 has an invalid length. [ 432.101436][T31348] netlink: 1 bytes leftover after parsing attributes in process `syz.2.14700'. [ 432.168900][T31356] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14704'. [ 432.186123][T31356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14704'. [ 432.196109][T31356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14704'. [ 432.205989][ T343] usb 2-1: 0:2 : does not exist [ 432.206398][T31356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14704'. [ 432.214636][ T343] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 432.257803][ T343] usb 2-1: USB disconnect, device number 12 [ 432.390126][T31384] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14718'. [ 432.399485][T31384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14718'. [ 432.408931][T31384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14718'. [ 432.418414][T31384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14718'. [ 433.039074][ T28] audit: type=1400 audit(1763067428.948:2027): avc: denied { read write } for pid=31444 comm="syz.1.14748" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 433.111776][ T28] audit: type=1400 audit(1763067428.966:2028): avc: denied { open } for pid=31444 comm="syz.1.14748" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 435.099295][ T291] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 435.131216][ T60] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 435.255901][T31583] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.279991][T31583] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.291123][T31583] device bridge_slave_0 entered promiscuous mode [ 435.311642][T31583] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.320009][ T291] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 435.328325][T31583] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.330802][ T291] usb 3-1: config 1 has no interface number 0 [ 435.337129][ T60] usb 4-1: Using ep0 maxpacket: 32 [ 435.348266][T31583] device bridge_slave_1 entered promiscuous mode [ 435.351429][ T291] usb 3-1: config 1 interface 105 has no altsetting 0 [ 435.354836][ T60] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 435.369409][ T291] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 435.373385][ T60] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.381117][ T291] usb 3-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 435.390505][ T60] usb 4-1: config 0 has no interface number 0 [ 435.405091][ T60] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 435.418535][ T291] usb 3-1: Product: syz [ 435.418944][ T60] usb 4-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 435.423808][ T291] usb 3-1: Manufacturer: syz [ 435.436031][ T60] usb 4-1: config 0 interface 196 has no altsetting 0 [ 435.441066][ T291] usb 3-1: SerialNumber: syz [ 435.448984][ T60] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 435.461689][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.469713][ T60] usb 4-1: Product: syz [ 435.473926][ T60] usb 4-1: Manufacturer: syz [ 435.478550][ T60] usb 4-1: SerialNumber: syz [ 435.486553][ T60] usb 4-1: config 0 descriptor?? [ 435.506301][T31602] device veth0 entered promiscuous mode [ 435.516486][T31601] device veth0 left promiscuous mode [ 435.557169][T31608] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14824'. [ 435.605367][T31583] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.612854][T31583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.620226][T31583] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.627391][T31583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.681199][ T291] aqc111: probe of 3-1:1.105 failed with error -71 [ 435.684857][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 435.700008][ T291] usb 3-1: USB disconnect, device number 17 [ 435.706254][ T60] ipheth 4-1:0.196: Unable to find endpoints [ 435.712607][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.717044][ T60] usb 4-1: USB disconnect, device number 7 [ 435.726506][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.742480][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 435.750829][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.757872][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.774340][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 435.782661][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.789745][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.810458][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 435.819597][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 435.828490][ T43] device bridge_slave_1 left promiscuous mode [ 435.834976][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.842515][ T43] device bridge_slave_0 left promiscuous mode [ 435.857766][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.865868][ T43] device veth1_macvtap left promiscuous mode [ 435.872110][ T43] device veth0_vlan left promiscuous mode [ 436.005780][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 436.021699][T31583] device veth0_vlan entered promiscuous mode [ 436.033705][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 436.042039][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 436.049583][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 436.057195][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 436.066819][T31583] device veth1_macvtap entered promiscuous mode [ 436.092504][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 436.124934][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 436.243628][T31662] netlink: 'syz.2.14846': attribute type 1 has an invalid length. [ 436.559282][ T338] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 436.761796][ T338] usb 3-1: Using ep0 maxpacket: 16 [ 436.768148][ T338] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.789225][ T338] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.812547][ T338] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 436.825736][ T338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.844597][ T338] usb 3-1: Product: syz [ 436.855332][ T338] usb 3-1: Manufacturer: syz [ 436.860180][ T338] usb 3-1: SerialNumber: syz [ 437.094460][ T338] usb 3-1: 0:2 : does not exist [ 437.108930][ T338] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 437.139632][ T338] usb 3-1: USB disconnect, device number 18 [ 437.490769][T31745] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.507992][T31745] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.525347][T31745] device bridge_slave_0 entered promiscuous mode [ 437.542884][T31745] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.561113][T31745] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.568606][T31745] device bridge_slave_1 entered promiscuous mode [ 437.698995][T31745] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.706096][T31745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.713415][T31745] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.720461][T31745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.759694][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 437.770870][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.780096][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.804181][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 437.814564][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.821661][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.829873][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 437.844368][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.851457][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.872539][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 437.881451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 437.889533][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 437.905531][T31745] device veth0_vlan entered promiscuous mode [ 437.925962][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 437.934510][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 437.961690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 437.977003][T31745] device veth1_macvtap entered promiscuous mode [ 437.990722][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 438.013406][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 438.038233][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 438.072390][ T43] device bridge_slave_1 left promiscuous mode [ 438.078825][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.107078][ T43] device bridge_slave_0 left promiscuous mode [ 438.128881][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.151392][ T43] device veth1_macvtap left promiscuous mode [ 438.157461][ T43] device veth0_vlan left promiscuous mode [ 438.562881][ T19] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 438.766507][ T19] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 438.784448][ T19] usb 5-1: config 1 has no interface number 0 [ 438.801451][ T19] usb 5-1: config 1 interface 105 has no altsetting 0 [ 438.824104][ T19] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 438.856161][ T19] usb 5-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 438.877231][ T19] usb 5-1: Product: syz [ 438.881432][ T19] usb 5-1: Manufacturer: syz [ 438.886487][ T19] usb 5-1: SerialNumber: syz [ 438.994753][T31858] 9pnet_fd: Insufficient options for proto=fd [ 439.121646][ T19] aqc111: probe of 5-1:1.105 failed with error -71 [ 439.134123][ T19] usb 5-1: USB disconnect, device number 12 [ 440.193784][ T3990] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 440.397038][ T3990] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 440.411017][ T3990] usb 1-1: config 1 has no interface number 0 [ 440.428566][ T3990] usb 1-1: config 1 interface 105 has no altsetting 0 [ 440.443723][ T3990] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 440.462018][ T3990] usb 1-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 440.479755][ T3990] usb 1-1: Product: syz [ 440.487436][ T3990] usb 1-1: Manufacturer: syz [ 440.497761][ T3990] usb 1-1: SerialNumber: syz [ 440.634230][T31943] device sit0 entered promiscuous mode [ 440.647678][T31943] netlink: 'syz.4.14975': attribute type 1 has an invalid length. [ 440.655780][T31943] __nla_validate_parse: 4 callbacks suppressed [ 440.655792][T31943] netlink: 1 bytes leftover after parsing attributes in process `syz.4.14975'. [ 440.725760][ T3990] aqc111: probe of 1-1:1.105 failed with error -71 [ 440.739680][ T3990] usb 1-1: USB disconnect, device number 15 [ 440.769280][ T28] audit: type=1400 audit(1763067436.201:2029): avc: denied { view } for pid=31950 comm="syz.1.14980" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 441.696232][ T19] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 441.703903][ T343] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 441.740456][T32043] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.747688][T32043] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.760274][T32043] device bridge_slave_0 entered promiscuous mode [ 