last executing test programs: 10m26.782175109s ago: executing program 1 (id=1076): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000240)={0x5, @win={{0xd8, 0x6, 0x8, 0x2800}, 0x4, 0x5, 0x0, 0x0, 0x0, 0x9}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x811}, 0x0) 10m13.32210185s ago: executing program 1 (id=1102): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000002580)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents(r5, 0x0, 0x22) 10m12.259676483s ago: executing program 1 (id=1105): syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcd) chdir(0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r3, &(0x7f0000003a00)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x3, @private1, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000600)="11", 0x1}], 0x1}}], 0x1, 0x4c040) 10m10.640504227s ago: executing program 1 (id=1111): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xc666, 0x8000}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pselect6(0x40, &(0x7f0000000080)={0x7, 0x7fffffff, 0x40, 0x400, 0x0, 0xffff, 0x4944, 0x1}, &(0x7f00000000c0)={0x1, 0x7ee, 0x8, 0x45a4ff65, 0xe, 0x0, 0x0, 0x7}, &(0x7f0000000100)={0x7, 0x80000001, 0x6b3, 0x8000000000000000, 0xde, 0x1ff, 0xfffffffffffffffa}, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f0000000280)={[0x100000000]}, 0x8}) openat$iommufd(0xffffffffffffff9c, 0x0, 0x357300, 0x0) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800005, 0x11, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0xf0ff1f00000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 10m9.394928213s ago: executing program 1 (id=1113): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 10m0.669280713s ago: executing program 1 (id=1132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x811}, 0x0) 9m44.632989852s ago: executing program 32 (id=1132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x811}, 0x0) 5.835751603s ago: executing program 3 (id=2691): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2000000000000001, {0x1, 0xff, 0x4}, 0x1}, 0x18) 5.741463222s ago: executing program 3 (id=2694): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0xfd, 0x0, 0x401}, {0x6}]}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) 5.603176839s ago: executing program 3 (id=2696): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r2, @ANYBLOB="14000200ff02000000000000000000000000000114000600000000000600000000000000000000000800080000040000bf1a57822ae5ba"], 0x48}, 0x1, 0x0, 0x0, 0x400c1}, 0x88) 5.423579377s ago: executing program 3 (id=2700): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) 5.207783774s ago: executing program 3 (id=2703): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_rxfh_indir={0x38}}) 4.251567419s ago: executing program 3 (id=2716): r0 = socket$packet(0x11, 0x2, 0x300) read(r0, 0x0, 0xffffff52) 4.085366788s ago: executing program 33 (id=2716): r0 = socket$packet(0x11, 0x2, 0x300) read(r0, 0x0, 0xffffff52) 3.848902347s ago: executing program 2 (id=2724): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0xfffffffd, 0x2000000) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x42041) syz_usb_disconnect(r1) 3.083406546s ago: executing program 4 (id=2738): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @empty}, 0x8d, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='veth1_to_bond\x00', 0x4, 0x7, 0x6}) 2.455724153s ago: executing program 4 (id=2740): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.331627085s ago: executing program 4 (id=2742): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.168655967s ago: executing program 2 (id=2743): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffeffffff7f7e, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000081, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x404}, 0x0) 2.145549451s ago: executing program 5 (id=2744): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)={0x5c, r2, 0x5, 0x0, 0x1, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @empty}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24044890}, 0x0) 2.127363406s ago: executing program 0 (id=2745): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a32000000000800410072785c00140033007665746830"], 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) 1.763710989s ago: executing program 5 (id=2746): r0 = syz_clone(0x50c8000, 0x0, 0x3, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000240)='syscall\x00') fstat(0xffffffffffffffff, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006cc0)="e5764a472ca256e4fa5b5c56951c8f08af5d99e71897669c71fa860cf20a75629af1256217099aca1bda14ba0aa9883f48db9ed5a33a3461dbad1b0cb88d915c13c46e3255dbcef87241d6e8bbdc0af465b5e10de7397890f60b7d673da3f4ada9fd0137de4362bb6075b0b60baa3480333acfd9bc4462c5a0ffb0c0db5d5ce6e5417030c6329e4e0668ccd1f4194092e759ed68ff784037033e0506fdcacd90c7f7ab82d418ff94dd32be27529b78f97f5a6e7617bec7306cc9907ced4a784a573da93140b49f73d9ad5d1058eac72ec68148d31397864a0b1050d28785a85a6acc3c646387d2566ff475585803538cb6d0d538505a48750034348a5e59b542c4c447b81e5bb821986f7b7ea2b5d484d0d015c4fe348942338c81fc84e5d3c9176dbfbfaff46d8ffdbe07755c44efdd2b07deae0312853736e0505a57c977334f43d0d7f6330924af8231eaf28da538745381d650ec1c2112eb5559aa618440bb5b32971e86cd5028035ebfe231b056206a13885da986a6ab7eb272f6a9ce00787c55e9d3e89895ccd3c3200b8a6f762c93b92bdea11733c02c07b42570e9eca34963c1e7df374283ab2cb95dfee7b22623cac2e4be2f09a5707b2df557f1e041296a3c830f4b01749e9996afbd9c29db8febca4aa67b541fca5b9a80231ff8f8da50db95870f39c717e14548248af8948ee0c56dd6f85f7d4f1fa3d979029130813ac8ea51d7736434346b387c02fa3b0620d6aa765e58af683dc7cb7e8b4bf4b53ceddc289e3dec9ff8ea5eededf4fbe3e2204b1a3f1f2a70563aa0db8ca938d23aab42570eb97a03e420f14d1e32b2ae3927c4fd58be2154e5bc8b6aca8aafbe9bad78a6d0177c6f42ea763969339d55424b2f84233f4aaf0f51ca58934b4845cc2a91f774a180bf38bc1b7fe917dc1652f924074a7343e7e07bae9de7823b9ac60e06ad9a89749715c3902f644fa284574bfa606f2d4e0113695d51ac90af285aa80647798f7f552786d72ad8251a11022780e5d4eb01255e74f40ca3826b4cbfb2fce8f482bdec9b50b3c1b50751e5424f53d5be1277cd1ddf0f15b452f04011b4de6d6ad5913b76713f527282eb9ff75187b281433df4b121b5b0c75a37e438608a4ae937060d7996b193ad52cc3d8850846273a94e3d718070064757c0374845a81d70ae139fc9af3df467437a0e0a8a058bcc0feeaf8d4379a690e3f7f96757827d1ff02e9dd287715fef9a5bc48399e102e804a4fe6cc7d04a0381a15c15f2409d1421fd52246b95b936be5327f4d03d172faa82d1198f8693b2385aadee482c2e2cfaf674d2d30953d65bd6bc7016fa22cead75c9f0bf24157020aad51c75d1c8b09830adc0f59a0da7ccfac3b0b7518dee240e32c81d30a62b50a170fbd510197ba1bfc4456aff6383d01624779e54131bb5aec4a0c1c09dae5951b5a62a2f8a1742bea3877adef6c8db75ba03f6730d770f460c686cc93032b4ab56db7a61d3b3f6e2d68b60de52daa2e922ae8207069f090261a7fab9d18ba52c1d191dd8949b3ac13082b9a4faffdce6a0fdb61ba07ceefd3242a228408598c4b4d7f5dbddfe3143221ac6bf7ca0cbe917d011cee0d5cf596c649e06fdabe45098b15fc27f3fd5a39ce9cab4bd3efe65837d600c7fbc3e91538dc54722636f918dd236274bd0aaad67f20adda5c565e793d4b24585ec4e4fdb315e3ed3de851a716ae8bcca394b1db7b467f88e490e75ed204cfaf507fb4740fe8b4e2d59f012c7ed42afc62e6ee446efe39c19bd0767f3691fdd5b8dbe89a040f407e7e6be6adc327d4bee9d8f4cc38731f024ec50dea800a18b9eb86643d10ce4cb8a867803d063093eec9df6656d924096a1554dc6ad7d5c5f35bfb51b404b7f6d82d545eea9d5ab6afb885cf59db15bbb6ed8dc8a6f6d6cf296a61308de0f91cf594def1df755db2385760d2973a381f49bc27138bb065ea75d203b25f543d07786d6d7b022785a5bb718dbdcd3021631b34f7722d9e835c235298e12151c59d1fc14fe36adc8257d7d2dd0dd5b02cabaae66dd7d9b18d8c2f45abe593baa6cb06d88bc5e4eeb573064761beb2163a2be2e6d39499d0b4ceaa5cfde49897e84b1fb0fea6a8ae061e90f16054e6cac934584ecac1706972a59de70b140fdd675764f5218b4553c964d095583335b744947de42bd7adaf22ca0199b12593d82ac4661449725fb1ed1693c36e91304c7a7f27357813bb388b5962c11ab282d8ac2e6c1f2f7bdc1838d75dbd67e7961ab4be3f052eb69664829bf85b13621965e72f86ac82992319a9cf70ad965b68f58ed889834c2aa20eec8e89a95bc1a92df6db2264f6ec7133567325b530212b05622225129c0fa5fa47f61fbc01b3d84cdbbe7bc597c953bf6c1c95e70eabe95cfc154d0d8fb9f3364e4c5fa6b2a0220fd2b0b3f472a925491f4b5c0259ee1730169e8503972d42f60b9380533d08750bf69a06913bed2fbfdcdcc2a7b727a33533242effa756ee8ebede0a64da858db32f3b6a9f37d3aea3dbf762a881e183308b41b3cb439ac8908811c3a57a45e65b9b21c25635c2fe4c3aff7da65b9c90ea47a3b906fba85464718c771387e29118f15d54b63694828f6377bc59bf5f1181027dca4c959eb27e060e9039a5f1fb955b332c9aebcc89be493185c15fdf9a9c74f96e5bba7d192d3263aaf701d36c37323780f1037930d2a2cb58591fa29acd2760e0873151c4570959df1106f435d2fc3a4f897186acf0a0f7be957b5b8efdf892abf99e4ec02a8e957707278c9ce279f1aa1c0f6f3f40e876a3b08959ea6a2f1c7ceb17fe599b33851d6fc4b93254379f0bf28e9954c8abc7151e110a38966f11defe13597bb30c003f6b98d88978c242f57ed3022360d686a0e762b035ba6eca21c86701953c2ffb4d0e9e259c29fb922a4f9138898e038e6925543c6c20777e18a5fadfa3a30ad55c6b8ae42489356764a7ada4565a73128dd7686ebd6a5d599c1f87a70e0534f16eb76dbf3c88e87772ebc7eaf27be2d693e86cdbb93029d9174872997bbc884adb46f6f3b7b560eb0da7ce0a2f0643c6271988321fd6a6597cf904beb1bc2c058c631b927b36fb938000031d79fd3e670746f89d0eea812b3f7e3007eb2f9ca952c1f794b1761d8f3f3e92b15869e9ff431d6280821bcaf374e636a16e1bdf721fff722287e135518163c78921b00e593a5d80efce94766cb197f224839ccebb7316c1f9471454eae766c76708e7cfa1f73e178235858e0f507528d63861bd363d639794c0087b12ce94719c5aa4778c0da6eca565b2c880a5b17cd42e852193e1962dd94862ba8e1f44831a8f708fdd8d03933e2967bd54571c0e8c2305288d87586cf621dc95c7e8d3f3264aea0ca799e098f0efb7ca9c42b686907b8a9da68c1e3e53274461ec3f4d1b60e5a6abf5f126d397ee0f6919e20950127ea092bad9af0c295b1133fb1fa39d974e1523d86f3bb23d238db4b5d025aeb59b7ffbce90ad38f4326a2dadc62b4ab9c62451126ab2a19221367f8bdae9abbbee8acd94f644e0cec7b4535bf4885f677400e727db3fa21cffbf5225e8c2c59bd03b09dd6a3141c6c2bacec5e6232e9f2534947d40ee7250e73fa700d475a58781878d46b91ecaa464af77282b5fe4581720e850e6c6cd720eff24e7fdd682cb278e3994ebd2502ef99d41d473244ac1acca4c36a1f2a0667fb784997c229e0ecd9b70bf3925ec1ca6ebaaa2c33a1e21fd099bd964fa1892b08096b7804fd588627ad549a62806352aeb49f4dbd3ff001e8f08f6dbe04aaa73aec27a822a1ccf03f08c08517c1af8111366ddc19fada67ce1c31092421db983a86ad01a974aabac8306929fdcfaeeb60c0527a1a800a1317e569fb6fd88f2245c3334f638b4b6665e7f2c6961b6594792218d3398f3cab22250f4be8e8700a57e1dc044f93701239016638ae6c21d53eb42d235ebe03f891e92111462de50b153e60e34263b09beb1dde74f488333d704bee63f67370de17b86c0541b9f4cb02fa2fc0e61f14273f6a3085068e945634440b65bc55fb48b35d763f27cc21eb37009f37c6548de6e6b75bf5d73ebe77ad4926bf03389a6e69d3d67fd40a821a224fb0b27ec005693aa3fc94cfc9ee8ab2ba3555bf1ec303cda06e2f092dd6be7f36befa648a81d953012fa9d09c9931d3e2cd1bf15449c3f93ce091bf4aa345fde77bde9c01bc0aba57f4a78ff383f96296043a40dcd9585a92aa07338ddeaa6809847ee28388c2bdf24d2ade550b0468648628211a99a5d124460533cf99458b0ac138683bb627b44dd3a93caa7d221d9792d63e2908516577885af4d13e5ab08a12307d4a17bbf84dd32ce5d5700cadf01bc297ed0013e1fd44899e0dab47a468099dfdb231588bf007d1544ea6701037b97746dd975535b1e7e37f285e8f4b56a297921513fef951341a5344384d97245f0269b047e02f2e8c6adcfc4d31721d566e1a5cb1b3e73d3f676c7e50cc1294d265b0c4427878c0b26800a7e9dd7d013912bdecd03be666ee2b540c1d70939c7df13f11a44e7d166c4fd3d60394a91c7a9044d141227b052f73f081141200a713af7f7f218ca478ed4448181e8c02ce0f093899620106af2d0d8896df8c5f075741bdd28571b34d5f0c2f89fc46f0900da9c9ed0bd9ad92aa5ec6e351ab7cf8e6da3242a38543e556f7ca1743b8a9cb983b4be8e4d082cea0862aa3bd9f1a03042db0875d2ea16248430575f8b6cfe03f7f4ee35465fad4c3daa404a22469bd3b422c3a5d537e9a3cf0bac559fd51ed3c090bb7efd0569cea9650a1fd9c4479790055960ea5e81a637a47394f4e8cf708a1651a4b32fd0da280f20f39be7d60804de18a3ac86b54428121614953c74155b885c5eb81e2a846b9f795fd1d218866f668b83484995da516f876f7557133d34345ccf78b06d90b438e924eb0ddcfdb7ec8df40aaf65284037d739b3762b15a926f85e95c2fa10cbd0d36a3d1463723cf28fb9c2fa175de373a5f555ec31d02bccc3fabd973e2f630a8c8bacf29beabfffd13b104158e2469a869294e92f7d682dcef4d5ddd388ce6eb4e10a64eae05d91725413e622dd6d313084d26a89e82e6b1394a1a20ee8c27981079611b56086199e888268a41d9f7a93e4a2e2e2bf6a37ee36112a15143789a38e77794e3c47b3313095448dff6de678ffbae2756a9f74b6d5107f2bb474850b845fc3ea7baa08f652e2d304197418e9d57de2686fd7dff13e3c6b9732597d0c8d15a8b80b99c951c1a2033c98cc6e155244974c420f80b7cb62dd5ce77f95a31c48f79d0353df38dac26ba9243e840dbc4c0ce343df6da7a9228e736baf181ce40adcc34170a56b2fd611de20a0d64f71320d2804ae0bbf937839690a1334358d0e9fb400e41cd718e29f0df31ca07ac5c64eba44ef0d13e362c09440114eabd7c2af6a6a75601fd7bf1d5ca7dd5fe09da13745db73d72792647ee8f3a5f6af295ad2d00df40b936aafd6780fbbcb194576af128ffd24fa5c135b8359f9fdbfbe9c626150528e62169a5f7f8490e90def090422d1f0f6417e38b22e8652181242e15b12b835a7ea89bf2693bfe4cbe486e15dd7e270883e4cb2901f41b3c4531c2c09c62c92ab85d666160f563e05c29c52347c88ac45384ed71bc1d5fdc67def268c2eec5768e1a219f483848be33aa7f508681729b583fc0a9345c1336f8799942214e821f801543fe7c2ab8dc52cb2107ef21ed9ccf4234df0a639b01a2621435a93876b399f07dd0e03ca699aa3aad421ccf84540ec4fc9402fb23bf5c555d3a34c72217d011e92d7e8e477e8786f5dedb503816dbeb5aab92e2888a0ca2da214b972ce0390fa9c7bccdc675bfbf5158ca30bcac7f650f1de05eb0a3846c6480289c28fce600a9d6c3dd9f480904497bbefd98e218347f46de84de345da1843e3f47063635a55645b9f9bb7829cf4ad7b434123593c9c3bce1f662975d37a9896be6dfc1f00b0a566adaecc57b8f5ff1eb9205480d1a6f08b2a46dfe1844a05a060b44bdd85cd93550b3fbc76c628c19bf6ce510e3e021145a8f81997679a6bdf841210101866cf0ebcc9ea2d34f58c0c91ecc813263dbfc72a1c188a42425ad88a8be82b9ea6367a996297c57c7ab89fac931822f501e529e583601ca6ec92613520c78e1baebb72745e4639b21162b6e71bdfd91623ad0633980c94cc733c113f25a8fc9d84c778d9cf0ec8120c2aca29578e8d9709240575e0009cd8fa84c98d9718a1d0d8efffd1229b74fe1d05024778df93b1d2db31ac5f18a06852e402165549ae0942554115b5add3d37b4f89cf78579b05bed44d5f358266abe7c78d79474cb6b3ec62b3ddcb2142bb4a19bb26ab92f66b240c38b0a7ac7c164558606f1bbec6977bf6700fbb3fedc09d4e388251ba8d4bbe7fc1eb5d47dec9a783e4543c664b97fd28a4f59dc3fe2e58e843b1f4aa4e5ccb06ee50608e3d39610f422924884df99c43cf2d5821eb16a476d75126d1107a75b20840873915b492f6e77bf40c09c51ef668ae71669ab49be50a885ed65b7a2641f143a7bdcdd35633779f0913e13d461b6fb1b15d2946ecf22e3008f2ad1fdb856da299e924f96566ce5184812d85641737cfef7aa447bd2c51b1d2e7f4f19a291fb20d1860dac1b0417478e5d0b244aac4262437910fb640a905a7b30853a40b83799e6677f1859ff90c8d7bf885923aa129b6917e5bc1647a99440f3317b5ca68aed8037809034ca38db679f2f108804a02a5383cb0be013849ed4d320e8bd9decdf2f109f6148142b8e5c504e2a01a1f5da2efe4d37712c7257785a2d7d3cb480b2f039768c6ff96a1be03bb0ef231b48d1cc83733387fb8628da569e4ea177e05fd49a6252c54e79bacf456de1dcacd37fd0dff3e763efdb5cd024a0be664af60b818de35206b792c986efec24924fecb2dd4f2b35f62c554572c3a1eed1d358bda4b9f7ba1b57cba1824914346461ed04a5f559fb1f5036179b7862f6a8e0cbb2ffc1190ea1e5172895103a3ad1c9d7e0836da723d88976d54520c045f5aee5c22c904143bd77fcebe94508d1b1cd552786678742c5fb9509b1b0301b997a0812a537a78e08af211b1e5d01c07b59b9b3a5d01850e05941c5d4a2bd5dc3a3c992b45908fa4b0178d838b467463dcff946bc6d48545ae40bb1080cac3c6fd6944d0099bdcab049c0e623e499f4a8799032c61ced17272264234a47edf1b3ae25c2988de8c9b98ded411544ce5eb5a273935eb1a437364d749462a40055ddfa62a8fdbc7a6c26a832a2c189a37348b5a3d24a637371d642d7dc6e6bbc9c937856f496b0e53c2a18bf9eca515d662ac3a9dadb56243e28916938b28af06f54e96a6095003f896a971076d738ca515d32c7e21cab0bd85e496a058d4db29f5ae50353bc61a30a5a517a071358f521fbf0cafb95c1fe1166a1778c15bb43c1288bf7f3bad6feddaeab14de1b8906718f167900bdeab2795323cc4f9a6d77a35176798a3ab27c3355f8a1d023dfc7070906060d0cc4556c04db5bf408beeea7fe7469dfad3c85a153ebade2709066d0e78172fe64e555d41259dd00da545ff59b3367116a46ac22e25ffdcbc3795776f554d978466498c8dd3d2cc115352c8bfca181a2a3fd12ec4b61dcd0e5b1cf02f6d2d490a74bf4ec989800aafcee06df27c968930cc1efe36b415db8171e5bdfb7db49237809e46d38b14199f568a0ffde0b237d753da9e98da14b397d206bcd1c28683a4089e8a37845f4e09a78f6309b533e497000fe128ff013f1f4797245ef4697e1a2e8979937b097eccbb547c7f553ad6eb48c7b1a683243fad52af0a72215909ce913d11e2ee5c2b0567e80ae525bc979c2d7f8535e6b4c615fd5a8486c2856fdf8e2d655bdcbcee6f1e324bcb6eec8329e4e0812e401c6453a118f9f75539cef47357e4a9de9f45e92a1acff4af09418350c735d833374fc5ddb14da4e54e70ce182978d7c2325d16e80d61b19bfe68dd24f5fe3c9561665757c7b6a5bf5e83e10eb516cd05613e4dd92ed3ed88b20d5296415a435597f238e95e2af59b8fb2eaffad91705d065a7ff040f0f8ddd9ee2b061d39dfa25f356dec3c755a1519e812e1974df360136aedd7e7548c87ed166f7baf50e4baae7b5693eeb3ee63f2689ace372d45466cc815cb11605bd453b2d918824c1b2f64e623e291c728a9e2e89c4d9cba3acd26af584c69945908c76259d299d3bb53e5b9ae821cfdde11a3de624cdaf569dc970d9af1174032d707b135e9bed30a638d3e13fe70520ad80e95ef39d5f6fb45b8edb017dd2b82b6c4656c546132df5b1c710e798133b15c4f05202e785c78150820f6ad47f6651c8df21bf5eb6ec851df349b13588e02220cdf25227bc63bf254b1e2364247adec4d5957a958da5577e3884754362d4c04b8985ba7f3827fd135a5978ee8a7ee2c0ca66755c1cbb76039b2821577b05636755e5474929b1db27e7088c0a4fc3f723f4427f4005bf4113d21c5fac806c1b9d0e78b1eba78ea74b55e3a4701d13074ed2324a9cc6dd16b21fe4a0b890cee10669b43775f55c73f38f44cbde28fa7dae1ba3c66ec25845f80be816ef93b66ef9c7b7ae86cc1580aa1ef612de516b302063aee622e03f47b0ba65532156634ac4511efcf53524e13e259f9786aefa745bef9eea6fb8c7a1f7556305f225f4cebb09306a97644112b8611e8e67476596de3db229fa3be432cdb2e1e4131cec8ea8c6d70395b374b85303e52cd6f23ecfea536b405b3aa065856b8530b3049acd7bb31ccbf9e02a8e4cdcca252142adc55563be912edcbc5a7210b7358dc9d9d2c9cdabe80de999de9cd40aa9f87295c549f42734a62df307f18c5d850774aab8df61042dd0add51554f7afaf4deb59f73c7238ddc78fdde7266fe479871f76cc037d822d23b3ccad7b591ee9b0c81eab7fe91a150b13f082674a6d079234ca4c1c2f49bc3b4df95a7ba7e9668c385b344060be72a39518c0685f8834fe1d37aa57a9109258f735a6143217166a2613a985f2e3a721b7e71a30a063c8b4f93898a2e4b478b513649a0cedda2a9f37b58145e0a75907d21a806e524a3f5e45297fd4c46280d951d8ada3a761f359164a5c0abb2573f0c65aac8b3542cc32f6a0bfb9484708a0caeefbf3616d03026c2f0614d17963de26d6db565cc463385d5872b5a865a517f55e0cdd817a8cb4f31aa2b1ea8c099ef96fb6d2e5864031d894b5923c474ff00aec195310b0c1aa82536e8e75dc9aba7605544ed86df31122aca480c22cb715ee8df04180e7d3040501379669f3de4adf2acf49a47b7564b52b85006430633fbcee176970d67857552ced405eae8ac2fa8e0c2d980795e7f854f842b811a919313d63164b04f8521225867d8af3ac59360ee7c5f8d3d0a738071a123a2a599c7e2bdbaa746c42f0af77e7b446ab223a0e585da5f403c9bd55a6af48fc8f2d251d53c49f64652991ca7549e282ab85611898896808fa8249bd600fae28b81ba815a798d12acdc97a2d6bfcae5833b6c0676ce65157675f28f73aeb10443c10c720398e3d75eb2cab9df437af68d25fe0fb282bbebf668da9a082c36889ee22bc13b1c2b9b7125c3270a87f09fe7da289906f7185d84064c5444fce22ab40d57ae504513019fe8e36bfe702083e545b94d1490000f9b5759cded7ca04415200c8e3bdc7a4534d73e8f97a757a2899d69132c3e0a4c7f5deed010e0c4f458c7f379810e304dd47548141ef906a7b96d939f61963d3fbc58b18c9de2903ffb7176025e38941e3e18398c5e387042d4f356d8d009225187cfe77bafb9316fd02e66f3469d4048e5b8f02188ae60f066e32c23ddebb2327996347c974cdf2f215037d96bfacbc7f1f65a95d66e60192d0d9d3902fd73935f281c3b3c50de162d0e9ca250278d32b810797de787fccb79e44e3e1a0a7e188b44971d41cc8fc11e9abb0b9a9cbd220b2c0a4f3fd8d7f8efddfe916bf3df7fc834453d32f61c850061d6d788c63d3f2dc42d0f54a64a09c0e1ffb51c15baef47c36ec8e319daa6ee46b51f2de27817b866a68b78089b5904bf1f9379990ac2a947f4c7dae0db2c17789e07d4b16f054889f6040709c812be047f53cec5fbc71d058772de66f539732abc8c7e75be4bbcec99119007493f6de01f68af52d2dbd594539c44ae4ec34908ef25ba46a02fc90d354a4a83cf2c588c4e1fe41966c0b2443875611cc9f21b08864ffa1f5072720eb756c4ff257e69e6e398b7e84a5904fc69db17879202ceb6c57fe6bd94ca578e3313a9a79538c840af82283a76dd7f53f5c3d8ec17c5be4c36136a53f0c46b14614e71dfe4ba7974ac4494311d4cda2fc7d0402acb637a9a6f491af9068c5c6fe71becfddb9fc07c785da5eddbb3a51043a0ae15aa9ddadd53f35dffed09a2127d3e0c5e1057ccec567791d9ce6e8082f0beb7ae912a4b30804abfa5347be87c6eff4fdb70b3064011950efd0ef30b84ee4b00f9247c2005a2dfa8e1c78ba0006185e2feeaea7f2c77d11c7e85499306ba769e404b6e6f7a7e5b45199817b31423eb439c50d850b22c1b63c4831f8da7ed462b0f8827f44c05df2e24673b360a58477e77b4835fae97e7d6375f0ccb339b4549652f20efeff931d14c0688713e78c81387ca6706258f9589090f2c8a4ef9e2cceb1775673f43f61f68736c966f757e6239ec7eb8ea70140f2c967a5a9f80f88b410f160aa14e083f6ff90f3324c59e4eb043e86117c362469e9c55a4689b137ccb04089e5d1ed875332083c41e8e3b28aad11472190b6dfddc18685e492fcf0a9c1f2ee287f7f1044f0bc98a9ad230978f97710839d1fc3e9f150cb03da9a1f55c608124ed27aa6b4c2c3cb7388432e15b02e55e1fcacee563c11f4f0ed9549fcd95d931243b95b394963da03982228f29a9501d7f1df7e44fec415fa7dc0edc1ec86850feb9f0dcd2d9dba983bbf44ff312462c73afc49519eb7440cd7d26ae73a137ae1c2b166d94730bf964452b4c82a49d110f48a894a427dc2cc4dacd66524b137ff54b49ec2938c829bf8934769c076001b54f280f862935a0cee4d69b3c3bf7773f2a7a235f9f188901f655e7b0bf790cfe49f5f079b90e0bad0fdd25e0c302af3687ba1feb58f3d3e78c34cb11f3dc494ddf4702fc009fd7c9e2671730709f60b83c75c1fea0738cbf87a19eff5698a39ecc8c22218be5f9426b225b52e3020b6782ece5451b716c975996afd0fc20fdad4acd8836ffd14d0ae932589be8ddb2b21328cec26d7321cc4cd5a2a01562b597abdd7f81f326c0a0f849d11053e4909db9cd9d18cbd4bdcea72bda5cc1cea86283c8fdebd5e55087cecced746f424bdf4358b65c958b84a2436025996e105425ed4784e2de1602b3ead37b87f104178f5a9db22ccbdae040b01e69b72aabc59c10af1e7f48b6701705b433fec40bbc07846d4c66b16f300906635e4fbf8ba61f2700b1726c6a4c14573fbb16d1af58f6301b41f7022a4c84651354e057d9383ecc10c32f07d332ddca591fd29", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.763355903s ago: executing program 0 (id=2747): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x20}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x8, 0x0, 0x3}]}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) 1.615637414s ago: executing program 0 (id=2748): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)='M', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @local}, 0x14) 1.596422962s ago: executing program 4 (id=2749): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xa8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19}) 1.443680309s ago: executing program 5 (id=2750): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="000000e14f00", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x10, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}, @address_request}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd50, 0x6558, &(0x7f0000000000)="ff", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x69) 1.420807995s ago: executing program 4 (id=2751): r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_usb_connect(0x0, 0x3f, 0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='status\x00') preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000400)=""/121, 0x79}], 0x1, 0xffffffff, 0x1) 1.416677921s ago: executing program 0 (id=2752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 1.239624245s ago: executing program 0 (id=2753): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x20, r4, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) accept(r1, 0x0, 0x0) 1.221891438s ago: executing program 2 (id=2754): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) 1.091603093s ago: executing program 5 (id=2755): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) setgroups(0x0, 0x0) write$UHID_CREATE(r0, &(0x7f0000000400)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000300)=""/249, 0xf9, 0x4, 0x3, 0x0, 0x1000, 0x1}}, 0x120) 943.747446ms ago: executing program 5 (id=2756): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_dellink={0x20, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x60000}}, 0x20}}, 0x40800) 856.929658ms ago: executing program 5 (id=2757): epoll_create(0x208000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x13, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0), 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/36, 0x24}, {0x0}], 0x2, 0x1006c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) io_setup(0x20000000001005, &(0x7f0000000880)) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffff001, 0x0, 0x13031, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000001c0)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 684.477099ms ago: executing program 4 (id=2758): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="020082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x30, 0xb, 0x2, 'nw'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000080)={0x0, 0xe, 0x3, "9cd604"}, 0x0, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xe4}, 0x0, 0x0, 0x0, 0x0, 0x0}) 327.592055ms ago: executing program 0 (id=2759): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 215.73743ms ago: executing program 2 (id=2760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}, 0x74}}, 0x0) 144.836144ms ago: executing program 2 (id=2761): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$sock_SIOCINQ(r0, 0x5452, &(0x7f0000000000)) 0s ago: executing program 2 (id=2762): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xce22, 0x4e20, 0x4e, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x5865}, "e0829708b12fcfd723923f3af5d80136a895f73786dd0325bb8158adb7ea5962c5f93ca5551daebac834c2cdf181c890c8d70c5aa5e07e3feff0866afab9"}}}}}}, 0x0) kernel console output (not intermixed with test programs): [ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.329949][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.521371][ T3417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.588530][ T3417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.386887][ T29] audit: type=1400 audit(1737938680.802:340): avc: denied { mount } for pid=10109 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 549.514651][ T29] audit: type=1400 audit(1737938680.842:341): avc: denied { mounton } for pid=10109 comm="syz-executor" path="/root/syzkaller.eI02eY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 550.387239][T10277] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 550.393887][T10277] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 550.402300][T10277] vhci_hcd vhci_hcd.0: Device attached [ 550.452996][T10280] vhci_hcd: connection closed [ 550.453380][ T11] vhci_hcd: stop threads [ 550.467405][ T11] vhci_hcd: release socket [ 550.478890][ T11] vhci_hcd: disconnect device [ 551.627200][T10290] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1213'. [ 552.713938][ T5904] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 552.951631][ T5904] usb 6-1: Using ep0 maxpacket: 32 [ 552.993504][ T5904] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 553.694596][ T5904] usb 6-1: config 0 has no interface number 0 [ 553.794620][T10307] trusted_key: encrypted_key: insufficient parameters specified [ 553.995146][ T5904] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 554.155788][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.201596][ T5904] usb 6-1: Product: syz [ 554.236988][ T5904] usb 6-1: Manufacturer: syz [ 554.247351][ T5904] usb 6-1: SerialNumber: syz [ 554.257721][ T5904] usb 6-1: config 0 descriptor?? [ 554.273949][ T5904] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 554.477655][ T5904] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 554.516425][ T29] audit: type=1400 audit(1737938685.942:342): avc: denied { write } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 554.539816][ T5904] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 554.641630][ T29] audit: type=1400 audit(1737938685.942:343): avc: denied { remove_name } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 554.732131][ T29] audit: type=1400 audit(1737938685.942:344): avc: denied { add_name } for pid=5175 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 554.889128][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 554.901019][ T5904] usb 6-1: USB disconnect, device number 2 [ 554.922263][ T5904] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 555.065897][ T5904] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 555.107956][ T5904] quatech2 6-1:0.51: device disconnected [ 555.261644][ T5871] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 555.522353][ T5871] usb 1-1: Using ep0 maxpacket: 8 [ 555.639319][ T5871] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 555.872380][ T5871] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 555.961495][ T5871] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 555.979606][ T5871] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 555.991155][ T5871] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 556.008403][ T5871] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 556.019540][T10327] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1223'. [ 556.029045][ T5871] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 556.040419][ T5871] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.053131][ T5871] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 556.064369][ T5871] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 556.086569][ T5871] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 556.096032][ T5871] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 556.107395][ T5871] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.120892][ T5871] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 556.170398][ T5871] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 556.305788][ T5871] usb 1-1: string descriptor 0 read error: -22 [ 556.507287][ T5871] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 556.560410][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.963866][ T5871] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 557.391880][ T5904] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 557.659855][ T5904] usb 6-1: Using ep0 maxpacket: 32 [ 557.751540][ T5904] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 557.771704][ T5904] usb 6-1: config 0 has no interface number 0 [ 557.787901][ T5904] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 558.106752][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.121867][ T5904] usb 6-1: Product: syz [ 558.129540][ T5904] usb 6-1: Manufacturer: syz [ 558.164136][ T5904] usb 6-1: SerialNumber: syz [ 558.191119][ T5904] usb 6-1: config 0 descriptor?? [ 558.240636][ T5904] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 558.363136][ T5871] usb 1-1: USB disconnect, device number 25 [ 558.451889][ T5904] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 558.469146][ T5904] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 558.698061][ T5822] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 560.041716][T10357] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 560.050381][T10357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.763600][ T5822] usb 5-1: device descriptor read/64, error -71 [ 560.797227][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 560.805725][ T5874] usb 6-1: USB disconnect, device number 3 [ 560.825496][ T5874] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 560.906625][ T5874] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 561.007612][ T5874] quatech2 6-1:0.51: device disconnected [ 561.083423][T10369] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1234'. [ 563.552617][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.558925][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.613126][T10385] trusted_key: encrypted_key: insufficient parameters specified [ 565.598655][T10399] openvswitch: netlink: Flow actions attr not present in new flow. [ 565.825323][T10384] +: renamed from syzkaller0 [ 567.905929][T10424] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1251'. [ 568.069303][T10425] trusted_key: encrypted_key: insufficient parameters specified [ 568.424526][T10426] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 570.632860][ T5825] Bluetooth: hci1: command 0x1003 tx timeout [ 570.639217][ T5834] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 573.832154][ T5822] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 574.001564][ T5822] usb 4-1: Using ep0 maxpacket: 8 [ 574.171671][ T5822] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 574.180856][ T5822] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 574.272460][ T5822] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 574.331518][ T5822] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 574.386788][ T5822] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 574.468348][ T5822] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 574.487772][ T5822] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 574.537197][ T5822] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 575.540085][ T5822] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 577.023905][ T5822] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 577.087823][ T5822] usb 4-1: unable to read config index 2 descriptor/start: -71 [ 577.096556][ T5822] usb 4-1: can't read configurations, error -71 [ 577.351872][ T5872] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 577.843491][ T5872] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 577.860334][ T5872] usb 1-1: config 179 has no interface number 0 [ 577.868016][ T5872] usb 1-1: config 179 interface 65 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 577.881028][ T5872] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 577.893471][ T5872] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x87 has invalid maxpacket 65535, setting to 8 [ 577.908589][ T5872] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 577.929085][ T5872] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 577.965520][ T5872] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 577.981158][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.070606][T10479] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 578.081283][ T29] audit: type=1400 audit(1737938709.512:345): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 580.642038][ T5874] usb 1-1: USB disconnect, device number 26 [ 582.663326][T10521] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 582.669878][T10521] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 582.679127][T10521] vhci_hcd vhci_hcd.0: Device attached [ 582.712660][T10523] vhci_hcd: connection closed [ 582.749470][ T3417] vhci_hcd: stop threads [ 582.758609][ T3417] vhci_hcd: release socket [ 582.765365][ T3417] vhci_hcd: disconnect device [ 583.036420][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1283'. [ 583.255059][ T5822] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 584.593019][ T5822] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 584.675289][ T5822] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.724901][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0 [ 584.753034][ T5822] usb 6-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 584.773264][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.809568][ T5822] usb 6-1: config 0 descriptor?? [ 584.849241][T10542] +: renamed from syzkaller0 [ 585.260062][ T5822] usbhid 6-1:0.0: can't add hid device: -71 [ 585.270466][ T5822] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 585.311064][ T5822] usb 6-1: USB disconnect, device number 4 [ 586.312274][T10565] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 586.364306][ T25] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 586.374322][ T11] Bluetooth: hci1: Frame reassembly failed (-84) [ 586.700142][ T25] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 586.711280][ T25] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.721238][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 586.728307][ T25] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 586.737750][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.752421][ T25] usb 5-1: config 0 descriptor?? [ 587.242829][T10576] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 587.252037][T10576] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 587.261026][T10576] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 587.357061][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 587.363328][T10576] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 587.372572][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 587.387283][T10576] geneve2: entered promiscuous mode [ 587.394475][T10576] geneve2: entered allmulticast mode [ 587.424133][ T25] usb 5-1: USB disconnect, device number 27 [ 588.392421][ T5834] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 595.018691][T10640] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 