441.769069][T32043] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.776425][T32043] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.784021][T32043] device bridge_slave_1 entered promiscuous mode [ 441.840845][T32043] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.847923][T32043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.855271][T32043] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.862300][T32043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.886943][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 441.895690][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.903067][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 441.908248][ T343] usb 1-1: Using ep0 maxpacket: 16 [ 441.911551][T32070] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15030'. [ 441.915883][ T19] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 441.922583][T32070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15030'. [ 441.934934][ T19] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.939871][T32070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15030'. [ 441.949949][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.950343][ T343] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.959441][T32070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15030'. [ 441.966100][ T343] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 441.996580][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 442.005167][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.005643][ T19] usb 5-1: config 0 has no interface number 0 [ 442.012208][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.018835][ T19] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 442.039282][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 442.047459][ T19] usb 5-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.056919][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.060494][ T19] usb 5-1: config 0 interface 196 has no altsetting 0 [ 442.067469][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.083375][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 442.086927][ T343] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 442.100605][ T343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.108711][ T343] usb 1-1: Product: syz [ 442.113085][ T343] usb 1-1: Manufacturer: syz [ 442.117726][ T343] usb 1-1: SerialNumber: syz [ 442.122446][ T19] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 442.122935][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 442.131475][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.131494][ T19] usb 5-1: Product: syz [ 442.131505][ T19] usb 5-1: Manufacturer: syz [ 442.131514][ T19] usb 5-1: SerialNumber: syz [ 442.132838][ T19] usb 5-1: config 0 descriptor?? [ 442.168601][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 442.182121][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 442.190171][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 442.197947][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 442.206064][T32043] device veth0_vlan entered promiscuous mode [ 442.216733][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 442.227354][T32043] device veth1_macvtap entered promiscuous mode [ 442.239037][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 442.253420][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 442.358738][ T343] usb 1-1: 0:2 : does not exist [ 442.365827][ T343] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 442.378716][ T343] usb 1-1: USB disconnect, device number 16 [ 442.386695][ T19] ipheth 5-1:0.196: Unable to find endpoints [ 442.396953][ T19] usb 5-1: USB disconnect, device number 13 [ 442.399071][T20366] udevd[20366]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 442.421329][ T8] device bridge_slave_1 left promiscuous mode [ 442.427495][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.435198][ T8] device bridge_slave_0 left promiscuous mode [ 442.441706][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.450858][ T8] device veth1_macvtap left promiscuous mode [ 442.460601][ T8] device veth0_vlan left promiscuous mode [ 443.273443][ T343] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 443.477007][ T343] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 443.498841][ T343] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 443.520585][ T343] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 443.539871][ T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 443.550785][ T343] usb 1-1: SerialNumber: syz [ 443.570294][ T343] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 443.582625][ T343] usb-storage 1-1:1.0: USB Mass Storage device detected [ 443.609485][ T343] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 443.625411][ T343] scsi host1: usb-storage 1-1:1.0 [ 443.781996][ T343] usb 1-1: USB disconnect, device number 17 [ 444.861423][ T343] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 444.999951][T32071] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 445.063902][ T343] usb 2-1: Using ep0 maxpacket: 16 [ 445.071509][ T343] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.096032][ T343] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 445.106647][ T343] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 445.115698][ T343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.140146][ T343] usb 2-1: Product: syz [ 445.144348][ T343] usb 2-1: Manufacturer: syz [ 445.148947][ T343] usb 2-1: SerialNumber: syz [ 445.191770][T32071] usb 4-1: Using ep0 maxpacket: 32 [ 445.198040][T32071] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 445.223882][T32071] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.234540][T32071] usb 4-1: config 0 has no interface number 0 [ 445.240685][T32071] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 445.253763][T32071] usb 4-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.266990][T32071] usb 4-1: config 0 interface 196 has no altsetting 0 [ 445.288854][T32071] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 445.297945][T32071] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.306175][T32071] usb 4-1: Product: syz [ 445.310406][T32071] usb 4-1: Manufacturer: syz [ 445.315033][T32071] usb 4-1: SerialNumber: syz [ 445.324023][T32071] usb 4-1: config 0 descriptor?? [ 445.402627][ T343] usb 2-1: 0:2 : does not exist [ 445.418218][ T343] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 445.431674][ T343] usb 2-1: USB disconnect, device number 13 [ 445.511651][ T60] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 445.555658][T32071] ipheth 4-1:0.196: Unable to find endpoints [ 445.578701][T32071] usb 4-1: USB disconnect, device number 8 [ 445.715102][ T60] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 445.735264][ T60] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 445.756638][ T60] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 445.765710][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 445.788552][ T60] usb 1-1: SerialNumber: syz [ 445.794813][ T60] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 445.804127][ T60] usb-storage 1-1:1.0: USB Mass Storage device detected [ 445.841955][ T60] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 445.873714][ T60] scsi host1: usb-storage 1-1:1.0 [ 446.073644][T32420] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15190'. [ 446.084447][T32420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15190'. [ 446.093900][T32420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15190'. [ 446.103349][T32420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15190'. [ 446.155982][T32427] overlayfs: missing 'lowerdir' [ 447.082040][T32521] overlayfs: missing 'lowerdir' [ 447.229555][ T338] usb 1-1: USB disconnect, device number 18 [ 447.526078][ T28] audit: type=1400 audit(1763067442.544:2030): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 447.533067][T32527] can0: slcan on ttyS3. [ 447.568646][ T28] audit: type=1400 audit(1763067442.544:2031): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.611268][ T28] audit: type=1400 audit(1763067442.544:2032): avc: denied { read } for pid=142 comm="dhcpcd" name="n15" dev="tmpfs" ino=39033 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 447.645256][T32529] can0 (unregistered): slcan off ttyS3. [ 447.666708][T32529] Falling back ldisc for ttyS3. [ 447.675034][ T28] audit: type=1400 audit(1763067442.544:2033): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=39033 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 447.748569][ T28] audit: type=1400 audit(1763067442.544:2034): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=39033 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 447.752061][T32550] overlayfs: missing 'lowerdir' [ 447.821538][ T28] audit: type=1400 audit(1763067442.647:2035): avc: denied { read } for pid=32531 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.876365][ T28] audit: type=1400 audit(1763067442.647:2036): avc: denied { open } for pid=32531 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.926310][ T28] audit: type=1400 audit(1763067442.647:2037): avc: denied { getattr } for pid=32531 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.951721][ T28] audit: type=1400 audit(1763067442.788:2038): avc: denied { write } for pid=32530 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=492 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.995695][T32585] netlink: 'syz.4.15253': attribute type 1 has an invalid length. [ 447.995847][ T28] audit: type=1400 audit(1763067442.788:2039): avc: denied { add_name } for pid=32530 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.021252][T32585] netlink: 1 bytes leftover after parsing attributes in process `syz.4.15253'. [ 448.112503][T32608] overlayfs: missing 'lowerdir' [ 448.214359][T32624] netlink: 'syz.4.15270': attribute type 1 has an invalid length. [ 448.226859][T32624] netlink: 1 bytes leftover after parsing attributes in process `syz.4.15270'. [ 448.276070][T32630] overlayfs: missing 'lowerdir' [ 448.589769][T32660] overlayfs: missing 'lowerdir' [ 448.879481][T32687] overlayfs: missing 'lowerdir' [ 448.915951][T32692] can0: slcan on ttyS3. [ 448.964767][T32692] can0 (unregistered): slcan off ttyS3. [ 449.103929][T32730] overlayfs: missing 'lowerdir' [ 449.606891][T32762] overlayfs: missing 'workdir' [ 450.095753][ T350] overlayfs: missing 'workdir' [ 450.115460][ T60] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 450.317942][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 450.324288][ T60] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 450.339286][ T60] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.349386][ T60] usb 5-1: config 0 has no interface number 0 [ 450.381974][ T60] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 450.399233][ T60] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 450.419417][ T60] usb 5-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 450.444932][ T60] usb 5-1: config 0 interface 196 has no altsetting 0 [ 450.460279][ T60] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 450.477373][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.494683][ T60] usb 5-1: Product: syz [ 450.503418][ T60] usb 5-1: Manufacturer: syz [ 450.512610][ T60] usb 5-1: SerialNumber: syz [ 450.523086][ T60] usb 5-1: config 0 descriptor?? [ 450.749951][ T60] ipheth 5-1:0.196: Unable to find endpoints [ 450.758858][ T60] usb 5-1: USB disconnect, device number 14 [ 450.901244][ T382] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 450.910145][ T382] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 450.925464][ T343] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 451.133499][ T343] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 451.152534][ T343] usb 1-1: config 1 has no interface number 0 [ 451.158651][ T343] usb 1-1: config 1 interface 105 has no altsetting 0 [ 451.182713][ T343] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 451.202516][ T343] usb 1-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 451.221902][ T343] usb 1-1: Product: syz [ 451.226390][ T343] usb 1-1: Manufacturer: syz [ 451.231004][ T343] usb 1-1: SerialNumber: syz [ 451.370591][ T423] fuse: Unknown parameter 'grou00000000000000000000' [ 451.457041][ T343] aqc111: probe of 1-1:1.105 failed with error -71 [ 451.468294][ T343] usb 1-1: USB disconnect, device number 19 [ 452.015311][ T453] device veth0 entered promiscuous mode [ 452.026433][ T452] device veth0 left promiscuous mode [ 452.356495][ T480] netlink: 44 bytes leftover after parsing attributes in process `syz.4.15398'. [ 452.365684][ T480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15398'. [ 452.374857][ T480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15398'. [ 452.383932][ T480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15398'. [ 453.098980][ T549] device sit0 entered promiscuous mode [ 453.117420][ T549] netlink: 'syz.0.15430': attribute type 1 has an invalid length. [ 453.140315][ T549] netlink: 1 bytes leftover after parsing attributes in process `syz.0.15430'. [ 453.385631][ T564] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 453.395783][ T564] EXT4-fs (loop3): unable to read superblock [ 453.717815][ T338] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 453.920323][ T338] usb 4-1: Using ep0 maxpacket: 32 [ 453.926912][ T338] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 453.945965][ T338] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.978146][ T338] usb 4-1: config 0 has no interface number 0 [ 453.994932][ T338] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 454.016235][ T338] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 454.046421][ T338] usb 4-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.076515][ T338] usb 4-1: config 0 interface 196 has no altsetting 0 [ 454.092097][ T338] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 454.111974][ T338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.132793][ T338] usb 4-1: Product: syz [ 454.137366][ T338] usb 4-1: Manufacturer: syz [ 454.142079][ T338] usb 4-1: SerialNumber: syz [ 454.156342][ T338] usb 4-1: config 0 descriptor?? [ 454.386869][ T338] ipheth 4-1:0.196: Unable to find endpoints [ 454.401030][ T338] usb 4-1: USB disconnect, device number 9 [ 454.670973][ T645] fuse: Bad value for 'user_id' [ 454.677106][ T343] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 454.880937][ T343] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 454.889156][ T343] usb 2-1: config 1 has no interface number 0 [ 454.899630][ T343] usb 2-1: config 1 interface 105 has no altsetting 0 [ 454.915357][ T343] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 454.933111][ T343] usb 2-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 454.952515][ T343] usb 2-1: Product: syz [ 454.956792][ T343] usb 2-1: Manufacturer: syz [ 454.961406][ T343] usb 2-1: SerialNumber: syz [ 455.099402][ T701] kvm [700]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 455.125466][ T701] kvm [700]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 455.193527][ T343] aqc111: probe of 2-1:1.105 failed with error -71 [ 455.213915][ T343] usb 2-1: USB disconnect, device number 14 [ 455.395007][ T757] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 455.411714][ T757] EXT4-fs (loop3): unable to read superblock [ 455.515551][ T772] can0: slcan on ttyS3. [ 455.562493][ T772] can0 (unregistered): slcan off ttyS3. [ 455.569020][ T772] Falling back ldisc for ttyS3. [ 455.615135][T32071] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 455.785587][T32071] usb 1-1: device descriptor read/64, error -71 [ 455.856756][ T830] fuse: Bad value for 'fd' [ 456.084041][T32071] usb 1-1: device descriptor read/64, error -71 [ 456.132343][ T842] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 456.247814][ T850] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 456.258448][ T850] EXT4-fs (loop4): unable to read superblock [ 456.281150][ T857] fuse: Bad value for 'fd' [ 456.371834][T32071] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 456.542376][T32071] usb 1-1: device descriptor read/64, error -71 [ 456.814358][ T886] fuse: Bad value for 'fd' [ 456.830188][T32071] usb 1-1: device descriptor read/64, error -71 [ 456.958115][T32071] usb usb1-port1: attempt power cycle [ 457.363400][ T924] fuse: Bad value for 'fd' [ 457.405717][T32071] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 457.449397][T32071] usb 1-1: device descriptor read/8, error -71 [ 457.558223][ T948] fuse: Invalid rootmode [ 457.609270][T32071] usb 1-1: device descriptor read/8, error -71 [ 457.704397][ T973] fuse: Invalid rootmode [ 457.896004][T32071] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 457.939674][T32071] usb 1-1: device descriptor read/8, error -71 [ 458.106460][T32071] usb 1-1: device descriptor read/8, error -71 [ 458.237694][T32071] usb usb1-port1: unable to enumerate USB device [ 458.550931][ T1048] can0: slcan on ttyS3. [ 458.589051][ T1048] can0 (unregistered): slcan off ttyS3. [ 458.594765][ T1048] Falling back ldisc for ttyS3. [ 459.758911][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.775302][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.804332][ T1128] device bridge_slave_0 entered promiscuous mode [ 459.841703][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.875819][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.900347][ T1128] device bridge_slave_1 entered promiscuous mode [ 460.138188][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.145274][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.152556][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.159657][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.261547][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 460.273506][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.284054][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.302912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 460.311433][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.318554][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.327663][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 460.336084][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.343163][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.359968][ T1172] kvm [1171]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 460.368412][ T1172] kvm [1171]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 460.378186][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 460.392558][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 460.438624][ T1183] can0: slcan on ttyS3. [ 460.443186][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 460.472419][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 460.481083][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 460.488789][ T338] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 460.497717][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 460.505263][ T1128] device veth0_vlan entered promiscuous mode [ 460.538413][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 460.552842][ T1183] can0 (unregistered): slcan off ttyS3. [ 460.561123][ T1128] device veth1_macvtap entered promiscuous mode [ 460.564569][ T1183] Falling back ldisc for ttyS3. [ 460.581754][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 460.611554][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 460.642248][ T1204] fuse: Unknown parameter 'use00000000000000000000' [ 460.664760][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 460.664775][ T28] audit: type=1400 audit(2000000007.674:2045): avc: denied { mount } for pid=1128 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 460.720623][ T338] usb 1-1: Using ep0 maxpacket: 16 [ 460.727841][ T334] device bridge_slave_1 left promiscuous mode [ 460.742644][ T338] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.751943][ T1219] /dev/rnullb0: Can't open blockdev [ 460.752953][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.767658][ T338] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.791143][ T334] device bridge_slave_0 left promiscuous mode [ 460.798967][ T338] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 460.808234][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.824065][ T338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.832515][ T338] usb 1-1: Product: syz [ 460.836850][ T338] usb 1-1: Manufacturer: syz [ 460.842592][ T338] usb 1-1: SerialNumber: syz [ 460.855519][ T334] device veth1_macvtap left promiscuous mode [ 460.864084][ T334] device veth0_vlan left promiscuous mode [ 460.979938][ T1248] fuse: Unknown parameter 'use00000000000000000000' [ 461.071516][ T338] usb 1-1: 0:2 : does not exist [ 461.082388][ T338] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 461.120774][ T338] usb 1-1: USB disconnect, device number 24 [ 461.495242][ T28] audit: type=1400 audit(2000000008.453:2046): avc: denied { map } for pid=1299 comm="syz.4.15737" path="socket:[181073]" dev="sockfs" ino=181073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 461.724237][ T1317] fuse: Unknown parameter 'grou00000000000000000000' [ 461.980894][ T1345] fuse: Unknown parameter 'group_i00000000000000000000' [ 462.045807][ T1357] fuse: Unknown parameter 'user_id00000000000000000000' [ 462.148403][ T1369] fuse: Unknown parameter 'group_i00000000000000000000' [ 462.189329][ T1379] /dev/rnullb0: Can't open blockdev [ 462.243844][ T1390] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15778'. [ 462.253000][ T1390] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15778'. [ 462.408608][ T1437] /dev/rnullb0: Can't open blockdev [ 462.420239][ T1441] fuse: Unknown parameter 'group_id00000000000000000000' [ 462.629171][ T19] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 462.682428][ T1478] can0: slcan on ttyS3. [ 462.735303][ T1478] can0 (unregistered): slcan off ttyS3. [ 462.745862][ T1478] Falling back ldisc for ttyS3. [ 462.842984][ T19] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 462.863612][ T19] usb 2-1: config 1 has no interface number 0 [ 