595.026362][T10640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.333330][T10642] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 596.340992][T10642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.391697][ T51] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 597.960676][T10653] mmap: syz.4.1316 (10653) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 598.158090][ T51] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 598.193333][ T51] usb 3-1: config 179 has no interface number 0 [ 598.426859][ T51] usb 3-1: config 179 interface 65 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 598.585290][ T51] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 598.620896][ T51] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x87 has invalid maxpacket 65535, setting to 8 [ 598.765657][ T51] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 598.777051][ T51] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 598.794450][ T51] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 598.805849][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.822901][T10649] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 598.864202][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1320'. [ 598.997709][T10667] fuse: Bad value for 'fd' [ 599.397071][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1321'. [ 601.203223][T10687] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 601.213159][T10687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.599264][ T5874] usb 3-1: USB disconnect, device number 18 [ 603.101547][ T29] audit: type=1400 audit(1737938734.482:346): avc: denied { read } for pid=10699 comm="syz.3.1328" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 603.168415][ T29] audit: type=1400 audit(1737938734.552:347): avc: denied { wake_alarm } for pid=10699 comm="syz.3.1328" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 603.356523][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1332'. [ 603.783364][T10722] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 603.790011][T10722] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 603.798465][T10722] vhci_hcd vhci_hcd.0: Device attached [ 604.182030][ T5904] usb 34-1: SetAddress Request (2) to port 0 [ 604.308978][T10723] vhci_hcd: connection closed [ 604.332130][ T5904] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 604.342269][T10719] openvswitch: netlink: Flow actions attr not present in new flow. [ 604.352415][ T3486] vhci_hcd: stop threads [ 604.361289][ T3486] vhci_hcd: release socket [ 604.371826][ T3486] vhci_hcd: disconnect device [ 604.401576][ T5904] usb 34-1: enqueue for inactive port 0 [ 605.380067][ T5904] usb usb34-port1: attempt power cycle [ 605.573590][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1337'. [ 606.048365][ T5904] usb usb34-port1: unable to enumerate USB device [ 606.962109][T10748] +: renamed from syzkaller0 [ 608.056894][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1345'. [ 608.706146][T10774] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 610.871772][ T5834] Bluetooth: hci1: command 0x1003 tx timeout [ 610.878196][ T5825] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 611.296253][T10805] +: renamed from syzkaller0 [ 611.428313][T10808] trusted_key: encrypted_key: insufficient parameters specified [ 612.540710][T10819] xt_CT: You must specify a L4 protocol and not use inversions on it [ 613.782124][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1360'. [ 616.106684][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1366'. [ 616.862768][T10847] openvswitch: netlink: Flow actions attr not present in new flow. [ 618.076565][T10859] openvswitch: netlink: Flow actions attr not present in new flow. [ 619.673345][T10868] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 620.207304][T10877] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 620.213844][T10877] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 620.222063][T10877] vhci_hcd vhci_hcd.0: Device attached [ 620.237956][T10878] vhci_hcd vhci_hcd.0: port 0 already used [ 620.267319][T10879] vhci_hcd: connection closed [ 620.271621][ T3466] vhci_hcd: stop threads [ 620.291496][ T3466] vhci_hcd: release socket [ 620.295960][ T3466] vhci_hcd: disconnect device [ 620.351662][T10868] usb 3-1: Using ep0 maxpacket: 32 [ 620.429227][T10868] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 620.450230][T10868] usb 3-1: config 0 has no interface number 0 [ 620.467717][T10868] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 620.759753][T10868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.780472][T10868] usb 3-1: Product: syz [ 620.785056][T10868] usb 3-1: Manufacturer: syz [ 620.789670][T10868] usb 3-1: SerialNumber: syz [ 621.010155][T10868] usb 3-1: config 0 descriptor?? [ 622.013103][T10868] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 622.365526][T10868] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 622.377916][T10868] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 623.031079][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 623.191707][ T5874] usb 3-1: USB disconnect, device number 19 [ 623.207168][ T5874] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 623.230623][ T5874] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 624.823358][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.829689][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.862135][ T5874] quatech2 3-1:0.51: device disconnected [ 628.612748][ T5874] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 629.130320][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 629.140117][ T5874] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.161518][ T5874] usb 4-1: config 0 has no interfaces? [ 629.169876][ T5874] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 629.180252][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.188466][ T5874] usb 4-1: Product: syz [ 629.192756][ T5874] usb 4-1: Manufacturer: syz [ 629.197358][ T5874] usb 4-1: SerialNumber: syz [ 629.204828][ T5874] usb 4-1: config 0 descriptor?? [ 629.296991][T10958] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 629.304775][T10958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.107008][ T29] audit: type=1400 audit(1737938762.532:348): avc: denied { name_connect } for pid=10969 comm="syz.2.1399" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 631.169030][ T29] audit: type=1400 audit(1737938762.562:349): avc: denied { accept } for pid=10969 comm="syz.2.1399" lport=44394 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 631.225849][ T29] audit: type=1400 audit(1737938762.562:350): avc: denied { write } for pid=10969 comm="syz.2.1399" lport=44394 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 631.296798][ T29] audit: type=1400 audit(1737938762.562:351): avc: denied { setopt } for pid=10969 comm="syz.2.1399" lport=44394 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 632.402302][ T5874] usb 4-1: USB disconnect, device number 18 [ 633.288088][T10978] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 633.294640][T10978] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 633.302882][T10978] vhci_hcd vhci_hcd.0: Device attached [ 633.353372][T10979] vhci_hcd vhci_hcd.0: port 0 already used [ 633.471646][T10981] vhci_hcd: connection closed [ 633.536466][ T8519] vhci_hcd: stop threads [ 633.556431][ T8519] vhci_hcd: release socket [ 634.061520][ T8519] vhci_hcd: disconnect device [ 634.346729][T10999] fuse: Bad value for 'rootmode' [ 635.111717][T11004] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 635.118358][T11004] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 635.126630][T11004] vhci_hcd vhci_hcd.0: Device attached [ 635.659512][T11006] vhci_hcd: connection closed [ 636.683032][ T8519] vhci_hcd: stop threads [ 636.692123][ T8519] vhci_hcd: release socket [ 636.696766][ T8519] vhci_hcd: disconnect device [ 636.832039][T10868] usb 40-1: enqueue for inactive port 0 [ 636.903140][T11011] trusted_key: encrypted_key: insufficient parameters specified [ 637.061758][T11016] x_tables: unsorted underflow at hook 3 [ 637.265152][T10644] Bluetooth: hci1: Frame reassembly failed (-84) [ 637.271782][T11022] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 637.791854][T10868] usb usb40-port1: attempt power cycle [ 638.677023][T10868] usb usb40-port1: unable to enumerate USB device [ 638.819158][T11034] trusted_key: encrypted_key: insufficient parameters specified [ 639.271596][ T5825] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 642.453228][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'. [ 642.608451][T11069] x_tables: unsorted underflow at hook 3 [ 643.411790][T11080] trusted_key: encrypted_key: insufficient parameters specified [ 643.648381][T11083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 645.889060][T11107] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1433'. [ 649.669903][T11138] xt_CT: You must specify a L4 protocol and not use inversions on it [ 649.761180][T11139] xt_CT: You must specify a L4 protocol and not use inversions on it [ 649.984305][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1443'. [ 657.025353][T11202] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1460'. [ 657.331593][ T5874] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 658.290062][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 658.332967][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 943, setting to 64 [ 658.600110][T11212] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 658.624717][ T5874] usb 5-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 658.635313][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.669598][ T5874] usb 5-1: config 0 descriptor?? [ 659.091909][T11200] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 659.166844][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1465'. [ 660.191753][ T5874] usbhid 5-1:0.0: can't add hid device: -71 [ 660.206899][ T5874] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 660.225587][ T5874] usb 5-1: USB disconnect, device number 28 [ 660.652737][ T5825] Bluetooth: hci1: command 0x1003 tx timeout [ 660.681689][ T5834] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 665.249570][T11261] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 667.227278][T11270] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1479'. [ 670.784352][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1489'. [ 671.646903][T11306] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1491'. [ 671.735586][T11309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1492'. [ 672.423205][T11322] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1497'. [ 673.746405][T11332] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1501'. [ 674.593894][T11332] netlink: 828 bytes leftover after parsing attributes in process `syz.3.1501'. [ 676.052643][T11352] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 676.060346][T11352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 678.469217][T11365] overlayfs: failed to resolve './file0': -2 [ 678.513314][ T29] audit: type=1400 audit(1737938809.942:352): avc: denied { watch } for pid=11364 comm="syz.3.1509" path="/302/bus/net_prio.prioidx" dev="tmpfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 678.934845][ T29] audit: type=1400 audit(1737938809.942:353): avc: denied { watch_sb watch_reads } for pid=11364 comm="syz.3.1509" path="/302/bus/net_prio.prioidx" dev="tmpfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 679.128451][T11371] trusted_key: encrypted_key: insufficient parameters specified [ 680.769959][T11386] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 680.805367][ T71] Bluetooth: hci1: Frame reassembly failed (-84) [ 681.390528][ T71] Bluetooth: hci6: Frame reassembly failed (-84) [ 681.425117][T11397] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 682.791694][ T5834] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 682.798378][ T9962] Bluetooth: hci1: command 0x1003 tx timeout [ 683.525415][ T5825] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 683.531981][ T5834] Bluetooth: hci6: command 0x1003 tx timeout [ 684.761579][ T51] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 684.936013][ T51] usb 1-1: Using ep0 maxpacket: 32 [ 684.994147][ T51] usb 1-1: unable to get BOS descriptor or descriptor too short [ 685.058008][ T51] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 685.281519][ T51] usb 1-1: config 7 has no interface number 0 [ 685.287659][ T51] usb 1-1: config 7 interface 187 has no altsetting 0 [ 685.310852][ T51] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 685.329725][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.338823][ T51] usb 1-1: Product: syz [ 685.362244][ T51] usb 1-1: Manufacturer: syz [ 685.366877][ T51] usb 1-1: SerialNumber: syz [ 685.834773][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.841265][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.298194][ T51] usb 1-1: Cannot retrieve CPort count: -32 [ 686.306332][ T51] usb 1-1: Cannot retrieve CPort count: -32 [ 686.323366][ T51] es2_ap_driver 1-1:7.187: probe with driver es2_ap_driver failed with error -32 [ 686.342685][ T51] usb 1-1: USB disconnect, device number 27 [ 687.485966][T11456] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 689.672290][ T5825] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 692.721835][T11510] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1552'. [ 693.081593][ T5904] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 693.431544][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1553'. [ 694.021607][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 694.028927][ T5904] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 694.111574][ T5904] usb 5-1: config 0 has no interface number 0 [ 694.149626][ T5904] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 694.181640][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.199469][ T5904] usb 5-1: Product: syz [ 694.213158][ T5904] usb 5-1: Manufacturer: syz [ 694.224049][ T5904] usb 5-1: SerialNumber: syz [ 694.244118][ T5904] usb 5-1: config 0 descriptor?? [ 694.262128][ T5904] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 694.489062][ T5904] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 694.506333][ T5904] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 694.520057][T11519] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 694.537903][ T71] Bluetooth: hci1: Frame reassembly failed (-84) [ 694.977422][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 694.987449][ T5904] usb 5-1: USB disconnect, device number 29 [ 695.038544][ T5904] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 695.091074][ T5904] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 695.528676][T11528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1558'. [ 695.750767][ T5904] quatech2 5-1:0.51: device disconnected [ 696.767964][ T5834] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 698.989751][T11568] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1568'. [ 699.396062][T11574] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1569'. [ 701.406971][T11593] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 701.746895][T11595] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 701.754604][T11595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 702.393759][ T3516] Bluetooth: hci1: Frame reassembly failed (-84) [ 703.381697][T11603] x_tables: unsorted underflow at hook 3 [ 703.431932][ T5825] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 703.437877][ T5834] Bluetooth: hci1: command 0x1003 tx timeout [ 704.181551][ T51] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 704.189400][T10868] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 704.381656][ T51] usb 1-1: device descriptor read/64, error -71 [ 704.402769][T10868] usb 5-1: Using ep0 maxpacket: 32 [ 704.413273][T10868] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 704.436117][T10868] usb 5-1: config 0 has no interface number 0 [ 704.460670][T10868] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 704.524843][T10868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.530557][T11617] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1583'. [ 704.625275][T10868] usb 5-1: Product: syz [ 704.654504][T10868] usb 5-1: Manufacturer: syz [ 704.659324][T10868] usb 5-1: SerialNumber: syz [ 704.723494][ T51] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 704.765371][T10868] usb 5-1: config 0 descriptor?? [ 704.848558][T10868] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 705.127068][T10868] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 705.151534][ T51] usb 1-1: device descriptor read/64, error -71 [ 705.168279][T10868] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 705.292077][ T51] usb usb1-port1: attempt power cycle [ 705.741944][ T51] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 705.801845][ T51] usb 1-1: device descriptor read/8, error -71 [ 705.845756][T11627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1586'. [ 706.021204][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 706.030521][ T5822] usb 5-1: USB disconnect, device number 30 [ 706.071732][ T51] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 706.101213][ T5822] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 706.113891][ T51] usb 1-1: device descriptor read/8, error -71 [ 706.347593][ T51] usb usb1-port1: unable to enumerate USB device [ 706.369327][ T5822] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 706.430202][ T5822] quatech2 5-1:0.51: device disconnected [ 707.709868][T11654] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 707.807352][ T3486] Bluetooth: hci1: Frame reassembly failed (-84) [ 707.815384][ T3486] Bluetooth: hci1: Frame reassembly failed (-84) [ 708.333377][T11660] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1595'. [ 