462.869740][ T19] usb 2-1: config 1 interface 105 has no altsetting 0 [ 462.896718][ T19] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 462.924164][ T19] usb 2-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 462.950967][ T19] usb 2-1: Product: syz [ 462.961667][ T19] usb 2-1: Manufacturer: syz [ 462.977127][ T19] usb 2-1: SerialNumber: syz [ 463.075129][ T1523] kvm [1521]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 463.096895][ T1523] kvm [1521]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 463.213960][ T19] aqc111: probe of 2-1:1.105 failed with error -71 [ 463.235753][ T19] usb 2-1: USB disconnect, device number 15 [ 463.460591][ T1564] can0: slcan on ttyS3. [ 463.534672][ T1564] can0 (unregistered): slcan off ttyS3. [ 463.540325][ T1564] Falling back ldisc for ttyS3. [ 463.821174][ T1619] fuse: Bad value for 'user_id' [ 464.213913][ T1660] fuse: Bad value for 'user_id' [ 464.331025][ T1667] fuse: Bad value for 'fd' [ 464.541481][ T28] audit: type=1400 audit(2000000011.314:2047): avc: denied { unmount } for pid=31583 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 464.979717][ T1701] can0: slcan on ttyS3. [ 465.037545][ T1701] can0 (unregistered): slcan off ttyS3. [ 465.043241][ T1701] Falling back ldisc for ttyS3. [ 465.057221][ T1710] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15900'. [ 465.082707][ T1710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15900'. [ 465.108522][ T1710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15900'. [ 465.143726][ T1710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15900'. [ 465.212645][ T1723] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 465.303822][T32071] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 465.334203][ T1737] fuse: Unknown parameter '00000000000000000005' [ 465.496167][T32071] usb 4-1: Using ep0 maxpacket: 16 [ 465.513952][T32071] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.525053][T32071] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 465.550043][T32071] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 465.559661][T32071] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.567756][T32071] usb 4-1: Product: syz [ 465.588351][T32071] usb 4-1: Manufacturer: syz [ 465.602323][T32071] usb 4-1: SerialNumber: syz [ 465.823809][T32071] usb 4-1: 0:2 : does not exist [ 465.831945][T32071] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 465.861132][T32071] usb 4-1: USB disconnect, device number 10 [ 465.876317][ T1802] can0: slcan on ttyS3. [ 465.922985][ T1802] can0 (unregistered): slcan off ttyS3. [ 465.932757][ T1802] Falling back ldisc for ttyS3. [ 466.040688][ T1825] /dev/rnullb0: Can't open blockdev [ 466.129252][ T1836] fuse: Bad value for 'fd' [ 466.219688][ T1855] SELinux: security_context_str_to_sid () failed with errno=-22 [ 466.317182][ T1876] fuse: Invalid rootmode [ 466.473122][ T1895] netlink: 5308 bytes leftover after parsing attributes in process `syz.2.15961'. [ 467.174144][ T1917] can0: slcan on ttyS3. [ 467.222884][ T1917] can0 (unregistered): slcan off ttyS3. [ 467.230014][ T1917] Falling back ldisc for ttyS3. [ 467.488909][ T291] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 467.542402][ T1965] /dev/rnullb0: Can't open blockdev [ 467.691486][ T291] usb 2-1: Using ep0 maxpacket: 16 [ 467.700477][ T291] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.721453][ T291] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 467.755082][ T291] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 467.785847][ T291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.796586][ T291] usb 2-1: Product: syz [ 467.807339][ T291] usb 2-1: Manufacturer: syz [ 467.828789][ T291] usb 2-1: SerialNumber: syz [ 468.052107][ T291] usb 2-1: 0:2 : does not exist [ 468.077434][ T291] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 468.114337][ T291] usb 2-1: USB disconnect, device number 16 [ 468.661297][T32071] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 468.874499][T32071] usb 5-1: Using ep0 maxpacket: 32 [ 468.880762][T32071] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 468.910544][T32071] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.938414][T32071] usb 5-1: config 0 has no interface number 0 [ 468.955351][T32071] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 468.998670][T32071] usb 5-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.022521][T32071] usb 5-1: config 0 interface 196 has no altsetting 0 [ 469.046313][T32071] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 469.061433][T32071] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.076988][T32071] usb 5-1: Product: syz [ 469.086429][T32071] usb 5-1: Manufacturer: syz [ 469.098302][T32071] usb 5-1: SerialNumber: syz [ 469.119725][T32071] usb 5-1: config 0 descriptor?? [ 469.351243][T32071] ipheth 5-1:0.196: Unable to find endpoints [ 469.380276][T32071] usb 5-1: USB disconnect, device number 15 [ 469.579318][ T2038] can0: slcan on ttyS3. [ 469.621798][ T2038] can0 (unregistered): slcan off ttyS3. [ 469.627448][ T2038] Falling back ldisc for ttyS3. [ 469.934935][ T2085] /dev/rnullb0: Can't open blockdev [ 470.141172][ T2108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16038'. [ 470.400338][ T2131] can0: slcan on ttyS3. [ 470.407744][ T2136] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 470.428869][ T2136] EXT4-fs (loop4): unable to read superblock [ 470.441902][ T2131] can0 (unregistered): slcan off ttyS3. [ 470.448855][ T2131] Falling back ldisc for ttyS3. [ 470.586837][ T2156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16058'. [ 470.746967][ T2175] kvm [2174]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 470.768220][ T2175] kvm [2174]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 470.781867][ T2180] can0: slcan on ttyS3. [ 470.792843][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 470.847082][ T2180] can0 (unregistered): slcan off ttyS3. [ 470.853960][ T2180] Falling back ldisc for ttyS3. [ 470.978661][ T2194] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 471.337452][ T2240] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 471.347071][ T2240] EXT4-fs (loop1): unable to read superblock [ 472.126962][ T2253] /dev/rnullb0: Can't open blockdev [ 472.375983][ T2276] fuse: Unknown parameter 'user_id00000000000000000000' [ 472.504105][ T2300] fuse: Unknown parameter 'user_id00000000000000000000' [ 472.580953][ T2312] SELinux: security_context_str_to_sid () failed with errno=-22 [ 472.735238][ T2329] fuse: Bad value for 'fd' [ 472.773817][ T2331] can0: slcan on ttyS3. [ 472.818997][ T2331] can0 (unregistered): slcan off ttyS3. [ 472.824923][ T2331] Falling back ldisc for ttyS3. [ 473.926773][ T19] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 474.010760][ T2431] /dev/rnullb0: Can't open blockdev [ 474.125705][ T2442] fuse: Unknown parameter '00000000000000000005' [ 474.130869][ T19] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 474.154173][ T19] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 474.178899][ T19] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 474.209671][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 474.225239][ T19] usb 1-1: SerialNumber: syz [ 474.242874][ T19] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 474.267917][ T19] usb-storage 1-1:1.0: USB Mass Storage device detected [ 474.303940][ T19] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 474.331847][ T19] scsi host1: usb-storage 1-1:1.0 [ 474.773158][ T2473] fuse: Unknown parameter '00000000000000000005' [ 474.834153][ T2475] kvm [2474]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 474.859682][ T2475] kvm [2474]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 475.065010][ T2484] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 475.089298][ T2484] EXT4-fs (loop2): unable to read superblock [ 475.186570][ T2494] SELinux: security_context_str_to_sid () failed with errno=-22 [ 475.272044][ T2514] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 475.286533][ T2514] EXT4-fs (loop3): unable to read superblock [ 475.301608][ T2516] can0: slcan on ttyS3. [ 475.334554][ T2516] can0 (unregistered): slcan off ttyS3. [ 475.350172][ T2516] Falling back ldisc for ttyS3. [ 475.533396][ T2560] netlink: 5308 bytes leftover after parsing attributes in process `syz.4.16216'. [ 475.566224][ T2562] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 475.577157][ T2562] EXT4-fs (loop3): unable to read superblock [ 475.666746][ T2570] can0: slcan on ttyS3. [ 475.817209][ T2570] can0 (unregistered): slcan off ttyS3. [ 476.448304][ T2627] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 476.467404][ T2627] EXT4-fs (loop0): unable to read superblock [ 476.496310][ T3990] usb 1-1: USB disconnect, device number 25 [ 476.551451][ T28] audit: type=1400 audit(2000000022.582:2048): avc: denied { accept } for pid=2641 comm="syz.1.16244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 476.793955][ T291] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 476.934295][ T28] audit: type=1400 audit(2000000022.948:2049): avc: denied { getopt } for pid=2691 comm="syz.1.16267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 476.997542][ T291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 477.014022][ T291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 477.035270][ T291] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 477.056240][ T291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 477.092475][ T291] usb 4-1: SerialNumber: syz [ 477.109218][ T291] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 477.135565][ T291] usb-storage 4-1:1.0: USB Mass Storage device detected [ 477.153967][ T291] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 477.193007][ T291] scsi host1: usb-storage 4-1:1.0 [ 477.449601][ T2731] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 478.085581][ T2745] /dev/rnullb0: Can't open blockdev [ 478.264838][ T19] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 478.473946][ T19] usb 3-1: config 1 has an invalid descriptor of length 74, skipping remainder of the config [ 478.484332][ T19] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.504438][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 478.520522][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 478.528793][ T19] usb 3-1: SerialNumber: syz [ 478.542311][ T19] cdc_ether 3-1:1.0: skipping garbage [ 478.547735][ T19] usb 3-1: bad CDC descriptors [ 478.552954][ T19] usb-storage 3-1:1.0: USB Mass Storage device detected [ 478.560700][ T19] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 478.752023][ T19] usb 3-1: USB disconnect, device number 19 [ 478.835988][ T2804] can0: slcan on ttyS3. [ 478.904770][ T2804] can0 (unregistered): slcan off ttyS3. [ 478.910935][ T2804] Falling back ldisc for ttyS3. [ 479.105509][ T2843] netlink: 5308 bytes leftover after parsing attributes in process `syz.3.16324'. [ 479.226927][ T2859] SELinux: security_context_str_to_sid () failed with errno=-22 [ 479.405602][ T338] usb 4-1: USB disconnect, device number 11 [ 479.821076][ T3990] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 480.028284][ T3990] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 480.045078][ T3990] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 480.077444][ T3990] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 480.086514][ T3990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 480.126856][ T3990] usb 1-1: SerialNumber: syz [ 480.143043][ T3990] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 480.150318][ T3990] usb-storage 1-1:1.0: USB Mass Storage device detected [ 480.183871][ T3990] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 480.202431][ T3990] scsi host1: usb-storage 1-1:1.0 [ 481.059048][ T28] audit: type=1400 audit(2000000026.813:2050): avc: denied { map } for pid=2958 comm="syz.1.16376" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 481.322028][ T2982] can0: slcan on ttyS3. [ 481.367949][ T2982] can0 (unregistered): slcan off ttyS3. [ 481.377221][ T2982] Falling back ldisc for ttyS3. [ 481.508075][ T291] usb 1-1: USB disconnect, device number 26 [ 481.715317][ T3033] kvm [3032]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 481.728758][ T3033] kvm [3032]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 481.803507][ T343] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 481.878122][ T19] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 481.996608][ T343] usb 5-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 482.007009][ T343] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 482.017579][ T343] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 482.031616][ T343] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 482.040736][ T343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 482.048878][ T343] usb 5-1: SerialNumber: syz [ 482.054369][ T3008] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 482.062124][ T343] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 482.069065][ T343] usb-storage 5-1:1.0: USB Mass Storage device detected [ 482.078749][ T343] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 482.087191][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 482.093608][ T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.103791][ T19] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 482.114321][ T19] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 482.123459][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.131537][ T19] usb 3-1: Product: syz [ 482.137568][ T19] usb 3-1: Manufacturer: syz [ 482.142350][ T19] usb 3-1: SerialNumber: syz [ 482.187233][ T291] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 482.292194][ T343] usb 5-1: USB disconnect, device number 16 [ 482.364709][ T19] usb 3-1: 0:2 : does not exist [ 482.372713][ T19] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 482.384637][ T19] usb 3-1: USB disconnect, device number 20 [ 482.395087][ T291] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 482.410175][ T291] usb 4-1: config 1 has no interface number 0 [ 482.423539][ T291] usb 4-1: config 1 interface 105 has no altsetting 0 [ 482.431936][ T291] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 482.441654][ T291] usb 4-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 482.450482][ T291] usb 4-1: Product: syz [ 482.455315][ T291] usb 4-1: Manufacturer: syz [ 482.461202][ T291] usb 4-1: SerialNumber: syz [ 482.476385][ T3062] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 482.684394][ T291] aqc111: probe of 4-1:1.105 failed with error -71 [ 482.700548][ T291] usb 4-1: USB disconnect, device number 12 [ 482.914188][ T3090] /dev/rnullb0: Can't open blockdev [ 482.958439][ T3096] tmpfs: Bad value for 'mode' [ 482.984380][ T3101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16428'. [ 483.023999][ T3109] overlayfs: failed to resolve './file1': -2 [ 483.054531][ T3113] /dev/rnullb0: Can't open blockdev [ 483.071874][ T24] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 483.089652][ T3115] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 483.146414][ T3122] can0: slcan on ttyS3. [ 483.158298][ T3122] can0 (unregistered): slcan off ttyS3. [ 483.164002][ T3122] Falling back ldisc for ttyS3. [ 483.263736][ T291] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 483.264795][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 483.278420][ T3144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16444'. [ 483.290898][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 483.315333][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 483.326894][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 483.341915][ T24] usb 2-1: SerialNumber: syz [ 483.350997][ T24] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 483.358842][ T24] usb-storage 2-1:1.0: USB Mass Storage device detected [ 483.367020][ T3150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16446'. [ 483.390800][ T24] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 483.422907][ T24] scsi host1: usb-storage 2-1:1.0 [ 483.468003][ T291] usb 3-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 483.487074][ T291] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 483.498273][ T291] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 483.512051][ T291] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 483.521408][ T291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 483.529471][ T291] usb 3-1: SerialNumber: syz [ 483.539487][ T3102] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 483.543394][ T3183] fuseblk: Bad value for 'fd' [ 483.547620][ T291] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 483.558229][ T291] usb-storage 3-1:1.0: USB Mass Storage device detected [ 483.568063][ T291] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 483.660771][ T3195] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16459'. [ 483.775351][ T291] usb 3-1: USB disconnect, device number 21 [ 483.840303][ T3228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16475'. [ 484.742989][ T3305] SELinux: security_context_str_to_sid () failed with errno=-22 [ 485.062905][ T3335] binder: 3334:3335 ioctl c0306201 200000000100 returned -14 [ 485.349217][ T3367] fuseblk: Bad value for 'fd' [ 485.420666][ T3378] can0: slcan on ttyS3. [ 485.491882][ T3378] can0 (unregistered): slcan off ttyS3. [ 485.497853][ T3378] Falling back ldisc for ttyS3. [ 485.573618][ T3416] /dev/rnullb0: Can't open blockdev [ 485.619643][ T291] usb 2-1: USB disconnect, device number 17 [ 485.725879][ T24] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 485.894872][ T3466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16576'. [ 485.929518][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 485.947766][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 485.974323][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 485.996053][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 486.015732][ T24] usb 3-1: SerialNumber: syz [ 486.027596][ T24] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 486.043603][ T24] usb-storage 3-1:1.0: USB Mass Storage device detected [ 486.088149][ T24] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 486.109267][ T24] scsi host1: usb-storage 3-1:1.0 [ 486.410138][ T3508] binder: 3507:3508 ioctl c0306201 200000000100 returned -14 [ 486.514636][ T3990] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 486.605739][ T3522] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 486.718186][ T3990] usb 4-1: config 1 has an invalid descriptor of length 152, skipping remainder of the config [ 486.731238][ T3525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16602'. [ 486.740505][ T3990] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 486.752362][ T3990] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 38698, setting to 64 [ 486.765943][ T3990] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.779889][ T3990] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 486.789032][ T3990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 486.797333][ T3990] usb 4-1: SerialNumber: syz [ 486.814903][ T3990] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 486.825159][ T3990] usb-storage 4-1:1.0: USB Mass Storage device detected [ 486.848504][ T3990] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 486.913812][ T3536] binder: 3534:3536 ioctl c0306201 200000000100 returned -14 [ 486.915509][ T3537] netlink: 5308 bytes leftover after parsing attributes in process `syz.4.16607'. [ 487.030060][ T3990] usb 4-1: USB disconnect, device number 13 [ 487.476140][ T24] usb 3-1: USB disconnect, device number 22 [ 487.857762][ T291] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 488.017502][ T291] usb 1-1: device descriptor read/64, error -71 [ 488.211339][ T3608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16640'. [ 488.305301][ T291] usb 1-1: device descriptor read/64, error -71 [ 488.593111][ T291] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 488.752965][ T291] usb 1-1: device descriptor read/64, error -71 [ 488.784934][ T19] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 488.842693][ T3628] can0: slcan on ttyS3. [ 488.882194][ T3628] can0 (unregistered): slcan off ttyS3. [ 488.889230][ T3628] Falling back ldisc for ttyS3. [ 488.988544][ T19] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 489.015140][ T19] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 489.037872][ T19] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 489.047177][ T291] usb 1-1: device descriptor read/64, error -71 [ 489.062094][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 489.070690][ T19] usb 5-1: SerialNumber: syz [ 489.077427][ T19] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 489.089676][ T19] usb-storage 5-1:1.0: USB Mass Storage device detected [ 489.104151][ T19] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 489.117054][ T19] scsi host1: usb-storage 5-1:1.0 [ 489.190047][ T291] usb usb1-port1: attempt power cycle [ 489.234233][ T3683] /dev/rnullb0: Can't open blockdev [ 489.659028][ T291] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 489.692154][ T291] usb 1-1: device descriptor read/8, error -71 [ 489.852049][ T291] usb 1-1: device descriptor read/8, error -71 [ 490.015455][ T3709] /dev/rnullb0: Can't open blockdev [ 490.138614][ T291] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 490.157934][ T3720] can0: slcan on ttyS3. [ 490.171368][ T3720] can0 (unregistered): slcan off ttyS3. [ 490.177151][ T3720] Falling back ldisc for ttyS3. [ 490.182370][ T291] usb 1-1: device descriptor read/8, error -71 [ 490.354316][ T291] usb 1-1: device descriptor read/8, error -71 [ 490.462390][ T19] usb 5-1: USB disconnect, device number 17 [ 490.490514][ T291] usb usb1-port1: unable to enumerate USB device [ 491.041809][ T3810] can0: slcan on ttyS3. [ 491.056365][ T3810] can0 (unregistered): slcan off ttyS3. [ 491.062494][ T3810] Falling back ldisc for ttyS3. [ 491.072029][ T3808] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 491.311050][ T19] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 491.352814][ T3868] /dev/rnullb0: Can't open blockdev [ 491.492245][ T19] usb 3-1: device descriptor read/64, error -71 [ 491.780125][ T19] usb 3-1: device descriptor read/64, error -71 [ 491.835194][ T3896] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16733'. [ 492.078491][ T19] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 492.249089][ T19] usb 3-1: device descriptor read/64, error -71 [ 492.558106][ T19] usb 3-1: device descriptor read/64, error -71 [ 492.662909][ T3928] netlink: 5308 bytes leftover after parsing attributes in process `syz.0.16749'. [ 492.696980][ T19] usb usb3-port1: attempt power cycle [ 493.095876][ T3947] can0: slcan on ttyS3. [ 493.133687][ T19] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 493.155694][ T3947] can0 (unregistered): slcan off ttyS3. [ 493.161623][ T3947] Falling back ldisc for ttyS3. [ 493.177453][ T19] usb 3-1: device descriptor read/8, error -71 [ 493.285055][ T3973] can0: slcan on ttyS3. [ 493.325744][ T3973] can0 (unregistered): slcan off ttyS3. [ 493.332606][ T3973] Falling back ldisc for ttyS3. [ 493.348217][ T19] usb 3-1: device descriptor read/8, error -71 [ 493.544749][ T4006] can0: slcan on ttyS3. [ 493.603482][ T4006] can0 (unregistered): slcan off ttyS3. [ 493.609495][ T4006] Falling back ldisc for ttyS3. [ 493.634705][ T19] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 493.678315][ T19] usb 3-1: device descriptor read/8, error -71 [ 493.838664][ T19] usb 3-1: device descriptor read/8, error -71 [ 493.965134][ T19] usb usb3-port1: unable to enumerate USB device [ 494.463413][ T4106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16807'. [ 494.611743][ T4131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16819'. [ 494.689935][ T19] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 494.710393][ T4139] can0: slcan on ttyS3. [ 494.743171][ T24] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 494.775502][ T4139] can0 (unregistered): slcan off ttyS3. [ 494.781191][ T4139] Falling back ldisc for ttyS3. [ 494.882783][ T19] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 494.901599][ T19] usb 2-1: config 1 has no interface number 0 [ 494.913706][ T19] usb 2-1: config 1 interface 105 has no altsetting 0 [ 494.913763][ T24] usb 5-1: device descriptor read/64, error -71 [ 494.930298][ T19] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 494.945535][ T4167] netlink: 5308 bytes leftover after parsing attributes in process `syz.2.16832'. [ 494.956974][ T19] usb 2-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 494.965608][ T19] usb 2-1: Product: syz [ 494.977659][ T19] usb 2-1: Manufacturer: syz [ 494.985856][ T19] usb 2-1: SerialNumber: syz [ 495.182188][ T4193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16836'. [ 495.233536][ T24] usb 5-1: device descriptor read/64, error -71 [ 495.457313][ T291] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 495.521253][ T24] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 495.638250][ T19] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 495.650231][ T291] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 495.670500][ T19] aqc111: probe of 2-1:1.105 failed with error -71 [ 495.677509][ T291] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x4A, skipping [ 495.691755][ T24] usb 5-1: device descriptor read/64, error -71 [ 495.692424][ T19] usb 2-1: USB disconnect, device number 18 [ 495.712536][ T4220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16850'. [ 495.713789][ T291] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 495.755801][ T291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 495.763915][ T291] usb 3-1: SerialNumber: syz [ 495.779992][ T291] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 495.786728][ T291] usb-storage 3-1:1.0: USB Mass Storage device detected [ 495.799090][ T291] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 495.868366][ T4242] SELinux: security_context_str_to_sid () failed with errno=-22 [ 495.887335][ T4244] netlink: 5308 bytes leftover after parsing attributes in process `syz.3.16860'. [ 495.979544][ T24] usb 5-1: device descriptor read/64, error -71 [ 495.995574][ T19] usb 3-1: USB disconnect, device number 27 [ 496.107512][ T24] usb usb5-port1: attempt power cycle [ 496.555146][ T24] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 496.598788][ T24] usb 5-1: device descriptor read/8, error -71 [ 496.662345][ T3990] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 496.674127][ T4322] netlink: 72 bytes leftover after parsing attributes in process `syz.3.16894'. [ 496.758754][ T24] usb 5-1: device descriptor read/8, error -71 [ 496.865328][ T3990] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 496.884330][ T3990] usb 1-1: config 1 has no interface number 0 [ 496.890847][ T3990] usb 1-1: config 1 interface 105 has no altsetting 0 [ 496.908313][ T3990] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 496.928163][ T3990] usb 1-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 496.938982][ T3990] usb 1-1: Product: syz [ 496.943265][ T3990] usb 1-1: Manufacturer: syz [ 496.947948][ T3990] usb 1-1: SerialNumber: syz [ 497.045451][ T24] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 497.078442][ T24] usb 5-1: device descriptor read/8, error -71 [ 497.238433][ T24] usb 5-1: device descriptor read/8, error -71 [ 497.252082][ T4345] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 497.365258][ T24] usb usb5-port1: unable to enumerate USB device [ 497.599961][ T3990] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 497.621066][ T3990] aqc111: probe of 1-1:1.105 failed with error -71 [ 497.631966][ T3990] usb 1-1: USB disconnect, device number 31 [ 498.225377][ T4385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16925'. [ 498.708576][ T4411] netlink: 104 bytes leftover after parsing attributes in process `syz.4.16934'. [ 498.930824][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16941'. [ 499.371377][ T4447] can0: slcan on ttyS3. [ 499.396111][ T4454] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16953'. [ 499.433586][ T4447] can0 (unregistered): slcan off ttyS3. [ 499.440698][ T4447] Falling back ldisc for ttyS3. [ 499.657496][ T4490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16964'. [ 499.723788][ T4498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16966'. [ 499.818921][ T4509] can0: slcan on ttyS3. [ 499.891562][ T4509] can0 (unregistered): slcan off ttyS3. [ 499.897750][ T4509] Falling back ldisc for ttyS3. [ 500.178608][ T4533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16977'. [ 500.296340][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 500.509567][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 500.515860][ T24] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 500.552135][ T24] usb 4-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 500.562343][ T24] usb 4-1: config 0 has no interface number 0 [ 500.605418][ T24] usb 4-1: too many endpoints for config 0 interface 196 altsetting 107: 135, using maximum allowed: 30 [ 500.618778][ T24] usb 4-1: config 0 interface 196 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 135 [ 500.648050][ T24] usb 4-1: config 0 interface 196 has no altsetting 0 [ 500.670462][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 500.679558][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.701354][ T24] usb 4-1: Product: syz [ 500.705574][ T24] usb 4-1: Manufacturer: syz [ 500.710175][ T24] usb 4-1: SerialNumber: syz [ 500.729878][ T24] usb 4-1: config 0 descriptor?? [ 500.760066][ T28] audit: type=1400 audit(2000000045.296:2051): avc: denied { bind } for pid=4544 comm="syz.1.16983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 500.825218][ T4554] netlink: 104 bytes leftover after parsing attributes in process `syz.1.16987'. [ 500.958947][ T24] usb 4-1: USB disconnect, device number 14 [ 501.313247][ T4564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16991'. [ 501.927129][ T4502] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 502.090187][ T4639] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17028'. [ 503.295354][ T4678] SELinux: security_context_str_to_sid () failed with errno=-22 [ 503.557897][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 503.771063][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 503.777307][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.808956][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 503.836440][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 503.867012][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.875038][ T24] usb 5-1: Product: syz [ 503.898977][ T24] usb 5-1: Manufacturer: syz [ 503.909757][ T24] usb 5-1: SerialNumber: syz [ 504.007122][ T4707] SELinux: security_context_str_to_sid () failed with errno=-22 [ 504.137260][ T24] usb 5-1: 0:2 : does not exist [ 504.146456][ T24] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 504.169191][ T24] usb 5-1: USB disconnect, device number 22 [ 504.397590][ T4722] can0: slcan on ttyS3. [ 504.453450][ T4722] can0 (unregistered): slcan off ttyS3. [ 504.464452][ T4722] Falling back ldisc for ttyS3. [ 504.700392][ T4771] netlink: 104 bytes leftover after parsing attributes in process `syz.4.17082'. [ 504.967985][ T4805] can0: slcan on ttyS3. [ 505.007564][ T24] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 505.016268][ T4805] can0 (unregistered): slcan off ttyS3. [ 505.022282][ T4805] Falling back ldisc for ttyS3. [ 505.188680][ T24] usb 1-1: device descriptor read/64, error -71 [ 505.487159][ T24] usb 1-1: device descriptor read/64, error -71 [ 505.566071][ T4856] SELinux: security_context_str_to_sid () failed with errno=-22 [ 505.663956][ T4866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17112'. [ 505.774893][ T24] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 505.907699][ T4878] SELinux: security_context_str_to_sid () failed with errno=-22 [ 505.945497][ T24] usb 1-1: device descriptor read/64, error -71 [ 506.120674][ T4905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17130'. [ 506.215613][ T4914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17134'. [ 506.233277][ T24] usb 1-1: device descriptor read/64, error -71 [ 506.341023][ T4927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17141'. [ 506.361190][ T24] usb usb1-port1: attempt power cycle [ 506.363296][ T4929] can0: slcan on ttyS3. [ 506.414980][ T4929] can0 (unregistered): slcan off ttyS3. [ 506.475419][ T4940] binder: 4939:4940 ioctl c0306201 200000000100 returned -14 [ 506.808865][ T24] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 506.852459][ T24] usb 1-1: device descriptor read/8, error -71 [ 506.915483][ T19] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 507.012362][ T24] usb 1-1: device descriptor read/8, error -71 [ 507.117883][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 507.124250][ T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.143581][ T19] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 