709.136783][T11671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1599'. [ 709.546261][ T8519] Bluetooth: hci6: Frame reassembly failed (-84) [ 709.554383][T11677] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 709.745622][ T5822] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 709.751764][ T9962] Bluetooth: hci1: command 0x1003 tx timeout [ 709.761271][ T5825] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 710.103352][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 943, setting to 64 [ 710.114463][ T5822] usb 1-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 710.907086][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.925199][ T5822] usb 1-1: config 0 descriptor?? [ 710.930696][T11674] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 711.073614][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'. [ 711.515703][T11700] x_tables: unsorted underflow at hook 3 [ 711.592283][ T5825] Bluetooth: hci6: command 0x1003 tx timeout [ 711.592301][ T5834] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 711.981835][ T5822] usbhid 1-1:0.0: can't add hid device: -71 [ 712.000561][ T5822] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 712.056741][ T5822] usb 1-1: USB disconnect, device number 32 [ 714.452890][T11726] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 714.463113][T10677] Bluetooth: hci1: Frame reassembly failed (-84) [ 714.470411][ T3486] Bluetooth: hci1: Frame reassembly failed (-84) [ 715.109220][ T2007] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 715.161716][ T5871] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 715.798381][ T2007] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 715.817168][ T2007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.827904][ T2007] usb 5-1: Product: syz [ 715.838251][ T2007] usb 5-1: Manufacturer: syz [ 715.847182][ T2007] usb 5-1: SerialNumber: syz [ 715.867451][ T2007] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 715.886478][ T5874] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 715.898795][ T5871] usb 4-1: device descriptor read/64, error -71 [ 716.384789][ T5871] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 716.471752][ T5834] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 716.566953][ T5871] usb 4-1: device descriptor read/64, error -71 [ 716.632375][T11733] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 716.649512][T11733] input: syz1 as /devices/virtual/input/input12 [ 716.659151][T11744] x_tables: unsorted underflow at hook 3 [ 716.831640][ T5871] usb usb4-port1: attempt power cycle [ 716.863384][ T5822] usb 5-1: USB disconnect, device number 31 [ 716.983982][ T5874] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 716.992891][ T5874] ath9k_htc: Failed to initialize the device [ 717.556878][ T5822] usb 5-1: ath9k_htc: USB layer deinitialized [ 718.044095][T11753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1623'. [ 718.059580][T11753] netlink: 'syz.3.1623': attribute type 72 has an invalid length. [ 718.067962][T11753] netlink: 'syz.3.1623': attribute type 8 has an invalid length. [ 718.601710][ T5874] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 718.811583][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 719.411690][ T5822] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 719.470221][ T5874] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 719.604347][ T5874] usb 1-1: config 0 has no interface number 0 [ 719.614286][ T5822] usb 3-1: Using ep0 maxpacket: 32 [ 719.655452][ T5822] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 719.697614][ T5822] usb 3-1: config 0 has no interface number 0 [ 719.742079][ T5874] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 719.760834][ T5822] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 719.781564][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.783335][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.810525][ T5822] usb 3-1: Product: syz [ 719.818925][ T5822] usb 3-1: Manufacturer: syz [ 719.823346][ T5874] usb 1-1: Product: syz [ 719.945500][T11777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1631'. [ 719.993196][ T5822] usb 3-1: SerialNumber: syz [ 720.228532][ T5874] usb 1-1: Manufacturer: syz [ 720.233336][ T5874] usb 1-1: SerialNumber: syz [ 720.270918][ T5822] usb 3-1: config 0 descriptor?? [ 720.366836][ T5874] usb 1-1: config 0 descriptor?? [ 720.519813][ T5874] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 720.842575][ T5822] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 720.958720][ T5874] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 721.375981][T11791] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 721.383945][T11791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 721.951109][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 721.986144][ T5874] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 722.014566][ T5874] usb 1-1: USB disconnect, device number 33 [ 722.028829][ T5874] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 722.418500][ T5822] usb 3-1: qt2_attach - failed to power on unit: -71 [ 722.459537][ T5822] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 722.529094][ T5822] usb 3-1: USB disconnect, device number 20 [ 722.623773][ T5874] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 722.635943][ T5874] quatech2 1-1:0.51: device disconnected [ 723.836341][T11812] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 723.845847][ T2999] Bluetooth: hci1: Frame reassembly failed (-84) [ 724.455946][T11806] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1641'. [ 726.221611][ T5834] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 727.414622][T11837] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1647'. [ 729.967934][ T5822] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 730.163510][ T5822] usb 5-1: Using ep0 maxpacket: 32 [ 730.187655][ T5822] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 730.277990][ T5822] usb 5-1: config 0 has no interface number 0 [ 730.362835][ T5822] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 730.416881][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.426239][ T5822] usb 5-1: Product: syz [ 730.430790][ T5822] usb 5-1: Manufacturer: syz [ 730.442374][ T5822] usb 5-1: SerialNumber: syz [ 730.466135][ T5822] usb 5-1: config 0 descriptor?? [ 730.592819][ T5822] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 731.301825][ T5822] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 731.324360][ T5822] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 731.887069][T11873] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1659'. [ 731.988005][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 732.004199][ T2007] usb 5-1: USB disconnect, device number 32 [ 732.051882][ T2007] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 732.101053][ T2007] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 732.126954][ T2007] quatech2 5-1:0.51: device disconnected [ 732.754814][ T51] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 733.182767][ T51] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 733.344213][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.501004][ T51] usb 1-1: Product: syz [ 733.591264][ T51] usb 1-1: Manufacturer: syz [ 733.624168][ T51] usb 1-1: SerialNumber: syz [ 733.644792][ T51] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 733.671346][ T5871] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 733.919593][T11900] x_tables: unsorted underflow at hook 3 [ 734.542939][T11874] trusted_key: encrypted_key: master key parameter 'defa' is invalid [ 734.866036][ T5871] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 734.876433][ T5871] ath9k_htc: Failed to initialize the device [ 734.907389][ T5871] usb 1-1: ath9k_htc: USB layer deinitialized [ 734.935047][T11874] input: syz1 as /devices/virtual/input/input13 [ 735.450357][T10868] usb 1-1: USB disconnect, device number 34 [ 737.110997][T11928] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1672'. [ 737.419242][T11936] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1674'. [ 738.787661][T10868] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 739.662219][T10868] usb 5-1: Using ep0 maxpacket: 32 [ 739.707423][T10868] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 739.778420][T10868] usb 5-1: config 0 has no interface number 0 [ 739.829738][T10868] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 739.886340][T11955] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1679'. [ 739.891526][T10868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.895529][ T2007] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 739.910452][T10868] usb 5-1: Product: syz [ 739.917391][T10868] usb 5-1: Manufacturer: syz [ 739.959401][T10868] usb 5-1: SerialNumber: syz [ 740.091192][T10868] usb 5-1: config 0 descriptor?? [ 740.108106][T10868] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 740.151615][ T2007] usb 1-1: Using ep0 maxpacket: 8 [ 740.417049][ T2007] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 741.162341][ T2007] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 741.181845][T10868] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 741.451644][ T2007] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 741.479317][T10868] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 741.492319][ T2007] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 741.517619][ T2007] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 741.731836][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 741.738831][ T5874] usb 5-1: USB disconnect, device number 33 [ 742.218760][T11970] xfrm0: entered allmulticast mode [ 742.434889][ T2007] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 742.712725][ T5874] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 742.751360][ T5874] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 743.230541][ T5874] quatech2 5-1:0.51: device disconnected [ 743.272339][ T2007] usb 1-1: unable to read config index 2 descriptor/start: -71 [ 743.359141][ T2007] usb 1-1: can't read configurations, error -71 [ 747.882403][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.888718][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.189278][T12035] +: renamed from syzkaller0 [ 751.144974][T12053] +: renamed from syzkaller0 [ 752.594180][T12072] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 753.914537][ T11] Bluetooth: hci1: Frame reassembly failed (-84) [ 754.511697][ T51] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 754.631555][ T5834] Bluetooth: hci1: command 0x1003 tx timeout [ 754.639082][ T5825] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 754.811531][ T51] usb 4-1: Using ep0 maxpacket: 32 [ 754.822909][ T51] usb 4-1: unable to get BOS descriptor or descriptor too short [ 754.869616][ T51] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 755.031399][ T51] usb 4-1: config 7 has no interface number 0 [ 755.201072][ T51] usb 4-1: config 7 interface 187 has no altsetting 0 [ 755.470427][ T51] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 755.521562][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.628307][T12098] trusted_key: encrypted_key: insufficient parameters specified [ 755.680807][ T51] usb 4-1: Product: syz [ 755.701537][ T51] usb 4-1: Manufacturer: syz [ 755.706448][ T51] usb 4-1: SerialNumber: syz [ 756.031523][ T51] usb 4-1: Cannot retrieve CPort count: 0 [ 756.037415][ T51] usb 4-1: Cannot retrieve CPort count: -5 [ 756.147916][ T51] es2_ap_driver 4-1:7.187: probe with driver es2_ap_driver failed with error -5 [ 756.443887][T12100] +: renamed from syzkaller0 [ 756.499897][ T2007] usb 4-1: USB disconnect, device number 22 [ 757.353115][T12112] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 757.359778][T12112] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 757.368141][T12112] vhci_hcd vhci_hcd.0: Device attached [ 757.380506][T12115] vhci_hcd: connection closed [ 757.385221][T12113] vhci_hcd vhci_hcd.0: port 0 already used [ 757.397277][ T2999] vhci_hcd: stop threads [ 757.412960][ T2999] vhci_hcd: release socket [ 757.417407][ T2999] vhci_hcd: disconnect device [ 758.799302][T12125] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 758.806043][T12125] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 758.815477][T12125] vhci_hcd vhci_hcd.0: Device attached [ 758.821321][T12129] vhci_hcd: connection closed [ 758.911788][ T71] vhci_hcd: stop threads [ 758.965180][ T71] vhci_hcd: release socket [ 758.969639][ T71] vhci_hcd: disconnect device [ 759.123215][T12137] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1727'. [ 759.802489][T12146] trusted_key: encrypted_key: insufficient parameters specified [ 759.951604][T10868] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 761.196225][ T51] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 761.203908][T10868] usb 4-1: device descriptor read/64, error -71 [ 761.542552][T10868] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 761.596656][ T51] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 761.651780][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.695421][ T51] usb 5-1: Product: syz [ 761.699826][ T51] usb 5-1: Manufacturer: syz [ 761.707760][T10868] usb 4-1: device descriptor read/64, error -71 [ 761.730962][ T51] usb 5-1: SerialNumber: syz [ 761.841021][ T51] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 761.862655][T10868] usb usb4-port1: attempt power cycle [ 761.879009][ T5822] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 762.372463][T12150] trusted_key: encrypted_key: master key parameter 'defa' is invalid [ 762.382947][T12150] input: syz1 as /devices/virtual/input/input14 [ 763.192612][ T5822] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 763.200006][ T5822] ath9k_htc: Failed to initialize the device [ 763.236638][ T5822] usb 5-1: ath9k_htc: USB layer deinitialized [ 763.298852][ T5871] usb 5-1: USB disconnect, device number 34 [ 763.375793][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1740'. [ 767.386817][ T2007] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 767.397807][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1751'. [ 767.463041][ T5825] Bluetooth: hci2: Invalid handle: 0x85c9 > 0x0eff [ 768.183576][ T2007] usb 4-1: device descriptor read/64, error -71 [ 768.685035][ T2007] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 768.717384][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1755'. [ 768.991873][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1745'. [ 769.248941][T12232] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1757'. [ 769.259873][ T2007] usb 4-1: device descriptor read/64, error -71 [ 769.381737][ T2007] usb usb4-port1: attempt power cycle [ 770.209273][T12245] trusted_key: encrypted_key: insufficient parameters specified [ 770.352733][ T2007] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 771.361530][ T2007] usb 4-1: device descriptor read/8, error -71 [ 771.678773][T12248] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 771.685339][T12248] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 771.694774][T12248] vhci_hcd vhci_hcd.0: Device attached [ 771.969406][T12246] vhci_hcd vhci_hcd.0: port 0 already used [ 772.438234][T12251] vhci_hcd: connection closed [ 772.438910][ T71] vhci_hcd: stop threads [ 772.448438][ T71] vhci_hcd: release socket [ 772.454109][ T71] vhci_hcd: disconnect device [ 775.951525][T12272] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 775.958175][T12272] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 775.966878][T12272] vhci_hcd vhci_hcd.0: Device attached [ 776.371833][T12276] vhci_hcd: connection closed [ 776.581498][ T3516] vhci_hcd: stop threads [ 776.592718][ T3516] vhci_hcd: release socket [ 776.713579][T10868] usb 34-1: SetAddress Request (6) to port 0 [ 776.714332][ T3516] vhci_hcd: disconnect device [ 776.719623][T10868] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd [ 776.796252][T10868] usb 34-1: enqueue for inactive port 0 [ 778.203370][T10868] usb usb34-port1: attempt power cycle [ 779.158942][T10868] usb usb34-port1: unable to enumerate USB device [ 782.642211][T12337] input: syz0 as /devices/virtual/input/input15 [ 782.945063][ T29] audit: type=1400 audit(1737938914.372:354): avc: denied { setopt } for pid=12340 comm="syz.2.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 782.965620][ T5872] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 783.157746][ T5872] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 783.171385][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.196713][ T5872] usb 5-1: Product: syz [ 783.215560][ T5872] usb 5-1: Manufacturer: syz [ 783.231038][ T5872] usb 5-1: SerialNumber: syz [ 783.258409][ T5872] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 783.293355][ T2007] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 784.375070][T12339] trusted_key: encrypted_key: master key parameter is missing [ 784.408151][ T2007] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 784.423873][T12339] input: syz1 as /devices/virtual/input/input16 [ 784.753447][T12366] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1793'. [ 785.409747][ T2007] ath9k_htc: Failed to initialize the device [ 786.237416][ T2007] usb 5-1: ath9k_htc: USB layer deinitialized [ 786.264145][ T5822] usb 5-1: USB disconnect, device number 35 [ 786.353993][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1796'. [ 789.089777][ T29] audit: type=1400 audit(1737938920.502:355): avc: denied { read append } for pid=12385 comm="syz.3.1800" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 789.387331][ T29] audit: type=1400 audit(1737938920.502:356): avc: denied { open } for pid=12385 comm="syz.3.1800" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 789.411056][ T29] audit: type=1400 audit(1737938920.502:357): avc: denied { ioctl } for pid=12385 comm="syz.3.1800" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 789.526356][T12399] netlink: 'syz.2.1805': attribute type 10 has an invalid length. [ 789.716501][T12399] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 794.531546][ T5904] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 795.425026][ T5904] usb 1-1: device descriptor read/64, error -71 [ 795.431536][ T5822] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 795.611509][ T5822] usb 3-1: Using ep0 maxpacket: 32 [ 795.623151][ T5822] usb 3-1: unable to get BOS descriptor or descriptor too short [ 795.638599][ T5822] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 795.651524][ T5822] usb 3-1: config 7 has no interface number 0 [ 795.667955][ T5822] usb 3-1: config 7 interface 187 has no altsetting 0 [ 795.680025][ T5822] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 795.688220][ T5904] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 795.696770][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.717608][ T5822] usb 3-1: Product: syz [ 795.740179][ T5822] usb 3-1: Manufacturer: syz [ 795.745480][ T5822] usb 3-1: SerialNumber: syz [ 795.790810][T12454] fuse: Bad value for 'fd' [ 795.841651][ T5904] usb 1-1: device descriptor read/64, error -71 [ 796.008993][ T5904] usb usb1-port1: attempt power cycle [ 796.028599][ T5822] usb 3-1: Invalid number of CPorts: 0 [ 796.048804][ T5822] es2_ap_driver 3-1:7.187: probe with driver es2_ap_driver failed with error -22 [ 797.053074][ T9] usb 3-1: USB disconnect, device number 21 [ 797.281568][ T5904] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 797.523795][ T5904] usb 1-1: device not accepting address 39, error -71 [ 800.000172][T12499] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 800.130652][ T3466] Bluetooth: hci1: Frame reassembly failed (-84) [ 801.421513][ T29] audit: type=1400 audit(1737938932.402:358): avc: denied { search } for pid=5487 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=33848 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 802.849050][ T5825] Bluetooth: hci1: command 0x1003 tx timeout [ 802.855625][ T5834] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 803.235326][T12527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1834'. [ 805.825829][T12544] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1839'. [ 808.654482][ T29] audit: type=1400 audit(1737938940.002:359): avc: denied { setrlimit } for pid=12583 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 808.736872][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.771977][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.959103][T12649] netlink: 1296 bytes leftover after parsing attributes in process `syz.5.1859'. [ 812.968402][T12649] openvswitch: netlink: Flow key attr not present in new flow. [ 818.192894][T12691] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 818.199539][T12691] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 818.208409][T12691] vhci_hcd vhci_hcd.0: Device attached [ 818.598601][T12692] vhci_hcd: connection closed [ 818.600298][ T2999] vhci_hcd: stop threads [ 818.611296][ T2999] vhci_hcd: release socket [ 818.812183][ T5904] usb 40-1: SetAddress Request (10) to port 0 [ 818.818349][ T5904] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 818.841783][ T2999] vhci_hcd: disconnect device [ 818.865508][ T5904] usb 40-1: enqueue for inactive port 0 [ 819.862104][ T5904] usb usb40-port1: attempt power cycle [ 820.584947][ T5904] usb usb40-port1: unable to enumerate USB device [ 822.665365][T12733] netlink: 'syz.3.1880': attribute type 4 has an invalid length. [ 827.803780][T12754] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1888'. [ 828.409758][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1890'. [ 832.626911][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1897'. [ 832.639633][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1897'. [ 834.935890][T12826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'. [ 835.376333][T12829] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1904'. [ 836.278215][T12836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1908'. [ 840.575808][T12866] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 840.582438][T12866] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 840.591622][T12866] vhci_hcd vhci_hcd.0: Device attached [ 840.597183][T12867] vhci_hcd vhci_hcd.0: failed to lookup sock [ 840.597541][T12872] vhci_hcd: connection closed [ 840.618701][ T3516] vhci_hcd: stop threads [ 840.660621][ T3516] vhci_hcd: release socket [ 840.686128][ T3516] vhci_hcd: disconnect device [ 843.841571][ T5904] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 844.057805][T12900] +: renamed from syzkaller0 [ 844.112027][T12905] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 844.120067][ T5904] usb 6-1: device descriptor read/64, error -71 [ 844.140563][ T8519] Bluetooth: hci1: Frame reassembly failed (-84) [ 844.379594][T12908] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1927'. [ 844.620275][ T5904] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 845.451501][ T5904] usb 6-1: device descriptor read/64, error -71 [ 845.583619][ T5904] usb usb6-port1: attempt power cycle [ 846.107775][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1930'. [ 846.160321][ T5834] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 846.169885][ T5825] Bluetooth: hci1: command 0x1003 tx timeout [ 846.454498][ T5904] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 848.617460][ T5904] usb 6-1: device descriptor read/8, error -71 [ 852.072004][ T5822] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 852.244071][T12978] +: renamed from syzkaller0 [ 853.706130][ T5822] usb 3-1: string descriptor 0 read error: -71 [ 853.723010][ T5822] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 853.910225][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.470494][ T5822] usb 3-1: can't set config #1, error -71 [ 855.479289][T12995] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 855.485918][T12995] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 855.494153][T12995] vhci_hcd vhci_hcd.0: Device attached [ 855.499941][T12998] vhci_hcd vhci_hcd.0: failed to lookup sock [ 855.500577][T12996] vhci_hcd: connection closed [ 855.516935][ T5822] usb 3-1: USB disconnect, device number 22 [ 855.567872][T10677] vhci_hcd: stop threads [ 855.577092][T10677] vhci_hcd: release socket [ 855.582986][T10677] vhci_hcd: disconnect device [ 861.853267][T13068] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1973'. [ 863.147768][ T5825] Bluetooth: hci5: Invalid handle: 0x85c9 > 0x0eff [ 863.160654][T13078] fuse: Bad value for 'fd' [ 863.606658][ T51] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 865.376089][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 943, setting to 64 [ 865.603353][ T51] usb 1-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 867.452423][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.524640][ T51] usb 1-1: config 0 descriptor?? [ 868.331588][ T51] usb 1-1: can't set config #0, error -71 [ 868.339567][ T51] usb 1-1: USB disconnect, device number 41 [ 869.022767][T13142] netlink: 'syz.0.1993': attribute type 4 has an invalid length. [ 870.153633][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.160069][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.661552][ T5822] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 873.897520][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 943, setting to 64 [ 874.032793][ T5822] usb 4-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 874.059338][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.083883][ T5822] usb 4-1: config 0 descriptor?? [ 874.099020][T13180] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 874.151621][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 874.468174][ T9] usb 3-1: device descriptor read/64, error -71 [ 876.280395][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 876.287834][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 876.306330][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 876.313953][ T5822] usbhid 4-1:0.0: can't add hid device: -32 [ 876.322527][ T5822] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 876.353374][ T5822] usb 4-1: USB disconnect, device number 30 [ 876.541879][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 876.691552][ T9] usb 3-1: device descriptor read/64, error -71 [ 877.507352][ T9] usb usb3-port1: attempt power cycle [ 879.330514][T13226] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.2016'. [ 879.339784][T13226] openvswitch: netlink: Flow actions attr not present in new flow. [ 883.907644][T13265] trusted_key: encrypted_key: insufficient parameters specified [ 885.822724][T13285] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 885.829291][T13285] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 885.837760][T13285] vhci_hcd vhci_hcd.0: Device attached [ 886.330001][T13286] vhci_hcd: connection closed [ 886.331703][T13287] vhci_hcd vhci_hcd.0: port 0 already used [ 886.371571][ T3466] vhci_hcd: stop threads [ 886.375858][ T3466] vhci_hcd: release socket [ 886.401534][ T9] usb 40-1: SetAddress Request (14) to port 0 [ 886.411469][ T3466] vhci_hcd: disconnect device [ 886.413097][ T9] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 886.474323][ T9] usb 40-1: enqueue for inactive port 0 [ 886.908790][ T9] usb usb40-port1: attempt power cycle [ 887.025909][ T5871] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 887.279775][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 943, setting to 64 [ 887.372356][ T5871] usb 1-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 887.519241][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.588500][ T5871] usb 1-1: config 0 descriptor?? [ 887.594133][T13296] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 887.752424][ T9] usb usb40-port1: unable to enumerate USB device [ 887.804704][T13297] +: renamed from syzkaller0 [ 888.033547][ T5871] usbhid 1-1:0.0: can't add hid device: -71 [ 888.050270][ T5871] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 888.101655][ T5871] usb 1-1: USB disconnect, device number 42 [ 889.136613][T13310] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 889.143167][T13310] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 889.151370][T13310] vhci_hcd vhci_hcd.0: Device attached [ 889.162469][T13312] vhci_hcd: connection closed [ 889.162809][ T3466] vhci_hcd: stop threads [ 889.191962][ T3466] vhci_hcd: release socket [ 889.196418][ T3466] vhci_hcd: disconnect device [ 892.791379][T13330] +: renamed from syzkaller0 [ 892.837634][T13348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2050'. [ 893.788084][T13356] +: renamed from syzkaller0 [ 893.981792][T13360] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2052'. [ 894.741111][T13372] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 896.051782][T10868] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 896.222106][T10868] usb 5-1: device descriptor read/64, error -71 [ 896.345768][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 896.381599][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 896.541675][T10868] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 896.684723][T10868] usb 5-1: device descriptor read/64, error -71 [ 896.811948][T10868] usb usb5-port1: attempt power cycle [ 896.823793][T13393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2063'. [ 897.766649][ T5834] Bluetooth: hci1: command 0x1003 tx timeout [ 897.773128][ T5825] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 897.847451][T10868] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 898.005464][T13403] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2065'. [ 899.427396][T10868] usb 5-1: device descriptor read/8, error -71 [ 899.793315][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 899.922393][T13421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 901.468368][ T9] usb 4-1: device descriptor read/64, error -71 [ 901.952718][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 902.935789][ T29] audit: type=1400 audit(1737939033.842:360): avc: denied { cmd } for pid=13428 comm="syz.0.2072" path="socket:[37055]" dev="sockfs" ino=37055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 904.379588][T13449] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2078'. [ 906.047695][T13458] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 906.054339][T13458] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 906.063305][T13458] vhci_hcd vhci_hcd.0: Device attached [ 906.573536][T13462] vhci_hcd: connection closed [ 907.625710][ T3466] vhci_hcd: stop threads [ 907.734933][ T3466] vhci_hcd: release socket [ 907.765103][ T3466] vhci_hcd: disconnect device [ 910.358569][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 910.687905][ T9] usb 5-1: device descriptor read/64, error -71 [ 910.900131][T13507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2092'. [ 911.652610][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 912.333554][T13504] kvm: emulating exchange as write [ 913.477296][ T5904] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 913.581626][T13530] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 914.308552][ T5904] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 914.401527][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 914.474923][ T5904] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 914.652978][ T5904] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 914.662830][ T5904] usb 6-1: Manufacturer: syz [ 914.680640][ T5904] usb 6-1: config 0 descriptor?? [ 914.721679][ T9] usb 5-1: device descriptor read/64, error -71 [ 914.772637][ T5904] rc_core: IR keymap rc-hauppauge not found [ 914.791511][ T5904] Registered IR keymap rc-empty [ 914.798589][ T5904] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 914.812220][ T5904] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input17 [ 914.832143][ T9] usb usb5-port1: attempt power cycle [ 915.127928][ T51] usb 6-1: USB disconnect, device number 9 [ 915.651636][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 915.682982][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 915.698374][ T5825] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 915.813049][ T9] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 915.830259][ T9] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 915.918614][ T9] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 916.030493][ T9] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 916.238874][ T9] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 916.962354][ T9] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 917.221291][ T9] usb 5-1: string descriptor 0 read error: -22 [ 917.251622][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 917.260699][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.296945][T13563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2109'. [ 917.317042][ T9] usb 5-1: can't set config #168, error -71 [ 917.329818][ T9] usb 5-1: USB disconnect, device number 42 [ 919.722731][T13569] +: renamed from syzkaller0 [ 921.581566][ T5872] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 921.985299][ T5872] usb 5-1: device descriptor read/64, error -71 [ 921.991916][ T5904] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 922.371536][ T5872] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 922.379174][ T5904] usb 4-1: device descriptor read/64, error -71 [ 922.581653][ T5872] usb 5-1: device descriptor read/64, error -71 [ 922.692336][ T5872] usb usb5-port1: attempt power cycle [ 923.398941][ T5904] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 923.682202][ T5904] usb 4-1: device descriptor read/64, error -71 [ 923.792567][ T5904] usb usb4-port1: attempt power cycle [ 928.291841][T13657] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 928.298483][T13657] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 928.306989][T13657] vhci_hcd vhci_hcd.0: Device attached [ 928.307189][T13661] vhci_hcd: connection closed [ 928.312676][T13658] vhci_hcd vhci_hcd.0: failed to lookup sock [ 928.371517][ T2999] vhci_hcd: stop threads [ 928.391308][ T2999] vhci_hcd: release socket [ 928.434965][ T2999] vhci_hcd: disconnect device [ 928.971589][ T5872] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 930.065353][ T5872] usb 5-1: device descriptor read/64, error -71 [ 930.905383][T13680] fuse: Bad value for 'fd' [ 930.933416][ T5872] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 931.820789][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.827300][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.411087][T13685] syz.4.2147: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 934.443035][T13685] CPU: 0 UID: 0 PID: 13685 Comm: syz.4.2147 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 934.443064][T13685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 934.443079][T13685] Call Trace: [ 934.443086][T13685] [ 934.443093][T13685] dump_stack_lvl+0x16c/0x1f0 [ 934.443138][T13685] warn_alloc+0x24d/0x3a0 [ 934.443161][T13685] ? __pfx_warn_alloc+0x10/0x10 [ 934.443191][T13685] ? __get_vm_area_node+0x1b0/0x2f0 [ 934.443217][T13685] ? __get_vm_area_node+0x1dc/0x2f0 [ 934.443273][T13685] __vmalloc_node_range_noprof+0x1105/0x1530 [ 934.443313][T13685] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 934.443340][T13685] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 934.443377][T13685] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 934.443397][T13685] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 934.443415][T13685] vmalloc_user_noprof+0x6b/0x90 [ 934.443443][T13685] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 934.443462][T13685] vb2_vmalloc_alloc+0x11e/0x3d0 [ 934.443489][T13685] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 934.443508][T13685] __vb2_queue_alloc+0x896/0x1230 [ 934.443552][T13685] vb2_core_reqbufs+0xa73/0xfb0 [ 