507.164419][ T19] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 507.182401][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.199728][ T19] usb 3-1: Product: syz [ 507.208620][ T19] usb 3-1: Manufacturer: syz [ 507.217832][ T19] usb 3-1: SerialNumber: syz [ 507.299371][ T24] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 507.353640][ T24] usb 1-1: device descriptor read/8, error -71 [ 507.445270][ T19] usb 3-1: 0:2 : does not exist [ 507.452822][ T19] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 507.472352][ T19] usb 3-1: USB disconnect, device number 28 [ 507.513286][ T24] usb 1-1: device descriptor read/8, error -71 [ 507.650950][ T24] usb usb1-port1: unable to enumerate USB device [ 507.807957][ T5030] netlink: 104 bytes leftover after parsing attributes in process `syz.3.17178'. [ 508.503622][ T19] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 508.716346][ T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.729376][ T19] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 508.764259][ T19] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 508.773411][ T19] usb 3-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 508.782733][ T19] usb 3-1: Product: syz [ 508.786967][ T19] usb 3-1: Manufacturer: syz [ 508.791787][ T19] usb 3-1: SerialNumber: syz [ 509.017299][ T19] usb 3-1: USB disconnect, device number 29 [ 509.176499][ T5100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17213'. [ 509.591690][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.601375][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.608869][ T5114] device bridge_slave_0 entered promiscuous mode [ 509.639571][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.665335][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.687112][ T5114] device bridge_slave_1 entered promiscuous mode [ 509.857223][ T343] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 509.875116][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.882218][ T5114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.889526][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.896559][ T5114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.956374][ T5136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17225'. [ 509.974619][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 509.985512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 510.013640][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 510.029140][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 510.044411][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 510.053473][ T343] usb 3-1: Using ep0 maxpacket: 32 [ 510.060403][ T343] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 510.071755][ T343] usb 3-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 510.082166][ T343] usb 3-1: config 0 has no interface number 0 [ 510.088371][ T343] usb 3-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 510.088826][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 510.101699][ T343] usb 3-1: config 0 interface 196 has no altsetting 0 [ 510.122455][ T5114] device veth0_vlan entered promiscuous mode [ 510.128596][ T343] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 510.137969][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 510.145753][ T343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.154183][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 510.161741][ T343] usb 3-1: Product: syz [ 510.165949][ T343] usb 3-1: Manufacturer: syz [ 510.170911][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 510.178249][ T343] usb 3-1: SerialNumber: syz [ 510.184331][ T343] usb 3-1: config 0 descriptor?? [ 510.190656][ T43] device bridge_slave_1 left promiscuous mode [ 510.197631][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.206516][ T43] device bridge_slave_0 left promiscuous mode [ 510.213306][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.222055][ T43] device veth1_macvtap left promiscuous mode [ 510.228585][ T43] device veth0_vlan left promiscuous mode [ 510.321068][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 510.330846][ T5114] device veth1_macvtap entered promiscuous mode [ 510.343935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 510.367920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 510.380542][ T334] Bluetooth: hci0: Frame reassembly failed (-84) [ 510.405659][ T343] ipheth 3-1:0.196: Unable to find endpoints [ 510.415953][ T343] usb 3-1: USB disconnect, device number 30 [ 511.314544][ T5207] can0: slcan on ttyS3. [ 511.350013][ T5207] can0 (unregistered): slcan off ttyS3. [ 511.355807][ T5207] Falling back ldisc for ttyS3. [ 512.585822][ T4505] Bluetooth: hci0: command 0x1003 tx timeout [ 512.586118][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 512.595209][ T5330] binder: Unknown parameter 'contex' [ 512.603512][ T5148] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 512.680745][ T5335] binder: 5331:5335 ioctl c0306201 200000000100 returned -14 [ 512.718162][ T5338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17306'. [ 512.937991][ T28] audit: type=1400 audit(2000000056.723:2052): avc: denied { create } for pid=5364 comm="syz.1.17320" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 512.991297][ T5371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17323'. [ 513.300587][ T5422] can0: slcan on ttyS3. [ 513.385765][ T5422] can0 (unregistered): slcan off ttyS3. [ 513.391494][ T5422] Falling back ldisc for ttyS3. [ 513.570582][ T19] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 513.694370][ T3990] ================================================================== [ 513.702557][ T3990] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 513.709631][ T3990] Write of size 8 at addr ffff888111974a00 by task kworker/1:4/3990 [ 513.717701][ T3990] [ 513.720120][ T3990] CPU: 1 PID: 3990 Comm: kworker/1:4 Not tainted syzkaller #0 [ 513.727584][ T3990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 513.737655][ T3990] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 513.743763][ T3990] Call Trace: [ 513.747050][ T3990] [ 513.749982][ T3990] __dump_stack+0x21/0x24 [ 513.754331][ T3990] dump_stack_lvl+0xee/0x150 [ 513.758312][ T19] usb 3-1: device descriptor read/64, error -71 [ 513.758924][ T3990] ? __cfi_dump_stack_lvl+0x8/0x8 [ 513.770177][ T3990] ? enqueue_timer+0xae/0x480 [ 513.774864][ T3990] print_address_description+0x71/0x200 [ 513.780416][ T3990] print_report+0x4a/0x60 [ 513.784754][ T3990] kasan_report+0x122/0x150 [ 513.789269][ T3990] ? enqueue_timer+0xae/0x480 [ 513.793960][ T3990] __asan_report_store8_noabort+0x17/0x20 [ 513.799678][ T3990] enqueue_timer+0xae/0x480 [ 513.804193][ T3990] __mod_timer+0x79f/0xb30 [ 513.808628][ T3990] mod_timer+0x1f/0x30 [ 513.812706][ T3990] ? wg_timers_any_authenticated_packet_traversal+0x81/0x1a0 [ 513.820089][ T3990] wg_timers_any_authenticated_packet_traversal+0x133/0x1a0 [ 513.827467][ T3990] wg_packet_tx_worker+0x15e/0x4e0 [ 513.832588][ T3990] process_one_work+0x71f/0xc40 [ 513.837452][ T3990] worker_thread+0xa29/0x11f0 [ 513.842220][ T3990] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 513.847708][ T3990] kthread+0x281/0x320 [ 513.851789][ T3990] ? __cfi_worker_thread+0x10/0x10 [ 513.856905][ T3990] ? __cfi_kthread+0x10/0x10 [ 513.861502][ T3990] ret_from_fork+0x1f/0x30 [ 513.865937][ T3990] [ 513.868963][ T3990] [ 513.871305][ T3990] Allocated by task 5148: [ 513.875632][ T3990] kasan_set_track+0x4b/0x70 [ 513.880215][ T3990] kasan_save_alloc_info+0x25/0x30 [ 513.885321][ T3990] __kasan_kmalloc+0x95/0xb0 [ 513.889898][ T3990] __kmalloc+0xb1/0x1e0 [ 513.894038][ T3990] hci_alloc_dev_priv+0x27/0x1bd0 [ 513.899045][ T3990] hci_uart_tty_ioctl+0x3d6/0xa20 [ 513.904049][ T3990] tty_ioctl+0x8ef/0xc60 [ 513.908275][ T3990] __se_sys_ioctl+0x12f/0x1b0 [ 513.912931][ T3990] __x64_sys_ioctl+0x7b/0x90 [ 513.917501][ T3990] x64_sys_call+0x58b/0x9a0 [ 513.921993][ T3990] do_syscall_64+0x4c/0xa0 [ 513.926393][ T3990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.932273][ T3990] [ 513.934581][ T3990] Freed by task 5148: [ 513.938551][ T3990] kasan_set_track+0x4b/0x70 [ 513.943141][ T3990] kasan_save_free_info+0x31/0x50 [ 513.948183][ T3990] ____kasan_slab_free+0x132/0x180 [ 513.953289][ T3990] __kasan_slab_free+0x11/0x20 [ 513.958044][ T3990] slab_free_freelist_hook+0xc2/0x190 [ 513.963404][ T3990] __kmem_cache_free+0xb7/0x1b0 [ 513.968236][ T3990] kfree+0x6f/0xf0 [ 513.971947][ T3990] hci_release_dev+0x12a3/0x13b0 [ 513.976888][ T3990] bt_host_release+0x82/0x90 [ 513.981457][ T3990] device_release+0xa4/0x1d0 [ 513.986023][ T3990] kobject_put+0x19d/0x280 [ 513.990418][ T3990] put_device+0x1f/0x30 [ 513.994553][ T3990] hci_dev_cmd+0x265/0x720 [ 513.998952][ T3990] hci_sock_ioctl+0x41e/0x7f0 [ 514.003613][ T3990] sock_do_ioctl+0x101/0x310 [ 514.008186][ T3990] sock_ioctl+0x4d8/0x6e0 [ 514.012507][ T3990] __se_sys_ioctl+0x12f/0x1b0 [ 514.017169][ T3990] __x64_sys_ioctl+0x7b/0x90 [ 514.021737][ T3990] x64_sys_call+0x58b/0x9a0 [ 514.026218][ T3990] do_syscall_64+0x4c/0xa0 [ 514.030621][ T3990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 514.036591][ T3990] [ 514.038891][ T3990] Last potentially related work creation: [ 514.044671][ T3990] kasan_save_stack+0x3a/0x60 [ 514.049328][ T3990] __kasan_record_aux_stack+0xb6/0xc0 [ 514.054686][ T3990] kasan_record_aux_stack_noalloc+0xb/0x10 [ 514.060473][ T3990] insert_work+0x51/0x300 [ 514.064780][ T3990] __queue_work+0x9b1/0xd30 [ 514.069264][ T3990] queue_work_on+0xd2/0x140 [ 514.073745][ T3990] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 514.078663][ T3990] hci_cmd_sync_status+0x53/0x120 [ 514.083665][ T3990] hci_dev_cmd+0x628/0x720 [ 514.088060][ T3990] hci_sock_ioctl+0x41e/0x7f0 [ 514.092717][ T3990] sock_do_ioctl+0x101/0x310 [ 514.097310][ T3990] sock_ioctl+0x4d8/0x6e0 [ 514.101619][ T3990] __se_sys_ioctl+0x12f/0x1b0 [ 514.106278][ T3990] __x64_sys_ioctl+0x7b/0x90 [ 514.110846][ T3990] x64_sys_call+0x58b/0x9a0 [ 514.115331][ T3990] do_syscall_64+0x4c/0xa0 [ 514.119738][ T3990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 514.125618][ T3990] [ 514.127918][ T3990] Second to last potentially related work creation: [ 514.134477][ T3990] kasan_save_stack+0x3a/0x60 [ 514.139132][ T3990] __kasan_record_aux_stack+0xb6/0xc0 [ 514.144486][ T3990] kasan_record_aux_stack_noalloc+0xb/0x10 [ 514.150277][ T3990] insert_work+0x51/0x300 [ 514.154591][ T3990] __queue_work+0x9b1/0xd30 [ 514.159076][ T3990] queue_work_on+0xd2/0x140 [ 514.163558][ T3990] hci_cmd_timeout+0x191/0x200 [ 514.168310][ T3990] process_one_work+0x71f/0xc40 [ 514.173139][ T3990] worker_thread+0xa29/0x11f0 [ 514.177796][ T3990] kthread+0x281/0x320 [ 514.181847][ T3990] ret_from_fork+0x1f/0x30 [ 514.186246][ T3990] [ 514.188551][ T3990] The buggy address belongs to the object at ffff888111974000 [ 514.188551][ T3990] which belongs to the cache kmalloc-8k of size 8192 [ 514.202586][ T3990] The buggy address is located 2560 bytes inside of [ 514.202586][ T3990] 8192-byte region [ffff888111974000, ffff888111976000) [ 