934.443589][T13685] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 934.443617][T13685] ? __pfx___mutex_trylock_common+0x10/0x10 [ 934.443646][T13685] ? __video_do_ioctl+0x4a2/0xf00 [ 934.443675][T13685] ? trace_contention_end+0xee/0x140 [ 934.443704][T13685] ? __mutex_lock+0x1cc/0xb10 [ 934.443736][T13685] vb2_reqbufs+0x1a5/0x1f0 [ 934.443762][T13685] ? __pfx_vb2_reqbufs+0x10/0x10 [ 934.443796][T13685] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 934.443832][T13685] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 934.443863][T13685] v4l_reqbufs+0x14c/0x1e0 [ 934.443893][T13685] __video_do_ioctl+0xaf0/0xf00 [ 934.443923][T13685] ? __pfx___video_do_ioctl+0x10/0x10 [ 934.443946][T13685] ? __might_fault+0xe3/0x190 [ 934.443979][T13685] video_usercopy+0x4d2/0x1620 [ 934.444010][T13685] ? __pfx___video_do_ioctl+0x10/0x10 [ 934.444041][T13685] ? __pfx_video_usercopy+0x10/0x10 [ 934.444086][T13685] v4l2_ioctl+0x1ba/0x250 [ 934.444108][T13685] ? __pfx_v4l2_ioctl+0x10/0x10 [ 934.444134][T13685] __x64_sys_ioctl+0x190/0x200 [ 934.444162][T13685] do_syscall_64+0xcd/0x250 [ 934.444192][T13685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.444219][T13685] RIP: 0033:0x7fa5adb8cd29 [ 934.444250][T13685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.444268][T13685] RSP: 002b:00007fa5ae996038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 934.444288][T13685] RAX: ffffffffffffffda RBX: 00007fa5adda5fa0 RCX: 00007fa5adb8cd29 [ 934.444301][T13685] RDX: 00000000200000c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 934.444313][T13685] RBP: 00007fa5adc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 934.444325][T13685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 934.444336][T13685] R13: 0000000000000000 R14: 00007fa5adda5fa0 R15: 00007ffc84fd2618 [ 934.444362][T13685] [ 934.444370][T13685] Mem-Info: [ 934.819062][T13685] active_anon:31049 inactive_anon:0 isolated_anon:0 [ 934.819062][T13685] active_file:17469 inactive_file:38894 isolated_file:0 [ 934.819062][T13685] unevictable:768 dirty:234 writeback:0 [ 934.819062][T13685] slab_reclaimable:11486 slab_unreclaimable:105152 [ 934.819062][T13685] mapped:36610 shmem:26885 pagetables:832 [ 934.819062][T13685] sec_pagetables:0 bounce:0 [ 934.819062][T13685] kernel_misc_reclaimable:0 [ 934.819062][T13685] free:1277478 free_pcp:1226 free_cma:0 [ 936.212028][T13685] Node 0 active_anon:100984kB inactive_anon:0kB active_file:69876kB inactive_file:155504kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119252kB dirty:604kB writeback:40kB shmem:83032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10828kB pagetables:3160kB sec_pagetables:0kB all_unreclaimable? no [ 936.281595][T13685] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 936.611561][T13725] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 937.621548][T13685] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 937.901344][T13685] lowmem_reserve[]: 0 2487 2487 0 0 [ 937.925662][T13685] Node 0 DMA32 free:1217876kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:101032kB inactive_anon:0kB active_file:69876kB inactive_file:155400kB unevictable:1536kB writepending:796kB present:3129332kB managed:2547500kB mlocked:0kB bounce:0kB free_pcp:1620kB local_pcp:588kB free_cma:0kB [ 937.987138][T13685] lowmem_reserve[]: 0 0 0 0 0 [ 937.999609][T13685] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:104kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 938.091520][ T5874] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 938.189474][T13685] lowmem_reserve[]: 0 0 0 0 0 [ 938.201475][T13685] Node 1 Normal free:3900540kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 938.240545][T13685] lowmem_reserve[]: 0 0 0 0 0 [ 938.250551][T13685] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 938.270545][T13685] Node 0 DMA32: 1*4kB (U) 287*8kB (ME) 260*16kB (UME) 76*32kB (UME) 49*64kB (UME) 74*128kB (UME) 106*256kB (UM) 32*512kB (UM) 8*1024kB (UME) 4*2048kB (ME) 276*4096kB (UM) = 1211900kB [ 938.293252][T13685] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 938.391247][ T5874] usb 6-1: device descriptor read/64, error -71 [ 938.406415][T13685] Node 1 Normal: 221*4kB (UE) 53*8kB (UME) 32*16kB (UME) 221*32kB (UME) 97*64kB (UME) 29*128kB (UME) 17*256kB (UME) 11*512kB (UM) 5*1024kB (UM) 6*2048kB (UE) 941*4096kB (M) = 3900540kB [ 938.441516][T13685] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 938.451244][T13685] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 938.559113][T13685] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 938.664965][T13685] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 938.758405][T13685] 81707 total pagecache pages [ 938.803585][T13685] 0 pages in swap cache [ 938.848599][T13685] Free swap = 124996kB [ 938.893663][T13685] Total swap = 124996kB [ 938.934573][T13685] 2097051 pages RAM [ 938.978811][T13685] 0 pages HighMem/MovableOnly [ 939.007018][T13685] 428518 pages reserved [ 939.016420][T13685] 0 pages cma reserved [ 939.121558][ T5874] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 939.192178][ T5825] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 939.332351][ T5874] usb 6-1: device descriptor read/64, error -71 [ 939.581884][ T5874] usb usb6-port1: attempt power cycle [ 941.920927][T13763] fuse: Bad value for 'group_id' [ 941.950961][T13763] fuse: Bad value for 'group_id' [ 945.016860][T13789] netlink: 'syz.4.2175': attribute type 10 has an invalid length. [ 945.613543][T13795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2176'. [ 945.650779][T13795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2176'. [ 945.716372][T13789] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 946.030316][T13802] netlink: 'syz.4.2179': attribute type 10 has an invalid length. [ 947.026540][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2181'. [ 948.295168][T13831] netlink: 1296 bytes leftover after parsing attributes in process `syz.0.2188'. [ 948.304413][T13831] openvswitch: netlink: Flow key attr not present in new flow. [ 949.739372][T13841] openvswitch: netlink: Flow actions attr not present in new flow. [ 950.877742][T13847] +: renamed from syzkaller0 [ 951.415257][T13860] vivid-001: disconnect [ 951.439542][T13860] vivid-001: reconnect [ 952.167924][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2201'. [ 952.790616][T13877] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2202'. [ 953.867266][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2204'. [ 953.970663][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2204'. [ 955.211033][T13904] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2208'. [ 955.220258][T13904] openvswitch: netlink: Flow actions attr not present in new flow. [ 956.438304][ T29] audit: type=1400 audit(1737939087.652:361): avc: denied { create } for pid=13911 comm="syz.5.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 957.415873][ T29] audit: type=1400 audit(1737939087.652:362): avc: denied { bind } for pid=13911 comm="syz.5.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 964.234073][ T5904] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 964.665318][T13970] tmpfs: Bad value for 'mpol' [ 965.862860][ T5904] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 965.871256][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.892311][ T5904] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 965.930151][ T5904] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 965.977599][ T5904] usb 1-1: Manufacturer: syz [ 966.021106][ T5904] usb 1-1: config 0 descriptor?? [ 967.071069][ T5904] rc_core: IR keymap rc-hauppauge not found [ 967.082301][ T5904] Registered IR keymap rc-empty [ 967.100006][ T5904] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 967.111727][ T5904] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input18 [ 967.138006][ T5904] usb 1-1: USB disconnect, device number 43 [ 968.066276][T14002] tmpfs: Bad value for 'mpol' [ 968.589259][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'. [ 968.841609][ T2007] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 968.841710][ T5822] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 969.011776][ T2007] usb 3-1: Using ep0 maxpacket: 8 [ 969.023043][ T2007] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 969.041542][ T2007] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 969.061480][ T2007] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 969.081937][ T2007] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 969.109938][ T2007] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 969.149157][ T2007] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 969.179548][ T2007] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.205324][ T5822] usb 6-1: device descriptor read/64, error -71 [ 970.112150][ T2007] usb 3-1: GET_CAPABILITIES returned 0 [ 970.117682][ T2007] usbtmc 3-1:16.0: can't read capabilities [ 970.284421][ T5822] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 970.413439][ T29] audit: type=1400 audit(1737939101.832:363): avc: denied { write } for pid=14006 comm="syz.2.2239" name="usbtmc0" dev="devtmpfs" ino=3262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 971.778689][T14041] netlink: 'syz.4.2250': attribute type 10 has an invalid length. [ 971.781917][T14042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2247'. [ 973.264461][T14052] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.2253'. [ 973.273987][T14052] openvswitch: netlink: Flow actions attr not present in new flow. [ 975.532673][T14007] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 975.551649][T14081] netlink: 'syz.5.2262': attribute type 32 has an invalid length. [ 975.596401][ T5822] usb 3-1: USB disconnect, device number 26 [ 976.687242][ T29] audit: type=1400 audit(1737939108.112:364): avc: denied { ioctl } for pid=14085 comm="syz.2.2264" path="socket:[40041]" dev="sockfs" ino=40041 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 977.280189][T14094] fuse: Unknown parameter 'grou00000000000000000000' [ 977.526322][T14096] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.2267'. [ 977.536950][T14096] openvswitch: netlink: Flow actions attr not present in new flow. [ 981.718762][T14128] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2274'. [ 982.071156][T14133] fuse: Unknown parameter 'grou00000000000000000000' [ 983.212176][T14142] fuse: Unknown parameter 'group_i00000000000000000000' [ 983.222365][T14143] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2279'. [ 983.510370][T14148] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 983.878017][ T5834] Bluetooth: hci1: sending frame failed (-49) [ 983.900619][ T5825] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 986.285686][T14177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'. [ 986.785382][T14179] fuse: Unknown parameter 'grou00000000000000000000' [ 987.283997][ T5822] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 987.311306][T14189] fuse: Unknown parameter 'group_i00000000000000000000' [ 987.711495][ T5822] usb 4-1: Using ep0 maxpacket: 8 [ 987.720647][ T5822] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 987.735265][ T5822] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 987.750295][ T5822] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 987.765392][ T5822] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 987.928106][ T5822] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 988.511494][ T5822] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 988.531782][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.760380][ T5822] usb 4-1: GET_CAPABILITIES returned 0 [ 988.839023][ T5822] usbtmc 4-1:16.0: can't read capabilities [ 989.850117][T14209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2300'. [ 990.941039][T14216] trusted_key: encrypted_key: insufficient parameters specified [ 991.072997][T14216] +: renamed from syzkaller0 [ 991.848095][T14221] fuse: Unknown parameter 'group_i00000000000000000000' [ 992.756659][T14236] openvswitch: netlink: Flow actions attr not present in new flow. [ 993.363348][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.369661][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.397648][T14254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2313'. [ 994.705979][T14185] usbtmc 4-1:16.0: usb_control_msg returned -110 [ 994.808826][ T2007] usb 4-1: USB disconnect, device number 36 [ 994.904939][T14264] fuse: Unknown parameter 'group_i00000000000000000000' [ 997.792587][T14293] vivid-001: disconnect [ 997.810923][T14291] vivid-001: reconnect [ 999.293661][T14305] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2329'. [ 1001.709438][ T29] audit: type=1400 audit(1737939132.912:365): avc: denied { read write } for pid=14323 comm="syz.2.2334" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1001.732987][ C0] vkms_vblank_simulate: vblank timer overrun [ 1002.400506][ T29] audit: type=1400 audit(1737939132.912:366): avc: denied { open } for pid=14323 comm="syz.2.2334" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1004.637821][T14354] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2342'. [ 1005.013035][T14362] netlink: 'syz.2.2346': attribute type 10 has an invalid length. [ 1009.557394][ T25] kworker/1:0 (25) used greatest stack depth: 21264 bytes left [ 1009.767190][T14400] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2356'. [ 1011.261904][ T5904] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1011.411948][T14421] fuse: Bad value for 'user_id' [ 1011.416842][T14421] fuse: Bad value for 'user_id' [ 1011.521681][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 1011.533304][ T5904] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1011.551599][ T5904] usb 4-1: config 0 has no interface number 0 [ 1011.637654][ T5904] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1012.341586][ T5822] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1012.545610][ T5904] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 127, changing to 10 [ 1012.571470][ T5904] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 49430, setting to 1024 [ 1013.536860][ T5904] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1013.548693][ T5904] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1013.558615][ T5904] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1013.571700][ T5904] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1014.541020][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.551167][ T5904] usb 4-1: config 0 descriptor?? [ 1014.558257][ T5904] usb 4-1: can't set config #0, error -71 [ 1014.565715][ T5904] usb 4-1: USB disconnect, device number 37 [ 1015.179594][ T5822] usb 3-1: device not accepting address 27, error -71 [ 1015.224812][T14443] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2369'. [ 1016.687909][ T5904] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1016.911853][ T5904] usb 5-1: device descriptor read/64, error -71 [ 1017.003943][ T29] audit: type=1400 audit(1737939148.422:367): avc: denied { bind } for pid=14457 comm="syz.0.2375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1017.877026][T14469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2377'. [ 1018.821581][ T5904] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1023.370552][T14509] netlink: 'syz.0.2386': attribute type 4 has an invalid length. [ 1027.062225][T14529] trusted_key: encrypted_key: insufficient parameters specified [ 1027.540522][ T5904] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1027.963983][ T5904] usb 6-1: device descriptor read/64, error -71 [ 1028.221564][ T5904] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1028.361539][ T5904] usb 6-1: device descriptor read/64, error -71 [ 1028.702184][ T5904] usb usb6-port1: attempt power cycle [ 1029.681587][ T5904] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1031.341568][ T5904] usb 6-1: device descriptor read/8, error -71 [ 1031.638356][ T51] libceph: connect (1)[c::]:6789 error -101 [ 1031.691259][ T29] audit: type=1400 audit(1737939163.112:368): avc: denied { setopt } for pid=14560 comm="syz.3.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1031.720157][ T51] libceph: mon0 (1)[c::]:6789 connect error [ 1031.874128][T14581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2407'. [ 1032.181821][T14564] ceph: No mds server is up or the cluster is laggy [ 1032.209987][ T51] libceph: connect (1)[c::]:6789 error -101 [ 1032.219300][ T51] libceph: mon0 (1)[c::]:6789 connect error [ 1033.341645][ T5872] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1033.548206][ T5872] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1034.241683][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.249722][ T5872] usb 3-1: Product: syz [ 1034.333627][ T5872] usb 3-1: Manufacturer: syz [ 1034.338575][ T5872] usb 3-1: SerialNumber: syz [ 1034.373987][ T5872] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1034.398897][ T5904] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1035.006660][T14585] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 1035.444115][T14585] input: syz1 as /devices/virtual/input/input19 [ 1035.511845][ T5904] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1035.525536][ T51] usb 3-1: USB disconnect, device number 29 [ 1035.550213][ T5904] ath9k_htc: Failed to initialize the device [ 1035.574547][ T51] usb 3-1: ath9k_htc: USB layer deinitialized [ 1037.270469][T14619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1041.293437][T14654] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2427'. [ 1043.411515][ T29] audit: type=1400 audit(1737939174.782:369): avc: denied { accept } for pid=14670 comm="syz.0.