514.216012][ T3990] [ 514.218316][ T3990] The buggy address belongs to the physical page: [ 514.224711][ T3990] page:ffffea0004465c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111970 [ 514.235045][ T3990] head:ffffea0004465c00 order:3 compound_mapcount:0 compound_pincount:0 [ 514.243361][ T3990] flags: 0x4000000000010200(slab|head|zone=1) [ 514.249429][ T3990] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043500 [ 514.258010][ T3990] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 514.266581][ T3990] page dumped because: kasan: bad access detected [ 514.273058][ T3990] page_owner tracks the page as allocated [ 514.278745][ T3990] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 284, tgid 284 (syz-executor), ts 21294221584, free_ts 21199507435 [ 514.300443][ T3990] post_alloc_hook+0x1f5/0x210 [ 514.305218][ T3990] prep_new_page+0x1c/0x110 [ 514.309705][ T3990] get_page_from_freelist+0x2c7b/0x2cf0 [ 514.315233][ T3990] __alloc_pages+0x1c3/0x450 [ 514.319813][ T3990] alloc_slab_page+0x6e/0xf0 [ 514.324386][ T3990] new_slab+0x98/0x3d0 [ 514.328435][ T3990] ___slab_alloc+0x6bd/0xb20 [ 514.333006][ T3990] __slab_alloc+0x5e/0xa0 [ 514.337321][ T3990] __kmem_cache_alloc_node+0x203/0x2c0 [ 514.342758][ T3990] __kmalloc_node+0xa1/0x1e0 [ 514.347422][ T3990] kvmalloc_node+0x294/0x480 [ 514.352033][ T3990] pfifo_fast_init+0x3af/0x7a0 [ 514.356777][ T3990] qdisc_create_dflt+0x150/0x3b0 [ 514.361702][ T3990] dev_activate+0x2cf/0x1040 [ 514.366271][ T3990] __dev_open+0x3ce/0x4f0 [ 514.370583][ T3990] __dev_change_flags+0x21b/0x6b0 [ 514.375588][ T3990] page last free stack trace: [ 514.380236][ T3990] free_unref_page_prepare+0x742/0x750 [ 514.385773][ T3990] free_unref_page+0x8f/0x530 [ 514.390473][ T3990] __free_pages+0x67/0x100 [ 514.394920][ T3990] __free_slab+0xca/0x1a0 [ 514.399236][ T3990] __unfreeze_partials+0x160/0x190 [ 514.404371][ T3990] put_cpu_partial+0xa9/0x100 [ 514.409048][ T3990] __slab_free+0x1c4/0x280 [ 514.413637][ T3990] ___cache_free+0xbf/0xd0 [ 514.418038][ T3990] qlist_free_all+0xc6/0x140 [ 514.422605][ T3990] kasan_quarantine_reduce+0x14a/0x170 [ 514.428140][ T3990] __kasan_slab_alloc+0x24/0x80 [ 514.432971][ T3990] slab_post_alloc_hook+0x4f/0x2d0 [ 514.438063][ T3990] __kmem_cache_alloc_node+0x192/0x2c0 [ 514.443502][ T3990] kmalloc_trace+0x29/0xb0 [ 514.447895][ T3990] ref_tracker_alloc+0x139/0x430 [ 514.452807][ T3990] netdev_hold+0x80/0xc0 [ 514.457038][ T3990] [ 514.459394][ T3990] Memory state around the buggy address: [ 514.465000][ T3990] ffff888111974900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 514.473037][ T3990] ffff888111974980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 514.481074][ T3990] >ffff888111974a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 514.489108][ T3990] ^ [ 514.493150][ T3990] ffff888111974a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 514.501185][ T3990] ffff888111974b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 514.509221][ T3990] ================================================================== [ 514.517256][ T3990] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 514.536947][ T28] audit: type=1400 audit(2000000058.215:2053): avc: denied { write } for pid=275 comm="syz-executor" path="pipe:[12650]" dev="pipefs" ino=12650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 514.674964][ T28] audit: type=1400 audit(2000000058.262:2054): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 514.781490][ T28] audit: type=1400 audit(2000000058.262:2055): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.802884][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 514.814609][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 514.823036][ C1] CPU: 1 PID: 5465 Comm: syz.1.17361 Tainted: G B syzkaller #0 [ 514.831996][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 514.834788][ T28] audit: type=1400 audit(2000000058.262:2056): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.842073][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 514.868662][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 dc 28 00 4c 89 ff e8 b0 09 ad 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 1c 51 6d 00 49 8b 7d 00 e8 93 05 [ 514.888265][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 514.894427][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88811b405100 [ 514.898743][ T28] audit: type=1400 audit(2000000058.262:2057): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.902395][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 514.931084][ C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007 [ 514.939158][ C1] R10: ffffed102232e939 R11: 1ffff1102232e939 R12: dffffc0000000000 [ 514.941376][ T28] audit: type=1400 audit(2000000058.271:2058): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 514.947126][ C1] R13: 0000000000000000 R14: ffff8881119749c8 R15: 0000000000000008 [ 514.975660][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 514.984604][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 514.991190][ C1] CR2: 000055de6d10f300 CR3: 000000011404d000 CR4: 00000000003506a0 [ 514.999255][ C1] Call Trace: [ 515.002519][ C1] [ 515.005347][ C1] delayed_work_timer_fn+0x61/0x80 [ 515.010446][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 515.016233][ C1] call_timer_fn+0x46/0x2a0 [ 515.020722][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 515.026511][ C1] __run_timers+0x667/0x9a0 [ 515.031004][ C1] ? calc_index+0x200/0x200 [ 515.035489][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 515.040676][ C1] run_timer_softirq+0x6a/0xf0 [ 515.045425][ C1] handle_softirqs+0x1d7/0x600 [ 515.050169][ C1] __irq_exit_rcu+0x52/0xf0 [ 515.054653][ C1] irq_exit_rcu+0x9/0x10 [ 515.058873][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 515.064490][ C1] [ 515.067400][ C1] [ 515.070311][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 515.076289][ C1] RIP: 0010:update_stack_state+0xb0/0x480 [ 515.081989][ C1] Code: 4c 89 f7 e8 52 71 7f 00 49 8b 06 48 83 c0 10 48 89 45 a0 44 89 f8 83 e0 01 48 f7 d8 4c 89 fa 48 83 e2 fe 48 21 d0 48 89 45 80 <4c> 89 7d d0 48 89 55 88 74 26 4c 8d 73 35 4c 89 f0 48 c1 e8 03 42 [ 515.101660][ C1] RSP: 0018:ffffc9000135f178 EFLAGS: 00000246 [ 515.107714][ C1] RAX: 0000000000000000 RBX: ffffc9000135f2c8 RCX: 000000000135f300 [ 515.115688][ C1] RDX: ffffc9000135f530 RSI: ffffc9000135f530 RDI: ffffc9000135f320 [ 515.123641][ C1] RBP: ffffc9000135f238 R08: ffffc9000135f390 R09: ffffc9000135f388 [ 515.131601][ C1] R10: 0000000000000000 R11: 1ffff9200026be59 R12: 0000000000000000 [ 515.139572][ C1] R13: dffffc0000000000 R14: ffffc9000135f300 R15: ffffc9000135f530 [ 515.147549][ C1] unwind_next_frame+0x3d5/0x700 [ 515.152490][ C1] ? __kernel_text_address+0xd/0x30 [ 515.157679][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 515.163824][ C1] arch_stack_walk+0x124/0x150 [ 515.168618][ C1] ? save_stack+0xf3/0x1e0 [ 515.173034][ C1] stack_trace_save+0x98/0xe0 [ 515.177699][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 515.183069][ C1] ? __stack_depot_save+0x36/0x480 [ 515.188165][ C1] ? memset+0x35/0x40 [ 515.192129][ C1] save_stack+0xf3/0x1e0 [ 515.196353][ C1] ? __reset_page_owner+0x190/0x190 [ 515.201530][ C1] ? free_pcppages_bulk+0x83d/0x870 [ 515.206750][ C1] __reset_page_owner+0x54/0x190 [ 515.211663][ C1] ? __kasan_check_write+0x14/0x20 [ 515.216840][ C1] ? _raw_spin_trylock+0xb1/0x140 [ 515.221842][ C1] free_unref_page_prepare+0x742/0x750 [ 515.227286][ C1] free_unref_page+0x8f/0x530 [ 515.231955][ C1] ? __cfi_free_unref_page+0x10/0x10 [ 515.237396][ C1] __free_pages+0x67/0x100 [ 515.241796][ C1] __vunmap+0x9af/0xb70 [ 515.245930][ C1] ? __kasan_check_write+0x14/0x20 [ 515.251026][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 515.256909][ C1] ? vunmap+0x60/0x60 [ 515.260880][ C1] ? __cfi_call_rcu+0x10/0x10 [ 515.265567][ C1] ? security_file_free+0xd8/0xf0 [ 515.270575][ C1] vfree+0x61/0x90 [ 515.274275][ C1] kcov_close+0x2b/0x50 [ 515.278426][ C1] ? __cfi_kcov_close+0x10/0x10 [ 515.283285][ C1] __fput+0x1fc/0x8f0 [ 515.287269][ C1] ____fput+0x15/0x20 [ 515.291242][ C1] task_work_run+0x1db/0x240 [ 515.295833][ C1] ? __cfi_task_work_run+0x10/0x10 [ 515.300947][ C1] ? free_nsproxy+0x21f/0x270 [ 515.305617][ C1] do_exit+0xa25/0x2650 [ 515.309767][ C1] ? __cfi_do_exit+0x10/0x10 [ 515.314344][ C1] ? kmem_cache_free+0x12d/0x300 [ 515.319269][ C1] ? ____kasan_slab_free+0x13d/0x180 [ 515.324540][ C1] do_group_exit+0x210/0x2d0 [ 515.329119][ C1] get_signal+0x13b5/0x1520 [ 515.333607][ C1] arch_do_signal_or_restart+0xb0/0x1030 [ 515.339221][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 515.345008][ C1] ? force_sig_info_to_task+0x344/0x3f0 [ 515.350536][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 515.356672][ C1] ? force_sig_fault+0xc4/0x110 [ 515.361508][ C1] ? __cfi_force_sig_fault+0x10/0x10 [ 515.366775][ C1] ? __cfi_notify_die+0x10/0x10 [ 515.371607][ C1] ? do_user_addr_fault+0x9ac/0x1050 [ 515.376877][ C1] exit_to_user_mode_loop+0x7a/0xb0 [ 515.382061][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 515.387505][ C1] irqentry_exit_to_user_mode+0x9/0x10 [ 515.392951][ C1] irqentry_exit+0x12/0x40 [ 515.397350][ C1] exc_invalid_op+0x3e/0x50 [ 515.401834][ C1] asm_exc_invalid_op+0x1b/0x20 [ 515.406680][ C1] RIP: 0033:0x200000000000 [ 515.411108][ C1] Code: Unable to access opcode bytes at 0x1fffffffffd6. [ 515.418114][ C1] RSP: 002b:00007efd1765fa78 EFLAGS: 00010246 [ 515.424167][ C1] RAX: 0000000000000000 RBX: 00007efd169e5fa0 RCX: 00007efd1678f6c9 [ 515.432129][ C1] RDX: 00007efd1765fa80 RSI: 00007efd1765fbb0 RDI: 000000000000000d [ 515.440081][ C1] RBP: 00007efd16811f91 R08: 0000000000000000 R09: 0000000000000000 [ 515.448041][ C1] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 515.456001][ C1] R13: 00007efd169e6038 R14: 00007efd169e5fa0 R15: 00007fff83412578 [ 515.463967][ C1] [ 515.466977][ C1] Modules linked in: [ 515.470855][ C1] ---[ end trace 0000000000000000 ]--- [ 515.476289][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 515.481564][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 dc 28 00 4c 89 ff e8 b0 09 ad 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 1c 51 6d 00 49 8b 7d 00 e8 93 05 [ 515.501149][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 515.507232][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88811b405100 [ 515.515186][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 515.523142][ C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007 [ 515.531092][ C1] R10: ffffed102232e939 R11: 1ffff1102232e939 R12: dffffc0000000000 [ 515.539085][ C1] R13: 0000000000000000 R14: ffff8881119749c8 R15: 0000000000000008 [ 515.547039][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 515.555974][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 515.562537][ C1] CR2: 000055de6d10f300 CR3: 000000011404d000 CR4: 00000000003506a0 [ 515.570494][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 515.577944][ C1] Kernel Offset: disabled [ 515.582259][ C1] Rebooting in 86400 seconds..