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1045.391829][ T51] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1045.775776][T14704] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2442'. [ 1045.821627][ T51] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1045.831966][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.840028][ T51] usb 5-1: Product: syz [ 1045.844271][ T51] usb 5-1: Manufacturer: syz [ 1045.848881][ T51] usb 5-1: SerialNumber: syz [ 1045.857476][ T51] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1045.877884][ T5822] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1047.431634][ T5822] usb 5-1: Service connection timeout for: 256 [ 1047.438974][ T5822] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1047.466019][ T5822] ath9k_htc: Failed to initialize the device [ 1047.475541][ T5822] usb 5-1: ath9k_htc: USB layer deinitialized [ 1047.711851][ T5904] usb 5-1: USB disconnect, device number 50 [ 1049.425761][T14723] +: renamed from syzkaller0 [ 1049.764287][T14747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2456'. [ 1054.473299][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.479620][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.151628][ T5872] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1056.441640][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 1056.468962][ T5872] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1056.634137][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.921513][ T5872] usb 1-1: Product: syz [ 1056.925737][ T5872] usb 1-1: Manufacturer: syz [ 1056.930372][ T5872] usb 1-1: SerialNumber: syz [ 1056.954956][ T5872] usb 1-1: config 0 descriptor?? [ 1057.216353][ T5872] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1058.594034][T14832] overlayfs: missing 'lowerdir' [ 1058.607400][T14834] fuse: Bad value for 'fd' [ 1059.588823][ T5872] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1059.609280][ T5872] usb 1-1: USB disconnect, device number 44 [ 1059.971380][T14846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2482'. [ 1061.059352][T14855] netlink: 'syz.2.2488': attribute type 9 has an invalid length. [ 1061.534022][T14856] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 1062.196807][T14856] +: renamed from syzkaller0 [ 1062.238869][T14871] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1062.264540][T14871] cramfs: wrong magic [ 1065.492509][ T51] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1066.641545][ T51] usb 1-1: device descriptor read/64, error -71 [ 1067.182893][ T51] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1067.331562][ T51] usb 1-1: device descriptor read/64, error -71 [ 1067.472140][ T51] usb usb1-port1: attempt power cycle [ 1067.634611][T14943] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2504'. [ 1067.814069][T14953] openvswitch: netlink: Flow actions attr not present in new flow. [ 1068.001701][ T51] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1068.263169][ T51] usb 1-1: device descriptor read/8, error -71 [ 1071.356704][T14991] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2513'. [ 1073.361930][T15018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2520'. [ 1074.693125][T15033] fuse: Invalid rootmode [ 1075.302426][T15038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2524'. [ 1076.752878][ T5904] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1077.118620][ T5904] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1077.138088][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.147647][ T5904] usb 4-1: Product: syz [ 1077.154900][ T5904] usb 4-1: Manufacturer: syz [ 1077.161110][ T5904] usb 4-1: SerialNumber: syz [ 1077.179890][ T5904] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1077.411181][ T5872] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1078.071806][T15043] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 1078.641152][T15043] input: syz1 as /devices/virtual/input/input20 [ 1078.694145][ T51] usb 4-1: USB disconnect, device number 38 [ 1078.878147][ T5872] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1078.888390][ T5872] ath9k_htc: Failed to initialize the device [ 1079.036608][ T51] usb 4-1: ath9k_htc: USB layer deinitialized [ 1080.199676][T15085] fuse: Bad value for 'rootmode' [ 1080.225501][T15087] : renamed from bond0 (while UP) [ 1080.228175][ T29] audit: type=1400 audit(1737939211.652:370): avc: denied { ioctl } for pid=15086 comm="syz.5.2538" path="socket:[43361]" dev="sockfs" ino=43361 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1080.422603][T15091] fuse: Invalid rootmode [ 1080.713319][T15101] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2543'. [ 1085.241202][T15133] fuse: Unknown parameter 'use00000000000000000000' [ 1085.590835][T15135] netlink: 'syz.5.2550': attribute type 10 has an invalid length. [ 1085.610310][T15135] : (slave wlan1): Enslaving as an active interface with an up link [ 1088.578592][T15174] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2558'. [ 1088.938324][T15176] fuse: Bad value for 'rootmode' [ 1091.543790][T15193] fuse: Unknown parameter 'use00000000000000000000' [ 1095.110969][ T3516] Bluetooth: hci1: Frame reassembly failed (-84) [ 1097.122188][ T5825] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1097.648500][T15262] netlink: 'syz.4.2583': attribute type 4 has an invalid length. [ 1101.620955][T15291] syzkaller0: entered promiscuous mode [ 1101.628029][T15291] syzkaller0: entered allmulticast mode [ 1101.640434][ T71] syzkaller0: tun_net_xmit 48 [ 1101.655294][ T29] audit: type=1400 audit(1737939233.082:371): avc: denied { relabelfrom } for pid=15290 comm="syz.5.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1101.677347][ T51] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1101.693732][T15291] syzkaller0: tun_net_xmit 200 [ 1101.707599][T15291] syzkaller0: create flow: hash 3118691018 index 1 [ 1101.715609][ T29] audit: type=1400 audit(1737939233.112:372): avc: denied { relabelto } for pid=15290 comm="syz.5.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1101.778426][T15290] syzkaller0: delete flow: hash 3118691018 index 1 [ 1101.872729][ T51] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1101.872783][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.875260][ T51] usb 4-1: config 0 descriptor?? [ 1101.932538][T10868] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1102.103096][T10868] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1102.113469][T10868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.134219][T10868] usb 3-1: config 0 descriptor?? [ 1102.147973][T10868] cp210x 3-1:0.0: cp210x converter detected [ 1102.315771][ T51] usb 4-1: Cannot read MAC address [ 1102.321794][ T51] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1102.345963][ T51] usb 4-1: USB disconnect, device number 39 [ 1102.569088][T10868] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 1102.582013][T10868] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1102.601615][T10868] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1102.629199][T10868] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1102.647071][T10868] usb 3-1: USB disconnect, device number 30 [ 1102.661992][T10868] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1102.679124][T10868] cp210x 3-1:0.0: device disconnected [ 1102.928242][T15320] netlink: 'syz.4.2603': attribute type 4 has an invalid length. [ 1103.331528][ T29] audit: type=1400 audit(1737939234.752:373): avc: denied { read } for pid=15328 comm="syz.3.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1103.388833][ T29] audit: type=1400 audit(1737939234.762:374): avc: denied { bind } for pid=15330 comm="syz.2.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1103.428649][ T29] audit: type=1400 audit(1737939234.762:375): avc: denied { connect } for pid=15330 comm="syz.2.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1103.448111][ C0] vkms_vblank_simulate: vblank timer overrun [ 1103.472107][ T29] audit: type=1400 audit(1737939234.812:376): avc: denied { setopt } for pid=15330 comm="syz.2.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1103.758725][ T29] audit: type=1400 audit(1737939235.192:377): avc: denied { map } for pid=15334 comm="syz.0.2610" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1103.782869][ C0] vkms_vblank_simulate: vblank timer overrun [ 1104.111592][T10868] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1104.287557][T10868] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 122, changing to 7 [ 1104.309157][T15340] pim6reg1: entered promiscuous mode [ 1104.316524][T10868] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17352, setting to 1024 [ 1104.320291][T15340] pim6reg1: entered allmulticast mode [ 1104.348975][T10868] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1104.368412][T10868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.388807][T10868] usb 4-1: Product: syz [ 1104.397026][T10868] usb 4-1: Manufacturer: syz [ 1104.437184][T10868] usb 4-1: SerialNumber: syz [ 1104.460676][ T29] audit: type=1400 audit(1737939235.882:378): avc: denied { append } for pid=15346 comm="syz.2.2614" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1104.651117][T15357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2619'. [ 1104.806515][T15364] netlink: 356 bytes leftover after parsing attributes in process `syz.0.2622'. [ 1104.840608][ T29] audit: type=1400 audit(1737939236.262:379): avc: denied { name_bind } for pid=15366 comm="syz.4.2624" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1104.978652][T15374] wg1: entered promiscuous mode [ 1105.341689][ T51] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1105.458417][T15392] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2634'. [ 1105.472363][T15392] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2634'. [ 1105.481567][T10868] cdc_ncm 4-1:1.0: bind() failure [ 1105.489065][T10868] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1105.512948][T10868] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1105.521754][ T51] usb 6-1: Using ep0 maxpacket: 32 [ 1105.528739][T10868] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 1105.537410][ T51] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1105.545557][ T5874] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1105.548331][ T51] usb 6-1: config 0 has no interface number 0 [ 1105.562959][T10868] usb 4-1: USB disconnect, device number 40 [ 1105.572339][ T51] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1105.592452][ T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.600458][ T51] usb 6-1: Product: syz [ 1105.612501][ T51] usb 6-1: Manufacturer: syz [ 1105.618045][ T51] usb 6-1: SerialNumber: syz [ 1105.634089][ T51] usb 6-1: config 0 descriptor?? [ 1105.641210][ T51] smsc95xx v2.0.0 [ 1105.714803][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1105.730027][ T29] audit: type=1400 audit(1737939237.162:380): avc: denied { connect } for pid=15395 comm="syz.2.2636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1105.732697][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1105.766636][ T5874] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1105.780837][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.826772][ T5874] usb 5-1: config 0 descriptor?? [ 1105.847532][ T5874] hub 5-1:0.0: USB hub found [ 1106.049078][ T5874] hub 5-1:0.0: 1 port detected [ 1106.413908][T15430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2650'. [ 1106.447351][ T51] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1106.464564][ T51] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1106.472258][ T5874] usb 5-1: USB disconnect, device number 51 [ 1106.482396][ T51] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1106.499697][ T51] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1106.520576][ T51] usb 6-1: USB disconnect, device number 19 [ 1106.551825][ T5871] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1106.721630][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 1106.729100][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.740233][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.750021][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1106.764260][ T5871] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1106.773339][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.787938][ T5871] usb 4-1: config 0 descriptor?? [ 1107.252162][ T5871] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0013/input/input21 [ 1107.327168][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1107.327183][ T29] audit: type=1400 audit(1737939238.752:384): avc: denied { shutdown } for pid=15456 comm="syz.5.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1107.364194][ T5871] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0013/input/input22 [ 1107.431126][ T5871] kye 0003:0458:5011.0013: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 1107.838036][T15481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2672'. [ 1108.051535][ T5874] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1108.244290][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.268886][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.289157][ T5874] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 1108.304950][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.322103][ T5874] usb 3-1: config 0 descriptor?? [ 1108.323075][ T5871] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1108.336956][ C1] kye 0003:0458:5011.0013: usb_submit_urb(ctrl) failed: -1 [ 1108.505133][ T5871] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.521563][ T5871] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1108.542933][ T5871] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1108.560140][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1108.571870][ T5871] usb 5-1: SerialNumber: syz [ 1108.737352][ T5874] usbhid 3-1:0.0: can't add hid device: -71 [ 1108.751560][ T5874] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1108.783863][ T5874] usb 3-1: USB disconnect, device number 31 [ 1108.805284][ T5871] usb 5-1: 0:2 : does not exist [ 1108.823800][ T5871] usb 5-1: unit 255 not found! [ 1108.876330][ T5871] usb 5-1: USB disconnect, device number 52 [ 1109.112502][T15019] udevd[15019]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1109.149976][ T5872] usb 4-1: USB disconnect, device number 41 [ 1109.263290][ T29] audit: type=1400 audit(1737939240.692:385): avc: denied { connect } for pid=15538 comm="syz.5.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1109.340097][ T29] audit: type=1400 audit(1737939240.712:386): avc: denied { setopt } for pid=15538 comm="syz.5.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1109.491481][T15549] ======================================================= [ 1109.491481][T15549] WARNING: The mand mount option has been deprecated and [ 1109.491481][T15549] and is ignored by this kernel. Remove the mand [ 1109.491481][T15549] option from the mount to silence this warning. [ 1109.491481][T15549] ======================================================= [ 1109.526355][ C0] vkms_vblank_simulate: vblank timer overrun [ 1109.574191][T15553] vlan2: entered promiscuous mode [ 1109.579273][T15553] team0: entered promiscuous mode [ 1109.584892][T15553] team_slave_0: entered promiscuous mode [ 1109.590743][T15553] team_slave_1: entered promiscuous mode [ 1109.599123][T15553] vlan2: entered allmulticast mode [ 1109.604405][T15553] team0: entered allmulticast mode [ 1109.609729][T15553] team_slave_0: entered allmulticast mode [ 1109.615846][T15553] team_slave_1: entered allmulticast mode [ 1110.954660][ T29] audit: type=1326 audit(1737939242.382:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.4.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5adb8cd29 code=0x7fc00000 [ 1111.021034][ T29] audit: type=1326 audit(1737939242.382:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.4.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fa5adb8cd29 code=0x7fc00000 [ 1111.081537][ T29] audit: type=1326 audit(1737939242.402:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.4.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5adb8cd29 code=0x7fc00000 [ 1111.123995][T15598] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2725'. [ 1111.151717][T15598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2725'. [ 1111.165237][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1111.182171][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1111.190366][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1111.207749][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1111.216951][ T5825] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1111.224839][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1111.351782][ T5872] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1111.453761][T15615] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2731'. [ 1111.514750][ T5872] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1111.541608][ T5872] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1111.568090][ T5872] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1111.589531][T15600] chnl_net:caif_netlink_parms(): no params data found [ 1111.611523][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.650737][T15599] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1111.668990][ T5872] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1111.773280][T15600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.815572][ T29] audit: type=1400 audit(1737939243.242:390): avc: denied { write } for pid=15632 comm="syz.0.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1111.830705][T15600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.858689][T15600] bridge_slave_0: entered allmulticast mode [ 1111.869240][ T5872] usb 3-1: USB disconnect, device number 32 [ 1111.877628][T15600] bridge_slave_0: entered promiscuous mode [ 1111.899540][T15600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.908343][ T29] audit: type=1400 audit(1737939243.332:391): avc: denied { ioctl } for pid=15634 comm="syz.4.2738" path="socket:[45614]" dev="sockfs" ino=45614 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1111.910736][T15600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.940787][T15600] bridge_slave_1: entered allmulticast mode [ 1111.970258][T15600] bridge_slave_1: entered promiscuous mode [ 1112.234191][T15600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.253750][T15600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1112.420519][T15600] team0: Port device team_slave_0 added [ 1112.444322][T15600] team0: Port device team_slave_1 added [ 1112.527807][T15600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1112.547179][T15600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1112.591023][T15600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1112.632614][T15600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1112.651823][T15600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1112.708754][T15600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.724305][ T29] audit: type=1326 audit(1737939244.152:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15642 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5adb8cd29 code=0x7fc00000 [ 1112.802530][ T29] audit: type=1326 audit(1737939244.152:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15642 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa5adb8cd29 code=0x7fc00000 [ 1112.827411][ T29] audit: type=1326 audit(1737939244.152:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15642 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5adb8cd29 code=0x7fc00000 [ 1112.858308][ T29] audit: type=1326 audit(1737939244.152:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15642 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5adb8cd29 code=0x7fc00000 [ 1112.890730][ T29] audit: type=1326 audit(1737939244.152:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15642 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5adb8cd29 code=0x7fc00000 [ 1112.918374][ T29] audit: type=1326 audit(1737939244.152:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15642 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5adb8cd29 code=0x7fc00000 [ 1112.954483][T15600] hsr_slave_0: entered promiscuous mode [ 1112.960920][T15600] hsr_slave_1: entered promiscuous mode [ 1112.975828][ T29] audit: type=1326 audit(1737939244.152:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15642 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5adb8cd29 code=0x7fc00000 [ 1112.992335][T15600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1113.002129][ T29] audit: type=1326 audit(1737939244.152:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15642 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5adb8cd29 code=0x7fc00000 [ 1113.044229][T15600] Cannot create hsr debugfs directory [ 1113.103006][ T29] audit: type=1326 audit(1737939244.152:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15642 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5adb8cd29 code=0x7fc00000 [ 1113.148231][T15655] ptrace attach of "./syz-executor exec"[15656] was attempted by "./syz-executor exec"[15655] [ 1113.158695][ T29] audit: type=1326 audit(1737939244.152:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15642 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5adb8cd29 code=0x7fc00000 [ 1113.271606][ T5825] Bluetooth: hci0: command tx timeout [ 1113.326761][T15600] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1113.341636][T15600] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1113.366729][T15600] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1113.399051][T15600] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1113.566214][T15600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1113.612766][T15600] 8021q: adding VLAN 0 to HW filter on device team0 [ 1113.641375][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.648537][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.687622][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.694793][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.826782][T15677] UHID_CREATE from different security context by process 1122 (syz.5.2755), this is not allowed. [ 1113.978904][T15600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1114.263220][T15600] veth0_vlan: entered promiscuous mode [ 1114.275062][T15600] veth1_vlan: entered promiscuous mode [ 1114.303643][T15600] veth0_macvtap: entered promiscuous mode [ 1114.316614][T15600] veth1_macvtap: entered promiscuous mode [ 1114.335555][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.347509][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.351667][T10868] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1114.360895][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.382167][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.397915][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.410028][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.420263][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.430911][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.442019][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.453546][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.463972][ T5874] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1114.501662][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.501677][T10868] usb 6-1: device descriptor read/64, error -71 [ 1114.528809][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.540436][T15600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.594660][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.620151][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.630615][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.646462][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.657520][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.668660][ T5874] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1114.677907][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.695571][ T5874] usb 5-1: config 0 descriptor?? [ 1114.700702][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.710905][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.725436][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.735435][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.746880][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.761730][T10868] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1114.768818][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.781677][ T5904] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1114.800402][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.822299][T15600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.835419][T15600] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.845159][T15600] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.854733][T15600] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.884994][T15700] ------------[ cut here ]------------ [ 1114.890902][T15700] memcpy: detected field-spanning write (size 8) of single field "_Generic(info, const struct ip_tunnel_info * : ((const void *)((info) + 1)), struct ip_tunnel_info * : ((void *)((info) + 1)) )" at ./include/net/ip_tunnels.h:662 (size 0) [ 1114.891557][T15600] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.914318][T15700] WARNING: CPU: 1 PID: 15700 at ./include/net/ip_tunnels.h:662 geneve_udp_encap_recv+0x2498/0x2b90 [ 1114.933384][T15700] Modules linked in: [ 1114.937306][T15700] CPU: 1 UID: 0 PID: 15700 Comm: syz.2.2762 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 1114.947774][T15700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1114.957896][T15700] RIP: 0010:geneve_udp_encap_recv+0x2498/0x2b90 [ 1114.963231][ T5904] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.964185][T15700] Code: 31 e8 ff ff e8 49 77 45 fb c6 05 8c 8e d6 09 01 90 31 c9 48 c7 c2 20 1e 16 8c 4c 89 e6 48 c7 c7 00 1f 16 8c e8 89 ce 05 fb 90 <0f> 0b 90 90 e9 5a ec ff ff e8 1a 77 45 fb e8 f5 b5 c5 02 31 ff 41 [ 1114.974588][ T5904] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1114.994065][T15700] RSP: 0018:ffffc900041bf450 EFLAGS: 00010286 [ 1114.994092][T15700] RAX: 0000000000000000 RBX: ffff888058bb8062 RCX: ffffc9000d12a000 [ 1114.994105][T15700] RDX: 0000000000080000 RSI: ffffffff817a10b6 RDI: 0000000000000001 [ 1114.994117][T15700] RBP: ffffc900041bf570 R08: 0000000000000001 R09: 0000000000000000 [ 1114.994129][T15700] R10: 0000000000000000 R11: 0000000000000006 R12: 0000000000000008 [ 1114.994141][T15700] R13: ffff888079cfb800 R14: 0000000000000000 R15: ffff888021bab640 [ 1114.994153][T15700] FS: 00007f34c4ac16c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1114.994173][T15700] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1114.994187][T15700] CR2: 0000001b2f41fffc CR3: 0000000028136000 CR4: 00000000003526f0 [ 1114.994199][T15700] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1115.043127][ T5904] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1115.049080][T15700] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1115.049100][T15700] Call Trace: [ 1115.049108][T15700] [ 1115.049117][T15700] ? __warn+0xea/0x3c0 [ 1115.059424][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1115.064646][T15700] ? geneve_udp_encap_recv+0x2498/0x2b90 [ 1115.091603][ T5904] usb 1-1: SerialNumber: syz [ 1115.097632][T15700] ? report_bug+0x3c0/0x580 [ 1115.097671][T15700] ? handle_bug+0x54/0xa0 [ 1115.135158][T15700] ? exc_invalid_op+0x17/0x50 [ 1115.139856][T15700] ? asm_exc_invalid_op+0x1a/0x20 [ 1115.144945][T15700] ? __warn_printk+0x1a6/0x350 [ 1115.149729][T15700] ? geneve_udp_encap_recv+0x2498/0x2b90 [ 1115.155419][T15700] ? __pfx_geneve_udp_encap_recv+0x10/0x10 [ 1115.161241][T15700] ? __skb_checksum_complete+0x1cd/0x3f0 [ 1115.166927][T15700] ? __pfx___skb_checksum_complete+0x10/0x10 [ 1115.172981][T15700] ? __pfx_csum_partial_ext+0x10/0x10 [ 1115.178378][T15700] ? __pfx_csum_block_add_ext+0x10/0x10 [ 1115.183980][T15700] ? __pfx_geneve_udp_encap_recv+0x10/0x10 [ 1115.189823][T15700] udp_queue_rcv_one_skb+0xad5/0x18b0 [ 1115.195337][T15700] udp_queue_rcv_skb+0x198/0xd10 [ 1115.200309][T15700] __udp4_lib_rcv+0x25c4/0x34e0 [ 1115.205250][T15700] ? __pfx___udp4_lib_rcv+0x10/0x10 [ 1115.210486][T15700] ? rcu_is_watching+0x12/0xc0 [ 1115.215324][T15700] ? __pfx_udp_rcv+0x10/0x10 [ 1115.219943][T15700] ip_protocol_deliver_rcu+0x2ff/0x4c0 [ 1115.225487][T15700] ip_local_deliver_finish+0x316/0x570 [ 1115.230980][T15700] ip_local_deliver+0x18e/0x1f0 [ 1115.235907][T15700] ? __pfx_ip_local_deliver+0x10/0x10 [ 1115.241300][T15700] ip_rcv+0x2c3/0x5d0 [ 1115.245357][T15700] ? __pfx_ip_rcv+0x10/0x10 [ 1115.249877][T15700] __netif_receive_skb_one_core+0x199/0x1e0 [ 1115.255847][T15700] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1115.262319][T15700] ? rcu_is_watching+0x12/0xc0 [ 1115.267107][T15700] ? netif_receive_skb+0x109/0x7b0 [ 1115.272380][T15700] __netif_receive_skb+0x1d/0x160 [ 1115.277435][T15700] netif_receive_skb+0x13f/0x7b0 [ 1115.282430][T15700] ? __pfx_netif_receive_skb+0x10/0x10 [ 1115.287916][T15700] ? __pfx___lock_acquire+0x10/0x10 [ 1115.293167][T15700] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1115.299343][T15700] tun_rx_batched.isra.0+0x3eb/0x730 [ 1115.304682][T15700] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 1115.310512][T15700] ? tun_get_user+0x13e6/0x3e50 [ 1115.315677][T15700] ? lock_acquire+0x2f/0xb0 [ 1115.320201][T15700] ? tun_get_user+0x13e6/0x3e50 [ 1115.325110][T15700] tun_get_user+0x2a22/0x3e50 [ 1115.329820][T15700] ? __pfx_tun_get_user+0x10/0x10 [ 1115.334892][T15700] ? find_held_lock+0x2d/0x110 [ 1115.339676][T15700] ? __pfx_lock_release+0x10/0x10 [ 1115.344762][T15700] tun_chr_write_iter+0xdc/0x210 [ 1115.349728][T15700] vfs_write+0x5ae/0x1150 [ 1115.352916][ T5825] Bluetooth: hci0: command tx timeout [ 1115.354091][T15700] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1115.365039][T15700] ? __pfx_vfs_write+0x10/0x10 [ 1115.369827][T15700] ? do_futex+0x123/0x350 [ 1115.374215][T15700] ? __fget_files+0x40/0x3a0 [ 1115.378849][T15700] ksys_write+0x12b/0x250 [ 1115.383237][T15700] ? __pfx_ksys_write+0x10/0x10 [ 1115.388119][T15700] do_syscall_64+0xcd/0x250 [ 1115.392676][T15700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.398590][T15700] RIP: 0033:0x7f34c3b8b7df [ 1115.403047][T15700] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1115.422699][T15700] RSP: 002b:00007f34c4ac1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1115.431129][T15700] RAX: ffffffffffffffda RBX: 00007f34c3da5fa0 RCX: 00007f34c3b8b7df [ 1115.439148][T15700] RDX: 0000000000000070 RSI: 0000000020000240 RDI: 00000000000000c8 [ 1115.447166][T15700] RBP: 00007f34c3c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1115.455182][T15700] R10: 0000000000000070 R11: 0000000000000293 R12: 0000000000000000 [ 1115.463189][T15700] R13: 0000000000000000 R14: 00007f34c3da5fa0 R15: 00007ffde5e59c78 [ 1115.471190][T15700] [ 1115.474252][T15700] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1115.481535][T15700] CPU: 1 UID: 0 PID: 15700 Comm: syz.2.2762 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 1115.491958][T15700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1115.502029][T15700] Call Trace: [ 1115.505311][T15700] [ 1115.508245][T15700] dump_stack_lvl+0x3d/0x1f0 [ 1115.512857][T15700] panic+0x71d/0x800 [ 1115.516764][T15700] ? __pfx_panic+0x10/0x10 [ 1115.521194][T15700] ? show_trace_log_lvl+0x29d/0x3d0 [ 1115.526426][T15700] ? geneve_udp_encap_recv+0x2498/0x2b90 [ 1115.532076][T15700] check_panic_on_warn+0xab/0xb0 [ 1115.537032][T15700] __warn+0xf6/0x3c0 [ 1115.540935][T15700] ? geneve_udp_encap_recv+0x2498/0x2b90 [ 1115.546587][T15700] report_bug+0x3c0/0x580 [ 1115.550935][T15700] handle_bug+0x54/0xa0 [ 1115.555115][T15700] exc_invalid_op+0x17/0x50 [ 1115.559632][T15700] asm_exc_invalid_op+0x1a/0x20 [ 1115.564495][T15700] RIP: 0010:geneve_udp_encap_recv+0x2498/0x2b90 [ 1115.570752][T15700] Code: 31 e8 ff ff e8 49 77 45 fb c6 05 8c 8e d6 09 01 90 31 c9 48 c7 c2 20 1e 16 8c 4c 89 e6 48 c7 c7 00 1f 16 8c e8 89 ce 05 fb 90 <0f> 0b 90 90 e9 5a ec ff ff e8 1a 77 45 fb e8 f5 b5 c5 02 31 ff 41 [ 1115.590404][T15700] RSP: 0018:ffffc900041bf450 EFLAGS: 00010286 [ 1115.596493][T15700] RAX: 0000000000000000 RBX: ffff888058bb8062 RCX: ffffc9000d12a000 [ 1115.604477][T15700] RDX: 0000000000080000 RSI: ffffffff817a10b6 RDI: 0000000000000001 [ 1115.612462][T15700] RBP: ffffc900041bf570 R08: 0000000000000001 R09: 0000000000000000 [ 1115.620445][T15700] R10: 0000000000000000 R11: 0000000000000006 R12: 0000000000000008 [ 1115.628424][T15700] R13: ffff888079cfb800 R14: 0000000000000000 R15: ffff888021bab640 [ 1115.636415][T15700] ? __warn_printk+0x1a6/0x350 [ 1115.641216][T15700] ? __pfx_geneve_udp_encap_recv+0x10/0x10 [ 1115.647146][T15700] ? __skb_checksum_complete+0x1cd/0x3f0 [ 1115.652839][T15700] ? __pfx___skb_checksum_complete+0x10/0x10 [ 1115.658844][T15700] ? __pfx_csum_partial_ext+0x10/0x10 [ 1115.664238][T15700] ? __pfx_csum_block_add_ext+0x10/0x10 [ 1115.669810][T15700] ? __pfx_geneve_udp_encap_recv+0x10/0x10 [ 1115.675634][T15700] udp_queue_rcv_one_skb+0xad5/0x18b0 [ 1115.681034][T15700] udp_queue_rcv_skb+0x198/0xd10 [ 1115.686006][T15700] __udp4_lib_rcv+0x25c4/0x34e0 [ 1115.690887][T15700] ? __pfx___udp4_lib_rcv+0x10/0x10 [ 1115.696108][T15700] ? rcu_is_watching+0x12/0xc0 [ 1115.700883][T15700] ? __pfx_udp_rcv+0x10/0x10 [ 1115.705494][T15700] ip_protocol_deliver_rcu+0x2ff/0x4c0 [ 1115.710981][T15700] ip_local_deliver_finish+0x316/0x570 [ 1115.716461][T15700] ip_local_deliver+0x18e/0x1f0 [ 1115.721321][T15700] ? __pfx_ip_local_deliver+0x10/0x10 [ 1115.726695][T15700] ip_rcv+0x2c3/0x5d0 [ 1115.730681][T15700] ? __pfx_ip_rcv+0x10/0x10 [ 1115.735182][T15700] __netif_receive_skb_one_core+0x199/0x1e0 [ 1115.741080][T15700] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1115.747492][T15700] ? rcu_is_watching+0x12/0xc0 [ 1115.752690][T15700] ? netif_receive_skb+0x109/0x7b0 [ 1115.757818][T15700] __netif_receive_skb+0x1d/0x160 [ 1115.762856][T15700] netif_receive_skb+0x13f/0x7b0 [ 1115.767807][T15700] ? __pfx_netif_receive_skb+0x10/0x10 [ 1115.773283][T15700] ? __pfx___lock_acquire+0x10/0x10 [ 1115.778493][T15700] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1115.784652][T15700] tun_rx_batched.isra.0+0x3eb/0x730 [ 1115.789952][T15700] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 1115.795758][T15700] ? tun_get_user+0x13e6/0x3e50 [ 1115.800601][T15700] ? lock_acquire+0x2f/0xb0 [ 1115.805099][T15700] ? tun_get_user+0x13e6/0x3e50 [ 1115.809948][T15700] tun_get_user+0x2a22/0x3e50 [ 1115.814639][T15700] ? __pfx_tun_get_user+0x10/0x10 [ 1115.819666][T15700] ? find_held_lock+0x2d/0x110 [ 1115.824424][T15700] ? __pfx_lock_release+0x10/0x10 [ 1115.829456][T15700] tun_chr_write_iter+0xdc/0x210 [ 1115.834389][T15700] vfs_write+0x5ae/0x1150 [ 1115.838729][T15700] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1115.844277][T15700] ? __pfx_vfs_write+0x10/0x10 [ 1115.849033][T15700] ? do_futex+0x123/0x350 [ 1115.853356][T15700] ? __fget_files+0x40/0x3a0 [ 1115.857953][T15700] ksys_write+0x12b/0x250 [ 1115.862284][T15700] ? __pfx_ksys_write+0x10/0x10 [ 1115.867142][T15700] do_syscall_64+0xcd/0x250 [ 1115.871646][T15700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.877532][T15700] RIP: 0033:0x7f34c3b8b7df [ 1115.881940][T15700] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1115.901631][T15700] RSP: 002b:00007f34c4ac1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1115.910122][T15700] RAX: ffffffffffffffda RBX: 00007f34c3da5fa0 RCX: 00007f34c3b8b7df [ 1115.918081][T15700] RDX: 0000000000000070 RSI: 0000000020000240 RDI: 00000000000000c8 [ 1115.926041][T15700] RBP: 00007f34c3c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1115.933998][T15700] R10: 0000000000000070 R11: 0000000000000293 R12: 0000000000000000 [ 1115.941960][T15700] R13: 0000000000000000 R14: 00007f34c3da5fa0 R15: 00007ffde5e59c78 [ 1115.949950][T15700] [ 1115.953090][T15700] Kernel Offset: disabled [ 1115.957442][T15700] Rebooting in 86400 seconds..